last executing test programs:

2m19.672625708s ago: executing program 4 (id=269):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000980)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000feffffff00000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc0200000000000000003c000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c00110000000000000000000000ffffac1414aaff0100000000000000000000000000010a010102000000000000000000000000fc0200000000000000000000000000003c000a1b37"], 0xec}}, 0x0)

2m19.345927764s ago: executing program 4 (id=270):
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_ethernet(0x22, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0x2, 0x1, 0x0, @remote, @broadcast}}}}}, 0x0)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x8a)
openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
close(r0)
r7 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000580)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r7, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m12.544246513s ago: executing program 4 (id=280):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000004000085000000060000", @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)='GPL\x00', 0x6, 0xaa, &(0x7f0000000140)=""/170, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x10, 0x4000}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='btrfs_sync_fs\x00', r0, 0x0, 0x8000000000000000}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
utime(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
ftruncate(r5, 0x8001)
r6 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETVERSION(r6, 0x80044944, &(0x7f0000001040))
gettid()
socket$nl_netfilter(0x10, 0x3, 0xc)

2m11.248719953s ago: executing program 4 (id=283):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='btrfs_sync_fs\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
utime(&(0x7f0000000000)='./file0\x00', 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
ftruncate(r3, 0x8001)
r4 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETVERSION(r4, 0x80044944, &(0x7f0000001040))
gettid()
socket$nl_netfilter(0x10, 0x3, 0xc)

2m8.528688504s ago: executing program 4 (id=286):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bde)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setresuid(0x0, 0xee00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x20e)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000500"/19], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ef25687379bc1e6a00"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000000000000000003f0000000800"], 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}}, 0x24000050)

2m6.699375734s ago: executing program 4 (id=290):
syz_open_pts(0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2000002, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2000002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1, 0x0, 0x58}}, {{0x0, 0x0, &(0x7f0000001100), 0x6}}], 0x4, 0xf044000)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r5, 0x103, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040015}, 0x840)

1m49.940349111s ago: executing program 32 (id=290):
syz_open_pts(0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2000002, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2000002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1, 0x0, 0x58}}, {{0x0, 0x0, &(0x7f0000001100), 0x6}}], 0x4, 0xf044000)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r5, 0x103, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040015}, 0x840)

12.713760217s ago: executing program 1 (id=527):
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, <r0=>0x0, <r1=>0x0, <r2=>0x0}, 0x2020) (async)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000000580)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socket$kcm(0x29, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r8 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x4000, 0x1, @dev={0xfe, 0x80, '\x00', 0x45}}}}, 0x108)
socket(0x80000000000000a, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
r10 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x0, 0x0, 0x34b}, &(0x7f00000000c0)=<r11=>0x0, &(0x7f0000000380)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, r9, 0x0, 0x0}) (async)
io_uring_enter(r10, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000029c0)=ANY=[@ANYBLOB="5806000000000000", @ANYRES64=r4, @ANYRES32=0x0, @ANYBLOB="fd55000007000000000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000004000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff0030000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f40000020000000600000000000000070000000000000002000000000000000f00000000000000ffffffffffffffff010000000000000002000000080000006194000000e0000007000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="008000000080ff01000000000100000000000000a8d00000000000000a0000005e9a00000000060000000000000002000000000000005f000000000000b84569f325c16eb2da1dcb0004000000000000000400000001000000000000000000000007000000000000000010000000000000", @ANYBLOB, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0600000005000000000000000000000000000000fcffffffffffffff060000000400000026272e3a262800000200000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000000108000000000000ff0000000000000006000000a2d70000ff7f0000004000007f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f0000000600000000000000070000000000000005000000000000000300000000000000ec5900000000000005000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="060000004a6a00000000000002000000000000004f0500000000000008000000ff0300006e6c3830323131000500000000000000020000000000000002000000000000009f04000000000000ff7f00006500000005000000000000004abe0000000000000707000000000000b304000000000000000000000000000003000000000000000100010000f8ffff06000000004000003eca4c4b", @ANYRES32=0xee00, @ANYRES32=r6], 0x658) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002dc0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000300)={0x50, 0x0, 0x5, {0x7, 0x2b, 0xc7, 0x20101686, 0xfff9, 0x3, 0x8, 0x15, 0x0, 0x0, 0x100, 0x8000}}, &(0x7f0000000380)={0x18, 0xfffffffffffffffe, 0x0, {0x1}}, &(0x7f00000003c0)={0x18, 0x0, 0x0, {0x4}}, &(0x7f0000000400)={0x18, 0x0, 0x8, {0x4}}, &(0x7f0000000440)={0x18, 0xffffffffffffffda, 0x0, {0x761}}, &(0x7f0000000480)={0x28, 0x0, 0x2d55, {{0x8, 0xed4, 0x3, r2}}}, &(0x7f00000004c0)={0x60, 0xffffffffffffffda, 0xfff, {{0x2, 0x318, 0x6, 0xe, 0x2, 0x0, 0x4, 0x95}}}, 0x0, &(0x7f0000000580)={0x12, 0x0, 0x3, {'\xb9\x00'}}, &(0x7f00000005c0)={0x20, 0x0, 0x5, {0x0, 0x2}}, &(0x7f0000000600)={0x78, 0x0, 0x5, {0x1, 0x4, 0x0, {0x6, 0x6, 0x0, 0x2, 0xdf03730800000000, 0x5, 0x2, 0x1, 0xf04a, 0x2000, 0xfffffffb, r0, r1, 0x3, 0x3}}}, &(0x7f0000000680)={0x90, 0x0, 0x9, {0x3, 0x1, 0x100, 0x2, 0x8, 0xf, {0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x921, 0x7fff, 0x6, 0x8000, 0x6, r0, r1, 0xc81, 0x7}}}, &(0x7f0000003240)=ANY=[@ANYBLOB], &(0x7f0000002940)={0x3d0, 0x4dd3856fee913c69, 0xcbe, [{{0x0, 0x3, 0xec, 0x200, 0x1, 0x101, {0x0, 0x4, 0xc86, 0xffff000000000000, 0xc, 0x10000, 0x1ffc0000, 0x7, 0x6, 0x49e2b2b5c0b25dfb, 0x1, r0, r1, 0x9}}, {0x0, 0x3, 0x1, 0x8000, '\x00'}}, {{0x0, 0x2, 0x9, 0x27cc, 0xf8e, 0x6, {0x9, 0xc, 0x9, 0x0, 0x5, 0x3, 0x1, 0x5, 0xfffffffd, 0xc000, 0x4, r0, r6, 0x9}}, {0x1, 0x80, 0xa, 0x9, '}@$^]-^-,)'}}, {{0x4, 0x2, 0x0, 0xffff, 0x6, 0x8, {0x5, 0x3, 0xb, 0x200, 0x4, 0xaa, 0x7, 0x8, 0x7fffffff, 0x2000, 0x1000, r0, r1, 0x8, 0x4}}, {0x5, 0x4f4f04b6, 0x0, 0x3ff}}, {{0x5, 0x0, 0x2, 0x0, 0x80000000, 0x3, {0x6, 0x5, 0x4, 0x8, 0x5, 0x3, 0x47, 0x47f, 0x8, 0xa000, 0x5, r0, r1, 0x2, 0x8}}, {0x5, 0x10001, 0x4, 0xfffffffb, 'GPL\x00'}}, {{0x3, 0x2, 0xfe08, 0x4, 0x120, 0x7, {0x0, 0x4, 0x8, 0x3ff, 0xdb, 0x100000001, 0x4, 0x6, 0x5, 0x1000, 0xffff0821, r0, 0x0, 0xf31, 0x1}}, {0x4, 0x6, 0x5, 0x6, ']\')]@'}}, {{0x2, 0x0, 0x0, 0x10000000000000, 0x682, 0x5, {0x4, 0x8, 0x1000, 0x7ffe, 0x1, 0x1c000000000, 0xa9, 0x7f071428, 0x1e, 0x1000, 0x8001, r0, r1, 0x1, 0x1}}, {0x5, 0x401, 0x4, 0x4, '*%-&'}}]}, &(0x7f0000002f00)={0xa0, 0x0, 0x400, {{0x6, 0x3, 0x4, 0x81, 0xffffffff, 0x9, {0x1, 0x1, 0x3, 0x1, 0x2, 0x6, 0x4, 0x3, 0x1, 0x8000, 0x7, r13, r1, 0x734d, 0x3}}, {0x0, 0x5}}}, &(0x7f0000002fc0)={0x20, 0x0, 0x0, {0x3ff, 0x0, 0x4572, 0x1b95}}, &(0x7f0000003000)={0x130, 0xffffffffffffffda, 0x8, {0x486f, 0x2, 0x0, '\x00', {0x980de3229895d52f, 0x5, 0x4, 0x5, r0, r1, 0xa000, '\x00', 0x1000, 0x7, 0xff, 0x4, {0x9}, {0x7, 0x6}, {0x7f, 0xba}, {0x0, 0x7}, 0x1, 0xfffeffff, 0x1, 0x2}}}})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000640)=0xe8)
mount$nfs4(&(0x7f0000000340)='):$)#\x00', &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x2000, &(0x7f0000000680)={[{}, {'+!+}[-'}, {'^-'}, {'})'}], [{@euid_lt={'euid<', r0}}, {@uid_gt={'uid>', r14}}, {@fowner_lt={'fowner<', r15}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) (async)
syz_usb_connect(0x2, 0x648, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000044c90840242e525dda15010203010902360604000000000904dca702ff47d0080824060000fea12305240005000d240f01080000000000b7000008241c020048501304240208052401010606241a0300011524120100a317a88b045e4f01a607c0ffcb7e392a042402010624060000a305240003000d240f010400000048f107001008241c0008d8000008241c050006050006240704080009050f0108003a0e07090502"], 0x0) (async)
syz_usb_connect$uac1(0x6, 0xd1, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x0, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe}, [@selector_unit={0x5, 0x24, 0x5, 0x1, 0x9}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x3, 0x0, "fd"}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x4, 0x5, "2b6e6107ca6d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0xff, 0x9, "1050", '\r'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xff, 0x2, 0x6, {0x7, 0x25, 0x1, 0x80, 0x73, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6a, 0x2, 0x7f, 0x6, "45a88f"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x80, 0x2, 0x6, 0x1, "1c825d3ad11b"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0xa8, "65cdb2"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x6, 0x5, "f1b449789d26f3"}, @as_header={0x7, 0x24, 0x1, 0xc, 0x4, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x7, 0x8, {0x7, 0x25, 0x1, 0x4, 0x7, 0xbd}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x76, 0x5, 0x5, 0x40, 0x43}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x410}}]}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000025c0))

11.66832792s ago: executing program 1 (id=533):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x40, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18)
write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8004000, 0x7, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x10, 0x5}}, 0x50)
write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xcc, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0}, 0x42)
getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@initdev, <r5=>0x0}, &(0x7f00000002c0)=0x14)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r3, 0x2e, 0x0, 0x160, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r4, r5, 0x25, 0x2, @val=@tcx={@void, @value=r3, @void, @void, r6}}, 0x1c)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0)
r8 = epoll_create1(0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x4)
ppoll(&(0x7f0000000040)=[{}, {r8, 0xbaf03d8f7cf92877}], 0x2, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000340)={0xc0000008})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
syz_emit_ethernet(0xff, &(0x7f0000000600)=ANY=[@ANYBLOB="236a57db82bdc88cc079960b045686060066b711368200167191d3f06a35f284b5a4370adc435856501525ef04fa2b09223c101aac9e5388511b036380d8294b3ef2f893997681b2c0a388337f479ee81452bd40291aa97ce13b56a372851eea7f87897a9090bbabdb54ac521f9a407ac78de63866eed2dc070e3be814503bec2dd385b1f9521b34e601a7c0f181b035100507721196dad8ca52d2780539ccde59c1f97b5df900"/179], 0x0)

11.457462383s ago: executing program 3 (id=535):
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setresuid(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x6}, 0x0, [0x5, 0x5, 0x1000081, 0x7, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x9, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x2, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x6f02, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x8, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x203, 0x3, 0x101, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x171, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ea, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x20000004, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000003, 0x6, 0x9, 0x9, 0x200, 0xb9, 0x897, 0x6, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x8, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x2, 0x0, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x40007, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xffffdff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x9, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0xa, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x3, 0x5, 0xfffffffc, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
sendmsg$nl_route_sched(r3, 0x0, 0x44080)
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'})

9.656408152s ago: executing program 3 (id=537):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40004}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

9.581985546s ago: executing program 1 (id=538):
socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f0000000340)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/151}, {&(0x7f0000000480)=""/225}], 0x0, &(0x7f0000000280)=""/63}, 0x5}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000580)=""/188}, {&(0x7f0000000640)=""/234}, {&(0x7f0000000740)=""/252}, {&(0x7f0000000840)=""/105}, {&(0x7f00000008c0)=""/176}]}, 0xfffffff8}], 0x8096, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10)
listen(r3, 0xda90)
accept4(r3, 0x0, 0x0, 0x0)

9.564167852s ago: executing program 0 (id=539):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10, 0x103)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x23, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={0x4b30, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4b10, 0x3, 0x0, 0x1, [{0x2324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1210, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "19b20485ade3cc1b1b90b81358b26cd127416e4fe73f52c2c43f138f0c312d28cdbc0326de8b2e858f23403b38d5db451f90a95d8d11c46eadfa8a2b55277477a99d0e7fdc1e42c3f4719afe0dda89253f22eb5f7afa448a1eed86b0b7d463c4ffb43cb427cb8e53d477defb652b8b9cb02b65c9016354579aa4cd558a0295bca52d870bf41871c121efa1e044404385067011d7ba0a2152b6351eb4351354ff74efaf1e57c883ef33897a62b7e85e4541f2f1064cb405bfc94df8a344d181083c1096c0b1e3cc5dcd0749c04d2e99265157e718cd45eecd8921a3"}, @NFTA_DATA_VALUE={0x2f, 0x1, "b80c0177aaa5bc322ee4f81e353824eb7cee30209c6f1abde6631f069346ecdc03f7a11a5c20fc52ddafa8"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x37, 0x1, "8ee57ff001b126a0bb861a7c92aa18cf1a32fde36dd35b657f253a8dc1d083cd9bb633d141940f147f51e1d8a69fb367fafb5d"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_DATA={0xf0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "55da09683dcbece3ab8279534e86e90fdd6c24c6bfd469"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x74, 0x1, "8806e5dc5b742c097cfcb8291a2252435ca995ce8ee50e6671f8de60e812556a1e7ea6bbdf4508c7c6042379763b17ef6bedb1a1b8db860597e72faf76b65f65eca23e325dd2d8680f0b6d5ace556e57e3a93e2f1096a01768a604c6bc475fa60dd7ef08ad86b49fbddcdff29d144cad"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x115}, @NFTA_SET_ELEM_KEY_END={0x1008, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}]}, {0x430, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x2d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "4ef9907f43f53151fbb53b7bf257eb4801fe922351531e189b"}, @NFTA_DATA_VALUE={0x2d, 0x1, "76c2972ff2526d8cf178a85ec2729ad349013352021cf33cf47fb0da8e68595ed689194793f177e409"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0x55, 0x1, "dfd12ca18359fb02341828b1afa91fd5e1e8e61177dedaeb541ad7474c45d6998a86ebe5fb525dbaaf71440789259b60f760679e81cbb64c94c06c2fd0e399f9a195d64ff0a0ea41b66c7f038e8b6ca2af"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x2f, 0x1, "9d178e8014987bf238aeddb20e159d0c92991992d27acaaaab3ae74d7e9f483f82053627d507e02cc20abd"}]}, @NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x72, 0x1, "b0c5eecaf7df183f6c09e8fa16e7a11863ba4d28d0ab29af1bf4729ee959defed4461f5ea4b7157b7f3aa6d504d26ed20d202033348a6a8e76fe3bc9f1b2c758cdf0e104ed185cf8adae6a6f2a4750c409027389e64f1f5c2145aff4254607726cc2ae54b4c395846cfdcb1a1e3d"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY_END={0xa0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x23b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x12c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x3e, 0x1, "d7e20039ada22442150627c8a449165f09efacc48e852a08565c917ec6e9705eb363a33980ad5a0c10edc1cee2b56edad01ba429db28790ec6a0"}]}, @NFTA_SET_ELEM_USERDATA={0xaa, 0x6, 0x1, 0x0, "c84fe071fc2ca1e03f56b8887cb819dadb9776b0694d2c99b8f9842f1e4735165738a0e7629be42f99ee4314e91072b343cf3c58d2dbcb4f490cc95bb4515bfc31ace4c31aef4edcb8c95a67f52f74e0105c9d426bcdc9e3b6a60b5daa31056ab3b4bf52ded81c92ae39cb12f0abb3582b1ef8f52873631003852543bbea290de3f8038af90b35bb165ffc153a929f44dfeae7e2773259a45d5b6e7f8cfc8d28bd331386a756"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x98, 0x6, 0x1, 0x0, "ede47ad43afefad9c08d12f78afc8ef56b7095a07884892f2fd95f79998daab98059261732bc692609d580aca4b0cc25d79cc1aa32430af758aba8e9d292ee65d26bbbf24fe20b5a6da33671d498d87e3ffc824fe20fd26e0c3761bc557e2cf2247a8edcd5d40ffe46447af31ecd59bb3eb84d76752cb138af138b37693dba4ece0e6f8ba895cb05ec5198f2b866a3e60766beb2"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0x2a, 0x6, 0x1, 0x0, "81087f5c822507a069c92a55909e21de52e7d0133389470592ee384157ec986cbab7e9b04d7f"}, @NFTA_SET_ELEM_KEY_END={0x20e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x5a, 0x1, "07b14c393aba386a674274c71b98004110ed0cb69227707979ebb6c3a6eacfc7a19a9777806733ac95c05e62c32b0523f5cef4684ffafea6bb19799786edb78affa914efb0878437bff5c18be63b54d479751ae9e0b5"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x4b30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000000)=0xfffffffc, 0x4)

8.962586416s ago: executing program 3 (id=540):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=<r0=>0xffffffffffffffff, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000001000)={0x0, @ax25={0x3, @bcast, 0x3}, @qipcrtr={0x2a, 0x4, 0xfffffffe}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2}, 0x4, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x2, 0x3, 0xa9a})
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x210000, 0x1f1)
preadv(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0xa3, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
read$FUSE(r0, &(0x7f0000001080)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
setresuid(r4, r5, r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
getdents(r7, 0x0, 0x0)
getdents(r7, &(0x7f0000000200)=""/152, 0x98)

8.817735767s ago: executing program 0 (id=541):
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setuid(0xee00)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48)

7.624552426s ago: executing program 0 (id=542):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a900007045daf2f81e20e06000b09007a150b5d"], 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a900007045daf2f81e20e06000b09007a150b5d"], 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x5, 0xe, 0x401, 0x8, "c400523a6f29960fce66e2e7aadce2988b5ec056b7577f87586a324b565ffcbb"})
syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610700477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x1, 0x5, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e8860"}]}}}}}}, 0x0)

6.832464048s ago: executing program 3 (id=544):
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
getresuid(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7794b0ed934a040a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000100))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
capset(0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

6.772690682s ago: executing program 2 (id=545):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x111}, 0x14}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef)

6.118405143s ago: executing program 3 (id=546):
socket$nl_route(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x4004008)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffffffd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x29, 0x7, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x1c}}, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r5, 0xff03, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x84, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x801, 0x0, 0x3, 0x7, 0x6, 0x0, 0x10000}}, 0xe8)

5.532700057s ago: executing program 2 (id=547):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r5 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003002908000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40)

5.368740689s ago: executing program 3 (id=548):
r0 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
ftruncate(r0, 0x3f)
sendfile(r0, r0, 0x0, 0x3)
r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0x8aa000)
ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000100)={0x980900, 0x8})
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x0, "fe79ca3351f25129c1ca0c4b310f855c55392fde21c7d98aef39b24985c9c778", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000800)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001300)=[{}]})
syz_open_procfs(0x0, &(0x7f0000000040)='net/llc/core\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)

4.437647233s ago: executing program 1 (id=550):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x7ffffcff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9})

4.387606251s ago: executing program 0 (id=551):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private}}}})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x100000000000041, 0x2)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000040)={0xffff, 0x5, 0x4, 0x6, 0x7ff, 0x3, 0x5, 0x5, r10}, 0x20)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000240)={r10, 0x76, "9de8995132fe4224d7b0512cab8eed3b2144c82e1f7626e2f4173fcc9736eeb9f2c6c6a6ab2dad96f7de6844db32bacac04e226f499e24b96d7d56c5f3080d559cf626aedf65519d549a04d35bd7779ef8cab58f2dc58e554bd96a7340d4ab32fb819a0ced207cd2347f7f5d1702c80fcad2f5b7d1ac"}, &(0x7f0000000180)=0x7e)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

4.37276541s ago: executing program 5 (id=552):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newsa={0x168, 0x10, 0x1, 0x70bd29, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x1a0c, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x38}}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x168}}, 0x0)

4.112236846s ago: executing program 2 (id=553):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x50, 0x55, 0x48, 0x1}, {0x28, 0x4, 0x8, 0xfffff024}]}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000022c0), 0xffffffffffffffff)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r8, &(0x7f0000000540), &(0x7f0000000a40)=@udp6, 0x2}, 0x20)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x80, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100040004000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94)

4.024407458s ago: executing program 1 (id=554):
syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000608240805040004960d240601010302000100060006092403050503060581092403060103"], 0x0)
syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000608240805040004960d240601010302000100060006092403050503060581092403060103"], 0x0) (async)

4.023849645s ago: executing program 5 (id=555):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x11}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0xa4}}, 0x0)

3.732774622s ago: executing program 5 (id=556):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000980)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000feffffff00000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc02000000000000000000000000000037000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c00110000000000000000000000ffffac1414aaff0100000000000000000000000000010a010102000000000000000000000000fc0200000000000000000000000000003c000a1b37"], 0xec}}, 0x0)

2.848506619s ago: executing program 2 (id=557):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x111}, 0x14}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef)

2.760894029s ago: executing program 5 (id=558):
socket$nl_route(0x10, 0x3, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x4004008)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffffffd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x29, 0x7, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x1c}}, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r5, 0xff03, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x84, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x801, 0x0, 0x3, 0x7, 0x6, 0x0, 0x10000}}, 0xe8)

2.722688402s ago: executing program 0 (id=559):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x344d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x20000}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x20000000)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, 0x0)
ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0x15, 0x0, 0x0)

1.492593779s ago: executing program 0 (id=560):
socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f0000000340)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/151}, {&(0x7f0000000480)=""/225}], 0x0, &(0x7f0000000280)=""/63}, 0x5}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000580)=""/188}, {&(0x7f0000000640)=""/234}, {&(0x7f0000000740)=""/252}, {&(0x7f0000000840)=""/105}, {&(0x7f00000008c0)=""/176}]}, 0xfffffff8}], 0x8096, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10)
listen(r3, 0xda90)
accept4(r3, 0x0, 0x0, 0x0)

1.107643534s ago: executing program 2 (id=561):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000006000000010000007f00000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94)

1.019871407s ago: executing program 5 (id=562):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bde)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setresuid(0x0, 0xee00, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x20e)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000500"/19], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ef25687379bc1e6a00"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000000000000000003f0000000800"], 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}}, 0x24000050)

516.497457ms ago: executing program 1 (id=563):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006b40)={0x2020}, 0x2020)
memfd_create(0x0, 0x3)
socket(0x2, 0x3, 0xff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x8004)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000240)={0x0, 0x45888, 0x800, 0x10000, 0x36c}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000007c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x221f, 0x0, 0x23, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x563, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x8001}, 0x8)
r5 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r6, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18)

465.054616ms ago: executing program 2 (id=564):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000bc0))
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x80c0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x400c084)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fstat(r2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}, 0x0, 0x80ffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
dup(r5)
syz_io_uring_setup(0xa39, 0x0, 0x0, 0x0)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)

0s ago: executing program 5 (id=565):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040014}, 0x20084084)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts.
[   88.143750][ T5825] cgroup: Unknown subsys name 'net'
[   88.271397][ T5825] cgroup: Unknown subsys name 'cpuset'
[   88.280907][ T5825] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   90.007978][ T5825] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   92.087687][ T3415] cfg80211: failed to load regulatory.db
[   92.783420][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.784707][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.799626][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.807642][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.807926][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.823239][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.835083][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.835676][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.854461][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.854593][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.871255][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.880727][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.889520][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.896773][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.919524][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.927710][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.943896][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.953516][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.972792][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.981138][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.013643][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   93.024293][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   93.032312][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   93.041191][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   93.070778][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   93.671604][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   93.895920][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   93.906990][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   94.026612][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   94.134877][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   94.152730][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.161147][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.169227][ T5846] bridge_slave_0: entered allmulticast mode
[   94.176429][ T5846] bridge_slave_0: entered promiscuous mode
[   94.250403][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.257863][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.265086][ T5846] bridge_slave_1: entered allmulticast mode
[   94.272644][ T5846] bridge_slave_1: entered promiscuous mode
[   94.330122][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.337974][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.345262][ T5838] bridge_slave_0: entered allmulticast mode
[   94.353151][ T5838] bridge_slave_0: entered promiscuous mode
[   94.410658][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.418043][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.425602][ T5837] bridge_slave_0: entered allmulticast mode
[   94.433486][ T5837] bridge_slave_0: entered promiscuous mode
[   94.448181][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.455823][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.463769][ T5838] bridge_slave_1: entered allmulticast mode
[   94.471127][ T5838] bridge_slave_1: entered promiscuous mode
[   94.481754][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.496403][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.503903][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.511452][ T5837] bridge_slave_1: entered allmulticast mode
[   94.518729][ T5837] bridge_slave_1: entered promiscuous mode
[   94.563221][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.660746][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.675048][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.702521][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.717436][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.740382][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.750177][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.758042][ T5849] bridge_slave_0: entered allmulticast mode
[   94.765300][ T5849] bridge_slave_0: entered promiscuous mode
[   94.786731][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.794114][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.801812][ T5854] bridge_slave_0: entered allmulticast mode
[   94.809018][ T5854] bridge_slave_0: entered promiscuous mode
[   94.833579][ T5846] team0: Port device team_slave_0 added
[   94.840451][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.848303][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.855503][ T5849] bridge_slave_1: entered allmulticast mode
[   94.862954][ T5849] bridge_slave_1: entered promiscuous mode
[   94.898921][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.906222][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.913754][ T5854] bridge_slave_1: entered allmulticast mode
[   94.922132][ T5854] bridge_slave_1: entered promiscuous mode
[   94.948924][ T5847] Bluetooth: hci1: command tx timeout
[   94.955782][ T5838] team0: Port device team_slave_0 added
[   94.965048][ T5846] team0: Port device team_slave_1 added
[   95.000165][ T5837] team0: Port device team_slave_0 added
[   95.011685][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.028165][ T5847] Bluetooth: hci3: command tx timeout
[   95.028445][   T51] Bluetooth: hci0: command tx timeout
[   95.033788][ T5847] Bluetooth: hci2: command tx timeout
[   95.054819][ T5838] team0: Port device team_slave_1 added
[   95.079554][ T5837] team0: Port device team_slave_1 added
[   95.088268][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.107729][ T5847] Bluetooth: hci4: command tx timeout
[   95.129646][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.165811][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.172967][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.200615][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.244176][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.254288][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.262316][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.288741][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.301055][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.308691][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.335779][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.364666][ T5849] team0: Port device team_slave_0 added
[   95.386071][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.393495][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.420012][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.449832][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.456894][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.483132][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.498055][ T5849] team0: Port device team_slave_1 added
[   95.542118][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.549397][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.576807][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.605163][ T5854] team0: Port device team_slave_0 added
[   95.614632][ T5854] team0: Port device team_slave_1 added
[   95.691135][ T5838] hsr_slave_0: entered promiscuous mode
[   95.698351][ T5838] hsr_slave_1: entered promiscuous mode
[   95.716688][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.724223][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.751239][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.778103][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.785200][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.811885][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.855955][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.863247][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.890247][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.902592][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.909652][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.936466][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.961068][ T5846] hsr_slave_0: entered promiscuous mode
[   95.967911][ T5846] hsr_slave_1: entered promiscuous mode
[   95.974089][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.982496][ T5846] Cannot create hsr debugfs directory
[   96.085428][ T5837] hsr_slave_0: entered promiscuous mode
[   96.092239][ T5837] hsr_slave_1: entered promiscuous mode
[   96.098910][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.106506][ T5837] Cannot create hsr debugfs directory
[   96.252536][ T5854] hsr_slave_0: entered promiscuous mode
[   96.259867][ T5854] hsr_slave_1: entered promiscuous mode
[   96.266091][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.273748][ T5854] Cannot create hsr debugfs directory
[   96.332038][ T5849] hsr_slave_0: entered promiscuous mode
[   96.339224][ T5849] hsr_slave_1: entered promiscuous mode
[   96.345468][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.353666][ T5849] Cannot create hsr debugfs directory
[   96.769993][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.812881][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.842678][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.871654][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.955924][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.980271][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   97.006644][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   97.021305][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.042628][ T5847] Bluetooth: hci1: command tx timeout
[   97.107805][ T5847] Bluetooth: hci2: command tx timeout
[   97.108609][   T51] Bluetooth: hci0: command tx timeout
[   97.113269][ T5847] Bluetooth: hci3: command tx timeout
[   97.131326][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   97.150736][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   97.162634][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   97.174472][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   97.187613][ T5847] Bluetooth: hci4: command tx timeout
[   97.338309][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.354565][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.390555][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.426133][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.439224][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.470978][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.514844][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   97.543006][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   97.556499][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   97.568930][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   97.594983][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   97.635681][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.642993][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.655168][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.662381][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.690394][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   97.730140][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.737501][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.775148][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.782369][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.887193][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.979383][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   98.010924][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.059733][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.066914][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.144386][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.151658][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.265050][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   98.325745][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.346680][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.354232][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.425443][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.432668][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.499383][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.510763][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   98.546374][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.553661][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.586193][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.600679][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   98.620525][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.627769][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.816307][ T5837] veth0_vlan: entered promiscuous mode
[   98.889841][ T5837] veth1_vlan: entered promiscuous mode
[   98.929541][ T5838] veth0_vlan: entered promiscuous mode
[   98.965417][ T5838] veth1_vlan: entered promiscuous mode
[   99.115739][ T5837] veth0_macvtap: entered promiscuous mode
[   99.122883][ T5847] Bluetooth: hci1: command tx timeout
[   99.160796][ T5838] veth0_macvtap: entered promiscuous mode
[   99.180890][ T5837] veth1_macvtap: entered promiscuous mode
[   99.187400][ T5847] Bluetooth: hci0: command tx timeout
[   99.188793][   T51] Bluetooth: hci2: command tx timeout
[   99.199313][   T51] Bluetooth: hci3: command tx timeout
[   99.216479][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.252232][ T5838] veth1_macvtap: entered promiscuous mode
[   99.269969][   T51] Bluetooth: hci4: command tx timeout
[   99.286081][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.303962][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.363298][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.373696][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.383184][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.392375][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.454558][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.495735][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.521126][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.559933][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.580988][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.595278][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.607000][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.620586][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.661718][ T5846] veth0_vlan: entered promiscuous mode
[   99.685432][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.711423][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.755054][ T5846] veth1_vlan: entered promiscuous mode
[   99.876651][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.901734][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.013460][ T5846] veth0_macvtap: entered promiscuous mode
[  100.030491][ T5854] veth0_vlan: entered promiscuous mode
[  100.042195][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.043551][ T5846] veth1_macvtap: entered promiscuous mode
[  100.064326][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.080489][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  100.128921][ T5854] veth1_vlan: entered promiscuous mode
[  100.192259][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.208699][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.219757][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.258728][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.289964][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.310458][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.319885][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.330509][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.354356][ T5849] veth0_vlan: entered promiscuous mode
[  100.467119][ T5854] veth0_macvtap: entered promiscuous mode
[  100.528754][ T5849] veth1_vlan: entered promiscuous mode
[  100.551163][ T5854] veth1_macvtap: entered promiscuous mode
[  100.560013][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  100.681132][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.732073][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.742730][ T5957] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2522798746 (5045597492 ns) > initial count (559298384 ns). Using initial count to start timer.
[  100.761378][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.765338][ T5849] veth0_macvtap: entered promiscuous mode
[  100.782161][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.843426][ T5849] veth1_macvtap: entered promiscuous mode
[  100.874420][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.904120][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.913815][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.923096][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.989085][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.992981][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.013181][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.051257][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.119888][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.156359][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.181047][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.190326][   T51] Bluetooth: hci1: command tx timeout
[  101.203227][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.268172][   T51] Bluetooth: hci3: command tx timeout
[  101.274139][   T51] Bluetooth: hci2: command tx timeout
[  101.277517][ T5847] Bluetooth: hci0: command tx timeout
[  101.347474][ T5847] Bluetooth: hci4: command tx timeout
[  101.389819][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.433040][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.565666][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.605180][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.700448][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.722209][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.875543][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.886744][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.157863][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.313847][ T5995] usb usb8: usbfs: process 5995 (syz.1.14) did not claim interface 63 before use
[  103.358137][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.674632][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  103.879533][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  104.084339][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  104.188064][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  104.367633][ T5905] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  104.377555][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  104.388520][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  104.398137][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  104.407571][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  105.443332][ T5905] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  105.482251][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  105.708049][ T5905] usb 2-1: config 0 has no interface number 0
[  105.720335][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  105.735771][ T6013] netlink: 'syz.0.18': attribute type 1 has an invalid length.
[  105.743756][ T6013] netlink: 208 bytes leftover after parsing attributes in process `syz.0.18'.
[  105.753692][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.762114][ T5905] usb 2-1: Product: syz
[  105.767549][ T5905] usb 2-1: Manufacturer: syz
[  105.767582][ T5905] usb 2-1: SerialNumber: syz
[  105.772765][ T5905] usb 2-1: config 0 descriptor??
[  105.785652][ T6017] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET)
[  105.991553][ T5905] usb 2-1: Found UVC 0.00 device syz (046d:0823)
[  106.017779][ T5905] usb 2-1: No valid video chain found.
[  106.072582][ T5905] usb 2-1: USB disconnect, device number 2
[  107.826927][ T6031] netdevsim netdevsim1: Direct firmware load for þ failed with error -2
[  107.871243][ T6031] netdevsim netdevsim1: Falling back to sysfs fallback for: þ
[  108.149428][ T6032] input: syz1 as /devices/virtual/input/input5
[  110.119114][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.128120][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.274778][ T6060] loop2: detected capacity change from 0 to 7
[  110.318427][ T6060] Dev loop2: unable to read RDB block 7
[  110.324771][ T6063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32'.
[  110.367427][ T6060]  loop2: AHDI p2 p3
[  110.374010][ T6060] loop2: partition table partially beyond EOD, truncated
[  110.394324][ T6060] loop2: p3 start 335544320 is beyond EOD, truncated
[  111.171839][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.191154][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.294172][   T30] audit: type=1326 audit(1755336154.349:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be98ebe9 code=0x7ffc0000
[  111.324995][   T30] audit: type=1326 audit(1755336154.369:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be98ebe9 code=0x7ffc0000
[  111.347552][   T30] audit: type=1326 audit(1755336154.379:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23be98ebe9 code=0x7ffc0000
[  111.372948][   T30] audit: type=1326 audit(1755336154.379:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be98ebe9 code=0x7ffc0000
[  111.395839][   T30] audit: type=1326 audit(1755336154.379:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be98ebe9 code=0x7ffc0000
[  111.419789][   T30] audit: type=1326 audit(1755336154.379:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f23be98ebe9 code=0x7ffc0000
[  111.442672][   T30] audit: type=1326 audit(1755336154.379:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be98ebe9 code=0x7ffc0000
[  111.464675][ T6037] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.470869][   T30] audit: type=1326 audit(1755336154.379:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f23be98ebe9 code=0x7ffc0000
[  111.486668][ T6037] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.506437][ T6037] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.519112][ T6037] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.520548][   T30] audit: type=1326 audit(1755336154.379:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be98ebe9 code=0x7ffc0000
[  111.550178][   T30] audit: type=1326 audit(1755336154.379:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23be98ebe9 code=0x7ffc0000
[  113.138764][ T6091] 9pnet: p9_errstr2errno: server reported unknown error �@íÎÇpî‘AçÁ›
¬ž;
KZì44§/@®qæžkøp
[  113.138764][ T6091] 
[  114.015177][ T6095] tipc: Started in network mode
[  114.193298][ T6095] tipc: Node identity 1a50f6209c9d, cluster identity 4711
[  114.206173][ T6095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.881220][ T6091] syzkaller0: entered promiscuous mode
[  114.934514][ T6091] syzkaller0: entered allmulticast mode
[  114.996314][ T6091] tipc: Resetting bearer <eth:syzkaller0>
[  115.015686][ T6111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.45'.
[  115.942657][ T5924] tipc: Node number set to 2261644832
[  116.099732][ T6086] tipc: Resetting bearer <eth:syzkaller0>
[  116.259303][ T6123] Bluetooth: MGMT ver 1.23
[  116.403921][ T6125] Zero length message leads to an empty skb
[  116.457848][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  116.651064][ T6127] Cannot find add_set index 0 as target
[  116.914303][    T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  116.946200][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.118936][    T9] usb 5-1: config 0 descriptor??
[  117.151760][    T9] gspca_main: cpia1-2.14.0 probing 0813:0001
[  117.512439][ T6133] sctp: [Deprecated]: syz.1.50 (pid 6133) Use of int in maxseg socket option.
[  117.512439][ T6133] Use struct sctp_assoc_value instead
[  117.577266][    T9] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  117.615316][ T6134] netlink: 'syz.1.50': attribute type 1 has an invalid length.
[  117.625767][ T6134] netlink: 'syz.1.50': attribute type 2 has an invalid length.
[  117.640202][ T6134] netlink: 'syz.1.50': attribute type 2 has an invalid length.
[  118.213538][ T6121] netlink: 36 bytes leftover after parsing attributes in process `syz.4.47'.
[  119.028113][ T6086] tipc: Disabling bearer <eth:syzkaller0>
[  119.028410][    T9] gspca_cpia1: usb_control_msg 05, error -110
[  119.052119][    T9] cpia1 5-1:0.0: unexpected systemstate: 00
[  119.126164][ T6138] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  119.158927][ T6138] bond0: (slave lo): Error: Device can not be enslaved while up
[  119.164335][ T5826] usb 5-1: USB disconnect, device number 2
[  119.386585][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.52'.
[  119.708518][ T6153] xt_hashlimit: size too large, truncated to 1048576
[  119.831692][ T6154] : renamed from bridge_slave_0 (while UP)
[  119.963263][ T6158] Cannot find add_set index 0 as target
[  121.691356][ T6173] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  123.911827][ T6213] vlan2: entered allmulticast mode
[  123.916990][ T6213] team0: entered allmulticast mode
[  123.922443][ T6213] team_slave_0: entered allmulticast mode
[  123.928488][ T6213] team_slave_1: entered allmulticast mode
[  123.957359][ T6202] netlink: 60 bytes leftover after parsing attributes in process `syz.2.69'.
[  124.498053][ T5855] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  124.769993][ T5855] usb 3-1: device descriptor read/64, error -71
[  124.827441][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  124.998543][ T5905] usb 2-1: Using ep0 maxpacket: 16
[  125.023284][ T5905] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.051713][ T5905] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.065391][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0
[  125.078241][ T5855] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  125.114374][ T5905] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  125.199528][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.227549][ T6228] netlink: 64 bytes leftover after parsing attributes in process `syz.3.73'.
[  125.246671][ T5905] usb 2-1: config 0 descriptor??
[  125.256183][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'.
[  125.276495][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'.
[  125.309879][ T5855] usb 3-1: device descriptor read/64, error -71
[  125.418499][ T5855] usb usb3-port1: attempt power cycle
[  125.537455][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'.
[  125.603206][ T6231] team0: entered promiscuous mode
[  125.697361][ T6231] team_slave_0: entered promiscuous mode
[  125.739798][ T5905] holtek_kbd 0003:04D9:A055.0001: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0
[  125.759762][ T6231] team_slave_1: entered promiscuous mode
[  125.797581][ T5855] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  125.808079][ T6231] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  125.828052][ T6231] team0: left promiscuous mode
[  125.839137][ T6231] team_slave_0: left promiscuous mode
[  125.846008][ T5855] usb 3-1: device descriptor read/8, error -71
[  125.853123][ T6231] team_slave_1: left promiscuous mode
[  125.888318][ T5905] usb 2-1: USB disconnect, device number 3
[  126.058249][ T6235] fido_id[6235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  126.210223][ T5855] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  127.422507][ T6247] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  127.462133][ T6249] netlink: 'syz.3.79': attribute type 1 has an invalid length.
[  127.469829][ T6249] netlink: 208 bytes leftover after parsing attributes in process `syz.3.79'.
[  127.478819][ T6249] FAULT_INJECTION: forcing a failure.
[  127.478819][ T6249] name failslab, interval 1, probability 0, space 0, times 0
[  127.491488][ T6249] CPU: 0 UID: 0 PID: 6249 Comm: syz.3.79 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  127.491505][ T6249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  127.491512][ T6249] Call Trace:
[  127.491519][ T6249]  <TASK>
[  127.491524][ T6249]  dump_stack_lvl+0x189/0x250
[  127.491543][ T6249]  ? __pfx____ratelimit+0x10/0x10
[  127.491557][ T6249]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.491570][ T6249]  ? __pfx__printk+0x10/0x10
[  127.491594][ T6249]  ? __pfx___might_resched+0x10/0x10
[  127.491608][ T6249]  ? fs_reclaim_acquire+0x7d/0x100
[  127.491625][ T6249]  should_fail_ex+0x414/0x560
[  127.491642][ T6249]  should_failslab+0xa8/0x100
[  127.491657][ T6249]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  127.491670][ T6249]  ? __alloc_skb+0x112/0x2d0
[  127.491692][ T6249]  __alloc_skb+0x112/0x2d0
[  127.491711][ T6249]  netlink_ack+0x146/0xa50
[  127.491726][ T6249]  ? __pfx_genl_rcv_msg+0x10/0x10
[  127.491737][ T6249]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  127.491748][ T6249]  ? __pfx_nl80211_post_doit+0x10/0x10
[  127.491769][ T6249]  netlink_rcv_skb+0x28c/0x470
[  127.491786][ T6249]  ? __pfx_genl_rcv_msg+0x10/0x10
[  127.491799][ T6249]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  127.491826][ T6249]  ? down_read+0x1ad/0x2e0
[  127.491842][ T6249]  genl_rcv+0x28/0x40
[  127.491853][ T6249]  netlink_unicast+0x75c/0x8e0
[  127.491876][ T6249]  netlink_sendmsg+0x805/0xb30
[  127.491899][ T6249]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.491922][ T6249]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  127.491936][ T6249]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.491953][ T6249]  __sock_sendmsg+0x21c/0x270
[  127.491970][ T6249]  ____sys_sendmsg+0x505/0x830
[  127.491992][ T6249]  ? __pfx_____sys_sendmsg+0x10/0x10
[  127.492016][ T6249]  ? import_iovec+0x74/0xa0
[  127.492035][ T6249]  ___sys_sendmsg+0x21f/0x2a0
[  127.492061][ T6249]  ? __pfx____sys_sendmsg+0x10/0x10
[  127.492103][ T6249]  ? __fget_files+0x2a/0x420
[  127.492116][ T6249]  ? __fget_files+0x3a0/0x420
[  127.492136][ T6249]  __x64_sys_sendmsg+0x19b/0x260
[  127.492156][ T6249]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  127.492180][ T6249]  ? __pfx_ksys_write+0x10/0x10
[  127.492196][ T6249]  ? do_syscall_64+0xbe/0x3b0
[  127.492212][ T6249]  do_syscall_64+0xfa/0x3b0
[  127.492225][ T6249]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.492237][ T6249]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  127.492249][ T6249]  ? clear_bhb_loop+0x60/0xb0
[  127.492263][ T6249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.492274][ T6249] RIP: 0033:0x7f2a32f8ebe9
[  127.492287][ T6249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.492297][ T6249] RSP: 002b:00007f2a33d92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.492311][ T6249] RAX: ffffffffffffffda RBX: 00007f2a331b6090 RCX: 00007f2a32f8ebe9
[  127.492320][ T6249] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000009
[  127.492327][ T6249] RBP: 00007f2a33d92090 R08: 0000000000000000 R09: 0000000000000000
[  127.492334][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.492341][ T6249] R13: 00007f2a331b6128 R14: 00007f2a331b6090 R15: 00007ffe74061178
[  127.492360][ T6249]  </TASK>
[  128.294570][ T5855] usb 3-1: device descriptor read/8, error -71
[  128.368037][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  128.407883][ T5855] usb usb3-port1: unable to enumerate USB device
[  128.847302][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.056952][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.086725][ T5905] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  129.121706][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  129.156161][ T6266] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  129.204297][ T5905] usb 2-1: SerialNumber: syz
[  129.694859][ T6268] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  130.351830][ T5905] usb 2-1: 0:2 : does not exist
[  130.452407][ T5905] usb 2-1: USB disconnect, device number 4
[  130.790648][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  131.707685][   T24] usb 4-1: Using ep0 maxpacket: 32
[  131.723788][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  131.788055][   T24] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  131.814897][   T24] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  131.864800][   T24] usb 4-1: Product: syz
[  131.879574][   T24] usb 4-1: Manufacturer: syz
[  131.896973][   T24] usb 4-1: SerialNumber: syz
[  131.942042][   T24] usb 4-1: config 0 descriptor??
[  131.970850][ T6274] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  132.651833][ T3415] usb 4-1: USB disconnect, device number 2
[  132.985944][ T6297] evm: overlay not supported
[  133.087826][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  133.103103][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  138.040406][ T5826] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  138.074438][ T5826] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  139.608610][ T6363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.112'.
[  141.893947][ T6386] netlink: 'syz.3.119': attribute type 1 has an invalid length.
[  141.901877][ T6386] netlink: 208 bytes leftover after parsing attributes in process `syz.3.119'.
[  141.911517][ T6386] FAULT_INJECTION: forcing a failure.
[  141.911517][ T6386] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  141.924905][ T6386] CPU: 0 UID: 0 PID: 6386 Comm: syz.3.119 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  141.924932][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  141.924944][ T6386] Call Trace:
[  141.924953][ T6386]  <TASK>
[  141.924962][ T6386]  dump_stack_lvl+0x189/0x250
[  141.924991][ T6386]  ? __pfx____ratelimit+0x10/0x10
[  141.925014][ T6386]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.925037][ T6386]  ? __pfx__printk+0x10/0x10
[  141.925079][ T6386]  should_fail_ex+0x414/0x560
[  141.925108][ T6386]  _copy_to_user+0x31/0xb0
[  141.925141][ T6386]  simple_read_from_buffer+0xe1/0x170
[  141.925169][ T6386]  proc_fail_nth_read+0x1df/0x250
[  141.925199][ T6386]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  141.925227][ T6386]  ? rw_verify_area+0x258/0x650
[  141.925257][ T6386]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  141.925284][ T6386]  vfs_read+0x200/0x980
[  141.925322][ T6386]  ? __pfx___mutex_lock+0x10/0x10
[  141.925346][ T6386]  ? __pfx_vfs_read+0x10/0x10
[  141.925380][ T6386]  ? __fget_files+0x2a/0x420
[  141.925409][ T6386]  ? __fget_files+0x3a0/0x420
[  141.925430][ T6386]  ? __fget_files+0x2a/0x420
[  141.925464][ T6386]  ksys_read+0x145/0x250
[  141.925486][ T6386]  ? __pfx_ksys_read+0x10/0x10
[  141.925503][ T6386]  ? rcu_is_watching+0x15/0xb0
[  141.925532][ T6386]  ? do_syscall_64+0xbe/0x3b0
[  141.925560][ T6386]  do_syscall_64+0xfa/0x3b0
[  141.925581][ T6386]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.925602][ T6386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.925622][ T6386]  ? clear_bhb_loop+0x60/0xb0
[  141.925648][ T6386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.925663][ T6386] RIP: 0033:0x7f2a32f8d5fc
[  141.925680][ T6386] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  141.925693][ T6386] RSP: 002b:00007f2a33d92030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  141.925712][ T6386] RAX: ffffffffffffffda RBX: 00007f2a331b6090 RCX: 00007f2a32f8d5fc
[  141.925723][ T6386] RDX: 000000000000000f RSI: 00007f2a33d920a0 RDI: 0000000000000008
[  141.925733][ T6386] RBP: 00007f2a33d92090 R08: 0000000000000000 R09: 0000000000000000
[  141.925744][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.925755][ T6386] R13: 00007f2a331b6128 R14: 00007f2a331b6090 R15: 00007ffe74061178
[  141.925790][ T6386]  </TASK>
[  142.203243][ T1210] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  142.420447][ T6390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.122'.
[  143.092597][ T6390] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  143.139898][ T1210] usb 1-1: device descriptor read/64, error -71
[  143.489517][ T1210] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  143.717773][ T1210] usb 1-1: device descriptor read/64, error -71
[  143.904528][ T1210] usb usb1-port1: attempt power cycle
[  144.019207][ T6407] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  145.051818][   T30] kauditd_printk_skb: 39 callbacks suppressed
[  145.051840][   T30] audit: type=1326 audit(1755336188.099:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  145.088526][ T1210] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  145.104180][   T30] audit: type=1326 audit(1755336188.159:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  145.160631][   T30] audit: type=1326 audit(1755336188.189:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  146.016467][ T1210] usb 1-1: device not accepting address 4, error -71
[  146.404044][   T30] audit: type=1326 audit(1755336188.189:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  146.426039][   T30] audit: type=1326 audit(1755336188.189:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  146.448073][   T30] audit: type=1326 audit(1755336188.189:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  146.470645][   T30] audit: type=1326 audit(1755336188.209:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  146.493034][   T30] audit: type=1326 audit(1755336188.209:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  146.560294][   T30] audit: type=1326 audit(1755336188.209:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  146.664475][   T30] audit: type=1326 audit(1755336188.209:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6418 comm="syz.3.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  147.536586][ T5905] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  147.823823][ T5905] usb 5-1: Using ep0 maxpacket: 32
[  147.953423][ T5905] usb 5-1: config 0 interface 0 has no altsetting 0
[  148.092190][ T5905] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  148.413332][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.455438][ T5905] usb 5-1: Product: syz
[  148.475642][ T5905] usb 5-1: Manufacturer: syz
[  148.490083][ T5905] usb 5-1: SerialNumber: syz
[  148.539459][ T5905] usb 5-1: config 0 descriptor??
[  148.604067][ T5905] gs_usb 5-1:0.0: Required endpoints not found
[  149.322984][ T5905] usb 5-1: USB disconnect, device number 3
[  150.284915][ T6465] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.139'.
[  151.820492][ T6485] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  152.907881][ T5905] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  153.047490][ T5905] usb 1-1: device descriptor read/64, error -71
[  153.108412][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'.
[  153.298023][ T5905] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  154.492730][ T6505] xt_CT: No such helper "netbios-ns"
[  154.621973][ T5905] usb 1-1: device descriptor read/64, error -71
[  154.776081][ T5905] usb usb1-port1: attempt power cycle
[  155.237670][ T5905] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  155.465096][ T5905] usb 1-1: device not accepting address 8, error -71
[  155.744929][ T6528] Invalid source name
[  155.749059][ T6528] UBIFS error (pid: 6528): cannot open "./file0", error -22
[  155.753042][ T6528] binder: 6523:6528 ioctl 40046210 0 returned -14
[  157.069098][ T6533] tipc: Started in network mode
[  157.107480][ T6533] tipc: Node identity 361f397aa4f4, cluster identity 4711
[  157.137561][ T6533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.155516][ T6538] syzkaller0: entered promiscuous mode
[  157.183936][ T6538] syzkaller0: entered allmulticast mode
[  157.312858][ T6531] tipc: Resetting bearer <eth:syzkaller0>
[  157.360689][ T6531] tipc: Disabling bearer <eth:syzkaller0>
[  157.397849][ T1210] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  158.289736][ T1210] usb 2-1: device descriptor read/64, error -71
[  158.860157][ T1210] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  159.027573][ T1210] usb 2-1: device descriptor read/64, error -71
[  159.182081][ T1210] usb usb2-port1: attempt power cycle
[  160.306534][ T1210] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  160.592022][ T6584] xt_CT: No such helper "netbios-ns"
[  160.946944][ T1210] usb 2-1: device descriptor read/8, error -71
[  161.245154][ T6594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.176'.
[  162.107611][ T6599] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0
[  162.130415][ T6593] FAULT_INJECTION: forcing a failure.
[  162.130415][ T6593] name failslab, interval 1, probability 0, space 0, times 0
[  162.411297][ T5826] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  162.418202][ T6593] CPU: 0 UID: 0 PID: 6593 Comm: syz.0.177 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  162.418229][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  162.418240][ T6593] Call Trace:
[  162.418248][ T6593]  <TASK>
[  162.418256][ T6593]  dump_stack_lvl+0x189/0x250
[  162.418282][ T6593]  ? __pfx____ratelimit+0x10/0x10
[  162.418303][ T6593]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.418322][ T6593]  ? __pfx__printk+0x10/0x10
[  162.418351][ T6593]  ? __pfx___might_resched+0x10/0x10
[  162.418369][ T6593]  ? fs_reclaim_acquire+0x7d/0x100
[  162.418395][ T6593]  should_fail_ex+0x414/0x560
[  162.418420][ T6593]  should_failslab+0xa8/0x100
[  162.418442][ T6593]  kmem_cache_alloc_noprof+0x73/0x3c0
[  162.418458][ T6593]  ? ep_insert+0x272/0x19e0
[  162.418480][ T6593]  ep_insert+0x272/0x19e0
[  162.418510][ T6593]  ? do_epoll_ctl+0x3c9/0xe90
[  162.418526][ T6593]  ? __pfx_ep_insert+0x10/0x10
[  162.418543][ T6593]  ? __pfx___mutex_lock+0x10/0x10
[  162.418564][ T6593]  ? __fget_files+0x2a/0x420
[  162.418587][ T6593]  ? __fget_files+0x2a/0x420
[  162.418605][ T6593]  ? __fget_files+0x3a0/0x420
[  162.418623][ T6593]  ? __fget_files+0x2a/0x420
[  162.418652][ T6593]  do_epoll_ctl+0x7f4/0xe90
[  162.418678][ T6593]  __x64_sys_epoll_ctl+0x163/0x1a0
[  162.418700][ T6593]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  162.418715][ T6593]  ? rcu_is_watching+0x15/0xb0
[  162.418741][ T6593]  ? do_syscall_64+0xbe/0x3b0
[  162.418764][ T6593]  do_syscall_64+0xfa/0x3b0
[  162.418782][ T6593]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.418800][ T6593]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.418817][ T6593]  ? clear_bhb_loop+0x60/0xb0
[  162.418847][ T6593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.418864][ T6593] RIP: 0033:0x7f23be98ebe9
[  162.418882][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.418896][ T6593] RSP: 002b:00007f23bf72b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  162.418918][ T6593] RAX: ffffffffffffffda RBX: 00007f23bebb5fa0 RCX: 00007f23be98ebe9
[  162.418932][ T6593] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000006
[  162.418944][ T6593] RBP: 00007f23bf72b090 R08: 0000000000000000 R09: 0000000000000000
[  162.418956][ T6593] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001
[  162.418967][ T6593] R13: 00007f23bebb6038 R14: 00007f23bebb5fa0 R15: 00007ffdbe21f378
[  162.418996][ T6593]  </TASK>
[  162.548605][ T6598] IPVS: stopping backup sync thread 6599 ...
[  162.993350][ T5826] usb 5-1: config 0 has an invalid interface number: 200 but max is 0
[  163.428426][ T5826] usb 5-1: config 0 has no interface number 0
[  163.451247][ T5826] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  163.497299][ T5826] usb 5-1: config 0 interface 200 has no altsetting 0
[  163.599575][ T6620] mmap: syz.0.180 (6620) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  163.613542][ T5826] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  163.727867][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.877536][ T3415] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  164.767053][ T5826] usb 5-1: Product: syz
[  164.771399][ T5826] usb 5-1: Manufacturer: syz
[  164.776035][ T5826] usb 5-1: SerialNumber: syz
[  164.915102][ T3415] usb 3-1: device descriptor read/all, error -71
[  164.931492][ T5826] usb 5-1: config 0 descriptor??
[  164.957472][ T5826] usb 5-1: can't set config #0, error -71
[  165.011081][ T5826] usb 5-1: USB disconnect, device number 4
[  168.558406][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.193'.
[  169.191647][ T6661] cgroup: fork rejected by pids controller in /syz2
[  169.380567][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'.
[  169.515647][ T6666] team0: entered promiscuous mode
[  169.527096][ T6666] team_slave_0: entered promiscuous mode
[  169.533917][ T6666] team_slave_1: entered promiscuous mode
[  169.702480][ T6666] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  170.788658][ T6666] team0: left promiscuous mode
[  170.802240][ T6666] team_slave_0: left promiscuous mode
[  170.850761][ T6666] team_slave_1: left promiscuous mode
[  171.052838][ T6682] loop2: detected capacity change from 0 to 7
[  171.079274][ T6682] Dev loop2: unable to read RDB block 7
[  171.085182][ T6682]  loop2: AHDI p2 p3
[  171.089714][ T6682] loop2: partition table partially beyond EOD, truncated
[  171.097019][ T6682] loop2: p3 start 335544320 is beyond EOD, truncated
[  174.746041][ T6023] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.492368][ T6023] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.625759][ T6023] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.642060][ T6707] comedi comedi3: comedi_config --init_data is deprecated
[  175.907584][ T5905] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  175.918005][ T6023] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.097347][ T5905] usb 2-1: Using ep0 maxpacket: 32
[  176.219334][ T5905] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  176.257999][ T5905] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  176.298151][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.317509][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.332922][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.344305][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.352529][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.361806][ T5905] usb 2-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config
[  176.389835][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  176.410344][ T5905] usb 2-1: config 1 has no interface number 0
[  176.433085][ T5905] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  176.447561][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.540758][ T6023] bridge_slave_1: left allmulticast mode
[  176.567385][ T5935] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  176.596692][ T6023] bridge_slave_1: left promiscuous mode
[  176.605096][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.646441][ T6023] bridge_slave_0: left allmulticast mode
[  176.652331][ T6023] bridge_slave_0: left promiscuous mode
[  176.676846][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.694722][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.720493][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.758633][ T5905] usb 2-1: string descriptor 0 read error: -71
[  176.780851][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  176.782217][ T5905] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  176.811347][ T5935] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  176.837914][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  176.839918][ T5905] snd_usb_pod 2-1:1.1: set_interface failed
[  176.874097][ T5905] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  176.947892][ T5905] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71
[  176.960172][ T5905] usb 2-1: USB disconnect, device number 9
[  176.967633][ T5935] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  177.228919][ T5935] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  177.252732][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.271991][ T5935] usb 1-1: Product: syz
[  177.276264][ T5935] usb 1-1: Manufacturer: syz
[  177.290975][ T5935] usb 1-1: SerialNumber: syz
[  177.391741][ T5935] usb 1-1: config 0 descriptor??
[  177.617493][ T5935] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  178.301447][ T5935] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22
[  178.387444][ T5847] Bluetooth: hci2: command tx timeout
[  179.126911][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'.
[  179.718355][ T6754] input: syz0 as /devices/virtual/input/input6
[  179.724937][ T6754] input: failed to attach handler leds to device input6, error: -6
[  180.617367][ T5847] Bluetooth: hci2: command tx timeout
[  180.813300][ T6762] netlink: 'syz.3.221': attribute type 10 has an invalid length.
[  181.104505][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.125052][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.142353][ T6023] bond0 (unregistering): Released all slaves
[  181.189154][ T6737] wg1: entered promiscuous mode
[  181.200514][ T6737] wg1: entered allmulticast mode
[  181.238435][ T3415] usb 1-1: USB disconnect, device number 10
[  181.244022][ T6745] bond0: entered promiscuous mode
[  181.258836][ T6745] bond_slave_0: entered promiscuous mode
[  181.265742][ T6745] bond_slave_1: entered promiscuous mode
[  181.274356][ T6745] batadv0: entered promiscuous mode
[  181.434967][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.222'.
[  181.465505][ T6762] 8021q: adding VLAN 0 to HW filter on device team0
[  181.507496][ T6762] bond0: (slave team0): Enslaving as an active interface with an up link
[  181.537396][ T6023] tipc: Left network mode
[  182.728862][   T51] Bluetooth: hci2: command tx timeout
[  183.508115][   T30] kauditd_printk_skb: 37 callbacks suppressed
[  183.508135][   T30] audit: type=1326 audit(1755336226.559:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  183.649969][   T30] audit: type=1326 audit(1755336226.559:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  183.721804][   T30] audit: type=1326 audit(1755336226.599:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  183.781876][   T30] audit: type=1326 audit(1755336226.599:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  183.847468][   T30] audit: type=1326 audit(1755336226.599:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  183.935612][   T30] audit: type=1326 audit(1755336226.609:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  184.044051][   T30] audit: type=1326 audit(1755336226.609:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  184.082380][ T6023] hsr_slave_0: left promiscuous mode
[  184.141899][ T6023] hsr_slave_1: left promiscuous mode
[  184.157839][   T30] audit: type=1326 audit(1755336226.609:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  184.221860][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.249658][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.257979][   T30] audit: type=1326 audit(1755336226.609:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  184.282264][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.306132][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.323071][   T30] audit: type=1326 audit(1755336226.609:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.1.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  184.487062][ T6801] xt_time: invalid argument - start or stop time greater than 23:59:59
[  184.596612][ T6023] veth1_macvtap: left promiscuous mode
[  184.630573][ T6023] veth0_macvtap: left promiscuous mode
[  184.655431][ T6023] veth1_vlan: left promiscuous mode
[  184.698293][ T6023] veth0_vlan: left promiscuous mode
[  184.802280][   T51] Bluetooth: hci2: command tx timeout
[  186.011544][ T6813] xt_CT: No such helper "netbios-ns"
[  187.443184][ T6825] SET target dimension over the limit!
[  188.522919][ T6023] team0 (unregistering): Port device team_slave_1 removed
[  188.589505][ T6023] team0 (unregistering): Port device team_slave_0 removed
[  189.227456][ T6833] warning: `syz.1.236' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  189.364723][ T6719] chnl_net:caif_netlink_parms(): no params data found
[  190.326385][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.239'.
[  190.693722][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.701421][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.364283][ T6719] bridge_slave_0: entered allmulticast mode
[  191.373965][ T6719] bridge_slave_0: entered promiscuous mode
[  191.383803][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.391636][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.507796][ T6719] bridge_slave_1: entered allmulticast mode
[  191.547074][ T6719] bridge_slave_1: entered promiscuous mode
[  191.763638][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.855733][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.121219][ T6719] team0: Port device team_slave_0 added
[  192.159553][ T6719] team0: Port device team_slave_1 added
[  192.524530][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.559547][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.194992][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.252523][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.452472][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.507517][ T6077] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  193.707549][ T6077] usb 2-1: New USB device found, idVendor=1fb9, idProduct=0401, bcdDevice=a0.60
[  193.753075][ T6077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.759940][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.808333][ T6077] usb 2-1: Product: syz
[  193.812669][ T6077] usb 2-1: Manufacturer: syz
[  193.974724][ T6077] usb 2-1: SerialNumber: syz
[  193.994071][ T6077] usb 2-1: config 0 descriptor??
[  194.006177][ T6077] cp210x 2-1:0.0: cp210x converter detected
[  194.037537][ T3415] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  194.157841][ T6719] hsr_slave_0: entered promiscuous mode
[  194.178517][ T6719] hsr_slave_1: entered promiscuous mode
[  194.248082][ T6719] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.255724][ T6719] Cannot create hsr debugfs directory
[  194.347959][ T6077] usb 2-1: cp210x converter now attached to ttyUSB0
[  194.437418][ T3415] usb 4-1: Using ep0 maxpacket: 32
[  195.340753][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  195.347291][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  195.425761][ T3415] usb 4-1: config 120 has an invalid interface number: 85 but max is 0
[  195.443229][ T3415] usb 4-1: config 120 has no interface number 0
[  195.561594][ T3415] usb 4-1: New USB device found, idVendor=07c4, idProduct=a002, bcdDevice=9c.75
[  195.579447][ T3415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.597355][ T3415] usb 4-1: Product: syz
[  195.606101][ T3415] usb 4-1: Manufacturer: syz
[  195.620526][ T3415] usb 4-1: SerialNumber: syz
[  196.047535][ T1210] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  196.162246][ T3415] ums-datafab 4-1:120.85: USB Mass Storage device detected
[  196.174766][ T3415] ums-datafab 4-1:120.85: Quirks match for vid 07c4 pid a002: 1
[  196.183044][ T3415] ums-datafab 4-1:120.85: This device (07c4,a002,9c75 S 56 P f2) has an unneeded Protocol entry in unusual_devs.h (kernel 6.16.0-syzkaller)
[  196.183044][ T3415]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  196.225053][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.242513][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.256667][ T1210] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  196.273870][ T3415] usb 4-1: USB disconnect, device number 3
[  196.285045][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.344166][ T1210] usb 1-1: config 0 descriptor??
[  196.424285][ T5905] usb 2-1: USB disconnect, device number 10
[  196.521210][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  196.568417][ T5905] cp210x 2-1:0.0: device disconnected
[  196.910683][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.131397][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.006359][ T1210] usbhid 1-1:0.0: can't add hid device: -71
[  198.013071][ T1210] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  198.057247][ T1210] usb 1-1: USB disconnect, device number 11
[  198.130372][ T6936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.253'.
[  198.157435][ T6936] bridge_slave_1: left allmulticast mode
[  198.181681][ T6936] bridge_slave_1: left promiscuous mode
[  198.203413][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.230335][ T6936] bridge_slave_0: left allmulticast mode
[  198.247114][ T6936] bridge_slave_0: left promiscuous mode
[  198.248948][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.344624][ T6942] trusted_key: syz.1.253 sent an empty control message without MSG_MORE.
[  199.695294][ T6719] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  200.028900][ T6719] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  201.158311][ T6719] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  201.301381][ T6719] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  206.036399][ T7006] PKCS8: Unsupported PKCS#8 version
[  206.198776][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  206.198795][   T30] audit: type=1326 audit(1755336249.259:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be958ebe9 code=0x7ffc0000
[  206.280506][ T6719] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.308937][   T30] audit: type=1326 audit(1755336249.259:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be958ebe9 code=0x7ffc0000
[  206.338334][ T5924] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  206.466998][ T6719] 8021q: adding VLAN 0 to HW filter on device team0
[  206.474488][   T30] audit: type=1326 audit(1755336249.259:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7be958ebe9 code=0x7ffc0000
[  206.497338][   T30] audit: type=1326 audit(1755336249.259:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be958ebe9 code=0x7ffc0000
[  206.913027][   T30] audit: type=1326 audit(1755336249.259:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be958ebe9 code=0x7ffc0000
[  206.940585][   T30] audit: type=1326 audit(1755336249.259:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7be958ebe9 code=0x7ffc0000
[  207.188790][ T5924] usb 1-1: unable to get BOS descriptor or descriptor too short
[  207.214711][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.221949][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.238888][ T5924] usb 1-1: not running at top speed; connect to a high speed hub
[  207.258437][ T5924] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  207.275506][   T30] audit: type=1326 audit(1755336249.259:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be958ebe9 code=0x7ffc0000
[  207.316076][ T5924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  207.338034][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.355844][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.267'.
[  207.385400][   T30] audit: type=1326 audit(1755336249.259:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be958ebe9 code=0x7ffc0000
[  207.406743][ T5924] usb 1-1: Product: syz
[  207.466698][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.473948][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.477319][   T30] audit: type=1326 audit(1755336249.259:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7be958ebe9 code=0x7ffc0000
[  207.490914][ T5924] usb 1-1: Manufacturer: syz
[  207.667537][ T5924] usb 1-1: SerialNumber: syz
[  207.682475][   T30] audit: type=1326 audit(1755336249.259:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7007 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7be958ebe9 code=0x7ffc0000
[  209.415197][ T5924] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  209.793992][ T5924] usb 1-1: USB disconnect, device number 12
[  209.955547][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  210.460754][ T7052] netlink: 'syz.1.273': attribute type 1 has an invalid length.
[  210.460853][ T7052] netlink: 132 bytes leftover after parsing attributes in process `syz.1.273'.
[  210.460897][ T7052] netlink: 'syz.1.273': attribute type 2 has an invalid length.
[  210.460936][ T7052] netlink: 'syz.1.273': attribute type 1 has an invalid length.
[  210.460977][ T7052] netlink: 2 bytes leftover after parsing attributes in process `syz.1.273'.
[  210.590765][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.949003][ T6719] veth0_vlan: entered promiscuous mode
[  211.038857][ T6719] veth1_vlan: entered promiscuous mode
[  211.240396][ T6719] veth0_macvtap: entered promiscuous mode
[  211.325637][ T6719] veth1_macvtap: entered promiscuous mode
[  211.437786][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.516392][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.341498][ T5924] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  212.532698][ T6719] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.210778][ T6719] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.687319][ T6719] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.696189][ T6719] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.767258][ T5924] usb 4-1: Using ep0 maxpacket: 32
[  213.813639][ T5924] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.846107][ T5924] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.902736][ T5924] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  213.956184][ T5924] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  214.031536][ T5924] usb 4-1: Product: syz
[  214.063859][ T5924] usb 4-1: Manufacturer: syz
[  214.121124][ T5924] hub 4-1:4.0: USB hub found
[  214.354951][ T5924] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[  214.555781][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.592202][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.647829][   T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  215.484937][ T5924] usb 4-1: USB disconnect, device number 4
[  215.834906][   T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  216.067675][   T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.223666][   T10] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  216.330544][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.349334][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  216.391724][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.423246][   T10] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  216.556177][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.825545][   T10] usb 2-1: config 0 descriptor??
[  217.572615][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  217.578821][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  217.843574][ T5843] Bluetooth: hci4: command 0x0406 tx timeout
[  217.852255][ T5843] Bluetooth: hci1: command 0x0406 tx timeout
[  217.867767][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[  217.874365][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[  218.357755][   T10] usb 2-1: USB disconnect, device number 11
[  219.936928][ T7123] netlink: 'syz.3.285': attribute type 10 has an invalid length.
[  220.082436][ T7123] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  220.583620][ T7133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.287'.
[  222.508084][ T5905] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  222.856544][ T5905] usb 1-1: config 0 has an invalid interface number: 200 but max is 0
[  222.982945][ T5905] usb 1-1: config 0 has no interface number 0
[  223.021978][ T5905] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  223.067267][ T5905] usb 1-1: config 0 interface 200 has no altsetting 0
[  223.138484][ T5905] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  224.099613][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.108043][ T5905] usb 1-1: Product: syz
[  224.112696][ T5905] usb 1-1: Manufacturer: syz
[  224.124799][ T5905] usb 1-1: SerialNumber: syz
[  224.186628][ T5905] usb 1-1: config 0 descriptor??
[  224.238885][ T5905] usb 1-1: can't set config #0, error -71
[  224.562643][ T5905] usb 1-1: USB disconnect, device number 13
[  225.403396][ T6077] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  226.326534][ T6077] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  226.432943][ T6077] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  226.513846][ T6077] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  226.587156][ T6077] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.360568][ T6077] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99
[  230.369894][ T6077] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.980552][ T6077] usb 3-1: can't set config #27, error -71
[  231.988688][ T6077] usb 3-1: USB disconnect, device number 8
[  233.454919][ T7196] netlink: 'syz.2.304': attribute type 1 has an invalid length.
[  233.462705][ T7196] netlink: 208 bytes leftover after parsing attributes in process `syz.2.304'.
[  238.990752][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'.
[  239.096521][ T7246] bond0: entered promiscuous mode
[  239.147573][ T7246] bond_slave_0: entered promiscuous mode
[  239.155720][ T7246] bond_slave_1: entered promiscuous mode
[  239.164099][ T7246] batadv0: entered promiscuous mode
[  239.170533][ T7246] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  239.178258][ T7246] Cannot create hsr debugfs directory
[  239.350160][ T7251] Lens B: =================  START STATUS  =================
[  239.358590][ T7251] Lens B: Focus, Absolute: 0
[  239.364198][ T7251] Lens B: ==================  END STATUS  ==================
[  239.627493][ T5905] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  240.013511][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.092219][ T5905] usb 4-1: config 0 has no interfaces?
[  240.112508][ T5905] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  240.138656][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.164659][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'.
[  240.184774][ T5905] usb 4-1: config 0 descriptor??
[  240.309193][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  240.324274][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  240.332946][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  240.343688][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  240.353314][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.520674][ T7268] Cannot find add_set index 0 as target
[  241.310213][ T7275] autofs: Bad value for 'fd'
[  242.390468][ T1210] usb 4-1: USB disconnect, device number 5
[  242.396836][ T5844] Bluetooth: hci5: command tx timeout
[  243.061358][ T7292] Lens B: =================  START STATUS  =================
[  243.069095][ T7292] Lens B: Focus, Absolute: 0
[  243.073916][ T7292] Lens B: ==================  END STATUS  ==================
[  244.588378][ T5844] Bluetooth: hci5: command tx timeout
[  245.631200][ T7259] chnl_net:caif_netlink_parms(): no params data found
[  245.857374][ T5826] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  245.985642][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'.
[  246.020131][ T5826] usb 4-1: config 0 has an invalid interface number: 200 but max is 0
[  246.042171][ T5826] usb 4-1: config 0 has no interface number 0
[  246.075692][ T5826] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  246.096455][ T5826] usb 4-1: config 0 interface 200 has no altsetting 0
[  246.191902][ T5826] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  246.232275][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.247413][ T5826] usb 4-1: Product: syz
[  246.251781][ T5826] usb 4-1: Manufacturer: syz
[  246.256784][ T5826] usb 4-1: SerialNumber: syz
[  246.637491][ T5844] Bluetooth: hci5: command tx timeout
[  247.333649][ T5826] usb 4-1: config 0 descriptor??
[  247.624902][ T5826] usb 4-1: can't set config #0, error -71
[  247.639842][ T5826] usb 4-1: USB disconnect, device number 6
[  247.745239][ T6510] bridge_slave_1: left allmulticast mode
[  247.753741][ T6510] bridge_slave_1: left promiscuous mode
[  247.769313][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.794462][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.335'.
[  247.831275][ T6510] bridge_slave_0: left allmulticast mode
[  247.880549][ T6510] bridge_slave_0: left promiscuous mode
[  247.895406][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.714172][ T5844] Bluetooth: hci5: command tx timeout
[  248.725297][ T7345] netlink: 'syz.1.338': attribute type 20 has an invalid length.
[  248.788818][ T7348] loop2: detected capacity change from 0 to 7
[  248.815418][ T7348] Dev loop2: unable to read RDB block 7
[  248.831931][ T7348]  loop2: AHDI p2 p3
[  248.836163][ T7348] loop2: partition table partially beyond EOD, truncated
[  248.856490][ T7348] loop2: p3 start 335544320 is beyond EOD, truncated
[  249.512036][ T6510] bond0 (unregistering): left promiscuous mode
[  249.527614][ T6510] bond_slave_0: left promiscuous mode
[  249.533674][ T6510] bond_slave_1: left promiscuous mode
[  249.549271][ T6510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.572013][ T6510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.586760][ T6510] bond0 (unregistering): Released all slaves
[  249.611529][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.618894][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.626333][ T7259] bridge_slave_0: entered allmulticast mode
[  249.644661][ T7259] bridge_slave_0: entered promiscuous mode
[  249.711495][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.729893][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.742743][ T7259] bridge_slave_1: entered allmulticast mode
[  249.750987][ T7259] bridge_slave_1: entered promiscuous mode
[  250.043600][ T7259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.142345][ T7364] xt_CT: You must specify a L4 protocol and not use inversions on it
[  250.222602][ T7259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.623840][ T7259] team0: Port device team_slave_0 added
[  252.647640][ T6510] batadv0: left promiscuous mode
[  252.658959][ T7389] netlink: 'syz.0.346': attribute type 12 has an invalid length.
[  252.690289][ T7389] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.346'.
[  252.699872][ T6510] hsr_slave_0: left promiscuous mode
[  252.718274][ T6510] hsr_slave_1: left promiscuous mode
[  252.733538][ T6510] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.751975][ T6510] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.181465][ T7398] Cannot find add_set index 0 as target
[  254.942304][ T7412] fuse: Bad value for 'group_id'
[  254.948524][ T7412] fuse: Bad value for 'group_id'
[  255.080039][ T7414] netlink: 'syz.3.351': attribute type 16 has an invalid length.
[  255.132362][ T7414] netlink: 'syz.3.351': attribute type 3 has an invalid length.
[  255.146087][ T7414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.351'.
[  255.417323][ T6510] team_slave_1 (unregistering): left allmulticast mode
[  255.505690][ T6510] team0 (unregistering): Port device team_slave_1 removed
[  255.613614][ T6510] team_slave_0 (unregistering): left allmulticast mode
[  255.626764][ T6510] team0 (unregistering): Port device team_slave_0 removed
[  255.924703][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  255.931399][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  256.183141][ T7419] =======================================================
[  256.183141][ T7419] WARNING: The mand mount option has been deprecated and
[  256.183141][ T7419]          and is ignored by this kernel. Remove the mand
[  256.183141][ T7419]          option from the mount to silence this warning.
[  256.183141][ T7419] =======================================================
[  256.219677][ T7419] 9pnet_fd: Insufficient options for proto=fd
[  256.934479][ T7259] team0: Port device team_slave_1 added
[  257.242449][ T7427] Illegal XDP return value 3122 on prog  (id 105) dev syz_tun, expect packet loss!
[  257.451882][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.520792][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.705263][ T7259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.719713][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_1
[  258.734189][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.795404][ T7441] netlink: 'syz.0.359': attribute type 1 has an invalid length.
[  258.818091][ T7259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.013706][ T7441] 8021q: adding VLAN 0 to HW filter on device bond1
[  259.111480][ T7443] bond1: (slave gretap1): making interface the new active one
[  259.123146][ T7443] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  259.233768][ T7443] syz.0.359 (7443) used greatest stack depth: 19816 bytes left
[  259.376760][ T7452] process 'syz.2.361' launched './file0' with NULL argv: empty string added
[  259.394741][ T7259] hsr_slave_0: entered promiscuous mode
[  259.403080][ T7259] hsr_slave_1: entered promiscuous mode
[  259.418962][ T7259] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  259.447397][ T7259] Cannot create hsr debugfs directory
[  259.513471][ T7456] FAULT_INJECTION: forcing a failure.
[  259.513471][ T7456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  259.572403][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: syz.0.362 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  259.572433][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  259.572444][ T7456] Call Trace:
[  259.572453][ T7456]  <TASK>
[  259.572462][ T7456]  dump_stack_lvl+0x189/0x250
[  259.572492][ T7456]  ? __pfx____ratelimit+0x10/0x10
[  259.572515][ T7456]  ? __pfx_dump_stack_lvl+0x10/0x10
[  259.572537][ T7456]  ? __pfx__printk+0x10/0x10
[  259.572563][ T7456]  ? __might_fault+0xb0/0x130
[  259.572596][ T7456]  should_fail_ex+0x414/0x560
[  259.572621][ T7456]  _copy_from_user+0x2d/0xb0
[  259.572649][ T7456]  kstrtouint_from_user+0xc4/0x170
[  259.572677][ T7456]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  259.572720][ T7456]  proc_fail_nth_write+0x88/0x240
[  259.572745][ T7456]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  259.572774][ T7456]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  259.572800][ T7456]  vfs_write+0x27e/0xa90
[  259.572838][ T7456]  ? __pfx_vfs_write+0x10/0x10
[  259.572860][ T7456]  ? __fget_files+0x2a/0x420
[  259.572888][ T7456]  ? __fget_files+0x3a0/0x420
[  259.572909][ T7456]  ? __fget_files+0x2a/0x420
[  259.572943][ T7456]  ksys_write+0x145/0x250
[  259.572966][ T7456]  ? __pfx_ksys_write+0x10/0x10
[  259.572993][ T7456]  ? do_syscall_64+0xbe/0x3b0
[  259.573030][ T7456]  do_syscall_64+0xfa/0x3b0
[  259.573050][ T7456]  ? lockdep_hardirqs_on+0x9c/0x150
[  259.573071][ T7456]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.573091][ T7456]  ? clear_bhb_loop+0x60/0xb0
[  259.573116][ T7456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.573135][ T7456] RIP: 0033:0x7f23be98d69f
[  259.573153][ T7456] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  259.573171][ T7456] RSP: 002b:00007f23bcbd5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  259.573193][ T7456] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f23be98d69f
[  259.573207][ T7456] RDX: 0000000000000001 RSI: 00007f23bcbd50a0 RDI: 0000000000000005
[  259.573219][ T7456] RBP: 00007f23bcbd5090 R08: 0000000000000000 R09: 0000000000000000
[  259.573231][ T7456] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  259.573242][ T7456] R13: 00007f23bebb6218 R14: 00007f23bebb6180 R15: 00007ffdbe21f378
[  259.573277][ T7456]  </TASK>
[  260.414334][ T7259] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  260.958481][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'.
[  264.064239][ T7259] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  264.103248][ T7259] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  264.267236][ T7259] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  266.124030][ T7259] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.138736][ T7506] netlink: 'syz.2.372': attribute type 1 has an invalid length.
[  267.082700][ T7259] 8021q: adding VLAN 0 to HW filter on device team0
[  267.268888][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.276301][ T6510] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.852159][ T7524] loop2: detected capacity change from 0 to 7
[  267.853854][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.865762][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.872613][ T7524] Dev loop2: unable to read RDB block 7
[  267.883746][ T7524]  loop2: AHDI p2 p3
[  267.893862][ T7524] loop2: partition table partially beyond EOD, truncated
[  268.107587][ T7524] loop2: p3 start 335544320 is beyond EOD, truncated
[  268.228600][ T7259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  272.136380][ T7259] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.192573][ T7572] xt_CT: No such helper "netbios-ns"
[  272.802070][ T7592] 8021q: adding VLAN 0 to HW filter on device bond1
[  274.845427][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.396'.
[  275.238302][ T7259] veth0_vlan: entered promiscuous mode
[  275.334805][ T7259] veth1_vlan: entered promiscuous mode
[  275.497518][ T7259] veth0_macvtap: entered promiscuous mode
[  275.515291][ T7259] veth1_macvtap: entered promiscuous mode
[  275.901132][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.012276][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_1
[  276.314110][ T7259] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.440724][ T7259] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.504692][ T7259] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.540979][ T7259] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.102112][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'.
[  277.170491][ T7652] netlink: 'syz.3.401': attribute type 11 has an invalid length.
[  277.178416][ T7652] netlink: 'syz.3.401': attribute type 11 has an invalid length.
[  277.186459][ T7652] netlink: 224 bytes leftover after parsing attributes in process `syz.3.401'.
[  277.258359][ T7653] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  278.171816][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.207285][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.522740][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.187423][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.442371][ T7699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'.
[  283.406441][   T30] kauditd_printk_skb: 38 callbacks suppressed
[  283.406463][   T30] audit: type=1326 audit(1755336326.459:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad8ebe9 code=0x7ffc0000
[  283.680563][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.418'.
[  283.725809][   T30] audit: type=1326 audit(1755336326.459:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad8ebe9 code=0x7ffc0000
[  283.907783][ T1210] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  284.218762][   T30] audit: type=1326 audit(1755336326.489:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7718 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be98ebe9 code=0x7ffc0000
[  284.264602][   T30] audit: type=1326 audit(1755336326.489:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7718 comm="syz.0.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23be98ebe9 code=0x7ffc0000
[  284.302724][   T30] audit: type=1326 audit(1755336326.499:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8bcad8ebe9 code=0x7ffc0000
[  284.471306][ T1210] usb 4-1: Using ep0 maxpacket: 16
[  284.478855][ T1210] usb 4-1: too many endpoints for config 1 interface 0 altsetting 127: 254, using maximum allowed: 30
[  284.503565][ T1210] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11
[  284.539932][   T30] audit: type=1326 audit(1755336326.499:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad8ebe9 code=0x7ffc0000
[  284.583422][ T1210] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  284.644077][ T1210] usb 4-1: config 1 interface 0 has no altsetting 0
[  284.647046][   T30] audit: type=1326 audit(1755336326.499:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad8ebe9 code=0x7ffc0000
[  284.667502][ T1210] usb 4-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.40
[  284.823389][   T30] audit: type=1326 audit(1755336326.499:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8bcad8ebe9 code=0x7ffc0000
[  284.896847][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.897725][   T30] audit: type=1326 audit(1755336326.509:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bcad8ebe9 code=0x7ffc0000
[  284.961422][ T1210] usb 4-1: Product: syz
[  284.993223][ T1210] usb 4-1: Manufacturer: syz
[  285.007743][   T30] audit: type=1326 audit(1755336326.509:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f8bcad8ebe9 code=0x7ffc0000
[  285.029554][ T1210] usb 4-1: SerialNumber: syz
[  285.224701][ T7738] loop2: detected capacity change from 0 to 7
[  285.244493][ T7738] Dev loop2: unable to read RDB block 7
[  285.273290][ T1210] usbhid 4-1:1.0: can't add hid device: -71
[  285.291891][ T1210] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  285.317070][ T7738]  loop2: AHDI p2 p3
[  285.343764][ T7738] loop2: partition table partially beyond EOD, truncated
[  285.359791][ T1210] usb 4-1: USB disconnect, device number 7
[  285.585661][ T7738] loop2: p3 start 335544320 is beyond EOD, truncated
[  286.957834][ T7752] netlink: 44 bytes leftover after parsing attributes in process `syz.0.425'.
[  288.154748][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.429'.
[  288.556352][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  288.556407][   T30] audit: type=1326 audit(1755336331.609:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.5.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ca598ebe9 code=0x7ffc0000
[  288.975189][   T30] audit: type=1326 audit(1755336331.759:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.5.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca598ebe9 code=0x7ffc0000
[  289.091616][   T30] audit: type=1326 audit(1755336331.769:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.5.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5ca598ebe9 code=0x7ffc0000
[  289.167467][ T5826] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  289.303257][   T30] audit: type=1326 audit(1755336331.919:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.5.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca598ebe9 code=0x7ffc0000
[  289.331548][   T30] audit: type=1326 audit(1755336331.919:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.5.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5ca598ebe9 code=0x7ffc0000
[  289.363442][   T30] audit: type=1326 audit(1755336331.919:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.5.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca598ebe9 code=0x7ffc0000
[  290.508838][   T30] audit: type=1326 audit(1755336331.919:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.5.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca598ebe9 code=0x7ffc0000
[  290.545831][ T5826] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f
[  290.566928][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.585547][   T30] audit: type=1326 audit(1755336331.929:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.5.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5ca598ebe9 code=0x7ffc0000
[  291.506137][ T5826] usb 3-1: Product: syz
[  291.537240][ T5826] usb 3-1: Manufacturer: syz
[  291.541913][ T5826] usb 3-1: SerialNumber: syz
[  291.585463][ T5826] usb 3-1: config 0 descriptor??
[  291.591117][   T30] audit: type=1326 audit(1755336331.929:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.5.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca598ebe9 code=0x7ffc0000
[  291.637373][ T5826] usb 3-1: can't set config #0, error -71
[  291.687545][ T5826] usb 3-1: USB disconnect, device number 9
[  291.695733][   T30] audit: type=1326 audit(1755336331.929:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7776 comm="syz.5.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca598ebe9 code=0x7ffc0000
[  292.249407][ T7799] batadv1: entered promiscuous mode
[  295.338739][ T7825] xt_CT: No such helper "netbios-ns"
[  295.831496][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'.
[  298.977232][ T5844] Bluetooth: hci2: command 0x0406 tx timeout
[  302.639787][ T7906] netlink: 292 bytes leftover after parsing attributes in process `syz.5.463'.
[  303.397301][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  303.397320][   T30] audit: type=1326 audit(1755336346.449:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7910 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  303.591887][ T7914] loop2: detected capacity change from 0 to 7
[  303.632985][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.5.467'.
[  303.702409][   T30] audit: type=1326 audit(1755336346.449:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7910 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  303.724720][   T30] audit: type=1326 audit(1755336346.499:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7910 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  303.930466][ T7914] Dev loop2: unable to read RDB block 7
[  304.085350][ T7914]  loop2: AHDI p2 p3
[  304.120691][ T7914] loop2: partition table partially beyond EOD, truncated
[  304.144263][   T30] audit: type=1326 audit(1755336346.499:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7910 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  304.169824][ T7914] loop2: p3 start 335544320 is beyond EOD, truncated
[  304.186655][   T30] audit: type=1326 audit(1755336346.499:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7910 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  304.213301][   T30] audit: type=1326 audit(1755336346.499:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7910 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  304.301286][   T30] audit: type=1326 audit(1755336346.499:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7910 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  304.496327][   T30] audit: type=1326 audit(1755336346.499:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7910 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  304.617321][   T30] audit: type=1326 audit(1755336346.509:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7910 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  304.708925][   T30] audit: type=1326 audit(1755336346.509:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7910 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9c38ebe9 code=0x7ffc0000
[  309.417277][ T7962] Cannot find add_set index 0 as target
[  310.168751][ T7958] No such timeout policy "syz0"
[  310.483727][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  310.483748][   T30] audit: type=1326 audit(1755336353.539:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  311.134287][   T30] audit: type=1326 audit(1755336353.579:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  311.212841][   T30] audit: type=1326 audit(1755336353.589:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  311.464045][   T30] audit: type=1326 audit(1755336353.589:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  311.646633][   T30] audit: type=1326 audit(1755336353.589:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  313.939922][   T30] audit: type=1326 audit(1755336353.589:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  313.962574][   T30] audit: type=1326 audit(1755336353.589:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  314.102294][   T30] audit: type=1326 audit(1755336353.589:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  314.234210][   T30] audit: type=1326 audit(1755336353.589:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  314.255836][   T30] audit: type=1326 audit(1755336353.589:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  316.466356][ T5826] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  316.695578][ T8018] netlink: 20 bytes leftover after parsing attributes in process `syz.5.493'.
[  316.943966][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11
[  317.096313][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024
[  317.278383][ T5826] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  317.282670][ T8018] syz_tun: entered promiscuous mode
[  317.407966][ T8018] syz_tun: left promiscuous mode
[  317.408007][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  317.432215][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  317.465179][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.555737][ T5826] usb 4-1: config 0 descriptor??
[  317.643949][ T5826] usb 4-1: can't set config #0, error -71
[  317.666058][ T5826] usb 4-1: USB disconnect, device number 8
[  317.790881][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  317.790901][   T30] audit: type=1326 audit(1755336360.849:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  318.088331][   T30] audit: type=1326 audit(1755336360.889:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  318.112188][   T30] audit: type=1326 audit(1755336360.899:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  318.572341][   T30] audit: type=1326 audit(1755336360.899:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  318.729703][   T30] audit: type=1326 audit(1755336360.899:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  318.786205][   T30] audit: type=1326 audit(1755336360.909:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  319.016981][   T30] audit: type=1326 audit(1755336360.909:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  319.117780][ T1210] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  319.243263][   T30] audit: type=1326 audit(1755336360.909:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  319.284430][ T8029] sp0: Synchronizing with TNC
[  319.327297][   T30] audit: type=1326 audit(1755336360.909:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  319.352419][   T30] audit: type=1326 audit(1755336360.909:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8024 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a32f8ebe9 code=0x7ffc0000
[  319.523127][ T1210] usb 1-1: Using ep0 maxpacket: 16
[  319.552798][ T1210] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  319.567392][ T1210] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  319.639918][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  319.687712][ T1210] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  319.714324][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.757213][ T1210] usb 1-1: Product: syz
[  319.785723][ T1210] usb 1-1: Manufacturer: syz
[  319.811241][ T1210] usb 1-1: SerialNumber: syz
[  321.079343][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  321.350419][ T1210] usb 1-1: 0:2 : does not exist
[  322.023741][ T1210] usb 1-1: USB disconnect, device number 14
[  322.254571][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  322.344550][ T8072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.504'.
[  322.647663][ T5905] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  322.863902][ T5905] usb 4-1: config 0 has an invalid interface number: 200 but max is 0
[  323.209189][ T5905] usb 4-1: config 0 has no interface number 0
[  323.397966][ T5905] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  323.605153][ T5905] usb 4-1: config 0 interface 200 has no altsetting 0
[  323.650818][ T5905] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  323.699147][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.183204][ T5905] usb 4-1: Product: syz
[  324.207221][ T5905] usb 4-1: Manufacturer: syz
[  324.222899][ T5905] usb 4-1: SerialNumber: syz
[  324.263513][ T5905] usb 4-1: config 0 descriptor??
[  326.439988][ T5905] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input8
[  326.676006][ T5905] usb 4-1: USB disconnect, device number 9
[  331.843625][ T8142] netlink: 292 bytes leftover after parsing attributes in process `syz.2.519'.
[  335.864333][ T5826] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  336.187316][ T5826] usb 3-1: Using ep0 maxpacket: 32
[  336.205062][ T5826] usb 3-1: config 0 interface 0 has no altsetting 0
[  337.205128][ T5826] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  337.289036][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.353056][ T5826] usb 3-1: Product: syz
[  337.374121][ T5826] usb 3-1: Manufacturer: syz
[  337.399166][ T5826] usb 3-1: SerialNumber: syz
[  337.444488][ T5826] usb 3-1: config 0 descriptor??
[  337.916974][ T5826] gs_usb 3-1:0.0: Couldn't get device config: (err=-71)
[  337.927009][ T5826] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71
[  337.975429][ T5826] usb 3-1: USB disconnect, device number 10
[  338.258795][ T8220] syzkaller1: tun_chr_ioctl cmd 1074025677
[  338.437663][ T8220] syzkaller1: linktype set to 778
[  339.402781][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.848759][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.947488][ T5905] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  340.137611][ T5905] usb 1-1: Using ep0 maxpacket: 16
[  340.302993][ T8242] netlink: 292 bytes leftover after parsing attributes in process `syz.3.544'.
[  340.643732][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.684149][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.775531][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  341.309479][ T5905] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  341.338580][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.415985][ T5905] usb 1-1: config 0 descriptor??
[  341.577959][ T8254] netlink: 'syz.2.547': attribute type 1 has an invalid length.
[  341.676108][ T5905] usbhid 1-1:0.0: can't add hid device: -71
[  341.682717][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  341.694579][ T5905] usb 1-1: USB disconnect, device number 15
[  342.127417][ T8254] 8021q: adding VLAN 0 to HW filter on device bond1
[  342.431105][ T8259] bond1: (slave gretap1): making interface the new active one
[  342.513980][ T8259] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  342.964339][ T8273] binder: BINDER_SET_CONTEXT_MGR already set
[  343.016487][ T8273] binder: 8268:8273 ioctl 4018620d 200000000040 returned -16
[  343.407497][ T5826] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  343.852422][ T5826] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  343.897367][ T5826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  343.967469][ T5826] usb 2-1: config 0 has no interface number 0
[  344.030691][ T5826] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  344.061575][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.073578][ T5826] usb 2-1: Product: syz
[  344.078329][ T5826] usb 2-1: Manufacturer: syz
[  344.093414][ T5826] usb 2-1: SerialNumber: syz
[  344.116319][ T5826] usb 2-1: config 0 descriptor??
[  344.188053][ T5826] hub 2-1:0.31: bad descriptor, ignoring hub
[  344.214580][ T5826] hub 2-1:0.31: probe with driver hub failed with error -5
[  344.240549][ T5826] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[  344.263330][ T5826] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized!
[  344.433033][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.780216][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  345.211600][ T5826] usb 2-1: Failed to create links for entity 6
[  345.236058][ T5826] usb 2-1: Failed to register entities (-22).
[  345.333670][ T5826] usb 2-1: USB disconnect, device number 12
[  347.448359][ T8325] Cannot find add_set index 0 as target
[  347.778863][ T5924] ------------[ cut here ]------------
[  347.785208][ T5924] WARNING: CPU: 1 PID: 5924 at kernel/cgroup/rstat.c:314 css_rstat_flush+0x76f/0x1fa0
[  347.794813][ T5924] Modules linked in:
[  347.799590][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: kworker/1:4 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  347.809629][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  347.819737][ T5924] Workqueue: cgroup_destroy css_free_rwork_fn
[  347.825877][ T5924] RIP: 0010:css_rstat_flush+0x76f/0x1fa0
[  347.831654][ T5924] Code: df 80 3c 08 00 74 08 4c 89 e7 e8 ec 04 67 00 49 8b 1c 24 48 3b 5c 24 38 74 22 e8 9c 1d 07 00 e9 72 ff ff ff e8 92 1d 07 00 90 <0f> 0b 90 eb bd e8 87 1d 07 00 45 31 e4 e9 bb 03 00 00 e8 7a 1d 07
[  347.851305][ T5924] RSP: 0018:ffffc9000af67780 EFLAGS: 00010093
[  347.857392][ T5924] RAX: ffffffff81b9082e RBX: ffff88814d805000 RCX: ffff888030335a00
[  347.865383][ T5924] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0
[  347.873363][ T5924] RBP: ffffc9000af679b8 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e
[  347.881616][ T5924] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffe8ffffc228b8
[  347.890027][ T5924] R13: ffff88814d805000 R14: ffffffff8dba8c70 R15: ffff888125c57008
[  347.898015][ T5924] FS:  0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
[  347.907079][ T5924] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  347.913697][ T5924] CR2: 0000560781d84660 CR3: 0000000033d90000 CR4: 00000000003526f0
[  347.921792][ T5924] Call Trace:
[  347.925100][ T5924]  <TASK>
[  347.928094][ T5924]  ? kasan_save_track+0x3e/0x80
[  347.932968][ T5924]  ? kasan_save_free_info+0x46/0x50
[  347.938206][ T5924]  ? process_scheduled_works+0xade/0x17b0
[  347.944169][ T5924]  ? worker_thread+0x8a0/0xda0
[  347.948934][ T5924]  ? ret_from_fork+0x3fc/0x770
[  347.953724][ T5924]  ? ret_from_fork_asm+0x1a/0x30
[  347.958702][ T5924]  ? __pfx_css_rstat_flush+0x10/0x10
[  347.964067][ T5924]  ? lockdep_hardirqs_on+0x9c/0x150
[  347.969546][ T5924]  css_rstat_exit+0xa9/0x320
[  347.974183][ T5924]  ? css_free_rwork_fn+0x88/0xb80
[  347.979221][ T5924]  ? percpu_ref_exit+0x194/0x1c0
[  347.984168][ T5924]  css_free_rwork_fn+0x90/0xb80
[  347.989033][ T5924]  ? process_scheduled_works+0x9ef/0x17b0
[  347.995026][ T5924]  ? process_scheduled_works+0x9ef/0x17b0
[  348.000873][ T5924]  process_scheduled_works+0xade/0x17b0
[  348.006460][ T5924]  ? __pfx_process_scheduled_works+0x10/0x10
[  348.012457][ T5924]  worker_thread+0x8a0/0xda0
[  348.017057][ T5924]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  348.023400][ T5924]  ? __kthread_parkme+0x7b/0x200
[  348.028553][ T5924]  kthread+0x70e/0x8a0
[  348.032728][ T5924]  ? __pfx_worker_thread+0x10/0x10
[  348.037847][ T5924]  ? __pfx_kthread+0x10/0x10
[  348.042548][ T5924]  ? _raw_spin_unlock_irq+0x23/0x50
[  348.047837][ T5924]  ? lockdep_hardirqs_on+0x9c/0x150
[  348.053033][ T5924]  ? __pfx_kthread+0x10/0x10
[  348.057630][ T5924]  ret_from_fork+0x3fc/0x770
[  348.062224][ T5924]  ? __pfx_ret_from_fork+0x10/0x10
[  348.067354][ T5924]  ? __switch_to_asm+0x39/0x70
[  348.072617][ T5924]  ? __switch_to_asm+0x33/0x70
[  348.077424][ T5924]  ? __pfx_kthread+0x10/0x10
[  348.082036][ T5924]  ret_from_fork_asm+0x1a/0x30
[  348.086921][ T5924]  </TASK>
[  348.090042][ T5924] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  348.097425][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: kworker/1:4 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  348.107528][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  348.117602][ T5924] Workqueue: cgroup_destroy css_free_rwork_fn
[  348.123782][ T5924] Call Trace:
[  348.127110][ T5924]  <TASK>
[  348.130107][ T5924]  dump_stack_lvl+0x99/0x250
[  348.134722][ T5924]  ? __asan_memcpy+0x40/0x70
[  348.139352][ T5924]  ? __pfx_dump_stack_lvl+0x10/0x10
[  348.144564][ T5924]  ? __pfx__printk+0x10/0x10
[  348.149171][ T5924]  panic+0x2db/0x790
[  348.153348][ T5924]  ? __pfx_panic+0x10/0x10
[  348.157765][ T5924]  ? show_trace_log_lvl+0x4fb/0x550
[  348.162975][ T5924]  ? ret_from_fork_asm+0x1a/0x30
[  348.167980][ T5924]  __warn+0x31b/0x4b0
[  348.172001][ T5924]  ? css_rstat_flush+0x76f/0x1fa0
[  348.177055][ T5924]  ? css_rstat_flush+0x76f/0x1fa0
[  348.182199][ T5924]  report_bug+0x2be/0x4f0
[  348.186619][ T5924]  ? css_rstat_flush+0x76f/0x1fa0
[  348.191662][ T5924]  ? css_rstat_flush+0x76f/0x1fa0
[  348.196696][ T5924]  ? css_rstat_flush+0x771/0x1fa0
[  348.201726][ T5924]  handle_bug+0x84/0x160
[  348.206091][ T5924]  exc_invalid_op+0x1a/0x50
[  348.210631][ T5924]  asm_exc_invalid_op+0x1a/0x20
[  348.215485][ T5924] RIP: 0010:css_rstat_flush+0x76f/0x1fa0
[  348.221140][ T5924] Code: df 80 3c 08 00 74 08 4c 89 e7 e8 ec 04 67 00 49 8b 1c 24 48 3b 5c 24 38 74 22 e8 9c 1d 07 00 e9 72 ff ff ff e8 92 1d 07 00 90 <0f> 0b 90 eb bd e8 87 1d 07 00 45 31 e4 e9 bb 03 00 00 e8 7a 1d 07
[  348.241465][ T5924] RSP: 0018:ffffc9000af67780 EFLAGS: 00010093
[  348.247557][ T5924] RAX: ffffffff81b9082e RBX: ffff88814d805000 RCX: ffff888030335a00
[  348.255534][ T5924] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0
[  348.263619][ T5924] RBP: ffffc9000af679b8 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e
[  348.271625][ T5924] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffe8ffffc228b8
[  348.279785][ T5924] R13: ffff88814d805000 R14: ffffffff8dba8c70 R15: ffff888125c57008
[  348.287970][ T5924]  ? css_rstat_flush+0x76e/0x1fa0
[  348.293076][ T5924]  ? kasan_save_track+0x3e/0x80
[  348.297962][ T5924]  ? kasan_save_free_info+0x46/0x50
[  348.303165][ T5924]  ? process_scheduled_works+0xade/0x17b0
[  348.308901][ T5924]  ? worker_thread+0x8a0/0xda0
[  348.313718][ T5924]  ? ret_from_fork+0x3fc/0x770
[  348.318527][ T5924]  ? ret_from_fork_asm+0x1a/0x30
[  348.323531][ T5924]  ? __pfx_css_rstat_flush+0x10/0x10
[  348.328835][ T5924]  ? lockdep_hardirqs_on+0x9c/0x150
[  348.334088][ T5924]  css_rstat_exit+0xa9/0x320
[  348.338702][ T5924]  ? css_free_rwork_fn+0x88/0xb80
[  348.343732][ T5924]  ? percpu_ref_exit+0x194/0x1c0
[  348.348679][ T5924]  css_free_rwork_fn+0x90/0xb80
[  348.353541][ T5924]  ? process_scheduled_works+0x9ef/0x17b0
[  348.359277][ T5924]  ? process_scheduled_works+0x9ef/0x17b0
[  348.365430][ T5924]  process_scheduled_works+0xade/0x17b0
[  348.371082][ T5924]  ? __pfx_process_scheduled_works+0x10/0x10
[  348.377092][ T5924]  worker_thread+0x8a0/0xda0
[  348.381715][ T5924]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  348.388057][ T5924]  ? __kthread_parkme+0x7b/0x200
[  348.393010][ T5924]  kthread+0x70e/0x8a0
[  348.397088][ T5924]  ? __pfx_worker_thread+0x10/0x10
[  348.402337][ T5924]  ? __pfx_kthread+0x10/0x10
[  348.406934][ T5924]  ? _raw_spin_unlock_irq+0x23/0x50
[  348.412139][ T5924]  ? lockdep_hardirqs_on+0x9c/0x150
[  348.417345][ T5924]  ? __pfx_kthread+0x10/0x10
[  348.421956][ T5924]  ret_from_fork+0x3fc/0x770
[  348.426551][ T5924]  ? __pfx_ret_from_fork+0x10/0x10
[  348.431754][ T5924]  ? __switch_to_asm+0x39/0x70
[  348.436536][ T5924]  ? __switch_to_asm+0x33/0x70
[  348.441304][ T5924]  ? __pfx_kthread+0x10/0x10
[  348.446072][ T5924]  ret_from_fork_asm+0x1a/0x30
[  348.450870][ T5924]  </TASK>
[  348.454274][ T5924] Kernel Offset: disabled
[  348.458792][ T5924] Rebooting in 86400 seconds..