last executing test programs:

9m18.323748077s ago: executing program 1 (id=2):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000200)=[{0x7, 0x14001, 0x1, &(0x7f0000000140)='+'}], 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000))
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000700)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc6}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
fanotify_init(0x8, 0x80000)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)

9m15.417340818s ago: executing program 1 (id=7):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000200))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x1, 0x0, 0xfd8b, 0x5})
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x28)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000020601010000000000000000030040000e0003006269746d61703a697000000005000400000000000900020073797a300000000028000780180002801400024000000000000000000000ff"], 0x70}}, 0x8000)
mprotect(&(0x7f00001b0000/0x4000)=nil, 0x4000, 0x9)
futex(0x0, 0x0, 0x4001, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0)
r1 = io_uring_setup(0x1f8f, &(0x7f0000000180)={0x0, 0x62a5, 0x20, 0x3, 0x3a7})
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x8000, 0x8, 0x200, "6d8c0f72aa9ec6bd58fc76d07ceb40a8273e5ccc854ff7055e43ceebb2b24a30", 0x32314247})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280), 0x0)
r3 = fsopen(&(0x7f0000000300)='ocfs2_dlmfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001f80)='source\x00\xb5\x83\xdf\x10\x9a\xf2Rm\xb6\xe0\xd9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x0f\x00\x00\x00bF\xec\x00\x00\x00\x00\x00\x00\xe9\xff\xff\xff\x00\x00\x00\x00\x00\xad\xf0\xd1}u2xn\x8c\xaca\xac\x9e\xed\x0e\x06I\a0\xab\xa8\x97\xd9i\x98\x05\x9d\xcez\xab\xbc@\xd6f\xcd\xcd\x00\x00\x00\x00\x00=W\x92\xdad%\xa3\xf8\x1c\xb4\xb7\xe2E/\xb2\x93g\x1b\xa6OF\x03\xd0@1V\xb6On,\xfeDK\x91\x10\xb2<\xa5\xb1=\x93\x81\x84 \"c\xcb\xa2\x9bp\xa4\x17D\xd9\xa3g\xea\xd2.*\x1dX\xf3\x81\"\xb9iiL\x18U\x95F\xa6MZ\xfe\xee\xf8j5;M\x9f\x03\x1f\x94\xfe\xcb\xe1O{\x0333,\x00N1\xf1*m\x1a\xac\xaa7N\x81=d\x1b\xc3\xc5\x0f1H\x17\xf6\xa4 \x9e\\\xe9\r\x06\x7f\x81\xe1Yx\x88\b\xc49A6\xeb\xd3D\xeb\xe5\xce\x91\xf0z\xa1:\xa4\n@\x80@\x86E\x9d\xcb\x89\x9aK\xa3\xd8\xfb\xd6\xef=\xed\x9b\r\xccys\xef\x0fS\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Kq%\x12wk\xf7\xd7/\x06\xb2\xeb\x8d\r\xf1\xf1\xcfp\xacs:\xb8\xa7I\xf1.B\xd1%\xbd\xa8\x1a\x84\xd8\x11y|\x12\x9dK&.\x8bO\x93Q\x18v~iN\x93\x10\xdfx*<\x939\xe2k\x84QU\xad\xd5\xc1*5\x81\xf2\x02\x05\rW]\b]|\xbe\v\xb2\xbf\x9a\x9a\xba\xe7\'\x9c\xf6\x97\xff\xeb4\x17OX\xfa\x8a\x8djK\x1d\xea\xfc\x99n\x9f\xac\x9f\x17\xffp\x04]\xb8\a;\xbc[\xfbwL\xc4\nY\x8f\xea\x99 Bj\xb8\x99\x10q/\xddBb\x91\xe1\xfb\x01s\xbe\xdf\x98\xcd\x9e\xf4gn\x11i\xa7_\x1c\x03\x9b \x1c|\f\xbc\xb6\xb5(\xaa\xc7\x03\xc5\xd7\xe0)-e\xff\xbcc\x92\xc7\xcd\xdd\xef\xe2\fO\x0f?\xd6\xe5\xe9O\xd1=2\xe2\xfc\xc8H\x8c\xb2\xdf\x8e\xdaul0kF\x1c\x8f\xceb\xbb\xae7\x06\xe8\xdcO}\xa6', &(0x7f0000002400)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\az\xbfe\xadS\x17\x92\xc5\x01b3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+.\x94?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x01\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0s\xd3\xc30]\xad\x03\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\r\xd4\xcdK\xd5\xad\x12\xc8\x99{\xb3\x87RO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1\xd5`\xccY\xb5\xa2\xc5\xc9\x9c1\xbe\xe9\x93v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa6\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xff\x00\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xca\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xd5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\x7f8\x8d\xcd\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\x98\xa1\xa7\xc7\xc1\x16\x1a\x86r \xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4o\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa8\x99\x01\xe5\x9d\x16f\f6X\xeb\xd8*\x92\xd9\xaeqB\xbe\x1f\xf2\x9b\xf0\'\xaah\xcc\x02\x01\xf4\xff\xc47\x16%H \xf5D\x9dqh0[\x9b`k\xd7~\x8f\xa1\xae\xd7\x06\x1e\x85\xa9fr\xac[I\x87\\X\xd3\x80\xf5fZK\xf9\x03\xaaM\xd0\xc4\x81\x87\xbe\n\xd3\xd5\xa88\x0e\x99F{z\x97\xb1p/\xc5!\a1\x82\x1b\x9c8%.\xb2\xfdC\xfa\xfau\x04(\xb8\x97\xda02\xcd\xec$/\xde\xc3\xfd\x1d=,?B\xe9U\xaek\xbd-\x9f\xf3Mog\xfaui\x98)N\x92\xdd@\x04\xc3(\x1e', 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'})
sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20010040}, 0x40000)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), r4)
ioctl$int_in(r0, 0x5452, &(0x7f0000001080)=0x3)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB, @ANYRES16=r2], 0x100}, 0x1, 0x0, 0x0, 0x20}, 0x0)
write(r0, &(0x7f0000000080)='g', 0x1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x7fff, 0x16, "cde83056f560f23863ea59d800"})

9m14.407729336s ago: executing program 1 (id=9):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xffff, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2}, "d33cffd98794e48a"}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x28)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f000003b000/0x3000)=nil, &(0x7f00000d9000/0x3000)=nil, &(0x7f000015a000/0x1000)=nil, &(0x7f000019c000/0x3000)=nil, &(0x7f0000171000/0x2000)=nil, &(0x7f0000051000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001c2000/0x4000)=nil, &(0x7f0000197000/0x2000)=nil, &(0x7f000009b000/0x3000)=nil, &(0x7f000019f000/0x14000)=nil, &(0x7f0000000280)="55278e3acd3ca98bea22d2c804492c3a2f19187aa3f5707b99981566b150754d580f330c217fe9ec1bc1ff42f41cfcc14724bcf5912e5a1fd1c5e2e6dbf9fe96c5219b277ec4617287ec6486e4baad3c1691c05411df7c6a2898b96c6cf8e5378061818a", 0x64, r0}, 0x68)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0)
mq_timedreceive(r1, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x80}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0)

9m13.87311259s ago: executing program 1 (id=10):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000042000102"], 0x14}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000664000/0x4000)=nil, 0x4000, 0x41cfd0cf6cffeba1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)={0x7c, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xa}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80041}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
syz_open_dev$usbfs(0x0, 0x205, 0x8401)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x1000010, &(0x7f0000000500)={[{@xattr}]})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000002280)=ANY=[@ANYBLOB="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", @ANYRES64=r6], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10}, 0x94)

9m11.096734512s ago: executing program 1 (id=11):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000004c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX])
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r4, 0x0, 0x0, 0x0)
open_by_handle_at(r5, &(0x7f0000000540)=@raw={0xa4, 0x4f, {"0a5cc519c1b18c16e3ebdefb74e5c40868e513ebdb88fad3418ddf22ecac2ad1b4a77a5fc23c90e8731b78c24c74c685350520aeb68b2ce02d5f594c9ee499454ea8bc7ebe908d4e064dbd0214ac1dcd834fd27dc95a0ccd0ebbe951000000000000000000000000008000004fc5d36e4b235d2203d7bc4cab63011677040ede98a8f9eb86bbb227bc07682314ab2b12a0e9b5c2f391fb87c615014fb709e970ce280323"}}, 0x840)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000340))
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)

9m9.6298283s ago: executing program 1 (id=14):
r0 = syz_open_dev$usbfs(&(0x7f0000000540), 0xfffffffffffffffc, 0x800)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0xb4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c501000000000000009684d4412d623379657c74a6577fbec0f7758c31996cd13f318571d32d9ba757f3e488333353cb1b6b706ba2950e1e504a1ce15bd18b9e573616b26e9a599c153b794d1a592ce7a421ff3d68512d0278e3255e39ff03c2e3ce91f1fb7084ecec6f8416c38160f738b3c9c6fdff594dd779859189742921425a2b29c6060000000000000080", @ANYRES16=<r5=>r2, @ANYRES16=<r6=>r1, @ANYRESOCT=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r6, @ANYBLOB="000129bd7000fddbdf253d00000008000300", @ANYRESHEX=0x0, @ANYBLOB="520b8375343a74102955fe52a2d30000", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES8, @ANYRES16], 0x64}}, 0x20004840)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0x2)
socket(0x18, 0x80000, 0x3)
ioctl$PPPIOCGIDLE(r7, 0x4004743c, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000600)={0x5, 0x6, 0x2ff, 0xb8e, 0x51, 0x1050, 0x0})
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000)
r9 = socket$inet6(0xa, 0x1, 0x0)
timer_create(0x8, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r5], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020)
bind$inet6(r9, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r9, 0x0, 0x0, 0x2000088c, &(0x7f00000003c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0xa)
r11 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0xffffffff, 0x51}, &(0x7f0000000100)=<r12=>0x0, &(0x7f0000000000)=<r13=>0x0, &(0x7f0000000080)=<r14=>0x0)
syz_io_uring_submit(r12, r13, r14, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r9, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x48000, 0x1, {0x2}})
io_uring_enter(r11, 0x2000, 0xfff7fffd, 0xaf, 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r8, 0x7b0, &(0x7f0000000180)={@my=0x0, 0x5})

9m2.714051182s ago: executing program 4 (id=5):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000120001030000000000000000000000004e2150bdcb4d0000000000000000000000000000008014000000000000f9000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000fffffff0000000000800030011"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x3}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x4}, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x4}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x4}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x5}, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@getpolicy={0x0, 0x15, 0x200, 0x70bd2b, 0x25dfdbfe, {{@in=@multicast2, @in6=@mcast2, 0x4e20, 0x52, 0x4e22, 0xe0, 0x2, 0xa0, 0xa0, 0x2}, 0x6e6bb7, 0x1}, [@lifetime_val={0x0, 0x9, {0x1, 0xc, 0xae53, 0x7}}, @tmpl={0x0, 0x5, [{{@in=@broadcast, 0x4d5, 0xff}, 0xa, @in=@loopback, 0x3502, 0x2, 0x0, 0x3, 0x5, 0x80, 0x81}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in6=@private0, 0x3505, 0x1, 0x0, 0x6, 0x7, 0x3, 0x92a}, {{@in6=@mcast2, 0x4d2, 0xff}, 0x2, @in6=@mcast2, 0x3504, 0x3, 0x2, 0x40, 0x9, 0x9, 0x4f}, {{@in=@local, 0x4d4, 0xd4}, 0xa, @in=@rand_addr=0x64010102, 0x3507, 0x2, 0x0, 0x9, 0x4, 0x1, 0x6}, {{@in=@multicast2, 0x4d5, 0x3c}, 0x2, @in6=@local, 0x3503, 0x2, 0x0, 0xd, 0x8, 0x7ff, 0xe}]}, @encap={0x0, 0x4, {0x2, 0x4e22, 0x4e22, @in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}}, @policy={0x0, 0x7, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x80, 0x3b}, {0x4ef, 0x1, 0xfd, 0x200, 0x9, 0x7, 0x3, 0xf1}, {0x7, 0x1, 0x10, 0xf}, 0x5, 0x6e6bb1, 0x1, 0x1, 0x3}}, @extra_flags={0x0, 0x18, 0x5}, @lastused={0x0, 0xf, 0x3}]}, 0x138}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x8}, @in6=@private1={0xfc, 0x1, '\x00', 0x8}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x8}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x8}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000280)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x2c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}, {"bdc7d99ca14d35a1af677219777b1a247aaee7d7dc924118"}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
shmget(0x2, 0x2000, 0x78000000, &(0x7f0000ffd000/0x2000)=nil)
ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000200)={0x16})
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
setgroups(0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r7=>0xffffffffffffffff])
keyctl$chown(0x4, r6, 0xee01, r7)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00\t', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0)

9m0.35104373s ago: executing program 4 (id=21):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in6=@local, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x6, 0xa, 0xa, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x68}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

8m59.783824518s ago: executing program 4 (id=24):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000004c0))
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./debug/tracing/trace_pipe\x00', &(0x7f0000000100), 0x2008040, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX])
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r2, 0x0, 0x0, 0x0)
open_by_handle_at(r3, &(0x7f0000000540)=@raw={0xa4, 0x4f, {"0a5cc519c1b18c16e3ebdefb74e5c40868e513ebdb88fad3418ddf22ecac2ad1b4a77a5fc23c90e8731b78c24c74c685350520aeb68b2ce02d5f594c9ee499454ea8bc7ebe908d4e064dbd0214ac1dcd834fd27dc95a0ccd0ebbe951000000000000000000000000008000004fc5d36e4b235d2203d7bc4cab63011677040ede98a8f9eb86bbb227bc07682314ab2b12a0e9b5c2f391fb87c615014fb709e970ce280323"}}, 0x840)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000340))
syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0)

8m59.119080021s ago: executing program 4 (id=25):
r0 = syz_open_dev$usbfs(&(0x7f0000000540), 0xfffffffffffffffc, 0x800)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0xb4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c501000000000000009684d4412d623379657c74a6577fbec0f7758c31996cd13f318571d32d9ba757f3e488333353cb1b6b706ba2950e1e504a1ce15bd18b9e573616b26e9a599c153b794d1a592ce7a421ff3d68512d0278e3255e39ff03c2e3ce91f1fb7084ecec6f8416c38160f738b3c9c6fdff594dd779859189742921425a2b29c6060000000000000080", @ANYRES16=<r4=>0xffffffffffffffff, @ANYRES16=<r5=>r1, @ANYRESOCT=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r5, @ANYBLOB="000129bd7000fddbdf253d00000008000300", @ANYRESHEX=0x0, @ANYBLOB="520b8375343a74102955fe52a2d30000", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES8, @ANYRES16], 0x64}}, 0x20004840)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)=0x2)
socket(0x18, 0x80000, 0x3)
ioctl$PPPIOCGIDLE(r6, 0x4004743c, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000600)={0x5, 0x6, 0x2ff, 0xb8e, 0x51, 0x1050, 0x0})
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000)
r8 = socket$inet6(0xa, 0x1, 0x0)
timer_create(0x8, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r4], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020)
bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, 0x0, 0x0, 0x2000088c, &(0x7f00000003c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0xa)
r10 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0xffffffff, 0x51}, &(0x7f0000000100)=<r11=>0x0, &(0x7f0000000000)=<r12=>0x0, &(0x7f0000000080)=<r13=>0x0)
syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r8, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x48000, 0x1, {0x2}})
io_uring_enter(r10, 0x2000, 0xfff7fffd, 0xaf, 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r7, 0x7b0, &(0x7f0000000180)={@my=0x0, 0x5})

8m54.228230489s ago: executing program 32 (id=14):
r0 = syz_open_dev$usbfs(&(0x7f0000000540), 0xfffffffffffffffc, 0x800)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0xb4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c501000000000000009684d4412d623379657c74a6577fbec0f7758c31996cd13f318571d32d9ba757f3e488333353cb1b6b706ba2950e1e504a1ce15bd18b9e573616b26e9a599c153b794d1a592ce7a421ff3d68512d0278e3255e39ff03c2e3ce91f1fb7084ecec6f8416c38160f738b3c9c6fdff594dd779859189742921425a2b29c6060000000000000080", @ANYRES16=<r5=>r2, @ANYRES16=<r6=>r1, @ANYRESOCT=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r6, @ANYBLOB="000129bd7000fddbdf253d00000008000300", @ANYRESHEX=0x0, @ANYBLOB="520b8375343a74102955fe52a2d30000", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES8, @ANYRES16], 0x64}}, 0x20004840)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0x2)
socket(0x18, 0x80000, 0x3)
ioctl$PPPIOCGIDLE(r7, 0x4004743c, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000600)={0x5, 0x6, 0x2ff, 0xb8e, 0x51, 0x1050, 0x0})
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000)
r9 = socket$inet6(0xa, 0x1, 0x0)
timer_create(0x8, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r5], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020)
bind$inet6(r9, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r9, 0x0, 0x0, 0x2000088c, &(0x7f00000003c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0xa)
r11 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0xffffffff, 0x51}, &(0x7f0000000100)=<r12=>0x0, &(0x7f0000000000)=<r13=>0x0, &(0x7f0000000080)=<r14=>0x0)
syz_io_uring_submit(r12, r13, r14, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r9, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x48000, 0x1, {0x2}})
io_uring_enter(r11, 0x2000, 0xfff7fffd, 0xaf, 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r8, 0x7b0, &(0x7f0000000180)={@my=0x0, 0x5})

8m42.585938465s ago: executing program 33 (id=25):
r0 = syz_open_dev$usbfs(&(0x7f0000000540), 0xfffffffffffffffc, 0x800)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10}}, 0xb4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="c501000000000000009684d4412d623379657c74a6577fbec0f7758c31996cd13f318571d32d9ba757f3e488333353cb1b6b706ba2950e1e504a1ce15bd18b9e573616b26e9a599c153b794d1a592ce7a421ff3d68512d0278e3255e39ff03c2e3ce91f1fb7084ecec6f8416c38160f738b3c9c6fdff594dd779859189742921425a2b29c6060000000000000080", @ANYRES16=<r4=>0xffffffffffffffff, @ANYRES16=<r5=>r1, @ANYRESOCT=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r5, @ANYBLOB="000129bd7000fddbdf253d00000008000300", @ANYRESHEX=0x0, @ANYBLOB="520b8375343a74102955fe52a2d30000", @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES8, @ANYRES16], 0x64}}, 0x20004840)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)=0x2)
socket(0x18, 0x80000, 0x3)
ioctl$PPPIOCGIDLE(r6, 0x4004743c, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000600)={0x5, 0x6, 0x2ff, 0xb8e, 0x51, 0x1050, 0x0})
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000)
r8 = socket$inet6(0xa, 0x1, 0x0)
timer_create(0x8, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r4], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020)
bind$inet6(r8, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, 0x0, 0x0, 0x2000088c, &(0x7f00000003c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0xa)
r10 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0xffffffff, 0x51}, &(0x7f0000000100)=<r11=>0x0, &(0x7f0000000000)=<r12=>0x0, &(0x7f0000000080)=<r13=>0x0)
syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x28, r8, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='m', 0x1}], 0x1}, 0x40000002, 0x48000, 0x1, {0x2}})
io_uring_enter(r10, 0x2000, 0xfff7fffd, 0xaf, 0x0, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r7, 0x7b0, &(0x7f0000000180)={@my=0x0, 0x5})

2m44.745720918s ago: executing program 0 (id=492):
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
timer_create(0x3, 0x0, &(0x7f0000bbdffc)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timer_gettime(r0, &(0x7f0000000000))

2m44.561909922s ago: executing program 0 (id=493):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(0x0, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
fanotify_init(0x20, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c00018006000600800a000018010280140117800e"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0)
prlimit64(r3, 0x3, &(0x7f00000000c0)={0xffff, 0x5}, &(0x7f0000000200))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xe080, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)

2m42.768440129s ago: executing program 0 (id=494):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000090000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000401000000009898b39b0000000000610c0000000000"], 0x50)
r1 = socket(0xa, 0x3, 0x87)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff)
r3 = openat$cgroup(r2, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
cachestat(r1, 0x0, 0x0, 0x0)
sendto(r1, &(0x7f00000003c0)="e111", 0x2, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x7, 0x402, 0x3631564e, 0x6, 0x0, [{0x4, 0xfffffffe}, {0xf, 0xe}, {0x7, 0x6c3}, {0x1, 0x3}, {0x9, 0xd9c}, {0x6, 0x2}, {0x282, 0x1}, {0x2, 0x8cb}], 0xc, 0x6, 0x8, 0x0, 0x1}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000003ff008018210000000000000000f6800d95ae6333bb58f5fba15f685c2817050f701f62a29aa62ce8c72b009f27e09708efdefbc20e3e0833436ac210a54654f83a55b730f0", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000ce000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3}, 0x94)
socket$kcm(0xa, 0x3, 0x87)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r7=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r7, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)

2m39.726361216s ago: executing program 3 (id=500):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107})
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)=0x200)
write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

2m39.55885389s ago: executing program 0 (id=501):
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
timer_create(0x3, 0x0, &(0x7f0000bbdffc)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timer_gettime(r0, &(0x7f0000000000))

2m39.388217062s ago: executing program 0 (id=502):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(0x0, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
fanotify_init(0x20, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c00018006000600800a000018010280140117800e"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0)
prlimit64(r3, 0x3, &(0x7f00000000c0)={0xffff, 0x5}, &(0x7f0000000200))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xe080, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)

2m36.526469034s ago: executing program 0 (id=505):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=<r0=>0xffffffffffffffff)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xa00000, 0x80000000, 0x401, r0, 0x0, &(0x7f0000000040)={0x990921, 0x80000001, '\x00', @value64=0x9}})
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff)
mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f0000000450)='-2', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e05f1118c"], 0x8)

2m33.415669429s ago: executing program 3 (id=508):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)={0x40, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2fc, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0x10001}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x4)
recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r4=>0x0)
tkill(r4, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, 0xee00, &(0x7f0000000080))
r6 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
futex_waitv(&(0x7f00000025c0)=[{0x9, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001e40)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf251200000008000300", @ANYRES32=r8, @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000000)

2m32.949460621s ago: executing program 3 (id=510):
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
timer_create(0x3, 0x0, &(0x7f0000bbdffc)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timer_gettime(r0, &(0x7f0000000000))

2m32.567370231s ago: executing program 3 (id=512):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
eventfd2(0x800, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYRES64], 0x50) (fail_nth: 1)

2m32.116787022s ago: executing program 3 (id=513):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
getpid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0)
prlimit64(r2, 0x3, &(0x7f00000000c0)={0xffff, 0x5}, &(0x7f0000000200))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xe080, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)

2m30.437996933s ago: executing program 3 (id=515):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
ftruncate(r0, 0xc17a)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=<r1=>0xffffffffffffffff)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0xa00000, 0x80000000, 0x401, r1, 0x0, &(0x7f0000000040)={0x990921, 0x80000001, '\x00', @value64=0x9}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff)
mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='tcp 2049\n', 0x9)
accept4(r2, 0x0, 0x0, 0x800)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

2m21.337116734s ago: executing program 34 (id=505):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=<r0=>0xffffffffffffffff)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xa00000, 0x80000000, 0x401, r0, 0x0, &(0x7f0000000040)={0x990921, 0x80000001, '\x00', @value64=0x9}})
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff)
mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f0000000450)='-2', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e05f1118c"], 0x8)

2m20.420667831s ago: executing program 2 (id=526):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000094000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xe00, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004001d000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1)
ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, 0x0)

2m20.110099113s ago: executing program 2 (id=527):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffbf}}]}, 0x38}}, 0x10)

2m18.22034276s ago: executing program 2 (id=528):
r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, 0x0)

2m17.08935785s ago: executing program 2 (id=529):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xfffffffd, 0x9, 0x20, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="280000000000000001", 0x0, 0x1, 0x0, 0x0, 0x0})

2m16.989825069s ago: executing program 2 (id=530):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
socketpair(0xf, 0x80f, 0x6, &(0x7f0000000ac0))
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
write$P9_RREADLINK(r1, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4)
setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4)
getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240))
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
chdir(&(0x7f0000000140)='./file1\x00')
r3 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
socket$inet_smc(0x2b, 0x1, 0x0)
symlinkat(&(0x7f00000000c0)='./file2\x00', r3, &(0x7f0000000100)='./file2\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000080))

2m16.069747473s ago: executing program 2 (id=531):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=<r1=>0xffffffffffffffff)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0xa00000, 0x80000000, 0x401, r1, 0x0, &(0x7f0000000040)={0x990921, 0x80000001, '\x00', @value64=0x9}})
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff)
mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000450)='-2', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='tcp 2049\n', 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e05f1118c"], 0x8)

2m14.991030649s ago: executing program 35 (id=515):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
ftruncate(r0, 0xc17a)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=<r1=>0xffffffffffffffff)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0xa00000, 0x80000000, 0x401, r1, 0x0, &(0x7f0000000040)={0x990921, 0x80000001, '\x00', @value64=0x9}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff)
mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='tcp 2049\n', 0x9)
accept4(r2, 0x0, 0x0, 0x800)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

2m0.777889341s ago: executing program 36 (id=531):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=<r1=>0xffffffffffffffff)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0xa00000, 0x80000000, 0x401, r1, 0x0, &(0x7f0000000040)={0x990921, 0x80000001, '\x00', @value64=0x9}})
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff)
mount(&(0x7f0000000e40)=@filename='proc\x00', &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000350)='./nfsd/versions\x00', 0x1, 0x0)
write(r2, &(0x7f0000000450)='-2', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='tcp 2049\n', 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e05f1118c"], 0x8)

1m10.603539674s ago: executing program 5 (id=645):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x60004000}, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
r2 = accept$phonet_pipe(r1, &(0x7f0000000100), &(0x7f0000000140)=0x10)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast1, 0x4e20, 0x3, 'dh\x00', 0x1b, 0x10, 0x3f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e24, 0x3, 'dh\x00', 0x0, 0x3240, 0x33}, {@loopback, 0x4e22, 0x10000, 0xc4, 0x12d59, 0x12d5c}}, 0x44)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010003000000000002000100", @ANYRES32=0x0, @ANYBLOB="0400000000000000100005000000000020"], 0x2c, 0x0)
lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x2014010, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_none}], [], 0x6b}})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000002c0)=0x5, 0x4)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040050)

1m8.807147641s ago: executing program 5 (id=649):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ptrace$getenv(0x4201, r0, 0x404, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffbf}}]}, 0x38}}, 0x10)

1m6.983202463s ago: executing program 5 (id=652):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
epoll_create(0x3)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc})
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan4\x00'})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=@newsa={0x144, 0x10, 0x1, 0x7ffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x2, 0xffff, 0x8251c, 0x2, 0x7}, {0xffffffffffffffff, 0x0, 0x1f, 0x8}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x6}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20008840}, 0x0)

58.906443627s ago: executing program 5 (id=668):
fsopen(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
timer_create(0x3, 0x0, &(0x7f0000bbdffc)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
timer_gettime(r0, 0x0)

54.225978764s ago: executing program 5 (id=686):
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0xa, @private1, 0x8}, 0x1c)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

52.138810952s ago: executing program 5 (id=692):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pi6   \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f00000012c0)="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"}, 0x20)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0)
socket(0x1, 0x2, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x26b00, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000001ed0a00bfa30000000000002503000028feffff6203f0fff8ffffff61a4f0ff000000001d04020000000000cf000000000000005504000017ffffff6604000017ffffff9c400000000000007b0300fe000000002c04000000000000c6000000000001009500000000000000023bc065b7a339d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8df000d10e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867bbacec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e809bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f8e3ce2a9414575833a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0d72534050000004ad8269b2bdf2ca4958a62a6e7449316cc65b5d4796005c2f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc19488e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da350bcc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d185afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e00006a1d1a4ebf83434986091dd66ffe3ffe9067f565c6f86b5f596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05db7f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece8d264a2b6adae02c821b6242894f33c81c0a6813497502aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622ca231e9e98720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a3997f1cfe8a87e08f87ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d301183a7cba5adf77f23d31f9d5a183c08c3a86bbcd3705432ad3f96a7bbc4a13780cf9f4a5e3a9badca61367b377cc6f77e66febca94c8d9fe6fa1148a0b65c0f1b0d00aad352d7c7b5aea945185022f2c8cae549e77a290ebffb8c9dc99168e06461c7000"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x124, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x2, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26, 0x0, 0x1, 0x3}, 0x28)

37.008092904s ago: executing program 37 (id=692):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pi6   \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f00000012c0)="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"}, 0x20)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0)
socket(0x1, 0x2, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x26b00, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000001ed0a00bfa30000000000002503000028feffff6203f0fff8ffffff61a4f0ff000000001d04020000000000cf000000000000005504000017ffffff6604000017ffffff9c400000000000007b0300fe000000002c04000000000000c6000000000001009500000000000000023bc065b7a339d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8df000d10e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867bbacec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e809bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f8e3ce2a9414575833a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0d72534050000004ad8269b2bdf2ca4958a62a6e7449316cc65b5d4796005c2f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc19488e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da350bcc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d185afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e00006a1d1a4ebf83434986091dd66ffe3ffe9067f565c6f86b5f596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05db7f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece8d264a2b6adae02c821b6242894f33c81c0a6813497502aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622ca231e9e98720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a3997f1cfe8a87e08f87ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d301183a7cba5adf77f23d31f9d5a183c08c3a86bbcd3705432ad3f96a7bbc4a13780cf9f4a5e3a9badca61367b377cc6f77e66febca94c8d9fe6fa1148a0b65c0f1b0d00aad352d7c7b5aea945185022f2c8cae549e77a290ebffb8c9dc99168e06461c7000"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x124, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x2, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26, 0x0, 0x1, 0x3}, 0x28)

16.102460579s ago: executing program 9 (id=768):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20008004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

15.854532552s ago: executing program 9 (id=770):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

14.42269083s ago: executing program 9 (id=772):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ptrace$getenv(0x4201, r0, 0x404, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffbf}}]}, 0x38}}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@getchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {0xa, 0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x88c8}, 0x2000c894)

12.731143554s ago: executing program 7 (id=774):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x7, 0x3a, 0x2f, 0x20, 0x7}, 0x2e, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f2e00040b1000000000018001800c07100204e17f001410040093154918c4965c66414758b015fd30cf03100b"], 0x1, [{0x79, &(0x7f0000000500)=@string={0x79, 0x3, "47c8b7058d7a11fcd82146a9401153d42943ec1a2b1d55836a7e86b0ee44260ae951cd934c4655007f99bfcc54f5c54da991947f1b7ebc92c1e3236929772181ce34f9c827c99999ed1a2b822673d516b4438803c1493a6d719e54c67db6bc5c2eaa1ca86bdf6f6ed0e3d317a670fac8a823966ec7d82b"}}]})
r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x5, @pix={0x0, 0xfffffffd, 0x34565348, 0x7, 0x2, 0x9, 0x25, 0x0, 0x0, 0x0, 0x0, 0x5}})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000400)={0x4055, <r2=>r1, 0x1})
sendmmsg$alg(r2, &(0x7f00000079c0)=[{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004f40)="9044536c27e3c9146013293e71dbf5a0d70a2b5e7d55e15fdfc08f5ea185b39fd19d4662346f91aa20bebf6eefd583c8f7fa5701c1b95b3a6f03b319b392b85b63a440be0f71b3f4e678b52dab20bc3f118d6acf3d9785afacecb85884c6078ab5a25d0dc958f47ee4affeca5c0d3455cdab6c21cd1dd02d46e68e3379dcce343120eb84b5e1a6b2ea53a85684f472ee088c5ed0e7b04b6cfd0d3ab8cde83df62f8217c4497aacece97a30ce4ded9d83bf2b7ee9f6ee023f71fcf8bf9c9864384ee6e9", 0xc3}, {&(0x7f0000005040)="9f9a009915f55cf9878bb2589cfe986709bfd6a802fb7b3e457a3a72c0733e5d156e08ffdd2231f37ffeb19d25f04558ba2f36c73979932dc2c721150090d27ef80999135d5256e213eeeba8065c1e9c062bc5da6049e0adeda2fbdee5fa8201d2c2cd831eb686ab36fe4d93d094ed9cac14a9ff3945b263fc5263bc1eb1a19f5ee4945f1eb999a80ccbdd5f", 0x8c}, {&(0x7f0000005100)="563eb3ccb9b98da4b18d646e515c49f7ea2054e0b3d892559db2755cea1f3a2093bc33d8b078dbcef458fef7d391253ec7b9b8c83b11db0ba909de9fab917ea9c21bedd0ff8103a62ba8f6a4a57dbca4fff5f890ab46d7bc85dce32b5eb6bfb9015b1c05cd50a66c7014e3db66d35c7760986007ecd3da0468dd040c40e761a57013c10bfc9a26bec6ef39dbfe89a4b48bb1", 0x92}], 0x3, 0x0, 0x0, 0x42}, {0x0, 0x0, &(0x7f0000006fc0)=[{&(0x7f0000005200)="2be9653e920e334af28ca1f1d7c58181c244388609388711672462cda867f10ba00c55a0291f4f56840fd40c16c2d5da0b1d93c0f30d7651293c9124191b2f8ed7e1fd0c0539ebbcb345f159f3957707dfbad7632a2707b022fcdbff4813a21516d060b6cf1f666c9c1031cc53a95c6b9ec7f5f82b699a51646f99afd99ed84a001470127a18083d8413a24d54a9b13edcf2971e68b152bd50f94ed553df9a0128bc7c55c56ec3056c82df69a1ef5db60265852c2c23636bb9840f75ba5429aea2e44903ca", 0xc5}, {&(0x7f0000005c80)="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", 0x1000}, {&(0x7f0000006c80)="21ec341630e9c1fe978d1ed4c844375e84c9388b8265dc1b6a814090b07955e6458ef9061b2a4cd9cbfe89009d9e3883926c0effc2ab7a0646347b6fb2fc09c89d81e4688a95684df8338c8ced4286d4f95b7043d9c55e0fe0a037bc2e70c809bca0aad891dd91153163cecd0feabcac906ccf6b2476fb044c57fab0c6310a8ce7e495b85da736dee1b9e4e340633360947655d356d9f5fdb14d3d1c7c3a302931463c311dbe8d9c7b50", 0xaa}, {&(0x7f0000006d40)="a76fb472b1bcde716aeb6a6ebde364c91e7860ec9a87bc1bd317f3e544ac633f8c87ab44480d20d6eefc3c4f5672674b68d2cc845e0fa50f115cf27fbce01f2271234476d7ab2f2678f8bd4c79150787674dbc3c1d80531a175ac81d9eec512958301ad84f72cf5155e89ce196164944d3b2349b6d1c7c69e3663597e370aa0cc56ecc3ce418fcb4445a234df394491a448bd2a788300cee731b1cffb666bd1434a418e09a3092aecfb3c161fe81a070c0f0c0a181fc41aaa8e28934cf6cf28afd38cb966012ff7a", 0xc8}, {&(0x7f0000006e40)="ffd7a6599ed4d6cd80bd106c595d37eb971d11186101bf10d1589b6eaa3e81f1b28be0aa2b1df2088fae712cb0017c82e7ac1230851c7a83e28d136c6c06a9bfe0a1a283fa4affca10b70e7e03525d524fcd255108bcdc3bfdd4401a5ec88c3f9440c4c055c63e2194dcbbb0422c679e2625d3d2a7363f8a703b0f0616e78af719ef5b66779fb6ea25ba0eaf08b5f392831ca5c637a5e7c9662eadda35a4cac2457721d37bb3fe309693e185a075d1303b4cb5f71a43028ae7798b0b29786c2a122c3c98368c9c3998ac5af55b978eefc3309a710dbc4da98f41428872b166d0e9433f0a29d5dec605", 0xe9}, {&(0x7f0000006f40)="7b6fce4a4f80d349e5a71e7589d90d7ea687c44d0b75601c6cdfe47d5a8f662e29c69a4de888d743f7d657693a8ebcd217d4647d20128dc3146aca5d91b5c12504128b79253f17cdedb1f2eb6400f14af20e105c231f6941a04e2637248c65a54a", 0x61}], 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000001701000004000000020000000000000018000000000000001701000004000000080000000000000008010000000000001701000002000000f4000000fe56aaaa4a7deb821349c320928d9dc295a66df9792404248826d397eaaf128a372919ec63424f0dd86071d1ad6d2dc5a4830548e929230ee754299ce1997f19f320625067816ee4b005d464edeac9ad4d97af06f1db6060035f4279a4b4b7749db12186aeb40060ec1086e9f71e9b1d856bece7f24c5f0a710b497bf8af16c8bb4fabeb597ad15ad1131043db806e5454db68d93822d85b7989c60f955d9fcd79846ed595696359efb71577e302b6630cafe165c9171d97dbbae3a65676610cbc5b307b1f6ce2dbac2061728c1a7384eae8407cd2f28883a9fff26a9bab4532f1633387cfa2f8b983aaf7c2486ff5b7d4ed78a6df878ede72936d61419cf3d598452b180000000000000017010000040000000f000000000000001800000000000000170100000300000001000000000000001800000000000000170100000300000000000000000000001800000000000000170100000300000001000000000000001800000000000000170100000300"/447], 0x1b0, 0x40}, {0x0, 0x0, &(0x7f0000007900)=[{&(0x7f0000007200)="42231a1cbc0138dc438759f9d9244f221691b6810917601406ba11c6ff93c86c875c42fee419da346e6364a6eb6c236e0db264e0ab5f9dd177466f2f75b8892bc1eb02a9a4074991398d2cf0cbb230269e24f31f3455f7e4dc3bd84659815b379f7781c2f8fd3483a77c85db4259c3ffc045f6ce1ef2e43661e6d8f80e9f6fc7c024dfb874eacb016a90befc90a9101d618a864bf6fd8477889348fb975de45b1f22c3336fb17fefce37ce886d1356f97e1444ccbb68e8b20273ae19dbede0aed52c384135f20e5cac03daa77392f977d67f89bfa824c3dfc302236d4bf0c42fac54fb6c7bdfe723b822a3ba8c", 0xed}, {&(0x7f0000007300)="2357744bfd65b5a60218d0a4890c00e3deaebf06091a6351f5a90a005480774ab79fb4d0dde1054b68bcac9810a711011402f5b67354096e2562dd302f40341692be80cf648963d850498513159ddada659de94304dd549c2721f1baad603b9c74850b953641cade38a786a515cfd7b94d71bcdecf47df2f0ef6273b88a98e349810482e3026c3d906adc56e046667aa53e9e1d7679e0cd856c33640797c841fcd9488cca33d9719991a96b0d7f009147ca4032affae722229a91af7af98bed16ba60bba510acf045bba1ec1d4cd1eb0ca9225", 0xd3}, {&(0x7f0000007400)="d63c07dedb8752fec63c275ff348d79292dcd53071af3cddf553678d9400a3abdb27ec73e48937630d5c0b6737a1c2f241f4e013531edaf98e5980", 0x3b}, {&(0x7f0000007440)="d818d93991ea594d777b95838cdea029a1b460954259dd91d0f77830cd629677184dd7bd1f553552779835f073a77056f71047df076a8e6d42237f0e304e55b65b44f02fc16cfb4e1b22241e5fdcea318f816e818615e9ad1d8c4e7dbf8ea1c7976e1e0d6591a160c964f2ed4a03f3c5f52f5ce5e91fbc26cf50151690db0f2c480a5a313c6b53b0db28d4755cb8ca8c370570831ec6f3acf802a7460bd03d2cd4ecced1a7c50a62630817a73870c3387ff6934f5e01ef74780bd05d48ed6804b8868d7781e196601a97ccdef5c060447a8d723823dfd6e927c1c6866007186732a394fc6c93", 0xe6}, {&(0x7f0000007540)="4dfa57deedd98bfe282363bb346e7ce71cbe2c7ecf9aa65342e2102bae9bc13231f20d6ec410744fc0cadbad3f04353b582a6ab0c51fd51cb0100c991d005124ca6e4eb056223f9bdc2c9bc043c380423cc8e2446f14eb36", 0x58}, {&(0x7f00000075c0)="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", 0xff}, {&(0x7f00000076c0)="cdfbe35099d4497b11d7de78d3131356c90013a71977e71e8b726bf54a7cdda2df8901efa091e16d4984a9ac8815bc0823e535a5c5a468b3eb77cd815adadbff64a14a3dcbd9ae6096b07761dfa5ebd634920ee71298f62bc705b8a6dca4177610998b73d46316fd788a50d80d28ad8ebd9e2d5bb15eaa6ddffde38cac31981a8e358424280b680db944c2dc440fc101ac0cc8341dcf447dbe64a384ad9cff78f72ac39bf6", 0xa5}, {&(0x7f0000007780)="64d0cd530b848fef0618520ef2ec645816a9a7739c63f22165a70c0a099ae6bf1b98cfcdc0a84dfc4aa429e40336173b8e42723e9ac81e61aa8a075b2fd77d00d8c846225d20b18f73ed18f987f559e30c4099fcabf879690d268b2870fcc4b5d056ed0ed9be4d7c21b517a27d17a3e4226519c088ffc2af17fb3106b5873cf893db3336d0f7bbe2d71ae12b5a505701436535", 0x93}, {&(0x7f0000007840)="33bd5a47b0a4f476fb8af38753f91c1b1d9f80a7de13201049c34ccc90ab60e14f", 0x21}, {&(0x7f0000007880)}], 0xa, 0x0, 0x0, 0x8001}], 0x3, 0x4000)
syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="00092e0000002e2392b46a6d6a6331299683e3a98412da0e84b5a89678b39487edfd2468d4c2fbdce24f92fc2b8164b5710e38b1"], &(0x7f0000000240)=ANY=[@ANYBLOB="006cdedc8e0ac7385ae694789b350304000000ff030000"]}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x55f29e47af3d5b70, 0xc, 0xe7, "418c2b68e3c87b73f11239cf2dbb923ee67b163456a30798a3102c95ac81e4973625def828f4c27afabef2a80bfc99a020de4c7f35b9a5cb94944b303ce072d3ef56188f549709245b7187ff30ac202818c208b1742262b07a4d1fa23c12ac5b06dacf24847de16da35e262709b04baec2324d8a683d83ffdf7a86447327ce9ac5235a9fdda4895af01a057ff4791382fc8786d446cdffd8d341d777066da72e40cede27ac89cf3106ebd9fd19ec6dd1357ddc12ca643f59cbc9dc04984bc9a105e6b91cfa9ce79bf52a4cd7302d106b797192240c39471e152e5a4fa7b383b69cf05ed41744ac"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000040000d6"], &(0x7f0000000800)={0x20, 0x82, 0x1, 'F'}, &(0x7f0000000b80)=ANY=[@ANYBLOB="008301f577ee763423054962fc23c8d11ea7f4a91bed2a479f6f176cb9b429ec075d5eb2a76a96973f51aebc6efd50d42be3c8af12f4a413301f92c6bb09d8d730487914783a043107db973c9dc93891ee8598783d6b6fd1360699bf0d02e8538b13e6950e5b307a4880ea32e78be7f2faf5d74624a7ba1ce361657a0a9286852bf9745d"], &(0x7f0000000880)={0x20, 0x84, 0x4, "7bd6e145"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "f20077"}})
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000b40)={0x73622a85, 0xa, 0x3})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x1, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f})
write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000180)={0x217, @tick=0x65757100, 0x0, {}, 0x67, 0x1})
sendmsg$nl_route_sched(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x25dfdbff, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x5, [{}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x80000000, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000))
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2800, 0x0)

11.171798237s ago: executing program 6 (id=776):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7)
epoll_create1(0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x80000)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)

10.706892245s ago: executing program 6 (id=777):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180058de21d30000e7ffff9400"/28], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x10008}}, 0x1c}}, 0x8810)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000640)="e8f153b7"})
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, 0x464, 0x2, 0x70bd28, 0x25dfdbfc, "07c08b535a8aff03bd479c82388a4efd67119e2156d502eddf5d07259b7eb3095e9a7cc56d1df00dbc8183b35df614b365b209fd452d8248c5fb523b78eee3fec5568d891d5f91a17b39d02257d148eb16dccf32faee31e9bc0595fb24c2c3969560a5465e0a64014df95b1f74bc6dbcc0e3c0bbd7137e1d5bdd14b0b76ce1cf09929493676699098bb1967a4f32378aeb45798b7eb93c83399e006ba76d279079c07b", ["", ""]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2})
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)

10.306906582s ago: executing program 6 (id=778):
syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100128ba0d106d047c087ab0010203010902240001400990000904ee09000e01000808240200fe7f"], 0x0)
ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, 0x0)
close(0xffffffffffffffff)
eventfd2(0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x80000)
syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00')
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, 0x0, 0x20001c50)

10.101548655s ago: executing program 9 (id=779):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20008004)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

8.163486488s ago: executing program 6 (id=783):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180058de21d30000e7ffff9400"/28], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x10008}}, 0x1c}}, 0x8810)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000640)="e8f153b7"})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2, 0x0, r6})

8.062997783s ago: executing program 7 (id=784):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
ioprio_set$pid(0x2, 0x0, 0x6000)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x80000)
r5 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r7 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
recvmmsg(r8, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001e00)=""/4096, 0x1000}], 0x1}, 0x8000}], 0x1, 0x40000003, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$dupfd(r9, 0x406, 0xffffffffffffffff)
connect$inet(r6, 0x0, 0x0)
r10 = fsmount(r5, 0x0, 0x1)
fchdir(r10)
lseek(0xffffffffffffffff, 0x8582, 0x3)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000000000)={0xa0000001})
epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000)

6.736867623s ago: executing program 7 (id=785):
syz_open_dev$sg(&(0x7f00000000c0), 0x20000, 0x40001)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000140))
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/protocols\x00')
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000))
r2 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00')
fanotify_mark(0xffffffffffffffff, 0x11, 0x8000031, r2, 0x0)
read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020)

6.684269076s ago: executing program 8 (id=786):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7)
epoll_create1(0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_create1(0x80000)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)

6.110560346s ago: executing program 8 (id=787):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180058de21d30000e7ffff9400"/28], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x10008}}, 0x1c}}, 0x8810)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000640)="e8f153b7"})
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, 0x464, 0x2, 0x70bd28, 0x25dfdbfc, "07c08b535a8aff03bd479c82388a4efd67119e2156d502eddf5d07259b7eb3095e9a7cc56d1df00dbc8183b35df614b365b209fd452d8248c5fb523b78eee3fec5568d891d5f91a17b39d02257d148eb16dccf32faee31e9bc0595fb24c2c3969560a5465e0a64014df95b1f74bc6dbcc0e3c0bbd7137e1d5bdd14b0b76ce1cf09929493676699098bb1967a4f32378aeb45798b7eb93c83399e006ba76d279079c07b", ["", ""]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2})
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)

6.001013984s ago: executing program 7 (id=788):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ptrace$getenv(0x4201, r0, 0x404, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffbf}}]}, 0x38}}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@getchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {0xa, 0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x88c8}, 0x2000c894)

4.36203101s ago: executing program 8 (id=789):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x4c}}, 0x0)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000000)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2e)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="90000000", @ANYRES16=r10, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="0600cd00000000006c00330080200900ffffffffffff0802110000005050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r12=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0xff, r12, 0x0, 0x3, 0x1}}, 0x20)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x404, 0x80}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
rmdir(&(0x7f0000000240)='./proc/sys/net/mpls/platform_labels\x00')
r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$SNDCTL_TMR_STOP(r13, 0x5403)
ioctl$SNDCTL_TMR_CONTINUE(r13, 0x5404)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000f263e6beb3f78d15d27bdc94b201c14ecd1449d3a23ba23231ad6ae25c41231aac9761d5e635e49f0aeb804c8d0ba51bc966e065bcbdfa0b99ace672ff87e31d360df2114a3b91c520a93dc436f7960c8be52fae3a87af869413452b0e6f95a7c96e5ca435", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000048000180060001000a0000000c00070001000000000000000c00070000000000000000000800090068000000090006006e6f6e6500000000080008000000010008000b0073697000"], 0x5c}}, 0x0)

3.962364949s ago: executing program 6 (id=790):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000500000000000000000000018523000018000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="00feffffff000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x28, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e00)=@delchain={0x34, 0x2e, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x5, 0x3}, {0xfff2, 0x10}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0xd24e8fcf214020dd, 0x9, 0x3, 0x4000000, 0x8, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x3646331264607151, 0x8, 0x9, 0x1}})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b80)={'gre0\x00', &(0x7f0000000a80)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0x7, 0x2a, {{0x31, 0x4, 0x1, 0x27, 0xc4, 0x68, 0x0, 0x7f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0xcf, 0x0, 0x2, [0x5, 0x8, 0x78d]}, @timestamp_prespec={0x44, 0x1c, 0xa0, 0x3, 0x3, [{@local, 0x6}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1}]}, @ssrr={0x89, 0x23, 0x21, [@empty, @rand_addr=0x64010101, @local, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010100, @private=0xa010101]}, @generic={0x1ab, 0xa, "7a536c470cb80912"}, @rr={0x7, 0xb, 0xc3, [@remote, @remote]}, @lsrr={0x83, 0xb, 0x34, [@dev={0xac, 0x14, 0x14, 0x1c}, @remote]}, @cipso={0x86, 0x3e, 0x1, [{0x0, 0x10, "9889457ddf21c2c090e5cdc611a5"}, {0x1, 0x5, "abd2a0"}, {0x6, 0x5, "5bbb93"}, {0x1, 0xd, "d55ba567a8a22d46fa1ca1"}, {0x2, 0x7, "1f91856b5f"}, {0x7, 0xa, "ebaeb190c81c0fb2"}]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r0, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0, 0x0], 0x0, 0x16, &(0x7f0000000c80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'syzkaller0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'batadv_slave_1\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'gretap0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002940)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x2281965a7a17aedf}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f40))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001000)={'syztnl2\x00', &(0x7f0000000f80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x7, 0xa08a, 0x42, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x57, 0xf}})
r8 = socket(0x10, 0x3, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r8], 0x7c}}, 0x0)

3.683945187s ago: executing program 9 (id=791):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
ioprio_set$pid(0x2, 0x0, 0x6000)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x80000)
fsopen(&(0x7f0000000180)='configfs\x00', 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000)

2.532964214s ago: executing program 9 (id=792):
syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100128ba0d106d047c087ab0010203010902240001400990000904ee09000e01000808240200fe7f"], 0x0)
ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, 0x0)
close(0xffffffffffffffff)
eventfd2(0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x80000)
syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00')
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, 0x0, 0x20001c50)

2.090634217s ago: executing program 6 (id=793):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100128ba0d106d047c087ab0010203010902240001400990000904ee09000e01000808240200fe7f"], 0x0)
ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, 0x0)
close(0xffffffffffffffff)
eventfd2(0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x10144}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x80000)
syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00')
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r1, 0x0, 0x20001c50)

2.038007157s ago: executing program 8 (id=794):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
ioprio_set$pid(0x2, 0x0, 0x6000)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x80000)
r5 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r7 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
recvmmsg(r8, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001e00)=""/4096, 0x1000}], 0x1}, 0x8000}], 0x1, 0x40000003, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$dupfd(r9, 0x406, 0xffffffffffffffff)
connect$inet(r6, 0x0, 0x0)
r10 = fsmount(r5, 0x0, 0x1)
fchdir(r10)
lseek(0xffffffffffffffff, 0x8582, 0x3)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000000000)={0xa0000001})
epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000)

860.263433ms ago: executing program 7 (id=795):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x3, 0x2000)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0)
r4 = io_uring_setup(0x5b3c, &(0x7f0000000280)={0x0, 0x5199, 0x2, 0x2, 0x3e3})
mmap$IORING_OFF_SQ_RING(0x0, 0x80000001, 0x0, 0x11, r4, 0x0)
r5 = openat$panthor(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
sendfile(r5, r5, &(0x7f0000000340)=0x6, 0x80000)
ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000300)={0x3, 0x0, 0xd84000, 0x10, 0x6, 0x0, 0xceb})
ppoll(&(0x7f0000000100)=[{r0, 0x8}, {r0, 0x2080}, {r0, 0x200}, {r0, 0x8000}, {r0, 0x101}, {r1}, {r0}, {r0}, {r0, 0x1100}], 0x9, &(0x7f0000000240)={r2, r3+60000000}, &(0x7f0000000280)={[0x44]}, 0x8)

753.808042ms ago: executing program 8 (id=796):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xffff, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2}, "d33cffd98794e48a"}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x28)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f000003b000/0x3000)=nil, &(0x7f00000d9000/0x3000)=nil, &(0x7f000015a000/0x1000)=nil, &(0x7f000019c000/0x3000)=nil, &(0x7f0000171000/0x2000)=nil, &(0x7f0000051000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001c2000/0x4000)=nil, &(0x7f0000197000/0x2000)=nil, &(0x7f000009b000/0x3000)=nil, &(0x7f000019f000/0x14000)=nil, &(0x7f0000000280)="55278e3acd3ca98bea22d2c804492c3a2f19187aa3f5707b99981566b150754d580f330c217fe9ec1bc1ff42f41cfcc14724bcf5912e5a1fd1c5e2e6dbf9fe96c5219b277ec4617287ec6486e4baad3c1691c05411df7c6a2898b96c6cf8e5378061818a", 0x64, r0}, 0x68)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0xa, 0x0)
mq_timedreceive(r1, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0)

238.978022ms ago: executing program 7 (id=797):
syz_open_dev$sg(&(0x7f00000000c0), 0x20000, 0x40001)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000140))
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/protocols\x00')
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000))
r2 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00')
fanotify_mark(0xffffffffffffffff, 0x11, 0x8000031, r2, 0x0)
read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020)

0s ago: executing program 8 (id=798):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180058de21d30000e7ffff9400"/28], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x70bd2b, 0x25dfdbdb, {0x2, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x1, 0x10008}}, 0x1c}}, 0x8810)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000640)="e8f153b7"})
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, 0x464, 0x2, 0x70bd28, 0x25dfdbfc, "07c08b535a8aff03bd479c82388a4efd67119e2156d502eddf5d07259b7eb3095e9a7cc56d1df00dbc8183b35df614b365b209fd452d8248c5fb523b78eee3fec5568d891d5f91a17b39d02257d148eb16dccf32faee31e9bc0595fb24c2c3969560a5465e0a64014df95b1f74bc6dbcc0e3c0bbd7137e1d5bdd14b0b76ce1cf09929493676699098bb1967a4f32378aeb45798b7eb93c83399e006ba76d279079c07b", ["", ""]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2})
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$packet(0x11, 0x2, 0x300)

kernel console output (not intermixed with test programs):

r=0b95, idProduct=772a, bcdDevice=82.73
[  414.789438][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.789460][ T5723] usb 4-1: Product: syz
[  414.789475][ T5723] usb 4-1: Manufacturer: syz
[  414.789490][ T5723] usb 4-1: SerialNumber: syz
[  414.858578][ T5723] usb 4-1: config 0 descriptor??
[  415.345858][   T67] team0 (unregistering): Port device team_slave_1 removed
[  417.091219][   T67] team0 (unregistering): Port device team_slave_0 removed
[  417.225339][  T821] usb 4-1: USB disconnect, device number 12
[  418.605474][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.605492][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.605520][ T7499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.678852][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.678872][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.678900][ T7499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.964515][ T7767] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  419.230416][ T5723] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  419.393056][ T5723] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[  419.393086][ T5723] usb 1-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  419.393107][ T5723] usb 1-1: config 0 has no interface number 0
[  419.393153][ T5723] usb 1-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  419.396140][ T5723] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  419.396169][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.396192][ T5723] usb 1-1: Product: syz
[  419.396209][ T5723] usb 1-1: Manufacturer: syz
[  419.396224][ T5723] usb 1-1: SerialNumber: syz
[  419.543636][ T5723] usb 1-1: config 0 descriptor??
[  419.649612][ T7499] hsr_slave_0: entered promiscuous mode
[  419.659625][ T7499] hsr_slave_1: entered promiscuous mode
[  419.776014][ T5723] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input5
[  419.987199][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9
[  420.338880][ T5723] usb 1-1: USB disconnect, device number 3
[  420.555233][ T7793] FAULT_INJECTION: forcing a failure.
[  420.555233][ T7793] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  420.555270][ T7793] CPU: 1 UID: 0 PID: 7793 Comm: syz.3.383 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  420.555295][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  420.555307][ T7793] Call Trace:
[  420.555314][ T7793]  <TASK>
[  420.555322][ T7793]  dump_stack_lvl+0xe8/0x150
[  420.555361][ T7793]  should_fail_ex+0x467/0x600
[  420.555400][ T7793]  _copy_from_user+0x2d/0xb0
[  420.555430][ T7793]  ___sys_sendmsg+0x1c6/0x360
[  420.555460][ T7793]  ? __lock_acquire+0x683/0x2ce0
[  420.555493][ T7793]  ? __pfx____sys_sendmsg+0x10/0x10
[  420.555558][ T7793]  ? __fget_files+0x2a/0x420
[  420.555582][ T7793]  ? __fget_files+0x3a8/0x420
[  420.555617][ T7793]  __x64_sys_sendmsg+0x1b7/0x290
[  420.555651][ T7793]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  420.555699][ T7793]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.555724][ T7793]  do_syscall_64+0x174/0x580
[  420.555754][ T7793]  ? trace_irq_disable+0x3b/0x140
[  420.555775][ T7793]  ? clear_bhb_loop+0x40/0x90
[  420.555811][ T7793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.555832][ T7793] RIP: 0033:0x7f84aba6e019
[  420.555852][ T7793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.555869][ T7793] RSP: 002b:00007f84a9cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  420.555891][ T7793] RAX: ffffffffffffffda RBX: 00007f84abcf5fa0 RCX: 00007f84aba6e019
[  420.555907][ T7793] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000004
[  420.555922][ T7793] RBP: 00007f84a9cc6090 R08: 0000000000000000 R09: 0000000000000000
[  420.555935][ T7793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.555948][ T7793] R13: 00007f84abcf6038 R14: 00007f84abcf5fa0 R15: 00007fff0e29abb8
[  420.555983][ T7793]  </TASK>
[  420.662603][ T7793] tipc: Failed to remove unknown binding: 66,0,0/0:2264629623/2264629625
[  420.787838][ T7795] loop2: detected capacity change from 0 to 7
[  420.826268][ T7795] Dev loop2: unable to read RDB block 7
[  420.826314][ T7795]  loop2: unable to read partition table
[  420.826527][ T7795] loop2: partition table beyond EOD, truncated
[  420.851967][ T7795] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  421.280492][ T5876] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  422.600688][ T5876] usb 4-1: Using ep0 maxpacket: 16
[  422.628665][ T5876] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  422.628695][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  422.628735][ T5876] usb 4-1: config 0 has no interface number 0
[  422.628781][ T5876] usb 4-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  422.628804][ T5876] usb 4-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  422.698914][ T5876] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  422.698948][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.698971][ T5876] usb 4-1: Product: syz
[  422.698987][ T5876] usb 4-1: Manufacturer: syz
[  422.699007][ T5876] usb 4-1: SerialNumber: syz
[  422.748947][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.749155][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.749353][ T7598] bridge_slave_0: entered allmulticast mode
[  422.827604][ T7598] bridge_slave_0: entered promiscuous mode
[  422.836764][ T5876] usb 4-1: config 0 descriptor??
[  422.861549][ T5876] asix 4-1:0.34: probe with driver asix failed with error -22
[  422.880389][ T5612] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  422.886630][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.886751][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.886925][ T7598] bridge_slave_1: entered allmulticast mode
[  422.895404][ T7598] bridge_slave_1: entered promiscuous mode
[  423.032481][ T5612] usb 3-1: Using ep0 maxpacket: 16
[  423.051880][ T5612] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.051916][ T5612] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.051940][ T5612] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  423.051970][ T5612] usb 3-1: config 0 interface 0 has no altsetting 0
[  423.052005][ T5612] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  423.052030][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.161042][ T5612] usb 3-1: config 0 descriptor??
[  423.614684][ T5612] hid (null): global environment stack underflow
[  423.614728][ T5612] hid (null): bogus close delimiter
[  423.614742][ T5612] hid (null): invalid report_count 45944
[  423.614760][ T5612] hid (null): report_id 1747254765 is invalid
[  423.614776][ T5612] hid (null): unknown global tag 0xd
[  423.640713][ T5612] hid (null): unknown global tag 0xd
[  423.640760][ T5612] hid (null): unknown global tag 0x4d
[  423.670399][ T5897] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  423.842548][ T5897] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[  423.842576][ T5897] usb 1-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  423.842597][ T5897] usb 1-1: config 0 has no interface number 0
[  423.842636][ T5897] usb 1-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  423.844989][ T5897] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  423.845016][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.845035][ T5897] usb 1-1: Product: syz
[  423.845051][ T5897] usb 1-1: Manufacturer: syz
[  423.845066][ T5897] usb 1-1: SerialNumber: syz
[  423.933484][ T5897] usb 1-1: config 0 descriptor??
[  423.990154][ T5897] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input6
[  424.037813][ T7598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.071159][ T7805] netlink: 'syz.2.386': attribute type 5 has an invalid length.
[  424.075330][ T5612] usb 3-1: USB disconnect, device number 6
[  424.107612][ T7598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.307737][ T5897] usb 4-1: USB disconnect, device number 13
[  424.354938][  T198] usb 1-1: USB disconnect, device number 4
[  426.607534][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10
[  426.893533][  T821] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  427.055383][  T821] usb 3-1: config 0 has an invalid interface number: 119 but max is 0
[  427.055414][  T821] usb 3-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  427.055435][  T821] usb 3-1: config 0 has no interface number 0
[  427.055480][  T821] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  427.080136][  T821] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  427.080227][  T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.082555][  T821] usb 3-1: Product: syz
[  427.082606][  T821] usb 3-1: Manufacturer: syz
[  427.082649][  T821] usb 3-1: SerialNumber: syz
[  427.144630][  T821] usb 3-1: config 0 descriptor??
[  427.299555][  T821] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input7
[  428.787990][ T7598] team0: Port device team_slave_0 added
[  429.129586][ T7598] team0: Port device team_slave_1 added
[  429.678262][ T5897] usb 3-1: USB disconnect, device number 7
[  430.589987][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.590004][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.590027][ T7598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.686362][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.686381][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.686412][ T7598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.342159][ T5616] Bluetooth: hci0: unexpected event for opcode 0x8c11
[  432.516684][ T5601] svc: failed to register nfsdv3 RPC service (errno 111).
[  432.519939][ T5601] svc: failed to register nfsaclv3 RPC service (errno 111).
[  432.519961][ T5601] failed to unregister tcp with rpcbind
[  432.824050][ T5601] svc: failed to register nfsdv3 RPC service (errno 97).
[  432.824139][ T5601] svc: failed to register nfsaclv3 RPC service (errno 97).
[  432.824182][ T5601] failed to unregister tcp with rpcbind
[  435.830519][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  435.839145][ T7598] hsr_slave_0: entered promiscuous mode
[  435.857351][ T7598] hsr_slave_1: entered promiscuous mode
[  435.860771][ T7598] debugfs: 'hsr0' already exists in 'hsr'
[  435.860799][ T7598] Cannot create hsr debugfs directory
[  436.012770][    T9] usb 4-1: device descriptor read/64, error -71
[  436.549145][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  436.770493][    T9] usb 4-1: device descriptor read/64, error -71
[  436.930025][    T9] usb usb4-port1: attempt power cycle
[  438.414728][   T67] bridge_slave_1: left allmulticast mode
[  438.414767][   T67] bridge_slave_1: left promiscuous mode
[  438.415035][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.802749][   T67] bridge_slave_0: left allmulticast mode
[  438.802788][   T67] bridge_slave_0: left promiscuous mode
[  438.803066][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.144901][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  440.145018][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  440.400525][    T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  440.585256][    T9] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[  440.585286][    T9] usb 1-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  440.585312][    T9] usb 1-1: config 0 has no interface number 0
[  440.585344][    T9] usb 1-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  440.588666][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  440.588700][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.588714][    T9] usb 1-1: Product: syz
[  440.588725][    T9] usb 1-1: Manufacturer: syz
[  440.588735][    T9] usb 1-1: SerialNumber: syz
[  440.666810][    T9] usb 1-1: config 0 descriptor??
[  440.705796][    T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input8
[  440.911173][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  440.982992][   T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  440.985817][   T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  441.020619][   T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  441.037858][   T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  441.038694][   T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  441.084060][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  441.103631][   T67] bond0 (unregistering): Released all slaves
[  441.317530][ T5614] usb 1-1: USB disconnect, device number 5
[  441.677836][ T7948] FAULT_INJECTION: forcing a failure.
[  441.677836][ T7948] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  441.677883][ T7948] CPU: 0 UID: 0 PID: 7948 Comm: syz.3.411 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  441.677908][ T7948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  441.677924][ T7948] Call Trace:
[  441.677931][ T7948]  <TASK>
[  441.677939][ T7948]  dump_stack_lvl+0xe8/0x150
[  441.677973][ T7948]  should_fail_ex+0x467/0x600
[  441.678008][ T7948]  _copy_from_user+0x2d/0xb0
[  441.678032][ T7948]  ___sys_recvmsg+0x173/0x5a0
[  441.678064][ T7948]  ? __pfx____sys_recvmsg+0x10/0x10
[  441.678093][ T7948]  ? __fget_files+0x2a/0x420
[  441.678128][ T7948]  ? __fget_files+0x3a8/0x420
[  441.678157][ T7948]  do_recvmmsg+0x320/0x7f0
[  441.678189][ T7948]  ? __pfx_do_recvmmsg+0x10/0x10
[  441.678214][ T7948]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  441.678248][ T7948]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  441.678280][ T7948]  __x64_sys_recvmmsg+0x198/0x250
[  441.678309][ T7948]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  441.678343][ T7948]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.678362][ T7948]  do_syscall_64+0x174/0x580
[  441.678387][ T7948]  ? trace_irq_disable+0x3b/0x140
[  441.678406][ T7948]  ? clear_bhb_loop+0x40/0x90
[  441.678428][ T7948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  441.678452][ T7948] RIP: 0033:0x7f84aba6e019
[  441.678470][ T7948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.678486][ T7948] RSP: 002b:00007f84a9ca5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  441.678506][ T7948] RAX: ffffffffffffffda RBX: 00007f84abcf6090 RCX: 00007f84aba6e019
[  441.678520][ T7948] RDX: 0000000000000001 RSI: 0000200000002380 RDI: 0000000000000003
[  441.678532][ T7948] RBP: 00007f84a9ca5090 R08: 0000000000000000 R09: 0000000000000000
[  441.678543][ T7948] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000001
[  441.678554][ T7948] R13: 00007f84abcf6128 R14: 00007f84abcf6090 R15: 00007fff0e29abb8
[  441.678583][ T7948]  </TASK>
[  442.122126][ T7954] FAULT_INJECTION: forcing a failure.
[  442.122126][ T7954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  442.122158][ T7954] CPU: 0 UID: 0 PID: 7954 Comm: syz.0.413 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  442.122179][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  442.122190][ T7954] Call Trace:
[  442.122203][ T7954]  <TASK>
[  442.122211][ T7954]  dump_stack_lvl+0xe8/0x150
[  442.122245][ T7954]  should_fail_ex+0x467/0x600
[  442.122292][ T7954]  _copy_from_user+0x2d/0xb0
[  442.122316][ T7954]  ___sys_sendmsg+0x1c6/0x360
[  442.122340][ T7954]  ? __lock_acquire+0x683/0x2ce0
[  442.122363][ T7954]  ? __pfx____sys_sendmsg+0x10/0x10
[  442.122413][ T7954]  ? __fget_files+0x2a/0x420
[  442.122434][ T7954]  ? __fget_files+0x3a8/0x420
[  442.122467][ T7954]  __x64_sys_sendmsg+0x1b7/0x290
[  442.122500][ T7954]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  442.122548][ T7954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.122573][ T7954]  do_syscall_64+0x174/0x580
[  442.122603][ T7954]  ? trace_irq_disable+0x3b/0x140
[  442.122624][ T7954]  ? clear_bhb_loop+0x40/0x90
[  442.122651][ T7954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.122674][ T7954] RIP: 0033:0x7f70bd10e019
[  442.122695][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.122714][ T7954] RSP: 002b:00007f70bb345028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  442.122738][ T7954] RAX: ffffffffffffffda RBX: 00007f70bd396090 RCX: 00007f70bd10e019
[  442.122754][ T7954] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003
[  442.122769][ T7954] RBP: 00007f70bb345090 R08: 0000000000000000 R09: 0000000000000000
[  442.122783][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.122796][ T7954] R13: 00007f70bd396128 R14: 00007f70bd396090 R15: 00007ffc6703cf98
[  442.122831][ T7954]  </TASK>
[  442.858026][   T67] hsr_slave_0: left promiscuous mode
[  442.890541][   T67] hsr_slave_1: left promiscuous mode
[  442.891643][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  444.064533][ T5616] Bluetooth: hci1: command tx timeout
[  444.466688][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.174797][ T5616] Bluetooth: hci1: command tx timeout
[  446.881180][   T67] team0 (unregistering): Port device team_slave_1 removed
[  446.942535][   T67] team0 (unregistering): Port device team_slave_0 removed
[  448.221134][ T5616] Bluetooth: hci1: command tx timeout
[  448.473235][ T5614] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  448.656308][ T5614] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[  448.656350][ T5614] usb 1-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  448.656390][ T5614] usb 1-1: config 0 has no interface number 0
[  448.656437][ T5614] usb 1-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  448.698362][ T5614] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  448.698441][ T5614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.698494][ T5614] usb 1-1: Product: syz
[  448.698528][ T5614] usb 1-1: Manufacturer: syz
[  448.698568][ T5614] usb 1-1: SerialNumber: syz
[  448.808166][ T5614] usb 1-1: config 0 descriptor??
[  448.979431][ T5614] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input9
[  449.537393][ T5614] usb 1-1: USB disconnect, device number 6
[  450.083853][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11
[  450.300928][ T5616] Bluetooth: hci1: command tx timeout
[  451.922797][ T5614] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  452.153439][ T5614] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  452.153463][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.153478][ T5614] usb 3-1: Product: syz
[  452.153489][ T5614] usb 3-1: Manufacturer: syz
[  452.153500][ T5614] usb 3-1: SerialNumber: syz
[  452.211061][ T5614] usb 3-1: config 0 descriptor??
[  452.259083][ T5614] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  453.070927][ T5614] gspca_sunplus: reg_w_riv err -110
[  453.071381][ T5614] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[  456.956680][ T5614] usb 3-1: USB disconnect, device number 8
[  457.284675][ T8020] kthread_run failed with err -4
[  457.444275][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  457.490754][   T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  457.492302][   T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  457.513212][   T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  457.525678][   T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  459.381302][ T5723] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  459.541316][ T5723] usb 1-1: config index 0 descriptor too short (expected 80, got 72)
[  459.564015][ T5723] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  459.564049][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.564079][ T5723] usb 1-1: Product: syz
[  459.564094][ T5723] usb 1-1: Manufacturer: syz
[  459.564109][ T5723] usb 1-1: SerialNumber: syz
[  459.763845][ T5616] Bluetooth: hci2: command tx timeout
[  459.823870][ T5614] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  459.862615][ T5715] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  460.017297][ T5614] usb 3-1: config 0 has an invalid interface number: 119 but max is 0
[  460.017329][ T5614] usb 3-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  460.017351][ T5614] usb 3-1: config 0 has no interface number 0
[  460.017397][ T5614] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  460.101884][ T5614] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  460.101918][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.101940][ T5614] usb 3-1: Product: syz
[  460.101957][ T5614] usb 3-1: Manufacturer: syz
[  460.101973][ T5614] usb 3-1: SerialNumber: syz
[  460.170734][ T5614] usb 3-1: config 0 descriptor??
[  460.556357][ T5614] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input10
[  461.541815][ T5715] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  461.569731][  T821] usb 1-1: USB disconnect, device number 7
[  461.756738][ T5715] ath9k_htc: Failed to initialize the device
[  461.786732][  T821] usb 1-1: ath9k_htc: USB layer deinitialized
[  463.269235][ T5616] Bluetooth: hci2: command tx timeout
[  464.345244][ T5723] usb 3-1: USB disconnect, device number 9
[  465.340462][ T5616] Bluetooth: hci2: command tx timeout
[  466.170585][ T7938] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.170746][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.170980][ T7938] bridge_slave_0: entered allmulticast mode
[  466.217793][ T7938] bridge_slave_0: entered promiscuous mode
[  466.387445][ T7938] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.387558][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.387776][ T7938] bridge_slave_1: entered allmulticast mode
[  466.443903][ T7938] bridge_slave_1: entered promiscuous mode
[  466.579887][ T8120] trusted_key: encrypted_key: insufficient parameters specified
[  466.784109][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'.
[  467.430474][ T5616] Bluetooth: hci2: command tx timeout
[  469.465712][ T8137] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  469.481061][ T8137] 9p: Bad value for 'rfdno'
[  469.688249][ T7938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  469.804154][ T7938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.552957][ T7938] team0: Port device team_slave_0 added
[  473.590932][ T7938] team0: Port device team_slave_1 added
[  473.837861][ T7938] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.837881][ T7938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  473.837914][ T7938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  473.906558][ T7938] batman_adv: batadv0: Adding interface: batadv_slave_1
[  473.906578][ T7938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  473.906719][ T7938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.065266][   T67] bridge_slave_1: left allmulticast mode
[  474.065304][   T67] bridge_slave_1: left promiscuous mode
[  474.065588][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.251485][   T67] bridge_slave_0: left allmulticast mode
[  474.251516][   T67] bridge_slave_0: left promiscuous mode
[  474.251731][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.624166][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  476.763247][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  476.842438][   T67] bond0 (unregistering): Released all slaves
[  477.246082][ T5616] Bluetooth: hci0: unexpected event for opcode 0x8c11
[  477.612512][ T5601] svc: failed to register nfsdv3 RPC service (errno 111).
[  477.613925][ T5601] svc: failed to register nfsaclv3 RPC service (errno 111).
[  477.613959][ T5601] failed to unregister tcp with rpcbind
[  477.614191][ T5601] svc: failed to register nfsdv3 RPC service (errno 97).
[  477.614210][ T5601] svc: failed to register nfsaclv3 RPC service (errno 97).
[  477.614224][ T5601] failed to unregister tcp with rpcbind
[  477.730590][   T67] hsr_slave_0: left promiscuous mode
[  479.475404][   T67] hsr_slave_1: left promiscuous mode
[  479.476436][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  479.991360][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  484.381389][   T67] team0 (unregistering): Port device team_slave_1 removed
[  484.441063][   T67] team0 (unregistering): Port device team_slave_0 removed
[  484.539251][ T8202] netlink: 14 bytes leftover after parsing attributes in process `syz.3.459'.
[  484.737573][ T8198] netlink: 'syz.2.458': attribute type 29 has an invalid length.
[  484.807438][ T7938] hsr_slave_0: entered promiscuous mode
[  484.815976][ T7938] hsr_slave_1: entered promiscuous mode
[  485.872967][ T5614] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  485.995627][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.996509][ T8033] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.996689][ T8033] bridge_slave_0: entered allmulticast mode
[  485.999672][ T8033] bridge_slave_0: entered promiscuous mode
[  486.030781][ T5614] usb 3-1: Using ep0 maxpacket: 16
[  486.049879][ T8033] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.050010][ T8033] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.050193][ T8033] bridge_slave_1: entered allmulticast mode
[  486.086946][ T8033] bridge_slave_1: entered promiscuous mode
[  486.157779][ T5614] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  486.157816][ T5614] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  486.157842][ T5614] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  486.157873][ T5614] usb 3-1: config 0 interface 0 has no altsetting 0
[  486.157908][ T5614] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  486.157933][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.258217][ T5614] usb 3-1: config 0 descriptor??
[  486.485525][ T8033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.543465][ T8033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  486.686088][ T5614] hid (null): global environment stack underflow
[  486.686139][ T5614] hid (null): bogus close delimiter
[  486.686154][ T5614] hid (null): invalid report_count 45944
[  486.686170][ T5614] hid (null): report_id 1747254765 is invalid
[  486.686187][ T5614] hid (null): unknown global tag 0xd
[  486.689381][ T5614] hid (null): unknown global tag 0xd
[  486.689425][ T5614] hid (null): unknown global tag 0x4d
[  486.737705][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9
[  486.862275][ T8033] team0: Port device team_slave_0 added
[  488.973565][ T8033] team0: Port device team_slave_1 added
[  489.045035][ T8249] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  489.058407][ T5614] usb 3-1: USB disconnect, device number 10
[  489.277680][ T8255] FAULT_INJECTION: forcing a failure.
[  489.277680][ T8255] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  489.277714][ T8255] CPU: 1 UID: 0 PID: 8255 Comm: syz.2.468 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  489.277735][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  489.277747][ T8255] Call Trace:
[  489.277755][ T8255]  <TASK>
[  489.277764][ T8255]  dump_stack_lvl+0xe8/0x150
[  489.277802][ T8255]  should_fail_ex+0x467/0x600
[  489.277839][ T8255]  _copy_from_user+0x2d/0xb0
[  489.277861][ T8255]  ___sys_sendmsg+0x1c6/0x360
[  489.277884][ T8255]  ? __lock_acquire+0x683/0x2ce0
[  489.277906][ T8255]  ? __pfx____sys_sendmsg+0x10/0x10
[  489.277933][ T8255]  ? kstrtouint+0x6e/0xe0
[  489.277990][ T8255]  ? __fget_files+0x2a/0x420
[  489.278010][ T8255]  ? __fget_files+0x3a8/0x420
[  489.278038][ T8255]  __sys_sendmmsg+0x279/0x4d0
[  489.278068][ T8255]  ? __pfx___sys_sendmmsg+0x10/0x10
[  489.278101][ T8255]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  489.278131][ T8255]  ? ksys_write+0x248/0x270
[  489.278157][ T8255]  ? __pfx_ksys_write+0x10/0x10
[  489.278185][ T8255]  __x64_sys_sendmmsg+0xa0/0xc0
[  489.278208][ T8255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.278227][ T8255]  do_syscall_64+0x174/0x580
[  489.278251][ T8255]  ? trace_irq_disable+0x3b/0x140
[  489.278268][ T8255]  ? clear_bhb_loop+0x40/0x90
[  489.278290][ T8255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.278308][ T8255] RIP: 0033:0x7fca4441e019
[  489.278327][ T8255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  489.278344][ T8255] RSP: 002b:00007fca42676028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  489.278365][ T8255] RAX: ffffffffffffffda RBX: 00007fca446a5fa0 RCX: 00007fca4441e019
[  489.278378][ T8255] RDX: 0000000000000001 RSI: 0000200000001900 RDI: 0000000000000003
[  489.278388][ T8255] RBP: 00007fca42676090 R08: 0000000000000000 R09: 0000000000000000
[  489.278399][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  489.278413][ T8255] R13: 00007fca446a6038 R14: 00007fca446a5fa0 R15: 00007ffc7e88bf88
[  489.278439][ T8255]  </TASK>
[  492.390617][   T67] bridge_slave_1: left allmulticast mode
[  492.390657][   T67] bridge_slave_1: left promiscuous mode
[  492.390949][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.564951][   T67] bridge_slave_0: left allmulticast mode
[  492.564992][   T67] bridge_slave_0: left promiscuous mode
[  492.565268][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.925099][ T5604] svc: failed to register nfsdv3 RPC service (errno 111).
[  494.106686][ T5604] svc: failed to register nfsaclv3 RPC service (errno 111).
[  494.106724][ T5604] failed to unregister tcp with rpcbind
[  494.107050][ T5604] svc: failed to register nfsdv3 RPC service (errno 97).
[  494.107068][ T5604] svc: failed to register nfsaclv3 RPC service (errno 97).
[  494.107081][ T5604] failed to unregister tcp with rpcbind
[  496.861352][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  496.870942][ T5612] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  496.922354][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  496.962178][   T67] bond0 (unregistering): Released all slaves
[  497.050480][ T5612] usb 4-1: Using ep0 maxpacket: 16
[  497.053062][ T5612] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.053093][ T5612] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  497.053114][ T5612] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  497.053141][ T5612] usb 4-1: config 0 interface 0 has no altsetting 0
[  497.053170][ T5612] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  497.053205][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.137001][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.137048][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.137119][ T8033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.146966][ T5612] usb 4-1: config 0 descriptor??
[  497.615810][ T8033] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.615886][ T8033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.615919][ T8033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.636065][ T5612] hid (null): global environment stack underflow
[  497.636179][ T5612] hid (null): bogus close delimiter
[  497.636220][ T5612] hid (null): invalid report_count 45944
[  497.636263][ T5612] hid (null): report_id 1747254765 is invalid
[  497.636325][ T5612] hid (null): unknown global tag 0xd
[  497.659835][ T5612] hid (null): unknown global tag 0xd
[  497.659968][ T5612] hid (null): unknown global tag 0x4d
[  497.943075][   T67] hsr_slave_0: left promiscuous mode
[  497.981074][   T67] hsr_slave_1: left promiscuous mode
[  497.981897][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  498.031611][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  498.041097][ T8294] FAULT_INJECTION: forcing a failure.
[  498.041097][ T8294] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  498.041153][ T8294] CPU: 0 UID: 0 PID: 8294 Comm: syz.0.480 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  498.041224][ T8294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  498.041257][ T8294] Call Trace:
[  498.041279][ T8294]  <TASK>
[  498.041301][ T8294]  dump_stack_lvl+0xe8/0x150
[  498.041400][ T8294]  should_fail_ex+0x467/0x600
[  498.041506][ T8294]  _copy_from_user+0x2d/0xb0
[  498.041579][ T8294]  ___sys_sendmsg+0x1c6/0x360
[  498.041654][ T8294]  ? __lock_acquire+0x683/0x2ce0
[  498.041730][ T8294]  ? __pfx____sys_sendmsg+0x10/0x10
[  498.041880][ T8294]  ? __fget_files+0x2a/0x420
[  498.041959][ T8294]  ? __fget_files+0x3a8/0x420
[  498.042068][ T8294]  __x64_sys_sendmsg+0x1b7/0x290
[  498.042141][ T8294]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  498.042268][ T8294]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.042327][ T8294]  do_syscall_64+0x174/0x580
[  498.042407][ T8294]  ? trace_irq_disable+0x3b/0x140
[  498.042472][ T8294]  ? clear_bhb_loop+0x40/0x90
[  498.042540][ T8294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.042603][ T8294] RIP: 0033:0x7f70bd10e019
[  498.042657][ T8294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.042703][ T8294] RSP: 002b:00007f70bb324028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  498.042769][ T8294] RAX: ffffffffffffffda RBX: 00007f70bd396180 RCX: 00007f70bd10e019
[  498.042813][ T8294] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000005
[  498.042855][ T8294] RBP: 00007f70bb324090 R08: 0000000000000000 R09: 0000000000000000
[  498.042889][ T8294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  498.042924][ T8294] R13: 00007f70bd396218 R14: 00007f70bd396180 R15: 00007ffc6703cf98
[  498.043012][ T8294]  </TASK>
[  498.785016][  T821] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  498.945269][  T821] usb 3-1: Using ep0 maxpacket: 32
[  498.947260][  T821] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  498.947287][  T821] usb 3-1: config 0 has no interface number 0
[  498.947345][  T821] usb 3-1: config 0 interface 12 has no altsetting 0
[  498.948746][   T67] team0 (unregistering): Port device team_slave_1 removed
[  498.985123][  T821] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  498.985155][  T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.985178][  T821] usb 3-1: Product: syz
[  498.985194][  T821] usb 3-1: Manufacturer: syz
[  498.985209][  T821] usb 3-1: SerialNumber: syz
[  499.046496][  T821] usb 3-1: config 0 descriptor??
[  499.081233][   T67] team0 (unregistering): Port device team_slave_0 removed
[  499.400501][ T8277] netlink: 'syz.3.476': attribute type 5 has an invalid length.
[  499.401558][ T8293] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  499.507803][ T5723] usb 4-1: USB disconnect, device number 17
[  499.719355][  T821] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71
[  499.719489][  T821] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  499.719510][  T821] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  499.719605][  T821] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  499.799036][  T821] usb 3-1: USB disconnect, device number 11
[  499.825227][ T7723] udevd[7723]: setting owner of /dev/bus/usb/003/011 to uid=0, gid=0 failed: No such file or directory
[  499.868964][ T8033] hsr_slave_0: entered promiscuous mode
[  499.874981][ T8033] hsr_slave_1: entered promiscuous mode
[  499.884664][ T8033] debugfs: 'hsr0' already exists in 'hsr'
[  499.884685][ T8033] Cannot create hsr debugfs directory
[  500.090479][ T5723] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  500.273735][ T5723] usb 4-1: Using ep0 maxpacket: 16
[  500.278538][ T5723] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  500.278570][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.278593][ T5723] usb 4-1: Product: syz
[  500.278609][ T5723] usb 4-1: Manufacturer: syz
[  500.278625][ T5723] usb 4-1: SerialNumber: syz
[  500.336522][ T5723] usb 4-1: config 0 descriptor??
[  500.354350][ T5723] gspca_main: spca508-2.14.0 probing 041e:4018
[  500.808988][ T8300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.820672][ T8300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.594630][ T5723] gspca_spca508: reg_read err -110
[  502.598259][ T5723] gspca_spca508: reg_read err -32
[  502.599117][ T5723] gspca_spca508: reg_read err -32
[  502.599513][ T5723] gspca_spca508: reg_read err -32
[  502.620568][ T8312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.482'.
[  502.674772][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  502.674855][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  502.677956][ T5723] gspca_spca508: reg write: error -32
[  502.678052][ T5723] spca508 4-1:0.0: probe with driver spca508 failed with error -32
[  503.362280][ T8300] bond0: option ad_select: unable to set because the bond device is up
[  503.382711][  T821] usb 4-1: USB disconnect, device number 18
[  503.504171][   T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  503.558124][   T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  503.571037][   T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  503.603684][   T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  503.614157][   T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  504.119380][ T8328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.487'.
[  504.278161][ T8330] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  504.930517][ T5723] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  505.081500][ T5723] usb 3-1: Using ep0 maxpacket: 16
[  505.083813][ T5723] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.083847][ T5723] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.083870][ T5723] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  505.083900][ T5723] usb 3-1: config 0 interface 0 has no altsetting 0
[  505.083933][ T5723] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  505.083958][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.291964][ T8350] loop4: detected capacity change from 0 to 7
[  506.027264][   T59] Bluetooth: hci5: command tx timeout
[  506.058258][ T8350] Dev loop4: unable to read RDB block 7
[  506.058296][ T8350]  loop4: AHDI p1 p2 p3
[  506.058317][ T8350] loop4: partition table partially beyond EOD, truncated
[  506.058556][ T8350] loop4: p1 start 1601398130 is beyond EOD, truncated
[  506.058577][ T8350] loop4: p2 start 1702059890 is beyond EOD, truncated
[  506.176151][ T5723] usb 3-1: config 0 descriptor??
[  506.702259][ T5723] hid (null): global environment stack underflow
[  506.702303][ T5723] hid (null): bogus close delimiter
[  506.703129][ T5723] hid (null): invalid report_count 45944
[  506.703148][ T5723] hid (null): report_id 1747254765 is invalid
[  506.703166][ T5723] hid (null): unknown global tag 0xd
[  506.723864][ T5723] hid (null): unknown global tag 0xd
[  506.755807][ T5723] hid (null): unknown global tag 0x4d
[  507.234558][ T8343] netlink: 'syz.2.490': attribute type 5 has an invalid length.
[  507.330461][ T5723] usb 3-1: USB disconnect, device number 12
[  507.402003][ T8033] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  507.496472][ T8033] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  508.709259][   T59] Bluetooth: hci5: command tx timeout
[  508.710331][ T1184] bridge_slave_1: left allmulticast mode
[  508.710365][ T1184] bridge_slave_1: left promiscuous mode
[  508.710617][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.841542][ T1184] bridge_slave_0: left allmulticast mode
[  508.841570][ T1184] bridge_slave_0: left promiscuous mode
[  508.841775][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.221107][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  509.301234][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  509.352235][ T1184] bond0 (unregistering): Released all slaves
[  509.679521][ T8033] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  509.778632][ T8033] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  509.851639][ T8033] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  509.878627][ T8384] FAULT_INJECTION: forcing a failure.
[  509.878627][ T8384] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  509.878654][ T8384] CPU: 1 UID: 0 PID: 8384 Comm: syz.2.499 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  509.878673][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  509.878683][ T8384] Call Trace:
[  509.878689][ T8384]  <TASK>
[  509.878696][ T8384]  dump_stack_lvl+0xe8/0x150
[  509.878728][ T8384]  should_fail_ex+0x467/0x600
[  509.878758][ T8384]  copy_fpstate_to_sigframe+0xac0/0xd80
[  509.878792][ T8384]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  509.878821][ T8384]  ? lockdep_hardirqs_on+0x7a/0x110
[  509.878843][ T8384]  ? irqentry_exit+0x218/0x8f0
[  509.878869][ T8384]  ? preempt_schedule_thunk+0x16/0x40
[  509.878890][ T8384]  ? fpu__alloc_mathframe+0xac/0x130
[  509.878914][ T8384]  get_sigframe+0x603/0x830
[  509.878943][ T8384]  ? __pfx_get_sigframe+0x10/0x10
[  509.878963][ T8384]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  509.878985][ T8384]  ? lockdep_hardirqs_on+0x7a/0x110
[  509.879006][ T8384]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  509.879035][ T8384]  x64_setup_rt_frame+0x164/0xc50
[  509.879062][ T8384]  ? __rcu_read_unlock+0x83/0xe0
[  509.879078][ T8384]  ? get_signal+0x10de/0x12c0
[  509.879110][ T8384]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  509.879144][ T8384]  arch_do_signal_or_restart+0x45b/0x860
[  509.879170][ T8384]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  509.879198][ T8384]  ? do_user_addr_fault+0xc4a/0x1340
[  509.879222][ T8384]  irqentry_exit+0x2ba/0x8f0
[  509.879242][ T8384]  ? trace_irq_disable+0x3b/0x140
[  509.879262][ T8384]  asm_exc_page_fault+0x26/0x30
[  509.879278][ T8384] RIP: 0033:0x7fca442df6c0
[  509.879293][ T8384] Code: 38 e8 e4 83 10 00 4c 89 e2 be 10 00 00 00 48 8d 3d 15 b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 <55> 31 c0 53 48 81 ec 68 10 00 00 48 89 7c 24 08 48 8d 3d 49 b1 1a
[  509.879307][ T8384] RSP: 002b:00007fca42676018 EFLAGS: 00010212
[  509.879321][ T8384] RAX: 00007fca442df6c0 RBX: 00007fca446a5fa0 RCX: 0000000000000000
[  509.879336][ T8384] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000020c0
[  509.879347][ T8384] RBP: 00007fca42676090 R08: 0000000000000000 R09: 0000000000000000
[  509.879357][ T8384] R10: 00002000000020c0 R11: 0000000000000000 R12: 0000000000000001
[  509.879367][ T8384] R13: 00007fca446a6038 R14: 00007fca446a5fa0 R15: 00007ffc7e88bf88
[  509.879391][ T8384]  </TASK>
[  510.176954][ T8033] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  510.253464][ T8033] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  510.361616][ T8033] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  510.578912][ T1184] hsr_slave_0: left promiscuous mode
[  510.612607][ T1184] hsr_slave_1: left promiscuous mode
[  510.619028][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.667641][ T1184] batman_adv: batadv0: Removing interface: batadv_slave_1
[  512.333115][ T5616] Bluetooth: hci5: command tx timeout
[  512.694392][ T1184] team0 (unregistering): Port device team_slave_1 removed
[  512.760104][ T1184] team0 (unregistering): Port device team_slave_0 removed
[  513.013915][ T8033] kthread_run failed with err -4
[  514.187101][   T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  514.230760][   T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  514.238694][   T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  514.253369][   T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  514.264826][   T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  514.388369][   T59] Bluetooth: hci5: command tx timeout
[  516.460539][ T5616] Bluetooth: hci1: command tx timeout
[  516.577975][ T8424] netlink: 'syz.3.508': attribute type 2 has an invalid length.
[  516.701772][ T8424] netlink: 32 bytes leftover after parsing attributes in process `syz.3.508'.
[  516.787190][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.787385][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.787574][ T8317] bridge_slave_0: entered allmulticast mode
[  516.790571][ T8317] bridge_slave_0: entered promiscuous mode
[  516.798961][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.799570][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.800033][ T8317] bridge_slave_1: entered allmulticast mode
[  516.808374][ T8317] bridge_slave_1: entered promiscuous mode
[  517.023721][ T5616] Bluetooth: hci3: unexpected event for opcode 0x8c11
[  517.040991][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.077661][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.160027][ T8317] team0: Port device team_slave_0 added
[  517.169863][ T8317] team0: Port device team_slave_1 added
[  517.367717][ T8438] FAULT_INJECTION: forcing a failure.
[  517.367717][ T8438] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  517.367753][ T8438] CPU: 0 UID: 0 PID: 8438 Comm: syz.3.512 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  517.367782][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  517.367795][ T8438] Call Trace:
[  517.367803][ T8438]  <TASK>
[  517.367812][ T8438]  dump_stack_lvl+0xe8/0x150
[  517.367849][ T8438]  should_fail_ex+0x467/0x600
[  517.367888][ T8438]  _copy_from_user+0x2d/0xb0
[  517.367914][ T8438]  __sys_bpf+0x2e7/0xd90
[  517.367939][ T8438]  ? ktime_get+0x45/0x220
[  517.367964][ T8438]  ? __pfx___sys_bpf+0x10/0x10
[  517.367995][ T8438]  ? clockevents_program_event+0x491/0x630
[  517.368058][ T8438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.368087][ T8438]  __x64_sys_bpf+0xba/0xd0
[  517.368122][ T8438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.368146][ T8438]  do_syscall_64+0x174/0x580
[  517.368175][ T8438]  ? trace_irq_disable+0x3b/0x140
[  517.368196][ T8438]  ? clear_bhb_loop+0x40/0x90
[  517.368223][ T8438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.368244][ T8438] RIP: 0033:0x7f84aba6e019
[  517.368265][ T8438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  517.368283][ T8438] RSP: 002b:00007f84a9cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  517.368306][ T8438] RAX: ffffffffffffffda RBX: 00007f84abcf5fa0 RCX: 00007f84aba6e019
[  517.368322][ T8438] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000
[  517.368336][ T8438] RBP: 00007f84a9cc6090 R08: 0000000000000000 R09: 0000000000000000
[  517.368349][ T8438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  517.368362][ T8438] R13: 00007f84abcf6038 R14: 00007f84abcf5fa0 R15: 00007fff0e29abb8
[  517.368395][ T8438]  </TASK>
[  517.590540][ T5604] svc: failed to register nfsdv3 RPC service (errno 111).
[  517.593835][ T5604] svc: failed to register nfsaclv3 RPC service (errno 111).
[  517.593857][ T5604] failed to unregister tcp with rpcbind
[  517.594112][ T5604] svc: failed to register nfsdv3 RPC service (errno 97).
[  517.594130][ T5604] svc: failed to register nfsaclv3 RPC service (errno 97).
[  517.594144][ T5604] failed to unregister tcp with rpcbind
[  517.834611][ T8443] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  517.836241][ T8443] 9p: Bad value for 'rfdno'
[  517.874431][ T5616] Bluetooth: hci0: unexpected event for opcode 0x8c11
[  519.500413][ T5611] Bluetooth: hci1: command tx timeout
[  519.738888][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.738907][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  519.738939][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.850435][ T5612] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  519.932281][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.932300][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  519.932332][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.018335][ T5612] usb 3-1: config 0 has an invalid interface number: 119 but max is 0
[  520.018373][ T5612] usb 3-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  520.018395][ T5612] usb 3-1: config 0 has no interface number 0
[  520.018442][ T5612] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  520.059349][ T5612] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  520.059389][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.059411][ T5612] usb 3-1: Product: syz
[  520.059426][ T5612] usb 3-1: Manufacturer: syz
[  520.059442][ T5612] usb 3-1: SerialNumber: syz
[  520.103702][ T5612] usb 3-1: config 0 descriptor??
[  520.133321][ T5612] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input11
[  520.593231][ T8317] hsr_slave_0: entered promiscuous mode
[  520.595351][ T5612] usb 3-1: USB disconnect, device number 13
[  520.596304][ T8317] hsr_slave_1: entered promiscuous mode
[  521.563932][ T5614] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  521.580741][ T5616] Bluetooth: hci1: command tx timeout
[  521.742880][ T5614] usb 3-1: config 0 has an invalid interface number: 119 but max is 0
[  521.742911][ T5614] usb 3-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  521.742933][ T5614] usb 3-1: config 0 has no interface number 0
[  521.742978][ T5614] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  521.745964][ T5614] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  521.745994][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.746016][ T5614] usb 3-1: Product: syz
[  521.746032][ T5614] usb 3-1: Manufacturer: syz
[  521.746047][ T5614] usb 3-1: SerialNumber: syz
[  521.824001][ T5614] usb 3-1: config 0 descriptor??
[  521.859551][ T5614] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input12
[  522.144809][ T5614] usb 3-1: USB disconnect, device number 14
[  522.359577][ T8317] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  522.408436][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  522.443014][ T8317] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  522.464293][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  522.539185][ T8317] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  522.566490][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  522.568040][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.568142][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.568320][ T8411] bridge_slave_0: entered allmulticast mode
[  522.571273][ T8411] bridge_slave_0: entered promiscuous mode
[  522.616412][ T8317] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  522.653627][ T8317] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  522.654809][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.655559][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.655711][ T8411] bridge_slave_1: entered allmulticast mode
[  522.657706][ T8411] bridge_slave_1: entered promiscuous mode
[  522.800669][   T67] bridge_slave_1: left allmulticast mode
[  522.800698][   T67] bridge_slave_1: left promiscuous mode
[  522.800875][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.147179][   T67] bridge_slave_0: left allmulticast mode
[  523.149721][   T67] bridge_slave_0: left promiscuous mode
[  523.179789][ T8470] openvswitch: netlink: IP tunnel dst address not specified
[  523.227438][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.868134][ T5616] Bluetooth: hci1: command tx timeout
[  524.261192][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  524.321257][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  524.362126][   T67] bond0 (unregistering): Released all slaves
[  524.513340][ T8411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  524.519778][ T8411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  524.725107][ T8411] team0: Port device team_slave_0 added
[  524.745326][ T8411] team0: Port device team_slave_1 added
[  525.002668][   T67] hsr_slave_0: left promiscuous mode
[  525.061682][   T67] hsr_slave_1: left promiscuous mode
[  525.062724][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  525.112982][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  526.021189][   T67] team0 (unregistering): Port device team_slave_1 removed
[  526.081087][   T67] team0 (unregistering): Port device team_slave_0 removed
[  526.363967][ T8504] Zero length message leads to an empty skb
[  527.051567][ T8509] netlink: 292 bytes leftover after parsing attributes in process `syz.2.523'.
[  527.051617][ T8509] openvswitch: netlink: Flow key attr not present in new flow.
[  528.777384][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9
[  528.795338][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_0
[  528.795357][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  528.795388][ T8411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  528.854110][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_1
[  528.854129][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  528.854159][ T8411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  529.112947][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  529.139678][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  529.140503][ T8411] hsr_slave_0: entered promiscuous mode
[  529.158809][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  529.159587][ T8411] hsr_slave_1: entered promiscuous mode
[  529.173532][ T8411] debugfs: 'hsr0' already exists in 'hsr'
[  529.173553][ T8411] Cannot create hsr debugfs directory
[  529.178927][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  529.179818][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  531.368183][ T5616] Bluetooth: hci2: command tx timeout
[  531.728949][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0
[  531.967670][ T8317] 8021q: adding VLAN 0 to HW filter on device team0
[  532.070912][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.071047][ T6093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.345982][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10
[  532.403508][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.406213][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.852760][    C1] sd 0:0:1:0: [sda] tag#6629 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  532.852919][    C1] sd 0:0:1:0: [sda] tag#6629 CDB: Read(10) 28 00 00 00 00 00 00 00 01
[  533.420497][ T5616] Bluetooth: hci2: command tx timeout
[  533.813375][ T8518] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.813606][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.813808][ T8518] bridge_slave_0: entered allmulticast mode
[  533.849410][ T8518] bridge_slave_0: entered promiscuous mode
[  533.875209][ T8518] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.875330][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.875507][ T8518] bridge_slave_1: entered allmulticast mode
[  533.905896][ T8518] bridge_slave_1: entered promiscuous mode
[  534.037346][ T8518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  534.074323][ T8518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  534.122118][ T5616] Bluetooth: hci3: unexpected event for opcode 0x8c11
[  534.277475][ T8518] team0: Port device team_slave_0 added
[  534.298522][ T8518] team0: Port device team_slave_1 added
[  534.437547][ T8518] batman_adv: batadv0: Adding interface: batadv_slave_0
[  534.437564][ T8518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  534.437591][ T8518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  534.464666][ T8518] batman_adv: batadv0: Adding interface: batadv_slave_1
[  534.464719][ T8518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  534.464810][ T8518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.155809][ T8518] hsr_slave_0: entered promiscuous mode
[  535.159922][ T8518] hsr_slave_1: entered promiscuous mode
[  535.163618][ T8518] debugfs: 'hsr0' already exists in 'hsr'
[  535.163639][ T8518] Cannot create hsr debugfs directory
[  535.166759][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  535.179689][ T8317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  535.252609][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  535.269538][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  535.279882][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  535.305988][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  535.503206][ T5616] Bluetooth: hci2: command tx timeout
[  535.787496][ T8411] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  535.833252][ T8411] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  535.869795][ T8411] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  535.933019][ T8411] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  535.991510][ T8411] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  536.047171][ T8411] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  536.082498][ T8411] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  536.125965][ T8411] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  536.678581][ T8317] veth0_vlan: entered promiscuous mode
[  536.914241][ T8317] veth1_vlan: entered promiscuous mode
[  537.021309][ T8518] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  537.055538][ T8518] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  537.059097][ T8518] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  537.116036][ T8518] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  537.134989][ T8518] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  537.173662][ T8518] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  537.192086][ T8518] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  537.234849][ T8518] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  537.340375][ T5616] Bluetooth: hci6: command tx timeout
[  537.403080][ T8411] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.407626][ T8317] veth0_macvtap: entered promiscuous mode
[  537.452939][ T8317] veth1_macvtap: entered promiscuous mode
[  537.510655][ T8411] 8021q: adding VLAN 0 to HW filter on device team0
[  537.582311][ T5616] Bluetooth: hci2: command tx timeout
[  537.583743][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.583877][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state
[  537.607323][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.683112][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  537.684938][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.685088][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  537.688078][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.688205][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.688391][ T8602] bridge_slave_0: entered allmulticast mode
[  537.732686][ T8602] bridge_slave_0: entered promiscuous mode
[  537.763384][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.763539][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.763746][ T8602] bridge_slave_1: entered allmulticast mode
[  537.766696][ T8602] bridge_slave_1: entered promiscuous mode
[  537.848631][ T8602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.872075][ T8602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.983407][ T8602] team0: Port device team_slave_0 added
[  538.063589][ T8602] team0: Port device team_slave_1 added
[  538.209463][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.209482][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  538.209507][ T8602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.297581][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.297601][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  538.297633][ T8602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  538.686759][ T8518] 8021q: adding VLAN 0 to HW filter on device bond0
[  538.724395][ T8602] hsr_slave_0: entered promiscuous mode
[  538.725792][ T8602] hsr_slave_1: entered promiscuous mode
[  538.726534][ T8602] debugfs: 'hsr0' already exists in 'hsr'
[  538.726552][ T8602] Cannot create hsr debugfs directory
[  538.756160][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.756181][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.064803][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  539.064826][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  539.069383][ T8518] 8021q: adding VLAN 0 to HW filter on device team0
[  539.202535][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.202688][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state
[  539.272796][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.272943][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state
[  539.433814][ T5616] Bluetooth: hci6: command tx timeout
[  541.062829][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.135993][   T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.136045][   T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  541.136086][   T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.136126][   T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  541.208587][ T8602] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  541.275081][ T8602] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  541.277430][ T8602] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  541.344871][ T8602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  541.364611][ T8602] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  541.415460][ T8602] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  541.417201][ T8602] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  541.465088][ T8602] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  541.500642][ T5616] Bluetooth: hci6: command tx timeout
[  541.917203][ T8689] kvm: kvm [8688]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080
[  541.933147][ T8689] kvm: kvm [8688]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000
[  541.939803][ T8689] kvm: kvm [8688]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  541.940143][ T8689] kvm: kvm [8688]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  541.978407][ T8689] kvm: kvm [8688]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  541.978493][ T8689] kvm: kvm [8688]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  542.015886][ T8689] kvm: kvm [8688]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  542.015972][ T8689] kvm: kvm [8688]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  542.046150][ T8689] kvm: kvm [8688]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  542.046976][ T8689] kvm: kvm [8688]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  542.302657][ T8411] veth0_vlan: entered promiscuous mode
[  542.430179][ T8411] veth1_vlan: entered promiscuous mode
[  542.469408][ T8518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  542.503793][ T8602] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.641593][ T8602] 8021q: adding VLAN 0 to HW filter on device team0
[  542.698225][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.698378][ T6093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.789003][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.789219][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.796324][ T8411] veth0_macvtap: entered promiscuous mode
[  542.849379][ T8411] veth1_macvtap: entered promiscuous mode
[  542.943312][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_0
[  542.977250][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_1
[  543.570597][  T157] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  543.581978][ T5616] Bluetooth: hci6: command tx timeout
[  543.677722][ T8518] veth0_vlan: entered promiscuous mode
[  543.941178][ T8518] veth1_vlan: entered promiscuous mode
[  543.956693][ T6038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.956715][ T6038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.193897][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.193919][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.647235][ T8518] veth0_macvtap: entered promiscuous mode
[  545.792576][ T8518] veth1_macvtap: entered promiscuous mode
[  545.842474][ T3352] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.931746][ T8518] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.005396][ T8518] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.031868][ T3352] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.032129][ T3352] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.110866][  T157] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.563801][   T66] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.567435][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.599471][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.224682][ T8725] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  547.244953][ T8725] 9p: Bad value for 'wfdno'
[  548.882534][ T8602] 8021q: adding VLAN 0 to HW filter on device batadv0
[  549.365287][ T3299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.365311][ T3299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.537443][ T5611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  549.666504][ T5611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  549.685537][ T5611] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  549.691222][ T5611] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  549.738010][ T5611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  550.206331][ T8742] tmpfs: Bad value for 'mpol'
[  550.311363][ T6093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  550.311383][ T6093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  550.493888][ T8745] netlink: 40 bytes leftover after parsing attributes in process `syz.5.539'.
[  551.676456][ T8602] veth0_vlan: entered promiscuous mode
[  551.737648][ T8602] veth1_vlan: entered promiscuous mode
[  551.832244][ T5616] Bluetooth: hci7: command tx timeout
[  551.929944][    C1] Unknown status report in ack skb
[  551.975485][ T8602] veth0_macvtap: entered promiscuous mode
[  552.019953][ T8602] veth1_macvtap: entered promiscuous mode
[  552.099740][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_0
[  552.146576][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_1
[  553.411061][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.545'.
[  553.833008][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.545'.
[  553.988702][ T5616] Bluetooth: hci7: command tx timeout
[  554.102412][ T8788] FAULT_INJECTION: forcing a failure.
[  554.102412][ T8788] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  554.102450][ T8788] CPU: 0 UID: 0 PID: 8788 Comm: syz.6.546 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  554.102477][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  554.102491][ T8788] Call Trace:
[  554.102499][ T8788]  <TASK>
[  554.102508][ T8788]  dump_stack_lvl+0xe8/0x150
[  554.102549][ T8788]  should_fail_ex+0x467/0x600
[  554.102589][ T8788]  _copy_from_user+0x2d/0xb0
[  554.102619][ T8788]  ___sys_sendmsg+0x1c6/0x360
[  554.102649][ T8788]  ? __lock_acquire+0x683/0x2ce0
[  554.102679][ T8788]  ? __pfx____sys_sendmsg+0x10/0x10
[  554.102748][ T8788]  ? __fget_files+0x2a/0x420
[  554.102772][ T8788]  ? __fget_files+0x3a8/0x420
[  554.102807][ T8788]  __x64_sys_sendmsg+0x1b7/0x290
[  554.102842][ T8788]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  554.102903][ T8788]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.102928][ T8788]  do_syscall_64+0x174/0x580
[  554.102958][ T8788]  ? trace_irq_disable+0x3b/0x140
[  554.102980][ T8788]  ? clear_bhb_loop+0x40/0x90
[  554.103009][ T8788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.103031][ T8788] RIP: 0033:0x7f4f727de019
[  554.103052][ T8788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.103072][ T8788] RSP: 002b:00007f4f709f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  554.103096][ T8788] RAX: ffffffffffffffda RBX: 00007f4f72a66180 RCX: 00007f4f727de019
[  554.103113][ T8788] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000005
[  554.103127][ T8788] RBP: 00007f4f709f4090 R08: 0000000000000000 R09: 0000000000000000
[  554.103141][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.103154][ T8788] R13: 00007f4f72a66218 R14: 00007f4f72a66180 R15: 00007ffd81f08dc8
[  554.103190][ T8788]  </TASK>
[  554.987273][ T1503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.987296][ T1503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.245145][ T8793] netlink: 20 bytes leftover after parsing attributes in process `syz.6.547'.
[  555.245172][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.547'.
[  555.248531][   T43] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  555.282361][   T67] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  555.286083][   T67] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  555.500040][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.500066][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.680462][ T5715] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  555.769708][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.550'.
[  555.769741][ T8803] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  555.832089][ T5715] usb 7-1: Using ep0 maxpacket: 32
[  555.889338][ T5715] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  555.889396][ T5715] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  555.889436][ T5715] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  555.889467][ T5715] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  555.889497][ T5715] usb 7-1: config 0 interface 0 has no altsetting 0
[  555.889533][ T5715] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  555.889558][ T5715] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.022978][ T5715] usb 7-1: config 0 descriptor??
[  556.024055][ T8796] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  556.061730][ T5616] Bluetooth: hci7: command tx timeout
[  556.121170][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.5.551'.
[  556.368122][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.368315][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.368582][ T8731] bridge_slave_0: entered allmulticast mode
[  556.401961][ T8731] bridge_slave_0: entered promiscuous mode
[  556.435207][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.435346][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.435603][ T8731] bridge_slave_1: entered allmulticast mode
[  556.462634][ T8731] bridge_slave_1: entered promiscuous mode
[  556.552085][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.575012][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.699636][ T8731] team0: Port device team_slave_0 added
[  556.707602][ T8796] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  556.837177][ T8731] team0: Port device team_slave_1 added
[  557.454167][ T5715] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0
[  557.454211][ T5715] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0
[  557.454240][ T5715] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0
[  557.454269][ T5715] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0
[  557.454297][ T5715] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0
[  557.753568][ T5715] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0
[  557.753926][ T5715] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints?
[  557.755072][    C1] hid-thrustmaster 0003:044F:B65D.000A: URB to get model id failed with error -71
[  557.841124][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.553'.
[  558.140683][ T5616] Bluetooth: hci7: command tx timeout
[  558.189515][ T5715] usb 7-1: USB disconnect, device number 2
[  558.254308][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0
[  558.254321][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  558.254343][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  558.338687][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_1
[  558.338700][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  558.338735][ T8731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  558.396898][ T8825] FAULT_INJECTION: forcing a failure.
[  558.396898][ T8825] name failslab, interval 1, probability 0, space 0, times 0
[  558.396925][ T8825] CPU: 1 UID: 0 PID: 8825 Comm: syz.6.556 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  558.396944][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  558.396954][ T8825] Call Trace:
[  558.396960][ T8825]  <TASK>
[  558.396967][ T8825]  dump_stack_lvl+0xe8/0x150
[  558.396996][ T8825]  should_fail_ex+0x467/0x600
[  558.397027][ T8825]  should_failslab+0xa8/0x100
[  558.397048][ T8825]  __kmalloc_cache_noprof+0xa0/0x6b0
[  558.397069][ T8825]  ? newseg+0x287/0xc90
[  558.397095][ T8825]  ? newseg+0x287/0xc90
[  558.397121][ T8825]  newseg+0x287/0xc90
[  558.397149][ T8825]  ? __pfx_newseg+0x10/0x10
[  558.397173][ T8825]  ? ipcget+0x140/0xf30
[  558.397198][ T8825]  ipcget+0xac5/0xf30
[  558.397220][ T8825]  ? ipcget+0x140/0xf30
[  558.397251][ T8825]  ? __pfx_ipcget+0x10/0x10
[  558.397281][ T8825]  __x64_sys_shmget+0x140/0x190
[  558.397306][ T8825]  ? __pfx___x64_sys_shmget+0x10/0x10
[  558.397335][ T8825]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.397353][ T8825]  do_syscall_64+0x174/0x580
[  558.397375][ T8825]  ? trace_irq_disable+0x3b/0x140
[  558.397391][ T8825]  ? clear_bhb_loop+0x40/0x90
[  558.397412][ T8825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.397428][ T8825] RIP: 0033:0x7f4f727de019
[  558.397442][ T8825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.397456][ T8825] RSP: 002b:00007f4f70a36028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d
[  558.397472][ T8825] RAX: ffffffffffffffda RBX: 00007f4f72a65fa0 RCX: 00007f4f727de019
[  558.397484][ T8825] RDX: 0000000000000a20 RSI: 0000000000004000 RDI: 00000000798dd82c
[  558.397494][ T8825] RBP: 00007f4f70a36090 R08: 0000000000000000 R09: 0000000000000000
[  558.397505][ T8825] R10: 0000200000ffb000 R11: 0000000000000246 R12: 0000000000000001
[  558.397515][ T8825] R13: 00007f4f72a66038 R14: 00007f4f72a65fa0 R15: 00007ffd81f08dc8
[  558.397539][ T8825]  </TASK>
[  559.323197][ T8834] netlink: 16 bytes leftover after parsing attributes in process `syz.5.560'.
[  559.410935][ T8731] hsr_slave_0: entered promiscuous mode
[  559.427048][ T8731] hsr_slave_1: entered promiscuous mode
[  559.440817][ T8731] debugfs: 'hsr0' already exists in 'hsr'
[  559.440846][ T8731] Cannot create hsr debugfs directory
[  559.975626][ T8843] openvswitch: netlink: IP tunnel dst address not specified
[  560.903255][ T8849] FAULT_INJECTION: forcing a failure.
[  560.903255][ T8849] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  560.903284][ T8849] CPU: 1 UID: 0 PID: 8849 Comm: syz.6.565 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  560.903302][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  560.903312][ T8849] Call Trace:
[  560.903319][ T8849]  <TASK>
[  560.903326][ T8849]  dump_stack_lvl+0xe8/0x150
[  560.903356][ T8849]  should_fail_ex+0x467/0x600
[  560.903386][ T8849]  _copy_from_user+0x2d/0xb0
[  560.903408][ T8849]  simple_attr_write_xsigned+0x14a/0x2f0
[  560.903430][ T8849]  ? __pfx_simple_attr_write_xsigned+0x10/0x10
[  560.903458][ T8849]  debugfs_attr_write+0x76/0x130
[  560.903477][ T8849]  ? __pfx_debugfs_attr_write+0x10/0x10
[  560.903493][ T8849]  vfs_write+0x29f/0xbb0
[  560.903521][ T8849]  ? __pfx_vfs_write+0x10/0x10
[  560.903543][ T8849]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  560.903565][ T8849]  ? lockdep_hardirqs_on+0x7a/0x110
[  560.903587][ T8849]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  560.903609][ T8849]  ? mutex_lock_nested+0x152/0x1d0
[  560.903624][ T8849]  ? fdget_pos+0x252/0x320
[  560.903648][ T8849]  ksys_write+0x156/0x270
[  560.903671][ T8849]  ? __pfx_ksys_write+0x10/0x10
[  560.903698][ T8849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.903716][ T8849]  do_syscall_64+0x174/0x580
[  560.903737][ T8849]  ? trace_irq_disable+0x3b/0x140
[  560.903753][ T8849]  ? clear_bhb_loop+0x40/0x90
[  560.903773][ T8849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  560.903789][ T8849] RIP: 0033:0x7f4f727de019
[  560.903803][ T8849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  560.903817][ T8849] RSP: 002b:00007f4f70a36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  560.903834][ T8849] RAX: ffffffffffffffda RBX: 00007f4f72a65fa0 RCX: 00007f4f727de019
[  560.903846][ T8849] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[  560.903856][ T8849] RBP: 00007f4f70a36090 R08: 0000000000000000 R09: 0000000000000000
[  560.903866][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  560.903875][ T8849] R13: 00007f4f72a66038 R14: 00007f4f72a65fa0 R15: 00007ffd81f08dc8
[  560.903905][ T8849]  </TASK>
[  561.369876][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.7.566'.
[  561.542958][ T8853] netlink: 40 bytes leftover after parsing attributes in process `syz.6.567'.
[  561.832039][   T56] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  561.899706][    C0] Unknown status report in ack skb
[  562.814855][ T8869] netlink: 16 bytes leftover after parsing attributes in process `syz.7.572'.
[  562.964778][ T8873] FAULT_INJECTION: forcing a failure.
[  562.964778][ T8873] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  562.964816][ T8873] CPU: 1 UID: 0 PID: 8873 Comm: syz.6.573 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  562.964836][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  562.964846][ T8873] Call Trace:
[  562.964853][ T8873]  <TASK>
[  562.964859][ T8873]  dump_stack_lvl+0xe8/0x150
[  562.964890][ T8873]  should_fail_ex+0x467/0x600
[  562.964922][ T8873]  _copy_from_user+0x2d/0xb0
[  562.964944][ T8873]  ___sys_sendmsg+0x1c6/0x360
[  562.964967][ T8873]  ? __lock_acquire+0x683/0x2ce0
[  562.964989][ T8873]  ? __pfx____sys_sendmsg+0x10/0x10
[  562.965038][ T8873]  ? __fget_files+0x2a/0x420
[  562.965056][ T8873]  ? __fget_files+0x3a8/0x420
[  562.965083][ T8873]  __x64_sys_sendmsg+0x1b7/0x290
[  562.965109][ T8873]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  562.965146][ T8873]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.965164][ T8873]  do_syscall_64+0x174/0x580
[  562.965189][ T8873]  ? trace_irq_disable+0x3b/0x140
[  562.965208][ T8873]  ? clear_bhb_loop+0x40/0x90
[  562.965230][ T8873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.965248][ T8873] RIP: 0033:0x7f4f727de019
[  562.965265][ T8873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  562.965279][ T8873] RSP: 002b:00007f4f70a36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  562.965297][ T8873] RAX: ffffffffffffffda RBX: 00007f4f72a65fa0 RCX: 00007f4f727de019
[  562.965313][ T8873] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003
[  562.965324][ T8873] RBP: 00007f4f70a36090 R08: 0000000000000000 R09: 0000000000000000
[  562.965334][ T8873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  562.965343][ T8873] R13: 00007f4f72a66038 R14: 00007f4f72a65fa0 R15: 00007ffd81f08dc8
[  562.965369][ T8873]  </TASK>
[  563.024826][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  563.024899][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  564.445940][ T8731] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  564.488207][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.7.577'.
[  564.564844][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  564.704312][ T8731] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  564.849712][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  564.869724][ T8731] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  565.152693][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  565.238629][ T8731] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  565.274993][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  565.981978][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0
[  566.101728][ T8731] 8021q: adding VLAN 0 to HW filter on device team0
[  566.129935][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.134013][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state
[  566.256525][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.256633][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state
[  566.862369][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.583'.
[  569.899496][    C0] wlan1: beacon TX faster than countdown (channel/color switch) completion
[  572.146964][ T8933] ceph: No mds server is up or the cluster is laggy
[  572.397103][ T8720] libceph: connect (1)[c::]:6789 error -101
[  572.416911][ T8720] libceph: mon0 (1)[c::]:6789 connect error
[  572.478823][   T36] libceph: connect (1)[c::]:6789 error -101
[  572.479028][   T36] libceph: mon0 (1)[c::]:6789 connect error
[  572.671085][   T36] libceph: connect (1)[c::]:6789 error -101
[  572.671294][   T36] libceph: mon0 (1)[c::]:6789 connect error
[  572.685653][ T8939] ceph: No mds server is up or the cluster is laggy
[  572.759299][ T5614] libceph: connect (1)[c::]:6789 error -101
[  572.759512][ T5614] libceph: mon0 (1)[c::]:6789 connect error
[  572.933185][   T36] libceph: connect (1)[c::]:6789 error -101
[  572.933381][   T36] libceph: mon0 (1)[c::]:6789 connect error
[  573.716249][ T8720] libceph: connect (1)[c::]:6789 error -101
[  573.855129][ T8720] libceph: mon0 (1)[c::]:6789 connect error
[  574.050917][ T8951] ceph: No mds server is up or the cluster is laggy
[  574.134112][ T5612] libceph: connect (1)[c::]:6789 error -101
[  574.134256][ T5612] libceph: mon0 (1)[c::]:6789 connect error
[  574.640805][ T5612] libceph: connect (1)[c::]:6789 error -101
[  574.641005][ T5612] libceph: mon0 (1)[c::]:6789 connect error
[  574.674892][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0
[  575.007674][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.8.595'.
[  576.912251][ T8977] FAULT_INJECTION: forcing a failure.
[  576.912251][ T8977] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  576.912297][ T8977] CPU: 0 UID: 0 PID: 8977 Comm: syz.8.598 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  576.912324][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  576.912338][ T8977] Call Trace:
[  576.912346][ T8977]  <TASK>
[  576.912355][ T8977]  dump_stack_lvl+0xe8/0x150
[  576.912395][ T8977]  should_fail_ex+0x467/0x600
[  576.912449][ T8977]  _copy_from_user+0x2d/0xb0
[  576.912476][ T8977]  ___sys_sendmsg+0x1c6/0x360
[  576.912505][ T8977]  ? __lock_acquire+0x683/0x2ce0
[  576.912533][ T8977]  ? __pfx____sys_sendmsg+0x10/0x10
[  576.912598][ T8977]  ? __fget_files+0x2a/0x420
[  576.912622][ T8977]  ? __fget_files+0x3a8/0x420
[  576.912655][ T8977]  __x64_sys_sendmsg+0x1b7/0x290
[  576.912687][ T8977]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  576.912733][ T8977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.912758][ T8977]  do_syscall_64+0x174/0x580
[  576.912787][ T8977]  ? trace_irq_disable+0x3b/0x140
[  576.912809][ T8977]  ? clear_bhb_loop+0x40/0x90
[  576.912836][ T8977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.912858][ T8977] RIP: 0033:0x7f2f2eebe019
[  576.912877][ T8977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  576.912898][ T8977] RSP: 002b:00007f2f2d116028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  576.912921][ T8977] RAX: ffffffffffffffda RBX: 00007f2f2f145fa0 RCX: 00007f2f2eebe019
[  576.912937][ T8977] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  576.912950][ T8977] RBP: 00007f2f2d116090 R08: 0000000000000000 R09: 0000000000000000
[  576.912963][ T8977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  576.912976][ T8977] R13: 00007f2f2f146038 R14: 00007f2f2f145fa0 R15: 00007fff8b620298
[  576.913009][ T8977]  </TASK>
[  578.854385][ T8731] veth0_vlan: entered promiscuous mode
[  578.997246][ T5614] libceph: connect (1)[c::]:6789 error -101
[  579.063662][ T5614] libceph: mon0 (1)[c::]:6789 connect error
[  579.298028][ T8720] libceph: connect (1)[c::]:6789 error -101
[  579.383418][ T8720] libceph: mon0 (1)[c::]:6789 connect error
[  579.405963][ T8731] veth1_vlan: entered promiscuous mode
[  579.630406][ T8990] ceph: No mds server is up or the cluster is laggy
[  579.675364][ T8720] libceph: connect (1)[c::]:6789 error -101
[  579.675501][ T8720] libceph: mon0 (1)[c::]:6789 connect error
[  579.983935][ T8731] veth0_macvtap: entered promiscuous mode
[  581.521340][ T8731] veth1_macvtap: entered promiscuous mode
[  581.715030][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_0
[  581.747460][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_1
[  582.206716][ T6093] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.690780][ T9008] netlink: 14 bytes leftover after parsing attributes in process `syz.5.607'.
[  583.229821][   T36] IPVS: starting estimator thread 0...
[  583.438402][ T9017] IPVS: using max 12 ests per chain, 28800 per kthread
[  583.710303][   T66] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.722901][ T1199] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.763420][ T1184] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  584.399028][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.399050][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.005882][ T9029] netlink: 40 bytes leftover after parsing attributes in process `syz.5.613'.
[  585.100490][ T1503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.100528][ T1503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.170001][    C1] Unknown status report in ack skb
[  585.389168][ T9031] ip6gre1: entered allmulticast mode
[  585.417094][ T8844] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  586.218530][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.610'.
[  587.737351][ T9055] netlink: 40 bytes leftover after parsing attributes in process `syz.9.619'.
[  587.888439][    C1] Unknown status report in ack skb
[  587.929275][ T9060] netlink: 40 bytes leftover after parsing attributes in process `syz.7.620'.
[  589.953838][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  590.032954][ T9058] netlink: 48 bytes leftover after parsing attributes in process `syz.5.621'.
[  590.045084][    C1] Unknown status report in ack skb
[  590.896994][ T9076] process 'syz.9.624' launched './file1' with NULL argv: empty string added
[  592.387000][    C1] sd 0:0:1:0: [sda] tag#6603 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  592.387057][    C1] sd 0:0:1:0: [sda] tag#6603 CDB: Read(10) 28 00 00 00 00 00 00 00 01
[  592.662360][ T9095] FAULT_INJECTION: forcing a failure.
[  592.662360][ T9095] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  592.662399][ T9095] CPU: 1 UID: 0 PID: 9095 Comm: syz.6.631 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  592.662424][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  592.662438][ T9095] Call Trace:
[  592.662447][ T9095]  <TASK>
[  592.662456][ T9095]  dump_stack_lvl+0xe8/0x150
[  592.662497][ T9095]  should_fail_ex+0x467/0x600
[  592.662538][ T9095]  _copy_from_user+0x2d/0xb0
[  592.662566][ T9095]  __sys_bpf+0x2e7/0xd90
[  592.662600][ T9095]  ? __pfx___sys_bpf+0x10/0x10
[  592.662627][ T9095]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  592.662663][ T9095]  ? rt_mutex_slowunlock+0x219/0x460
[  592.662705][ T9095]  ? ksys_write+0x248/0x270
[  592.662740][ T9095]  ? __pfx_ksys_write+0x10/0x10
[  592.662774][ T9095]  __x64_sys_bpf+0xba/0xd0
[  592.662809][ T9095]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.662833][ T9095]  do_syscall_64+0x174/0x580
[  592.662864][ T9095]  ? trace_irq_disable+0x3b/0x140
[  592.662887][ T9095]  ? clear_bhb_loop+0x40/0x90
[  592.662914][ T9095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.662937][ T9095] RIP: 0033:0x7f4f727de019
[  592.662958][ T9095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  592.662978][ T9095] RSP: 002b:00007f4f70a36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  592.663001][ T9095] RAX: ffffffffffffffda RBX: 00007f4f72a65fa0 RCX: 00007f4f727de019
[  592.663018][ T9095] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000001
[  592.663032][ T9095] RBP: 00007f4f70a36090 R08: 0000000000000000 R09: 0000000000000000
[  592.663045][ T9095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  592.663058][ T9095] R13: 00007f4f72a66038 R14: 00007f4f72a65fa0 R15: 00007ffd81f08dc8
[  592.663093][ T9095]  </TASK>
[  592.862829][ T5612] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  593.078136][ T5612] usb 9-1: config 0 has an invalid interface number: 64 but max is 0
[  593.078170][ T5612] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  593.078193][ T5612] usb 9-1: config 0 has no interface number 0
[  593.109551][ T5612] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  593.109582][ T5612] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.109605][ T5612] usb 9-1: Product: syz
[  593.109620][ T5612] usb 9-1: Manufacturer: syz
[  593.109636][ T5612] usb 9-1: SerialNumber: syz
[  593.188231][ T5612] usb 9-1: config 0 descriptor??
[  597.109271][ T5612] uvcvideo 9-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  597.109355][ T5612] uvcvideo 9-1:0.64: No valid video chain found.
[  597.199288][ T9119] FAULT_INJECTION: forcing a failure.
[  597.199288][ T9119] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  597.199325][ T9119] CPU: 0 UID: 0 PID: 9119 Comm: syz.7.637 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  597.199355][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  597.199368][ T9119] Call Trace:
[  597.199377][ T9119]  <TASK>
[  597.199386][ T9119]  dump_stack_lvl+0xe8/0x150
[  597.199425][ T9119]  should_fail_ex+0x467/0x600
[  597.199466][ T9119]  _copy_from_user+0x2d/0xb0
[  597.199495][ T9119]  __sys_connect+0x155/0x470
[  597.199524][ T9119]  ? __pfx___sys_connect+0x10/0x10
[  597.199563][ T9119]  ? __pfx_ksys_write+0x10/0x10
[  597.199598][ T9119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.199622][ T9119]  __x64_sys_connect+0x7a/0x90
[  597.199649][ T9119]  do_syscall_64+0x174/0x580
[  597.199678][ T9119]  ? trace_irq_disable+0x3b/0x140
[  597.199700][ T9119]  ? clear_bhb_loop+0x40/0x90
[  597.199728][ T9119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.199751][ T9119] RIP: 0033:0x7fa40869e019
[  597.199772][ T9119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.199792][ T9119] RSP: 002b:00007fa4068d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  597.199815][ T9119] RAX: ffffffffffffffda RBX: 00007fa408926090 RCX: 00007fa40869e019
[  597.199831][ T9119] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003
[  597.199853][ T9119] RBP: 00007fa4068d5090 R08: 0000000000000000 R09: 0000000000000000
[  597.199868][ T9119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  597.199882][ T9119] R13: 00007fa408926128 R14: 00007fa408926090 R15: 00007ffefaa4db78
[  597.199918][ T9119]  </TASK>
[  597.608399][ T5612] usb 9-1: USB disconnect, device number 2
[  597.757895][ T9111] loop4: detected capacity change from 0 to 7
[  597.779965][ T9111] Dev loop4: unable to read RDB block 7
[  597.780025][ T9111]  loop4: AHDI p1 p2 p3
[  597.780046][ T9111] loop4: partition table partially beyond EOD, truncated
[  597.825284][ T9111] loop4: p1 start 1601398130 is beyond EOD, truncated
[  597.825312][ T9111] loop4: p2 start 1702059890 is beyond EOD, truncated
[  598.024407][ T9129] capability: warning: `syz.7.641' uses 32-bit capabilities (legacy support in use)
[  598.636190][ T9133] FAULT_INJECTION: forcing a failure.
[  598.636190][ T9133] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  598.636219][ T9133] CPU: 1 UID: 0 PID: 9133 Comm: syz.6.643 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  598.636237][ T9133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  598.636247][ T9133] Call Trace:
[  598.636253][ T9133]  <TASK>
[  598.636259][ T9133]  dump_stack_lvl+0xe8/0x150
[  598.636288][ T9133]  should_fail_ex+0x467/0x600
[  598.636318][ T9133]  _copy_from_user+0x2d/0xb0
[  598.636338][ T9133]  ___sys_sendmsg+0x1c6/0x360
[  598.636359][ T9133]  ? __lock_acquire+0x683/0x2ce0
[  598.636380][ T9133]  ? __pfx____sys_sendmsg+0x10/0x10
[  598.636425][ T9133]  ? __fget_files+0x2a/0x420
[  598.636442][ T9133]  ? __fget_files+0x3a8/0x420
[  598.636465][ T9133]  __x64_sys_sendmsg+0x1b7/0x290
[  598.636488][ T9133]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  598.636522][ T9133]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.636539][ T9133]  do_syscall_64+0x174/0x580
[  598.636560][ T9133]  ? trace_irq_disable+0x3b/0x140
[  598.636576][ T9133]  ? clear_bhb_loop+0x40/0x90
[  598.636595][ T9133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.636610][ T9133] RIP: 0033:0x7f4f727de019
[  598.636625][ T9133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  598.636638][ T9133] RSP: 002b:00007f4f70a36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  598.636655][ T9133] RAX: ffffffffffffffda RBX: 00007f4f72a65fa0 RCX: 00007f4f727de019
[  598.636671][ T9133] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000003
[  598.636680][ T9133] RBP: 00007f4f70a36090 R08: 0000000000000000 R09: 0000000000000000
[  598.636690][ T9133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  598.636699][ T9133] R13: 00007f4f72a66038 R14: 00007f4f72a65fa0 R15: 00007ffd81f08dc8
[  598.636728][ T9133]  </TASK>
[  598.861360][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  599.602489][ T5897] IPVS: starting estimator thread 0...
[  599.663016][ T9142] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  599.742711][ T9144] IPVS: using max 9 ests per chain, 21600 per kthread
[  600.296126][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.8.638'.
[  607.032978][    C1] Unknown status report in ack skb
[  608.631887][ T5612] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  608.780409][ T5612] usb 9-1: Using ep0 maxpacket: 16
[  608.799080][ T5612] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.799117][ T5612] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  608.799143][ T5612] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  608.799187][ T5612] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  608.799213][ T5612] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.878038][ T5612] usb 9-1: config 0 descriptor??
[  608.901233][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.652'.
[  610.576123][ T5612] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  610.576166][ T5612] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  610.576194][ T5612] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max
[  610.608988][ T5612] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  610.609026][ T5612] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  610.609057][ T5612] microsoft 0003:045E:07DA.000B: unsupported Resolution Multiplier 0
[  610.727283][ T5612] microsoft 0003:045E:07DA.000B: implement() called with n (56) > 32! (kworker/0:4)
[  610.748871][ T5612] microsoft 0003:045E:07DA.000B: unsupported Resolution Multiplier 0
[  610.786974][ T5612] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  610.787012][ T5612] microsoft 0003:045E:07DA.000B: no inputs found
[  610.787027][ T5612] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway
[  610.792027][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.8.662'.
[  610.792105][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.8.662'.
[  611.406319][ T5612] usb 9-1: USB disconnect, device number 3
[  611.792196][ T9231] fido_id[9231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  611.826621][    C0] Unknown status report in ack skb
[  616.140521][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  616.472031][ T5612] IPVS: starting estimator thread 0...
[  617.464173][ T9298] IPVS: using max 11 ests per chain, 26400 per kthread
[  619.803659][ T9174] IPVS: starting estimator thread 0...
[  619.900512][ T9326] IPVS: using max 7 ests per chain, 16800 per kthread
[  624.463451][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  624.463528][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  626.707513][ T5616] Bluetooth: hci5: command 0x0406 tx timeout
[  626.884197][ T9174] IPVS: starting estimator thread 0...
[  627.011441][ T9379] IPVS: using max 11 ests per chain, 26400 per kthread
[  627.210737][ T9381] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  627.347808][ T9381] netlink: 'syz.6.711': attribute type 8 has an invalid length.
[  628.645485][ T9388] block nbd0: not configured, cannot reconfigure
[  629.490530][ T5715] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  629.498616][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.9.719'.
[  629.680815][ T5715] usb 7-1: Using ep0 maxpacket: 16
[  629.683051][ T5715] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  629.683071][ T5715] usb 7-1: config 0 has no interface number 0
[  629.683101][ T5715] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  629.683120][ T5715] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  629.689194][ T5715] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  629.689216][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.689231][ T5715] usb 7-1: Product: syz
[  629.689242][ T5715] usb 7-1: Manufacturer: syz
[  629.689253][ T5715] usb 7-1: SerialNumber: syz
[  629.796093][ T5715] usb 7-1: config 0 descriptor??
[  629.797131][ T9400] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  629.797343][ T9400] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  630.045491][ T9400] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  630.046504][ T9400] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  630.309868][ T5715] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  630.511121][ T5715] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  630.511155][ T5715] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  630.511443][ T5715] asix 7-1:0.34: probe with driver asix failed with error -61
[  630.777956][ T5614] usb 7-1: USB disconnect, device number 3
[  630.861155][ T5612] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  631.043603][ T5612] usb 9-1: Using ep0 maxpacket: 32
[  631.049658][ T5612] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  631.049716][ T5612] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  631.049748][ T5612] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  631.049779][ T5612] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  631.049809][ T5612] usb 9-1: config 0 interface 0 has no altsetting 0
[  631.049845][ T5612] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  631.049871][ T5612] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.146155][ T5612] usb 9-1: config 0 descriptor??
[  631.161380][ T9408] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  631.493238][ T9417] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  632.323638][ T5612] usbhid 9-1:0.0: can't add hid device: -71
[  632.323781][ T5612] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  632.375576][ T5612] usb 9-1: USB disconnect, device number 4
[  633.257711][ T9436] ip6gre1: entered allmulticast mode
[  633.337815][ T9439] netlink: 40 bytes leftover after parsing attributes in process `syz.8.731'.
[  633.427070][   T66] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  633.634435][    C1] Unknown status report in ack skb
[  633.636806][ T5616] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  633.712932][ T5616] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  633.717689][ T5616] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  633.724349][ T5616] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  633.732611][ T5616] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  634.521000][ T5614] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  634.670605][ T5614] usb 9-1: Using ep0 maxpacket: 16
[  634.676345][ T5614] usb 9-1: config 0 has an invalid interface number: 34 but max is 0
[  634.676372][ T5614] usb 9-1: config 0 has no interface number 0
[  634.676419][ T5614] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  634.676445][ T5614] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  634.767611][ T5614] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  634.767645][ T5614] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.767667][ T5614] usb 9-1: Product: syz
[  634.767682][ T5614] usb 9-1: Manufacturer: syz
[  634.767698][ T5614] usb 9-1: SerialNumber: syz
[  634.831361][ T5614] usb 9-1: config 0 descriptor??
[  634.832428][ T9451] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  634.832564][ T9451] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  635.428867][ T9451] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  635.429015][ T9451] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  635.631016][ T5614] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  635.833698][ T5614] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  635.833733][ T5614] asix 9-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  635.834008][ T5614] asix 9-1:0.34: probe with driver asix failed with error -61
[  635.904016][ T5611] Bluetooth: hci8: command tx timeout
[  636.040379][ T5612] usb 9-1: USB disconnect, device number 5
[  636.590367][ T5612] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  636.754485][ T5612] usb 7-1: config 0 has an invalid interface number: 119 but max is 0
[  636.754516][ T5612] usb 7-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  636.754539][ T5612] usb 7-1: config 0 has no interface number 0
[  636.754587][ T5612] usb 7-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  636.780804][ T5611] Bluetooth: hci1: command 0x0406 tx timeout
[  636.812798][ T5612] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  636.812852][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.812874][ T5612] usb 7-1: Product: syz
[  636.812890][ T5612] usb 7-1: Manufacturer: syz
[  636.812905][ T5612] usb 7-1: SerialNumber: syz
[  636.902013][ T5612] usb 7-1: config 0 descriptor??
[  636.942164][ T5612] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input18
[  637.260475][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  637.302686][ T8720] usb 7-1: USB disconnect, device number 4
[  637.470399][ T5612] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  637.633163][ T5612] usb 9-1: config 0 has an invalid interface number: 119 but max is 0
[  637.633194][ T5612] usb 9-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  637.633215][ T5612] usb 9-1: config 0 has no interface number 0
[  637.633258][ T5612] usb 9-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  637.643761][ T5612] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  637.643794][ T5612] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.643818][ T5612] usb 9-1: Product: syz
[  637.643834][ T5612] usb 9-1: Manufacturer: syz
[  637.643849][ T5612] usb 9-1: SerialNumber: syz
[  637.798863][ T5612] usb 9-1: config 0 descriptor??
[  637.861384][ T9478] 9p: Bad value for 'wfdno'
[  637.966082][ T5612] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.119/input/input19
[  637.980494][ T5616] Bluetooth: hci8: command tx timeout
[  638.532275][ T5715] usb 9-1: USB disconnect, device number 6
[  639.084249][ T9174] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  640.066534][ T5616] Bluetooth: hci8: command tx timeout
[  640.216738][ T9174] usb 10-1: config 0 has an invalid interface number: 119 but max is 0
[  640.216768][ T9174] usb 10-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  640.216788][ T9174] usb 10-1: config 0 has no interface number 0
[  640.216834][ T9174] usb 10-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  640.219204][ T9174] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  640.219234][ T9174] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.219255][ T9174] usb 10-1: Product: syz
[  640.219278][ T9174] usb 10-1: Manufacturer: syz
[  640.219293][ T9174] usb 10-1: SerialNumber: syz
[  640.344620][ T9174] usb 10-1: config 0 descriptor??
[  641.689105][ T9174] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.119/input/input20
[  641.829547][ T9085] rds_connect_path_complete: Cannot transition to state UP, current state is 5
[  642.115556][ T5897] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  642.140413][ T5616] Bluetooth: hci8: command tx timeout
[  642.212919][ T9174] usb 10-1: USB disconnect, device number 2
[  642.260570][ T5897] usb 7-1: Using ep0 maxpacket: 16
[  642.263275][ T5897] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  642.263301][ T5897] usb 7-1: config 0 has no interface number 0
[  642.263364][ T5897] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  642.263392][ T5897] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  642.285364][ T5897] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  642.285428][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.285467][ T5897] usb 7-1: Product: syz
[  642.285518][ T5897] usb 7-1: Manufacturer: syz
[  642.285548][ T5897] usb 7-1: SerialNumber: syz
[  642.382103][ T5897] usb 7-1: config 0 descriptor??
[  642.383143][ T9507] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  642.383342][ T9507] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  642.606188][   T43] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.628114][ T9507] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  642.628498][ T9507] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  642.851237][ T5897] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  643.053614][ T5897] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  643.053647][ T5897] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  643.053921][ T5897] asix 7-1:0.34: probe with driver asix failed with error -61
[  643.322470][ T5614] usb 7-1: USB disconnect, device number 5
[  643.386030][   T43] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.652905][ T9441] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.653178][ T9441] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.653399][ T9441] bridge_slave_0: entered allmulticast mode
[  643.656663][ T9441] bridge_slave_0: entered promiscuous mode
[  643.690976][ T9441] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.704969][ T9441] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.705251][ T9441] bridge_slave_1: entered allmulticast mode
[  643.708141][ T9441] bridge_slave_1: entered promiscuous mode
[  644.500062][   T43] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  644.809604][ T9441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  644.941113][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  649.421268][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  649.663049][ T9441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  649.953500][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.9.752'.
[  651.678300][   T43] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.934799][ T9441] team0: Port device team_slave_0 added
[  652.300612][ T5616] Bluetooth: hci2: command 0x0406 tx timeout
[  652.396136][ T9441] team0: Port device team_slave_1 added
[  652.760569][ T9441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  652.760588][ T9441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  652.760619][ T9441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  653.008911][ T9441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  653.008928][ T9441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  653.008966][ T9441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  653.726447][ T9441] hsr_slave_0: entered promiscuous mode
[  653.729562][ T9441] hsr_slave_1: entered promiscuous mode
[  653.743908][ T9441] debugfs: 'hsr0' already exists in 'hsr'
[  653.743935][ T9441] Cannot create hsr debugfs directory
[  655.640423][ T8720] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  655.800406][ T8720] usb 9-1: Using ep0 maxpacket: 16
[  655.804535][ T8720] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  655.804572][ T8720] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  655.804598][ T8720] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  655.804628][ T8720] usb 9-1: config 0 interface 0 has no altsetting 0
[  655.804664][ T8720] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  655.804689][ T8720] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.896570][ T8720] usb 9-1: config 0 descriptor??
[  656.683703][ T8720] hid (null): global environment stack underflow
[  656.683755][ T8720] hid (null): bogus close delimiter
[  656.683770][ T8720] hid (null): invalid report_count 45944
[  656.683789][ T8720] hid (null): report_id 1747254765 is invalid
[  656.683805][ T8720] hid (null): unknown global tag 0xd
[  656.714056][ T8720] hid (null): unknown global tag 0xd
[  656.714092][ T8720] hid (null): unknown global tag 0x4d
[  656.782670][   T43] bridge_slave_1: left allmulticast mode
[  656.782697][   T43] bridge_slave_1: left promiscuous mode
[  656.782896][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.954738][   T43] bridge_slave_0: left allmulticast mode
[  656.954779][   T43] bridge_slave_0: left promiscuous mode
[  656.955056][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.001099][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  659.082871][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  659.105209][   T43] bond0 (unregistering): Released all slaves
[  659.164793][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.9.772'.
[  659.643482][ T9584] netlink: 'syz.8.771': attribute type 5 has an invalid length.
[  659.833435][ T5715] usb 9-1: USB disconnect, device number 7
[  659.920725][ T5614] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  660.100321][ T5614] usb 7-1: Using ep0 maxpacket: 16
[  660.154685][ T5614] usb 7-1: config 64 has an invalid interface number: 238 but max is 0
[  660.154719][ T5614] usb 7-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  660.154741][ T5614] usb 7-1: config 64 has no interface number 0
[  660.154776][ T5614] usb 7-1: config 64 interface 238 has no altsetting 0
[  660.160675][ T5614] usb 7-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a
[  660.160708][ T5614] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.160730][ T5614] usb 7-1: Product: syz
[  660.160746][ T5614] usb 7-1: Manufacturer: syz
[  660.160762][ T5614] usb 7-1: SerialNumber: syz
[  660.304749][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  661.725893][ T5614] uvcvideo 7-1:64.238: Found Unit with invalid ID 0
[  661.725972][ T5614] uvcvideo 7-1:64.238: Found UVC 0.00 device syz (046d:087c)
[  661.726004][ T5614] uvcvideo 7-1:64.238: No valid video chain found.
[  661.774296][ T5614] usb 7-1: USB disconnect, device number 6
[  662.814988][ T5611] Bluetooth: hci6: command 0x0406 tx timeout
[  665.696946][ T9659] netlink: 40 bytes leftover after parsing attributes in process `syz.8.789'.
[  667.563476][    C1] Unknown status report in ack skb
[  667.646353][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9
[  667.990418][ T8720] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  669.100868][ T8720] usb 10-1: Using ep0 maxpacket: 16
[  669.104048][ T8720] usb 10-1: config 64 has an invalid interface number: 238 but max is 0
[  669.104076][ T8720] usb 10-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  669.104096][ T8720] usb 10-1: config 64 has no interface number 0
[  669.104128][ T8720] usb 10-1: config 64 interface 238 has no altsetting 0
[  669.107092][ T8720] usb 10-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a
[  669.107122][ T8720] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.107144][ T8720] usb 10-1: Product: syz
[  669.107160][ T8720] usb 10-1: Manufacturer: syz
[  669.107176][ T8720] usb 10-1: SerialNumber: syz
[  669.157637][ T8722] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  669.362828][ T8722] usb 7-1: Using ep0 maxpacket: 16
[  669.365509][ T8722] usb 7-1: config 64 has an invalid interface number: 238 but max is 0
[  669.365552][ T8722] usb 7-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  669.365575][ T8722] usb 7-1: config 64 has no interface number 0
[  669.365609][ T8722] usb 7-1: config 64 interface 238 has no altsetting 0
[  669.416357][ T8722] usb 7-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a
[  669.416391][ T8722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.416414][ T8722] usb 7-1: Product: syz
[  669.416431][ T8722] usb 7-1: Manufacturer: syz
[  669.416447][ T8722] usb 7-1: SerialNumber: syz
[  669.902202][   T38] INFO: tas[  669.902202][   T38] INFO: task syz.3.515:8454 blocked for more than 144 seconds.
[  669.902228][   T38]       Not tainted syzkaller #0
[  669.902240][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  669.902251][   T38] task:syz.3.515       state:D stack:27696 pid:8454  tgid:8452  ppid:5605   task_flags:0x400140 flags:0x00080002
[  669.902377][   T38] Call Trace:
[  669.902385][   T38]  <TASK>
[  669.902399][   T38]  __schedule+0x16dc/0x5500
[  669.902453][   T38]  ? __pfx___schedule+0x10/0x10
[  669.902537][   T38]  ? irqentry_exit+0x218/0x8f0
[  669.902567][   T38]  ? trace_irq_disable+0x3b/0x140
[  669.902592][   T38]  ? __pfx___schedule+0x10/0x10
[  669.902617][   T38]  ? rt_mutex_slowlock_block+0x33a/0x680
[  669.902732][   T38]  rt_mutex_schedule+0x76/0xf0
[  669.902762][   T38]  rt_mutex_slowlock_block+0x55c/0x680
[  669.902795][   T38]  ? rt_mutex_slowlock_block+0x33a/0x680
[  669.902879][   T38]  rt_mutex_slowlock+0x2d4/0x780
[  669.902907][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[  669.902932][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  669.902969][   T38]  ? write_ports+0xb5/0xd20
[  669.903065][   T38]  ? write_ports+0xb5/0xd20
[  669.903107][   T38]  ? write_ports+0xb5/0xd20
[  669.903138][   T38]  mutex_lock_nested+0x168/0x1d0
[  669.903226][   T38]  write_ports+0xb5/0xd20
[  669.903263][   T38]  ? __pfx_write_ports+0x10/0x10
[  669.903295][   T38]  ? __might_fault+0xaf/0x130
[  669.903398][   T38]  ? _copy_from_user+0x94/0xb0
[  669.903429][   T38]  ? simple_transaction_get+0x130/0x170
[  669.903456][   T38]  nfsctl_transaction_write+0x112/0x160
[  669.903549][   T38]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  669.903585][   T38]  vfs_write+0x29f/0xbb0
[  669.903624][   T38]  ? __pfx_vfs_write+0x10/0x10
[  669.903720][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  669.903754][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  669.903783][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  669.903815][   T38]  ? mutex_lock_nested+0x152/0x1d0
[  669.903888][   T38]  ? fdget_pos+0x252/0x320
[  669.903946][   T38]  ksys_write+0x156/0x270
[  669.903979][   T38]  ? __pfx_ksys_write+0x10/0x10
[  669.904074][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.904101][   T38]  do_syscall_64+0x174/0x580
[  669.904132][   T38]  ? trace_irq_disable+0x3b/0x140
[  669.904155][   T38]  ? clear_bhb_loop+0x40/0x90
[  669.904241][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  669.904266][   T38] RIP: 0033:0x7f84aba6e019
[  669.904287][   T38] RSP: 002b:00007f84a9cc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  669.904311][   T38] RAX: ffffffffffffffda RBX: 00007f84abcf5fa0 RCX: 00007f84aba6e019
[  669.904328][   T38] RDX: 0000000000000009 RSI: 0000200000000400 RDI: 0000000000000006
[  669.904400][   T38] RBP: 00007f84abb0500c R08: 0000000000000000 R09: 0000000000000000
[  669.904416][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  669.904430][   T38] R13: 00007f84abcf6038 R14: 00007f84abcf5fa0 R15: 00007fff0e29abb8
[  669.904464][   T38]  </TASK>
[  669.904592][   T38] 
[  669.904592][   T38] Showing all locks held in the system:
[  669.904609][   T38] 1 lock held by khungtaskd/38:
[  669.904622][   T38]  #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  669.904750][   T38] 5 locks held by kworker/u8:2/43:
[  669.904764][   T38]  #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  669.904825][   T38]  #1: ffffc90000b57c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  669.904939][   T38]  #2: ffffffff8f5a39e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  669.904995][   T38]  #3: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0
[  669.905111][   T38]  #4: ffff88804bb208d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_stop+0x121/0x200
[  669.905233][   T38] 3 locks held by kworker/u8:5/67:
[  669.905246][   T38]  #0: ffff88801afa2938 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  669.905304][   T38]  #1: ffffc9000153fc40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  669.905418][   T38]  #2: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xd9/0x640
[  669.905553][   T38] 7 locks held by udevd/4963:
[  669.905567][   T38] 2 locks held by dhcpcd/5258:
[  669.905579][   T38]  #0: ffff888039110928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0
[  669.905637][   T38]  #1: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0
[  669.905752][   T38] 2 locks held by getty/5349:
[  669.905764][   T38]  #0: ffff888035fb40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  669.905890][   T38]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[  669.905951][   T38] 4 locks held by udevd/7723:
[  669.905964][   T38]  #0: ffff888024becdb0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0
[  669.906081][   T38]  #1: ffff888069da8c78 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[  669.906149][   T38]  #2: ffff888067d00878 (kn->active#23){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  669.906268][   T38]  #3: ffff88803a530210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  669.906378][   T38] 4 locks held by udevd/7828:
[  669.906391][   T38]  #0: ffff888024bec838 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa5/0xcb0
[  669.906451][   T38]  #1: ffff888034926878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[  669.906576][   T38]  #2: ffff888059438d28 (kn->active#23){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  669.906643][   T38]  #3: ffff888039916210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  669.906767][   T38] 1 lock held by udevd/8088:
[  669.906780][   T38]  #0: ffff888034811208 (&ep->lock){+.+.}-{3:3}, at: do_epoll_wait+0x849/0xaa0
[  669.906896][   T38] 2 locks held by syz.0.505/8441:
[  669.906910][   T38]  #0: ffff88803f8f6500 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  669.906972][   T38]  #1: ffffffff8e4e95d8 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  669.907090][   T38] 3 locks held by syz.3.515/8454:
[  669.907103][   T38]  #0: ffff888025782928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  669.907155][   T38]  #1: ffff888022356500 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  669.907279][   T38]  #2: ffffffff8e4e95d8 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  669.907396][   T38] 3 locks held by syz.2.531/8579:
[  669.907410][   T38]  #0: ffff888035f48128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  669.907464][   T38]  #1: ffff88801fafc500 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  669.907581][   T38]  #2: ffffffff8e4e95d8 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  669.907644][   T38] 3 locks held by syz.2.531/8583:
[  669.907657][   T38]  #0: ffff888035f49928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  669.907798][   T38]  #1: ffff88801fafc500 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  669.907917][   T38]  #2: ffffffff8e4e95d8 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20
[  669.907979][   T38] 1 lock held by syz-executor/8602:
[  669.908048][   T38] 4 locks held by kworker/0:6/8720:
[  669.908062][   T38]  #0: ffff888022285138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  669.908121][   T38]  #1: ffffc90003987c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  669.908237][   T38]  #2: ffff88802a550210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0
[  669.908290][   T38]  #3: ffff888039916210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  669.908406][   T38] 6 locks held by kworker/1:0/8722:
[  669.908421][   T38] 6 locks held by kworker/u8:12/8844:
[  669.908434][   T38] 6 locks held by kworker/u8:18/9085:
[  669.908446][   T38]  #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  669.908560][   T38]  #1: ffffc90005e77c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  669.908619][   T38]  #2: ffff88803790a310 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0
[  669.908752][   T38]  #3: ffff88804c82d520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0
[  669.908873][   T38]  #4: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  669.908930][   T38]  #5: ffff8880b8736d10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x158/0x5d0
[  669.909041][   T38] 3 locks held by kworker/u8:19/9302:
[  669.909055][   T38]  #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  669.909114][   T38]  #1: ffffc9000648fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  669.909230][   T38]  #2: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  669.909292][   T38] 7 locks held by syz-executor/9441:
[  669.909305][   T38]  #0: ffff88803484c500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  669.909426][   T38]  #1: ffff888039393078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[  669.909539][   T38]  #2: ffff8880291f9f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[  669.909608][   T38]  #3: ffffffff8ee27338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  669.909755][   T38]  #4: ffff88801fae8160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  669.909875][   T38]  #5: ffff88803a9fe310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[  669.909934][   T38]  #6: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[  669.910044][   T38] 4 locks held by syz.6.793/9678:
[  669.910060][   T38] 
[  669.910066][   T38] =============================================
[  669.910066][   T38] 
[  669.910077][   T38] NMI backtrace for cpu 0
[  669.910092][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  669.910117][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  669.910130][   T38] Call Trace:
[  669.910139][   T38]  <TASK>
[  669.910150][   T38]  dump_stack_lvl+0xe8/0x150
[  669.910186][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[  669.910211][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  669.910248][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  669.910277][   T38]  sys_info+0x135/0x170
[  669.910297][   T38]  watchdog+0xfd7/0x1030
[  669.910327][   T38]  ? watchdog+0x1c7/0x1030
[  669.910356][   T38]  kthread+0x388/0x470
[  669.910390][   T38]  ? __pfx_watchdog+0x10/0x10
[  669.910409][   T38]  ? __pfx_kthread+0x10/0x10
[  669.910444][   T38]  ret_from_fork+0x514/0xb70
[  669.910481][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  669.910512][   T38]  ? __switch_to+0xc89/0x1420
[  669.910544][   T38]  ? __pfx_kthread+0x10/0x10
[  669.910579][   T38]  ret_from_fork_asm+0x1a/0x30
[  669.910619][   T38]  </TASK>
[  669.910679][   T38] Sending NMI from CPU 0 to CPUs 1:
[  669.910716][    C1] NMI backtrace for cpu 1
[  669.910731][    C1] CPU: 1 UID: 0 PID: 9693 Comm: syz.7.797 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  669.910753][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  669.910764][    C1] RIP: 0033:0x7fa4085726e4
[  669.910781][    C1] Code: 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 41 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 <49> 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f 60 00 0f 84
[  669.910798][    C1] RSP: 002b:00007ffefaa4dbc0 EFLAGS: 00000202
[  669.910814][    C1] RAX: 0000000000000001 RBX: ffffffff8b3ffa22 RCX: ffffffff8b3ffa22
[  669.910827][    C1] RDX: 0000000000001a22 RSI: ffffffff8b3ffa22 RDI: 000000000000000a
[  669.910840][    C1] RBP: 0000000000000000 R08: 00007fa408910000 R09: 00007fa408912000
[  669.910853][    C1] R10: 000000008b3ffa26 R11: 000000000000000a R12: 00007fa408926038
[  669.910865][    C1] R13: 0000000000003a77 R14: ffffffff8b3ff2bf R15: 00007fa409455720
[  669.910879][    C1] FS:  000055557bc2e500 GS:  0000000000000000
[  669.912434][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[  669.912486][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  669.912560][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  669.912591][   T38] Call Trace:
[  669.912619][   T38]  <TASK>
[  669.912641][   T38]  vpanic+0x56c/0xa60
[  669.912719][   T38]  ? __pfx___schedule+0x10/0x10
[  669.912793][   T38]  ? __pfx_vpanic+0x10/0x10
[  669.912875][   T38]  panic+0xc5/0xd0
[  669.912934][   T38]  ? __pfx_panic+0x10/0x10
[  669.912985][   T38]  ? preempt_schedule_common+0x82/0xd0
[  669.913057][   T38]  ? preempt_schedule_thunk+0x16/0x40
[  669.913132][   T38]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  669.913198][   T38]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  669.913279][   T38]  watchdog+0x1030/0x1030
[  669.913378][   T38]  ? watchdog+0x1c7/0x1030
[  669.913456][   T38]  kthread+0x388/0x470
[  669.913516][   T38]  ? __pfx_watchdog+0x10/0x10
[  669.913534][   T38]  ? __pfx_kthread+0x10/0x10
[  669.913615][   T38]  ret_from_fork+0x514/0xb70
[  669.913717][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  669.913808][   T38]  ? __switch_to+0xc89/0x1420
[  669.913891][   T38]  ? __pfx_kthread+0x10/0x10
[  669.913976][   T38]  ret_from_fork_asm+0x1a/0x30
[  669.914078][   T38]  </TASK>
[  669.914699][   T38] Kernel Offset: disabled