last executing test programs:

7m50.443202423s ago: executing program 0 (id=204):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0xbc, 0xf, 0x40, 0x5ac, 0x30b, 0x7d4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x3, 0xd3, 0x2, 0x0, [], [{{0x9, 0x5, 0x5, 0x3}}, {{0x9, 0x5, 0x8a, 0x3, 0x3ff}}]}}]}}]}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) (async)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0xbc, 0xf, 0x40, 0x5ac, 0x30b, 0x7d4e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x3, 0xd3, 0x2, 0x0, [], [{{0x9, 0x5, 0x5, 0x3}}, {{0x9, 0x5, 0x8a, 0x3, 0x3ff}}]}}]}}]}}, 0x0) (async)

7m46.822753367s ago: executing program 0 (id=214):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x10, 0x3, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
ioprio_get$pid(0x2, 0xffffffffffffffff)
sched_setaffinity(0x0, 0x42, &(0x7f0000000000)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
clock_gettime(0x0, &(0x7f0000000080))
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x14, 0x1, @thr={&(0x7f0000000380)="e98c59c24ab9659635519462ead483da121fa0cf38ac59e9c77f0a19d1b92e258572f773a4afd44bb16c5f8574aca691d1b3c4d261df33fd6a5b8b8685c66669a20be7283767f1ff021991a6fd7e80319dce22cf3090c282fafb2cc41f2f9e2094945796318c7459a191689f0d85bb1cad5f3839a09e915c3dd8bd9f75176ac576dba28bcd717848898b61c4b53444dc65b61a14baa65f1597ef3dd1e3df0cf4966655648f946d624e286d78d7e1cf3a2e1d18ace9647e9329ba25d142e96003544d", &(0x7f0000000480)}}, &(0x7f0000000100)=<r1=>0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="79a3c074d3f75a9af76501"], 0x14}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0)
timer_settime(r1, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_ifreq(r7, 0x8992, &(0x7f0000000080)={'bond0\x00', @ifru_names='veth0_to_bond\x00'})
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x140041, 0x0)
ioctl$TIOCSSOFTCAR(r8, 0x5453, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@newtaction={0x2330, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4}, {0x2318, 0x1, [@m_ct={0x94, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x64, 0x6, "461fe1247439a0928f088196283a68f654ea0a7e3fb2ab8b18e47623acfbec378e057ba8daf65701fce1f7a8125f49773d3887e5aa97b5ae0ad4ea8f4815793cc9a7a7653ad7d4a10f5bce229c69d79b73814e24bd5f9607ccaa89a4f66de22a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x13c, 0x10, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x7, 0x6, 0xb, 0x100}, 0x447acdb2291de34e, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x80000000, 0x20000000, 0x1, 0x470}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x8, 0x1, 0x2}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0x5, 0x0, 0x5}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x20000000, 0xc, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7, 0x0, 0x7, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xdcb, 0x5, 0x7, 0x8, 0x6}, 0x3}}]}, {0x2e, 0x6, "113e8dcb830f3b51b0d26b403ca8e648641e8b02ed795a5f5e23de998c4a200dfae952541083233b46c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0xaa624cc217e2fb4c}}}}, @m_pedit={0x1d24, 0x1e, 0x0, 0x0, {{0xa}, {0x1c74, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x1ff, 0x2, 0x1, 0x9, 0x3}, 0x7, 0x42, [{0x8, 0x9, 0x40000, 0x2, 0xa, 0x3}]}, [{0x6, 0x9, 0x7, 0x4, 0xe, 0x6}, {0x401, 0x5, 0x635, 0x7ff, 0x6, 0xfffffff9}, {0x8, 0x3ff, 0x68, 0x10, 0x4, 0x6}, {0x76ff, 0x9, 0xfffeffff, 0x1, 0x4}, {0x4, 0x5, 0x0, 0x48b3, 0x3, 0x200}, {0xd, 0x4, 0x7, 0xfffffffe, 0xab28, 0xe}, {0x1ff, 0x0, 0x7fffffff, 0xfffffffe, 0x0, 0x7}, {0xf02, 0xe, 0x2, 0x4, 0x10, 0x7fff}, {0x91, 0x9, 0x401, 0x6, 0x1, 0x5}, {0x9, 0x3, 0xe97e, 0x8d, 0x3}, {0x3, 0x1, 0x6, 0x0, 0x88e, 0xec}, {0x8, 0x8, 0x7, 0xa, 0x5, 0x80}, {0x4, 0x6, 0xf2, 0x7, 0x100, 0x9}, {0x0, 0x4, 0x4, 0x1, 0x10000, 0x6}, {0x800, 0x3, 0x9, 0x7fff, 0x1, 0x6}, {0x401, 0x5, 0x1000, 0x8, 0x2, 0xfffffff9}, {0x0, 0x3, 0x7, 0x5, 0x40000000, 0x8001}, {0xffffffff, 0x9, 0xffff, 0x9, 0xfffffe00, 0xfffffff7}, {0x4, 0x9, 0x66, 0x7, 0x1, 0x3}, {0x2, 0x956, 0xffffffff, 0x8, 0xfffffff9, 0xfffffffc}, {0x5, 0x5, 0x8, 0x8, 0x1000, 0x7}, {0x9, 0x0, 0x9156, 0x1, 0x6, 0x48a}, {0x8000, 0x800, 0x9, 0x6, 0x3, 0x1000}, {0x7f, 0x1000, 0x37e, 0x40, 0x9, 0x200}, {0x9, 0x2, 0x9, 0x4, 0xf969, 0x3}, {0x1, 0x9, 0x1, 0x4, 0x6, 0x960}, {0x2, 0x21, 0x3, 0x4, 0x283, 0x9}, {0x8a, 0x5, 0x0, 0x7, 0x4, 0x2}, {0x80000001, 0x9711, 0x4, 0x1, 0x5, 0x7}, {0x1000, 0xffffffff, 0xd, 0x8000, 0x6, 0x1}, {0x1, 0x7, 0x6, 0x8000, 0x4, 0xfffffff7}, {0xfff, 0x4, 0xa9, 0x6, 0x1, 0x6}, {0x1, 0x25, 0x0, 0x1, 0x727, 0x5}, {0x8, 0x26f7, 0x8, 0x2, 0x65, 0x3}, {0x400, 0x40, 0x7fff, 0x1, 0x5, 0xa8f}, {0x1, 0x3, 0x8, 0x7ff, 0xfffffff1, 0x2}, {0x6, 0xffffffc0, 0x7, 0xe23, 0x5, 0x12}, {0x2, 0x8, 0x26a4b871, 0x4}, {0x3, 0x6, 0x9, 0xfffffc00, 0x9}, {0x70000000, 0xfb74, 0x4, 0x2, 0x4, 0x8}, {0x80000000, 0x0, 0x81, 0x1ddf, 0x9, 0x1ff}, {0x8, 0x85, 0xdceb, 0x5, 0x1, 0x9}, {0x55, 0x8001, 0x38e, 0x8001, 0x0, 0x59}, {0x6, 0x2, 0x9, 0x10001, 0x5, 0x9}, {0x7, 0x80, 0x40, 0x5, 0x4, 0xfff}, {0x1, 0x7, 0x4, 0x5, 0x9, 0xfffffffe}, {0x6190, 0x7fff, 0xffffffff, 0x11, 0xfc8a, 0x1}, {0x9629, 0x0, 0x6, 0x100, 0x5, 0x5}, {0x6, 0x2, 0x6, 0x3, 0x8, 0xfffffe01}, {0xd4, 0xfffffd68, 0x8, 0x140000, 0x3, 0x400}, {0xf7e4, 0x4, 0xffffffff, 0x24, 0x8000, 0x2}, {0xd, 0x24dc, 0x5, 0xfffffffc, 0xf, 0x1}, {0x0, 0x10001, 0x9c, 0x2152, 0xa000, 0x4}, {0x5, 0x9, 0x100, 0x101, 0x200, 0x2}, {0x100, 0x5d, 0xcfc, 0x8, 0x2, 0xc548}, {0x85, 0xc959, 0x1, 0x6, 0x6aa, 0xe}, {0x5, 0x7, 0x7, 0x2, 0xac, 0x2}, {0x40, 0xfffffffd, 0xa, 0x0, 0x2}, {0x10, 0x7ff, 0x5, 0x3, 0xc6c9, 0x8}, {0xfffffffb, 0xfffff801, 0x9, 0x2, 0x3, 0xc9}, {0x3, 0x10000, 0x7f, 0xfffffff8, 0x4a7, 0xfffffff0}, {0x4, 0x7f, 0x6, 0x1, 0x8, 0x6}, {0x8, 0xfffffff8, 0x3, 0xd9f, 0x2, 0x8081}, {0x8d96, 0x5, 0x62f5, 0xf06d, 0x2, 0x10001}, {0x0, 0x6, 0x1, 0x3, 0x3, 0x9}, {0x8000, 0x0, 0x8000, 0x2, 0x2e, 0x8}, {0x8, 0x80000000, 0x4, 0x4, 0x1, 0x9}, {0x100, 0x7, 0x5, 0xa, 0xee, 0x6}, {0xc, 0x1, 0x1000, 0x7, 0x10, 0x4}, {0x0, 0x4, 0xa0e, 0x200, 0x5, 0x4}, {0x9, 0x4, 0x4, 0x582, 0xa, 0xffffffff}, {0x1, 0x7, 0x5, 0x9, 0x9, 0x7}, {0x0, 0xb4be, 0x7ffd, 0x5, 0x10, 0x3}, {0x8001, 0x4, 0x3, 0x80000001, 0xc0cd, 0x1000}, {0x7, 0xe, 0xfffffff9, 0xa8, 0x6, 0x3}, {0x7fffffff, 0xfffffffd, 0x6, 0x5, 0x0, 0xffffffff}, {0x0, 0x52a1aae8, 0x63, 0x7, 0x9, 0x7}, {0x30, 0xe, 0xa93, 0x2, 0x4700, 0xfffffff7}, {0xe7, 0x1, 0xa, 0x800, 0x1, 0x800}, {0x80, 0x8, 0x8, 0x800, 0x7ff, 0x3}, {0x1, 0x8001, 0x6, 0x8, 0x4, 0xfffffff8}, {0x0, 0x0, 0x6, 0x5, 0x101}, {0x6, 0x8, 0x0, 0xffffffc0, 0x6, 0x9}, {0x2, 0x4, 0x7, 0x6, 0x5}, {0x45d37b88, 0x8, 0x5, 0x8, 0x8, 0x4}, {0x69b, 0x6f0, 0x27a, 0x4, 0x101, 0x2}, {0x401, 0x6, 0x5c, 0x2, 0x8, 0x7}, {0x8, 0x9, 0x0, 0x6, 0x1, 0x558}, {0x8, 0x9, 0x9, 0x6, 0xb, 0x1}, {0x6, 0x3, 0x2, 0x8, 0x4, 0x4}, {0x7, 0x6, 0xe4, 0x1, 0x8, 0x36f7b8f0}, {0x6ffd, 0x3, 0x200, 0x8001, 0x8, 0x7}, {0x7, 0x7, 0x9f6, 0xc, 0x7, 0x101}, {0x3, 0x1, 0xd, 0x13b, 0x7, 0x6}, {0x8, 0xfffffff9, 0x2, 0x9, 0x9, 0x9}, {0x6, 0x9, 0xf, 0xcd000000, 0x9, 0x6}, {0x203, 0x5, 0xf, 0x401, 0x7, 0x4}, {0x2, 0x5, 0x4, 0x10, 0x88, 0x9}, {0x0, 0x0, 0x38b54b14, 0xffff0000, 0x6, 0x800}, {0x4, 0x1, 0x5, 0x10000, 0x6, 0x81}, {0x0, 0x2, 0x6, 0x5, 0x4, 0x40}, {0x10003b33, 0x7, 0xfffffffa, 0x4, 0x1ff, 0x2}, {0x4, 0x2, 0x3, 0x30, 0xc17, 0x400}, {0x5c07, 0x3, 0x1, 0x6, 0x5}, {0xffff, 0x10001, 0x3ad, 0x1, 0x4, 0xfff}, {0x2, 0x5c40, 0xd4e2, 0x998, 0xfffffff9, 0x4}, {0xfff, 0x7fff, 0xb, 0x7ff, 0x10001}, {0x10001, 0x10000, 0x2, 0x7, 0x4, 0x9}, {0xddd, 0x8, 0x401, 0x4, 0x2, 0x100}, {0x0, 0xa, 0x8, 0x9, 0x4, 0x2a70}, {0x19f, 0x6, 0x6, 0x1, 0x6, 0x3}, {0x38, 0x6, 0x7, 0x6, 0xffff169a, 0x81}, {0x10, 0x400, 0x0, 0x0, 0xc0e5, 0x7}, {0x7fff, 0x8000, 0x22e3, 0x8001, 0x200, 0x2}, {0x0, 0x7, 0x6, 0xe8, 0x9e9, 0xe50}, {0x8, 0x8, 0x1, 0xd55, 0x80000000}, {0x0, 0xfff, 0x35a, 0xfffffff7, 0x5}, {0xfffffffe, 0x1, 0x5, 0xffff, 0x1, 0x7}, {0x80, 0x3, 0xfffffffd, 0x0, 0x0, 0x1}, {0x9, 0x1, 0x3853, 0x3, 0xfffffffd, 0x93}, {0x7, 0x6, 0x7fff, 0x6, 0x7, 0xc1}, {0x3, 0x5, 0x4, 0xfffffff6, 0x4, 0x5080}, {0x2, 0xfffffe00, 0x8, 0x2, 0x6, 0x8001}, {0x44, 0x0, 0x3, 0x9, 0x0, 0xfff}, {0x265, 0x2, 0xf, 0x6, 0x4, 0x200}, {0x46, 0x200, 0x8, 0x8, 0x7fe0, 0x9}, {0xb3b8, 0xfffffffe, 0x80000, 0x8, 0xcc0, 0x401}, {0x2, 0x1ff, 0x101, 0x5, 0x7, 0x9}], [{0x4, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {0x7, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x4965ed8209768e8b}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x4}, {0x1}, {0x2, 0xeff09fa9953e58bf}, {0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x5, 0x76a710ea86e140b4}, {0x4, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x7}, {0x5, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {}, {0xeabca551d116cf4a}, {0x6, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x3}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x3aa9, 0x6, 0x3, 0x1}, 0xf, 0x7, [{0x9, 0x6, 0xa, 0x924, 0x81, 0x400}]}, [{0xfffffff7, 0x62, 0x80000001, 0x5, 0x0, 0x9}, {0x9d22, 0x200, 0x2, 0x8, 0x4}, {0x6, 0x100, 0x6, 0xfffffffc, 0x8, 0x8}, {0x1, 0x7fff, 0x6, 0x7f, 0x1, 0x8001}, {0x80000001, 0x6, 0x9, 0x6b36, 0x5, 0x9}, {0xffff, 0xc54, 0x7, 0xd, 0x1, 0x3}, {0x8, 0x4, 0x9, 0x9, 0x7, 0x2}, {0x2, 0x7fff, 0xffff, 0xfffffffd, 0xfffffffa, 0x6}, {0x2, 0x2, 0x9, 0x401, 0x7ff, 0x81}, {0x4, 0xe1d7, 0x7, 0x10001, 0x4, 0x6}, {0xfffffff9, 0x7, 0xfffffffe, 0x5, 0x8, 0xff}, {0x4, 0x3, 0x0, 0x2, 0x7, 0x633}, {0x3, 0x4, 0x81, 0x8, 0x7, 0x2}, {0xcf4e, 0x78ce, 0x9, 0x2, 0x3, 0x7}, {0xfff, 0x0, 0x1, 0x1000, 0x6, 0x3}, {0x3, 0xfd1, 0x4, 0xfffffffe, 0x3af, 0x1}, {0x6, 0x5, 0x2, 0x4dafef4a, 0x7f, 0xffffff15}, {0xf973, 0x5, 0x673f, 0x2, 0x4, 0x10}, {0x2, 0xf, 0x2, 0xb, 0x100, 0x80000000}, {0xf8, 0x6e13953d, 0xfffffffa, 0x8, 0x800, 0x7fffffff}, {0x6, 0x3, 0x6, 0xffffffff, 0x38, 0x6}, {0x5, 0xb17, 0x100, 0x2, 0x0, 0xd5ee}, {0x6bd2, 0x401, 0x9, 0x91, 0x7, 0xffff8000}, {0xe, 0x8000, 0x6, 0x6, 0x7, 0xf90}, {0xa, 0xc4, 0x4, 0x6, 0xa, 0x9}, {0x9, 0x400, 0x976, 0x93b9, 0x2, 0x4}, {0x8e60, 0x0, 0x5, 0x1, 0x6, 0x3}, {0x1, 0x4, 0x2, 0x0, 0x5, 0x101}, {0x4, 0x6, 0x7, 0x4, 0xfa28, 0x800}, {0xb, 0x8d, 0x5, 0x562, 0x4, 0x3}, {0x0, 0xd, 0x7, 0x9, 0x5, 0x4}, {0x7fff, 0x5, 0x9, 0x5, 0xfff, 0x3ff}, {0xa, 0xfffffffd, 0x3, 0x1, 0x2, 0xe7}, {0x4, 0x5, 0x8, 0x3, 0xc, 0x3}, {0x0, 0x1bf5, 0xc, 0x100, 0x1, 0xcc52}, {0x7, 0x9, 0xde, 0x3ff, 0x5e, 0xa381}, {0x3, 0xff, 0x8e, 0x3, 0x35d, 0xabf}, {0xea5, 0x0, 0x9, 0x3, 0xf, 0x6}, {0x6, 0x2, 0x2, 0x8, 0x3ff, 0x8}, {0x4, 0x4, 0x3, 0xa6, 0x8001, 0x1}, {0x4, 0x9, 0x9baa, 0x54, 0x882, 0x8d1}, {0x1ff, 0x80000001, 0xfe0, 0x4, 0x40000000, 0x4}, {0x2, 0x10001, 0x3, 0x8, 0x4, 0xb2}, {0x7, 0x1a, 0x0, 0x7, 0x2, 0x3}, {0x3, 0xbdc, 0x4, 0x8, 0x0, 0x8}, {0x6, 0xb, 0x5, 0xfff, 0x3f923337, 0x4}, {0x0, 0x7, 0x1, 0x5, 0xb26, 0x5}, {0x5, 0xff, 0x400, 0x3, 0x0, 0xc75c}, {0x6, 0x6, 0x5, 0x6, 0xfffffffc, 0x8}, {0x9, 0x5, 0x81, 0x2, 0x3, 0x6}, {0xed, 0xa, 0x6, 0x4, 0xd, 0xc2}, {0x8, 0x2, 0xffffffff, 0x100, 0x7, 0x248}, {0x80, 0x43fd, 0x5, 0x1, 0x43, 0xfffffffd}, {0x8, 0x437, 0x7ff, 0xfffffff8, 0x2, 0x5}, {0x9, 0x5, 0x51, 0x3, 0x3, 0x10000}, {0x40, 0xb, 0x6, 0xea7, 0x9, 0x2003}, {0x1, 0x2, 0xfffff67d, 0x10, 0x9, 0x86f}, {0x0, 0xffff, 0x8, 0xc, 0x0, 0x48}, {0x9, 0x2, 0x1000, 0x9, 0x3, 0x1}, {0x5, 0x53e8, 0x0, 0x8, 0x7f}, {0x8, 0x1, 0x3, 0x405, 0xff, 0x9}, {0x26, 0x2, 0xffffffff, 0xd1c, 0x7fff, 0x8}, {0xffffffff, 0x7, 0x800, 0x200, 0x90d, 0x9}, {0x2, 0x4, 0x6, 0x594e4c09, 0x4, 0x6}, {0x1, 0x5, 0xa121, 0x8000, 0xb5, 0x1}, {0x7, 0xa, 0x2, 0x0, 0x3}, {0x28, 0x401, 0x8001, 0x80000000, 0x9, 0x7fff}, {0x2a9, 0x2, 0x9, 0x8, 0x9, 0xb9e}, {0xc4, 0x3, 0x6, 0x5, 0x4, 0x100000}, {0x9, 0x101, 0x3ff, 0x8000, 0x3df2, 0x5}, {0x5, 0x2, 0x1ff, 0x0, 0xc314, 0x1}, {0x1, 0x5, 0x9, 0xff, 0xd1b4, 0x6}, {0x7f, 0x7ff, 0xfffffff6, 0x401, 0xd, 0x7ff}, {0xfffffffe, 0x9, 0x8, 0x2f, 0x8, 0x8}, {0x2, 0xde, 0x86, 0xfffffffb, 0x9, 0x3}, {0xfffffffb, 0xb5, 0x8, 0x9, 0xff, 0xeb800}, {0x5, 0x5, 0xea, 0x2, 0xd4, 0x1}, {0x19c, 0x0, 0x98, 0x2, 0x100, 0xd74}, {0x9, 0x6, 0x5, 0x7, 0x200}, {0x4, 0x200000, 0x5a57, 0x2}, {0x6, 0x9, 0x8, 0x81, 0x6, 0x10}, {0x8, 0xec, 0x3, 0x7, 0x400, 0x81}, {0x0, 0x10001, 0x401, 0x8, 0x4, 0x9}, {0x10e800, 0x2, 0x0, 0x200000, 0x3, 0xb5}, {0x6, 0xa, 0x3, 0x5, 0xb731, 0x7}, {0x4, 0x40000000, 0x3, 0x8001, 0x8, 0x2}, {0x9, 0x5, 0xfffffffe, 0x1, 0x9, 0x2}, {0xfff, 0x8ee, 0x8, 0x4, 0x3, 0x6}, {0x5, 0x80, 0x1, 0x3ff, 0x3, 0x692}, {0x32, 0x308, 0x38, 0x2, 0x487e, 0x7}, {0xc, 0x8, 0x4, 0x4, 0x6, 0xf}, {0x6, 0x8001, 0xd0c, 0x1, 0xd3, 0x11}, {0xffffffaf, 0x3, 0x7, 0x5916, 0x2c, 0x70aa}, {0x8, 0x958, 0x5, 0x4, 0x6, 0x8}, {0x0, 0xf0, 0x8, 0xd3, 0x8, 0x3}, {0x101, 0x6, 0x401, 0x6, 0x6, 0xe}, {0x800, 0xf7, 0x6, 0x8, 0x9, 0x100}, {0x6, 0x1, 0x101, 0x5, 0x7, 0x7}, {0x8000, 0x5000000, 0xfffffffe, 0x4, 0x5, 0x2}, {0x2, 0x18, 0x3, 0x4, 0xb, 0x1}, {0x5, 0x0, 0x0, 0x4, 0x1, 0xffffffff}, {0x9, 0x2, 0xb0, 0x4, 0xc, 0x6}, {0x6, 0x729, 0x4, 0x1, 0x5, 0x3}, {0xd35d, 0x1ff, 0xfffffffc, 0x7fffffff, 0x404, 0x2}, {0x7ea1c2f6, 0x54, 0x555, 0x1, 0x400, 0xd3d9}, {0x0, 0x80000000, 0xffffffff, 0x3ff, 0x800, 0xc6}, {0x7, 0x6, 0xffff, 0xffffff2e, 0xa77, 0x5}, {0xff, 0x1, 0x6, 0x8, 0x8000, 0x8001}, {0x0, 0x9, 0x7ce1f23f, 0xfffffffa, 0x7ff}, {0x7, 0x9, 0x0, 0xfff, 0x346, 0x9f}, {0x3e9, 0x6, 0xb3, 0x4, 0x7, 0x8}, {0x1, 0x9, 0x5, 0x4, 0x6, 0x3}, {0x6, 0x8f9d, 0x9, 0x8000, 0x6, 0x6}, {0x1d, 0x3, 0x3, 0x80000000, 0x1, 0x40}, {0xb, 0xfffff222, 0x3ff, 0x9, 0x6, 0x7ff}, {0x7fff, 0x1, 0x9, 0x5, 0x8, 0xfd}, {0x5, 0x7, 0x5, 0x4, 0x0, 0x7}, {0x4, 0x8, 0x2, 0x9, 0xe, 0x4}, {0x8, 0x7f, 0x7, 0x7, 0x964, 0x5}, {0x8a7, 0x7, 0x505, 0xfffffffe, 0x10000, 0x87}, {0xac, 0x7, 0x2, 0x2, 0x8, 0x7ff}, {0x6, 0xbd84, 0x9, 0x5, 0x2, 0x9}, {0x800, 0xfffffffc, 0x0, 0x8, 0x2, 0x7}, {0x7f, 0x3, 0x0, 0x7, 0x0, 0x8}, {0x8f0, 0x3, 0x5, 0x4, 0x10, 0x7fff}, {0x3, 0x0, 0x8001, 0x6, 0x6, 0x2}, {0xb, 0x8, 0x3ff, 0xfffffff7, 0x1, 0x2d}, {0xfffffffe, 0x4, 0x3, 0x3, 0x6, 0x9}], [{0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x6513898b16587522, 0xb203259e3b362718}, {0x5}, {}, {}, {0x4}, {0x2}, {0x5, 0xee352d7c11fd4fef}, {0x66520a3f41f0c59b, 0x1}, {0x5}, {0x2}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0xd097773ced91ee08, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x4}, {}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x181e77da4e86e44}, {0x4}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x5}, {0x5}, {0x3}, {}, {0x6}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x3}, {0x1, 0x1}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x3}]}}]}, {0x88, 0x6, "976a5aac288edb48210b9701d2079f4062e4556223a48d66cb096ea23fb11693a832c177c8a263586ac6271486e71a35d369e04cf7575620c56a8eddee2cf73f7e05f6a330059f416af4f9611344210ab42585404d72bd16f874f8e19c9a80e64f75ed775d6dc1f4fa155758043246b5bb7bd8b87517deb0112fff4151ab8d4daa131e5f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x98, 0x3, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x167, 0xff, 0x0, 0x1000, 0x40}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x1, 0x8, 0x3, 0x6}, {0x800, 0x38, 0x2, 0xa661}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1, 0x6, 0x0, 0x10001}, {0x42, 0x3, 0x98, 0x6}, {0x6, 0x30, 0x5, 0x30}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x138, 0x14, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0xfa, 0x6, "4c209396f920a449862c5fc3f6b0b9ddc24e9d1541987c878dff4a905dfb397aafbba64a620bebbea0232af0b6d7260c26dd68bb5a48acf23323f38f3bf31a3a77d15d9eeb78ffba510735cc0cfe3af136ccf268c220b13abb87087d59ee8c643311eb2c409ab5d34f8de97396b850b0b3cca14361ab9bb242eb4ff98c71e392e9f20d74b0a613952f172cbddd6e2971529f12c0bd62f3a0f3544784ac6ed5b61f9c0ba00c35090922a1799ca66bcc58772e061bca5a2d96d0f73edf4677c351aa96566af6779fd2868f56d6593ceb1a3badbbc027666eeddee949ddca4007fb465401028b733c4dc5255178d1135aafd903f0b16c6e"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x134, 0x11, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x65f, 0x7, 0x8, 0x5, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x20000000, 0x23, 0x7}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x4, 0x5, 0x6}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xf69, 0x0, 0x1cb9f4c6, 0x1}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x469a6109, 0x0, 0x7, 0x1, 0xfffff09a}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xae9, 0xffffffff, 0x4, 0x8, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x5, 0xc, 0x6000}, 0xb5b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xfffffff9, 0x4, 0x10, 0x10001}, 0x6}}]}, {0x21, 0x6, "caae5fbcf3be3d84501a57934d5f3066e23c6f8e2453d96076e93d1291"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x11c, 0x9, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x5, 0x3, 0xffffff80, 0x1}}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffff}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xd54}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}]}, {0xad, 0x6, "4b16a68fba8c1144956604bab8e1c1e06a008e74c9221e8b2bab700dd1fba5dd70ea191db531f6456d5bd6a17eee6195c163692972a979885409e3ad728c1b3ffb9702abed7a7bf633cc05fc6792ea9970922fe1fc6ab0f0bb9032c4076c67a615b2f6292ca3c2477da20df2745d2629b90f9d558b078c312c46ac4d933ad5c00e1baa54dbbd4a96ec8d5303cb19200e98818c4de11cb8738f86f8e85dd5356b3e8e98b21fe962de9b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x2330}}, 0x1000)

7m44.899346888s ago: executing program 0 (id=219):
r0 = socket$isdn(0x22, 0x3, 0x3)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$dri(0x0, 0xd21, 0x0)
sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x2, 0x2}, 0x1}}, 0x10, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x4044000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000ed0b00070000000000000000000800090000000000090006006e6f6e6500000000080008"], 0x58}}, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f0000000240)=[0x0], 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300})
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200)
socket$nl_generic(0x10, 0x3, 0x10)

7m43.061756366s ago: executing program 0 (id=222):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000001fc0)='fd\x00')
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x900, 0x80)
getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000)
ftruncate(r1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
unshare(0x22020600)
connect$inet6(r1, &(0x7f0000000640)={0xa, 0x4e22, 0x7, @empty, 0xb}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x4e25, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0x9, 0x3, 0x6, 0x9, 0xbffffffffffffffd, 0x5, 0x2000000000000000}, {0x800000fa, 0x1000000000008, 0x2, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in=@local, 0x4cf, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x3506, 0x1, 0x0, 0x0, 0x4, 0x80000001}}, 0xe8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x2c, r7, 0x229, 0x70bd28, 0x25dfdc00, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
socket$key(0xf, 0x3, 0x2)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r8], 0x10}}, 0x0)
write$binfmt_script(r1, &(0x7f0000000a00)={'#! ', './file0'}, 0xb)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x80}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x6}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}]}}}]}, 0x50}}, 0x0)
mq_timedreceive(r5, &(0x7f0000000440)=""/116, 0x74, 0x3, 0x0)

7m41.280666258s ago: executing program 0 (id=227):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x820, 0x4) (async)
timer_create(0x0, 0x0, &(0x7f0000000240)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {r2, r3+10000000}}, 0x0) (async)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async)
syz_open_dev$video(&(0x7f00000001c0), 0xffffffffffffffdf, 0x82)
syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)

7m39.490302174s ago: executing program 0 (id=233):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000181401002bbd7000000000000800010000000000080003"], 0x20}}, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x51)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

7m24.234118589s ago: executing program 32 (id=233):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000181401002bbd7000000000000800010000000000080003"], 0x20}}, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x51)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

15.560112165s ago: executing program 2 (id=1568):
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x18)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x22, &(0x7f0000000140)=0x401, 0x4)
symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file1\x00')
unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x0)

15.328929513s ago: executing program 2 (id=1570):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x40084c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
r4 = shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmdt(r4)
shmdt(r4)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000001000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500"/12], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffffffffff5f)
sendmmsg$alg(0xffffffffffffffff, &(0x7f000001e640)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="0a091bd6f48161f2c165da5f2ef427b1afe19969706cddd186776acd85c677dbff6df8653af31fdacfc034830b62e6dc7e14a632329b1f142b4df4aea363fe0717ec6429521bb1eb82b1d731aafa5b86712b979d481af15f502e79ee9697354f27f841e97ced50e66ad543e94138a5a0bf65e91c569a", 0x76}, {&(0x7f00000009c0)="087c8f96b249b3f77801758d7cd91bab983e3bef8cbfe546b77666116781047d8a7381d44c396ce504174a43dc77b41065ce6e3ec935489c7c1aa454d06348468a45df1f03cbb605c93613184a49870cbe1826259307195c77de16fa9b39c277a08e6cec0df33c7e154e788475c3db5fe2f510da42933b217cb83c19351f33e3d7a8598c7d68f7295edf3c80a10f35b8c6c78e54afa031fbb41af54368f1ebbf811388a969bf6bd54481fc31c7970e019f3b3e7e53ef986bddc0fb9b3ded6ab8641f188768b9b3fe6c882a2740f7aa626beb20a1fc399e207df043353e6703449c9eb83910c0f149956a8877c2b5f143b27c74859596757a8022009c222a438dbc14b680dacb579390b6ce5cbb66ad2888d45acd4f21ffe3d50932e8f05a1abd40404767f9ce7d41cea314d90635481a6ff18d1963822108aa460eacda8776d1bb325c7313e83baeb0416897a3db958f04a2aebe4d5004ac6b01630c63ecb5e68ec584e4ca6ddf8fc4f87682b138800230634a28636b710b95549fe98000756cd53f009ae2b5c0b180684bd5412655200ce508e8fac8b800d6e679f16c331452b44cc16195eb9538beb37169efa6bbc6745e4505a4bc61fadef7c08dd649696516551b0bc34d7eef3a4eda69b9b7fe6abff7949b56df17827152fb0023bd092fec861167b57344a83c54e5c4963028681efbccad60c270d3e2fedaf455933b68ae7f023bfc7196e273e65df4bcfcfa04c23f201967b74a6b3ac3e8697ccf91fa1c3778bdcc5738ec47ff5b4d99dbdccc9572eb41c2803fa9d86beb2ecb658677945d88244eb3a9194993c3fcfcc1f14c15a4739518b3a7a098cc97034a29fe9e0b9438600800487daee18edfe57e974d24cab410a3afb497062b09de03b6b60a76b1379762d0517623e0977b613510db3b447dc9d02a513dcc24bc1c388a6ce065eb040bb3b0ce8236eaffc33bf43fd36bda715468af470d17d5ad0ca2b21d5b55e14a52f9e13a7648577b3551b2a84c5a262f5d9ffe6ffba776681089ec9ad613198311034e087661aed39d105875d0f67adbc107e76ef8c332974eb682efa97ba7a5366dcb97b455de30a28c6394dba4ecfe562b95dd74a36f819ae127b55f24dac688d21ab6b7f465ea29612632fde53dd974f66b77b6dc8a3599b49c20786a4eabfc01b4c9d51360e3aee3bca938f408e31dbbc32e2a3c4a30e526404ead60cb254e617047385766295369f85187726662878207e41e86e1c97e39003cd88e6b32aedf21f1823a1a050f144cd025fc04ca9b1984d8fbbd318d7202d706cb0e97b791b20cd9017e34bc60f8ce1a718213aa515cb75d3a839af662b0f0dace99efbe3cc2483f0c058e575f4523b54dbe9f0aaebe6becd0cae741fc36c71f7e8b5ac112125fb0f063f34caa37de0ca6bb1b017ddabc4edf5cdaa040d024ab2a1cb8dc70ac9d202cac359b87f471486308c1ad49f2cec576ab156c07ebf5c9ab30c0f8c2a3a98517c27ed83b51e0917456b9761d67ea9c2809f0650de66a551e83f7a48fe73a13b30bc24fcccadc053f7437fb0bbe7288abd3ee5538411f2558b8f644e08e52a6a110993eece2214510ed80e58c05acdc81fb40d0a523fbf26ebfea232fdfbaf32c1de22e635a16ccd14a7aacf42f1fcacaee2648d0759ac364838428194ec39e228e802d8a33f4231b70822cd04459ac72ce16380789f66c2606bb74b252a4340c1b1279dce1483eff994e0062ec76df45370f6c5b15fb2d2bfff6366c7e0fe110b16262a23146a25ac20924913d649c7c1520108534a3bf7292c026b52ea93e85c95b9edb3410f816048e0c441ff3ab37025a413e3a11cc9d455214a72a2d450dce274bbdb9944123d1601d97c013a42d8e2a8f6227ecb6a48edacb796b7060fed6dc8d76665c3a4c995fb8ac765533d6e6a310054eb98680e6196d69d75627dd8a0491e19bd6fbca44b64c6f766cc649109233201397806aebb409b7a6bb63d0e7e56932cc55f8d8ab985f1a9a5671d0b7537ce2007a8f3720f676aea9f8f4de2bd1d42c8c1ed3b76d66a2e4dd7ceeda6dbe6654ca82a184e795d08e408c9204d8f76aa1ffdb7edf8c6942f6b936c3bbede590b2dc1e21cc6acbfce083def91a5f3d1f80a7e6212a2fca9150f1570a9f413ed4657a3711b0f17a9ad69d16651bb1d18008534f1541863c12836d8be3c11fc0be4ecb0fdf9106c3cace8d5fffb1c559b98761ef5f8b3d4f01d21217fe10f510248184d812cd7e927230f771030821dad4c641349372bf9057a635b950bdd8771c5e9b1286570475cf644a9782e00b812a0476971d8e42946360379dcdd3f3f60b7dd665812c8a3d78f019fb8388c8e9cd8500a40cd62361d271a243e36cc04df3509d21737bd050274755ae0a7c92061f46bf05b9046e1b02352131a4c7cc800a154bb2768badb1473136831efe74acab487610938f05cc21d63a1c0e8d44a99d8d9cf2493dcab09822b1ad62e19d1b48ebc9a9f06c4717c02bff4da8e740a70d941a6a4aa4ae58e3e0148f7a991f6fc807599e5381331e4bdf304a883432e9d909fec0751bfcfaee6428a298ffd3989c9f970a0e79df0726b6456da437c032b5cf838f1b5e8274bc7fe1f427af7258b255c82633d5d6a324af9493ed18283160096900a72532e645864f733f19197652516e93288be511baef58f5ce843a4dbf6516433462e1563b8e8e7dab9cfa3fb4c4111888528ca8d53903bd2912b3574cf571b7499ab1efdb3de20241ba494dc359acd86e0cdb88fd9e9d8985f01fa20b6d004586a01edc85d98c480f2fcb5d61a6eb477cbb42fa20bd9dfccd2f91a7ccbee0f77a7e430e84c8929dedf573aedb69e294cbf5d52aca3378227d19341afe496558e01062bdc66924f32cd4b914d39ab2ee22b70b513cc05c0269e75886c4928afb223a1703ac8b6cc34e612c9c8bd9e57ca001843ff0a89beb5d85e4644b78bdb9d67944dce7aa953e870374e0b25cb5a5b94a2814c4add7ec9369ed47bd2d8dd9d7244f717ac1c6f9af9ee9a839b3587e422d624469b21232355ed9d7c51e614e242e4fafe0474e58a794def3d5215475ce72b2e2294da68c8da0ac1fc1389d24e507e5ffd8ccaa06c64aed871d8d2a0529092b099510f732c01a3266ab5e6c322f7381aaed4735206991724aa782041dd4c834813dbc77591b0226d7da380b6c7307f9baeb3ab9218596195e2dcd63ecce9ee01580260c760aad4266fe798b56109b46fd7120e1839e10205361bd4e1f5c4f2c64f3e79bc8bbf854c4291f4d2979d069528272447b00de9303cf3ba31d8b280639dae7a87a50930bc92927cb2eba6ab21d61a156feccfba12d4f1421ad251e910508e7f73d26c7aa8274ccc7004968a30bf4d83c5186b3d9b54f17cbe05b0a439a50ab0b4f2de188c3b23874cd9a3f2751a99155aa3109f675775d2970c70436756625b5f38f67c693c358b170d451e66e620b41cd3b00f85e74895fd0f9bcab09af6c60981fee7c4d91878ed12a5bf0708fe584364cd99085b71af294bd14843c9a453d04a4a3df32afbdc53980b51f6f10cb3922f51642da9cec5094bf00afcef4eff7e23339ed65549f84ad877f8dbb5362294e3054fa05c0aa51f962eb23439c0ea96674beb32bc16103d4bf7a2cb13e7f2faaf88756b66a1567c9e4bbcb8a101f6f12ab928660c2af321d9bcf368a026c84966fc341e7330cbc962490947c51dac3d31801169f76b56c01be88dc576e2cda2311dfdb7e1d27bbe9b855b9dfcc51daa638de399e48d913ee1b730ef026bc6e5ab1597e139c97b514cf1f7e17f9447db230166e42ee3516ffe90ce01d1ffb643cf6044779f079fd6abbfc65ab1b39f7d5372848b68c026337f5492d25cb766510370896b501e906d0fe8ca05a23a117ba9425b156a3196817c30cc36483e99ee4998397b453043294ac329849bdb657c7c2a13503133911369ca500879b9ef6bd2d20c10bf37ea4adb6b28823cc4b94e96862baa6642cdc806ce496118ad22e12f8e6095aadc67ed79df3fc696eb5d94aad1e5e31ee7682dad1dd76b6c4c941f5a8c4f1b32d269c00bc7be5b6b10ee28f43b22a3f60be62cd316a8e069d335e62e43854775cc4d4c951eaeccf3e0af5951c66a4059e6a5034ba21a73c5210ccdb84cce208d9ebf69e1621ace8d7cf37bfedbc23a83b67c66f7f813de0b94f424aaed143bd560fe33b1e7b11e80417398a04a187bc45b77947d35e085984588a7d8811de97cd57e3bf4139e47dd0d6c593f2bfcc48ee75b7a00f26de49ec794c49c48b9b29b3cc89301bf9812a8a39dd2e4b60175a0d047406e592a0fb54fe8493c7bb00aa8c720a0bf247aeaff3fc3615acaa6d52928250cf09a62317085181e0c3f9e772c057c19a94f1203157c7d6d3b5d719b9177300fe8dbc630c35a8d7ce61eff8fa1e3f0a42db80ac6aa6bcac742e952a4552b2d3237f49373819da5c12e33eb8eaeab1b8c5b855ad2a14469ad321976416d85f9994437d9b2b4f6eb5ed1c731c0e1b053434f085abb75cc222776e0a2ca5b70b09926e4dacae545c65a6822ea356b5f7feeaff14fe8ebb7d235a4bc470ba73c311a1c3fad28015df3b4b6ae020a4e301a1319d8d3dd5ab5fffc35cc1af2771e146fe3250290a3a3f3176ed70d268e0a38986c08e3ed78d692c7c6032cd895fc9cc733cfb17a126ee75d33393d907d30b6f2f034a3dbc344cd4bbbc0f718cacf0a900541f6c7a25590c6e1e425f6e3b98534e5ca90047b9200b1606744f8b8b296e84a65855a41bf5ab70574d8b6dbd4a07ac30260620c28d6f9a7096f30b342f75a7e7db0847099c7ada94f0a11dc4f7608ad6076c0383adc3c5759de51d16c63125aa4f6738fc435992ba2af112dc5637368840e70ae128b9620b7ba40a859de00512663c6f819db7cb3c5fbe5acb540bc50e53045dbd36eba959ad6e041517c430558e1a9bc119df08929f3ccc7f488c628cb0c9118a0a7558b10ee6be0f33355b5344c990e6773b848f3eca8913687f5c1fdf3800da71fe1e3310190dd0a6130908fd6ff727d0b3da4da4f024994305eaee4ee41bb85f787a75ba501fbf4d53438e0ba3c114bfca5ccd9aa73ee490afeb3a399d3d51ebecfe2dea8b4ee3f23963753af2ecc0066acfa2a19e0258145a897e2882e0ddf823f7d06ea799713250ec3ed1215a1f462036557141807e3f3a68ee968bfb4340b12684024233a014c66a30fa1f7554058e86be5d10a574d760c616cb81be00d3170f69d3e30985dc55c5f3eb4c1db2b8f71a520475c24a90dfbb86bed1e22b2d11e66166a4110d9e778b0f468c1d371949cfe7119758b5cddd7d8603b82ee25cec009ff7b5142c18ddd0e028dc197f3ff792cbce1d01c3436826e0fefc255209efa98ebce382951dfbeea9cc", 0xf00}, {&(0x7f00000004c0)="0ad42c084d17afd6a1e20941ae294ac448e8712ebbdb7ce5c9ffe6a137a34e435453bd9edb8addac740d7179aed35903704c5cf040536e6756bdd2359a5cc7c75c971265e806d5819f86aec174641e497aa095eb880d2312057682f661aa395009c7d06ef294c440d11076e569b1820846cd4111dbc936c8f725f060da3ea216714fd077ed05e17e20137ac92598619c414fdbbaf53254710556d85d061e02deff30be369a1042b0296cda30a04c4d94d7a314dd038d", 0xb6}], 0x3, &(0x7f00000005c0)=[@assoc={0x18, 0x117, 0x4, 0x80000000}], 0x18}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f000001b000)="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", 0xff0}, {&(0x7f0000000780)="ef27641241831e2800835062ad33d9fa777a37aa640bbc63c1068984f60774fcc9d034fb598a6c0b71920fd7dcce0336aa4daa660440cc5647e754622c7ed8903f751f5c52935610a25d", 0x4a}, {&(0x7f0000000800)="fb2a99014bf6f3e552f69450643c99816ad73fa01061b6906aca0a76a198011dc902f2432e9c2e4d827d0a4d4c4ca19d9a2f60a3a90da172b48d34a060fd79d16b", 0x41}], 0x3, &(0x7f000001c000)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x78, 0x117, 0x2, 0x60, "4e5a779f7fc1c08e5d0ee28a3222abecb34bf8f0929798aff24725799b95c196c1d83c34fe8e7805c34bd4aaa18163363ea6010d54a04d2a8a5a91723f5374238d1e38430a53c438ae37640f7874cf0d3b4990e1dd3efa95ec2dcc820c5031c2"}, @op={0x18}, @iv={0xf8, 0x117, 0x2, 0xde, "151fde55afdcc0da580f15f5e02d421e0b118d8d7854ada53afc24ba7ac1215888ea7439faf7b992549808b6e0a7cc0bb8526226bbfecec8b75ca854081324d646b05a198cfd33cb33fe57013db794031270f17300b273a4103d7efa531a2ca6d8788922429f34db6abdf87affbf39174bff721d2f5b3588a198792643ce7282f078462c38d7cfc4d4a599ceea2aafc2139881f5ac2f9e0b458fe0380bde921a0c1b4325073ccb1e49f6b82db5f63d7a2268953baba32d3e89b0479ac78cec29772e70913b810e3327992e47817fc0f0554fc403d22c1412679b81ca0f57"}, @op={0x18, 0x117, 0x3, 0x1}], 0x11d0, 0x24040804}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f000001e780)="4df5031b0c26a74923d5d711e62ce962d5732de8bd7feccf28546cf5418b4cacb5d6abed36ef148ac78099d3d77d5da93245b15f9448e373f70b6028e5373e4a600b3266fb92e1d3883b95004cfd82af477733ac54ced993ba82b321c40285bc49113f828cd79de5773e734e3194d27df809e3a0bac52121e718d3ec9c61b9b234af581c5e7366be60de8ad921e37af536589c1732c6ad805367ecc12093ae4faccf9e13023d72fb40d00a68f36ecabf6bff4505680163f459d02c728f0e5042b16d81db04efa1784ac1cde532f9b08171db78e0e47446ccdb42c3f7757fdd3dd079375d39fb2240314e22aae58b8e", 0xef}, {&(0x7f0000001ac0)="8a45cde7a14d3859b5377b00327b49ae09d1b9de5a211f766c98632cfc0288d0b1ac3a0a849e2b35bb9d0f981d210ef56191236ac938b280b0161062d0e00c636646bce08c9ccaff6dcdc3be6b99a7a7042696d402a5ee80cbc17ac9d5cf2b7f314db92276f818c049a6fd07d40df6649b95ec3c987598437f4782708030352181ce2c3e492cfbe8c0ad55958cc6c2a5723a9c6e702b8a69edb7e96a5f", 0x9d}, {&(0x7f0000001b80)="43af965be20f8c7ef1f9c2691456242716c6c8e51cdd59a1d93f234a3f6cc1ed78770899df651f8d53920650ea8606ff5240fcdbf3203e637c3cc3ffbc1c909a3248b594d1ad851e1b2b795603afda9095c140e228411ceff04c046b11b614d028d2fb64b3d7023f1d54a39fa3090ae3330eee8d0f5b9b0ecd6092e545e817b83851fec216d5e94058eb1abfd96106b2d4e84551bc05fe1e9614ade0846d79c5412ede5efe407acccf41326e1753c29643d090c54df5eae2921bb217c9796bc3fa5dcd2d47b67b1411e9879d6460bc17cbc9aff5b7902f4b83edcec42f595652a332e3832ca772f3ac0748adc9572eaa7638150c565fa0ff48", 0xf9}], 0x3, &(0x7f000001d200)=[@op={0x18, 0x117, 0x3, 0x6a097975965adbae}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x7a}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x10c0, 0x20008041}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001c80)="94d12afde34169b23bb83793740e6d985fdc3cd771d0f4f05f04caba0aa9523616001be24690720881e92316c67ab10078cc837f718f6b48345a2345f2e81effc8aca4ab07e4522598b36d88cf4486ee1d1f25b517efcb16a591b97786d7225800497d9b96c4ca0d2c35fc15424725f2ef9ba342d8881dfa01627a4750e5e8070451bdc6a7484d6a6d6e1e52d32273e84bafd7a082b59b535fe84f36f982cecb69e15ec76225096af75c1830f0e59364", 0xb0}, {&(0x7f0000001d40)="e97bf5644a0f1158b5ceb41cc434cd8c70f8e34af167e4092915db090106d2c53f67e5f8104cda8d6599654dc98fdf607eb55117c8f0900c8fcf1e7140fd4df0ee1519a879277ef03e56ced9e8edc85a36899be81c5f6385327f39a4222fd9a67d2a1ea023375ca751cdda9008f11f1c2a5921402732270a60b919364e3b472e8a714e5f53bc96181fe9d661cce91a93e02538b8d37957563b2765", 0x9b}], 0x2, &(0x7f0000000940)=[@op={0x18}, @assoc={0x18}], 0x30, 0x4}, {0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e00)="ca8d9f74201aa4e3356de67ed311097a2ec924ffcc86459cefe211ae46be6ec2d87aa80f948f6586e0d9aaa996b1de7e29c51cb6bdc8d28c300d959de6139ed23b6f1f85144aeaed4702ad830ec18e5bfd33c4ef226c898617bac81d7c992e2eeaac64e74a25538f0850ca2bd04ff7791b3616fca52be380ddce19b3ef7957937ce71efa9356a6fadd73d06df35c550df6c64b752afc2a2b4a96b1b33b8d705cc0ba98cf81917634348bb5f1f0f35a1ca6d27ac4cf7d8a659510f13750d8622eb3453bd6b7e356f59b4789", 0xcb}, {&(0x7f0000001f00)="398e30c642bec7629bd99bcc5698ce8bd2fa9a3cda81a0d148c971990d1f8b31e96fe820596a55706e8a155066676725cafa83393eb6bb390c1e350e47bb25068679bb2992692f2ac3f71a4c6e026119a17b82afb248159201f7", 0x5a}, {&(0x7f000001e2c0)="942db84ed90a0dd4cc5587778386a9854f559d9531a3c278893f8c0d587a4e2cba53fd0269e8e101d9fd9b210c46474b2b1ea58559692968c00464b3af7807556b5f54214b29ec0fdf2f9a0b3c960da187f2789844e488a5344e784d5769297df153712ff2e7dccf6d308dd874c647552f3556815e77ed2363a61ae2bd8ff0db4d9db683d4a7d0ccf1854f4593f869584262e8d7a40e0eb784eee55993679ce3b676b8bd5a3e0020c93b5049a3bf2b", 0xaf}, {&(0x7f000001e380)="81ab505721574f4d96810c1999194787e3a47b74c1bacbbff7a021b15e61675514ccd28c4883de9cd4aa13ac45290de591446a1ebb96e50888139d27262e63e57f28c7a0ee519cc9e843fa4655949d8cd36801cf3e46cb67fe6862c48682427553f006ad84642a087cec3218c313c7d8e66e94b622ea3d88ef29bcc3f99bc171d7c8ccf7875521f3a27f577a2cc61e3c271fb3228e2834474a00a29289b59c2acd17fac6d2fba36e9421eb1541b63739d1f6c209003e62fd20047d64fec66305f2436a620661e4b81b7a207773ca63f0c3b27e923cdd45cf2fa1fa77580e58e6cce5", 0xe2}], 0x4, &(0x7f000001e480)=[@assoc={0x18, 0x117, 0x4, 0x3a3}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xb0, 0x117, 0x2, 0x9b, "afc7d9fcd1a60d735ec2d92606eeb99b760602837e2b7beda2e1f2cef4d9a577950e5ecb0ab4c1c8f75184f689f1844bb79999a3e92e2837dea3a163d5d63ec648429d0a411ee35478a722079b9e502be618a7949b900cd5cf029a85828a7def0a797fcc91b91a60075c2c4c63e05f7fd928c168c29ee808761c1ba8fbfde2a983de1901cdc36dad07180f598fece7b12214755b854a88a12a9d46"}], 0x110, 0x84}], 0x5, 0x20000000)
sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

10.144598459s ago: executing program 2 (id=1586):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981)
clock_gettime(0x5, &(0x7f00000000c0))
ioctl$LOOP_SET_STATUS(r0, 0x1267, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x400000b, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df1172e9008", "23639aabe426e78edc0000008000000000fb80c92dc817d44dcdec00"})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
write$sndseq(r1, &(0x7f0000000040)=[{0x5, 0x4, 0x0, 0x8c, @time={0xfffffc00, 0xd4de}, {0x5a, 0xe}, {0x3, 0x8}, @note={0x2, 0xfe, 0x9, 0x2, 0x90000000}}, {0x2, 0x9c, 0x2, 0xb, @tick=0x4, {0x81, 0x40}, {0xd, 0x81}, @raw8={"14aed06ae8a6c724e0c6efda"}}], 0x38)
syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981) (async)
clock_gettime(0x5, &(0x7f00000000c0)) (async)
ioctl$LOOP_SET_STATUS(r0, 0x1267, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x400000b, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df1172e9008", "23639aabe426e78edc0000008000000000fb80c92dc817d44dcdec00"}) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) (async)
write$sndseq(r1, &(0x7f0000000040)=[{0x5, 0x4, 0x0, 0x8c, @time={0xfffffc00, 0xd4de}, {0x5a, 0xe}, {0x3, 0x8}, @note={0x2, 0xfe, 0x9, 0x2, 0x90000000}}, {0x2, 0x9c, 0x2, 0xb, @tick=0x4, {0x81, 0x40}, {0xd, 0x81}, @raw8={"14aed06ae8a6c724e0c6efda"}}], 0x38) (async)

9.296108224s ago: executing program 2 (id=1587):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x10180)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2)
fcntl$setlease(r3, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x1000000)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)="9d4039b1de22d4a4bc8a20d97e72eb04420fff73277e9695c63b1cae60c74a3588e3cbf0fd7ea4ae5f1f012e39731d1127c043d35b09e83587b1eb2dbe02f863dbd4623a8cff5b2ef69268265558243bc726b80d6585c7c1279c2ff87703d761a63d27f5a5ffb3ab8dc02af8014f821b8cbf207dee07edc359e1cecdc36cf27b96", 0x81}], 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000540), 0x4)
sendmsg$tipc(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x800)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

9.163978774s ago: executing program 3 (id=1590):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$kcm(0x2, 0x3, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000003, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket(0x28, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$rds(0x15, 0x5, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) (fail_nth: 2)

7.797142964s ago: executing program 4 (id=1591):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1}, 0x28)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x305000, 0x100)
r1 = syz_open_dev$amidi(&(0x7f0000000200), 0xfffffffffffffff4, 0x40000)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000001c0)={r1})
r2 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800)
setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000100)=0x3, 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe)

7.280094562s ago: executing program 3 (id=1593):
r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000200)='wchan\x00')
preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/228, 0xe4}], 0x1, 0xfffffff6, 0x9) (fail_nth: 2)

7.246038885s ago: executing program 2 (id=1594):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r4, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
socket$nl_route(0x10, 0x3, 0x0)

7.159868163s ago: executing program 4 (id=1595):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x80, 0x2)
ioctl$I2C_RETRIES(r1, 0x701, 0xc9)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2})
io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
openat$incfs(0xffffffffffffff9c, &(0x7f00000a0040)='.pending_reads\x00', 0x80102, 0x10)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r7=>0x0}, 0x0)
r8 = socket(0x1e, 0x4, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r9 = socket(0x1e, 0x4, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@RTM_NEWMDB={0x98, 0x54, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x13}, 0x10dba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x0, {@in6_addr=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x3, {@ip4=@broadcast}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
close_range(r7, 0xffffffffffffffff, 0x0)

6.456916012s ago: executing program 4 (id=1596):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x80, 0x2)
ioctl$I2C_RETRIES(r1, 0x701, 0xc9)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2})
io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
openat$incfs(0xffffffffffffff9c, &(0x7f00000a0040)='.pending_reads\x00', 0x80102, 0x10)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r7=>0x0}, 0x0)
r8 = socket(0x1e, 0x4, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r9 = socket(0x1e, 0x4, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@RTM_NEWMDB={0x98, 0x54, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x13}, 0x10dba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x0, {@in6_addr=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x3, {@ip4=@broadcast}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
gettid()
sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
close_range(r7, 0xffffffffffffffff, 0x0)

6.38783127s ago: executing program 1 (id=1597):
landlock_create_ruleset(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000140009050000000000000000020100fd", @ANYRES32=0x0, @ANYBLOB="14000600060000ee000000f00d0000000000000008000200"], 0x34}}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
eventfd2(0x5, 0x80800)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = syz_open_procfs(0x0, 0x0)
pread64(r5, 0x0, 0x0, 0xa6)
shutdown(r4, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket(0x15, 0x5, 0xe)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)

6.35236938s ago: executing program 3 (id=1598):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="00a500000000000500da1200000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711216000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d}, 0x94)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x0, 0x56c3})

6.216708394s ago: executing program 5 (id=1599):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000000000000020202000900030073797a31000000000900010073797a3000000000050004"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f74612c67727071750400615f626c6f636b5f686172676c696d69743d332c00"])
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000300)={{0x2, 0x2, 0x10, 0x0, 'syz0\x00', 0xfffffffd}, 0x3, 0x0, 0x3e, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000440)=['\xbb\xf6x\x06\x00\x17\xd6\xb7b\x94\'\x00\x00\x00\x00\x91\xdf\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x11\x00\x00\xeez\xbd\x8f;5)\x00\b\x10H\xf0\xf9\x93\xe1\xe8y0-B\xed\xe6&\x95\x8f\n\x1e#\xa7\xd6i\x96\xdd\xaf\xd9\x91\xb5\xfd\n\x1a\xc1\x96\x8ea\rMj\xc2\x02\xceE\xc9\x81x\xd2\xc7\xfbp'], 0x58})

5.74149054s ago: executing program 5 (id=1600):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000003100)=""/4076, 0xfec}, {&(0x7f0000000740)=""/182, 0xb6}, {&(0x7f0000000480)=""/152, 0x98}, {&(0x7f0000000d40)=""/4099, 0x1003}, {&(0x7f0000000580)=""/234, 0xea}], 0x8}, 0x40002122)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x4, 0x0)
recvmmsg(r3, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="768af60c12af27d3b0dd", 0xa}, {&(0x7f0000000180)="6aa46d2dcf83aa73785a93eb3f62db8164591cabe090b81376d09ddfbd1ffcaaa241ee8969907cdb98bed669465f9d1aba98b69f91c8b8a6bc1e9d49", 0x3c}, {&(0x7f00000003c0)="5f8dd2b68727ed6521812861a09a24865d9a5e64d9812b7873c0588c62bbebd504fc1a4f588d3d27cd80b6d1c9447f315ca25bcbd3efe3db3d6d8d34d040fba64ac889b524d47ff126c00eb7440c9fedccb4fde0d35e8e6e654ef1a5104c2451b50c7f49d3e341bf5bbdfc97ca23c1b7ebcb4dc0ee8e01017d74a98dab74e2baf2", 0x81}], 0x3}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001900)="4af13274b0d44b5685c25336107254d5642cd9b75f59e09ae3a2166d6f32fef76dc6961578f4f37ea660112e7b955d39b65dfad0ea3c6b0d10e29f70bdfb6bfab442c994e0a2c0176bd42a3d101ff9e8070eb23c8fdfe1c695e855542861e91d93bba691dd981875fad09c09518688538499fd348c72b7736636e263ce4e8927b1da549be11affeec18db8539d", 0x8d}, {&(0x7f0000000ac0)="acb6d9cce9d3635e5d9ada772158ed22aa79f0fbb852c1a327b25355e615c0ce52d17c45cd48e14905cd1f2a9c48be2574bcbc504efd0d0aa87002494668712495351b18e4d1bddf03c9879f8cb9a91d6c266cc0de24eb8c1197", 0x5a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)="6692dc184847677b76969663fe6d20c19375ac0c5934b9302938438a9334c95bb8fb17f7459e23b83bd79e980d388026fb088ece84c0304830138ef1fac1e9e5d98e02847ea7880498919f8e2f3dd0d0fe3052c7d5839f34772d8159d2e2baf80413dc114dffe4285c80808b7036830e073b56ae58f14d18750c1f3120e68731873d567fb277d3aba1b8b5bdc3c19c197823d945d5993638bfb4e6a3dcd12c13fb608873fdcf0c890d5123578a54f378366b959c6566b7ffa531a4ba94f001bcf2523d9753178734d6ac70519154e6f35d1dc5a1", 0xd4}, {&(0x7f0000000c80)="e496264884d8f9bf96e9441e40f30e63f904463eb1e8541affafbb825adbc1464f656c239bcd721d47b0e0", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001100)="62cc6a6d8d240858502132838ebec281d68db18d9107b5accf56ea36b336540414aadfd4ecc00619d97b2cda966ca746c66bc18293afca9fc5d16b394d2b0d5060e6ace82a8fcf2296cec066f81966e7f2831d5862e71051f61c29c0422a806b67583f1178f283bb66171fb758cf51b129732d07088f1e05358dee29baa0f51a62ba1eb05a64e54ac580c2ba38fd1a5ca2f449777a76dd56dc45e575738e0bbfa824dd27c4efe12d9bd752e79d63863d55440fcf39d081d45dd1e81a5e6125b510a374ed9a4723fb7c782368914c8a11f19bce26d4b8219d930d10b905", 0xdd}, {&(0x7f0000001200)="c19c2e75f6447fa366b5da73491ce772bf21866b5b7904d3bf10caa9d42588cf9d0d229c34131685d4c3cc23d775a69afea07a4408", 0x35}], 0x2}}], 0x4, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5.356181757s ago: executing program 3 (id=1601):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/177, 0xb1}], 0x1) (fail_nth: 2)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000514abbf3b287000fedbdf25080001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)

5.303227027s ago: executing program 4 (id=1602):
r0 = socket$isdn(0x22, 0x3, 0x3)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$dri(0x0, 0xd21, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20040000)
sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x2, 0x2}, 0x1}}, 0x10, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x4044000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0])
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000ed0b0007000000000000000000080009000000"], 0x58}}, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f0000000240)=[0x0], 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300})
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200)
socket$nl_generic(0x10, 0x3, 0x10)

5.193516217s ago: executing program 1 (id=1603):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001740)=@multiplanar_fd={0x33b114d4, 0x4, 0x4, 0x1002, 0x6, {0x0, 0x2710}, {0x1, 0xd, 0x7, 0x0, 0x8, 0x8, "79e0ce6d"}, 0x81, 0x4, {0x0}, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x20000000008)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001380)=0x14)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000013c0), 0x210000, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x2004, @fd, 0x4, 0x20000000, 0x8020, 0x0, 0x0, {0x1}})
r4 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000))
r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0)
ftruncate(r7, 0x2007ffb)
write$P9_RVERSION(r7, 0x0, 0x13)
lseek(r7, 0x0, 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001480)={&(0x7f0000001440)=[0x0, 0x0], 0x2, 0x800})
socket$nl_generic(0x10, 0x3, 0x10)

3.907958603s ago: executing program 3 (id=1604):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000040)={0xfffffff1, 0x6, 0xfffffffd, 0x0, 0x3})
read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xb2c99a6244b85eb7)
ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r1, 0x54a6)
capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000180)={0x4, 0xffffff3f, 0xe1, 0x617, 0x8, 0x1a})
connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x7, @empty, 0x5}, 0x1c)
r2 = socket$inet(0x2, 0x0, 0x5)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2600147af197733f", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f000001a680)=[{&(0x7f0000019340)}], 0x1}}], 0x2, 0x2004000)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
socket(0x25, 0x4, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0xff, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000026c0)={0x3, @vbi={0x1, 0x40, 0x0, 0x30323953, [0x3, 0x3], [0x8, 0x44], 0x13a}})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x110}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x800, 0x3a, '^):', 0x3a, '', 0x3a, './file0'}, 0x2a) (fail_nth: 2)

3.907508383s ago: executing program 1 (id=1605):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x10000000})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x0, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/177, 0xb1}], 0x1)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000514abbf3b287000fedbdf25080001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)

3.871706647s ago: executing program 4 (id=1606):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x80, 0x2)
ioctl$I2C_RETRIES(r1, 0x701, 0xc9)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2})
io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
openat$incfs(0xffffffffffffff9c, &(0x7f00000a0040)='.pending_reads\x00', 0x80102, 0x10)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x10800, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r7=>0x0}, 0x0)
r8 = socket(0x1e, 0x4, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r9 = socket(0x1e, 0x4, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@RTM_NEWMDB={0x98, 0x54, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x13}, 0x10dba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x0, {@in6_addr=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x3, {@ip4=@broadcast}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
close_range(r7, 0xffffffffffffffff, 0x0)

3.818972353s ago: executing program 5 (id=1607):
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="b30713aaf4aec63f291c4c2904778d423927738248cbbdf9f43f7631d25f381a97e474c204488e632a9247ff51e5ce65d44174006984950ccd54c161c1065463180aed27398029b900c7e96125489f7fdf99a6184162326078bacccb5ede5b580f49330e218dfde5963c205de04fe9dcf59066e7648480f6e26988d215e25d6e4aa4d54a38cc0a8ebb6310729c9544da3a86", 0x92)
vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)="ea08c1e6693972d7b82283d726cd4e4354549cff9505ca40c5680921c355b2da860de83facf7401d6e547998a95d93cb1be205a01def1435da2dacf5de80657c3ed66d34d7a68321dda0eddb9e514090c9ed5e0b3900810f96b1c7076351b236a2b6b61677777e057f9f5460e80267b05f2f1e29bb5a6c75596bb3bfd2a045d673bcb86f606d36f94e8b132a436199c6892ac6c95fa0138d7b3c09862866f4349542b07598cd22a9c3a430e807ee21aa2bfea170c68c877287ad4c80048766a035f2c338ac8de474538a82d52c96545d12d5bd8d109bf5ecc4e1f354155d65da5b1c0f64", 0xe4}, {&(0x7f0000000280)="e61a7c618e6351f2186eb0536e6849ec234b5d4fe1", 0x15}, {&(0x7f00000002c0)="df40f5339b0a7b5b53dee468e577b99e5ee240010cc7b959bc88766954acad2b21eb4c44da460d888d73542d89325b8dcc22d7ebfda76835ffc646826521e40a85ab854b20f90fd2647ecb29c65470d4acf6ecffe3210cb87655f5992448b13fb169dd2d3ce0876b3363ba73a7d81649a430dd310aedccc2c0a08f5a125a79483af520bab1c652777aefe0d10dd98754080a932f49ec13e100fd4ea740179b41dfecf06df08c30af398e5dbf8e", 0xad}, {&(0x7f0000000380)="48b749f5beecbf3b3ecdd771dfec1c89f19c52064f1cb550d5100052fc224b4ebcc7d0768b19efec6e0943d2fc9c698779ea7ec9988f7e01d1996cec1306cd8f5f31fca6338a076a821a116658a4165b219074a82142cff90b8b094722788b5d2678e952c766265d60f3fbd47d1a51e64b53c0c166880690c6f0601c", 0x7c}, {&(0x7f0000000400)="4e18fd899d846a0ffbe699ad55ae99c90d54d485299e344a1fec153ebd006aa1845ee59387b3d1593ef18d3925963caddb876bc88d45ba94c970e6b563cf1e963c53dbac3fc70269b231fdc25b87345452522a5943253f830e7236385d7dbb1d1e7823fd0fdb5cf15119eab66c58806034a1880e1a96e92106a439aadb8bb56a26c3b41987c24d9e056c", 0x8a}], 0x5, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x20010, r0, 0x14790000)
r2 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x401, 0xc002)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000005c0)={0x8, 0x4, [0x5]})
syz_open_dev$MSR(&(0x7f0000000a00), 0x7, 0x0)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000a40)={0xffffffffffffffff, 0x1, 0x0, "472710a6a0b238bea843ee728a58967c3bf799da091880c453192e922e2cac1cd6f61f9c4fda0bbec86cd455ff135152e74f0a107d49b7289f208785d48bf725862a4b8ee2c221752a1656eb8e7482d4b9b89e7e61c6a3c9fd6e1d09ea2e56cfe4147dc0c9550d2a8e88f23ba3a1985b9ad2cf233cf51c"})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x64f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@gettaction={0x24, 0x32, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000c80), 0x201, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000cc0)={{r5}, "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"})
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101000, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r5)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000002000)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001d80)={0x200, r7, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x1e4, 0x111, 0x0, 0x1, {0x1e0, 0x5, 0x0, 0x1, [{0x1cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x170, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6e0c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x85}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x362}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x40}]}, 0x200}, 0x1, 0x0, 0x0, 0x41}, 0x4000)
r8 = socket$key(0xf, 0x3, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f0000002040)={0x8, 0x6, 0x0, 0x1, 0x2, 0x0, [{0x10, 0x80000001, 0xb, '\x00', 0x2000}, {0x4, 0x6, 0x517}]})
add_key(&(0x7f0000002340)='trusted\x00', &(0x7f0000002380)={'syz', 0x1}, &(0x7f00000023c0)="4898e83fefeccd4fa7ccd5f9ba55868f3735778f875def567881ba6c0c17a2b9cd4ec9c4d73ab96abc1db970f8536e8b3371cf0b8b2bd8e7f44ec57d394288234c76d95e466c", 0x46, 0xfffffffffffffff8)
socket(0x10, 0x3, 0x7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000002440)=[@in6={0xa, 0x4e23, 0x700000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2c8}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3ff}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @private=0xa010101}], 0x78)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000024c0))
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000002500)={{{@in6=@mcast2, @in6=@remote}}, {{}, 0x0, @in=@empty}}, &(0x7f0000002600)=0xe8)
r9 = mq_open(&(0x7f0000002640)=')\x00', 0x40, 0x100, &(0x7f0000002680)={0x3, 0x8, 0x6, 0x8000})
lseek(r9, 0x1, 0x4)

2.916046817s ago: executing program 3 (id=1608):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
r2 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x48, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x0, 0x8}, {0x1, 0xffe0}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x7e}}, {0x4}}]}]}, 0x48}}, 0x0)
r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000240)=0x14)
ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000040)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
madvise(&(0x7f0000335000/0x2000)=nil, 0x2000, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x0, 0x8}, 0x94)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) (async)
dup(r0) (async)
socket(0x10, 0x3, 0x4) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x48, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x0, 0x8}, {0x1, 0xffe0}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x7e}}, {0x4}}]}]}, 0x48}}, 0x0) (async)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) (async)
ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000240)=0x14) (async)
ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000040)=0x1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) (async)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) (async)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
madvise(&(0x7f0000335000/0x2000)=nil, 0x2000, 0xc) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x0, 0x8}, 0x94) (async)

2.520304514s ago: executing program 4 (id=1609):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffff180e0000"], 0x0}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc)
r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$unix(0x1, 0x5, 0x0)
socket$unix(0x1, 0x1, 0x0)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002100), 0x109000)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000002140)={{0x3, 0x2, 0x1, 0x1, 0x3}, 0x3f, 0x3})

2.420787843s ago: executing program 5 (id=1610):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001340))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000020202000900030073797a31000000000900010073797a3000000000050004"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f74612c67727071750400615f626c6f636b5f686172676c696d69743d332c00"])
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000300)={{0x2, 0x2, 0x10, 0x0, 'syz0\x00', 0xfffffffd}, 0x3, 0x0, 0x3e, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000440)=['\xbb\xf6x\x06\x00\x17\xd6\xb7b\x94\'\x00\x00\x00\x00\x91\xdf\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x11\x00\x00\xeez\xbd\x8f;5)\x00\b\x10H\xf0\xf9\x93\xe1\xe8y0-B\xed\xe6&\x95\x8f\n\x1e#\xa7\xd6i\x96\xdd\xaf\xd9\x91\xb5\xfd\n\x1a\xc1\x96\x8ea\rMj\xc2\x02\xceE\xc9\x81x\xd2\xc7\xfbp'], 0x58})

2.112645782s ago: executing program 1 (id=1611):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.10864276s ago: executing program 5 (id=1612):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x2)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x10f242)
socket(0xa, 0x3, 0x3a)
close(0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x30, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}}, 0x0)

1.013676282s ago: executing program 1 (id=1613):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@delneigh={0x30, 0x1a, 0x1, 0x470bd2d, 0x800, {0xa, 0x0, 0x0, 0x0, 0x1, 0xe8, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x30}}, 0x71d0b8801b5f1c98)

367.503484ms ago: executing program 1 (id=1614):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80020000160001000000001000000000fe8000000000000000000000080000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000a0000000000000000000000000000000000000008001f00010000000c001500"], 0x280}}, 0x0)

281.567996ms ago: executing program 2 (id=1615):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @dev, 0x4}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in=@multicast2}}]}, 0xa0}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={<r2=>0x0, 0x66, "afc3c2517ba695856253ed4292c8afe4a08ecf109817ec324cd1aa7948cdb3f5c577398cca0a83b4d5af4ecaf552674cf6ee3a2551bcf9a9ea7ac8b85a8db3ec2b91d05de0590dc536d91d449696cd20817af4b061faa842d3b0c741dbd960a078ee224cc2fe"}, &(0x7f0000000080)=0x6e)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000180)={r2, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
preadv(r3, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/253, 0xfd}], 0x1, 0xaf69, 0x24000000)

0s ago: executing program 5 (id=1616):
r0 = socket$isdn(0x22, 0x3, 0x3)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$dri(0x0, 0xd21, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20040000)
sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x2, 0x2}, 0x1}}, 0x10, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x4044000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0])
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000ed0b0007000000000000000000080009000000"], 0x58}}, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f0000000240)=[0x0], 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300})
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

2597][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'.
[  400.293262][ T5939] keyspan 3-1:0.133: device disconnected
[  400.426228][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'.
[  400.655811][ T9096] FAULT_INJECTION: forcing a failure.
[  400.655811][ T9096] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  400.669085][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.1.858 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  400.669111][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  400.669129][ T9096] Call Trace:
[  400.669142][ T9096]  <TASK>
[  400.669151][ T9096]  dump_stack_lvl+0x189/0x250
[  400.669186][ T9096]  ? irqentry_exit+0x74/0x90
[  400.669218][ T9096]  ? __pfx_dump_stack_lvl+0x10/0x10
[  400.669268][ T9096]  should_fail_ex+0x414/0x560
[  400.669297][ T9096]  _copy_from_user+0x2d/0xb0
[  400.669329][ T9096]  do_ipt_set_ctl+0x696/0xcd0
[  400.669357][ T9096]  ? rcu_is_watching+0x15/0xb0
[  400.669382][ T9096]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  400.669415][ T9096]  ? __pfx___mutex_lock+0x10/0x10
[  400.669439][ T9096]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  400.669480][ T9096]  nf_setsockopt+0x26c/0x290
[  400.669501][ T9096]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  400.669529][ T9096]  do_sock_setsockopt+0x25a/0x3e0
[  400.669550][ T9096]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  400.669570][ T9096]  ? ksys_write+0x1e1/0x250
[  400.669597][ T9096]  __x64_sys_setsockopt+0x18b/0x220
[  400.669620][ T9096]  do_syscall_64+0xfa/0x3b0
[  400.669646][ T9096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.669661][ T9096]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  400.669677][ T9096]  ? clear_bhb_loop+0x60/0xb0
[  400.669697][ T9096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.669713][ T9096] RIP: 0033:0x7f2c4f58e929
[  400.669728][ T9096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  400.669742][ T9096] RSP: 002b:00007f2c503cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  400.669760][ T9096] RAX: ffffffffffffffda RBX: 00007f2c4f7b6160 RCX: 00007f2c4f58e929
[  400.669772][ T9096] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000a
[  400.669782][ T9096] RBP: 00007f2c503cf090 R08: 00000000000004b8 R09: 0000000000000000
[  400.669792][ T9096] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001
[  400.669803][ T9096] R13: 0000000000000000 R14: 00007f2c4f7b6160 R15: 00007fff1bc94df8
[  400.669828][ T9096]  </TASK>
[  401.255028][ T5939] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  401.590772][ T9103] FAULT_INJECTION: forcing a failure.
[  401.590772][ T9103] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  401.594219][ T9101] 9pnet_fd: Insufficient options for proto=fd
[  401.631186][ T9101] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  401.645546][ T9103] CPU: 1 UID: 0 PID: 9103 Comm: syz.2.861 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  401.645573][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  401.645586][ T9103] Call Trace:
[  401.645595][ T9103]  <TASK>
[  401.645603][ T9103]  dump_stack_lvl+0x189/0x250
[  401.645638][ T9103]  ? __pfx____ratelimit+0x10/0x10
[  401.645668][ T9103]  ? __pfx_dump_stack_lvl+0x10/0x10
[  401.645697][ T9103]  ? __pfx__printk+0x10/0x10
[  401.645721][ T9103]  ? __pfx___mutex_lock+0x10/0x10
[  401.645759][ T9103]  should_fail_ex+0x414/0x560
[  401.645797][ T9103]  _copy_to_user+0x31/0xb0
[  401.645831][ T9103]  __snd_timer_user_ioctl+0x26e6/0x3ff0
[  401.645869][ T9103]  ? register_lock_class+0x51/0x320
[  401.645900][ T9103]  ? __pfx___snd_timer_user_ioctl+0x10/0x10
[  401.645929][ T9103]  ? __lock_acquire+0xab9/0xd20
[  401.645964][ T9103]  ? __mutex_trylock_common+0x153/0x260
[  401.646000][ T9103]  ? __pfx___mutex_trylock_common+0x10/0x10
[  401.646037][ T9103]  ? rcu_is_watching+0x15/0xb0
[  401.646068][ T9103]  ? trace_contention_end+0x39/0x120
[  401.646088][ T9103]  ? __mutex_lock+0x330/0xe80
[  401.646118][ T9103]  ? smk_tskacc+0x2fc/0x370
[  401.646156][ T9103]  ? snd_timer_user_ioctl+0x4b/0x80
[  401.646188][ T9103]  ? __pfx___mutex_lock+0x10/0x10
[  401.646230][ T9103]  ? __fget_files+0x2a/0x420
[  401.646256][ T9103]  ? __fget_files+0x3a0/0x420
[  401.646281][ T9103]  ? __fget_files+0x2a/0x420
[  401.646310][ T9103]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[  401.646338][ T9103]  snd_timer_user_ioctl+0x5a/0x80
[  401.646368][ T9103]  __se_sys_ioctl+0xfc/0x170
[  401.646394][ T9103]  do_syscall_64+0xfa/0x3b0
[  401.646422][ T9103]  ? lockdep_hardirqs_on+0x9c/0x150
[  401.646449][ T9103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.646470][ T9103]  ? clear_bhb_loop+0x60/0xb0
[  401.646495][ T9103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.646515][ T9103] RIP: 0033:0x7fa927d8e929
[  401.646533][ T9103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  401.646551][ T9103] RSP: 002b:00007fa928b99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  401.646572][ T9103] RAX: ffffffffffffffda RBX: 00007fa927fb5fa0 RCX: 00007fa927d8e929
[  401.646588][ T9103] RDX: 0000200000000100 RSI: 00000000c0145401 RDI: 0000000000000006
[  401.646601][ T9103] RBP: 00007fa928b99090 R08: 0000000000000000 R09: 0000000000000000
[  401.646614][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.646626][ T9103] R13: 0000000000000000 R14: 00007fa927fb5fa0 R15: 00007ffe80a313c8
[  401.646659][ T9103]  </TASK>
[  401.908215][    C1] vkms_vblank_simulate: vblank timer overrun
[  401.924810][ T5939] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  401.944209][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.954871][ T5939] usb 6-1: Product: syz
[  401.968416][ T5939] usb 6-1: Manufacturer: syz
[  401.973176][ T5939] usb 6-1: SerialNumber: syz
[  401.990256][ T9107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.860'.
[  402.244423][  T980] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  402.263663][ T5939] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  402.287272][ T5940] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  402.434667][  T980] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  402.455773][ T9112] netlink: 'syz.3.863': attribute type 34 has an invalid length.
[  402.463920][  T980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  402.475309][ T9111] netlink: 408 bytes leftover after parsing attributes in process `syz.3.863'.
[  402.486609][  T980] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  402.524789][  T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  402.545849][  T980] usb 3-1: SerialNumber: syz
[  402.766430][ T9103] netlink: 'syz.2.861': attribute type 10 has an invalid length.
[  402.806540][ T9103] batman_adv: batadv0: Adding interface: wlan0
[  402.831210][ T9103] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  402.856636][    C1] vkms_vblank_simulate: vblank timer overrun
[  403.036780][ T5884] usb 6-1: USB disconnect, device number 7
[  403.090177][ T9103] batman_adv: batadv0: Interface activated: wlan0
[  403.451775][ T5940] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  403.464475][ T5940] ath9k_htc: Failed to initialize the device
[  403.508614][ T9120] bond0: Unable to set up delay as MII monitoring is disabled
[  403.533815][ T5884] usb 6-1: ath9k_htc: USB layer deinitialized
[  403.576292][  T980] usb 3-1: 0:2 : does not exist
[  403.600432][  T980] usb 3-1: unit 5: unexpected type 0x0c
[  403.706968][  T980] usb 3-1: USB disconnect, device number 17
[  403.874621][ T5904] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  403.878791][ T7592] udevd[7592]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  404.047340][ T5904] usb 4-1: unable to get BOS descriptor or descriptor too short
[  404.140891][ T5904] usb 4-1: config 84 has an invalid descriptor of length 0, skipping remainder of the config
[  404.287215][ T5904] usb 4-1: config 84 has 0 interfaces, different from the descriptor's value: 1
[  404.463990][ T5904] usb 4-1: string descriptor 0 read error: -22
[  404.489911][ T5904] usb 4-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=33.f0
[  404.554454][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.690412][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'.
[  405.244024][ T9150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.865'.
[  405.718952][ T9139] ceph: No mds server is up or the cluster is laggy
[  406.209116][ T5904] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER)
[  406.576448][ T9156] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  408.462548][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.877'.
[  408.622157][ T5884] usb 4-1: USB disconnect, device number 26
[  408.751565][ T9186] binder: 9185:9186 ioctl c0306201 200000000c40 returned -22
[  408.807996][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.880'.
[  409.240139][ T9190] dummy0: entered promiscuous mode
[  409.251174][ T9190] capability: warning: `syz.2.881' uses 32-bit capabilities (legacy support in use)
[  409.614014][ T9203] 9pnet_fd: Insufficient options for proto=fd
[  409.730025][ T9204] netlink: 'syz.2.884': attribute type 4 has an invalid length.
[  409.830509][ T9207] netlink: 'syz.2.884': attribute type 4 has an invalid length.
[  409.914432][ T5904] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  409.944431][ T9211] PM: Enabling pm_trace changes system date and time during resume.
[  409.944431][ T9211] PM: Correct system time has to be restored manually after resume.
[  410.054448][ T5904] usb 4-1: device descriptor read/64, error -71
[  410.188191][ T9217] tmpfs: Bad value for 'huge'
[  410.304518][ T5904] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  410.475645][ T5904] usb 4-1: device descriptor read/64, error -71
[  410.605183][ T5904] usb usb4-port1: attempt power cycle
[  410.874498][  T977] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  410.994506][ T5904] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  411.115388][ T5904] usb 4-1: device descriptor read/8, error -71
[  411.131936][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'.
[  411.144807][  T977] usb 3-1: device descriptor read/64, error -71
[  411.411597][  T977] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  411.714865][ T5904] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  411.742134][ T5904] usb 4-1: device descriptor read/8, error -71
[  411.768487][  T977] usb 3-1: device descriptor read/64, error -71
[  411.887234][  T977] usb usb3-port1: attempt power cycle
[  411.906357][ T5904] usb usb4-port1: unable to enumerate USB device
[  411.970118][ T9239] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  412.226040][ T9239] netlink: 'syz.4.895': attribute type 3 has an invalid length.
[  412.419124][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.5.894'.
[  412.457291][ T9241] FAULT_INJECTION: forcing a failure.
[  412.457291][ T9241] name failslab, interval 1, probability 0, space 0, times 0
[  412.484635][ T9241] CPU: 1 UID: 0 PID: 9241 Comm: syz.1.896 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  412.484665][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  412.484677][ T9241] Call Trace:
[  412.484686][ T9241]  <TASK>
[  412.484695][ T9241]  dump_stack_lvl+0x189/0x250
[  412.484730][ T9241]  ? __pfx____ratelimit+0x10/0x10
[  412.484758][ T9241]  ? __pfx_dump_stack_lvl+0x10/0x10
[  412.484788][ T9241]  ? __pfx__printk+0x10/0x10
[  412.484813][ T9241]  ? __pfx___might_resched+0x10/0x10
[  412.484841][ T9241]  ? fs_reclaim_acquire+0x7d/0x100
[  412.484875][ T9241]  should_fail_ex+0x414/0x560
[  412.484904][ T9241]  should_failslab+0xa8/0x100
[  412.484932][ T9241]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  412.484958][ T9241]  ? __alloc_skb+0x112/0x2d0
[  412.484982][ T9241]  __alloc_skb+0x112/0x2d0
[  412.485017][ T9241]  netlink_ack+0x146/0xa50
[  412.485035][ T9241]  ? __pfx_genl_rcv_msg+0x10/0x10
[  412.485060][ T9241]  ? ref_tracker_free+0x63a/0x7d0
[  412.485083][ T9241]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  412.485108][ T9241]  ? __pfx_nl80211_post_doit+0x10/0x10
[  412.485135][ T9241]  ? __pfx_ref_tracker_free+0x10/0x10
[  412.485171][ T9241]  netlink_rcv_skb+0x28c/0x470
[  412.485194][ T9241]  ? __pfx_genl_rcv_msg+0x10/0x10
[  412.485223][ T9241]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  412.485265][ T9241]  ? down_read+0x1ad/0x2e0
[  412.485287][ T9241]  genl_rcv+0x28/0x40
[  412.485312][ T9241]  netlink_unicast+0x758/0x8d0
[  412.485358][ T9241]  netlink_sendmsg+0x805/0xb30
[  412.485391][ T9241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  412.485423][ T9241]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  412.485446][ T9241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  412.485469][ T9241]  __sock_sendmsg+0x219/0x270
[  412.485503][ T9241]  ____sys_sendmsg+0x505/0x830
[  412.485537][ T9241]  ? __pfx_____sys_sendmsg+0x10/0x10
[  412.485571][ T9241]  ? import_iovec+0x74/0xa0
[  412.485606][ T9241]  ___sys_sendmsg+0x21f/0x2a0
[  412.485633][ T9241]  ? __pfx____sys_sendmsg+0x10/0x10
[  412.485707][ T9241]  ? __fget_files+0x2a/0x420
[  412.485734][ T9241]  ? __fget_files+0x3a0/0x420
[  412.485774][ T9241]  __x64_sys_sendmsg+0x19b/0x260
[  412.485801][ T9241]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  412.485837][ T9241]  ? __pfx_ksys_write+0x10/0x10
[  412.485858][ T9241]  ? rcu_is_watching+0x15/0xb0
[  412.485893][ T9241]  ? do_syscall_64+0xbe/0x3b0
[  412.485928][ T9241]  do_syscall_64+0xfa/0x3b0
[  412.485955][ T9241]  ? lockdep_hardirqs_on+0x9c/0x150
[  412.485984][ T9241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.486011][ T9241]  ? clear_bhb_loop+0x60/0xb0
[  412.486037][ T9241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.486057][ T9241] RIP: 0033:0x7f2c4f58e929
[  412.486075][ T9241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  412.486093][ T9241] RSP: 002b:00007f2c50411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  412.486115][ T9241] RAX: ffffffffffffffda RBX: 00007f2c4f7b5fa0 RCX: 00007f2c4f58e929
[  412.486130][ T9241] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 0000000000000004
[  412.486143][ T9241] RBP: 00007f2c50411090 R08: 0000000000000000 R09: 0000000000000000
[  412.486156][ T9241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  412.486168][ T9241] R13: 0000000000000000 R14: 00007f2c4f7b5fa0 R15: 00007fff1bc94df8
[  412.486201][ T9241]  </TASK>
[  412.818376][    C1] vkms_vblank_simulate: vblank timer overrun
[  413.014532][  T977] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  413.035166][  T977] usb 3-1: device descriptor read/8, error -71
[  413.295583][  T977] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  413.335005][  T977] usb 3-1: device descriptor read/8, error -71
[  413.458004][  T977] usb usb3-port1: unable to enumerate USB device
[  413.514857][ T5915] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  413.607080][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'.
[  413.703442][ T5915] usb 6-1: Using ep0 maxpacket: 8
[  414.513165][ T5915] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  414.576085][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0
[  414.666197][ T5915] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[  414.684414][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.692482][ T5915] usb 6-1: Product: syz
[  414.744498][ T5915] usb 6-1: Manufacturer: syz
[  414.749170][ T5915] usb 6-1: SerialNumber: syz
[  414.770694][ T5915] usb 6-1: config 0 descriptor??
[  414.850917][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'.
[  415.392975][ T9265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.902'.
[  415.463543][ T9265] tipc: Started in network mode
[  415.469085][ T9265] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  415.479481][ T9265] tipc: Enabled bearer <eth:team0>, priority 0
[  415.917093][ T5915] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found
[  416.004619][ T5915] snd_usb_toneport 6-1:0.0: set_interface failed
[  416.011179][ T5915] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected
[  416.036085][ T5915] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -71
[  416.096389][ T5915] usb 6-1: USB disconnect, device number 8
[  416.331814][ T9275] FAULT_INJECTION: forcing a failure.
[  416.331814][ T9275] name failslab, interval 1, probability 0, space 0, times 0
[  416.365923][ T9275] CPU: 0 UID: 0 PID: 9275 Comm: syz.3.908 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  416.365953][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  416.365966][ T9275] Call Trace:
[  416.365974][ T9275]  <TASK>
[  416.365983][ T9275]  dump_stack_lvl+0x189/0x250
[  416.366018][ T9275]  ? __pfx____ratelimit+0x10/0x10
[  416.366046][ T9275]  ? __pfx_dump_stack_lvl+0x10/0x10
[  416.366076][ T9275]  ? __pfx__printk+0x10/0x10
[  416.366104][ T9275]  ? ref_tracker_alloc+0x318/0x460
[  416.366133][ T9275]  should_fail_ex+0x414/0x560
[  416.366162][ T9275]  should_failslab+0xa8/0x100
[  416.366191][ T9275]  kmem_cache_alloc_noprof+0x73/0x3c0
[  416.366214][ T9275]  ? skb_clone+0x212/0x3a0
[  416.366243][ T9275]  skb_clone+0x212/0x3a0
[  416.366272][ T9275]  __netlink_deliver_tap+0x404/0x850
[  416.366308][ T9275]  ? netlink_deliver_tap+0x2e/0x1b0
[  416.366331][ T9275]  netlink_deliver_tap+0x19c/0x1b0
[  416.366355][ T9275]  netlink_unicast+0x72f/0x8d0
[  416.366400][ T9275]  netlink_sendmsg+0x805/0xb30
[  416.366433][ T9275]  ? __pfx_netlink_sendmsg+0x10/0x10
[  416.366464][ T9275]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  416.366488][ T9275]  ? __pfx_netlink_sendmsg+0x10/0x10
[  416.366510][ T9275]  __sock_sendmsg+0x219/0x270
[  416.366543][ T9275]  ____sys_sendmsg+0x505/0x830
[  416.366573][ T9275]  ? __pfx_____sys_sendmsg+0x10/0x10
[  416.366608][ T9275]  ? import_iovec+0x74/0xa0
[  416.366649][ T9275]  ___sys_sendmsg+0x21f/0x2a0
[  416.366675][ T9275]  ? __pfx____sys_sendmsg+0x10/0x10
[  416.366741][ T9275]  ? __fget_files+0x2a/0x420
[  416.366766][ T9275]  ? __fget_files+0x3a0/0x420
[  416.366805][ T9275]  __x64_sys_sendmsg+0x19b/0x260
[  416.366832][ T9275]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  416.366868][ T9275]  ? __pfx_ksys_write+0x10/0x10
[  416.366887][ T9275]  ? rcu_is_watching+0x15/0xb0
[  416.366927][ T9275]  ? do_syscall_64+0xbe/0x3b0
[  416.366961][ T9275]  do_syscall_64+0xfa/0x3b0
[  416.366988][ T9275]  ? lockdep_hardirqs_on+0x9c/0x150
[  416.367015][ T9275]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.367035][ T9275]  ? clear_bhb_loop+0x60/0xb0
[  416.367060][ T9275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.367080][ T9275] RIP: 0033:0x7f5d2c38e929
[  416.367098][ T9275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.367115][ T9275] RSP: 002b:00007f5d2d269038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  416.367137][ T9275] RAX: ffffffffffffffda RBX: 00007f5d2c5b5fa0 RCX: 00007f5d2c38e929
[  416.367152][ T9275] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  416.367164][ T9275] RBP: 00007f5d2d269090 R08: 0000000000000000 R09: 0000000000000000
[  416.367177][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.367188][ T9275] R13: 0000000000000000 R14: 00007f5d2c5b5fa0 R15: 00007ffed2d83bc8
[  416.367221][ T9275]  </TASK>
[  416.944686][ T5915] tipc: Node number set to 11578026
[  419.597114][ T9299] netlink: 16 bytes leftover after parsing attributes in process `syz.5.914'.
[  423.198716][ T9334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  423.597263][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'.
[  426.620400][ T9373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  426.941148][  T980] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  427.184046][  T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  427.238456][  T980] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  427.294762][  T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  427.351162][  T980] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  427.374743][  T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.382822][  T980] usb 6-1: Product: syz
[  427.426233][  T980] usb 6-1: Manufacturer: syz
[  427.441142][  T980] usb 6-1: SerialNumber: syz
[  427.462018][  T980] usb 6-1: config 0 descriptor??
[  427.511696][ T9376] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  427.577821][ T9376] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  427.613227][  T980] usb 6-1: ucan: probing device on interface #0
[  428.244866][  T980] usb 6-1: ucan: could not read protocol version, ret=0
[  428.263256][  T980] usb 6-1: ucan: probe failed; try to update the device firmware
[  429.324732][  T980] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  430.006339][  T980] usb 2-1: config 0 has no interfaces?
[  430.012080][  T980] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  430.671873][  T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.798286][  T980] usb 2-1: config 0 descriptor??
[  430.891923][ T9421] netlink: 'syz.2.950': attribute type 10 has an invalid length.
[  430.919925][ T9423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  431.076608][ T5904] usb 6-1: USB disconnect, device number 9
[  431.122168][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.211881][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  431.262307][ T9428] netlink: 436 bytes leftover after parsing attributes in process `syz.3.952'.
[  431.271783][ T9428] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  431.457139][  T980] usb 2-1: USB disconnect, device number 11
[  431.819750][ T9440] netlink: 'syz.2.957': attribute type 4 has an invalid length.
[  431.996461][ T9440] netlink: 'syz.2.957': attribute type 4 has an invalid length.
[  432.711900][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'.
[  432.722857][ T9449] netlink: 52 bytes leftover after parsing attributes in process `syz.4.959'.
[  432.731859][ T9449] netlink: 5 bytes leftover after parsing attributes in process `syz.4.959'.
[  432.740720][ T9449] netlink: 52 bytes leftover after parsing attributes in process `syz.4.959'.
[  432.750702][ T9449] netlink: 5 bytes leftover after parsing attributes in process `syz.4.959'.
[  432.759705][ T9449] netlink: 52 bytes leftover after parsing attributes in process `syz.4.959'.
[  435.548329][ T9465] delete_channel: no stack
[  435.556008][ T9465] overlayfs: missing 'lowerdir'
[  437.494071][ T5915] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  437.661900][ T5915] usb 6-1: config 8 has an invalid interface number: 235 but max is 0
[  437.771409][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'.
[  438.516401][ T5915] usb 6-1: config 8 has no interface number 0
[  438.523259][ T5915] usb 6-1: config 8 interface 235 has no altsetting 0
[  439.462502][ T5915] usb 6-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f
[  439.542601][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.716812][ T5915] usb 6-1: can't set config #8, error -71
[  440.320801][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  440.327384][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  440.458674][ T5915] usb 6-1: USB disconnect, device number 10
[  440.468471][ T9495] tmpfs: Unknown parameter 'grpqu'
[  440.480659][ T9495] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  441.108879][ T9517] overlay: Unknown parameter 'obj_type'
[  441.121618][ T9512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  441.354552][ T9494] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  442.476315][ T9494] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  442.519123][ T9494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.556324][ T9494] usb 2-1: config 0 descriptor??
[  442.586147][ T9494] gspca_main: cpia1-2.14.0 probing 0813:0001
[  442.795250][ T9494] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  443.003405][ T9494] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  443.073723][ T9494] usb 2-1: USB disconnect, device number 12
[  444.613351][ T9543] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.983'.
[  446.062295][ T9571] FAULT_INJECTION: forcing a failure.
[  446.062295][ T9571] name failslab, interval 1, probability 0, space 0, times 0
[  446.075917][ T9571] CPU: 0 UID: 0 PID: 9571 Comm: syz.4.991 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  446.075945][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  446.075961][ T9571] Call Trace:
[  446.075969][ T9571]  <TASK>
[  446.075978][ T9571]  dump_stack_lvl+0x189/0x250
[  446.076018][ T9571]  ? __pfx_dump_stack_lvl+0x10/0x10
[  446.076056][ T9571]  ? __pfx__printk+0x10/0x10
[  446.076093][ T9571]  should_fail_ex+0x414/0x560
[  446.076123][ T9571]  should_failslab+0xa8/0x100
[  446.076151][ T9571]  __kmalloc_cache_noprof+0x70/0x3d0
[  446.076176][ T9571]  ? ip_set_create+0x348/0x1940
[  446.076209][ T9571]  ip_set_create+0x348/0x1940
[  446.076249][ T9571]  ? trace_contention_end+0x39/0x120
[  446.076273][ T9571]  ? __pfx_ip_set_create+0x10/0x10
[  446.076341][ T9571]  nfnetlink_rcv_msg+0xb4d/0x1130
[  446.076372][ T9571]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  446.076422][ T9571]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  446.076479][ T9571]  ? lockdep_hardirqs_on+0x9c/0x150
[  446.076516][ T9571]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  446.076544][ T9571]  ? netlink_rcv_skb+0x1e0/0x470
[  446.076579][ T9571]  netlink_rcv_skb+0x205/0x470
[  446.076602][ T9571]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  446.076632][ T9571]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  446.076668][ T9571]  ? security_capable+0x7e/0x2e0
[  446.076705][ T9571]  nfnetlink_rcv+0x26a/0x2520
[  446.076734][ T9571]  ? preempt_schedule_common+0x83/0xd0
[  446.076762][ T9571]  ? preempt_schedule+0xae/0xc0
[  446.076786][ T9571]  ? __pfx_preempt_schedule+0x10/0x10
[  446.076830][ T9571]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  446.076857][ T9571]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  446.076884][ T9571]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  446.076920][ T9571]  ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40
[  446.076946][ T9571]  ? irqentry_exit+0x74/0x90
[  446.076990][ T9571]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[  446.077026][ T9571]  ? rcu_is_watching+0x15/0xb0
[  446.077058][ T9571]  ? rcu_read_unlock_special+0x3fe/0x4c0
[  446.077080][ T9571]  ? skb_clone+0x246/0x3a0
[  446.077111][ T9571]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  446.077133][ T9571]  ? netlink_deliver_tap+0x2e/0x1b0
[  446.077162][ T9571]  ? netlink_deliver_tap+0x2e/0x1b0
[  446.077192][ T9571]  netlink_unicast+0x758/0x8d0
[  446.077236][ T9571]  netlink_sendmsg+0x805/0xb30
[  446.077269][ T9571]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.077301][ T9571]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.077324][ T9571]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.077348][ T9571]  __sock_sendmsg+0x219/0x270
[  446.077381][ T9571]  ____sys_sendmsg+0x505/0x830
[  446.077411][ T9571]  ? __pfx_____sys_sendmsg+0x10/0x10
[  446.077445][ T9571]  ? import_iovec+0x74/0xa0
[  446.077480][ T9571]  ___sys_sendmsg+0x21f/0x2a0
[  446.077506][ T9571]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.077588][ T9571]  ? __fget_files+0x2a/0x420
[  446.077614][ T9571]  ? __fget_files+0x3a0/0x420
[  446.077653][ T9571]  __x64_sys_sendmsg+0x19b/0x260
[  446.077680][ T9571]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  446.077715][ T9571]  ? __pfx_ksys_write+0x10/0x10
[  446.077736][ T9571]  ? rcu_is_watching+0x15/0xb0
[  446.077771][ T9571]  ? do_syscall_64+0xbe/0x3b0
[  446.077812][ T9571]  do_syscall_64+0xfa/0x3b0
[  446.077842][ T9571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.077861][ T9571]  ? asm_sysvec_call_function_single+0x1a/0x20
[  446.077883][ T9571]  ? clear_bhb_loop+0x60/0xb0
[  446.077908][ T9571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.077928][ T9571] RIP: 0033:0x7f79a438e929
[  446.077946][ T9571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  446.077963][ T9571] RSP: 002b:00007f79a5150038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.077985][ T9571] RAX: ffffffffffffffda RBX: 00007f79a45b6080 RCX: 00007f79a438e929
[  446.078000][ T9571] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  446.078013][ T9571] RBP: 00007f79a5150090 R08: 0000000000000000 R09: 0000000000000000
[  446.078026][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.078038][ T9571] R13: 0000000000000000 R14: 00007f79a45b6080 R15: 00007ffd7e04d1c8
[  446.078072][ T9571]  </TASK>
[  448.083340][ T9489] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  448.217108][ T9593] virtio-fs: tag </dev/md0> not found
[  448.915932][ T9591] team0: No ports can be present during mode change
[  449.264459][ T9489] usb 5-1: Using ep0 maxpacket: 32
[  449.295594][ T9489] usb 5-1: config 0 has an invalid interface number: 78 but max is 0
[  449.303758][ T9489] usb 5-1: config 0 has no interface number 0
[  449.343931][ T9489] usb 5-1: config 0 interface 78 has no altsetting 0
[  449.384994][ T9489] usb 5-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice=60.11
[  449.413402][ T9489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.446124][ T9489] usb 5-1: Product: syz
[  449.463024][ T9489] usb 5-1: Manufacturer: syz
[  449.478109][ T9489] usb 5-1: SerialNumber: syz
[  449.501342][ T9489] usb 5-1: config 0 descriptor??
[  449.537115][ T9489] snd_usb_pod 5-1:0.78: Line 6 BassPODxt found
[  449.737196][ T9489] snd_usb_pod 5-1:0.78: endpoint not available, using fallback values
[  449.770498][ T9489] snd_usb_pod 5-1:0.78: invalid control EP
[  449.784060][ T9489] snd_usb_pod 5-1:0.78: cannot start listening: -22
[  449.798659][ T9489] snd_usb_pod 5-1:0.78: Line 6 BassPODxt now disconnected
[  449.988161][ T9489] snd_usb_pod 5-1:0.78: probe with driver snd_usb_pod failed with error -22
[  450.272888][ T9494] usb 5-1: USB disconnect, device number 21
[  450.290559][ T9612] netlink: 'syz.3.1003': attribute type 18 has an invalid length.
[  450.324619][ T9612] binder: 9609:9612 ioctl 89f8 200000000600 returned -22
[  450.332308][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'.
[  451.244970][ T5976] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  451.330809][ T9636] FAULT_INJECTION: forcing a failure.
[  451.330809][ T9636] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.346070][ T9636] CPU: 0 UID: 0 PID: 9636 Comm: syz.3.1010 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  451.346099][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  451.346111][ T9636] Call Trace:
[  451.346119][ T9636]  <TASK>
[  451.346129][ T9636]  dump_stack_lvl+0x189/0x250
[  451.346164][ T9636]  ? __pfx____ratelimit+0x10/0x10
[  451.346192][ T9636]  ? __pfx_dump_stack_lvl+0x10/0x10
[  451.346222][ T9636]  ? __pfx__printk+0x10/0x10
[  451.346242][ T9636]  ? __might_fault+0xb0/0x130
[  451.346279][ T9636]  should_fail_ex+0x414/0x560
[  451.346308][ T9636]  _copy_from_user+0x2d/0xb0
[  451.346340][ T9636]  __sys_bpf+0x1ed/0x860
[  451.346375][ T9636]  ? __pfx___sys_bpf+0x10/0x10
[  451.346415][ T9636]  ? ksys_write+0x22a/0x250
[  451.346441][ T9636]  ? __pfx_ksys_write+0x10/0x10
[  451.346461][ T9636]  ? rcu_is_watching+0x15/0xb0
[  451.346498][ T9636]  __x64_sys_bpf+0x7c/0x90
[  451.346521][ T9636]  do_syscall_64+0xfa/0x3b0
[  451.346552][ T9636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.346570][ T9636]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  451.346591][ T9636]  ? clear_bhb_loop+0x60/0xb0
[  451.346616][ T9636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.346635][ T9636] RIP: 0033:0x7f5d2c38e929
[  451.346652][ T9636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.346670][ T9636] RSP: 002b:00007f5d2d269038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  451.346691][ T9636] RAX: ffffffffffffffda RBX: 00007f5d2c5b5fa0 RCX: 00007f5d2c38e929
[  451.346706][ T9636] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000009
[  451.346719][ T9636] RBP: 00007f5d2d269090 R08: 0000000000000000 R09: 0000000000000000
[  451.346732][ T9636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.346744][ T9636] R13: 0000000000000000 R14: 00007f5d2c5b5fa0 R15: 00007ffed2d83bc8
[  451.346777][ T9636]  </TASK>
[  451.566292][ T5976] usb 3-1: config index 0 descriptor too short (expected 1840, got 18)
[  451.574913][ T5976] usb 3-1: config 9 has too many interfaces: 74, using maximum allowed: 32
[  451.584584][ T5976] usb 3-1: config 9 has an invalid descriptor of length 120, skipping remainder of the config
[  451.594925][ T5976] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 74
[  451.604030][ T5976] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  451.613359][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.814519][   T24] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  452.344636][   T24] usb 2-1: device descriptor read/64, error -71
[  452.704705][   T24] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  452.870085][   T24] usb 2-1: device descriptor read/64, error -71
[  452.956280][ T5976] usb 3-1: string descriptor 0 read error: -71
[  453.129097][   T24] usb usb2-port1: attempt power cycle
[  453.153697][ T5976] usb 3-1: USB disconnect, device number 22
[  454.230665][   T24] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  454.504495][   T24] usb 2-1: device descriptor read/8, error -71
[  457.214368][   T30] audit: type=1326 audit(1751300624.675:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9678 comm="syz.4.1026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79a438e929 code=0x0
[  457.622684][ T9690] autofs: Bad value for 'fd'
[  461.148825][ T9723] netlink: 'syz.1.1037': attribute type 39 has an invalid length.
[  461.214881][ T9729] tmpfs: Bad value for 'mpol'
[  461.541403][ T9737] geneve2: entered promiscuous mode
[  461.692319][ T9737] geneve2: entered allmulticast mode
[  462.834595][   T30] audit: type=1326 audit(1751300630.305:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9747 comm="syz.1.1046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c4f58e929 code=0x0
[  463.076356][ T5915] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  463.726826][ T9755] Bluetooth: hci0: unsupported parameter 12033
[  463.751443][ T9755] Bluetooth: hci0: unsupported parameter 12033
[  463.774344][ T5915] usb 3-1: Using ep0 maxpacket: 8
[  463.790002][ T5915] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  463.817196][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.836194][ T5915] usb 3-1: Product: syz
[  463.849320][ T5915] usb 3-1: Manufacturer: syz
[  463.861234][ T5915] usb 3-1: SerialNumber: syz
[  463.875271][ T5915] usb 3-1: config 0 descriptor??
[  463.892856][ T5915] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  464.087683][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1049'.
[  465.821091][ T5975] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  466.004473][ T5975] usb 2-1: Using ep0 maxpacket: 8
[  466.043106][ T5975] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[  466.093202][ T5975] usb 2-1: config 2 has no interface number 0
[  466.932455][ T5976] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  466.940350][ T5975] usb 2-1: config 2 interface 31 has no altsetting 0
[  466.954351][ T5915] gspca_sonixj: i2c_w8 err -71
[  466.986977][ T5975] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  467.080348][ T5915] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  467.118184][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.127447][ T5915] usb 3-1: USB disconnect, device number 23
[  467.151085][ T5975] usb 2-1: Product: syz
[  467.155481][ T5976] usb 5-1: device descriptor read/64, error -71
[  467.180778][ T5975] usb 2-1: Manufacturer: syz
[  467.199064][ T5975] usb 2-1: SerialNumber: syz
[  468.204589][ T5976] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  468.227802][ T9783] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  468.235291][ T9783] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  468.248186][ T9783] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  468.254183][ T9783] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  468.264630][ T9783] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  468.270642][ T9783] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  468.279033][ T9783] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  468.285087][ T9783] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  468.386913][ T5976] usb 5-1: device descriptor read/64, error -71
[  468.505068][ T5976] usb usb5-port1: attempt power cycle
[  469.194375][ T5976] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  469.319751][ T5975] ch9200 2-1:2.31: probe with driver ch9200 failed with error -71
[  469.607672][ T5975] usb 2-1: USB disconnect, device number 17
[  469.657179][ T5976] usb 5-1: device descriptor read/8, error -71
[  469.763227][ T9799] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  470.296336][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  470.302518][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  470.312026][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  470.454586][   T51] Bluetooth: hci5: command 0x0405 tx timeout
[  472.615213][ T5837] Bluetooth: hci4: command 0x0406 tx timeout
[  472.621971][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout
[  472.629492][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  472.636754][ T5837] Bluetooth: hci5: command 0x0405 tx timeout
[  474.157742][ T9824] sctp: [Deprecated]: syz.5.1068 (pid 9824) Use of int in max_burst socket option deprecated.
[  474.157742][ T9824] Use struct sctp_assoc_value instead
[  474.640175][ T9850] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  474.694769][ T5831] Bluetooth: hci5: command 0x0405 tx timeout
[  477.741530][   T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  477.771075][ T9860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1077'.
[  477.830068][ T5975] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  478.044486][   T24] usb 5-1: Using ep0 maxpacket: 16
[  478.057274][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.078693][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  478.091098][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  478.117112][   T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  478.131900][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.158482][   T24] usb 5-1: config 0 descriptor??
[  478.187249][ T5975] usb 6-1: Using ep0 maxpacket: 8
[  478.203966][ T5975] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  478.227236][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.313514][ T5975] usb 6-1: config 0 descriptor??
[  478.394292][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'.
[  479.615975][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1085'.
[  479.683488][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  479.701921][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  479.712479][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  479.723663][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  479.807992][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  479.903897][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  480.040364][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  480.513674][ T5975] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  480.553343][ T5975] asix 6-1:0.0: probe with driver asix failed with error -71
[  480.580872][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  480.589331][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  480.601052][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  480.609177][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  480.616924][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  480.625591][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  480.632876][   T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  480.640602][   T24] microsoft 0003:045E:07DA.0003: unbalanced collection at end of report description
[  480.652130][   T24] microsoft 0003:045E:07DA.0003: parse failed
[  480.658683][   T24] microsoft 0003:045E:07DA.0003: probe with driver microsoft failed with error -22
[  480.673722][   T24] usb 5-1: USB disconnect, device number 26
[  480.674969][ T5975] usb 6-1: USB disconnect, device number 11
[  482.052281][ T9905] tipc: New replicast peer: 0.0.0.0
[  482.058705][ T9905] tipc: Enabled bearer <udp:syz2>, priority 10
[  482.066242][ T9905] tipc: New replicast peer: 172.20.20.170
[  482.879401][   T51] Bluetooth: hci5: command 0x0405 tx timeout
[  484.336923][ T9918] netlink: 'syz.2.1093': attribute type 1 has an invalid length.
[  484.694334][ T5915] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  485.154445][ T5915] usb 3-1: device descriptor read/64, error -71
[  485.200898][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'.
[  485.404404][ T5915] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  485.584350][ T5915] usb 3-1: device descriptor read/64, error -71
[  485.694709][ T5915] usb usb3-port1: attempt power cycle
[  486.073753][ T5915] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  486.155334][ T5915] usb 3-1: device descriptor read/8, error -71
[  486.419331][ T5915] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  486.487448][ T9945] FAULT_INJECTION: forcing a failure.
[  486.487448][ T9945] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  486.536892][ T5915] usb 3-1: device descriptor read/8, error -71
[  486.563796][ T9945] CPU: 0 UID: 0 PID: 9945 Comm: syz.4.1100 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  486.563826][ T9945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  486.563840][ T9945] Call Trace:
[  486.563849][ T9945]  <TASK>
[  486.563858][ T9945]  dump_stack_lvl+0x189/0x250
[  486.563897][ T9945]  ? __pfx____ratelimit+0x10/0x10
[  486.563927][ T9945]  ? __pfx_dump_stack_lvl+0x10/0x10
[  486.563957][ T9945]  ? __pfx__printk+0x10/0x10
[  486.563982][ T9945]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  486.564022][ T9945]  should_fail_ex+0x414/0x560
[  486.564053][ T9945]  strncpy_from_user+0x36/0x290
[  486.564084][ T9945]  __se_sys_add_key+0xcc/0x400
[  486.564111][ T9945]  ? __pfx___se_sys_add_key+0x10/0x10
[  486.564144][ T9945]  ? do_syscall_64+0xbe/0x3b0
[  486.564172][ T9945]  ? __x64_sys_add_key+0x20/0xc0
[  486.564197][ T9945]  do_syscall_64+0xfa/0x3b0
[  486.564226][ T9945]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.564251][ T9945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.564271][ T9945]  ? clear_bhb_loop+0x60/0xb0
[  486.564297][ T9945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.564317][ T9945] RIP: 0033:0x7f79a438e929
[  486.564335][ T9945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  486.564354][ T9945] RSP: 002b:00007f79a512f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  486.564376][ T9945] RAX: ffffffffffffffda RBX: 00007f79a45b6160 RCX: 00007f79a438e929
[  486.564391][ T9945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[  486.564404][ T9945] RBP: 00007f79a512f090 R08: 0000000000000000 R09: 0000000000000000
[  486.564416][ T9945] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000001
[  486.564429][ T9945] R13: 0000000000000000 R14: 00007f79a45b6160 R15: 00007ffd7e04d1c8
[  486.564461][ T9945]  </TASK>
[  486.775776][ T9947] sp0: Synchronizing with TNC
[  487.164809][   T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  487.425145][   T24] usb 4-1: device descriptor read/64, error -71
[  487.492124][ T5915] usb usb3-port1: unable to enumerate USB device
[  487.734764][   T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  487.894566][   T24] usb 4-1: device descriptor read/64, error -71
[  488.027006][   T24] usb usb4-port1: attempt power cycle
[  489.035415][   T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  489.079810][   T24] usb 4-1: device descriptor read/8, error -71
[  489.119087][ T9972] FAULT_INJECTION: forcing a failure.
[  489.119087][ T9972] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  489.150518][ T9972] CPU: 0 UID: 0 PID: 9972 Comm: syz.1.1112 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  489.150548][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  489.150562][ T9972] Call Trace:
[  489.150570][ T9972]  <TASK>
[  489.150580][ T9972]  dump_stack_lvl+0x189/0x250
[  489.150616][ T9972]  ? __pfx____ratelimit+0x10/0x10
[  489.150647][ T9972]  ? __pfx_dump_stack_lvl+0x10/0x10
[  489.150669][ T9972]  ? __pfx__printk+0x10/0x10
[  489.150684][ T9972]  ? __might_fault+0xb0/0x130
[  489.150709][ T9972]  should_fail_ex+0x414/0x560
[  489.150730][ T9972]  _copy_from_user+0x2d/0xb0
[  489.150753][ T9972]  rds_setsockopt+0x5af/0xc40
[  489.150778][ T9972]  ? __pfx_rds_setsockopt+0x10/0x10
[  489.150796][ T9972]  ? vfs_write+0x8d8/0xa90
[  489.150819][ T9972]  ? __pfx_vfs_write+0x10/0x10
[  489.150839][ T9972]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  489.150856][ T9972]  ? __pfx_rds_setsockopt+0x10/0x10
[  489.150875][ T9972]  do_sock_setsockopt+0x25a/0x3e0
[  489.150893][ T9972]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  489.150912][ T9972]  ? ksys_write+0x1e1/0x250
[  489.150935][ T9972]  __x64_sys_setsockopt+0x18b/0x220
[  489.150956][ T9972]  do_syscall_64+0xfa/0x3b0
[  489.150976][ T9972]  ? lockdep_hardirqs_on+0x9c/0x150
[  489.150997][ T9972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.151012][ T9972]  ? clear_bhb_loop+0x60/0xb0
[  489.151030][ T9972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.151044][ T9972] RIP: 0033:0x7f2c4f58e929
[  489.151057][ T9972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  489.151071][ T9972] RSP: 002b:00007f2c50411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  489.151086][ T9972] RAX: ffffffffffffffda RBX: 00007f2c4f7b5fa0 RCX: 00007f2c4f58e929
[  489.151098][ T9972] RDX: 0000000000000006 RSI: 0000000000000114 RDI: 0000000000000003
[  489.151107][ T9972] RBP: 00007f2c50411090 R08: 0000000000000004 R09: 0000000000000000
[  489.151116][ T9972] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  489.151125][ T9972] R13: 0000000000000000 R14: 00007f2c4f7b5fa0 R15: 00007fff1bc94df8
[  489.151148][ T9972]  </TASK>
[  489.543031][   T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  489.616104][   T24] usb 4-1: device descriptor read/8, error -71
[  489.874579][   T24] usb usb4-port1: unable to enumerate USB device
[  492.502765][ T5975] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  492.669741][ T5975] usb 2-1: device descriptor read/64, error -71
[  493.044373][ T5975] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  493.173218][ T9997] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  493.190551][ T9997] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  493.204551][ T5975] usb 2-1: device descriptor read/64, error -71
[  493.204667][ T9997] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  493.223947][ T9997] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  493.319414][ T5975] usb usb2-port1: attempt power cycle
[  493.584713][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  493.844577][ T5975] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  494.127128][ T5975] usb 2-1: device descriptor read/8, error -71
[  494.774518][ T5975] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  495.093700][ T5975] usb 2-1: device descriptor read/8, error -71
[  495.254519][ T5831] Bluetooth: hci5: command 0x0405 tx timeout
[  495.261383][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  495.267555][   T51] Bluetooth: hci3: command 0x0c1a tx timeout
[  495.381425][ T5975] usb usb2-port1: unable to enumerate USB device
[  495.412888][T10038] netlink: 'syz.5.1131': attribute type 1 has an invalid length.
[  495.421128][T10038] netlink: 'syz.5.1131': attribute type 11 has an invalid length.
[  495.522207][T10038] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1131'.
[  498.046113][ T5975] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  498.268919][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  498.298049][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  498.314322][ T5975] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  498.333758][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.371735][ T5975] usb 2-1: config 0 descriptor??
[  498.833178][ T5975] lua 0003:1E7D:2C2E.0004: invalid report_size 1052143565
[  498.874337][ T5975] lua 0003:1E7D:2C2E.0004: item 0 4 1 7 parsing failed
[  498.896282][ T5975] lua 0003:1E7D:2C2E.0004: parse failed
[  498.902111][ T5975] lua 0003:1E7D:2C2E.0004: probe with driver lua failed with error -22
[  499.308169][ T5975] usb 2-1: USB disconnect, device number 22
[  499.548670][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1150'.
[  500.556720][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1152'.
[  501.685282][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  501.703609][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  504.534392][   T51] Bluetooth: hci5: command 0x0405 tx timeout
[  506.174388][ T9493] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  506.651795][ T9493] usb 2-1: Using ep0 maxpacket: 32
[  506.680574][ T9493] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  506.724031][ T9493] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  506.757381][ T9493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.770737][ T9493] usb 2-1: Product: syz
[  506.776567][ T9493] usb 2-1: Manufacturer: syz
[  506.783399][ T9493] usb 2-1: SerialNumber: syz
[  506.797016][ T9493] usb 2-1: config 0 descriptor??
[  506.810352][ T9493] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -12
[  508.602752][T10188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1168'.
[  508.636378][T10192] syz.3.1176: attempt to access beyond end of device
[  508.636378][T10192] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0
[  509.765726][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1177'.
[  509.890331][T10210] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.1179'.
[  509.920860][   T24] usb 2-1: USB disconnect, device number 23
[  510.305774][ T9489] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  510.464713][ T9489] usb 4-1: device descriptor read/64, error -71
[  510.724663][T10232] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1185'.
[  510.733775][T10232] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1185'.
[  510.742923][T10232] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1185'.
[  510.752478][T10232] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1185'.
[  510.761482][T10232] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1185'.
[  510.889424][ T9489] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  511.074789][ T9489] usb 4-1: device descriptor read/64, error -71
[  511.258374][ T9489] usb usb4-port1: attempt power cycle
[  511.273816][   T30] audit: type=1326 audit(1751300678.595:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10219 comm="syz.2.1183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa927d8e929 code=0x7fc00000
[  512.830462][ T9489] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  512.855686][ T9489] usb 4-1: device descriptor read/8, error -71
[  514.028307][ T9489] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  515.324461][ T9489] usb 4-1: device not accepting address 38, error -71
[  515.335598][ T9489] usb usb4-port1: unable to enumerate USB device
[  515.537819][T10263] netlink: 'syz.1.1191': attribute type 9 has an invalid length.
[  515.595593][T10263] bond_slave_0: entered promiscuous mode
[  515.601644][T10263] bond_slave_1: entered promiscuous mode
[  515.608159][T10263] macvlan2: entered promiscuous mode
[  515.613541][T10263] bond0: entered promiscuous mode
[  515.630480][T10263] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  516.337186][T10261] bond1: entered promiscuous mode
[  516.342308][T10261] bond1: entered allmulticast mode
[  516.415552][T10261] 8021q: adding VLAN 0 to HW filter on device bond1
[  516.495955][T10261] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1192'.
[  517.941940][T10296] overlay: Unknown parameter '/'
[  519.066045][T10287] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1200'.
[  519.904785][ T9493] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  520.081455][T10321] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  520.137946][T10322] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  520.204379][ T9493] usb 6-1: Using ep0 maxpacket: 16
[  520.234976][ T9493] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  520.266243][ T9493] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  520.303779][ T9493] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  520.388367][ T9493] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.428726][T10330] tmpfs: Unknown parameter 'grpqu'
[  520.435893][T10330] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  520.454617][ T9493] usb 6-1: Product: syz
[  520.458861][ T9493] usb 6-1: Manufacturer: syz
[  520.489599][ T9493] usb 6-1: SerialNumber: syz
[  521.367811][   T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  521.573226][ T9493] usb 6-1: 0:2 : does not exist
[  521.594500][ T9493] usb 6-1: 5:0: cannot get min/max values for control 8 (id 5)
[  521.624547][ T9493] usb 6-1: USB disconnect, device number 12
[  521.704547][   T24] usb 5-1: device descriptor read/64, error -71
[  521.954691][   T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  522.101530][   T24] usb 5-1: device descriptor read/64, error -71
[  522.264259][T10356] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  522.372961][   T24] usb usb5-port1: attempt power cycle
[  522.814370][   T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  524.023701][   T24] usb 5-1: device descriptor read/8, error -71
[  525.076207][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'.
[  525.385468][T10404] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1231'.
[  525.794564][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'.
[  526.841288][T10404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.958151][T10404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  527.017182][T10404] bond0 (unregistering): Released all slaves
[  527.034439][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'.
[  528.306377][T10457] netlink: 'syz.1.1247': attribute type 1 has an invalid length.
[  530.483732][T10484] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  532.649658][T10507] tmpfs: Unknown parameter 'grpqu'
[  532.804436][T10507] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  533.176891][ T5809] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  533.304187][T10519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1266'.
[  533.383651][ T5809] usb 5-1: Using ep0 maxpacket: 16
[  533.404386][ T5809] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  533.428067][ T5809] usb 5-1: config 0 has no interface number 0
[  533.459820][ T5809] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  533.516408][ T5809] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  533.569767][ T5809] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  533.628185][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  533.640059][ T5809] usb 5-1: Product: syz
[  533.658508][ T5809] usb 5-1: SerialNumber: syz
[  533.681771][ T5809] usb 5-1: config 0 descriptor??
[  533.703519][ T5809] cm109 5-1:0.8: invalid payload size 0, expected 4
[  533.737105][ T5809] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input15
[  533.961580][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  534.306573][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'.
[  534.336341][ T5809] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  534.626022][ T5809] usb 4-1: Using ep0 maxpacket: 16
[  534.759629][ T5809] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  534.849947][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.965428][ T5809] usb 4-1: Product: syz
[  534.998615][ T5809] usb 4-1: Manufacturer: syz
[  535.029010][ T5809] usb 4-1: SerialNumber: syz
[  535.117201][ T5809] usb 4-1: config 0 descriptor??
[  535.122833][ T9494] usb 5-1: USB disconnect, device number 31
[  535.136340][T10542] netlink: 'syz.2.1273': attribute type 1 has an invalid length.
[  535.232111][ T5809] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  535.246280][ T9494] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  535.267303][ T5809] usb 4-1: Detected FT232H
[  535.340059][T10544] tmpfs: Unknown parameter 'grpqu'
[  535.844659][T10544] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  535.884723][ T5809] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  536.060506][T10552] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1276'.
[  536.263408][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  536.289518][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  536.346114][ T5809] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  536.360354][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  536.407036][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  536.781110][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  536.800285][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  536.825362][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  536.838309][ T5190] ldm_validate_partition_table(): Disk read failed.
[  536.858241][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  536.886998][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  536.902843][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  536.987896][ T5190] Dev loop6: unable to read RDB block 0
[  537.001381][ T5190]  loop6: unable to read partition table
[  537.007829][ T5190] loop6: partition table beyond EOD, truncated
[  537.332180][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'.
[  537.425776][T10581] netlink: 'syz.4.1284': attribute type 1 has an invalid length.
[  538.189985][T10584] tmpfs: Unknown parameter 'grpqu'
[  538.204934][T10584] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  538.309540][ T5976] usb 4-1: USB disconnect, device number 39
[  538.323323][T10586] FAULT_INJECTION: forcing a failure.
[  538.323323][T10586] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  538.352367][T10586] CPU: 1 UID: 0 PID: 10586 Comm: syz.4.1288 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  538.352395][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  538.352406][T10586] Call Trace:
[  538.352414][T10586]  <TASK>
[  538.352422][T10586]  dump_stack_lvl+0x189/0x250
[  538.352456][T10586]  ? __pfx____ratelimit+0x10/0x10
[  538.352483][T10586]  ? __pfx_dump_stack_lvl+0x10/0x10
[  538.352511][T10586]  ? __pfx__printk+0x10/0x10
[  538.352530][T10586]  ? __might_fault+0xb0/0x130
[  538.352562][T10586]  should_fail_ex+0x414/0x560
[  538.352585][T10586]  _copy_from_user+0x2d/0xb0
[  538.352611][T10586]  __sys_bpf+0x1ed/0x860
[  538.352634][T10586]  ? __pfx___sys_bpf+0x10/0x10
[  538.352665][T10586]  ? ksys_write+0x22a/0x250
[  538.352686][T10586]  ? __pfx_ksys_write+0x10/0x10
[  538.352703][T10586]  ? rcu_is_watching+0x15/0xb0
[  538.352736][T10586]  __x64_sys_bpf+0x7c/0x90
[  538.352766][T10586]  do_syscall_64+0xfa/0x3b0
[  538.352791][T10586]  ? lockdep_hardirqs_on+0x9c/0x150
[  538.352813][T10586]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.352831][T10586]  ? clear_bhb_loop+0x60/0xb0
[  538.352852][T10586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.352870][T10586] RIP: 0033:0x7f79a438e929
[  538.352887][T10586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  538.352904][T10586] RSP: 002b:00007f79a5171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  538.352925][T10586] RAX: ffffffffffffffda RBX: 00007f79a45b5fa0 RCX: 00007f79a438e929
[  538.352940][T10586] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005
[  538.352953][T10586] RBP: 00007f79a5171090 R08: 0000000000000000 R09: 0000000000000000
[  538.352965][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  538.352977][T10586] R13: 0000000000000000 R14: 00007f79a45b5fa0 R15: 00007ffd7e04d1c8
[  538.353009][T10586]  </TASK>
[  538.358625][ T5976] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  538.482789][T10589] xt_connbytes: Forcing CT accounting to be enabled
[  538.655634][T10589] Cannot find del_set index 1 as target
[  538.669089][ T5976] ftdi_sio 4-1:0.0: device disconnected
[  539.523787][ T9489] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  540.195629][ T9489] usb 2-1: Using ep0 maxpacket: 8
[  540.202680][ T9489] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  540.218757][ T9489] usb 2-1: config 0 has no interface number 0
[  540.234420][ T5915] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  540.243952][ T9489] usb 2-1: config 0 interface 1 has no altsetting 0
[  540.256571][ T9489] usb 2-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=da.9a
[  540.293663][ T9489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.316997][T10601] syz.3.1293 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  540.343205][ T9489] usb 2-1: Product: syz
[  540.351458][ T9489] usb 2-1: Manufacturer: syz
[  540.380081][ T9489] usb 2-1: SerialNumber: syz
[  540.389774][ T9489] usb 2-1: config 0 descriptor??
[  540.418885][ T5915] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  540.449620][ T5915] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024
[  540.462251][ T5915] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  540.484454][ T5915] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  540.505030][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.518239][T10604] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  540.540489][T10613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1296'.
[  540.552122][T10613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1296'.
[  540.569399][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1296'.
[  540.826706][T10616] tmpfs: Unknown parameter 'grpqu'
[  540.850902][T10616] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  541.299502][ T9489] snd-usb-audio 2-1:0.1: probe with driver snd-usb-audio failed with error -22
[  541.331039][ T5915] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  541.404671][ T9489] usb 2-1: USB disconnect, device number 24
[  541.513359][ T7592] udevd[7592]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  541.626987][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'.
[  542.411835][T10628] 9pnet_fd: Insufficient options for proto=fd
[  542.494757][ T5915] usb 5-1: USB disconnect, device number 32
[  542.605721][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1303'.
[  542.632401][T10632] syz_tun: entered promiscuous mode
[  542.646765][T10632] macvtap1: entered promiscuous mode
[  542.690127][T10632] macvtap1: entered allmulticast mode
[  542.716416][T10632] syz_tun: entered allmulticast mode
[  542.889623][T10636] syz_tun: left allmulticast mode
[  543.017424][T10636] syz_tun: left promiscuous mode
[  543.450407][T10645] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  543.914900][T10654] tmpfs: Bad value for 'mpol'
[  544.418276][T10660] tmpfs: Unknown parameter 'grpqu'
[  544.495201][T10660] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  544.818326][T10663] sctp: [Deprecated]: syz.3.1310 (pid 10663) Use of struct sctp_assoc_value in delayed_ack socket option.
[  544.818326][T10663] Use struct sctp_sack_info instead
[  544.840947][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1310'.
[  544.850173][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1310'.
[  546.650786][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1314'.
[  547.789070][ T5837] Bluetooth: hci5: SCO packet for unknown connection handle 200
[  548.361833][T10683] IPv6: Can't replace route, no match found
[  549.994296][ T9489] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  550.164653][ T9489] usb 3-1: Using ep0 maxpacket: 8
[  550.183432][ T9489] usb 3-1: config 254 has an invalid interface number: 167 but max is 0
[  550.215904][ T9489] usb 3-1: config 254 has no interface number 0
[  550.329761][T10705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1322'.
[  550.340949][T10705] tmpfs: Unknown parameter 'grpqu'
[  550.350156][T10704] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  550.935008][ T9489] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  550.965623][ T9489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.982939][ T9489] usb 3-1: Product: syz
[  550.991058][ T9489] usb 3-1: Manufacturer: syz
[  550.995873][ T9489] usb 3-1: SerialNumber: syz
[  551.403975][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'.
[  551.415028][ T9489] mxuport 3-1:254.167: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[  552.176616][ T9489] mxuport 3-1:254.167: probe with driver mxuport failed with error -5
[  552.202489][ T9489] usb 3-1: USB disconnect, device number 28
[  554.757340][ T5915] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  554.909133][T10753] tmpfs: Unknown parameter 'grpqu'
[  554.935371][T10753] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  555.234331][ T5915] usb 3-1: Using ep0 maxpacket: 16
[  555.251802][ T5915] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  555.266283][ T5915] usb 3-1: config 0 has no interface number 0
[  555.292918][ T5915] usb 3-1: config 0 interface 12 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16
[  555.386346][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'.
[  556.213029][ T5915] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=83.b3
[  556.222824][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.231422][ T5915] usb 3-1: Product: syz
[  556.235720][ T5915] usb 3-1: Manufacturer: syz
[  556.240627][ T5915] usb 3-1: SerialNumber: syz
[  556.254964][ T5915] usb 3-1: config 0 descriptor??
[  556.262580][T10747] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  556.271641][ T5915] usb 3-1: NFC: intf ffff888027c26000 id ffffffff8eb40140
[  556.427101][ T5915] nfcmrvl 3-1:0.12: NFC: registered with nci successfully
[  556.489262][T10741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.539630][T10741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.594561][ T5915] usb 3-1: USB disconnect, device number 29
[  556.632576][ T5915] usb 3-1: NFC: intf ffff888027c26000
[  556.722351][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'.
[  556.796120][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1342'.
[  556.825680][T10781] netlink: 'syz.4.1342': attribute type 7 has an invalid length.
[  557.284350][ T5915] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  557.617584][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  557.645905][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  557.658893][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  557.827985][ T5915] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  557.838255][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.848900][ T5915] usb 4-1: Product: syz
[  557.853312][ T5915] usb 4-1: Manufacturer: syz
[  557.899530][ T5915] usb 4-1: SerialNumber: syz
[  557.927026][ T5915] usb 4-1: config 0 descriptor??
[  557.951117][T10791] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  558.784336][ T5915] rc_core: IR keymap rc-streamzap not found
[  558.805320][ T5915] Registered IR keymap rc-empty
[  558.870518][ T5915] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  558.900054][ T5915] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17
[  558.915624][T10805] tmpfs: Unknown parameter 'grpqu'
[  558.922108][T10805] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  559.251693][ T5915] usb 4-1: USB disconnect, device number 40
[  561.201872][T10820] syz.3.1353: vmalloc error: size 47972352, failed to allocated page array size 93696, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  561.269158][T10820] CPU: 1 UID: 0 PID: 10820 Comm: syz.3.1353 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  561.269180][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  561.269190][T10820] Call Trace:
[  561.269197][T10820]  <TASK>
[  561.269204][T10820]  dump_stack_lvl+0x189/0x250
[  561.269243][T10820]  ? __pfx_dump_stack_lvl+0x10/0x10
[  561.269275][T10820]  ? __pfx__printk+0x10/0x10
[  561.269297][T10820]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  561.269333][T10820]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  561.269367][T10820]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  561.269396][T10820]  warn_alloc+0x214/0x310
[  561.269421][T10820]  ? __pfx_warn_alloc+0x10/0x10
[  561.269448][T10820]  ? __get_vm_area_node+0x28f/0x300
[  561.269467][T10820]  ? translate_table+0x19b/0x2040
[  561.269488][T10820]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  561.269531][T10820]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  561.269563][T10820]  ? rcu_is_watching+0x15/0xb0
[  561.269587][T10820]  ? translate_table+0x19b/0x2040
[  561.269603][T10820]  ? translate_table+0x19b/0x2040
[  561.269618][T10820]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  561.269638][T10820]  ? translate_table+0x19b/0x2040
[  561.269654][T10820]  ? xt_alloc_table_info+0x3b/0xa0
[  561.269679][T10820]  translate_table+0x19b/0x2040
[  561.269707][T10820]  ? __lock_acquire+0xab9/0xd20
[  561.269731][T10820]  ? __pfx_translate_table+0x10/0x10
[  561.269750][T10820]  ? __might_fault+0xb0/0x130
[  561.269788][T10820]  ? _copy_from_user+0x94/0xb0
[  561.269816][T10820]  do_ip6t_set_ctl+0x970/0xce0
[  561.269839][T10820]  ? rcu_is_watching+0x15/0xb0
[  561.269861][T10820]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  561.269893][T10820]  ? __pfx___mutex_lock+0x10/0x10
[  561.269916][T10820]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  561.269952][T10820]  nf_setsockopt+0x26c/0x290
[  561.269972][T10820]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  561.269998][T10820]  do_sock_setsockopt+0x25a/0x3e0
[  561.270017][T10820]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  561.270037][T10820]  ? __fget_files+0x2a/0x420
[  561.270063][T10820]  __x64_sys_setsockopt+0x18b/0x220
[  561.270084][T10820]  do_syscall_64+0xfa/0x3b0
[  561.270106][T10820]  ? lockdep_hardirqs_on+0x9c/0x150
[  561.270126][T10820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.270141][T10820]  ? clear_bhb_loop+0x60/0xb0
[  561.270159][T10820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.270174][T10820] RIP: 0033:0x7f5d2c38e929
[  561.270188][T10820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  561.270202][T10820] RSP: 002b:00007f5d2d269038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  561.270218][T10820] RAX: ffffffffffffffda RBX: 00007f5d2c5b5fa0 RCX: 00007f5d2c38e929
[  561.270229][T10820] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  561.270238][T10820] RBP: 00007f5d2c410b39 R08: 0000000000000570 R09: 0000000000000000
[  561.270248][T10820] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  561.270258][T10820] R13: 0000000000000000 R14: 00007f5d2c5b5fa0 R15: 00007ffed2d83bc8
[  561.270281][T10820]  </TASK>
[  561.273612][T10820] Mem-Info:
[  561.601042][T10820] active_anon:7095 inactive_anon:10924 isolated_anon:0
[  561.601042][T10820]  active_file:16518 inactive_file:44732 isolated_file:0
[  561.601042][T10820]  unevictable:769 dirty:86 writeback:25
[  561.601042][T10820]  slab_reclaimable:10640 slab_unreclaimable:101113
[  561.601042][T10820]  mapped:38782 shmem:13911 pagetables:1298
[  561.601042][T10820]  sec_pagetables:0 bounce:0
[  561.601042][T10820]  kernel_misc_reclaimable:0
[  561.601042][T10820]  free:1280391 free_pcp:21099 free_cma:0
[  561.651904][T10820] Node 0 active_anon:28380kB inactive_anon:43696kB active_file:65872kB inactive_file:178928kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:155128kB dirty:344kB writeback:100kB shmem:54108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11948kB pagetables:5044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  561.687857][T10820] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  561.751314][T10841] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  561.759383][T10820] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  561.965930][T10820] lowmem_reserve[]: 0 2501 2503 2503 2503
[  562.037809][T10820] Node 0 DMA32 free:1223872kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28376kB inactive_anon:43872kB active_file:64116kB inactive_file:178860kB unevictable:1540kB writepending:332kB present:3129332kB managed:2561452kB mlocked:0kB bounce:0kB free_pcp:51256kB local_pcp:29620kB free_cma:0kB
[  562.070503][    C0] vkms_vblank_simulate: vblank timer overrun
[  562.145029][T10820] lowmem_reserve[]: 0 0 1 1 1
[  562.159450][T10820] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1764kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  562.205262][ T9494] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  562.232654][T10820] lowmem_reserve[]: 0 0 0 0 0
[  562.240904][T10820] Node 1 Normal free:3889908kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:30800kB local_pcp:20420kB free_cma:0kB
[  562.281501][T10820] lowmem_reserve[]: 0 0 0 0 0
[  562.286829][T10820] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  562.310260][T10820] Node 0 
[  563.414665][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  563.424059][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  563.432928][T10820] DMA32: 554*4kB (UME) 953*8kB (UM) 623*16kB (UME) 587*32kB (UME) 269*64kB (UM) 82*128kB (UME) 65*256kB (UM) 43*512kB (UM) 15*1024kB (UM) 9*2048kB (UM) 267*4096kB (M) = 1232384kB
[  563.461567][ T9494] usb 6-1: not running at top speed; connect to a high speed hub
[  563.507388][ T9494] usb 6-1: config 1 interface 0 altsetting 16 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  563.534560][T10820] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  563.575093][T10820] Node 1 Normal: 5*4kB (UME) 6*8kB (ME) 11*16kB (UME) 4*32kB (ME) 8*64kB (ME) 5*128kB (UME) 3*256kB (UM) 5*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3889908kB
[  563.600059][T10820] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  563.610553][T10820] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  563.620374][ T9494] usb 6-1: config 1 interface 0 has no altsetting 0
[  563.620427][T10820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  563.639046][T10820] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  563.673277][T10820] 71248 total pagecache pages
[  563.736363][ T9494] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  563.746016][T10820] 0 pages in swap cache
[  563.752556][T10820] Free swap  = 124996kB
[  563.759275][T10820] Total swap = 124996kB
[  563.763605][T10820] 2097051 pages RAM
[  563.769022][T10820] 0 pages HighMem/MovableOnly
[  563.774624][T10820] 424581 pages reserved
[  563.778965][T10820] 0 pages cma reserved
[  563.819957][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'.
[  563.830977][T10850] tmpfs: Unknown parameter 'grpqu'
[  563.840631][T10850] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  563.867967][ T9494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.913816][ T9494] usb 6-1: Product: ࡡ
[  563.931057][ T9494] usb 6-1: Manufacturer: 袤넳뭼ࣤ篼ጄ⽯奒ᣝ䆭╚ಡ믓梌㷴絹졁鑍൴ඩ閲펁蔴땸ﵨ吸ਰϵ긆壈楺첯쟿㊂鰐磄ꂜ
[  564.149620][ T9494] usb 6-1: SerialNumber: ϥ㭍턤ᄂǑ㝭ꈌႂ틮⢢帱눲鱯ཧ斐注৤釶
[  564.187139][T10843] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  564.299738][T10861] netlink: 'syz.1.1367': attribute type 2 has an invalid length.
[  564.812458][T10843] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  564.819850][T10843] IPv6: NLM_F_CREATE should be set when creating new route
[  565.370991][ T9494] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  565.442110][ T9494] usb 6-1: USB disconnect, device number 13
[  565.446268][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'.
[  565.461443][T10875] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.468803][T10875] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.635979][T10881] fuseblk: Unknown parameter 'rV���͒a�s5����9�lz��N��P�I*��/ބʖ����A$'
[  567.044885][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'.
[  567.113754][T10892] tmpfs: Unknown parameter 'grpqu'
[  567.197334][T10892] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  567.939894][T10902] overlay: Unknown parameter 'appraise_type'
[  569.020644][T10913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1379'.
[  569.073225][T10913] IPVS: Unknown mcast interface: wg0
[  569.400189][T10921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1381'.
[  570.100986][T10934] syz.5.1384: attempt to access beyond end of device
[  570.100986][T10934] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  570.119949][T10934] (syz.5.1384,10934,0):ocfs2_get_sector:1714 ERROR: status = -5
[  570.128132][T10934] (syz.5.1384,10934,0):ocfs2_sb_probe:753 ERROR: status = -5
[  570.136089][T10934] (syz.5.1384,10934,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  570.152678][T10934] (syz.5.1384,10934,0):ocfs2_fill_super:1177 ERROR: status = -5
[  571.812388][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'.
[  572.710110][T10966] vivid-000: disconnect
[  572.779307][T10963] vivid-000: reconnect
[  572.914505][T10971] netlink: 'syz.4.1395': attribute type 1 has an invalid length.
[  573.507051][T10971] 8021q: adding VLAN 0 to HW filter on device bond1
[  573.633854][T10972] 8021q: adding VLAN 0 to HW filter on device bond1
[  573.641179][T10972] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address
[  573.677227][T10972] bond1: (slave vxcan5): Error -95 calling set_mac_address
[  574.307437][T10980] bond1: (slave bridge2): Enslaving as an active interface with a down link
[  574.457158][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'.
[  574.784437][ T5915] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  575.134458][ T5915] usb 2-1: Using ep0 maxpacket: 8
[  575.141757][ T5915] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  575.156918][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  575.184848][ T5915] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  575.358501][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  575.887374][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  575.993653][ T5915] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  576.002075][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  576.013580][ T5915] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  576.025413][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  576.041865][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  576.057360][ T5915] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  576.085617][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  576.118095][ T5915] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  576.302260][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  576.321263][ T5915] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  576.620880][T11021] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1408'.
[  577.081651][T11020] xt_CT: No such helper "pptp"
[  577.247229][ T5915] usb 2-1: string descriptor 0 read error: -22
[  577.254354][ T9489] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  577.278631][ T5915] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  577.319409][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.405273][ T5915] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  577.434286][ T9489] usb 4-1: device descriptor read/64, error -71
[  577.571906][ T5939] usb 2-1: USB disconnect, device number 25
[  577.691089][ T9489] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  577.774639][ T5915] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[  577.834702][ T9489] usb 4-1: device descriptor read/64, error -71
[  577.945370][ T9489] usb usb4-port1: attempt power cycle
[  577.966781][ T5915] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  577.984263][ T5915] usb 3-1: config 0 has no interface number 0
[  578.006064][ T5915] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  578.041528][ T5915] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  578.054965][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.085276][ T5915] usb 3-1: config 0 descriptor??
[  578.092118][T11028] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  578.102579][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'.
[  578.130732][ T5915] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  578.284358][ T9489] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  578.537900][ T9493] usb 3-1: USB disconnect, device number 30
[  578.543460][ T9489] usb 4-1: device descriptor read/8, error -71
[  578.544113][    C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  578.774861][ T9489] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  578.818153][ T9489] usb 4-1: device descriptor read/8, error -71
[  578.947211][ T9489] usb usb4-port1: unable to enumerate USB device
[  579.336059][ T9494] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  579.536495][ T9494] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  579.557768][ T9494] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  579.594362][ T9494] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  579.610474][ T9494] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.645007][ T9494] usb 6-1: config 0 descriptor??
[  579.943123][T11064] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1425'.
[  579.984337][T11067] FAULT_INJECTION: forcing a failure.
[  579.984337][T11067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  580.004291][T11067] CPU: 1 UID: 0 PID: 11067 Comm: syz.2.1424 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  580.004320][T11067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  580.004333][T11067] Call Trace:
[  580.004341][T11067]  <TASK>
[  580.004350][T11067]  dump_stack_lvl+0x189/0x250
[  580.004386][T11067]  ? __pfx____ratelimit+0x10/0x10
[  580.004414][T11067]  ? __pfx_dump_stack_lvl+0x10/0x10
[  580.004443][T11067]  ? __pfx__printk+0x10/0x10
[  580.004477][T11067]  should_fail_ex+0x414/0x560
[  580.004507][T11067]  _copy_to_user+0x31/0xb0
[  580.004541][T11067]  simple_read_from_buffer+0xe1/0x170
[  580.004573][T11067]  proc_fail_nth_read+0x1df/0x250
[  580.004605][T11067]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  580.004637][T11067]  ? rw_verify_area+0x258/0x650
[  580.004658][T11067]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  580.004698][T11067]  vfs_read+0x1fd/0x980
[  580.004728][T11067]  ? __pfx___mutex_lock+0x10/0x10
[  580.004757][T11067]  ? __pfx_vfs_read+0x10/0x10
[  580.004782][T11067]  ? __fget_files+0x2a/0x420
[  580.004815][T11067]  ? __fget_files+0x3a0/0x420
[  580.004844][T11067]  ? __fget_files+0x2a/0x420
[  580.004892][T11067]  ksys_read+0x145/0x250
[  580.004917][T11067]  ? __pfx_ksys_read+0x10/0x10
[  580.004937][T11067]  ? rcu_is_watching+0x15/0xb0
[  580.004982][T11067]  ? do_syscall_64+0xbe/0x3b0
[  580.005022][T11067]  do_syscall_64+0xfa/0x3b0
[  580.005058][T11067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.005081][T11067]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  580.005107][T11067]  ? clear_bhb_loop+0x60/0xb0
[  580.005139][T11067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.005164][T11067] RIP: 0033:0x7fa927d8d33c
[  580.005182][T11067] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  580.005198][T11067] RSP: 002b:00007fa928b99030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  580.005220][T11067] RAX: ffffffffffffffda RBX: 00007fa927fb5fa0 RCX: 00007fa927d8d33c
[  580.005235][T11067] RDX: 000000000000000f RSI: 00007fa928b990a0 RDI: 000000000000000c
[  580.005247][T11067] RBP: 00007fa928b99090 R08: 0000000000000000 R09: 0000000000000000
[  580.005259][T11067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  580.005271][T11067] R13: 0000000000000000 R14: 00007fa927fb5fa0 R15: 00007ffe80a313c8
[  580.005305][T11067]  </TASK>
[  580.244400][    C1] vkms_vblank_simulate: vblank timer overrun
[  580.296093][ T9494] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  580.304891][ T9494] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  580.313121][ T9494] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  580.320619][ T9494] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  580.328117][ T9494] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0
[  580.360528][ T9494] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0
[  580.495596][ T9494] playstation 0003:054C:0DF2.0005: Invalid byte count transferred, expected 20 got 0
[  580.507121][ T9494] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense pairing info: -22
[  580.516513][ T9494] playstation 0003:054C:0DF2.0005: Failed to get MAC address from DualSense
[  580.525350][ T9494] playstation 0003:054C:0DF2.0005: Failed to create dualsense.
[  580.536725][ T9494] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -22
[  580.738244][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'.
[  580.753821][ T9489] usb 6-1: USB disconnect, device number 14
[  581.014476][ T9494] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  581.174511][ T9494] usb 2-1: Using ep0 maxpacket: 8
[  581.198230][ T9494] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  581.207894][ T9494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.216640][ T9494] usb 2-1: Product: syz
[  581.221298][ T9494] usb 2-1: Manufacturer: syz
[  581.227886][ T9494] usb 2-1: SerialNumber: syz
[  581.237285][ T9494] usb 2-1: config 0 descriptor??
[  581.456756][T11099] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  581.502000][ T9494] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  582.128815][T11101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.174935][T11101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.417569][ T9494] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  582.627074][ T5809] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  582.874311][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  582.906920][ T5809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  582.934432][ T5809] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  582.961991][ T5809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.009964][T11115] kernel read not supported for file / 
�7���âW)�s���!Q���fs�l{T�r�)r��O���2:"��T+͟v|�ղDvc���֠�6�x�c: (pid: 11115 comm: syz.5.1441)
[  583.060862][   T30] audit: type=1800 audit(1751300750.495:298): pid=11115 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1441" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=33383 res=0 errno=0
[  583.206339][ T5809] usb 3-1: config 0 descriptor??
[  583.479377][T11119] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  583.635117][ T5809] cp2112 0003:10C4:EA90.0006: global environment stack underflow
[  583.738795][ T5809] cp2112 0003:10C4:EA90.0006: item 0 4 1 11 parsing failed
[  583.758840][ T5809] cp2112 0003:10C4:EA90.0006: parse failed
[  583.922337][ T9493] usb 2-1: USB disconnect, device number 26
[  584.355662][ T5809] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -22
[  584.406591][ T5809] usb 3-1: USB disconnect, device number 31
[  584.860191][T11131] netlink: zone id is out of range
[  584.868144][T11131] netlink: zone id is out of range
[  584.877763][T11131] netlink: zone id is out of range
[  584.883255][T11131] netlink: zone id is out of range
[  584.910193][T11131] netlink: set zone limit has 4 unknown bytes
[  585.126512][T11139] loop2: detected capacity change from 0 to 1312
[  585.264396][ T5809] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  585.617447][ T5809] usb 6-1: device descriptor read/64, error -71
[  585.849937][T11147] block device autoloading is deprecated and will be removed.
[  586.354268][ T5809] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  586.524475][ T5809] usb 6-1: device descriptor read/64, error -71
[  586.770602][ T5809] usb usb6-port1: attempt power cycle
[  586.973873][ T5190] buffer_io_error: 14 callbacks suppressed
[  586.973891][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  587.019803][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  587.030476][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  587.049487][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  587.067699][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  587.111111][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  587.144046][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  587.198691][ T5190] ldm_validate_partition_table(): Disk read failed.
[  587.245783][ T5809] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  587.274364][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  587.298639][ T5809] usb 6-1: device descriptor read/8, error -71
[  587.319470][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  587.354634][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  587.388327][ T5190] Dev loop6: unable to read RDB block 0
[  587.402884][ T5190]  loop6: unable to read partition table
[  587.573132][ T5190] loop6: partition table beyond EOD, truncated
[  587.614610][ T5809] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  587.635581][ T5809] usb 6-1: device descriptor read/8, error -71
[  587.754789][ T5809] usb usb6-port1: unable to enumerate USB device
[  590.291490][T11188] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  591.058782][T11198] tmpfs: Unknown parameter 'grpqu'
[  591.066249][T11198] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  591.095679][ T5915] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  591.264352][ T5915] usb 2-1: Using ep0 maxpacket: 8
[  591.290184][ T5915] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  591.314428][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.323342][T11208] ieee802154 phy0 wpan0: encryption failed: -22
[  591.331129][ T5915] usb 2-1: Product: syz
[  591.336542][ T5915] usb 2-1: Manufacturer: syz
[  591.341739][ T5915] usb 2-1: SerialNumber: syz
[  591.359019][ T5915] usb 2-1: config 0 descriptor??
[  591.579342][ T5915] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  592.859920][T11188] hub 1-0:1.0: USB hub found
[  592.867096][ T5915] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  592.883884][T11188] hub 1-0:1.0: 1 port detected
[  592.886591][   T30] audit: type=1326 audit(1751300760.235:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11225 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa927d8e929 code=0x7ffc0000
[  592.995526][   T30] audit: type=1326 audit(1751300760.235:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11225 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fa927d8e929 code=0x7ffc0000
[  593.021657][ T9494] usb 2-1: USB disconnect, device number 27
[  593.244721][   T30] audit: type=1326 audit(1751300760.235:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11225 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa927d8e929 code=0x7ffc0000
[  593.341541][   T30] audit: type=1326 audit(1751300760.235:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11225 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa927d8e929 code=0x7ffc0000
[  593.590333][   T30] audit: type=1326 audit(1751300760.309:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11225 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa927d8e929 code=0x7ffc0000
[  593.908478][T11238] tmpfs: Unknown parameter 'grpqu'
[  593.915566][T11238] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  593.925099][   T30] audit: type=1326 audit(1751300760.309:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11225 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa927d8e929 code=0x7ffc0000
[  594.049520][   T30] audit: type=1326 audit(1751300760.309:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11225 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa927d8e929 code=0x7ffc0000
[  594.142239][   T30] audit: type=1326 audit(1751300760.459:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11225 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa927d8e929 code=0x7ffc0000
[  594.192970][T11250] binder: 11246:11250 ioctl 4018620d 0 returned -22
[  594.247948][   T30] audit: type=1326 audit(1751300760.459:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11225 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa927d8d290 code=0x7ffc0000
[  594.285098][T11253] FAULT_INJECTION: forcing a failure.
[  594.285098][T11253] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  594.354085][T11253] CPU: 1 UID: 0 PID: 11253 Comm: syz.3.1482 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  594.354115][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  594.354129][T11253] Call Trace:
[  594.354137][T11253]  <TASK>
[  594.354147][T11253]  dump_stack_lvl+0x189/0x250
[  594.354188][T11253]  ? __pfx____ratelimit+0x10/0x10
[  594.354217][T11253]  ? __pfx_dump_stack_lvl+0x10/0x10
[  594.354246][T11253]  ? __pfx__printk+0x10/0x10
[  594.354281][T11253]  should_fail_ex+0x414/0x560
[  594.354309][T11253]  _copy_to_user+0x31/0xb0
[  594.354350][T11253]  simple_read_from_buffer+0xe1/0x170
[  594.354381][T11253]  proc_fail_nth_read+0x1df/0x250
[  594.354414][T11253]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  594.354446][T11253]  ? rw_verify_area+0x258/0x650
[  594.354468][T11253]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  594.354497][T11253]  vfs_read+0x1fd/0x980
[  594.354525][T11253]  ? __pfx___mutex_lock+0x10/0x10
[  594.354556][T11253]  ? __pfx_vfs_read+0x10/0x10
[  594.354581][T11253]  ? __fget_files+0x2a/0x420
[  594.354614][T11253]  ? __fget_files+0x3a0/0x420
[  594.354639][T11253]  ? __fget_files+0x2a/0x420
[  594.354675][T11253]  ksys_read+0x145/0x250
[  594.354701][T11253]  ? __pfx_ksys_read+0x10/0x10
[  594.354729][T11253]  ? do_syscall_64+0xbe/0x3b0
[  594.354764][T11253]  do_syscall_64+0xfa/0x3b0
[  594.354790][T11253]  ? lockdep_hardirqs_on+0x9c/0x150
[  594.354818][T11253]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.354838][T11253]  ? clear_bhb_loop+0x60/0xb0
[  594.354863][T11253]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.354883][T11253] RIP: 0033:0x7f5d2c38d33c
[  594.354901][T11253] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  594.354920][T11253] RSP: 002b:00007f5d2d269030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  594.354941][T11253] RAX: ffffffffffffffda RBX: 00007f5d2c5b5fa0 RCX: 00007f5d2c38d33c
[  594.354956][T11253] RDX: 000000000000000f RSI: 00007f5d2d2690a0 RDI: 0000000000000003
[  594.354969][T11253] RBP: 00007f5d2d269090 R08: 0000000000000000 R09: 0000000000000000
[  594.354982][T11253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  594.354994][T11253] R13: 0000000000000000 R14: 00007f5d2c5b5fa0 R15: 00007ffed2d83bc8
[  594.355027][T11253]  </TASK>
[  594.590323][   T30] audit: type=1326 audit(1751300760.459:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11225 comm="syz.2.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa927d8e929 code=0x7ffc0000
[  597.701511][T11289] tmpfs: Unknown parameter 'grpqu'
[  597.708491][T11289] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  597.917895][T11301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1496'.
[  598.148798][T11307] random: crng reseeded on system resumption
[  603.489656][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  603.489676][   T30] audit: type=1326 audit(1751300771.019:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11333 comm="syz.5.1508" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12b298e929 code=0x0
[  603.519003][T11329] tmpfs: Unknown parameter 'grpqu'
[  603.642132][T11329] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  604.565822][T11357] macvtap1: entered allmulticast mode
[  604.572175][T11357] veth0_macvtap: entered allmulticast mode
[  607.475499][T11373] tmpfs: Unknown parameter 'grpqu'
[  607.482368][T11373] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  611.789018][T11410] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  611.827229][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'.
[  614.594538][T11433] 9pnet_fd: Insufficient options for proto=fd
[  614.825690][T11439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1542'.
[  616.001509][T11443] evm: overlay not supported
[  616.764602][ T5915] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  617.157266][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  617.279536][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  617.290599][ T5915] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  617.316336][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  617.341586][ T5915] usb 2-1: SerialNumber: syz
[  617.459732][T11459] netlink: 'syz.3.1548': attribute type 16 has an invalid length.
[  617.502745][T11459] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1548'.
[  617.535503][T11460] /dev/nullb0: Can't open blockdev
[  617.576764][   T30] audit: type=1800 audit(1751300785.099:311): pid=11448 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1544" name=A0F29C1437B3CFF8C3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=34553 res=0 errno=0
[  617.579433][ T5915] usb 2-1: 0:2 : does not exist
[  617.710137][ T5915] usb 2-1: USB disconnect, device number 28
[  617.819888][ T7592] udevd[7592]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  617.905698][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1550'.
[  618.104726][ T9489] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  618.233236][T11474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1552'.
[  619.144311][ T9489] usb 4-1: Using ep0 maxpacket: 32
[  619.151658][ T9489] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  619.161085][ T9489] usb 4-1: config 0 has no interface number 0
[  619.170667][ T9489] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  619.213910][ T9489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.270666][ T9489] usb 4-1: Product: syz
[  619.282245][ T9489] usb 4-1: Manufacturer: syz
[  619.292667][ T9489] usb 4-1: SerialNumber: syz
[  619.304769][ T9489] usb 4-1: config 0 descriptor??
[  619.316592][ T9489] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  619.333509][T11481] macvlan1: entered promiscuous mode
[  619.360916][T11481] ipvlan0: entered promiscuous mode
[  619.373216][T11481] ipvlan0: left promiscuous mode
[  619.399488][T11481] macvlan1: left promiscuous mode
[  619.453346][T11483] 9pnet_fd: Insufficient options for proto=fd
[  620.874042][ T9489] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  620.890632][ T5190] buffer_io_error: 14 callbacks suppressed
[  620.890665][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  620.891734][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  620.919328][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  620.920429][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  620.921617][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  620.959343][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  620.960450][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  620.961044][ T5190] ldm_validate_partition_table(): Disk read failed.
[  620.961439][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  620.962384][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  620.991439][ T5190] Buffer I/O error on dev loop6, logical block 0, async page read
[  620.992752][ T5190] Dev loop6: unable to read RDB block 0
[  621.028948][ T5190]  loop6: unable to read partition table
[  621.030704][ T5190] loop6: partition table beyond EOD, truncated
[  622.091627][ T9489] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  622.832092][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  622.840861][ T5976] usb 4-1: USB disconnect, device number 45
[  623.599223][ T5976] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  623.759720][ T5976] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  623.792051][ T5976] quatech2 4-1:0.51: device disconnected
[  623.936992][T11508] random: crng reseeded on system resumption
[  623.951417][T11508] Restarting kernel threads ...
[  623.957220][T11508] Done restarting kernel threads.
[  624.147211][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'.
[  624.325641][T11518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1566'.
[  624.458436][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  624.535516][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  626.690968][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1572'.
[  626.954842][T11543] input: syz1 as /devices/virtual/input/input19
[  627.105872][T11548] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1577'.
[  627.949678][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  627.957720][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.097131][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'.
[  628.384499][ T5976] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  630.059021][ T5976] usb 5-1: Using ep0 maxpacket: 16
[  630.637717][ T5976] usb 5-1: unable to get BOS descriptor or descriptor too short
[  630.747038][ T5976] usb 5-1: no configurations
[  630.751810][ T5976] usb 5-1: can't read configurations, error -22
[  630.930199][T11579] tmpfs: Unknown parameter 'grpqu'
[  630.949912][T11579] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  632.095811][T11598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1589'.
[  633.071011][T11600] FAULT_INJECTION: forcing a failure.
[  633.071011][T11600] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  633.161953][T11600] CPU: 0 UID: 0 PID: 11600 Comm: syz.3.1590 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  633.161984][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  633.161997][T11600] Call Trace:
[  633.162006][T11600]  <TASK>
[  633.162015][T11600]  dump_stack_lvl+0x189/0x250
[  633.162051][T11600]  ? __pfx____ratelimit+0x10/0x10
[  633.162080][T11600]  ? __pfx_dump_stack_lvl+0x10/0x10
[  633.162109][T11600]  ? __pfx__printk+0x10/0x10
[  633.162144][T11600]  should_fail_ex+0x414/0x560
[  633.162173][T11600]  _copy_to_user+0x31/0xb0
[  633.162208][T11600]  simple_read_from_buffer+0xe1/0x170
[  633.162239][T11600]  proc_fail_nth_read+0x1df/0x250
[  633.162272][T11600]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  633.162305][T11600]  ? rw_verify_area+0x258/0x650
[  633.162326][T11600]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  633.162357][T11600]  vfs_read+0x1fd/0x980
[  633.162385][T11600]  ? __pfx___mutex_lock+0x10/0x10
[  633.162415][T11600]  ? __pfx_vfs_read+0x10/0x10
[  633.162439][T11600]  ? __fget_files+0x2a/0x420
[  633.162471][T11600]  ? __fget_files+0x3a0/0x420
[  633.162496][T11600]  ? __fget_files+0x2a/0x420
[  633.162532][T11600]  ksys_read+0x145/0x250
[  633.162557][T11600]  ? __pfx_ksys_read+0x10/0x10
[  633.162585][T11600]  ? do_syscall_64+0xbe/0x3b0
[  633.162620][T11600]  do_syscall_64+0xfa/0x3b0
[  633.162649][T11600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.162668][T11600]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  633.162688][T11600]  ? clear_bhb_loop+0x60/0xb0
[  633.162713][T11600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.162733][T11600] RIP: 0033:0x7f5d2c38d33c
[  633.162752][T11600] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  633.162769][T11600] RSP: 002b:00007f5d2d269030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  633.162791][T11600] RAX: ffffffffffffffda RBX: 00007f5d2c5b5fa0 RCX: 00007f5d2c38d33c
[  633.162807][T11600] RDX: 000000000000000f RSI: 00007f5d2d2690a0 RDI: 000000000000001b
[  633.162820][T11600] RBP: 00007f5d2d269090 R08: 0000000000000000 R09: 0000000000000000
[  633.162832][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.162844][T11600] R13: 0000000000000000 R14: 00007f5d2c5b5fa0 R15: 00007ffed2d83bc8
[  633.162877][T11600]  </TASK>
[  633.634969][T11604] snd_dummy snd_dummy.0: control 2:16:67371008:syz0:-3 is already present
[  633.757919][T11613] FAULT_INJECTION: forcing a failure.
[  633.757919][T11613] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  634.107025][T11613] CPU: 1 UID: 0 PID: 11613 Comm: syz.3.1593 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  634.107056][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  634.107070][T11613] Call Trace:
[  634.107079][T11613]  <TASK>
[  634.107088][T11613]  dump_stack_lvl+0x189/0x250
[  634.107125][T11613]  ? __pfx____ratelimit+0x10/0x10
[  634.107154][T11613]  ? __pfx_dump_stack_lvl+0x10/0x10
[  634.107185][T11613]  ? __pfx__printk+0x10/0x10
[  634.107221][T11613]  should_fail_ex+0x414/0x560
[  634.107252][T11613]  _copy_to_user+0x31/0xb0
[  634.107286][T11613]  simple_read_from_buffer+0xe1/0x170
[  634.107318][T11613]  proc_fail_nth_read+0x1df/0x250
[  634.107353][T11613]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  634.107386][T11613]  ? rw_verify_area+0x258/0x650
[  634.107408][T11613]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  634.107439][T11613]  vfs_read+0x1fd/0x980
[  634.107468][T11613]  ? __pfx___mutex_lock+0x10/0x10
[  634.107503][T11613]  ? __pfx_vfs_read+0x10/0x10
[  634.107529][T11613]  ? __fget_files+0x2a/0x420
[  634.107569][T11613]  ? __fget_files+0x3a0/0x420
[  634.107595][T11613]  ? __fget_files+0x2a/0x420
[  634.107632][T11613]  ksys_read+0x145/0x250
[  634.107658][T11613]  ? __pfx_ksys_read+0x10/0x10
[  634.107678][T11613]  ? rcu_is_watching+0x15/0xb0
[  634.107714][T11613]  ? do_syscall_64+0xbe/0x3b0
[  634.107750][T11613]  do_syscall_64+0xfa/0x3b0
[  634.107778][T11613]  ? lockdep_hardirqs_on+0x9c/0x150
[  634.107806][T11613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.107827][T11613]  ? clear_bhb_loop+0x60/0xb0
[  634.107852][T11613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.107872][T11613] RIP: 0033:0x7f5d2c38d33c
[  634.107890][T11613] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  634.107907][T11613] RSP: 002b:00007f5d2d248030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  634.107929][T11613] RAX: ffffffffffffffda RBX: 00007f5d2c5b6080 RCX: 00007f5d2c38d33c
[  634.107944][T11613] RDX: 000000000000000f RSI: 00007f5d2d2480a0 RDI: 0000000000000005
[  634.107957][T11613] RBP: 00007f5d2d248090 R08: 0000000000000000 R09: 0000000000000000
[  634.107970][T11613] R10: 00000000fffffff6 R11: 0000000000000246 R12: 0000000000000001
[  634.107982][T11613] R13: 0000000000000000 R14: 00007f5d2c5b6080 R15: 00007ffed2d83bc8
[  634.108016][T11613]  </TASK>
[  634.338681][    C1] vkms_vblank_simulate: vblank timer overrun
[  634.809193][T11622] tmpfs: Unknown parameter 'grpqu'
[  634.816383][T11622] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  635.666973][T11634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1601'.
[  635.715107][T11634] lo speed is unknown, defaulting to 1000
[  635.737899][T11633] FAULT_INJECTION: forcing a failure.
[  635.737899][T11633] name failslab, interval 1, probability 0, space 0, times 0
[  635.759879][T11633] CPU: 0 UID: 0 PID: 11633 Comm: syz.3.1601 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  635.759908][T11633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  635.759921][T11633] Call Trace:
[  635.759930][T11633]  <TASK>
[  635.759939][T11633]  dump_stack_lvl+0x189/0x250
[  635.759988][T11633]  ? __pfx____ratelimit+0x10/0x10
[  635.760018][T11633]  ? __pfx_dump_stack_lvl+0x10/0x10
[  635.760048][T11633]  ? __pfx__printk+0x10/0x10
[  635.760075][T11633]  ? __pfx___might_resched+0x10/0x10
[  635.760109][T11633]  should_fail_ex+0x414/0x560
[  635.760138][T11633]  should_failslab+0xa8/0x100
[  635.760166][T11633]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  635.760190][T11633]  ? __alloc_skb+0x112/0x2d0
[  635.760214][T11633]  __alloc_skb+0x112/0x2d0
[  635.760238][T11633]  netlink_dump+0x22b/0xe20
[  635.760270][T11633]  ? __pfx_netlink_dump+0x10/0x10
[  635.760303][T11633]  ? kmem_cache_free+0x18f/0x400
[  635.760332][T11633]  netlink_recvmsg+0x676/0xa30
[  635.760366][T11633]  ? __pfx_netlink_recvmsg+0x10/0x10
[  635.760399][T11633]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  635.760420][T11633]  ? security_socket_recvmsg+0x7e/0x2e0
[  635.760442][T11633]  ? __pfx_netlink_recvmsg+0x10/0x10
[  635.760464][T11633]  sock_recvmsg+0x229/0x270
[  635.760497][T11633]  sock_read_iter+0x231/0x2f0
[  635.760527][T11633]  ? __pfx_sock_read_iter+0x10/0x10
[  635.760580][T11633]  do_iter_readv_writev+0x56e/0x7f0
[  635.760608][T11633]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  635.760640][T11633]  ? bpf_lsm_file_permission+0x9/0x20
[  635.760666][T11633]  ? security_file_permission+0x75/0x290
[  635.760693][T11633]  ? rw_verify_area+0x258/0x650
[  635.760727][T11633]  vfs_readv+0x253/0x850
[  635.760763][T11633]  ? __pfx_vfs_readv+0x10/0x10
[  635.760810][T11633]  ? __fget_files+0x2a/0x420
[  635.760842][T11633]  ? __fget_files+0x3a0/0x420
[  635.760868][T11633]  ? __fget_files+0x2a/0x420
[  635.760904][T11633]  do_readv+0x14d/0x2d0
[  635.760935][T11633]  ? __pfx_do_readv+0x10/0x10
[  635.760960][T11633]  ? rcu_is_watching+0x15/0xb0
[  635.760996][T11633]  ? do_syscall_64+0xbe/0x3b0
[  635.761030][T11633]  do_syscall_64+0xfa/0x3b0
[  635.761058][T11633]  ? lockdep_hardirqs_on+0x9c/0x150
[  635.761084][T11633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.761104][T11633]  ? clear_bhb_loop+0x60/0xb0
[  635.761129][T11633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.761148][T11633] RIP: 0033:0x7f5d2c38e929
[  635.761167][T11633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  635.761184][T11633] RSP: 002b:00007f5d2d269038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  635.761206][T11633] RAX: ffffffffffffffda RBX: 00007f5d2c5b5fa0 RCX: 00007f5d2c38e929
[  635.761221][T11633] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003
[  635.761235][T11633] RBP: 00007f5d2d269090 R08: 0000000000000000 R09: 0000000000000000
[  635.761248][T11633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.761261][T11633] R13: 0000000000000000 R14: 00007f5d2c5b5fa0 R15: 00007ffed2d83bc8
[  635.761303][T11633]  </TASK>
[  636.145252][T11641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1602'.
[  637.154080][T11652] FAULT_INJECTION: forcing a failure.
[  637.154080][T11652] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  637.167698][T11652] CPU: 1 UID: 0 PID: 11652 Comm: syz.3.1604 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  637.167725][T11652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  637.167739][T11652] Call Trace:
[  637.167748][T11652]  <TASK>
[  637.167758][T11652]  dump_stack_lvl+0x189/0x250
[  637.167795][T11652]  ? __pfx____ratelimit+0x10/0x10
[  637.167825][T11652]  ? __pfx_dump_stack_lvl+0x10/0x10
[  637.167856][T11652]  ? __pfx__printk+0x10/0x10
[  637.167877][T11652]  ? __might_fault+0xb0/0x130
[  637.167915][T11652]  should_fail_ex+0x414/0x560
[  637.167945][T11652]  _copy_from_user+0x2d/0xb0
[  637.167978][T11652]  bm_register_write+0x184/0x1750
[  637.168004][T11652]  ? lockdep_hardirqs_on+0x9c/0x150
[  637.168041][T11652]  ? __pfx_bm_register_write+0x10/0x10
[  637.168063][T11652]  ? __pfx_bm_register_write+0x10/0x10
[  637.168086][T11652]  ? vfs_write+0x211/0xa90
[  637.168108][T11652]  ? vfs_write+0x261/0xa90
[  637.168132][T11652]  ? __pfx_bm_register_write+0x10/0x10
[  637.168159][T11652]  vfs_write+0x27b/0xa90
[  637.168192][T11652]  ? __pfx_vfs_write+0x10/0x10
[  637.168217][T11652]  ? rcu_is_watching+0x15/0xb0
[  637.168248][T11652]  ? trace_irq_disable+0x37/0x110
[  637.168281][T11652]  ? preempt_schedule_irq+0xde/0x150
[  637.168308][T11652]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  637.168348][T11652]  ksys_write+0x145/0x250
[  637.168376][T11652]  ? __pfx_ksys_write+0x10/0x10
[  637.168413][T11652]  do_syscall_64+0xfa/0x3b0
[  637.168441][T11652]  ? lockdep_hardirqs_on+0x9c/0x150
[  637.168469][T11652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.168491][T11652]  ? clear_bhb_loop+0x60/0xb0
[  637.168516][T11652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.168537][T11652] RIP: 0033:0x7f5d2c38e929
[  637.168557][T11652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  637.168575][T11652] RSP: 002b:00007f5d2d227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  637.168597][T11652] RAX: ffffffffffffffda RBX: 00007f5d2c5b6160 RCX: 00007f5d2c38e929
[  637.168612][T11652] RDX: 000000000000002a RSI: 0000200000000040 RDI: 0000000000000004
[  637.168626][T11652] RBP: 00007f5d2d227090 R08: 0000000000000000 R09: 0000000000000000
[  637.168639][T11652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  637.168651][T11652] R13: 0000000000000000 R14: 00007f5d2c5b6160 R15: 00007ffed2d83bc8
[  637.168684][T11652]  </TASK>
[  637.410872][    C1] vkms_vblank_simulate: vblank timer overrun
[  637.931681][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1605'.
[  638.148470][T11655] lo speed is unknown, defaulting to 1000
[  638.303091][T11649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1605'.
[  638.670356][T11670] tmpfs: Unknown parameter 'grpqu'
[  638.699948][T11670] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  638.782841][T11663] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88806169fa80 pfn:0x6169c
[  638.826377][T11663] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  638.849392][T11663] memcg:ffff888140492580
[  638.859519][T11663] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff)
[  638.881194][T11663] raw: 00fff00000000041 0000000000000000 dead000000000122 0000000000000000
[  638.892864][T11663] raw: ffff88806169fa80 0000000000000000 00000001ffffffff ffff888140492580
[  638.903487][T11663] head: 00fff00000000041 0000000000000000 dead000000000122 0000000000000000
[  638.914797][T11663] head: ffff88806169fa80 0000000000000000 00000001ffffffff ffff888140492580
[  639.224512][T11663] head: 00fff00000000202 ffffea000185a701 00000000ffffffff 00000000ffffffff
[  639.821647][T11663] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  639.850081][T11663] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping))
[  639.938797][T11663] page_owner tracks the page as allocated
[  640.000710][T11663] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11663, tgid 11663 (syz.3.1608), ts 638782810513, free_ts 638358145687
[  640.337563][T11663]  post_alloc_hook+0x240/0x2a0
[  640.342421][T11663]  get_page_from_freelist+0x21d5/0x22b0
[  640.369706][T11663]  __alloc_frozen_pages_noprof+0x181/0x370
[  640.410068][T11663]  alloc_pages_mpol+0x232/0x4a0
[  640.444264][T11663]  alloc_pages_noprof+0xa9/0x190
[  640.449300][T11663]  folio_alloc_noprof+0x1e/0x30
[  640.544335][T11663]  filemap_alloc_folio_noprof+0xdf/0x470
[  640.550462][T11663]  page_cache_ra_order+0x5e5/0xc70
[  640.734324][T11663]  do_sync_mmap_readahead+0x4b5/0x5f0
[  640.739792][T11663]  filemap_fault+0x62a/0x1200
[  640.744594][T11663]  __do_fault+0x135/0x390
[  640.748993][T11663]  __handle_mm_fault+0x198b/0x5620
[  640.754324][T11663]  handle_mm_fault+0x2d5/0x7f0
[  640.759593][T11663]  do_user_addr_fault+0xa81/0x1390
[  640.764823][T11663]  exc_page_fault+0x76/0xf0
[  640.769370][T11663]  asm_exc_page_fault+0x26/0x30
[  640.774466][T11663] page last free pid 36 tgid 36 stack trace:
[  640.792182][T11663]  __free_frozen_pages+0xc65/0xe60
[  640.844286][T11663]  __folio_put+0x21b/0x2c0
[  640.848784][T11663]  free_large_kmalloc+0x145/0x200
[  640.853860][T11663]  io_ring_ctx_free+0x447/0x500
[  640.917939][T11685] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1614'.
[  640.956165][T11663]  io_ring_exit_work+0x8c4/0x930
[  640.961196][T11663]  process_scheduled_works+0xae1/0x17b0
[  640.974388][T11663]  worker_thread+0x8a0/0xda0
[  640.979082][T11663]  kthread+0x711/0x8a0
[  641.000576][T11663]  ret_from_fork+0x3fc/0x770
[  641.017825][T11663]  ret_from_fork_asm+0x1a/0x30
[  641.055639][T11663] ------------[ cut here ]------------
[  641.061202][T11663] kernel BUG at mm/filemap.c:868!
[  641.069973][T11689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1616'.
[  641.299732][T11663] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  641.306058][T11663] CPU: 0 UID: 0 PID: 11663 Comm: syz.3.1608 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) 
[  641.316440][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  641.326526][T11663] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0
[  641.332639][T11663] Code: fe c8 ff 4c 89 e7 48 c7 c6 e0 36 94 8b e8 4b 99 0e 00 90 0f 0b e8 03 fe c8 ff 4c 89 e7 48 c7 c6 c0 2d 94 8b e8 34 99 0e 00 90 <0f> 0b e8 ec fd c8 ff 4c 89 e7 48 c7 c6 e0 36 94 8b e8 1d 99 0e 00
[  641.352302][T11663] RSP: 0018:ffffc9000eaf7680 EFLAGS: 00010246
[  641.358410][T11663] RAX: d9f128df5dd95c00 RBX: 0000000000000002 RCX: 0000000000000000
[  641.366499][T11663] RDX: 0000000000000007 RSI: ffffffff8d96e743 RDI: 00000000ffffffff
[  641.374504][T11663] RBP: ffffc9000eaf77e8 R08: ffffffff8f9fdaf7 R09: 1ffffffff1f3fb5e
[  641.382503][T11663] R10: dffffc0000000000 R11: fffffbfff1f3fb5f R12: ffffea000185a700
[  641.390509][T11663] R13: dffffc0000000000 R14: ffffea000185a708 R15: 0000000000000004
[  641.398516][T11663] FS:  000055558ee9e500(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000
[  641.407478][T11663] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  641.414108][T11663] CR2: 00007f2c4f77e2d8 CR3: 00000000276ea000 CR4: 00000000003526f0
[  641.422143][T11663] Call Trace:
[  641.425465][T11663]  <TASK>
[  641.428432][T11663]  ? percpu_ref_put+0x19/0x180
[  641.433241][T11663]  ? __pfx___filemap_add_folio+0x10/0x10
[  641.438912][T11663]  ? percpu_ref_put+0xf9/0x180
[  641.443720][T11663]  filemap_add_folio+0xd5/0x270
[  641.448611][T11663]  page_cache_ra_order+0x74c/0xc70
[  641.453767][T11663]  do_sync_mmap_readahead+0x4b5/0x5f0
[  641.459181][T11663]  ? __pfx_do_sync_mmap_readahead+0x10/0x10
[  641.465115][T11663]  ? count_memcg_event_mm+0x1d/0x250
[  641.470604][T11663]  ? count_memcg_event_mm+0x1d/0x250
[  641.476023][T11663]  filemap_fault+0x62a/0x1200
[  641.480829][T11663]  ? __pagetable_ctor+0x253/0x340
[  641.485885][T11663]  ? __pfx_filemap_fault+0x10/0x10
[  641.491029][T11663]  ? rcu_is_watching+0x15/0xb0
[  641.495839][T11663]  ? __raw_spin_lock_init+0x45/0x100
[  641.501155][T11663]  __do_fault+0x135/0x390
[  641.505524][T11663]  __handle_mm_fault+0x198b/0x5620
[  641.510674][T11663]  ? __lock_acquire+0xab9/0xd20
[  641.515572][T11663]  ? __pfx___handle_mm_fault+0x10/0x10
[  641.521413][T11663]  ? lock_vma_under_rcu+0xf8/0x710
[  641.526562][T11663]  ? lock_vma_under_rcu+0xf8/0x710
[  641.531703][T11663]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  641.537294][T11663]  handle_mm_fault+0x2d5/0x7f0
[  641.542254][T11663]  do_user_addr_fault+0xa81/0x1390
[  641.547508][T11663]  ? rcu_is_watching+0x15/0xb0
[  641.552333][T11663]  ? trace_page_fault_user+0x84/0x1e0
[  641.557767][T11663]  exc_page_fault+0x76/0xf0
[  641.562316][T11663]  asm_exc_page_fault+0x26/0x30
[  641.567203][T11663] RIP: 0033:0x7f5d2c254e53
[  641.571658][T11663] Code: 48 85 c0 74 1b 48 83 f8 01 0f 85 3b 03 00 00 0f b7 44 24 18 66 c1 c0 08 0f b7 c0 48 89 44 24 18 48 8b 44 24 10 0f b7 54 24 18 <66> 89 10 e9 82 fe ff ff 48 83 3c 24 08 0f 85 a1 02 00 00 48 8b 44
[  641.591393][T11663] RSP: 002b:00007ffed2d83cf0 EFLAGS: 00010246
[  641.597498][T11663] RAX: 000020000057eff8 RBX: 0000000000000002 RCX: 0000000000000000
[  641.605503][T11663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558ee9e3c8
[  641.613526][T11663] RBP: 00007ffed2d83df8 R08: 0000000000000000 R09: 0000000000000000
[  641.621542][T11663] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f5d2c5b608c
[  641.629558][T11663] R13: 00007ffed2d83e20 R14: fffffffffffffffe R15: 00007ffed2d83e40
[  641.637582][T11663]  </TASK>
[  641.640642][T11663] Modules linked in:
[  641.645418][T11663] ---[ end trace 0000000000000000 ]---
[  641.915140][T11663] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0
[  641.924365][T11663] Code: fe c8 ff 4c 89 e7 48 c7 c6 e0 36 94 8b e8 4b 99 0e 00 90 0f 0b e8 03 fe c8 ff 4c 89 e7 48 c7 c6 c0 2d 94 8b e8 34 99 0e 00 90 <0f> 0b e8 ec fd c8 ff 4c 89 e7 48 c7 c6 e0 36 94 8b e8 1d 99 0e 00
[  641.946835][T11663] RSP: 0018:ffffc9000eaf7680 EFLAGS: 00010246
[  641.952943][T11663] RAX: d9f128df5dd95c00 RBX: 0000000000000002 RCX: 0000000000000000
[  641.961055][T11663] RDX: 0000000000000007 RSI: ffffffff8d96e743 RDI: 00000000ffffffff
[  641.969144][T11663] RBP: ffffc9000eaf77e8 R08: ffffffff8f9fdaf7 R09: 1ffffffff1f3fb5e
[  641.977313][T11663] R10: dffffc0000000000 R11: fffffbfff1f3fb5f R12: ffffea000185a700
[  641.991561][T11663] R13: dffffc0000000000 R14: ffffea000185a708 R15: 0000000000000004
[  641.999816][T11663] FS:  000055558ee9e500(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000
[  642.009036][T11663] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  642.016364][T11663] CR2: 0000200000006000 CR3: 00000000276ea000 CR4: 00000000003526f0
[  642.024553][T11663] Kernel panic - not syncing: Fatal exception
[  642.030947][T11663] Kernel Offset: disabled
[  642.035282][T11663] Rebooting in 86400 seconds..