last executing test programs:

22m50.630434191s ago: executing program 2 (id=4656):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x2e, "d41efec0717c524312be40b532a3b9f6325b03cc37d442bd9dcb06448a5e6a76691230ec0a86c3069391ea70597f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/73, 0x49}, 0x0, 0x2, 0x1, {0x1}}) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) (async)
mq_open(&(0x7f0000000140)='.+-\x00', 0x40, 0x176, 0x0) (async)
syz_io_uring_setup(0x3015, &(0x7f0000000300)={0x0, 0xa3ea, 0x200, 0x3, 0x66, 0x0, r3}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f00000001c0))
syz_io_uring_complete(r7) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELSET={0xd8, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_DESC={0x2c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xaa}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x160}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0x178}, 0x1, 0x0, 0x0, 0x20008804}, 0x0)

22m49.323719983s ago: executing program 2 (id=4657):
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaa9e, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f00000003c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000000)={0xfffffedb, 0x0})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})

22m48.086903763s ago: executing program 2 (id=4661):
syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2)
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2)
io_setup(0x81, &(0x7f0000001440)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1000})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0x1d, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x7, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x405, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x3, 0x100ca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x1, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x0, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3442, 0x4]}, 0x45c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r6)
sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r7, 0xb29, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r8, &(0x7f0000000480)=[{&(0x7f0000003440)=""/4108, 0x100c}], 0x1)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
openat$ptmx(0xffffff9c, &(0x7f0000000300), 0x244002, 0x0)
r10 = syz_open_dev$loop(&(0x7f0000000100), 0x100, 0x80200)
ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0xa9, 0x9, 0xd, 0x9, "e1d5ddb92d4868cb5eae0365ddb290f69e959ddf30ca1069e3008877f9d827c30156b50ed1e96be506aa9c99d31e9087ce604d87f60795bd2a9fa3b58559998a", "bf097b7a40ccbef86adbb90425025f415328de93ae15433a6fc6ade8a9c35551", [0x2, 0xfffffffb]})
socket$nl_generic(0x10, 0x3, 0x10)

22m46.720477619s ago: executing program 2 (id=4666):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000)
write(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002500210b2bbd7000fbfffffe2000000064b94dcb2f14a6c0c5a958283f6a5ab197"], 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040)
mmap(&(0x7f00007e7000/0x3000)=nil, 0x3000, 0xb, 0x1010, r3, 0x66fd4000)
openat$userio(0xffffff9c, &(0x7f0000000100), 0x182, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2000000000002)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
pread64(r6, 0x0, 0x0, 0x7)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000500)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="7cb95e21adb2a0f8af064a96903de867ab8aa85aa165fa9cf215e9906b99c777f23ed9eb4e855f2a9e372079e1c4f42475c6faa6147c0824e7429e1fb982d92315c548f3434363fd258a42d0dc429e4a93350a776014589c4ba6cc45ec7aa42c5b7d0958e9a1deef7d38fe1d4b545d26923ae507805783", @ANYRES8=r6], 0x24}], 0x1}, 0xc000)
r8 = syz_io_uring_setup(0x1857, &(0x7f0000000040)={0x0, 0x27a1, 0x2, 0x0, 0x25b, 0x0, r6}, &(0x7f0000ffe000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x2, &(0x7f0000000180), 0xfe)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c93012000e00050015020a000400080323"], 0x17)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000040000709feffffff00000000017c00800a008f16b68fb8c06700"/40], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0x1c040)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e"], 0xf)

22m46.375849241s ago: executing program 2 (id=4668):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x800, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000e200000000000a3c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000062c0000001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a"], 0x90}}, 0x0)
syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x8482)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
openat(r7, 0x0, 0xd40, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]})
lchown(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xa, 0x7fff}}, './file0\x00'})

22m44.735427763s ago: executing program 2 (id=4673):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff000000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000208996380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x44040084)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='-\x00'])
syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff8719d9e0dde7, 0x7, 0x6, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getgid()
r3 = syz_io_uring_setup(0x6850, &(0x7f0000000700)={0x0, 0x3ca9, 0x10, 0x400000, 0x10002da}, &(0x7f0000000280)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xa, 0x6000, @fd_index=0x9, 0x8, 0x0, 0x0, 0x15, 0x0, {0x1}})
r6 = syz_io_uring_setup(0x700, &(0x7f0000000340)={0x0, 0xdfa1, 0x4000, 0x0, 0x3d6, 0x0, r0}, &(0x7f0000000000), &(0x7f00000000c0))
r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0xd, 0x8, 0x0, 0xfffffff7, 0x0})
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000240)={0x0, 0x3, 0x3}, 0x0)
r8 = openat$pidfd(0xffffff9c, &(0x7f0000000100), 0x80, 0x0)
pidfd_send_signal(r8, 0x30, &(0x7f0000000140)={0x11, 0x4, 0x6}, 0x0)
r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r10, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
keyctl$clear(0x11, 0xfffffffffffffffd)
listen(r10, 0x80000003)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
close_range(r9, 0xffffffffffffffff, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt(r12, 0x0, 0xc, 0x0, &(0x7f00000012c0))
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800001710000304006a976f7b00000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000300012800b0001006d616373656300002000028005000900010000000c0001000001000000000000050003000800000008000500", @ANYRES32=r13, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

22m29.454409665s ago: executing program 32 (id=4673):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff000000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000208996380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x44040084)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='-\x00'])
syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff8719d9e0dde7, 0x7, 0x6, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getgid()
r3 = syz_io_uring_setup(0x6850, &(0x7f0000000700)={0x0, 0x3ca9, 0x10, 0x400000, 0x10002da}, &(0x7f0000000280)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xa, 0x6000, @fd_index=0x9, 0x8, 0x0, 0x0, 0x15, 0x0, {0x1}})
r6 = syz_io_uring_setup(0x700, &(0x7f0000000340)={0x0, 0xdfa1, 0x4000, 0x0, 0x3d6, 0x0, r0}, &(0x7f0000000000), &(0x7f00000000c0))
r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801)
ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0xd, 0x8, 0x0, 0xfffffff7, 0x0})
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000000240)={0x0, 0x3, 0x3}, 0x0)
r8 = openat$pidfd(0xffffff9c, &(0x7f0000000100), 0x80, 0x0)
pidfd_send_signal(r8, 0x30, &(0x7f0000000140)={0x11, 0x4, 0x6}, 0x0)
r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r10, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
keyctl$clear(0x11, 0xfffffffffffffffd)
listen(r10, 0x80000003)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
close_range(r9, 0xffffffffffffffff, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt(r12, 0x0, 0xc, 0x0, &(0x7f00000012c0))
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800001710000304006a976f7b00000000000400", @ANYRES32=0x0, @ANYBLOB="00a3000000000000300012800b0001006d616373656300002000028005000900010000000c0001000001000000000000050003000800000008000500", @ANYRES32=r13, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

13m28.964400333s ago: executing program 3 (id=6589):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r2 = openat$null(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x60600, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
pipe2(0x0, 0x84c00)
read$FUSE(r2, &(0x7f00000006c0)={0x2020}, 0x2020) (async, rerun: 64)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) (async)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) (async)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')

13m27.514709798s ago: executing program 3 (id=6595):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x5, 0x6, 0x0, 0x8], 0xe})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sysinfo(&(0x7f0000000280)=""/24)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$kcm(0x29, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={<r5=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f0000000100)=0x1, 0x4)
syz_emit_ethernet(0xc2, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}, '\x00\a\x00\x00'}}}}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f)

13m26.519211215s ago: executing program 3 (id=6599):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x30d}]}]}, 0x24}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
fsopen(&(0x7f0000000180)='proc\x00', 0x1)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12)

13m26.047284995s ago: executing program 3 (id=6600):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x48)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000000)='./file0\x00')
chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00')
socket$nl_route(0x10, 0x3, 0x0)
openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
setfsuid(0xffffffffffffffff)
r2 = open(&(0x7f0000002180)='.\x00', 0x101000, 0x8a)
fcntl$notify(r2, 0x402, 0xe51c4606df1d50c7)
fcntl$getownex(r2, 0x10, &(0x7f0000000040))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000140)={0x4, 0x4, 0x9, {0x8, 0x7}, 0x0, 0xe758})
socket(0xa, 0x3, 0x87)
ioctl$int_in(r1, 0x0, &(0x7f0000000200)=0x81)
pipe(&(0x7f0000000000))
r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x5, 0x2, 0x0, "11010000001400000100b64c000000094b7c1500", 0x30323953})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0240, 0x0)
pselect6(0x40, &(0x7f0000000400)={0x9, 0x3, 0x6, 0x100000801, 0xfffffffffffffffd, 0xffffffffffffefff, 0x40, 0x8}, 0x0, 0x0, 0x0, 0x0)

13m25.840293178s ago: executing program 3 (id=6603):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000004180)="4c6070cdc3f22a0967", 0x9}], 0x1, 0x0, 0x0, 0x814}], 0x1, 0x4040054)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

13m23.924220237s ago: executing program 3 (id=6611):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = syz_open_dev$video4linux(&(0x7f0000000540), 0xd, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x7fff, 0x9ba, 0x3014, 0x0, 0x4, 0x3, 0x0, 0x6}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='scalable', 0x8)
futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000000100), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, 0xffffffffffffffff, 0x4000)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
ftruncate(0xffffffffffffffff, 0x51a9497)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
writev(r3, &(0x7f00000023c0)=[{&(0x7f0000002000)="53afb5482bea97cf7b785d2c", 0xc}, {&(0x7f0000002040)="8c6dba19", 0x4}], 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "da8a7730f26e7801b883cd01f64561c28372c0da5267112b018cd6ca0c66b8c5", "ef1ed599c71ef568d05b91aaf13d5bf191cb5a2a86800730f6106d8adb3e7f9c", "939ed2e605ccd7eff1c24d16a4eca5d2e1320d259116774b540ad689dbc3df17", "523ba6ca2821b735dff7500f2d5dd9fe475662048012d828c306c378cce4fb93", "100d8e440d460b7538a57774d52e01fcf0272ea670182ed4c718e2eaa0e41533", "f945674f96645efd54475296", 0xcd7, 0x1, 0x90, 0x2, 0x5}})
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001400050925bd7000fbdbdf25020604004e"], 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc810)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fedbdf251100000008000300f7908ce8bf65a3177d", @ANYRES32=r4, @ANYBLOB="0c0099000a0800005c00000005001900000000000600b5008f03000006001a01030000000600ab00040000000a0006000802110000010000"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x20008090)

13m22.719429267s ago: executing program 33 (id=6611):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = syz_open_dev$video4linux(&(0x7f0000000540), 0xd, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000340)={0x0, 0x0, {0x7fff, 0x9ba, 0x3014, 0x0, 0x4, 0x3, 0x0, 0x6}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='scalable', 0x8)
futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000000100), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, 0xffffffffffffffff, 0x4000)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
ftruncate(0xffffffffffffffff, 0x51a9497)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
writev(r3, &(0x7f00000023c0)=[{&(0x7f0000002000)="53afb5482bea97cf7b785d2c", 0xc}, {&(0x7f0000002040)="8c6dba19", 0x4}], 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "da8a7730f26e7801b883cd01f64561c28372c0da5267112b018cd6ca0c66b8c5", "ef1ed599c71ef568d05b91aaf13d5bf191cb5a2a86800730f6106d8adb3e7f9c", "939ed2e605ccd7eff1c24d16a4eca5d2e1320d259116774b540ad689dbc3df17", "523ba6ca2821b735dff7500f2d5dd9fe475662048012d828c306c378cce4fb93", "100d8e440d460b7538a57774d52e01fcf0272ea670182ed4c718e2eaa0e41533", "f945674f96645efd54475296", 0xcd7, 0x1, 0x90, 0x2, 0x5}})
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001400050925bd7000fbdbdf25020604004e"], 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc810)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fedbdf251100000008000300f7908ce8bf65a3177d", @ANYRES32=r4, @ANYBLOB="0c0099000a0800005c00000005001900000000000600b5008f03000006001a01030000000600ab00040000000a0006000802110000010000"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x20008090)

12m31.578399231s ago: executing program 1 (id=6749):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ppoll(&(0x7f00000012c0)=[{r3, 0x480}], 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3)
write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"})
r4 = syz_open_pts(r3, 0x103100)
dup3(r4, r3, 0x0)
splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x43}}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)

12m30.281168989s ago: executing program 1 (id=6755):
pselect6(0x40, &(0x7f0000000180)={0xcdc, 0x1, 0x80000001, 0x1, 0x8, 0x3, 0x10001, 0x7}, &(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x800, 0x4, 0x200, 0x8000, 0x80000001, 0x8000000000000000}, &(0x7f0000000200)={0xec, 0x7ff, 0x7ff, 0x80000001, 0x6, 0x5, 0x8, 0x9}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x8, 0xd]}, 0x8})
r0 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])
r2 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x9)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xfff8}, {0xffff, 0xffff}, {0x16, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x0, 0x81, 0xc, 0x2, 0x12, 0x5}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd706086dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)
pselect6(0x40, &(0x7f0000000000)={0x4f, 0x3, 0x9c, 0x400, 0x0, 0x3, 0x8, 0x7fffffff}, &(0x7f0000000080)={0xffff, 0x5, 0x5, 0x5, 0x10000, 0xc1, 0x81, 0x8000000000000000}, &(0x7f0000000100)={0x7fffffffffffffff, 0x0, 0x5, 0x200000000000000, 0xeb, 0x8, 0x401, 0xb}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8})
syz_emit_ethernet(0x92, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @multicast1, {[@ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x0, [@multicast2, @remote, @private=0xa010100]}, @timestamp_addr={0x44, 0x1c, 0x1e, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010101}, {@rand_addr=0x64010101, 0xb4}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, '\a\x00'}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "f5c0f39d4786d7de941aad9f438da5f2"}]}}}}}}}, 0x0)
unshare(0x2a020480)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000003000000040000000200000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0085004000"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, 0x0, 0x0}, 0x20)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000180)={'wg0\x00', <r10=>0x0})
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x100, 0x70bd26, 0xbffffffe, {0x0, 0x0, 0x0, 0x0, 0x2e163}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000008}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00r'], 0x0}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000047c0)=r11, 0x4)

12m27.86717706s ago: executing program 1 (id=6767):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0xa2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_open_procfs(0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x3, 0xffffffffffffffff, 0x100000000000000, 0x800, 0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x0, 0x16f8000, 0x0, 0x0, 0x2, {0x0, 0x1, 0x2, 0x0, 0x0, 0x9, 0x1ff, 0xff, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x1}, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00')

12m26.469816413s ago: executing program 1 (id=6774):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x109, 0x4)
close(r0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00w', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$vsock(0xffffff9c, &(0x7f0000000140), 0x400800, 0x0)
ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f0000000240)={r1, 0x1, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf2504000000f58eb4a8081139864c2659d66c0f8dee7729a4e9"], 0x14}}, 0x800)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x1, {0xa, 0x4e23, 0x1ff, @private2, 0x2}}}, 0x38)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000040000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000000070a400b81004d370003800000a2c0000000b0a01020000000006000000020300000000000000797a32000000000900010073797a3000000000140000000900010000000000000000000000000a1946fad589c29e18b6bc258820a335f858cef03107389291f40c011ed99cf05da8e5364683ddf018ef3afcb973d09c9a5daf2601368f819240ff23551391c1cf1e97632e"], 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={<r12=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r11, &(0x7f0000000180)={0x13, 0x9, 0xfa00, {0xffffffffffffffff, r12}}, 0x14)
write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @local}, r12}}, 0x30)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20004004)
writev(r9, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

12m26.298627447s ago: executing program 1 (id=6776):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r0, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) (fail_nth: 18)
listen(r0, 0xd3)

12m25.815374659s ago: executing program 1 (id=6777):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x400021a2, 0x0)
r1 = socket$inet6(0x10, 0x5, 0xfffffffe)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x5d6affc7)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17)
r5 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010015000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0e0000007000fcdb00000400000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x40800)
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f00000001c0))
move_pages(r5, 0x3ffffffffffffe85, &(0x7f00000004c0)=[&(0x7f0000d4a000/0x1000)=nil, &(0x7f0000e72000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e28000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000d45000/0x4000)=nil, &(0x7f0000d22000/0x11000)=nil, &(0x7f0000fe1000/0x3000)=nil], &(0x7f0000002640)=[0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000007, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000500)={{0x0, 0x1, 0x8003, 0x3, 0xc389}})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffff9}}, 0xff, 0x2}, &(0x7f0000000140)=0x88)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x4e24, 0x400, @private2, 0x7161d3d9}]}, &(0x7f0000000140)=0xc)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={<r10=>r9, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
r11 = dup(r7)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x85, &(0x7f0000000540)={r10, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a24bbdb65d7b7ddcc5b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e58c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f00000000c0)=0x90)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x80000001, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000034fe6ad21c730597a0000200000000000119078000000000000000000014e20000c907801000000004e55"], 0x0)

12m10.782374555s ago: executing program 34 (id=6777):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x400021a2, 0x0)
r1 = socket$inet6(0x10, 0x5, 0xfffffffe)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x5d6affc7)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17)
r5 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010015000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0e0000007000fcdb00000400000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x40800)
ioctl$sock_SIOCOUTQNSD(r6, 0x894b, &(0x7f00000001c0))
move_pages(r5, 0x3ffffffffffffe85, &(0x7f00000004c0)=[&(0x7f0000d4a000/0x1000)=nil, &(0x7f0000e72000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e28000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000d45000/0x4000)=nil, &(0x7f0000d22000/0x11000)=nil, &(0x7f0000fe1000/0x3000)=nil], &(0x7f0000002640)=[0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000007, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000500)={{0x0, 0x1, 0x8003, 0x3, 0xc389}})
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffff9}}, 0xff, 0x2}, &(0x7f0000000140)=0x88)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x1c, &(0x7f0000000600)=[@in6={0xa, 0x4e24, 0x400, @private2, 0x7161d3d9}]}, &(0x7f0000000140)=0xc)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={<r10=>r9, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
r11 = dup(r7)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r11, 0x84, 0x85, &(0x7f0000000540)={r10, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a24bbdb65d7b7ddcc5b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e58c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f00000000c0)=0x90)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x80000001, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000034fe6ad21c730597a0000200000000000119078000000000000000000014e20000c907801000000004e55"], 0x0)

27.797568024s ago: executing program 6 (id=9727):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f00000012c0)=[{r2, 0x480}], 0x1, 0x0, 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000000))
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e)
socket$packet(0x11, 0x3, 0x300)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xfffffffffffffd65, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fd"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r4 = syz_open_pts(r2, 0x103100)
r5 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x9}, 0x94)
wait4(r5, &(0x7f0000000340), 0x0, 0x0)
dup3(r4, r2, 0x0)
splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x0)

24.675530788s ago: executing program 6 (id=9740):
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1000000}}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc)
read$char_usb(r2, &(0x7f0000000100)=""/67, 0x43)
socket$netlink(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffb, 0x4)
syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x28dc, 0x1, 0xffffffff, 0x11f}, &(0x7f0000000100), &(0x7f00000003c0))

21.556126302s ago: executing program 6 (id=9752):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e97", 0x27}], 0x1}}], 0x1, 0x4000800)

21.164832181s ago: executing program 6 (id=9753):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
r5 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000040)={0x9, "08b20665f1a50e2ff29215ba1aea3eafc39f052ab3f1acf528a26734cb8ae555", 0x400, 0x3, 0x87f, 0x2, 0x5})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x0, 0x4, 0x1, 0x0, 0x6b}, @NFTA_EXTHDR_OFFSET={0x0, 0x3, 0x1, 0x0, 0xaf}, @NFTA_EXTHDR_FLAGS]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0xfffffffffffffeb7, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000004, 0x31, 0xffffffffffffffff, 0x1000)
capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0)

19.579728804s ago: executing program 6 (id=9760):
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000800)=[{0x7, 0x4000, 0x0, 0x0}], 0x1})

19.131755852s ago: executing program 6 (id=9765):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000020000103000000000000000002000000000000001c800000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})
r2 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0))
r6 = openat$vimc2(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2c8, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x728}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5e}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x208}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffff8, @local, 0x80}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000000)
ioctl$VIDIOC_TRY_FMT(r6, 0xc0cc5640, &(0x7f0000000940)={0x9, @pix_mp={0x1ff, 0xf, 0x3136564e, 0x7, 0x6, [{0x2, 0x9}, {0x81, 0x4}, {0x80000000, 0xee2}, {0x6, 0x4}, {0x2, 0x40}, {0x2}, {0x34e, 0x4}, {0x0, 0x2}], 0x5, 0xc, 0x2, 0x1, 0x4}})
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1})
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x40003, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000140)={0x33, 0x1, 0x0, "1c1e00000100f3ac6c8d00001e84d27d10cb75107200", 0x34524742})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
clock_adjtime(0xc7b199fec7dc0907, &(0x7f0000000240)={0x200000100, 0xfb, 0xffffa5b1, 0x100000, 0x3, 0x3, 0x3, 0xfffff80000000000, 0x5d22, 0x5, 0x4c, 0x3, 0x3de9, 0x20000003, 0x40000000000002f, 0x5, 0x10040, 0x0, 0x10f9b4, 0x400, 0x8, 0x3, 0x2, 0xff, 0x6, 0xfffffff7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1dc)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1/file4/file0\x00')
io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x63, 0x0, 0x0)

18.752352482s ago: executing program 35 (id=9765):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000020000103000000000000000002000000000000001c800000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})
r2 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000200)=0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0))
r6 = openat$vimc2(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2c8, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x728}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5e}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x208}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffff8, @local, 0x80}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000000)
ioctl$VIDIOC_TRY_FMT(r6, 0xc0cc5640, &(0x7f0000000940)={0x9, @pix_mp={0x1ff, 0xf, 0x3136564e, 0x7, 0x6, [{0x2, 0x9}, {0x81, 0x4}, {0x80000000, 0xee2}, {0x6, 0x4}, {0x2, 0x40}, {0x2}, {0x34e, 0x4}, {0x0, 0x2}], 0x5, 0xc, 0x2, 0x1, 0x4}})
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1})
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x40003, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000140)={0x33, 0x1, 0x0, "1c1e00000100f3ac6c8d00001e84d27d10cb75107200", 0x34524742})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
clock_adjtime(0xc7b199fec7dc0907, &(0x7f0000000240)={0x200000100, 0xfb, 0xffffa5b1, 0x100000, 0x3, 0x3, 0x3, 0xfffff80000000000, 0x5d22, 0x5, 0x4c, 0x3, 0x3de9, 0x20000003, 0x40000000000002f, 0x5, 0x10040, 0x0, 0x10f9b4, 0x400, 0x8, 0x3, 0x2, 0xff, 0x6, 0xfffffff7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1dc)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1/file4/file0\x00')
io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x63, 0x0, 0x0)

12.007632955s ago: executing program 4 (id=9783):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0))
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000000)=@x86={0x6, 0xa, 0xa, 0x0, 0x3, 0xad, 0xce, 0x1c, 0xc8, 0xa4, 0x27, 0x8, 0x0, 0x6, 0x7fff, 0x82, 0x8, 0x2, 0x1, '\x00', 0x19, 0x3fb})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10.089653164s ago: executing program 4 (id=9788):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xb, @win={{0xffff51d4, 0x9, 0x9, 0x8}, 0x3, 0x4, 0x0, 0x595, 0x0, 0x6e}})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x13, r3, 0x2000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
read$FUSE(r1, &(0x7f0000004280)={0x2020}, 0x7a)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000140)="81", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, &(0x7f0000000180))
syz_usb_connect(0x0, 0x34, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022200010000000009049c0001010351000905fd120000000000072501"], 0x0)

8.212619157s ago: executing program 8 (id=9794):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001d000100000000"], 0x1c}}, 0x0)

7.972274537s ago: executing program 8 (id=9796):
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1000000}}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc)
read$char_usb(r2, &(0x7f0000000100)=""/67, 0x43)
socket$tipc(0x1e, 0x5, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffb, 0x4)
syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x28dc, 0x1, 0xffffffff, 0x11f}, &(0x7f0000000100), &(0x7f00000003c0))

6.651600086s ago: executing program 4 (id=9799):
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0xe3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
syz_open_dev$vbi(0x0, 0x0, 0x2)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000004}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x20, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

6.582225617s ago: executing program 5 (id=9800):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x1, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x7ffffffffffffffc, 0xf4a, 0x0, 0xbdf], 0x5000, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x80000, 0x6, 0x0, 0x3, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x40000032, r5, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1)
ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"})
splice(r7, 0x0, r5, 0x0, 0x7ffff000, 0x1)
readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}, {0x0}], 0x2)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt(r8, 0x1, 0x3f, &(0x7f0000000240)=""/121, &(0x7f00000002c0)=0x79)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aa05000000140600fe8000000000000000009afe0000000000000000000000000000aa0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000090780000"], 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xdb81, 0x100]}, 0x8, 0x0)

5.586538667s ago: executing program 0 (id=9803):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$l2tp(r1, 0x0, &(0x7f0000000200))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0))
r5 = openat$vimc2(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2e4, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x12c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x728}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xac17}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5e}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x208}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xba}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffff8, @local, 0x80}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000000)
ioctl$VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000940)={0x9, @pix_mp={0x1ff, 0xf, 0x3136564e, 0x7, 0x6, [{0x2, 0x9}, {0x81, 0x4}, {0x80000000, 0xee2}, {0x6, 0x4}, {0x2, 0x40}, {0x2}, {0x34e, 0x4}, {0x0, 0x2}], 0x5, 0xc, 0x2, 0x1, 0x4}})
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1})
r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x40003, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0x33, 0x1, 0x0, "1c1e00000100f3ac6c8d00001e84d27d10cb75107200", 0x34524742})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1dc)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1/file4/file0\x00')

5.578109068s ago: executing program 7 (id=9804):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0)

5.159960504s ago: executing program 7 (id=9805):
stat(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000013c0))
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x3, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
dup2(r5, r1)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={r0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000150000007b35550000000000bc202900000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x30000000})
syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000070851d40cd061201183e01020301090224000100006f900904eb1002617c7d0009050202"], 0x0)

4.826206029s ago: executing program 5 (id=9806):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001d000100000000"], 0x1c}}, 0x0)

4.767047276s ago: executing program 8 (id=9807):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = mq_open(0x0, 0x800, 0x80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x235, &(0x7f00000001c0)={0x0, 0x4533, 0x10100, 0x0, 0x2ff, 0x0, r4}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r8 = socket(0x21, 0x2, 0x10000000000002)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24)
sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0)
r9 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f0000000340)=0x95ba, 0x4)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r10)
ptrace(0x420e, r10)
mq_unlink(&(0x7f0000000000)='eth0\x00')
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
close(r2)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c801400"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)

4.459562038s ago: executing program 5 (id=9808):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (fail_nth: 3)

4.091103866s ago: executing program 5 (id=9809):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x3)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e61, 0xfffffff8, @ipv4, 0xfffffffc}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0xa7ba)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000100)={0x40, 0x9, 0x5, 0x200004, 0x24}, 0xff56)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002)

3.671499897s ago: executing program 8 (id=9810):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x204601a, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x41)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x1)
r2 = socket$inet6(0xa, 0x3, 0x5)
r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="200b5800000058091b5f"], 0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0xc, 0x29, 0xffffffff}], 0xc}}], 0x1, 0x4000000)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@empty, 0x1, 0x1, 0x0, 0x0, 0x7, 0xc}, 0x20)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0)
move_mount(r5, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x100)
r6 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = socket$packet(0x11, 0xa, 0x300)
recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0)
fsmount(r6, 0x0, 0x86)
fsmount(r6, 0x0, 0x0)

3.638105686s ago: executing program 5 (id=9811):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800083}}}, 0x48)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={<r5=>0x0, 0x280, 0x55a6}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x86fa, @remote, 0xfffffff8}}, 0x7, 0x1}, 0x90)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_STATUS_ACCEL_DEV(r6, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"})
ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0xa)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0x1, 0x806, 0x0, 0x80000007, 0x2, "6d1714a98b08633c45debea890564b7cdcd0f7", 0x6, 0x3})
syz_open_dev$vim2m(&(0x7f0000000380), 0x4, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x2, 0x12)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x2})
r9 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r9, &(0x7f0000007100)={0x2020}, 0x941f)

3.280064506s ago: executing program 4 (id=9812):
socket$netlink(0x10, 0x3, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000020000000000000000000000000300000a5c0000000c0a010100004300000000000a0000ff09000200737b7a31000000000900010073797a3100000000300003801c0000800c0001f7e4be78f15dc896a81f2f861b428006000100d10300000c000440000000002df31ab30c000080080003400000000204000080140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x441, 0x104)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x801, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000140)={{0xfffffffd, 0x462c}, 0x100, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
pipe2(&(0x7f0000000100), 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x111, 0x3}}, 0x20)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3.234181051s ago: executing program 0 (id=9813):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
timer_create(0x1, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000002340), 0x0, 0x0, 0x0, 0x20, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f00000000c0)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x48005)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={r6, 0xfffffffe}, 0x8)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)

3.183642999s ago: executing program 4 (id=9814):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x40000001, 0x4, 0xc, 0x9, 0x101}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES64=r1, @ANYRES8=r0, @ANYRESDEC=r3, @ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x60010}, 0x2404c880)
socket(0xa, 0x3, 0xf7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x80008001, 0xfffffffc, 0x9, 0x40000000000, 0xeb, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(0x0, 0x0, 0x319380)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000580)=0x10)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b0, 0x10, 0x1, 0x283}, &(0x7f0000000340)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x114, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1})
io_uring_enter(r7, 0x627, 0x4c1, 0x63, 0x0, 0x0)
r10 = gettid()
r11 = io_uring_setup(0x76ed, &(0x7f0000000240)={0x0, 0x260e, 0x40, 0x1, 0x362})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r11, 0xd, &(0x7f0000000040)={0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x2c, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000400))
socket$inet6_tcp(0xa, 0x1, 0x0)

2.176526533s ago: executing program 0 (id=9815):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0)

2.149309432s ago: executing program 5 (id=9816):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x1, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x7ffffffffffffffc, 0xf4a, 0x0, 0xbdf], 0x5000, 0x4000})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x80000, 0x6, 0x0, 0x3, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x40000032, r5, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1)
ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"})
splice(r7, 0x0, r5, 0x0, 0x7ffff000, 0x1)
readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}, {0x0}], 0x2)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt(r8, 0x1, 0x3f, &(0x7f0000000240)=""/121, &(0x7f00000002c0)=0x79)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aa05000000140600fe8000000000000000009afe0000000000000000000000000000aa0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000090780000"], 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xdb81, 0x100]}, 0x8, 0x0)

2.035834636s ago: executing program 4 (id=9817):
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1000000}}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000000)=""/188, 0xbc)
socket$tipc(0x1e, 0x5, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffb, 0x4)
syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x28dc, 0x1, 0xffffffff, 0x11f}, &(0x7f0000000100), &(0x7f00000003c0))

2.013127893s ago: executing program 7 (id=9818):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001d0001000000000000000000"], 0x1c}}, 0x0)

1.898781155s ago: executing program 0 (id=9819):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_bridge\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="3300007ef52f755f2a8c09000800ff88a800f788a83baa", 0x17, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0xcf, 0x6, @random="0fe6557a37c0"}, 0x14)

1.809831528s ago: executing program 7 (id=9820):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = mq_open(0x0, 0x800, 0x80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x235, &(0x7f00000001c0)={0x0, 0x4533, 0x10100, 0x0, 0x2ff, 0x0, r4}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r8 = socket(0x21, 0x2, 0x10000000000002)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24)
sendmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0)
r9 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0x5, &(0x7f0000000340)=0x95ba, 0x4)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r10)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r10)
ptrace(0x420e, r10)
mq_unlink(&(0x7f0000000000)='eth0\x00')
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
close(r2)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c801400"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)

1.715653048s ago: executing program 0 (id=9821):
ioctl$KVM_GET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea3)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x1, 0x18}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

1.600399593s ago: executing program 8 (id=9822):
prctl$PR_MCE_KILL(0x35, 0x1, 0x0)
r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x4206, r0)
ptrace$setsig(0x4203, r0, 0x3a, &(0x7f00000002c0)={0x18, 0xfffff3e7, 0x800058})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4})
r1 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080))
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0xe8}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004)

781.861531ms ago: executing program 7 (id=9823):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4)
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}}, 0x8000) (fail_nth: 7)

120.574721ms ago: executing program 0 (id=9824):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0xc)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140), 0x106, 0x3}}, 0x20)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000002c0)={<r7=>0x0, 0xb, 0x0, [0x931, 0x10, 0x1, 0x1000], [0x1, 0x9, 0x3, 0x8, 0x9, 0xb, 0x4, 0x4, 0x6, 0x8, 0x401, 0x9, 0x5, 0x7fffffff, 0x6, 0x0, 0xfb2, 0x9, 0xa, 0x6, 0x6486, 0x3, 0x8, 0x5f71, 0x9, 0x7, 0xfff, 0x3, 0x6575818, 0x4, 0x5, 0x4, 0x800000000000, 0x5, 0xee, 0xd, 0x5, 0xfffffffffffffffc, 0x2, 0x7fffffff, 0x8, 0xeb, 0x0, 0x4, 0x9, 0x9, 0x4, 0x9, 0x8000, 0xfffffffffffffffb, 0x7, 0x5, 0xfffffffffffffff8, 0xd007, 0x9, 0x10000, 0x7, 0x3, 0x1c0000000000, 0x8, 0x55b8d24c, 0x1ff, 0x2, 0x5, 0xfffffffffffffffc, 0x5, 0x2, 0x1, 0x2, 0x4, 0x6, 0x2, 0xffffffff, 0xa, 0x8, 0x0, 0xfffffffffffffffe, 0x7, 0x0, 0x2, 0x6, 0x6, 0x80000000, 0x400, 0x8, 0x7, 0x1, 0x1, 0xf90, 0x401, 0x1, 0x4, 0x8, 0x1000, 0x6, 0x100000000, 0x2fbd, 0x5, 0x5, 0x9, 0x7, 0x8, 0x1, 0x7f, 0x4, 0x3ff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x1, 0x8, 0x4, 0x8, 0xffff, 0x4, 0x8, 0x4, 0x9, 0x2]})
ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca249435, &(0x7f0000000700)={0x0, 0x303, @start={r7, 0x1, "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", "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"}, [0x6, 0x0, 0x8, 0x4, 0x81, 0x4, 0x3, 0x2, 0x8000, 0x9, 0x4, 0x5, 0x4c, 0xfffffffffffffeff, 0x1000, 0x81, 0x101, 0x10001, 0xb2, 0x9ea8, 0xffff, 0x7, 0x7, 0x7, 0x9, 0x6, 0xd, 0x79, 0x7, 0x8fe, 0xc692, 0x0, 0x0, 0x400, 0x11a800000000, 0x2, 0x497e, 0x3, 0x8, 0xe54, 0x9, 0x6, 0x4, 0x5, 0x9861, 0x1, 0x9, 0x7f, 0x8001, 0xffffffffffff96fb, 0x4, 0x9ea, 0x9, 0x9, 0x6, 0xd, 0x10001, 0x6, 0xfffffffffffffff7, 0x4, 0x4c507876, 0x0, 0x0, 0x2]})
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000080)=0x4)
pwritev(r6, &(0x7f0000000180), 0x0, 0xee, 0x1)
ioctl$FBIOBLANK(r5, 0x4611, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
quotactl_fd$Q_GETFMT(r5, 0xffffffff80000402, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000040)={0x10, 0x1})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
ioprio_get$uid(0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00)
syz_open_procfs(0x0, 0x0)

49.069591ms ago: executing program 8 (id=9825):
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0x10000000000004)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='/sys/kernel/debug/sync/sw_sync\x00', 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0xffffffff, "030000000000000023000000debd12ffff00000000000000000020000400"})
pselect6(0x40, &(0x7f0000000080)={0x0, 0x36, 0xf, 0x0, 0xffffffffffffff01, 0x7, 0x400000, 0x208}, &(0x7f00000000c0)={0x37, 0x9, 0xffff, 0x7, 0x3ff, 0x9, 0x2b27a4b1, 0x1}, 0x0, 0x0, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000e78000/0x4000)=nil, 0x4000}, 0x4})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x28, 0x0, 0x0, &(0x7f0000000080))
socket$key(0xf, 0x3, 0x2)
syz_clone(0x68802211, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 7 (id=9826):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
syz_emit_ethernet(0xf6, &(0x7f00000009c0)=ANY=[@ANYRES8=r0], &(0x7f00000001c0)={0x1, 0x80000004, [0x531, 0x316, 0x668, 0x928]})
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000070601010000000000000000070000040500010007000000050001000700000005ec6ad467ca0c5aec24a3c440d900010007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040881}, 0x10)
openat$nullb(0xffffff9c, &(0x7f0000000140), 0x80082, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000000000000000200000a30006d0000000000000000800400038008000700040000030900010073797a3000b5c9f7a4b75b2b1b00015ec932e80000acbd5bedcb5381aa00"/88], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
keyctl$set_reqkey_keyring(0xe, 0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0x2, 0x3, 0xff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x2f, 0x8, 0x7, 0x9, 0x13, @empty, @rand_addr=' \x01\x00', 0x40, 0x87f0, 0x7, 0x2246bcfc}})
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a00010000000000fffffffffc010000000000000000000000000000ac1e00010000000000000000000000000000000000000000000000006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000080ff3c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002000000000014000e00ac14143200"/184], 0x104}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000000000000081e14b067853c0ff9ca5ee000000000000000000000000000000000000000000000000000000000000feffffff00ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0xeb)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b000900000000090400"], 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r6, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a"], 0x94}}, 0x20008841)
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="100000001d00010000000000000000005c65b2ab584c1a0b681c94d57fa71339984761bc5a0b2dc6cb6891b4ed13a470e6d1c0d870e4e70715198b420d53ec7c5d7d397af05de46372553a6016fb5306f5698d252ec8641f6ba34d93aaf8fab033d4d1d664680b2700f64318a9cb0c40d3f4ac5c9f4723e1c72cf0bf2dc5cc721d959160b3fa36ab61bfa2b2d76ad592d542425aef714a71ba46eb7586b3e08fe1d37814cf7399634fc3282168836aa9f50530a2e3a440e0a46608c94780ca3b6a41a0bb7c2ec4643da65aa8e12b5c"], 0x10}}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
unshare(0x28000600)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0xc00455d0, 0x0)
r8 = userfaultfd(0x80001)
fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000040)=0x6000000)

kernel console output (not intermixed with test programs):

971091][ T5470] FAULT_INJECTION: forcing a failure.
[ 2190.971091][ T5470] name failslab, interval 1, probability 0, space 0, times 0
[ 2190.984588][ T5470] CPU: 1 UID: 0 PID: 5470 Comm: syz.5.8648 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2190.984625][ T5470] Tainted: [L]=SOFTLOCKUP
[ 2190.984635][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2190.984650][ T5470] Call Trace:
[ 2190.984661][ T5470]  <TASK>
[ 2190.984672][ T5470]  dump_stack_lvl+0xe8/0x150
[ 2190.984707][ T5470]  should_fail_ex+0x414/0x560
[ 2190.984751][ T5470]  should_failslab+0xa8/0x100
[ 2190.984783][ T5470]  kmem_cache_alloc_noprof+0x88/0x710
[ 2190.984821][ T5470]  ? security_inode_alloc+0x39/0x330
[ 2190.984858][ T5470]  security_inode_alloc+0x39/0x330
[ 2190.984893][ T5470]  inode_init_always_gfp+0x9ed/0xdc0
[ 2190.984929][ T5470]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 2190.984955][ T5470]  alloc_inode+0x82/0x1b0
[ 2190.984984][ T5470]  new_inode+0x22/0x170
[ 2190.985018][ T5470]  __debugfs_create_file+0xb8/0x400
[ 2190.985048][ T5470]  debugfs_create_file_short+0x3f/0x60
[ 2190.985077][ T5470]  ieee80211_debugfs_recreate_netdev+0x268/0x1450
[ 2190.985125][ T5470]  ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10
[ 2190.985166][ T5470]  ? ieee80211_remove_interfaces+0x250/0x6c0
[ 2190.985215][ T5470]  ieee80211_if_change_type+0x146/0x940
[ 2190.985259][ T5470]  ieee80211_change_iface+0xd5/0x510
[ 2190.985299][ T5470]  cfg80211_change_iface+0x6ba/0xe30
[ 2190.985339][ T5470]  nl80211_set_interface+0x764/0xa80
[ 2190.985382][ T5470]  ? __pfx_nl80211_set_interface+0x10/0x10
[ 2190.985418][ T5470]  ? nl80211_pre_doit+0x4fb/0x930
[ 2190.985460][ T5470]  genl_family_rcv_msg_doit+0x215/0x300
[ 2190.985495][ T5470]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2190.985533][ T5470]  ? bpf_lsm_capable+0x9/0x20
[ 2190.985561][ T5470]  ? security_capable+0x7e/0x2e0
[ 2190.985596][ T5470]  genl_rcv_msg+0x60e/0x790
[ 2190.985627][ T5470]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2190.985648][ T5470]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 2190.985674][ T5470]  ? __pfx_nl80211_set_interface+0x10/0x10
[ 2190.985701][ T5470]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 2190.985732][ T5470]  ? __asan_memcpy+0x40/0x70
[ 2190.985767][ T5470]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2190.985803][ T5470]  netlink_rcv_skb+0x208/0x470
[ 2190.985833][ T5470]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2190.985859][ T5470]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2190.985886][ T5470]  ? genl_rcv+0x19/0x40
[ 2190.985927][ T5470]  ? down_read+0x274/0x2e0
[ 2190.985954][ T5470]  ? genl_rcv+0xd/0x40
[ 2190.985977][ T5470]  genl_rcv+0x28/0x40
[ 2190.985998][ T5470]  netlink_unicast+0x82f/0x9e0
[ 2190.986036][ T5470]  ? __pfx_netlink_unicast+0x10/0x10
[ 2190.986064][ T5470]  ? __alloc_skb+0x198/0x3a0
[ 2190.986090][ T5470]  ? netlink_sendmsg+0x642/0xb30
[ 2190.986119][ T5470]  ? skb_put+0x11b/0x210
[ 2190.986151][ T5470]  netlink_sendmsg+0x805/0xb30
[ 2190.986193][ T5470]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2190.986228][ T5470]  ? __import_iovec+0x5d4/0x7f0
[ 2190.986254][ T5470]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2190.986287][ T5470]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2190.986310][ T5470]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2190.986343][ T5470]  __sock_sendmsg+0x21c/0x270
[ 2190.986382][ T5470]  ____sys_sendmsg+0x505/0x820
[ 2190.986419][ T5470]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2190.986462][ T5470]  ? kstrtouint+0x6e/0xe0
[ 2190.986507][ T5470]  ___sys_sendmsg+0x21f/0x2a0
[ 2190.986540][ T5470]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2190.986568][ T5470]  ? get_pid_task+0x20/0x1f0
[ 2190.986598][ T5470]  ? get_pid_task+0x20/0x1f0
[ 2190.986623][ T5470]  ? get_pid_task+0x20/0x1f0
[ 2190.986687][ T5470]  ? __fget_files+0x2a/0x420
[ 2190.986717][ T5470]  ? __fget_files+0x3a0/0x420
[ 2190.986758][ T5470]  __sys_sendmsg+0x164/0x220
[ 2190.986791][ T5470]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2190.986831][ T5470]  ? __pfx_ksys_write+0x10/0x10
[ 2190.986868][ T5470]  __do_fast_syscall_32+0x1dc/0x570
[ 2190.986895][ T5470]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2190.986918][ T5470]  ? do_fast_syscall_32+0x34/0x80
[ 2190.986943][ T5470]  ? irqentry_exit+0x10f/0x670
[ 2190.986972][ T5470]  do_fast_syscall_32+0x34/0x80
[ 2190.986999][ T5470]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2190.987029][ T5470] RIP: 0023:0xf7fb4539
[ 2190.987049][ T5470] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2190.987069][ T5470] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2190.987094][ T5470] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[ 2190.987110][ T5470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2190.987125][ T5470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2190.987139][ T5470] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2190.987153][ T5470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2190.987186][ T5470]  </TASK>
[ 2191.516406][ T5470] debugfs: out of free dentries, can not create file 'flags'
[ 2191.707389][   T30] audit: type=1326 audit(1768300734.836:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5474 comm="syz.0.8651" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f24539 code=0x0
[ 2191.789486][ T5485] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8651'.
[ 2192.260223][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8655'.
[ 2192.272800][   T30] audit: type=1326 audit(1768300735.396:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.8655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000
[ 2192.303079][   T30] audit: type=1326 audit(1768300735.426:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.8655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fe2539 code=0x7ffc0000
[ 2192.327721][   T30] audit: type=1326 audit(1768300735.426:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.8655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000
[ 2192.351072][   T30] audit: type=1326 audit(1768300735.426:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.8655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7fe2539 code=0x7ffc0000
[ 2192.374816][   T30] audit: type=1326 audit(1768300735.426:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.8655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000
[ 2192.398054][   T30] audit: type=1326 audit(1768300735.426:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.8655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fe2539 code=0x7ffc0000
[ 2192.422561][   T30] audit: type=1326 audit(1768300735.426:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.8655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x7ffc0000
[ 2192.446854][   T30] audit: type=1326 audit(1768300735.426:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.8655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe2539 code=0x7ffc0000
[ 2192.470423][   T30] audit: type=1326 audit(1768300735.426:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz.4.8655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe2539 code=0x7ffc0000
[ 2192.556428][T28471] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 2192.710893][ T5507] random: crng reseeded on system resumption
[ 2192.735910][T28471] usb 5-1: Using ep0 maxpacket: 8
[ 2192.749695][T28471] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2192.759992][T28471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2192.768085][T28471] usb 5-1: Product: syz
[ 2192.772336][T28471] usb 5-1: Manufacturer: syz
[ 2192.778723][T28471] usb 5-1: SerialNumber: syz
[ 2192.998064][T28471] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 2193.203158][ T5491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2193.212692][ T5491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2193.778452][ T3921] usb 5-1: USB disconnect, device number 29
[ 2193.807429][ T3921] usblp0: removed
[ 2194.505616][ T5517] netlink: 'syz.4.8662': attribute type 1 has an invalid length.
[ 2195.378548][ T5529] netlink: 'syz.7.8666': attribute type 3 has an invalid length.
[ 2195.387277][ T5529] netlink: 'syz.7.8666': attribute type 1 has an invalid length.
[ 2195.486468][T28471] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 2195.662859][T28471] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 2195.674074][T28471] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 2195.766696][T28471] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2195.798254][T28471] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 2195.833401][T28471] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 2196.024130][T28471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2196.317003][ T5524] C: renamed from team_slave_0
[ 2196.325127][ T5524] netlink: 'syz.4.8665': attribute type 1 has an invalid length.
[ 2196.334269][ T5524] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8665'.
[ 2196.351854][ T5524] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 2196.378093][T28471] ath6kl: Failed to submit usb control message: -71
[ 2196.384799][T28471] ath6kl: unable to send the bmi data to the device: -71
[ 2196.443314][T28471] ath6kl: Unable to send get target info: -71
[ 2196.524163][T28471] ath6kl: Failed to init ath6kl core: -71
[ 2196.543430][T28471] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 2196.624484][T28471] usb 5-1: USB disconnect, device number 30
[ 2196.716566][   T30] kauditd_printk_skb: 48 callbacks suppressed
[ 2196.716586][   T30] audit: type=1326 audit(1768300739.846:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5540 comm="syz.6.8669" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x0
[ 2196.952306][ T5548] geneve2: entered promiscuous mode
[ 2196.960193][ T5548] team0: Device geneve2 is up. Set it down before adding it as a team port
[ 2197.013322][ T5541] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8669'.
[ 2198.625406][ T5570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8673'.
[ 2200.229608][T25380] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[ 2200.399213][T25380] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2200.410418][T25380] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2200.599978][T25380] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2200.610007][T25380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2200.626246][T25380] usb 5-1: Product: syz
[ 2200.630673][T25380] usb 5-1: Manufacturer: syz
[ 2200.643298][T25380] usb 5-1: SerialNumber: syz
[ 2200.985579][T25380] usb 5-1: 0:2 : does not exist
[ 2201.004992][T25380] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 2201.093359][T25380] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 2201.160857][T25380] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 2201.179823][T25380] usb 5-1: USB disconnect, device number 31
[ 2201.260542][   T30] audit: type=1326 audit(1768300744.386:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5593 comm="syz.5.8685" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4539 code=0x0
[ 2201.320451][ T5598] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8685'.
[ 2201.735118][ T5602] input: syz0 as /devices/virtual/input/input85
[ 2203.786821][T28484] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 2203.948210][T28484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2203.961098][T28484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2203.993064][T28484] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 2204.013903][T28484] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2204.035753][T28484] usb 5-1: config 0 descriptor??
[ 2204.388234][ T2927] Bluetooth: hci5: unexpected event for opcode 0x041c
[ 2204.803638][ T5649] netlink: 'syz.6.8701': attribute type 2 has an invalid length.
[ 2204.934707][ T5649] : entered promiscuous mode
[ 2205.131917][ T5656] binfmt_misc: register: failed to install interpreter file ./file0
[ 2205.149697][ T5656] input: syz0 as /devices/virtual/input/input88
[ 2206.520267][T28484] usbhid 5-1:0.0: can't add hid device: -71
[ 2206.528127][T28484] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2206.547595][T28484] usb 5-1: USB disconnect, device number 32
[ 2206.934116][   T30] audit: type=1326 audit(1768300750.056:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5664 comm="syz.5.8707" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4539 code=0x0
[ 2207.151821][ T5670] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[ 2207.159479][ T5670] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2207.186977][ T5681] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8709'.
[ 2207.196948][ T5681] openvswitch: netlink: Flow actions attr not present in new flow.
[ 2207.304037][ T5681] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8709'.
[ 2208.202685][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8713'.
[ 2208.406664][ T2927] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 2208.419042][ T2927] Bluetooth: hci5: Injecting HCI hardware error event
[ 2208.433133][T31491] Bluetooth: hci5: hardware error 0x00
[ 2208.853900][   T30] audit: type=1326 audit(1768300751.976:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5705 comm="syz.7.8715" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ed539 code=0x0
[ 2210.097907][ T5734] binder: 5731:5734 ioctl c0306201 80000640 returned -22
[ 2210.506883][T31491] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 2210.915076][ T5752] FAULT_INJECTION: forcing a failure.
[ 2210.915076][ T5752] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2210.963557][ T5752] CPU: 0 UID: 0 PID: 5752 Comm: syz.4.8727 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2210.963595][ T5752] Tainted: [L]=SOFTLOCKUP
[ 2210.963604][ T5752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2210.963618][ T5752] Call Trace:
[ 2210.963627][ T5752]  <TASK>
[ 2210.963638][ T5752]  dump_stack_lvl+0xe8/0x150
[ 2210.963674][ T5752]  should_fail_ex+0x414/0x560
[ 2210.963716][ T5752]  prepare_alloc_pages+0x22b/0x650
[ 2210.963752][ T5752]  __alloc_frozen_pages_noprof+0x123/0x370
[ 2210.963784][ T5752]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 2210.963830][ T5752]  alloc_pages_mpol+0x232/0x4a0
[ 2210.963864][ T5752]  alloc_pages_noprof+0xa9/0x190
[ 2210.963894][ T5752]  folio_alloc_noprof+0x1e/0x30
[ 2210.963920][ T5752]  filemap_alloc_folio_noprof+0x107/0x470
[ 2210.963956][ T5752]  ? __pfx_filemap_get_entry+0x10/0x10
[ 2210.963981][ T5752]  ? __pfx_filemap_alloc_folio_noprof+0x10/0x10
[ 2210.964027][ T5752]  __filemap_get_folio_mpol+0x3fc/0xb00
[ 2210.964060][ T5752]  aio_setup_ring+0x3ba/0xe50
[ 2210.964109][ T5752]  ? __pfx_aio_setup_ring+0x10/0x10
[ 2210.964155][ T5752]  ioctx_alloc+0x320/0x850
[ 2210.964188][ T5752]  ? __might_fault+0xb0/0x130
[ 2210.964227][ T5752]  __ia32_compat_sys_io_setup+0xc0/0x210
[ 2210.964263][ T5752]  __do_fast_syscall_32+0x1dc/0x570
[ 2210.964291][ T5752]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2210.964313][ T5752]  ? do_fast_syscall_32+0x34/0x80
[ 2210.964339][ T5752]  ? irqentry_exit+0x10f/0x670
[ 2210.964368][ T5752]  do_fast_syscall_32+0x34/0x80
[ 2210.964403][ T5752]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2210.964432][ T5752] RIP: 0023:0xf7fe2539
[ 2210.964451][ T5752] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2210.964472][ T5752] RSP: 002b:00000000f54b555c EFLAGS: 00000206 ORIG_RAX: 00000000000000f5
[ 2210.964497][ T5752] RAX: ffffffffffffffda RBX: 000000000000ffff RCX: 0000000080001e00
[ 2210.964514][ T5752] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2210.964528][ T5752] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2210.964542][ T5752] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2210.964557][ T5752] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2210.964590][ T5752]  </TASK>
[ 2211.659241][   T30] audit: type=1326 audit(1768300754.786:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.5.8729" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4539 code=0x0
[ 2212.118612][ T5767] random: crng reseeded on system resumption
[ 2212.681818][T18780] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 2212.869491][T18780] usb 5-1: Using ep0 maxpacket: 8
[ 2212.980617][T18780] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 2213.001053][T18780] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2213.036750][T18780] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2213.088773][T18780] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2213.105122][T18780] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2213.130427][T18780] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2213.144991][T18780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2213.227952][ T5754] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2213.414916][T18780] usb 5-1: GET_CAPABILITIES returned 0
[ 2213.441165][T18780] usbtmc 5-1:16.0: can't read capabilities
[ 2214.286829][ T5754] macvlan0: left promiscuous mode
[ 2214.817951][ T4931] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2214.829329][ T4931] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2214.864193][ T4931] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2214.909518][ T4931] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2215.493198][T28471] usb 5-1: USB disconnect, device number 33
[ 2217.101467][   T30] audit: type=1326 audit(1768300760.226:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.4.8745" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2539 code=0x0
[ 2217.105297][ T5821] tipc: Enabled bearer <eth:ip6gre0>, priority 10
[ 2217.141743][ T5821] syz_tun: entered allmulticast mode
[ 2217.740267][   T30] audit: type=1326 audit(1768300760.866:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5827 comm="syz.6.8748" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x0
[ 2217.798891][ T5830] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8748'.
[ 2217.925204][ T5817] syz_tun: left allmulticast mode
[ 2218.216583][T28484] tipc: Node number set to 1
[ 2218.825518][ T5841] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8751'.
[ 2220.416678][T28471] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 2220.691493][   T30] audit: type=1326 audit(1768300763.816:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5867 comm="syz.0.8759" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f24539 code=0x0
[ 2221.281369][T28471] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2221.315711][T28471] usb 5-1: no configurations
[ 2221.346560][T28471] usb 5-1: can't read configurations, error -22
[ 2221.896418][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8760'.
[ 2222.815470][ T5894] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8764'.
[ 2222.825404][ T5894] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8764'.
[ 2223.024980][ T5897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8765'.
[ 2223.128003][ T5898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8765'.
[ 2223.159207][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2223.203281][ T5898] bond0: entered promiscuous mode
[ 2223.217502][ T5898] bond0: entered allmulticast mode
[ 2223.223106][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8766'.
[ 2223.271082][ T5900] dummy0: entered promiscuous mode
[ 2223.307571][ T5900] dummy0: entered allmulticast mode
[ 2223.332947][ T5900] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 2224.296599][ T5897] bond0 (unregistering): (slave dummy0): Releasing backup interface
[ 2224.394078][ T5897] dummy0: left promiscuous mode
[ 2224.448258][ T5897] dummy0: left allmulticast mode
[ 2224.471019][ T5897] bond0 (unregistering): Released all slaves
[ 2224.879969][   T30] audit: type=1326 audit(1768300768.006:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.6.8771" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x0
[ 2225.065234][ T5927] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2225.364379][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8776'.
[ 2225.374323][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2225.612466][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2226.970654][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 2226.977134][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2227.092342][ T2927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2227.103327][ T2927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2227.112434][ T2927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2227.120490][ T2927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2227.131544][ T2927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2227.981126][ T5956] chnl_net:caif_netlink_parms(): no params data found
[ 2228.667271][ T5974] tipc: Started in network mode
[ 2228.672299][ T5974] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[ 2228.681955][ T5974] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 2228.690725][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2228.698859][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2228.714848][ T5956] bridge_slave_0: entered allmulticast mode
[ 2228.746683][ T5956] bridge_slave_0: entered promiscuous mode
[ 2228.761457][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2228.767340][ T5974] program syz.4.8784 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2228.771041][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2228.789246][ T5956] bridge_slave_1: entered allmulticast mode
[ 2228.809253][ T5956] bridge_slave_1: entered promiscuous mode
[ 2228.890295][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2228.907555][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2229.040919][ T5956] team0: Port device team_slave_0 added
[ 2229.050858][ T5956] team0: Port device team_slave_1 added
[ 2229.160510][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2229.168508][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2229.197445][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2229.216067][ T2927] Bluetooth: hci4: command tx timeout
[ 2229.223866][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2229.232475][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2229.260999][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2229.320111][ T5956] hsr_slave_0: entered promiscuous mode
[ 2229.327264][ T5956] hsr_slave_1: entered promiscuous mode
[ 2229.333886][ T5956] debugfs: 'hsr0' already exists in 'hsr'
[ 2229.341396][ T5956] Cannot create hsr debugfs directory
[ 2229.483433][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8788'.
[ 2229.782900][   T30] audit: type=1326 audit(1768300772.906:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.5.8789" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4539 code=0x0
[ 2229.829451][ T5956] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2229.985988][T25380] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 2230.044711][ T5956] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2230.136093][T25380] usb 5-1: Using ep0 maxpacket: 32
[ 2230.157513][T25380] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2230.185082][T25380] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2230.197418][T25380] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2230.205683][T25380] usb 5-1: Product: syz
[ 2230.232486][T25380] usb 5-1: Manufacturer: syz
[ 2230.239661][T25380] usb 5-1: SerialNumber: syz
[ 2230.261244][ T5956] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2230.272711][T25380] usb 5-1: config 0 descriptor??
[ 2230.300866][ T5995] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2230.430598][ T5956] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2230.748037][ T5956] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2230.784117][ T5956] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2230.810100][ T5956] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2230.827521][ T5956] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2231.216847][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2231.265230][ T5956] 8021q: adding VLAN 0 to HW filter on device team0
[ 2231.288385][ T2927] Bluetooth: hci4: command tx timeout
[ 2231.301655][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2231.308887][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2231.497289][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2231.504893][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2231.553997][ T6017] loop9: detected capacity change from 0 to 7
[ 2232.184300][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2232.409230][ T5956] veth0_vlan: entered promiscuous mode
[ 2232.417828][ T6017] Dev loop9: unable to read RDB block 7
[ 2232.445532][ T6018] Invalid logical block size (1)
[ 2232.463999][ T6017]  loop9: unable to read partition table
[ 2232.477240][ T5956] veth1_vlan: entered promiscuous mode
[ 2232.498700][ T6017] loop9: partition table beyond EOD, truncated
[ 2232.505126][ T6017] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[ 2232.591908][ T5956] veth0_macvtap: entered promiscuous mode
[ 2232.614839][ T5956] veth1_macvtap: entered promiscuous mode
[ 2232.650390][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2232.681962][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2232.704231][T25134] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2232.728449][T25134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2232.756891][T25134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2232.789735][T25134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2232.878244][T28485] usb 5-1: USB disconnect, device number 36
[ 2232.941587][T25314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2232.960509][T25314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2232.994012][T25134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2233.016989][T25134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2233.031654][ T6025] openvswitch: netlink: Flow key attr not present in new flow.
[ 2233.366822][ T2927] Bluetooth: hci4: command tx timeout
[ 2234.104195][ T6044] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[ 2234.110935][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2234.119605][ T6044] vhci_hcd vhci_hcd.0: Device attached
[ 2234.158972][ T6044] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2
[ 2234.170546][ T6044] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits
[ 2234.545908][T25380] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[ 2235.234107][ T6061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8805'.
[ 2235.361842][ T6063] syz.0.8806 (6063) used obsolete PPPIOCDETACH ioctl
[ 2235.449078][ T2927] Bluetooth: hci4: command tx timeout
[ 2235.986575][ T6071] EXT4-fs: Conflicting test_dummy_encryption options
[ 2236.414634][ T6075] tipc: Started in network mode
[ 2236.424087][ T6075] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[ 2236.434345][ T6075] tipc: Enabled bearer <eth:team0>, priority 0
[ 2237.436320][T28478] tipc: Node number set to 11578026
[ 2237.773862][ T6089] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8815'.
[ 2237.816102][   T30] audit: type=1326 audit(1768300780.926:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6090 comm="syz.4.8816" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2539 code=0x0
[ 2238.731332][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8817'.
[ 2239.093134][ T6105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2240.524383][ T6121] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2241.983202][ T6106] delete_channel: no stack
[ 2242.936874][ T6154] 
: renamed from bond0 (while UP)
[ 2243.778224][ T6167] netlink: 7 bytes leftover after parsing attributes in process `syz.5.8833'.
[ 2243.837041][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8833'.
[ 2244.437749][ T6170] netlink: 'syz.7.8834': attribute type 11 has an invalid length.
[ 2244.618635][ T6174] xt_socket: unknown flags 0x50
[ 2244.756981][ T6176] xt_NFQUEUE: number of queues (65297) out of range (got 111634)
[ 2245.581564][ T6183] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8838'.
[ 2245.624739][ T6183] gre0: entered promiscuous mode
[ 2245.633118][ T6183] gre0: entered allmulticast mode
[ 2245.708799][ T6185] syz_tun: entered promiscuous mode
[ 2245.728071][ T6185] syz_tun: left promiscuous mode
[ 2246.609483][ T6206] loop5: detected capacity change from 0 to 7
[ 2246.617159][ T6206] Dev loop5: unable to read RDB block 7
[ 2246.623214][ T6206]  loop5: unable to read partition table
[ 2246.641933][ T6206] loop5: partition table beyond EOD, truncated
[ 2246.649585][ T6206] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 2247.096955][ T5201] Dev loop5: unable to read RDB block 7
[ 2247.102601][ T5201]  loop5: unable to read partition table
[ 2247.124753][ T5201] loop5: partition table beyond EOD, truncated
[ 2247.163433][ T6208] syzkaller0: entered promiscuous mode
[ 2247.172870][ T6208] syzkaller0: entered allmulticast mode
[ 2247.363413][ T5201] Dev loop5: unable to read RDB block 7
[ 2247.385876][ T5201]  loop5: unable to read partition table
[ 2247.392027][ T5201] loop5: partition table beyond EOD, truncated
[ 2249.026549][ T6223] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8853'.
[ 2249.112701][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8853'.
[ 2249.214339][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8858'.
[ 2249.225331][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8858'.
[ 2249.236487][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8858'.
[ 2249.539776][ T2927] Bluetooth: hci3: command 0x0406 tx timeout
[ 2249.588348][ T6241] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8859'.
[ 2249.608263][ T6241] ip6tnl0: left promiscuous mode
[ 2249.614146][ T6241] ip6tnl0: left allmulticast mode
[ 2250.068316][ T6252] FAULT_INJECTION: forcing a failure.
[ 2250.068316][ T6252] name failslab, interval 1, probability 0, space 0, times 0
[ 2250.081609][T18780] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 2250.090096][ T6252] CPU: 1 UID: 0 PID: 6252 Comm: syz.7.8863 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2250.090121][ T6252] Tainted: [L]=SOFTLOCKUP
[ 2250.090128][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2250.090139][ T6252] Call Trace:
[ 2250.090145][ T6252]  <TASK>
[ 2250.090153][ T6252]  dump_stack_lvl+0xe8/0x150
[ 2250.090182][ T6252]  should_fail_ex+0x414/0x560
[ 2250.090212][ T6252]  should_failslab+0xa8/0x100
[ 2250.090234][ T6252]  kmem_cache_alloc_node_noprof+0x8c/0x720
[ 2250.090261][ T6252]  ? __alloc_skb+0x1dc/0x3a0
[ 2250.090278][ T6252]  ? __local_bh_enable_ip+0xd0/0x130
[ 2250.090295][ T6252]  ? __alloc_skb+0x198/0x3a0
[ 2250.090316][ T6252]  __alloc_skb+0x1dc/0x3a0
[ 2250.090336][ T6252]  netlink_ack+0x146/0xa50
[ 2250.090356][ T6252]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2250.090370][ T6252]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 2250.090390][ T6252]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 2250.090410][ T6252]  ? __asan_memcpy+0x40/0x70
[ 2250.090434][ T6252]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2250.090456][ T6252]  netlink_rcv_skb+0x28c/0x470
[ 2250.090478][ T6252]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2250.090495][ T6252]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2250.090514][ T6252]  ? genl_rcv+0x19/0x40
[ 2250.090588][ T6252]  ? down_read+0x274/0x2e0
[ 2250.090619][ T6252]  ? genl_rcv+0xd/0x40
[ 2250.090636][ T6252]  genl_rcv+0x28/0x40
[ 2250.090650][ T6252]  netlink_unicast+0x82f/0x9e0
[ 2250.090675][ T6252]  ? __pfx_netlink_unicast+0x10/0x10
[ 2250.090694][ T6252]  ? __alloc_skb+0x198/0x3a0
[ 2250.090712][ T6252]  ? netlink_sendmsg+0x642/0xb30
[ 2250.090732][ T6252]  ? skb_put+0x11b/0x210
[ 2250.090752][ T6252]  netlink_sendmsg+0x805/0xb30
[ 2250.090781][ T6252]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2250.090805][ T6252]  ? __import_iovec+0x5d4/0x7f0
[ 2250.090823][ T6252]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2250.090845][ T6252]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2250.090860][ T6252]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2250.090882][ T6252]  __sock_sendmsg+0x21c/0x270
[ 2250.090909][ T6252]  ____sys_sendmsg+0x505/0x820
[ 2250.090933][ T6252]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2250.090957][ T6252]  ? kstrtouint+0x6e/0xe0
[ 2250.090987][ T6252]  ___sys_sendmsg+0x21f/0x2a0
[ 2250.091008][ T6252]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2250.091028][ T6252]  ? get_pid_task+0x20/0x1f0
[ 2250.091048][ T6252]  ? get_pid_task+0x20/0x1f0
[ 2250.091066][ T6252]  ? get_pid_task+0x20/0x1f0
[ 2250.091107][ T6252]  ? __fget_files+0x2a/0x420
[ 2250.091126][ T6252]  ? __fget_files+0x3a0/0x420
[ 2250.091153][ T6252]  __sys_sendmsg+0x164/0x220
[ 2250.091176][ T6252]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2250.091202][ T6252]  ? __pfx_ksys_write+0x10/0x10
[ 2250.091226][ T6252]  __do_fast_syscall_32+0x1dc/0x570
[ 2250.091245][ T6252]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2250.091261][ T6252]  ? do_fast_syscall_32+0x34/0x80
[ 2250.091279][ T6252]  ? irqentry_exit+0x10f/0x670
[ 2250.091298][ T6252]  do_fast_syscall_32+0x34/0x80
[ 2250.091317][ T6252]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2250.091337][ T6252] RIP: 0023:0xf70ed539
[ 2250.091351][ T6252] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2250.091365][ T6252] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2250.091383][ T6252] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240
[ 2250.091395][ T6252] RDX: 0000000000000850 RSI: 0000000000000000 RDI: 0000000000000000
[ 2250.091405][ T6252] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2250.091414][ T6252] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2250.091424][ T6252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2250.091446][ T6252]  </TASK>
[ 2250.516587][T18780] usb 5-1: device descriptor read/64, error -71
[ 2250.756307][T18780] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 2250.886621][T18780] usb 5-1: device descriptor read/64, error -71
[ 2250.997519][T18780] usb usb5-port1: attempt power cycle
[ 2251.336647][T18780] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 2251.387400][T18780] usb 5-1: device descriptor read/8, error -71
[ 2251.636434][T18780] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 2251.667258][T18780] usb 5-1: device descriptor read/8, error -71
[ 2251.787490][T18780] usb usb5-port1: unable to enumerate USB device
[ 2252.565525][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8871'.
[ 2252.622278][ T6278] vlan2: entered promiscuous mode
[ 2252.627613][ T6278] dummy0: entered promiscuous mode
[ 2252.976814][ T6287] sctp: [Deprecated]: syz.4.8875 (pid 6287) Use of int in max_burst socket option deprecated.
[ 2252.976814][ T6287] Use struct sctp_assoc_value instead
[ 2253.584156][ T6294] netlink: 216 bytes leftover after parsing attributes in process `syz.4.8876'.
[ 2253.951872][ T6296] input: syz1 as /devices/virtual/input/input90
[ 2253.966602][T18780] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 2254.176076][T18780] usb 5-1: Using ep0 maxpacket: 32
[ 2254.193348][T18780] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[ 2254.206595][T18780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2254.224087][T18780] usb 5-1: Product: syz
[ 2254.229450][T18780] usb 5-1: Manufacturer: syz
[ 2254.234703][T18780] usb 5-1: SerialNumber: syz
[ 2254.251142][T18780] usb 5-1: config 0 descriptor??
[ 2254.481973][T18780] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device:
[ 2254.494557][T18780] b3 c1 69 eb 50 3d 29 15 
[ 2254.500413][T18780] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5
[ 2254.688103][T18780] usb 5-1: USB disconnect, device number 41
[ 2254.727709][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8879'.
[ 2255.230223][ T6308] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8880'.
[ 2256.291334][ T6322] batadv_slave_0: entered promiscuous mode
[ 2256.307292][ T6320] batadv_slave_0: left promiscuous mode
[ 2259.082980][ T6340] program syz.5.8888 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2259.448187][T28088] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[ 2259.485011][T28088] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[ 2259.515839][T28088] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 76:f7:d8:21:0c:35 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 2260.796711][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8890'.
[ 2260.928391][T18780] hid-generic 0000:FFFFFFFE:0007.0030: unknown main item tag 0x0
[ 2260.938521][T18780] hid-generic 0000:FFFFFFFE:0007.0030: unknown main item tag 0x0
[ 2260.951470][T18780] hid-generic 0000:FFFFFFFE:0007.0030: unknown main item tag 0x0
[ 2260.961048][T18780] hid-generic 0000:FFFFFFFE:0007.0030: unknown main item tag 0x0
[ 2260.972213][T18780] hid-generic 0000:FFFFFFFE:0007.0030: unknown main item tag 0x0
[ 2260.981917][T18780] hid-generic 0000:FFFFFFFE:0007.0030: unknown main item tag 0x0
[ 2260.991151][T18780] hid-generic 0000:FFFFFFFE:0007.0030: unknown main item tag 0x0
[ 2260.999445][T18780] hid-generic 0000:FFFFFFFE:0007.0030: unknown main item tag 0x0
[ 2261.008545][T18780] hid-generic 0000:FFFFFFFE:0007.0030: unknown main item tag 0x0
[ 2261.018318][T18780] hid-generic 0000:FFFFFFFE:0007.0030: unknown main item tag 0x0
[ 2261.030598][ T6354] binder: BINDER_SET_CONTEXT_MGR already set
[ 2261.062221][ T6354] binder: 6353:6354 ioctl 4018620d 80004a80 returned -16
[ 2261.072726][T18780] hid-generic 0000:FFFFFFFE:0007.0030: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 2261.647024][ T6362] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2262.638682][T28088] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2262.654899][T28088] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2262.692771][T28088] 
 (unregistering): (slave team0): Releasing backup interface
[ 2262.707912][T28088] 
 (unregistering): Released all slaves
[ 2262.906889][   T30] audit: type=1326 audit(1768300806.036:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.4.8894" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2539 code=0x0
[ 2262.995218][T28088] bond0 (unregistering): Released all slaves
[ 2263.306216][T28088] bond1 (unregistering): (slave veth3): Releasing backup interface
[ 2263.319185][T28088] bond1 (unregistering): Released all slaves
[ 2263.480914][T28088] bond2 (unregistering): Released all slaves
[ 2263.497489][T28088] bond3 (unregistering): Released all slaves
[ 2263.626541][T28088] tipc: Left network mode
[ 2264.561054][T28088] hsr_slave_0: left promiscuous mode
[ 2264.591331][T28088] hsr_slave_1: left promiscuous mode
[ 2264.602001][T28088] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2264.773925][T28088] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2266.481265][T28088] team0 (unregistering): Port device team_slave_1 removed
[ 2266.553936][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8905'.
[ 2266.690088][T28088] team0 (unregistering): Port device team_slave_0 removed
[ 2268.194958][T28088] IPVS: stop unused estimator thread 0...
[ 2269.842306][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8935'.
[ 2270.330212][   T30] audit: type=1326 audit(1768300813.456:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.0.8941" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x0
[ 2270.444996][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8943'.
[ 2271.528789][T28485] IPVS: starting estimator thread 0...
[ 2271.616635][ T6509] IPVS: using max 27 ests per chain, 64800 per kthread
[ 2272.810442][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8958'.
[ 2274.129136][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8966'.
[ 2274.439109][ T6554] netlink: 88 bytes leftover after parsing attributes in process `syz.7.8968'.
[ 2274.903554][ T6570] netlink: 'syz.7.8975': attribute type 21 has an invalid length.
[ 2274.912292][ T6570] netlink: 156 bytes leftover after parsing attributes in process `syz.7.8975'.
[ 2276.157639][ T6597] bridge0: port 4(syz_tun) entered blocking state
[ 2276.174587][ T6597] bridge0: port 4(syz_tun) entered disabled state
[ 2276.190066][ T6597] syz_tun: entered allmulticast mode
[ 2276.208317][ T6597] syz_tun: entered promiscuous mode
[ 2276.425245][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8990'.
[ 2276.452665][ T6606] batadv_slave_0: entered promiscuous mode
[ 2277.148861][   T30] audit: type=1326 audit(1768300820.266:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6616 comm="syz.6.8994" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x0
[ 2277.319185][ T6620] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8995'.
[ 2278.337572][ T6651] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9010'.
[ 2280.151795][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9020'.
[ 2280.198080][ T6681] bridge0: entered allmulticast mode
[ 2280.349944][ T6685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2282.479512][ T6723] syzkaller0: entered promiscuous mode
[ 2282.485096][ T6723] syzkaller0: entered allmulticast mode
[ 2283.678550][ T6600] Set syz1 is full, maxelem 65536 reached
[ 2283.734172][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9052'.
[ 2285.934985][ T6787] netlink: 'syz.7.9065': attribute type 6 has an invalid length.
[ 2285.965870][ T6787] netlink: 14577 bytes leftover after parsing attributes in process `syz.7.9065'.
[ 2286.569975][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9064'.
[ 2286.608452][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9064'.
[ 2287.566080][ T3921] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 2287.748286][ T3921] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2287.776945][ T3921] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2287.817651][ T3921] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2287.876707][ T3921] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[ 2287.896872][ T3921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2287.904978][ T3921] usb 5-1: Product: syz
[ 2287.949212][ T3921] usb 5-1: Manufacturer: syz
[ 2287.953947][ T3921] usb 5-1: SerialNumber: syz
[ 2287.971045][ T6829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2287.993571][ T3921] usblp0: Disabling reads from problematic bidirectional printer
[ 2288.014226][ T6829] tipc: Resetting bearer <eth:syzkaller0>
[ 2288.127397][ T6826] tipc: Disabling bearer <eth:syzkaller0>
[ 2288.214790][ T3921] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004
[ 2288.412754][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 2288.419695][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2288.438417][ T3921] usb 5-1: USB disconnect, device number 42
[ 2288.459191][ T3921] usblp0: removed
[ 2291.320634][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9105'.
[ 2292.915827][T31491] Bluetooth: hci2: ACL packet for unknown connection handle 0
[ 2293.369865][ T6936] vxcan1: entered promiscuous mode
[ 2293.947567][ T6957] syzkaller0: entered promiscuous mode
[ 2293.953119][ T6957] syzkaller0: entered allmulticast mode
[ 2293.981501][ T6957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2293.990809][ T6956] tipc: Resetting bearer <eth:syzkaller0>
[ 2294.017210][ T6956] tipc: Disabling bearer <eth:syzkaller0>
[ 2297.243312][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9166'.
[ 2297.763825][ T7047] ipvlan1: entered promiscuous mode
[ 2297.796391][ T7047] ipvlan1: left promiscuous mode
[ 2298.191764][ T7058] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9176'.
[ 2298.620616][ T7071] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9182'.
[ 2300.112728][   T30] audit: type=1326 audit(1768300843.236:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.0.9190" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x0
[ 2301.699540][ T7148] qrtr: Invalid version 91
[ 2302.142349][ T7157] ALSA: mixer_oss: invalid OSS volume 'SYNTh'
[ 2302.148705][ T7157] ALSA: mixer_oss: invalid OSS volume 'IGAI¹AÍ$apture'
[ 2302.156195][ T7157] ALSA: mixer_oss: invalid OSS volume 'L1NE'
[ 2302.260384][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9219'.
[ 2302.572408][ T7170] ptrace attach of "./syz-executor exec"[2522] was attempted by "./syz-executor exec"[7170]
[ 2303.114641][ T7184] netlink: 27 bytes leftover after parsing attributes in process `syz.7.9227'.
[ 2303.214604][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9228'.
[ 2303.955573][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9243'.
[ 2304.023359][ T7223] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2304.968343][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9253'.
[ 2305.158502][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9256'.
[ 2305.812591][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9266'.
[ 2305.965719][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9268'.
[ 2306.128628][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9270'.
[ 2306.147620][ T7272] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2306.399299][T27783] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2306.425112][T27783] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2306.455815][T27783] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2306.491795][T27783] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2307.448927][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9284'.
[ 2308.298732][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2308.344401][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2308.479114][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9308'.
[ 2308.679123][ T1009] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2308.706026][ T1009] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2308.761603][ T1009] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2308.802759][ T1009] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2309.371511][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9323'.
[ 2311.025789][ T7437] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2311.177912][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9333'.
[ 2311.215068][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9333'.
[ 2311.250509][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9333'.
[ 2311.598129][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9335'.
[ 2312.275885][ T3921] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 2312.310370][ T7464] netlink: 72 bytes leftover after parsing attributes in process `syz.7.9341'.
[ 2312.446067][ T3921] usb 5-1: Using ep0 maxpacket: 32
[ 2312.456083][ T3921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2312.490199][ T3921] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2312.527657][ T3921] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2312.576602][ T3921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2312.626558][ T3921] usb 5-1: Product: syz
[ 2312.647161][ T3921] usb 5-1: Manufacturer: syz
[ 2312.655279][ T3921] usb 5-1: SerialNumber: syz
[ 2312.708493][ T3921] usb 5-1: config 0 descriptor??
[ 2313.752296][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9343'.
[ 2313.896879][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9345'.
[ 2314.247236][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9348'.
[ 2314.870845][    T9] usb 5-1: USB disconnect, device number 43
[ 2315.377645][    T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 2315.444176][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9356'.
[ 2315.467211][ T7501] netlink: 7 bytes leftover after parsing attributes in process `syz.6.9353'.
[ 2315.522404][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9353'.
[ 2315.570710][    T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 2315.579073][    T9] usb 5-1: config 0 has no interface number 0
[ 2315.593665][    T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2315.620795][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2315.636934][    T9] usb 5-1: Product: syz
[ 2315.641906][    T9] usb 5-1: Manufacturer: syz
[ 2315.646994][    T9] usb 5-1: SerialNumber: syz
[ 2315.654276][    T9] usb 5-1: config 0 descriptor??
[ 2315.701032][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9357'.
[ 2315.890133][    T9] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 2315.913358][    T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2315.953216][    T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 2315.986420][    T9] usb 5-1: media controller created
[ 2316.060948][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2316.157039][    T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 2316.488877][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9362'.
[ 2316.546065][    T9] usb 5-1: USB disconnect, device number 44
[ 2316.722202][   T30] audit: type=1326 audit(1768300859.846:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7530 comm="syz.6.9365" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x0
[ 2316.814387][ T7531] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9365'.
[ 2317.079915][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9369'.
[ 2318.350049][   T30] audit: type=1400 audit(1768300861.466:2303): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=7561 comm="syz.5.9376"
[ 2320.244458][ T7586] __nla_validate_parse: 1 callbacks suppressed
[ 2320.244474][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9382'.
[ 2320.789706][   T30] audit: type=1326 audit(1768300863.916:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.0.9385" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f51539 code=0x0
[ 2320.877003][ T7593] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9385'.
[ 2320.907827][ T7593] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2320.915411][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2322.584343][ T7626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9393'.
[ 2323.531007][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9398'.
[ 2325.316356][T18780] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 2325.488523][T18780] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 2325.498776][T18780] usb 5-1: config 0 has no interface number 0
[ 2325.512485][T18780] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2325.528872][T18780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2325.539993][T18780] usb 5-1: Product: syz
[ 2325.544355][T18780] usb 5-1: Manufacturer: syz
[ 2325.551127][T18780] usb 5-1: SerialNumber: syz
[ 2325.573536][T18780] usb 5-1: config 0 descriptor??
[ 2325.786360][T18780] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 2325.800426][T18780] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2325.813292][T18780] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 2325.822209][T18780] usb 5-1: media controller created
[ 2325.843467][T18780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2326.969421][T18780] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 2327.233050][T18780] usb 5-1: USB disconnect, device number 45
[ 2328.469132][   T30] audit: type=1326 audit(1768300871.576:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.4.9417" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2539 code=0x0
[ 2329.093244][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9424'.
[ 2329.500638][ T7736] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2329.516442][ T7736] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2329.530839][ T7736] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2329.545064][ T7736] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2329.558068][ T7736] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 2329.584118][ T7736] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2329.599011][ T7736] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 2329.625358][ T7736] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 2330.509427][ T7755] netlink: 116 bytes leftover after parsing attributes in process `syz.4.9435'.
[ 2331.346498][T18780] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 2331.445892][T31491] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2331.496483][T18780] usb 5-1: Using ep0 maxpacket: 32
[ 2331.503559][T18780] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2331.519788][T18780] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2331.529755][T18780] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2331.536153][T31491] Bluetooth: hci1: command 0x0c1a tx timeout
[ 2331.546923][T18780] usb 5-1: Product: syz
[ 2331.551190][T18780] usb 5-1: Manufacturer: syz
[ 2331.556482][T18780] usb 5-1: SerialNumber: syz
[ 2331.564331][T18780] usb 5-1: config 0 descriptor??
[ 2331.571004][ T7765] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2331.607693][T31491] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2331.614122][T31491] Bluetooth: hci3: command 0x0406 tx timeout
[ 2331.620307][T31491] Bluetooth: hci2: command 0x0c1a tx timeout
[ 2332.157907][ T7775] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9443'.
[ 2332.168110][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9443'.
[ 2332.177887][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9443'.
[ 2332.420505][   T30] audit: type=1326 audit(1768300875.546:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.0.9445" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f51539 code=0x0
[ 2332.501286][ T7785] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9445'.
[ 2332.768804][   T30] audit: type=1326 audit(1768300875.896:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7786 comm="syz.5.9446" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4539 code=0x0
[ 2333.687000][ T7772] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2333.695155][ T2927] Bluetooth: hci3: command 0x0406 tx timeout
[ 2333.875613][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9453'.
[ 2333.915182][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9453'.
[ 2334.186911][T18780] usb 5-1: USB disconnect, device number 46
[ 2334.636376][T18780] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 2334.798589][T18780] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 2334.849902][T18780] usb 5-1: config 0 has no interface number 0
[ 2334.938001][T18780] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2334.984465][T18780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2335.015393][T18780] usb 5-1: Product: syz
[ 2335.036633][T18780] usb 5-1: Manufacturer: syz
[ 2335.058768][T18780] usb 5-1: SerialNumber: syz
[ 2335.088055][T18780] usb 5-1: config 0 descriptor??
[ 2335.338024][T18780] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 2335.368672][T18780] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2335.394895][T18780] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 2335.439375][T18780] usb 5-1: media controller created
[ 2335.456294][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2335.465192][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2335.512943][T18780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2335.597150][T18780] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 2335.714799][T18780] usb 5-1: USB disconnect, device number 47
[ 2335.773386][ T7772] Bluetooth: hci4: command 0x0c1a tx timeout
[ 2336.884302][ T7853] geneve2: entered promiscuous mode
[ 2337.614840][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9473'.
[ 2337.838579][   T30] audit: type=1326 audit(1768300880.966:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.4.9476" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2539 code=0x0
[ 2337.897879][ T7876] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9476'.
[ 2338.180640][ T7878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9477'.
[ 2338.996566][T18780] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 2339.156505][T18780] usb 5-1: Using ep0 maxpacket: 8
[ 2339.168887][T18780] usb 5-1: config 0 has an invalid interface number: 122 but max is 0
[ 2339.189721][T18780] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2339.213852][T18780] usb 5-1: config 0 has no interface number 0
[ 2339.272858][T18780] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[ 2339.334069][T18780] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[ 2339.374245][T18780] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023
[ 2339.415229][ T7911] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9488'.
[ 2339.424968][T18780] usb 5-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2339.448449][T18780] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 2339.465337][T18780] usb 5-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8
[ 2339.527686][T18780] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[ 2339.537601][T18780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2339.546588][T18780] usb 5-1: Product: syz
[ 2339.550829][T18780] usb 5-1: Manufacturer: syz
[ 2339.555673][T18780] usb 5-1: SerialNumber: syz
[ 2339.564859][T18780] usb 5-1: config 0 descriptor??
[ 2339.572383][ T7904] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2339.585959][ T7904] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2339.991635][T18780] usb 5-1: NFC: intf ffff88807ab56000 id ffffffff8e93ee00
[ 2340.089976][T18780] nfcmrvl 5-1:0.122: NFC: registered with nci successfully
[ 2340.118900][T18780] usb 5-1: USB disconnect, device number 48
[ 2340.134444][T18780] usb 5-1: NFC: intf ffff88807ab56000
[ 2340.262785][ T7930] FAULT_INJECTION: forcing a failure.
[ 2340.262785][ T7930] name failslab, interval 1, probability 0, space 0, times 0
[ 2340.277583][ T7930] CPU: 1 UID: 0 PID: 7930 Comm: syz.0.9495 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2340.277620][ T7930] Tainted: [L]=SOFTLOCKUP
[ 2340.277629][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2340.277644][ T7930] Call Trace:
[ 2340.277654][ T7930]  <TASK>
[ 2340.277664][ T7930]  dump_stack_lvl+0xe8/0x150
[ 2340.277700][ T7930]  should_fail_ex+0x414/0x560
[ 2340.277742][ T7930]  should_failslab+0xa8/0x100
[ 2340.277771][ T7930]  __kmalloc_cache_noprof+0x84/0x700
[ 2340.277793][ T7930]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[ 2340.277828][ T7930]  ? sctp_add_bind_addr+0x8c/0x370
[ 2340.277866][ T7930]  sctp_add_bind_addr+0x8c/0x370
[ 2340.277902][ T7930]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 2340.277939][ T7930]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 2340.277972][ T7930]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 2340.278008][ T7930]  ? sctp_v6_is_any+0x64/0x80
[ 2340.278043][ T7930]  ? sctp_copy_one_addr+0x93/0x360
[ 2340.278079][ T7930]  sctp_bind_addr_copy+0xb3/0x3c0
[ 2340.278112][ T7930]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 2340.278145][ T7930]  sctp_connect_new_asoc+0x2e0/0x690
[ 2340.278173][ T7930]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 2340.278198][ T7930]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 2340.278221][ T7930]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 2340.278249][ T7930]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 2340.278266][ T7930]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 2340.278284][ T7930]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 2340.278302][ T7930]  sctp_sendmsg+0x155c/0x2840
[ 2340.278327][ T7930]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 2340.278341][ T7930]  ? aa_sk_perm+0x15f/0x920
[ 2340.278364][ T7930]  ? aa_sk_perm+0x7ee/0x920
[ 2340.278386][ T7930]  ? __pfx_aa_sk_perm+0x10/0x10
[ 2340.278408][ T7930]  ? sock_rps_record_flow+0x19/0x410
[ 2340.278433][ T7930]  ? inet_sendmsg+0x2f4/0x370
[ 2340.278453][ T7930]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2340.278470][ T7930]  __sock_sendmsg+0x19c/0x270
[ 2340.278498][ T7930]  ____sys_sendmsg+0x505/0x820
[ 2340.278521][ T7930]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2340.278545][ T7930]  ? kstrtouint+0x6e/0xe0
[ 2340.278575][ T7930]  ___sys_sendmsg+0x21f/0x2a0
[ 2340.278597][ T7930]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2340.278616][ T7930]  ? get_pid_task+0x20/0x1f0
[ 2340.278636][ T7930]  ? get_pid_task+0x20/0x1f0
[ 2340.278654][ T7930]  ? get_pid_task+0x20/0x1f0
[ 2340.278695][ T7930]  ? __fget_files+0x2a/0x420
[ 2340.278715][ T7930]  ? __fget_files+0x3a0/0x420
[ 2340.278742][ T7930]  __sys_sendmsg+0x164/0x220
[ 2340.278764][ T7930]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2340.278791][ T7930]  ? __pfx_ksys_write+0x10/0x10
[ 2340.278814][ T7930]  __do_fast_syscall_32+0x1dc/0x570
[ 2340.278833][ T7930]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2340.278849][ T7930]  ? do_fast_syscall_32+0x34/0x80
[ 2340.278867][ T7930]  ? irqentry_exit+0x10f/0x670
[ 2340.278886][ T7930]  do_fast_syscall_32+0x34/0x80
[ 2340.278905][ T7930]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2340.278925][ T7930] RIP: 0023:0xf7f51539
[ 2340.278939][ T7930] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2340.278954][ T7930] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2340.278971][ T7930] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000540
[ 2340.278982][ T7930] RDX: 0000000000040054 RSI: 0000000000000000 RDI: 0000000000000000
[ 2340.278992][ T7930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2340.279001][ T7930] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2340.279011][ T7930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2340.279033][ T7930]  </TASK>
[ 2340.813822][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9499'.
[ 2342.407474][ T7963] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9507'.
[ 2342.417251][ T7963] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9507'.
[ 2342.586026][    T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 2342.747812][    T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 2342.756030][    T9] usb 5-1: config 0 has no interface number 0
[ 2342.764506][    T9] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2342.774012][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2342.784041][    T9] usb 5-1: Product: syz
[ 2342.788731][    T9] usb 5-1: Manufacturer: syz
[ 2342.793457][    T9] usb 5-1: SerialNumber: syz
[ 2342.801344][    T9] usb 5-1: config 0 descriptor??
[ 2343.020370][    T9] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 2343.044003][    T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2343.067707][    T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 2343.082928][    T9] usb 5-1: media controller created
[ 2343.107172][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2343.181905][ T7970] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2343.421662][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9511'.
[ 2343.853986][ T7982] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2344.195584][    T9] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[ 2344.440541][    T9] usb 5-1: USB disconnect, device number 49
[ 2345.132618][ T7998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9518'.
[ 2345.163338][ T7998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9518'.
[ 2345.193459][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9518'.
[ 2346.016208][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9523'.
[ 2346.462250][ T8025] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9529'.
[ 2346.483389][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9529'.
[ 2346.493220][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9529'.
[ 2346.583577][ T8030] netlink: 204 bytes leftover after parsing attributes in process `syz.7.9530'.
[ 2346.646923][T18780] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 2346.746076][ T8032] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2346.888789][T18780] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[ 2346.899073][T18780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2346.931408][T18780] usb 5-1: config 0 descriptor??
[ 2347.863730][T18780] ath6kl: mismatched byte count 0 vs. expected 12
[ 2347.929025][T18780] ath6kl: Failed to init ath6kl core: -22
[ 2347.982183][T18780] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22
[ 2348.323041][ T3921] usb 5-1: USB disconnect, device number 50
[ 2348.956686][ T8069] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9541'.
[ 2348.988705][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9541'.
[ 2349.018717][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9541'.
[ 2349.107595][ T8072] netlink: 204 bytes leftover after parsing attributes in process `syz.5.9542'.
[ 2349.160611][ T8074] netlink: 'syz.6.9543': attribute type 10 has an invalid length.
[ 2349.270797][ T8074] team0: Port device dummy0 added
[ 2349.856801][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 2349.863363][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2350.186858][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9543'.
[ 2350.700906][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9552'.
[ 2350.751032][ T8104] openvswitch: netlink: Missing key (keys=40, expected=80)
[ 2351.079549][ T8110] netlink: 204 bytes leftover after parsing attributes in process `syz.5.9554'.
[ 2351.488120][ T8122] fuse: Bad value for 'group_id'
[ 2351.493209][ T8122] fuse: Bad value for 'group_id'
[ 2351.654339][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9561'.
[ 2351.705474][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9561'.
[ 2351.800169][ T8137] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2353.291304][ T8155] netlink: 196 bytes leftover after parsing attributes in process `syz.4.9566'.
[ 2353.736008][ T3921] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 2353.895892][ T3921] usb 5-1: Using ep0 maxpacket: 32
[ 2353.956892][ T3921] usb 5-1: config 0 has an invalid interface number: 247 but max is 0
[ 2353.965161][ T3921] usb 5-1: config 0 has no interface number 0
[ 2354.008331][ T3921] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[ 2354.025815][ T3921] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[ 2354.033937][ T3921] usb 5-1: Product: syz
[ 2354.051015][ T3921] usb 5-1: Manufacturer: syz
[ 2354.059971][ T3921] usb 5-1: config 0 descriptor??
[ 2354.319384][ T8176] input: syz1 as /devices/virtual/input/input93
[ 2354.329820][T18780] usb 5-1: USB disconnect, device number 51
[ 2354.376542][T28486] IPVS: starting estimator thread 0...
[ 2354.466255][ T8180] IPVS: using max 37 ests per chain, 88800 per kthread
[ 2355.362347][ T8190] netlink: 196 bytes leftover after parsing attributes in process `syz.7.9578'.
[ 2355.490451][ T8192] netlink: 'syz.4.9581': attribute type 10 has an invalid length.
[ 2355.736532][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9581'.
[ 2356.447450][ T8211] netlink: 172 bytes leftover after parsing attributes in process `syz.6.9585'.
[ 2356.469181][ T8211] netlink: 172 bytes leftover after parsing attributes in process `syz.6.9585'.
[ 2356.876937][ T8221] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2357.133154][ T8226] netlink: 196 bytes leftover after parsing attributes in process `syz.4.9589'.
[ 2357.290095][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9590'.
[ 2358.157817][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9598'.
[ 2358.472457][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9602'.
[ 2359.096449][T18780] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[ 2359.269592][T18780] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2359.285492][T18780] usb 5-1: not running at top speed; connect to a high speed hub
[ 2359.304477][T18780] usb 5-1: too many configurations: 17, using maximum allowed: 8
[ 2359.319606][T18780] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 2359.328392][T18780] usb 5-1: can't read configurations, error -61
[ 2359.528809][T18780] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[ 2359.576798][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9612'.
[ 2359.703281][T18780] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2359.724037][T18780] usb 5-1: not running at top speed; connect to a high speed hub
[ 2359.734633][T18780] usb 5-1: too many configurations: 17, using maximum allowed: 8
[ 2359.755530][T18780] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 2359.764143][T18780] usb 5-1: can't read configurations, error -61
[ 2359.771938][T18780] usb usb5-port1: attempt power cycle
[ 2359.870026][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9615'.
[ 2360.117910][T18780] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[ 2360.159456][T18780] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2360.179448][T18780] usb 5-1: not running at top speed; connect to a high speed hub
[ 2360.204690][T18780] usb 5-1: too many configurations: 17, using maximum allowed: 8
[ 2360.246867][T18780] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 2360.272792][T18780] usb 5-1: can't read configurations, error -61
[ 2360.436418][T18780] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[ 2360.471383][T18780] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2360.491698][T18780] usb 5-1: not running at top speed; connect to a high speed hub
[ 2360.500442][T18780] usb 5-1: too many configurations: 17, using maximum allowed: 8
[ 2360.535694][T18780] usb 5-1: unable to read config index 0 descriptor/start: -61
[ 2360.566569][T18780] usb 5-1: can't read configurations, error -61
[ 2360.594790][T18780] usb usb5-port1: unable to enumerate USB device
[ 2361.413198][ T8301] netlink: 196 bytes leftover after parsing attributes in process `syz.7.9620'.
[ 2361.477087][ T8304] FAULT_INJECTION: forcing a failure.
[ 2361.477087][ T8304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2361.509745][ T8304] CPU: 1 UID: 0 PID: 8304 Comm: syz.6.9622 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2361.509784][ T8304] Tainted: [L]=SOFTLOCKUP
[ 2361.509793][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2361.509807][ T8304] Call Trace:
[ 2361.509817][ T8304]  <TASK>
[ 2361.509827][ T8304]  dump_stack_lvl+0xe8/0x150
[ 2361.509861][ T8304]  should_fail_ex+0x414/0x560
[ 2361.509912][ T8304]  _copy_from_user+0x2d/0xb0
[ 2361.509942][ T8304]  get_compat_msghdr+0xad/0x4a0
[ 2361.509980][ T8304]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 2361.510013][ T8304]  ? kstrtouint+0x6e/0xe0
[ 2361.510055][ T8304]  ___sys_sendmsg+0x193/0x2a0
[ 2361.510087][ T8304]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2361.510115][ T8304]  ? get_pid_task+0x20/0x1f0
[ 2361.510143][ T8304]  ? get_pid_task+0x20/0x1f0
[ 2361.510169][ T8304]  ? get_pid_task+0x20/0x1f0
[ 2361.510227][ T8304]  ? __fget_files+0x2a/0x420
[ 2361.510255][ T8304]  ? __fget_files+0x3a0/0x420
[ 2361.510291][ T8304]  __sys_sendmsg+0x164/0x220
[ 2361.510321][ T8304]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2361.510359][ T8304]  ? __pfx_ksys_write+0x10/0x10
[ 2361.510392][ T8304]  __do_fast_syscall_32+0x1dc/0x570
[ 2361.510418][ T8304]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2361.510440][ T8304]  ? do_fast_syscall_32+0x34/0x80
[ 2361.510466][ T8304]  ? irqentry_exit+0x10f/0x670
[ 2361.510492][ T8304]  do_fast_syscall_32+0x34/0x80
[ 2361.510518][ T8304]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2361.510545][ T8304] RIP: 0023:0xf70bd539
[ 2361.510563][ T8304] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2361.510583][ T8304] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2361.510606][ T8304] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[ 2361.510622][ T8304] RDX: 0000000004048010 RSI: 0000000000000000 RDI: 0000000000000000
[ 2361.510636][ T8304] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2361.510649][ T8304] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2361.510663][ T8304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2361.510694][ T8304]  </TASK>
[ 2361.795697][ T8311] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9623'.
[ 2361.807207][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9623'.
[ 2361.817762][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9623'.
[ 2361.931651][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9627'.
[ 2361.988190][ T8316] netlink: 172 bytes leftover after parsing attributes in process `syz.5.9626'.
[ 2362.001738][ T8316] netlink: 172 bytes leftover after parsing attributes in process `syz.5.9626'.
[ 2362.159917][ T8329] netlink: 196 bytes leftover after parsing attributes in process `syz.6.9633'.
[ 2363.031566][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9638'.
[ 2363.062532][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9638'.
[ 2363.380713][ T8353] FAULT_INJECTION: forcing a failure.
[ 2363.380713][ T8353] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2363.416721][ T8353] CPU: 1 UID: 0 PID: 8353 Comm: syz.0.9641 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2363.416758][ T8353] Tainted: [L]=SOFTLOCKUP
[ 2363.416775][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2363.416790][ T8353] Call Trace:
[ 2363.416800][ T8353]  <TASK>
[ 2363.416810][ T8353]  dump_stack_lvl+0xe8/0x150
[ 2363.416844][ T8353]  should_fail_ex+0x414/0x560
[ 2363.416887][ T8353]  _copy_from_user+0x2d/0xb0
[ 2363.416917][ T8353]  kstrtouint_from_user+0xc4/0x170
[ 2363.416943][ T8353]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 2363.416985][ T8353]  proc_fail_nth_write+0x88/0x200
[ 2363.417010][ T8353]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2363.417039][ T8353]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2363.417064][ T8353]  vfs_write+0x27e/0xb30
[ 2363.417101][ T8353]  ? __pfx_vfs_write+0x10/0x10
[ 2363.417119][ T8353]  ? __fget_files+0x2a/0x420
[ 2363.417142][ T8353]  ? __fget_files+0x3a0/0x420
[ 2363.417161][ T8353]  ? __fget_files+0x2a/0x420
[ 2363.417188][ T8353]  ksys_write+0x145/0x250
[ 2363.417205][ T8353]  ? __pfx_ksys_write+0x10/0x10
[ 2363.417229][ T8353]  __do_fast_syscall_32+0x1dc/0x570
[ 2363.417248][ T8353]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2363.417264][ T8353]  ? do_fast_syscall_32+0x34/0x80
[ 2363.417282][ T8353]  ? irqentry_exit+0x10f/0x670
[ 2363.417301][ T8353]  do_fast_syscall_32+0x34/0x80
[ 2363.417320][ T8353]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2363.417341][ T8353] RIP: 0023:0xf7f51539
[ 2363.417354][ T8353] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2363.417369][ T8353] RSP: 002b:00000000f5446590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 2363.417385][ T8353] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5446620
[ 2363.417397][ T8353] RDX: 0000000000000001 RSI: 00000000f73e6ff4 RDI: 0000000000000000
[ 2363.417407][ T8353] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 2363.417417][ T8353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2363.417427][ T8353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2363.417449][ T8353]  </TASK>
[ 2364.289004][   T30] audit: type=1326 audit(1768300907.416:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.9646" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2539 code=0x0
[ 2366.236302][ T3921] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[ 2366.399029][ T3921] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2366.407619][ T3921] usb 5-1: not running at top speed; connect to a high speed hub
[ 2366.417502][ T3921] usb 5-1: config 12 has an invalid interface number: 173 but max is 1
[ 2366.426057][ T3921] usb 5-1: config 12 has an invalid interface number: 173 but max is 1
[ 2366.434492][ T3921] usb 5-1: config 12 has 1 interface, different from the descriptor's value: 2
[ 2366.444092][ T3921] usb 5-1: config 12 has no interface number 0
[ 2366.450887][ T3921] usb 5-1: config 12 interface 173 has no altsetting 0
[ 2366.458154][ T3921] usb 5-1: config 12 interface 173 has no altsetting 1
[ 2366.468733][ T3921] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7
[ 2366.477912][ T3921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2366.486480][ T3921] usb 5-1: Product: syz
[ 2366.490682][ T3921] usb 5-1: Manufacturer: syz
[ 2366.495331][ T3921] usb 5-1: SerialNumber: syz
[ 2366.712359][ T8397] __nla_validate_parse: 11 callbacks suppressed
[ 2366.712381][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9656'.
[ 2366.783310][   T30] audit: type=1326 audit(1768300909.906:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8396 comm="syz.4.9656" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe2539 code=0x0
[ 2367.301796][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9664'.
[ 2367.400557][   T30] audit: type=1326 audit(1768300910.526:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.7.9666" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ed539 code=0x0
[ 2368.222338][ T8425] netlink: 'syz.5.9667': attribute type 10 has an invalid length.
[ 2368.238824][ T8425] team0: Port device dummy0 added
[ 2368.477099][ T2927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2368.489701][ T2927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2368.500803][ T2927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2368.511537][ T2927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2368.520197][ T2927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2369.107671][ T3921] usb 5-1: USB disconnect, device number 56
[ 2369.188182][ T8438] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9671'.
[ 2369.340966][ T4296] 
: (slave syz_tun): Releasing backup interface
[ 2369.389064][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9673'.
[ 2369.438916][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9673'.
[ 2369.449470][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9673'.
[ 2369.475283][ T8429] chnl_net:caif_netlink_parms(): no params data found
[ 2369.606244][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9676'.
[ 2369.812961][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2369.820688][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2369.829090][ T8429] bridge_slave_0: entered allmulticast mode
[ 2369.844812][ T8429] bridge_slave_0: entered promiscuous mode
[ 2369.857133][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2369.864785][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2369.872767][ T8429] bridge_slave_1: entered allmulticast mode
[ 2369.881601][ T8429] bridge_slave_1: entered promiscuous mode
[ 2369.949361][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2369.965290][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2369.976859][T28485] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 2370.037218][ T8429] team0: Port device team_slave_0 added
[ 2370.045215][ T8429] team0: Port device team_slave_1 added
[ 2370.142970][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2370.150852][T28485] usb 5-1: Using ep0 maxpacket: 32
[ 2370.157143][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2370.192205][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2370.210437][T28485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 2370.243946][T28485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 2370.269647][T28485] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99
[ 2370.293642][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2370.311381][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2370.315200][T28485] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 2370.412677][T28485] usb 5-1: Product: syz
[ 2370.413775][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2370.431989][T28485] usb 5-1: SerialNumber: syz
[ 2370.444871][   T30] audit: type=1326 audit(1768300913.566:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.6.9681" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x0
[ 2370.476564][T28485] usb 5-1: config 0 descriptor??
[ 2370.565980][ T2927] Bluetooth: hci5: command tx timeout
[ 2370.601448][T25314] bond0: left allmulticast mode
[ 2370.613926][T25314] bond0: left promiscuous mode
[ 2370.619191][T25314] bridge0: port 3(bond0) entered disabled state
[ 2370.636904][T25314] bridge_slave_1: left allmulticast mode
[ 2370.644348][T25314] bridge_slave_1: left promiscuous mode
[ 2370.659814][T25314] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2370.679682][T25314] 
: left allmulticast mode
[ 2370.689684][T25314] 
: left promiscuous mode
[ 2370.705762][T25314] bridge0: port 1(
) entered disabled state
[ 2370.715618][T28485] usb 5-1: USB disconnect, device number 57
[ 2371.239377][   T30] audit: type=1326 audit(1768300914.366:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.5.9682" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4539 code=0x0
[ 2371.380601][ T8480] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9683'.
[ 2371.602893][ T8488] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9685'.
[ 2371.658255][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9685'.
[ 2371.812499][T25314] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2371.823803][T25314] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2371.836951][T25314] 
 (unregistering): Released all slaves
[ 2371.992810][T25314] bond0 (unregistering): Released all slaves
[ 2372.161195][ T8429] hsr_slave_0: entered promiscuous mode
[ 2372.191204][ T8493] netlink: 'syz.5.9686': attribute type 10 has an invalid length.
[ 2372.199374][ T8429] hsr_slave_1: entered promiscuous mode
[ 2372.200202][ T8429] debugfs: 'hsr0' already exists in 'hsr'
[ 2372.200226][ T8429] Cannot create hsr debugfs directory
[ 2372.246445][T25314] tipc: Left network mode
[ 2372.299688][ T8495] __nla_validate_parse: 1 callbacks suppressed
[ 2372.299711][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9688'.
[ 2372.648371][ T2927] Bluetooth: hci5: command tx timeout
[ 2372.664311][T25314] hsr_slave_0: left promiscuous mode
[ 2372.671041][T25314] hsr_slave_1: left promiscuous mode
[ 2372.677631][T25314] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2373.614120][T25314] team0 (unregistering): Port device team_slave_1 removed
[ 2373.748666][T25314] team0 (unregistering): Port device team_slave_0 removed
[ 2374.681591][   T30] audit: type=1326 audit(1768300917.806:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.4.9695" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2539 code=0x0
[ 2374.726431][ T2927] Bluetooth: hci5: command tx timeout
[ 2375.171723][ T8544] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9697'.
[ 2375.497270][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9698'.
[ 2375.535555][T25314] IPVS: stop unused estimator thread 0...
[ 2375.878564][ T8429] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2375.931125][ T8429] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2375.968260][ T8429] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2375.976846][T28486] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 2376.011897][ T8429] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2376.136856][T28486] usb 5-1: Using ep0 maxpacket: 32
[ 2376.164902][T28486] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2376.210017][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2376.231723][ T8429] 8021q: adding VLAN 0 to HW filter on device team0
[ 2376.240494][ T8578] random: crng reseeded on system resumption
[ 2376.278388][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2376.285765][ T6274] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2376.314622][T28486] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2376.343287][T28486] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2376.353360][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2376.360566][ T6274] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2376.380940][T28486] usb 5-1: Product: syz
[ 2376.404502][T28486] usb 5-1: Manufacturer: syz
[ 2376.441829][T28486] usb 5-1: SerialNumber: syz
[ 2376.491082][T28486] usb 5-1: config 0 descriptor??
[ 2376.507206][ T8558] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2376.806178][ T2927] Bluetooth: hci5: command tx timeout
[ 2376.850542][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2377.124412][ T8429] veth0_vlan: entered promiscuous mode
[ 2377.198654][ T8429] veth1_vlan: entered promiscuous mode
[ 2377.346660][ T8429] veth0_macvtap: entered promiscuous mode
[ 2377.393003][ T8429] veth1_macvtap: entered promiscuous mode
[ 2377.493010][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2377.567826][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2377.630861][T25314] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2377.665636][T25314] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2377.699262][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2377.729957][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2378.054895][T27783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2378.081777][T27783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2378.206801][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2378.234770][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2378.780431][    T9] usb 5-1: USB disconnect, device number 58
[ 2378.973868][ T8618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9705'.
[ 2379.461330][ T8629] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9708'.
[ 2379.492654][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9709'.
[ 2379.547437][   T30] audit: type=1326 audit(1768300922.676:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.4.9707" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2539 code=0x0
[ 2380.532718][ T8656] 
: renamed from bond0 (while UP)
[ 2381.608191][ T8650] Failed to get privilege flags for destination (handle=0x2:0x25)
[ 2383.466583][ T8705] FAULT_INJECTION: forcing a failure.
[ 2383.466583][ T8705] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2383.494115][ T8705] CPU: 0 UID: 0 PID: 8705 Comm: syz.5.9721 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2383.494142][ T8705] Tainted: [L]=SOFTLOCKUP
[ 2383.494148][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2383.494160][ T8705] Call Trace:
[ 2383.494166][ T8705]  <TASK>
[ 2383.494175][ T8705]  dump_stack_lvl+0xe8/0x150
[ 2383.494205][ T8705]  should_fail_ex+0x414/0x560
[ 2383.494235][ T8705]  _copy_to_user+0x31/0xb0
[ 2383.494258][ T8705]  simple_read_from_buffer+0xe1/0x170
[ 2383.494281][ T8705]  proc_fail_nth_read+0x1b3/0x220
[ 2383.494302][ T8705]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2383.494321][ T8705]  ? rw_verify_area+0x2a6/0x4d0
[ 2383.494347][ T8705]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2383.494364][ T8705]  vfs_read+0x200/0xa30
[ 2383.494378][ T8705]  ? fdget_pos+0x247/0x320
[ 2383.494401][ T8705]  ? __pfx___mutex_lock+0x10/0x10
[ 2383.494421][ T8705]  ? __pfx_vfs_read+0x10/0x10
[ 2383.494436][ T8705]  ? __fget_files+0x2a/0x420
[ 2383.494459][ T8705]  ? __fget_files+0x3a0/0x420
[ 2383.494478][ T8705]  ? __fget_files+0x2a/0x420
[ 2383.494504][ T8705]  ksys_read+0x145/0x250
[ 2383.494521][ T8705]  ? __pfx_ksys_read+0x10/0x10
[ 2383.494544][ T8705]  __do_fast_syscall_32+0x1dc/0x570
[ 2383.494569][ T8705]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2383.494585][ T8705]  ? do_fast_syscall_32+0x34/0x80
[ 2383.494603][ T8705]  ? irqentry_exit+0x10f/0x670
[ 2383.494623][ T8705]  do_fast_syscall_32+0x34/0x80
[ 2383.494642][ T8705]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2383.494662][ T8705] RIP: 0023:0xf7fb4539
[ 2383.494676][ T8705] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2383.494690][ T8705] RSP: 002b:00000000f54a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 2383.494706][ T8705] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a6620
[ 2383.494717][ T8705] RDX: 000000000000000f RSI: 00000000f7446ff4 RDI: 0000000000000000
[ 2383.494727][ T8705] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 2383.494736][ T8705] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2383.494746][ T8705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2383.494768][ T8705]  </TASK>
[ 2383.931224][   T30] audit: type=1326 audit(1768300927.056:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.4.9723" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2539 code=0x0
[ 2384.100635][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9726'.
[ 2384.267901][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9727'.
[ 2384.277347][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9727'.
[ 2384.637785][ T8728] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9728'.
[ 2384.650235][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9728'.
[ 2384.661145][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9728'.
[ 2385.055462][ T8738] netlink: 'syz.5.9732': attribute type 10 has an invalid length.
[ 2385.812943][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9737'.
[ 2387.452976][ T8764] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2388.913302][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9747'.
[ 2390.506636][ T8797] FAULT_INJECTION: forcing a failure.
[ 2390.506636][ T8797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2390.536435][ T8797] CPU: 1 UID: 0 PID: 8797 Comm: syz.4.9751 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2390.536489][ T8797] Tainted: [L]=SOFTLOCKUP
[ 2390.536499][ T8797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2390.536513][ T8797] Call Trace:
[ 2390.536528][ T8797]  <TASK>
[ 2390.536538][ T8797]  dump_stack_lvl+0xe8/0x150
[ 2390.536572][ T8797]  should_fail_ex+0x414/0x560
[ 2390.536615][ T8797]  _copy_to_user+0x31/0xb0
[ 2390.536646][ T8797]  simple_read_from_buffer+0xe1/0x170
[ 2390.536678][ T8797]  proc_fail_nth_read+0x1b3/0x220
[ 2390.536707][ T8797]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2390.536735][ T8797]  ? rw_verify_area+0x2a6/0x4d0
[ 2390.536769][ T8797]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2390.536796][ T8797]  vfs_read+0x200/0xa30
[ 2390.536816][ T8797]  ? fdget_pos+0x247/0x320
[ 2390.536850][ T8797]  ? __pfx___mutex_lock+0x10/0x10
[ 2390.536876][ T8797]  ? __pfx_vfs_read+0x10/0x10
[ 2390.536899][ T8797]  ? __fget_files+0x2a/0x420
[ 2390.536932][ T8797]  ? __fget_files+0x3a0/0x420
[ 2390.536959][ T8797]  ? __fget_files+0x2a/0x420
[ 2390.536996][ T8797]  ksys_read+0x145/0x250
[ 2390.537028][ T8797]  ? __pfx_ksys_read+0x10/0x10
[ 2390.537062][ T8797]  __do_fast_syscall_32+0x1dc/0x570
[ 2390.537088][ T8797]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2390.537109][ T8797]  ? do_fast_syscall_32+0x34/0x80
[ 2390.537134][ T8797]  ? irqentry_exit+0x10f/0x670
[ 2390.537162][ T8797]  do_fast_syscall_32+0x34/0x80
[ 2390.537189][ T8797]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2390.537218][ T8797] RIP: 0023:0xf7fe2539
[ 2390.537237][ T8797] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2390.537255][ T8797] RSP: 002b:00000000f54b5590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 2390.537279][ T8797] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f54b5620
[ 2390.537295][ T8797] RDX: 000000000000000f RSI: 00000000f7476ff4 RDI: 0000000000000000
[ 2390.537309][ T8797] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 2390.537322][ T8797] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2390.537336][ T8797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2390.537369][ T8797]  </TASK>
[ 2391.238366][ T8805] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2391.322209][ T8812] netlink: 'syz.5.9757': attribute type 10 has an invalid length.
[ 2391.679805][   T30] audit: type=1326 audit(1768300934.806:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8798 comm="syz.6.9753" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x0
[ 2391.709854][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9757'.
[ 2391.791819][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9753'.
[ 2391.791850][ T8800] netlink: 'syz.6.9753': attribute type 5 has an invalid length.
[ 2391.791864][ T8800] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9753'.
[ 2391.818140][ T8800] geneve0: entered promiscuous mode
[ 2391.818170][ T8800] geneve0: entered allmulticast mode
[ 2392.648478][ T5336] syz_tun (unregistering): left allmulticast mode
[ 2392.654985][ T5336] syz_tun (unregistering): left promiscuous mode
[ 2392.661563][ T5336] bridge0: port 4(syz_tun) entered disabled state
[ 2393.395415][ T8840] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9768'.
[ 2393.423751][ T7772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2393.435292][ T7772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2393.449245][ T7772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2393.458909][ T7772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2393.476998][ T7772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2393.613750][T25314] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode
[ 2393.660035][T25314] bridge0: port 3(netdevsim0) entered disabled state
[ 2394.149673][T25314] bridge_slave_1: left allmulticast mode
[ 2394.155416][T25314] bridge_slave_1: left promiscuous mode
[ 2394.196125][T25314] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2394.213131][T25314] bridge_slave_0: left allmulticast mode
[ 2394.231400][T25314] bridge_slave_0: left promiscuous mode
[ 2394.252100][T25314] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2394.673174][ T8862] vxcan0: tx drop: invalid sa for name 0x0001000000000000
[ 2395.538549][ T2927] Bluetooth: hci0: command tx timeout
[ 2395.611004][T25314] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2395.622362][T25314] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2395.633637][T25314] 
 (unregistering): Released all slaves
[ 2395.707523][ T8876] pimreg: tun_chr_ioctl cmd 1074025677
[ 2395.736088][ T8876] pimreg: linktype set to 776
[ 2395.778100][T25314] : left promiscuous mode
[ 2395.867781][T25314] tipc: Left network mode
[ 2396.003567][ T8842] chnl_net:caif_netlink_parms(): no params data found
[ 2396.645279][T25314] hsr_slave_0: left promiscuous mode
[ 2396.670174][T25314] hsr_slave_1: left promiscuous mode
[ 2396.700546][T25314] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2396.707915][T18780] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 2396.894008][T18780] usb 5-1: no configurations
[ 2396.907002][T18780] usb 5-1: can't read configurations, error -22
[ 2397.066360][T18780] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 2397.248000][T18780] usb 5-1: no configurations
[ 2397.255448][T18780] usb 5-1: can't read configurations, error -22
[ 2397.306929][T18780] usb usb5-port1: attempt power cycle
[ 2397.611219][ T2927] Bluetooth: hci0: command tx timeout
[ 2397.647956][T25314] team0 (unregistering): Port device team_slave_1 removed
[ 2397.667201][T18780] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 2397.701113][T18780] usb 5-1: no configurations
[ 2397.706667][T18780] usb 5-1: can't read configurations, error -22
[ 2397.723107][T25314] team0 (unregistering): Port device team_slave_0 removed
[ 2397.852019][T18780] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 2397.878046][T18780] usb 5-1: no configurations
[ 2397.883204][T18780] usb 5-1: can't read configurations, error -22
[ 2397.891773][T18780] usb usb5-port1: unable to enumerate USB device
[ 2398.093890][T25314] team0 (unregistering): Port device dummy0 removed
[ 2398.268839][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2398.277717][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2398.284943][ T8842] bridge_slave_0: entered allmulticast mode
[ 2398.293929][ T8842] bridge_slave_0: entered promiscuous mode
[ 2398.304919][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2398.312853][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2398.321078][ T8842] bridge_slave_1: entered allmulticast mode
[ 2398.333469][ T8842] bridge_slave_1: entered promiscuous mode
[ 2398.342403][ T8910] gre0: entered allmulticast mode
[ 2398.387327][ T8910] gre0: left allmulticast mode
[ 2398.455353][ T8842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2398.509326][ T8842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2398.615486][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9778'.
[ 2398.762292][ T8842] team0: Port device team_slave_0 added
[ 2398.793766][ T8842] team0: Port device team_slave_1 added
[ 2398.980507][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2398.988319][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2399.073692][ T8842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2399.124461][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2399.159588][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2399.192842][ T8842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2399.313263][ T8842] hsr_slave_0: entered promiscuous mode
[ 2399.354218][ T8842] hsr_slave_1: entered promiscuous mode
[ 2399.389869][ T8842] debugfs: 'hsr0' already exists in 'hsr'
[ 2399.401523][   T30] audit: type=1326 audit(1768300942.526:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8936 comm="syz.0.9781" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f51539 code=0x0
[ 2399.432140][ T8842] Cannot create hsr debugfs directory
[ 2399.574356][ T8944] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 2399.602086][ T8944] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2399.700140][ T2927] Bluetooth: hci0: command tx timeout
[ 2400.260981][ T8956] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 2400.334405][ T8957] syzkaller1: entered promiscuous mode
[ 2400.346595][ T8957] syzkaller1: entered allmulticast mode
[ 2400.492107][ T8842] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 2400.550600][ T8842] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 2400.595384][ T8842] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 2400.641151][ T8842] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 2401.144921][ T8842] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2401.229240][ T8842] 8021q: adding VLAN 0 to HW filter on device team0
[ 2401.283988][T25314] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2401.291228][T25314] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2401.391476][T31300] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2401.398687][T31300] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2401.776114][ T2927] Bluetooth: hci0: command tx timeout
[ 2401.879162][   T30] audit: type=1326 audit(1768300945.006:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.7.9787" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f82539 code=0x0
[ 2401.961913][ T8991] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9787'.
[ 2402.080421][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2402.123752][ T8991] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2402.131997][ T8991] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2402.291324][ T8842] veth0_vlan: entered promiscuous mode
[ 2402.345078][ T8842] veth1_vlan: entered promiscuous mode
[ 2402.408216][T18780] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 2402.439304][ T8842] veth0_macvtap: entered promiscuous mode
[ 2402.469021][ T8842] veth1_macvtap: entered promiscuous mode
[ 2402.537364][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2402.568526][T18780] usb 5-1: config 0 has an invalid interface number: 156 but max is 0
[ 2402.586520][T18780] usb 5-1: config 0 has no interface number 0
[ 2402.603379][T18780] usb 5-1: config 0 interface 156 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[ 2402.616279][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2402.643069][T18780] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[ 2402.674986][T18780] usb 5-1: config 0 interface 156 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[ 2402.708234][T16090] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2402.729554][T18780] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 2402.746980][ T2997] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2402.766665][T18780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2402.776811][ T2997] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2402.794073][T18780] usb 5-1: config 0 descriptor??
[ 2402.800701][ T2997] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2402.821718][T18780] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 2403.089250][T31498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2403.119854][T31498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2403.214645][T31498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2403.214744][T31498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2403.348574][T18780] spca561 5-1:0.156: probe with driver spca561 failed with error -22
[ 2403.353796][T18780] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 2403.369811][T18780] usb 5-1: MIDIStreaming interface descriptor not found
[ 2403.843970][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9794'.
[ 2403.860375][   T30] audit: type=1326 audit(1768300946.986:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.9793" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f51539 code=0x0
[ 2403.883929][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9794'.
[ 2403.903539][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9794'.
[ 2404.348095][T28478] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 2404.506154][T28478] usb 9-1: Using ep0 maxpacket: 32
[ 2404.533167][T28478] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2404.584138][T28478] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2404.604522][T28478] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2404.622511][T28478] usb 9-1: Product: syz
[ 2404.640487][T28478] usb 9-1: Manufacturer: syz
[ 2404.650931][T28478] usb 9-1: SerialNumber: syz
[ 2404.671357][T28478] usb 9-1: config 0 descriptor??
[ 2404.688092][ T9036] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 2405.102785][ T3921] usb 5-1: USB disconnect, device number 63
[ 2406.611680][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9804'.
[ 2407.151221][T28478] usb 9-1: USB disconnect, device number 2
[ 2407.298080][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9806'.
[ 2407.321483][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9806'.
[ 2407.348152][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9806'.
[ 2407.603287][   T30] audit: type=1326 audit(1768300950.656:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9068 comm="syz.8.9807" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d539 code=0x0
[ 2407.670887][ T9075] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[ 2407.681841][ T9078] ref_tracker: memory allocation failure, unreliable refcount tracker.
[ 2407.733989][ T9075] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2408.020013][ T9082] netlink: 'syz.5.9809': attribute type 10 has an invalid length.
[ 2408.051795][ T9082] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9809'.
[ 2408.101095][ T9082] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[ 2408.124525][ T9082] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[ 2408.157653][ T9082] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 2408.715851][ T9015] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 2408.865664][ T9096] tipc: Resetting bearer <eth:team0>
[ 2408.914468][ T9015] usb 9-1: Using ep0 maxpacket: 32
[ 2408.925275][ T9015] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2408.959484][ T9015] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2408.988296][ T9015] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2409.000273][ T9015] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2409.062853][ T9015] usb 9-1: config 0 descriptor??
[ 2409.091962][ T9015] hub 9-1:0.0: USB hub found
[ 2409.289877][ T9015] hub 9-1:0.0: 27 ports detected
[ 2409.299772][ T9015] hub 9-1:0.0: insufficient power available to use all downstream ports
[ 2409.317573][ T9096] tipc: Disabling bearer <eth:team0>
[ 2409.363250][ T9096] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105)
[ 2409.394157][ T9096] team0 (unregistering): Port device team_slave_0 removed
[ 2409.429181][ T9096] team0 (unregistering): Failed to send options change via netlink (err -105)
[ 2409.456822][ T9096] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[ 2409.483194][ T9096] team0 (unregistering): Port device team_slave_1 removed
[ 2409.727288][ T9015] hub 9-1:0.0: hub_hub_status failed (err = -71)
[ 2409.762631][ T9015] hub 9-1:0.0: config failed, can't get hub status (err -71)
[ 2409.794494][ T9015] usbhid 9-1:0.0: can't add hid device: -71
[ 2409.826378][ T9015] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 2409.866614][ T9015] usb 9-1: USB disconnect, device number 3
[ 2409.952785][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9815'.
[ 2410.010468][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9818'.
[ 2410.027980][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9818'.
[ 2410.045841][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9818'.
[ 2410.186620][T18780] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 2410.306605][ T9114] netlink: 'syz.0.9821': attribute type 10 has an invalid length.
[ 2410.347239][T18780] usb 5-1: Using ep0 maxpacket: 32
[ 2410.378553][T18780] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 2410.410362][T18780] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 2410.435427][T18780] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 2410.465441][T18780] usb 5-1: Product: syz
[ 2410.489098][   T30] audit: type=1326 audit(1768300953.616:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9111 comm="syz.7.9820" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f82539 code=0x0
[ 2410.511722][T18780] usb 5-1: Manufacturer: syz
[ 2410.525524][T18780] usb 5-1: SerialNumber: syz
[ 2410.551835][ T9122] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[ 2410.577600][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9821'.
[ 2410.593458][T18780] usb 5-1: config 0 descriptor??
[ 2410.620379][ T9104] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2410.628413][ T9122] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2410.915766][   T30] audit: type=1326 audit(1768300954.036:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9119 comm="syz.8.9822" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d539 code=0x0
[ 2410.994584][ T9125] netlink: 60 bytes leftover after parsing attributes in process `syz.8.9822'.
[ 2411.024967][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2411.032775][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2411.290220][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 2411.298044][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2411.379992][ T9128] FAULT_INJECTION: forcing a failure.
[ 2411.379992][ T9128] name failslab, interval 1, probability 0, space 0, times 0
[ 2411.415822][ T9128] CPU: 1 UID: 0 PID: 9128 Comm: syz.7.9823 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2411.415858][ T9128] Tainted: [L]=SOFTLOCKUP
[ 2411.415866][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2411.415880][ T9128] Call Trace:
[ 2411.415903][ T9128]  <TASK>
[ 2411.415922][ T9128]  dump_stack_lvl+0xe8/0x150
[ 2411.415965][ T9128]  should_fail_ex+0x414/0x560
[ 2411.416004][ T9128]  should_failslab+0xa8/0x100
[ 2411.416035][ T9128]  kmem_cache_alloc_noprof+0x88/0x710
[ 2411.416072][ T9128]  ? skb_clone+0x212/0x3a0
[ 2411.416108][ T9128]  skb_clone+0x212/0x3a0
[ 2411.416143][ T9128]  __netlink_deliver_tap+0x404/0x850
[ 2411.416188][ T9128]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2411.416220][ T9128]  netlink_deliver_tap+0x19c/0x1b0
[ 2411.416252][ T9128]  netlink_sendskb+0x68/0x140
[ 2411.416283][ T9128]  netlink_unicast+0x397/0x9e0
[ 2411.416309][ T9128]  ? __asan_memcpy+0x40/0x70
[ 2411.416352][ T9128]  ? __pfx_netlink_unicast+0x10/0x10
[ 2411.416396][ T9128]  netlink_rcv_skb+0x28c/0x470
[ 2411.416427][ T9128]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2411.416457][ T9128]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2411.416498][ T9128]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2411.416535][ T9128]  netlink_unicast+0x82f/0x9e0
[ 2411.416571][ T9128]  ? __pfx_netlink_unicast+0x10/0x10
[ 2411.416597][ T9128]  ? __alloc_skb+0x198/0x3a0
[ 2411.416620][ T9128]  ? netlink_sendmsg+0x642/0xb30
[ 2411.416646][ T9128]  ? skb_put+0x11b/0x210
[ 2411.416676][ T9128]  netlink_sendmsg+0x805/0xb30
[ 2411.416716][ T9128]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2411.416750][ T9128]  ? __import_iovec+0x5d4/0x7f0
[ 2411.416775][ T9128]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2411.416805][ T9128]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2411.416825][ T9128]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2411.416857][ T9128]  __sock_sendmsg+0x21c/0x270
[ 2411.416894][ T9128]  ____sys_sendmsg+0x505/0x820
[ 2411.416926][ T9128]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2411.416967][ T9128]  ? kstrtouint+0x6e/0xe0
[ 2411.417009][ T9128]  ___sys_sendmsg+0x21f/0x2a0
[ 2411.417040][ T9128]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2411.417068][ T9128]  ? get_pid_task+0x20/0x1f0
[ 2411.417096][ T9128]  ? get_pid_task+0x20/0x1f0
[ 2411.417122][ T9128]  ? get_pid_task+0x20/0x1f0
[ 2411.417181][ T9128]  ? __fget_files+0x2a/0x420
[ 2411.417206][ T9128]  ? __fget_files+0x3a0/0x420
[ 2411.417245][ T9128]  __sys_sendmsg+0x164/0x220
[ 2411.417276][ T9128]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2411.417314][ T9128]  ? __pfx_ksys_write+0x10/0x10
[ 2411.417348][ T9128]  __do_fast_syscall_32+0x1dc/0x570
[ 2411.417376][ T9128]  ? lockdep_hardirqs_on+0x7b/0x110
[ 2411.417398][ T9128]  ? do_fast_syscall_32+0x34/0x80
[ 2411.417424][ T9128]  ? irqentry_exit+0x10f/0x670
[ 2411.417451][ T9128]  do_fast_syscall_32+0x34/0x80
[ 2411.417478][ T9128]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2411.417506][ T9128] RIP: 0023:0xf7f82539
[ 2411.417534][ T9128] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2411.417558][ T9128] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2411.417582][ T9128] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800012c0
[ 2411.417599][ T9128] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2411.417613][ T9128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2411.417627][ T9128] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2411.417641][ T9128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2411.417673][ T9128]  </TASK>
[ 2412.188520][ T9136] netlink: 168 bytes leftover after parsing attributes in process `syz.8.9825'.
[ 2412.198395][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9826'.
[ 2412.213942][ T9136] netlink: 168 bytes leftover after parsing attributes in process `syz.8.9825'.
[ 2412.230609][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9826'.
[ 2413.009982][ T6023] usb 5-1: USB disconnect, device number 64
[ 2414.366057][ T9015] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 2414.554989][   T30] audit: type=1326 audit(1768300957.676:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9175 comm="syz.0.9833" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f51539 code=0x0
[ 2414.577917][ T9015] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 2414.597305][ T9015] usb 9-1: config 0 has no interface number 0
[ 2414.603472][ T9015] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2414.628434][ T9015] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2414.638842][ T9015] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2414.656578][ T9015] usb 9-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[ 2414.667133][ T9015] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2414.708791][ T9015] usb 9-1: config 0 descriptor??
[ 2415.320019][ T9189] netlink: 'syz.4.9834': attribute type 10 has an invalid length.
[ 2415.420363][ T9197] __nla_validate_parse: 8 callbacks suppressed
[ 2415.420389][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9834'.
[ 2415.520769][   T30] audit: type=1326 audit(1768300958.646:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.0.9836" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f51539 code=0x0
[ 2415.583840][ T9203] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9836'.
[ 2416.938093][ T9015] usbhid 9-1:0.1: can't add hid device: -71
[ 2416.946232][ T9015] usbhid 9-1:0.1: probe with driver usbhid failed with error -71
[ 2416.968975][ T9015] usb 9-1: USB disconnect, device number 4
[ 2472.729861][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 2472.736844][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2495.291595][ T7772] Bluetooth: hci5: command 0x0406 tx timeout
[ 2515.771114][ T7772] Bluetooth: hci0: command 0x0406 tx timeout
[ 2534.170362][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 2534.178844][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 2580.246216][   T31] INFO: task kworker/0:5:25380 blocked for more than 143 seconds.
[ 2580.254982][   T31]       Tainted: G             L      syzkaller #0
[ 2580.261649][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2580.271310][   T31] task:kworker/0:5     state:D stack:20768 pid:25380 tgid:25380 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 2580.283450][   T31] Workqueue: usb_hub_wq hub_event
[ 2580.288586][   T31] Call Trace:
[ 2580.291910][   T31]  <TASK>
[ 2580.295239][   T31]  __schedule+0x149b/0x4fd0
[ 2580.299902][   T31]  ? __pfx___schedule+0x10/0x10
[ 2580.304814][   T31]  ? schedule+0x91/0x360
[ 2580.309765][   T31]  schedule+0x165/0x360
[ 2580.313974][   T31]  usb_kill_urb+0x1be/0x2d0
[ 2580.318608][   T31]  ? __pfx_usb_kill_urb+0x10/0x10
[ 2580.323711][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2580.329973][   T31]  usb_start_wait_urb+0x1e3/0x4f0
[ 2580.335162][   T31]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 2580.340903][   T31]  usb_control_msg+0x232/0x3e0
[ 2580.346715][   T31]  hub_port_init+0xb1d/0x28e0
[ 2580.352415][   T31]  hub_event+0x2573/0x4ef0
[ 2580.356969][   T31]  ? __pfx_hub_event+0x10/0x10
[ 2580.361819][   T31]  ? process_scheduled_works+0x9ef/0x1770
[ 2580.367661][   T31]  ? process_scheduled_works+0x9ef/0x1770
[ 2580.373428][   T31]  ? process_scheduled_works+0x9ef/0x1770
[ 2580.380285][   T31]  process_scheduled_works+0xad1/0x1770
[ 2580.385976][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2580.392006][   T31]  ? do_raw_spin_lock+0x121/0x290
[ 2580.397171][   T31]  worker_thread+0x8a0/0xda0
[ 2580.402723][   T31]  ? __kthread_parkme+0x7b/0x200
[ 2580.408668][   T31]  kthread+0x711/0x8a0
[ 2580.412804][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 2580.418151][   T31]  ? __pfx_kthread+0x10/0x10
[ 2580.422802][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2580.428092][   T31]  ? __pfx_kthread+0x10/0x10
[ 2580.432794][   T31]  ret_from_fork+0x510/0xa50
[ 2580.437474][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2580.442632][   T31]  ? __switch_to+0xc9e/0x1480
[ 2580.448212][   T31]  ? __pfx_kthread+0x10/0x10
[ 2580.452896][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2580.458302][   T31]  </TASK>
[ 2580.461520][   T31] 
[ 2580.461520][   T31] Showing all locks held in the system:
[ 2580.471006][   T31] 1 lock held by khungtaskd/31:
[ 2580.475938][   T31]  #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2580.488519][   T31] 1 lock held by klogd/5190:
[ 2580.494360][   T31] 2 locks held by getty/5588:
[ 2580.499178][   T31]  #0: ffff88803068e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2580.510071][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[ 2580.520325][   T31] 5 locks held by kworker/0:5/25380:
[ 2580.525687][   T31]  #0: ffff88801e6c8548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 2580.537200][   T31]  #1: ffffc900045afbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 2580.550052][   T31]  #2: ffff8881453df198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0
[ 2580.559063][   T31]  #3: ffff888029753518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0
[ 2580.571326][   T31]  #4: ffff888144f34d68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0
[ 2580.583659][   T31] 
[ 2580.586108][   T31] =============================================
[ 2580.586108][   T31] 
[ 2580.594572][   T31] NMI backtrace for cpu 0
[ 2580.594595][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2580.594625][   T31] Tainted: [L]=SOFTLOCKUP
[ 2580.594634][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2580.594646][   T31] Call Trace:
[ 2580.594654][   T31]  <TASK>
[ 2580.594662][   T31]  dump_stack_lvl+0xe8/0x150
[ 2580.594694][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 2580.594727][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2580.594763][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 2580.594794][   T31]  sys_info+0x135/0x170
[ 2580.594821][   T31]  watchdog+0xf95/0xfe0
[ 2580.594857][   T31]  ? watchdog+0x20a/0xfe0
[ 2580.594892][   T31]  kthread+0x711/0x8a0
[ 2580.594920][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2580.594948][   T31]  ? __pfx_kthread+0x10/0x10
[ 2580.594979][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2580.594999][   T31]  ? __pfx_kthread+0x10/0x10
[ 2580.595028][   T31]  ret_from_fork+0x510/0xa50
[ 2580.595052][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2580.595072][   T31]  ? __switch_to+0xc9e/0x1480
[ 2580.595106][   T31]  ? __pfx_kthread+0x10/0x10
[ 2580.595135][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2580.595181][   T31]  </TASK>
[ 2580.595190][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 2580.721982][    C1] NMI backtrace for cpu 1
[ 2580.722003][    C1] CPU: 1 UID: 0 PID: 16090 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2580.722030][    C1] Tainted: [L]=SOFTLOCKUP
[ 2580.722037][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2580.722051][    C1] Workqueue: events_unbound toggle_allocation_gate
[ 2580.722079][    C1] RIP: 0010:__lock_acquire+0xb18/0x2cf0
[ 2580.722102][    C1] Code: 6c e7 0d 48 c7 c6 30 18 87 8d 67 48 0f b9 3a 90 48 bb eb 83 b5 80 46 86 c8 61 48 0f af dd 48 c1 eb 2d 48 8b 04 dd e0 c3 43 93 <48> 85 c0 0f 94 c1 48 83 c0 f8 0f 94 c2 08 ca 0f 84 1c 01 00 00 e8
[ 2580.722120][    C1] RSP: 0018:ffffc90003347490 EFLAGS: 00000802
[ 2580.722136][    C1] RAX: ffffffff93a5f0d8 RBX: 000000000006c66d RCX: 0000000000040000
[ 2580.722150][    C1] RDX: 00000000c2a26647 RSI: 00000000642db90a RDI: ffff88802beebd00
[ 2580.722164][    C1] RBP: ea97ee08ee6c0133 R08: ffffffff8213407e R09: ffff88813ff24078
[ 2580.722178][    C1] R10: dffffc0000000000 R11: fffff94000010de9 R12: ffff88802beec920
[ 2580.722193][    C1] R13: ffff88802beec920 R14: ffff88802beebd00 R15: 0000000000000006
[ 2580.722207][    C1] FS:  0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000
[ 2580.722224][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2580.722237][    C1] CR2: 00007f2b479386c8 CR3: 000000000dd3a000 CR4: 00000000003526f0
[ 2580.722255][    C1] Call Trace:
[ 2580.722263][    C1]  <TASK>
[ 2580.722276][    C1]  ? inat_get_escape_attribute+0x109/0x190
[ 2580.722308][    C1]  ? insn_get_opcode+0xb12/0x11b0
[ 2580.722330][    C1]  ? __pte_offset_map_lock+0x13e/0x210
[ 2580.722357][    C1]  lock_acquire+0x107/0x340
[ 2580.722375][    C1]  ? __pte_offset_map_lock+0x13e/0x210
[ 2580.722405][    C1]  ? rcu_is_watching+0x15/0xb0
[ 2580.722430][    C1]  _raw_spin_lock+0x2e/0x40
[ 2580.722464][    C1]  ? __pte_offset_map_lock+0x13e/0x210
[ 2580.722490][    C1]  __pte_offset_map_lock+0x13e/0x210
[ 2580.722520][    C1]  ? __kmalloc_node_track_caller_noprof+0xfb/0x820
[ 2580.722541][    C1]  __text_poke+0x2cf/0x990
[ 2580.722566][    C1]  ? __kmalloc_noprof+0xf7/0x800
[ 2580.722582][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[ 2580.722605][    C1]  ? rcu_is_watching+0x15/0xb0
[ 2580.722627][    C1]  ? __kmalloc_node_track_caller_noprof+0xfb/0x820
[ 2580.722646][    C1]  ? __pfx___text_poke+0x10/0x10
[ 2580.722673][    C1]  smp_text_poke_batch_finish+0x90a/0x1130
[ 2580.722703][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[ 2580.722730][    C1]  ? arch_jump_label_transform_queue+0x97/0x110
[ 2580.722763][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[ 2580.722791][    C1]  static_key_disable_cpuslocked+0xc5/0x1a0
[ 2580.722819][    C1]  static_key_disable+0x1a/0x20
[ 2580.722843][    C1]  toggle_allocation_gate+0x1a1/0x240
[ 2580.722865][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[ 2580.722887][    C1]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2580.722916][    C1]  ? process_scheduled_works+0x9ef/0x1770
[ 2580.722934][    C1]  ? process_scheduled_works+0x9ef/0x1770
[ 2580.722953][    C1]  process_scheduled_works+0xad1/0x1770
[ 2580.722983][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2580.723001][    C1]  ? do_raw_spin_lock+0x121/0x290
[ 2580.723033][    C1]  worker_thread+0x8a0/0xda0
[ 2580.723063][    C1]  kthread+0x711/0x8a0
[ 2580.723087][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 2580.723106][    C1]  ? __pfx_kthread+0x10/0x10
[ 2580.723131][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2580.723147][    C1]  ? __pfx_kthread+0x10/0x10
[ 2580.723171][    C1]  ret_from_fork+0x510/0xa50
[ 2580.723189][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 2580.723205][    C1]  ? __switch_to+0xc9e/0x1480
[ 2580.723234][    C1]  ? __pfx_kthread+0x10/0x10
[ 2580.723258][    C1]  ret_from_fork_asm+0x1a/0x30
[ 2580.723292][    C1]  </TASK>
[ 2581.084855][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 2581.091790][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2581.102497][   T31] Tainted: [L]=SOFTLOCKUP
[ 2581.106824][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 2581.116878][   T31] Call Trace:
[ 2581.120159][   T31]  <TASK>
[ 2581.123097][   T31]  vpanic+0x1e0/0x670
[ 2581.127101][   T31]  panic+0xb9/0xc0
[ 2581.130862][   T31]  ? __pfx_panic+0x10/0x10
[ 2581.135306][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 2581.140696][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 2581.146868][   T31]  watchdog+0xfdf/0xfe0
[ 2581.151040][   T31]  ? watchdog+0x20a/0xfe0
[ 2581.155386][   T31]  kthread+0x711/0x8a0
[ 2581.159556][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2581.164248][   T31]  ? __pfx_kthread+0x10/0x10
[ 2581.168879][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2581.174237][   T31]  ? __pfx_kthread+0x10/0x10
[ 2581.178847][   T31]  ret_from_fork+0x510/0xa50
[ 2581.183455][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2581.188581][   T31]  ? __switch_to+0xc9e/0x1480
[ 2581.193276][   T31]  ? __pfx_kthread+0x10/0x10
[ 2581.197910][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2581.202696][   T31]  </TASK>
[ 2581.206389][   T31] Kernel Offset: disabled
[ 2581.210772][   T31] Rebooting in 86400 seconds..