last executing test programs:

12m29.835364004s ago: executing program 4 (id=2540):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r1 = socket(0x2, 0x2, 0x1)
sendmsg$nl_netfilter(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x4000005)
bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e)
close_range(r0, 0xffffffffffffffff, 0x2)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000180)={0x1, 0x1}, 0x2)

12m28.603377851s ago: executing program 4 (id=2543):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xdbd76c996685eb82, 0x41071, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, 0x0, 0x0, 0xbff, 0x38, 0x0, 0x0, 0x40})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r3, 0x1, 0xffffffff, 0x25dfdbff, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x3}}, 0x10)

12m28.497578099s ago: executing program 4 (id=2544):
rt_sigreturn()
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1bffffffffffffc, 0x7, &(0x7f0000006680))
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x5}]}, {0x0, [0x5f, 0x0, 0x30, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x2c, 0x0, 0x1, 0x5}, 0x28)
capset(0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)

12m28.353839371s ago: executing program 4 (id=2545):
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x30, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = io_uring_setup(0x780b, &(0x7f0000000080)={0x0, 0xcc32, 0x2, 0x3, 0xc1})
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000300))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

12m27.710922785s ago: executing program 4 (id=2547):
syz_open_dev$video4linux(&(0x7f0000000780), 0x5, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async, rerun: 64)
socket$igmp(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x2, 0x0) (async)
syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0xfff, 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x2)
r1 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040), &(0x7f0000000600))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) (async)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000280)={0xa00, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x10, 0x100, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffb, 0x6, 0x80}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async, rerun: 32)
r4 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) (rerun: 32)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32)
r5 = fsmount(r4, 0x0, 0x0) (rerun: 32)
fchdir(r5) (async, rerun: 64)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc0042, 0x8) (async, rerun: 64)
lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) (async)
sched_setscheduler(0x0, 0x1, 0x0) (async)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) (async, rerun: 64)
socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) (rerun: 64)

12m27.551173285s ago: executing program 4 (id=2549):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

12m12.202124683s ago: executing program 32 (id=2549):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

4m16.800234283s ago: executing program 3 (id=6198):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(0x0)
r0 = open(&(0x7f0000000300)='.\x00', 0x8000, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

4m16.707178897s ago: executing program 3 (id=6201):
unshare(0x22020600)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32], 0x48)

4m16.569742644s ago: executing program 3 (id=6204):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0x7fffffffffffffff], 0x0, 0x200})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffa, 0x4, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x800000000000004, 0x2, 0x400, 0x40000000, 0x88, 0x7, 0x4000000007, 0x8d], 0x41000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m14.550302659s ago: executing program 3 (id=6221):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x8, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50)

4m14.50373247s ago: executing program 1 (id=6222):
sched_setattr(0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xf7c, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x80}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xf18, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_LINK={0x8, 0x3, 0x2c0000}, @TCA_U32_INDEV={0x14, 0x8, 'team0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0xfe}, @TCA_U32_LINK={0x8, 0x3, 0x80000001}, @TCA_U32_ACT={0xee0, 0x7, [@m_ctinfo={0x8c, 0xe, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfa}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x3, 0x5, 0xa, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}]}, {0x2d, 0x6, "0d76738cc19cb2b5081b6f8319738a116bf96408f7dd158d84fe7037e3b8ea13082f958c9213d9247c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0xfffffffe, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x3e5, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xc, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xf7c}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m14.448008976s ago: executing program 3 (id=6224):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(0x0, 0x8000, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

4m14.343619794s ago: executing program 1 (id=6226):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
dup(r0)
socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0})
socket$packet(0x11, 0x3, 0x300)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0xff, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4m14.271175935s ago: executing program 3 (id=6227):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"])
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3, 0x1}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000001480)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r3, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5cedffff0f000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fea2857d3cb5f71a28001280110001006272696467655f736c6176650000000010000580040018000500080000000000140003006272696467655f736c6176655f300000"], 0x5c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan1\x00'})

4m13.276470533s ago: executing program 1 (id=6230):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r2, &(0x7f0000000100)=[{}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)

4m11.245676702s ago: executing program 1 (id=6237):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff25, 0x0, 0x0, 0x0}, 0x94)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="cce69c380e8149c135"], 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0}}, 0x40)

4m11.139571636s ago: executing program 1 (id=6238):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(0x0, 0x8000, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

4m11.072251166s ago: executing program 1 (id=6240):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3})

3m59.161267868s ago: executing program 33 (id=6227):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"])
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3, 0x1}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000001480)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r3, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5cedffff0f000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fea2857d3cb5f71a28001280110001006272696467655f736c6176650000000010000580040018000500080000000000140003006272696467655f736c6176655f300000"], 0x5c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
socket$packet(0x11, 0x3, 0x300)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan1\x00'})

3m55.668801444s ago: executing program 34 (id=6240):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3})

15.448102493s ago: executing program 6 (id=6874):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
getpgrp(0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x19cc84f3a4a3cf26, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x450040, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r6=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", <r7=>0xffffffffffffffff})
r8 = inotify_init1(0x80000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$INOTIFY_IOC_SETNEXTWD(r8, 0x40044900, 0xaa2)
r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x5, 0x108}, &(0x7f0000000040), &(0x7f0000000200))
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0619, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCRMFF(r9, 0xc0085508, 0x0)
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00a5000000000000000000625c00fe02cf593f94", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c0000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000003fee0001000000000000000000"], 0x50)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

13.665391065s ago: executing program 0 (id=6876):
openat$nullb(0xffffffffffffff9c, 0x0, 0x8142, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, 0x0, 0x0)
r1 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$smackfs_label(r1, 0x0, 0x5)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
recvmsg(r2, 0x0, 0x1f00)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae03, 0x64)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = getpid()
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200000, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0)

12.031088067s ago: executing program 0 (id=6877):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
ptrace$getenv(0x4201, r1, 0x80000000000843, &(0x7f0000000140))
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setfsgid(0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
r5 = getgid()
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001780)="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", 0x2000, &(0x7f0000006200)={&(0x7f0000000380)={0x50, 0x0, 0x1, {0x7, 0x2d, 0xb28, 0x140, 0x3, 0x361b, 0x200, 0x80000000, 0x0, 0x0, 0x10, 0x8}}, &(0x7f0000000400)={0x18, 0x0, 0x294b172a, {0x6}}, &(0x7f0000000440)={0x18, 0x0, 0x1, {0x5}}, &(0x7f0000000480)={0x18, 0x0, 0xfff, {0x1}}, &(0x7f00000004c0)={0x18, 0xffffffffffffffda, 0x5, {0x19}}, &(0x7f0000000500)={0x28, 0xffffffffffffffda, 0x8, {{0x5, 0x5, 0x2, r0}}}, &(0x7f0000000540)={0x60, 0x0, 0x5, {{0x4, 0xfde, 0x223, 0x7, 0x2, 0x1, 0x80000000, 0x3}}}, &(0x7f00000005c0)={0x18, 0xffffffffffffffda, 0x4, {0x5}}, &(0x7f0000000600)={0x1f, 0xfffffffffffffff5, 0x9, {'/dev/cpu/#/msr\x00'}}, &(0x7f0000000640)={0x20, 0x0, 0x3}, &(0x7f0000003780)={0x78, 0x0, 0x7, {0x1, 0x8, 0x0, {0x5, 0x7, 0x2, 0xca8f, 0x9, 0x6, 0x6, 0x3, 0x4, 0x8000, 0x2, 0x0, 0xee01, 0x0, 0x227}}}, &(0x7f00000039c0)={0x90, 0x0, 0x6, {0x1, 0x1, 0x5, 0x3, 0x5c11, 0x0, {0x0, 0x10001, 0x4, 0x2d3a7699, 0x1, 0x1, 0x0, 0x1, 0x170c, 0xd000, 0x8, 0x0, 0x0, 0x4, 0x3}}}, &(0x7f0000003a80)={0x58, 0xffffffffffffffda, 0x6, [{0x2, 0x4, 0xf, 0x80, '/dev/cpu/#/msr\x00'}, {0x3, 0x8, 0x1, 0x1, '+'}]}, &(0x7f0000003c40)={0x200, 0x8f1b2aaa3a32c74c, 0x1, [{{0x1, 0x1, 0x68121669, 0x8000000000000001, 0x81, 0x1, {0x2, 0x6, 0x0, 0x6, 0xb62, 0x4, 0xe, 0x8, 0x1, 0xa000, 0xc, 0xee00, 0x0, 0xfffff7a7, 0xb}}, {0x3, 0x84, 0xf, 0x6, '/dev/cpu/#/msr\x00'}}, {{0x5, 0x2, 0x1000, 0x4, 0x4, 0x3, {0x6, 0x7f, 0x7, 0x9, 0x2, 0x5, 0x3ff, 0x101, 0x7fff, 0x2000, 0x80000000, 0x0, 0x0, 0x800}}, {0x4, 0x80, 0x2, 0x3, '--'}}, {{0x0, 0x0, 0x9, 0x9, 0x2, 0x0, {0x4, 0x9, 0x1, 0xd, 0x4, 0x0, 0xc, 0x6, 0x1, 0x6000, 0xd810, r4, r5, 0x6, 0x4}}, {0x5, 0xbb, 0xf, 0x3, '/dev/cpu/#/msr\x00'}}]}, &(0x7f0000003f80)={0xa0, 0x0, 0x1000, {{0x3, 0x3, 0x7, 0x360000000, 0x3, 0x5, {0x3, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x5, 0x8, 0x5, 0x200, 0x2000, 0x7b, 0x0, 0x0, 0x6022, 0xed0}}, {0x0, 0x8}}}, &(0x7f0000004040)={0x20, 0xfffffffffffffffe, 0x56bd, {0xffffffff, 0x4, 0xef2f, 0x40}}, &(0x7f00000060c0)={0x130, 0xffffffffffffffda, 0xffffffffffffffc0, {0xad5, 0x6, 0x0, '\x00', {0x465aac3413860553, 0xbe, 0xfffffffffffffff8, 0x6, 0x0, 0x0, 0x9000, '\x00', 0x9, 0x4, 0x1ff, 0xfffffffffffffffd, {0x4, 0xfffffffb}, {0xd9e, 0x84}, {0x0, 0xfffffff5}, {0x9, 0xbf6}, 0x6, 0x101, 0x5, 0x8001}}}})
socket$inet(0x2, 0x2, 0x1)

9.887485608s ago: executing program 6 (id=6880):
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4044)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000280)=0x3)
readv(r1, &(0x7f0000000140)=[{0x0}], 0x1)
r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xd6ca, 0x80, 0xffffffff, 0x8000021e}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
timer_create(0x0, 0x0, &(0x7f0000000180)=<r5=>0x0)
timer_settime(r5, 0x1, &(0x7f0000000200)={{0x0, 0x3938700}}, &(0x7f0000000240))
io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40002101, 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)

7.736649061s ago: executing program 5 (id=6884):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

7.660271638s ago: executing program 6 (id=6885):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f00000001c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r6, &(0x7f0000000100), 0x0)
close_range(r5, r6, 0x0)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001fc000000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0)=0x10046, 0x4)

6.5227745s ago: executing program 6 (id=6886):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0xc09d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8800000000000000000000000000010000000000000000000000000000001000000000000000002000"/108], 0x184}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6.40528332s ago: executing program 5 (id=6887):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000100)={0x3, 0x200, 0xde4, 0x5, 0x80000, 0x1})

5.814911265s ago: executing program 2 (id=6889):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xeb4, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xe60, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_ACT={0xe54, 0x7, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0xfffffffe, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x3e5, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xc, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xeb4}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5.684462277s ago: executing program 2 (id=6890):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="70ffa6001200030200"/49, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100"], 0x70}}, 0x0)

4.647242491s ago: executing program 0 (id=6891):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet(0x2, 0x3, 0xd)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqsrc(r1, 0x0, 0x53, 0x0, &(0x7f0000000040))
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff}}, 0x24)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
r4 = accept4(r0, 0x0, 0x0, 0x0)
accept4$ax25(r4, 0x0, 0x0, 0x80000)

4.549670877s ago: executing program 2 (id=6892):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
fsetxattr$security_evm(r1, &(0x7f0000001b80), &(0x7f0000001bc0)=@v2={0x5, 0x1, 0xa, 0x9}, 0x9, 0x3)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0xda, 0x8})
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b000500", 0x100, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", '\x00', "0000000000000000001000"]})
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x9, 0xd7, 0x7fffffff, 0x7, 0xffffffde, 0x10100, "0000000000000000000000000000eeff", 0x0, 0x7, 0x2, 0x5, 0x80, 0x7, 0x4})

4.323914903s ago: executing program 7 (id=6894):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, 0x0, 0x804)

4.308757657s ago: executing program 6 (id=6895):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
getpgrp(0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x19cc84f3a4a3cf26, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x450040, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r6=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", <r7=>0xffffffffffffffff})
r8 = inotify_init1(0x80000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$INOTIFY_IOC_SETNEXTWD(r8, 0x40044900, 0xaa2)
r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x5, 0x108}, &(0x7f0000000040), &(0x7f0000000200))
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0619, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$EVIOCRMFF(r9, 0xc0085508, 0x0)
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00a5000000000000000000625c00fe02cf593f94", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c0000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000003fee0001000000000000000000"], 0x50)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4.155811463s ago: executing program 7 (id=6896):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f00000001c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r6, &(0x7f0000000100), 0x0)
close_range(r5, r6, 0x0)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001fc000000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0)=0x10046, 0x4)

3.832516757s ago: executing program 2 (id=6897):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

3.022460371s ago: executing program 7 (id=6898):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffffffffffd97, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r1, @ANYBLOB="80008f0b0a000200aaaaaaaaaaaa000008000f"], 0x30}, 0x1, 0x0, 0x0, 0x404c841}, 0x4018)

2.867926513s ago: executing program 7 (id=6899):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x2, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@rdma_dest={0x18, 0x114, 0x2, {0x4, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x30}, 0x0)
r3 = dup(r1)
r4 = dup(r3)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r6})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, 0x0)
r7 = socket$kcm(0xf, 0x3, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd29, 0x0, {0x4}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
openat(r4, &(0x7f00000002c0)='./file0\x00', 0x840c0, 0x10)
sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00')
lseek(r11, 0x0, 0x1)
sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000940)={0x190, 0x1, 0x2, 0x403, 0x0, 0x0, {0x2}, [@CTA_EXPECT_NAT={0x17c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

2.75288017s ago: executing program 5 (id=6900):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newtfilter={0xeb4, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_u32={{0x8}, {0xe60, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xffef, 0xfff1}}, @TCA_U32_ACT={0xe54, 0x7, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0xfffffbff, 0x10000000, 0x2, 0x8}, 0x80, 0xd}, [{0xc9, 0x2, 0x1, 0x400, 0x8, 0x1}, {0x0, 0x6, 0x47ecf86e, 0x0, 0x1, 0x6}, {0x2, 0x2072, 0x425, 0x7fff, 0x1, 0x77}, {0x1, 0x8, 0x10001, 0x1, 0x4, 0x10}, {0x5, 0x1000, 0x2, 0x83, 0x3, 0x8}, {0xfffffffc, 0x8, 0x1, 0x1, 0x80000000}, {0x5d, 0x1000, 0x1ff, 0xe849, 0x8, 0x4}, {0x7, 0x2, 0x28, 0x4, 0x7, 0x7}, {0x8, 0x1, 0x9b, 0x6, 0x4, 0x8000}, {0x80, 0x2, 0x7, 0x5, 0x7ff, 0x893}, {0x2, 0x2, 0x5, 0x3, 0x65, 0x9}, {0x1, 0x4, 0x4, 0x9, 0x6, 0xe}, {0xffff, 0x100, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x7ff, 0x5, 0x7, 0x5, 0x1}, {0x7, 0x7fff, 0x0, 0x4004, 0x9, 0x80}, {0x5, 0x48, 0xa94, 0x6, 0xffffffff, 0xff}, {0x7, 0xff00, 0x4, 0x7, 0x9, 0xb}, {0x5, 0xa3, 0xb, 0x9, 0x4800, 0x6b}, {0x9, 0x1, 0x2, 0x1, 0x8, 0x2f1}, {0xd32, 0x1000, 0x80, 0x81, 0x9, 0x1}, {0xf5, 0x9, 0x3, 0xb000000, 0x4, 0x5}, {0x4, 0x400, 0x1, 0x7ff, 0x36, 0x7}, {0xfffffffe, 0x80000000, 0x3, 0x0, 0xc, 0x1}, {0x10, 0x3, 0x3, 0x7, 0x2, 0xfffffffa}, {0xfffffff7, 0x4, 0x1, 0x6c88, 0x5, 0x10000}, {0x9, 0xec35, 0x2, 0x9, 0x6, 0x9}, {0x2, 0x0, 0x3, 0x8, 0x6, 0x1000}, {0xfffffffb, 0x200, 0x2, 0x5, 0xfffffffc, 0x7}, {0x3, 0x401, 0x1, 0xf3, 0xef0, 0xfffffffa}, {0x3, 0x0, 0x8, 0xe32, 0x400, 0x8}, {0x7f, 0x4, 0xfffffffe, 0xfffffffb, 0x1, 0x80}, {0x4, 0x8, 0x6, 0x99, 0x6, 0x1000}, {0x593, 0x8, 0x6, 0x7, 0xd2df, 0x4}, {0x0, 0x7, 0x1, 0xaf96, 0x10, 0xfffffff7}, {0x0, 0x5, 0x1ff, 0x7, 0x1ff, 0x4}, {0x3, 0x3ff, 0x3, 0x3, 0x19, 0xb5}, {0x2, 0x3, 0xf0, 0xff, 0xfffffffe, 0x8b}, {0x10000, 0x1ff, 0x2, 0x97cf, 0x45b}, {0x9, 0x3, 0x80000000, 0x80000000, 0x0, 0xb}, {0x9, 0xd9f5, 0xe3, 0xb, 0x5, 0x4}, {0x7, 0xf, 0x2, 0x3, 0x10000, 0xfffff001}, {0x8, 0xfffffffb, 0xfff, 0x4, 0x731b482, 0x8}, {0x1, 0xc738, 0x9, 0x2, 0x8, 0x7}, {0x7, 0x7ff, 0x8, 0xffffffd8, 0x0, 0xfffffffb}, {0x200, 0x3, 0x3, 0xfff, 0x2, 0x2}, {0x0, 0x1, 0xff, 0xffffd21c, 0x4, 0x3}, {0xe2, 0x0, 0x9, 0x4, 0xfffff001, 0x400}, {0x0, 0x1000, 0x80, 0x4, 0x4f, 0xfffffffe}, {0x7e, 0x400, 0x8, 0x5, 0x7, 0x8}, {0x8, 0x0, 0x6, 0x2, 0x5, 0xffffff81}, {0x8, 0x100, 0xff, 0x1ff, 0x964, 0x8000}, {0x80, 0x0, 0x3, 0x4, 0x1, 0x18}, {0x5, 0xcc7, 0x8, 0x80, 0x0, 0x1}, {0x3, 0x4, 0x5, 0x7e, 0x8, 0xfffffff5}, {0x2, 0x9, 0x8, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x3ff, 0x2df, 0x6}, {0xc, 0x20c05, 0xb, 0x101, 0x2}, {0x3, 0x56, 0x6, 0x3, 0x7, 0x9}, {0x5, 0x6, 0x8, 0x7, 0x7, 0x1}, {0x5, 0x7, 0x9, 0xd3, 0x8, 0x1}, {0x3, 0x1, 0x455, 0xc9000000, 0x9, 0x10000}, {0x9, 0x8, 0x8, 0x0, 0x1, 0x9}, {0xb47, 0x1, 0x2, 0x852, 0xf, 0xff}, {0xe, 0x3, 0x401, 0x3, 0x9, 0xffffa36b}, {0x4, 0x80000001, 0x2, 0x9f0, 0x2, 0x6}, {0xfffffffc, 0x80000000, 0x0, 0x0, 0xd, 0x4}, {0x5, 0x4, 0x401, 0x0, 0x9, 0x1}, {0x1, 0x5, 0x8, 0x0, 0x7, 0x1000}, {0xa, 0x80, 0x6, 0x9, 0x5852, 0x1}, {0x2, 0x0, 0x7fffffff, 0xa4c8, 0x5, 0x4}, {0x9, 0x12, 0x101, 0x1000, 0x2, 0x1}, {0x6, 0x10001, 0x100, 0x3, 0xff}, {0x7d, 0x4, 0x7, 0x0, 0x81, 0x7}, {0x80000000, 0x4f, 0x101, 0x8, 0xe, 0x6}, {0x187, 0x5, 0x6, 0x1, 0x6, 0x1000}, {0x0, 0xf, 0x1, 0x8e, 0x4, 0x8}, {0x1, 0x2, 0x9, 0xffffffb5, 0x17a, 0x1}, {0x81, 0x0, 0x7ff, 0x8, 0x8001, 0x1}, {0x81, 0x2, 0x1, 0x1, 0x5, 0x6}, {0x10000, 0x2, 0x1000, 0x81, 0x4, 0x7}, {0x1, 0x1, 0x80000001, 0x6, 0x7fff, 0xfffffff8}, {0x5, 0x5, 0xad, 0x2, 0x400, 0x3}, {0x9, 0x9, 0x6, 0x2, 0x8, 0x94a}, {0x2, 0x1, 0x6, 0x10000, 0x9366, 0x5}, {0xff, 0x3, 0x4, 0x2, 0x4, 0x2}, {0x1ff, 0x7f, 0x0, 0x4, 0x6, 0x5}, {0x4, 0x9, 0x6, 0x100000, 0xfa1, 0xfffffff5}, {0x7, 0x101, 0x93d0, 0xf3, 0x3, 0x9}, {0x8000, 0x2, 0x0, 0xfb7, 0x8, 0x1000}, {0x7fff, 0x0, 0x3, 0xfffffffe, 0xff, 0x8}, {0x1a4e, 0x9, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x7, 0x0, 0xf, 0x0, 0x4}, {0x9, 0x9, 0x8, 0xbc5, 0x81, 0x100}, {0x40, 0x4, 0x7, 0x800, 0x4, 0x7}, {0xb12a, 0x9, 0xa9, 0x1ff, 0x6, 0x7}, {0x100, 0x1b00, 0x1ff, 0x5, 0x1, 0x8}, {0x5df, 0x7fff, 0xc000, 0x8, 0x5, 0xca4}, {0xf, 0xa, 0x6, 0x3, 0x10000, 0x6}, {0x7, 0x200, 0x5, 0x510, 0x8, 0x7}, {0x5cc0e9e5, 0x3, 0x0, 0x7fff, 0x7fffffff, 0x5}, {0x10, 0xfff, 0xffffffff, 0x3ff, 0x1, 0x8}, {0x1, 0x1, 0xd, 0xfff, 0x2, 0x35d}, {0x6, 0x8, 0x6, 0x8, 0x8, 0x3ff}, {0x7, 0x7, 0x5, 0x6, 0x2, 0xcdf}, {0x9, 0x7, 0xa92c, 0x9, 0xa8, 0x4}, {0x1, 0x9, 0x10001, 0xfa6, 0x3, 0x8}, {0x5, 0xdad, 0x1, 0xe2f, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x6, 0x1, 0x8001}, {0xb, 0x439d3188, 0xffff, 0x5, 0x1ff, 0x1}, {0xe2a0, 0x54, 0xffffffff, 0x6, 0x3, 0x80000000}, {0x1000, 0x4, 0xd3, 0x4, 0xdc, 0x2}, {0x6, 0x2, 0x8, 0x4, 0xfe3, 0x4}, {0x6, 0x4, 0x8, 0x9, 0x7f, 0x8}, {0x9, 0x2, 0x5, 0xfffffff8, 0xffffffff, 0x10001}, {0x0, 0x4, 0x30d, 0x2, 0x3e5, 0x7}, {0x8, 0xfff, 0x9, 0x2, 0x1, 0x8}, {0x8, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff}, {0x80000001, 0x5, 0x80000001, 0xdc, 0x2}, {0x80, 0x4, 0x0, 0x7, 0x1, 0x8}, {0x2, 0x200, 0x5be, 0xfffffff3, 0x7, 0x800}, {0x1000, 0x1, 0x3, 0x9, 0xa, 0x5}, {0xc, 0x4000000, 0x5ea, 0x10, 0x8, 0x80000000}, {0xf, 0x2, 0x80000001, 0x5, 0x2a59, 0x1}, {0x3e87, 0x3, 0x5, 0x9, 0x1, 0x9}, {0xffffff64, 0x0, 0x7, 0x3, 0xae85, 0x25c98821}, {0x0, 0x7, 0xd, 0x400, 0x6, 0xe6c}, {0xffffffff, 0x2, 0x0, 0x100, 0x4, 0x5855}, {0x6528, 0x5, 0x96, 0x8001, 0xe246, 0x6}], [{0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x7}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x6, 0x1}, {}, {}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2}, {0xe2e05a6e9f46ef72, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x9a2799bccd0b4636, 0x1}, {0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xeb4}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.751242919s ago: executing program 2 (id=6901):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0)

2.642403756s ago: executing program 5 (id=6902):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x1e, &(0x7f0000000080)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x1}}, {@llc={0x4, {@llc={0xdc, 0xe, "bd", "512061e1c2"}}}}}, 0x0)

2.198100862s ago: executing program 5 (id=6903):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setresuid(0x0, 0xee01, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009180)=@newtaction={0x70, 0x30, 0x519, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0xffffff29, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffe, 0x0, 0x10000000, 0x40000008, 0xfffffbff}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x8, 0x1}]}, 0x10)
listen(r1, 0x5)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r5, &(0x7f0000847fff)="af", 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000040)={0x3, 0x80, 0x5, 0x578}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

2.155847198s ago: executing program 0 (id=6904):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x804)

2.099822805s ago: executing program 6 (id=6905):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x20050800)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x85, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0xf9, 0x0, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "f3ff2ddb"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x2, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@country_functional={0xe, 0x24, 0x7, 0x2, 0x9, [0x5, 0xfff, 0x20, 0xd8ab]}, @obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x8, 0xec}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x1, 0x17}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x80, 0xfe, 0x8, 0x8, 0x7}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x5c40}}, {0xf6, &(0x7f0000000200)=@string={0xf6, 0x3, "681bc7cccd82a9f44982881e2fd765ba93c2893025baa389cb884d3ad9127c132113abbadad00527937eb706f32eed7f271328c6b6f96644d256cd25ac5c53bc0c325ab25da3266b6030e08395afa16e0796e45c16d3c409e0b3d3c2b56fced11a1bc2cafdca093dae84f32c12af5d21512451c53cb646022e96cba54cd392235d1c52bf1bd37d849bd8b24c85c6bd4097f91c807b71f46599a3c7b2282c5fc156c69a2e40301dccb5197153bd1471e6c3cbe689a8041d83a6c90db97958a69e5ec68c53787496b0710da171e96f0c70739e55a46a488614c0b48de82aa29de8b4444daec0b686523830d161169038f00327a30d"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc1a}}, {0x27, &(0x7f0000000440)=@string={0x27, 0x3, "f459013b615b5a74d25df93c42b6915d897c194f31b8ef23ca7b683aa4d5a0f1b9635e858d"}}]})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)

1.71000251s ago: executing program 5 (id=6906):
clock_settime(0xfffffffb, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000100)={0x3, 0x200, 0xde4, 0x5, 0x80000, 0x1})

1.699148101s ago: executing program 0 (id=6907):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r0, r0, &(0x7f00000000c0)=0x54, 0x2000000005)

1.507416518s ago: executing program 7 (id=6908):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f00000001c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket(0x10, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r6, &(0x7f0000000100), 0x0)
close_range(r5, r6, 0x0)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001fc000000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0)=0x10046, 0x4)

1.224003584s ago: executing program 0 (id=6909):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001fc0)={'ip6gre0\x00', &(0x7f0000001f40)={'syztnl1\x00', 0x0, 0x29, 0x9f, 0xb, 0x7fff, 0x23, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x80, 0x3cd8, 0x1, 0x1}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000002c0)={0xd3, [], 0xa, "e6e56fc24d1910"})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r6, 0x0, 0x0)
io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x82, 0x1, 0x7a})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r1, 0xfffff000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0)

473.653642ms ago: executing program 7 (id=6910):
keyctl$clear(0x11, 0xfffffffffffffffd)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="17000100000010000600"/20, @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r3, 0x0, 0x20000000}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x12, r6, {0x0, 0x2}, {0xffff, 0x8}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 2 (id=6911):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x800, 0x4)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000f40), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400), 0x80201, 0x0)
write$vga_arbiter(r6, &(0x7f0000000440)=ANY=[@ANYBLOB='trylock i'], 0xf)
shutdown(r5, 0x0)
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000800), 0x54800, 0x0)
close(r7)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={<r9=>r8, @in6={{0xa, 0x3, 0x5, @loopback}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x30}], 0x1, 0x4)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r9, 0x4, 0xd}, 0x8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

kernel console output (not intermixed with test programs):

52208][T22871] hsr_slave_1: entered promiscuous mode
[ 1024.953260][T22871] debugfs: 'hsr0' already exists in 'hsr'
[ 1024.953285][T22871] Cannot create hsr debugfs directory
[ 1025.120388][ T1246] usb 8-1: USB disconnect, device number 4
[ 1025.468384][ T1115] IPVS: stopping backup sync thread 18705 ...
[ 1030.059487][ T1115] batadv0: left promiscuous mode
[ 1030.238942][ T1115] hsr_slave_0: left promiscuous mode
[ 1030.286019][ T1115] hsr_slave_1: left promiscuous mode
[ 1030.286974][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1030.287000][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1030.347957][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1030.347986][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1030.459334][T13660] block nbd7: Receive control failed (result -32)
[ 1030.475199][T23129] block nbd7: shutting down sockets
[ 1030.692592][T23148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6527'.
[ 1030.777802][ T1115] veth1_macvtap: left promiscuous mode
[ 1030.778121][ T1115] veth0_macvtap: left promiscuous mode
[ 1030.778489][ T1115] veth1_vlan: left promiscuous mode
[ 1030.778660][ T1115] veth0_vlan: left promiscuous mode
[ 1034.755334][ T1246] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1034.940510][ T1246] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1034.940581][ T1246] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.940600][ T1246] usb 7-1: Product: syz
[ 1034.940609][ T1246] usb 7-1: Manufacturer: syz
[ 1034.940618][ T1246] usb 7-1: SerialNumber: syz
[ 1034.944255][ T1246] usb 7-1: config 0 descriptor??
[ 1034.980781][ T1246] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1035.091959][ T1115] team0 (unregistering): Port device team_slave_1 removed
[ 1035.393190][ T1115] team0 (unregistering): Port device team_slave_0 removed
[ 1036.255494][ T1246] gspca_sunplus: reg_r err -71
[ 1036.255559][ T1246] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[ 1036.266234][ T1246] usb 7-1: USB disconnect, device number 3
[ 1041.584468][T13660] block nbd5: Receive control failed (result -32)
[ 1041.589005][T23203] block nbd5: shutting down sockets
[ 1041.602440][   T37] audit: type=1326 audit(1769353615.217:12050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23197 comm="syz.6.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747e4acb9 code=0x7ffc0000
[ 1041.603091][   T37] audit: type=1326 audit(1769353615.217:12051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23197 comm="syz.6.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f1747e4acb9 code=0x7ffc0000
[ 1041.603342][   T37] audit: type=1326 audit(1769353615.217:12052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23197 comm="syz.6.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747e4acb9 code=0x7ffc0000
[ 1041.603845][   T37] audit: type=1326 audit(1769353615.217:12053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23197 comm="syz.6.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747e4acb9 code=0x7ffc0000
[ 1041.604118][   T37] audit: type=1326 audit(1769353615.217:12054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23197 comm="syz.6.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1747e4acb9 code=0x7ffc0000
[ 1041.877763][   T37] audit: type=1326 audit(1769353615.497:12055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23197 comm="syz.6.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747e4acb9 code=0x7ffc0000
[ 1041.877796][   T37] audit: type=1326 audit(1769353615.497:12056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23197 comm="syz.6.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747e4acb9 code=0x7ffc0000
[ 1042.795330][ T1246] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1042.996021][ T1246] usb 7-1: Using ep0 maxpacket: 32
[ 1043.001801][ T1246] usb 7-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3
[ 1043.001833][ T1246] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1043.001854][ T1246] usb 7-1: Product: syz
[ 1043.001870][ T1246] usb 7-1: Manufacturer: syz
[ 1043.001885][ T1246] usb 7-1: SerialNumber: syz
[ 1043.006790][ T1246] usb 7-1: config 0 descriptor??
[ 1043.244340][ T1246] f81534a_ctrl 7-1:0.0: probe with driver f81534a_ctrl failed with error -71
[ 1043.303134][ T1246] usb 7-1: USB disconnect, device number 4
[ 1043.505349][T17360] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1043.704259][T17360] usb 6-1: too many configurations: 25, using maximum allowed: 8
[ 1043.735458][T17360] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1043.735490][T17360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1043.735510][T17360] usb 6-1: Product: syz
[ 1043.735524][T17360] usb 6-1: Manufacturer: syz
[ 1043.735538][T17360] usb 6-1: SerialNumber: syz
[ 1044.126106][T17360] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1044.126174][T17360] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1044.131243][T17360] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1044.337105][T17360] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[ 1044.359011][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6547'.
[ 1044.440956][T17360] usb 6-1: USB disconnect, device number 24
[ 1045.841335][T10305] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1046.037547][T10305] usb 7-1: config 0 has an invalid interface number: 106 but max is 0
[ 1046.037579][T10305] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1046.037599][T10305] usb 7-1: config 0 has no interface number 0
[ 1046.037649][T10305] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1046.037672][T10305] usb 7-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1046.037715][T10305] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1046.037736][T10305] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.057405][T10305] usb 7-1: config 0 descriptor??
[ 1046.181424][T10305] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1046.354543][ T5961] usb 7-1: Failed to submit usb control message: -71
[ 1046.354582][ T5961] usb 7-1: unable to send the bmi data to the device: -71
[ 1046.354600][ T5961] usb 7-1: unable to get target info from device
[ 1046.354616][ T5961] usb 7-1: could not get target info (-71)
[ 1046.354634][ T5961] usb 7-1: could not probe fw (-71)
[ 1046.356194][ T1884] usb 7-1: USB disconnect, device number 5
[ 1046.936202][T22871] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1047.021326][T22871] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1047.471048][T23269] netlink: 'syz.0.6554': attribute type 8 has an invalid length.
[ 1047.632597][T22871] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1047.942941][T23271] overlayfs: failed to resolve './file0': -2
[ 1048.145288][T22871] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1049.856529][T23291] overlayfs: failed to clone upperpath
[ 1050.288819][T23301] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1050.339502][T23305] bond2: (slave gretap2): Enslaving as an active interface with an up link
[ 1050.361355][T22871] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1050.445357][ T5871] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1050.446720][T22871] 8021q: adding VLAN 0 to HW filter on device team0
[ 1050.472963][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1050.473189][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1050.501731][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1050.502069][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1050.610042][T23312] overlayfs: failed to clone upperpath
[ 1050.642044][ T5871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1050.642081][ T5871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1050.642103][ T5871] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1050.642130][ T5871] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1050.642143][ T5871] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.663825][ T5871] usb 8-1: config 0 descriptor??
[ 1051.205335][ T5871] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[ 1052.554520][T23326] overlayfs: failed to resolve './file0': -2
[ 1052.640766][T23315] block nbd6: shutting down sockets
[ 1053.054184][T22871] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1053.316265][T23334] binder: 23333:23334 ioctl c0306201 200000000240 returned -11
[ 1053.352167][ T1884] usb 8-1: USB disconnect, device number 5
[ 1053.493665][T23336] netlink: 'syz.0.6568': attribute type 8 has an invalid length.
[ 1054.485255][T23343] netlink: 'syz.7.6570': attribute type 8 has an invalid length.
[ 1054.510647][T23343] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1054.545600][T23343] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1054.916559][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.916631][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.021539][T22871] veth0_vlan: entered promiscuous mode
[ 1055.064632][T22871] veth1_vlan: entered promiscuous mode
[ 1055.188242][T22871] veth0_macvtap: entered promiscuous mode
[ 1055.206694][T22871] veth1_macvtap: entered promiscuous mode
[ 1055.264648][T22871] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1055.346982][T22871] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1056.223425][ T4693] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.224221][ T4693] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.224690][ T4693] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.258382][ T4693] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.377890][T23361] overlayfs: failed to resolve './file0': -2
[ 1056.832407][T23369] netlink: 'syz.5.6576': attribute type 8 has an invalid length.
[ 1057.338692][T23369] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1057.339382][T23369] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1058.010381][T23385] netlink: 'syz.5.6580': attribute type 8 has an invalid length.
[ 1058.753928][T23391] binder_alloc: 23388: binder_alloc_buf, no vma
[ 1058.754574][T23391] binder: 23388:23391 ioctl c0306201 200000000240 returned -11
[ 1058.955255][T10305] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1059.085307][T10305] usb 6-1: device descriptor read/64, error -71
[ 1059.164138][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1059.164162][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1059.326794][T23401] netlink: 'syz.0.6588': attribute type 8 has an invalid length.
[ 1059.521792][T10305] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1059.836047][ T2830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1059.836071][ T2830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1060.045290][T10305] usb 6-1: device descriptor read/64, error -71
[ 1060.160073][T10305] usb usb6-port1: attempt power cycle
[ 1060.173064][T23408] overlayfs: failed to resolve './file0': -2
[ 1061.696191][T10305] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1061.786759][   T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1061.820466][   T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1061.832746][   T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1061.850940][   T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1061.870254][   T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1061.973612][T10305] usb 6-1: device descriptor read/8, error -71
[ 1062.704397][T23410] chnl_net:caif_netlink_parms(): no params data found
[ 1064.044689][   T62] Bluetooth: hci2: command tx timeout
[ 1064.658359][T23444] netlink: 'syz.7.6593': attribute type 8 has an invalid length.
[ 1065.275559][T23410] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1065.275705][T23410] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1065.275967][T23410] bridge_slave_0: entered allmulticast mode
[ 1065.278610][T23410] bridge_slave_0: entered promiscuous mode
[ 1065.381295][T23410] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1065.381447][T23410] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1065.381709][T23410] bridge_slave_1: entered allmulticast mode
[ 1065.418359][T23410] bridge_slave_1: entered promiscuous mode
[ 1065.538156][T23452] binder: 23451:23452 ioctl c0306201 200000000240 returned -11
[ 1065.885592][T10305] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1065.943292][T23410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1065.973090][T23462] overlayfs: failed to clone upperpath
[ 1066.015418][T17360] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1066.067544][T10305] usb 8-1: config 0 has an invalid interface number: 151 but max is 0
[ 1066.067576][T10305] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1066.067596][T10305] usb 8-1: config 0 has no interface number 0
[ 1066.067652][T10305] usb 8-1: too many endpoints for config 0 interface 151 altsetting 81: 239, using maximum allowed: 30
[ 1066.067700][T10305] usb 8-1: config 0 interface 151 altsetting 81 has 0 endpoint descriptors, different from the interface descriptor's value: 239
[ 1066.067729][T10305] usb 8-1: config 0 interface 151 has no altsetting 0
[ 1066.067763][T10305] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1066.067786][T10305] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.072979][T10305] usb 8-1: config 0 descriptor??
[ 1066.115262][   T62] Bluetooth: hci2: command tx timeout
[ 1066.188170][T17360] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1066.188202][T17360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.188266][T17360] usb 7-1: Product: syz
[ 1066.188281][T17360] usb 7-1: Manufacturer: syz
[ 1066.188295][T17360] usb 7-1: SerialNumber: syz
[ 1066.222074][T17360] usb 7-1: config 0 descriptor??
[ 1066.264081][T17360] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1066.371943][   T37] audit: type=1326 audit(1769353639.987:12057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23465 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1066.372239][   T37] audit: type=1326 audit(1769353639.987:12058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23465 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1066.372941][   T37] audit: type=1326 audit(1769353639.987:12059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23465 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1066.373202][   T37] audit: type=1326 audit(1769353639.987:12060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23465 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1066.373443][   T37] audit: type=1326 audit(1769353639.987:12061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23465 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1066.373694][   T37] audit: type=1326 audit(1769353639.987:12062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23465 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1066.618902][T10305] usb 8-1: string descriptor 0 read error: -71
[ 1066.674056][T10305] usb 8-1: USB disconnect, device number 6
[ 1066.724785][ T2830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1066.938961][T23410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1067.120937][   T37] audit: type=1326 audit(1769353640.737:12063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23465 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1067.120992][   T37] audit: type=1326 audit(1769353640.737:12064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23465 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1067.287142][T23410] team0: Port device team_slave_0 added
[ 1067.290815][T23410] team0: Port device team_slave_1 added
[ 1067.467940][T17360] gspca_sunplus: reg_r err -71
[ 1067.468033][T17360] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[ 1067.471678][T17360] usb 7-1: USB disconnect, device number 6
[ 1068.964849][   T62] Bluetooth: hci2: command tx timeout
[ 1069.269769][ T2830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1069.343548][T23410] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1069.343568][T23410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1069.343596][T23410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1069.453572][T23480] binder: 23479:23480 ioctl c0306201 200000000240 returned -11
[ 1069.468048][T23410] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1069.468066][T23410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1069.468095][T23410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1071.001053][   T62] Bluetooth: hci2: command tx timeout
[ 1071.099655][ T2830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1071.573748][ T2830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1071.648038][T23410] hsr_slave_0: entered promiscuous mode
[ 1071.649461][T23410] hsr_slave_1: entered promiscuous mode
[ 1071.650406][T23410] debugfs: 'hsr0' already exists in 'hsr'
[ 1071.650432][T23410] Cannot create hsr debugfs directory
[ 1072.202883][T23497] overlayfs: failed to clone upperpath
[ 1073.155769][ T2830] bridge_slave_1: left allmulticast mode
[ 1073.155800][ T2830] bridge_slave_1: left promiscuous mode
[ 1073.156071][ T2830] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1074.212987][   T37] audit: type=1326 audit(1769353647.827:12065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23505 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1074.213787][   T37] audit: type=1326 audit(1769353647.827:12066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23505 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1074.214335][   T37] audit: type=1326 audit(1769353647.827:12067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23505 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1074.217870][   T37] audit: type=1326 audit(1769353647.827:12068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23505 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1074.218359][   T37] audit: type=1326 audit(1769353647.837:12069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23505 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1074.218637][   T37] audit: type=1326 audit(1769353647.837:12070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23505 comm="syz.5.6619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1074.384575][ T2830] bridge_slave_0: left allmulticast mode
[ 1074.384597][ T2830] bridge_slave_0: left promiscuous mode
[ 1074.384759][ T2830] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1074.518506][T23513] binder: 23512:23513 ioctl c0306201 200000000240 returned -11
[ 1074.529165][T17360] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1074.629686][   T37] audit: type=1326 audit(1769353648.247:12071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23516 comm="syz.6.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1747e4acb9 code=0x7ffc0000
[ 1074.639116][   T37] audit: type=1326 audit(1769353648.247:12072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23516 comm="syz.6.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1747e4acb9 code=0x7ffc0000
[ 1074.639169][   T37] audit: type=1326 audit(1769353648.247:12073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23516 comm="syz.6.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1747e4acb9 code=0x7ffc0000
[ 1074.639209][   T37] audit: type=1326 audit(1769353648.247:12074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23516 comm="syz.6.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1747e4acb9 code=0x7ffc0000
[ 1074.695526][T17360] usb 6-1: Using ep0 maxpacket: 32
[ 1074.701435][T17360] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3
[ 1074.701466][T17360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.701487][T17360] usb 6-1: Product: syz
[ 1074.701502][T17360] usb 6-1: Manufacturer: syz
[ 1074.701517][T17360] usb 6-1: SerialNumber: syz
[ 1074.718746][T17360] usb 6-1: config 0 descriptor??
[ 1074.960189][T17360] f81534a_ctrl 6-1:0.0: probe with driver f81534a_ctrl failed with error -32
[ 1076.154553][   T43] usb 6-1: USB disconnect, device number 29
[ 1076.838750][T23532] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6628'.
[ 1076.838776][T23532] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6628'.
[ 1077.012629][   T62] Bluetooth: hci1: command 0x0406 tx timeout
[ 1077.012675][   T62] Bluetooth: hci0: command 0x0406 tx timeout
[ 1077.545477][   T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1077.718744][   T10] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1077.718765][   T10] usb 8-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 0
[ 1077.718780][   T10] usb 8-1: config 1 interface 0 has no altsetting 0
[ 1077.722072][   T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1077.722092][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.722108][   T10] usb 8-1: Product: syz
[ 1077.722117][   T10] usb 8-1: Manufacturer: syz
[ 1077.722125][   T10] usb 8-1: SerialNumber: syz
[ 1077.786069][ T2830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1077.836463][ T2830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1077.859450][ T2830] bond0 (unregistering): Released all slaves
[ 1078.066646][T23539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6629'.
[ 1078.280613][T23532] batadv1: entered promiscuous mode
[ 1078.296514][T23532] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1078.495011][   T43] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1078.661764][   T43] usb 7-1: config 0 has an invalid interface number: 106 but max is 0
[ 1078.661794][   T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1078.661814][   T43] usb 7-1: config 0 has no interface number 0
[ 1078.661864][   T43] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1078.661888][   T43] usb 7-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1078.661915][   T43] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1078.661928][   T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1078.668808][   T43] usb 7-1: config 0 descriptor??
[ 1078.761427][   T43] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1078.873213][T23554] binder: 23553:23554 ioctl c0306201 200000000540 returned -22
[ 1079.790585][ T1051] usb 7-1: Failed to submit usb control message: -71
[ 1079.790675][ T1051] usb 7-1: unable to send the bmi data to the device: -71
[ 1079.790694][ T1051] usb 7-1: unable to get target info from device
[ 1079.790708][ T1051] usb 7-1: could not get target info (-71)
[ 1079.790725][ T1051] usb 7-1: could not probe fw (-71)
[ 1079.793234][   T43] usb 7-1: USB disconnect, device number 7
[ 1081.525311][T23527] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1081.678167][T23527] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1081.678235][T23527] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1081.678275][T23527] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1081.678298][T23527] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.690449][T23527] usb 7-1: config 0 descriptor??
[ 1081.721560][T23527] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1082.140948][   T10] usb 8-1: bad CDC descriptors
[ 1082.154123][   T10] usb 8-1: USB disconnect, device number 7
[ 1082.544664][T23606] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1083.370681][   T37] kauditd_printk_skb: 67 callbacks suppressed
[ 1083.370701][   T37] audit: type=1326 audit(1769353656.987:12142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23613 comm="syz.7.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1083.370746][   T37] audit: type=1326 audit(1769353656.987:12143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23613 comm="syz.7.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1083.419935][T23616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6650'.
[ 1083.442211][   T37] audit: type=1326 audit(1769353657.057:12144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23613 comm="syz.7.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1083.442266][   T37] audit: type=1326 audit(1769353657.057:12145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23613 comm="syz.7.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1083.442307][   T37] audit: type=1326 audit(1769353657.057:12146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23613 comm="syz.7.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1083.442358][   T37] audit: type=1326 audit(1769353657.057:12147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23613 comm="syz.7.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1083.442587][   T37] audit: type=1326 audit(1769353657.057:12148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23613 comm="syz.7.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1083.442634][   T37] audit: type=1326 audit(1769353657.057:12149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23613 comm="syz.7.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1083.442799][   T37] audit: type=1326 audit(1769353657.057:12150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23613 comm="syz.7.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1083.443092][   T37] audit: type=1326 audit(1769353657.057:12151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23613 comm="syz.7.6649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1083.775488][T20966] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1083.937546][T20966] usb 6-1: config 0 has an invalid interface number: 106 but max is 0
[ 1083.937577][T20966] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1083.937598][T20966] usb 6-1: config 0 has no interface number 0
[ 1083.937645][T20966] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1083.937668][T20966] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1083.937711][T20966] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1083.937735][T20966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1083.942630][T20966] usb 6-1: config 0 descriptor??
[ 1083.996007][T20966] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1084.031793][T23627] binder: 23626:23627 ioctl c0306201 200000000240 returned -11
[ 1084.068341][ T2830] hsr_slave_0: left promiscuous mode
[ 1084.105490][ T2830] hsr_slave_1: left promiscuous mode
[ 1084.106587][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1084.106612][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1084.202414][ T2830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1084.202443][ T2830] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1084.364438][T20966] usb 7-1: USB disconnect, device number 8
[ 1084.473638][ T2830] veth1_macvtap: left promiscuous mode
[ 1084.473747][ T2830] veth0_macvtap: left promiscuous mode
[ 1084.480008][ T2830] veth1_vlan: left promiscuous mode
[ 1084.480198][ T2830] veth0_vlan: left promiscuous mode
[ 1084.631207][ T1115] usb 6-1: Failed to submit usb control message: -71
[ 1084.631243][ T1115] usb 6-1: unable to send the bmi data to the device: -71
[ 1084.631261][ T1115] usb 6-1: unable to get target info from device
[ 1084.631275][ T1115] usb 6-1: could not get target info (-71)
[ 1084.631293][ T1115] usb 6-1: could not probe fw (-71)
[ 1084.633653][ T5871] usb 6-1: USB disconnect, device number 30
[ 1084.677575][T23642] netlink: 'syz.7.6657': attribute type 8 has an invalid length.
[ 1084.694009][T23644] FAULT_INJECTION: forcing a failure.
[ 1084.694009][T23644] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1084.694049][T23644] CPU: 0 UID: 0 PID: 23644 Comm: syz.6.6658 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1084.694077][T23644] Tainted: [L]=SOFTLOCKUP
[ 1084.694085][T23644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1084.694098][T23644] Call Trace:
[ 1084.694107][T23644]  <TASK>
[ 1084.694117][T23644]  dump_stack_lvl+0xe8/0x150
[ 1084.694150][T23644]  should_fail_ex+0x46b/0x600
[ 1084.694180][T23644]  _copy_from_user+0x2d/0xb0
[ 1084.694213][T23644]  vcs_write+0x4fa/0x11c0
[ 1084.694233][T23644]  ? kstrtouint+0x6e/0xe0
[ 1084.694270][T23644]  ? __pfx_vcs_write+0x10/0x10
[ 1084.694293][T23644]  ? rw_verify_area+0x25b/0x4e0
[ 1084.694326][T23644]  vfs_writev+0x4c6/0x9a0
[ 1084.694348][T23644]  ? __pfx_vcs_write+0x10/0x10
[ 1084.694373][T23644]  ? __pfx_vfs_writev+0x10/0x10
[ 1084.694407][T23644]  ? __fget_files+0x2a/0x420
[ 1084.694432][T23644]  ? __fget_files+0x3a6/0x420
[ 1084.694451][T23644]  ? __fget_files+0x2a/0x420
[ 1084.694480][T23644]  do_writev+0x15a/0x2e0
[ 1084.694503][T23644]  ? __pfx_do_writev+0x10/0x10
[ 1084.694534][T23644]  do_syscall_64+0xe2/0xf80
[ 1084.694561][T23644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1084.694580][T23644]  ? trace_irq_disable+0x37/0x100
[ 1084.694602][T23644]  ? clear_bhb_loop+0x60/0xb0
[ 1084.694626][T23644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1084.694646][T23644] RIP: 0033:0x7f1747e4acb9
[ 1084.694663][T23644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1084.694681][T23644] RSP: 002b:00007f17460a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1084.694703][T23644] RAX: ffffffffffffffda RBX: 00007f17480c5fa0 RCX: 00007f1747e4acb9
[ 1084.694718][T23644] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003
[ 1084.694736][T23644] RBP: 00007f17460a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1084.694749][T23644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1084.694763][T23644] R13: 00007f17480c6038 R14: 00007f17480c5fa0 R15: 00007ffd6ee101b8
[ 1084.694794][T23644]  </TASK>
[ 1086.083583][T23660] binder: 23659:23660 ioctl c0306201 200000000240 returned -11
[ 1086.218553][T23667] sg_write: data in/out 65500/126 bytes for SCSI command 0x4-- guessing data in;
[ 1086.218553][T23667]    program syz.5.6668 not setting count and/or reply_len properly
[ 1086.220055][T23667] sg_write: data in/out 134217826/98 bytes for SCSI command 0x0-- guessing data in;
[ 1086.220055][T23667]    program syz.5.6668 not setting count and/or reply_len properly
[ 1086.310550][T23667] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1087.025418][ T5871] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1087.236930][ T5871] usb 6-1: Using ep0 maxpacket: 32
[ 1087.253615][ T5871] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3
[ 1087.253646][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1087.253666][ T5871] usb 6-1: Product: syz
[ 1087.253681][ T5871] usb 6-1: Manufacturer: syz
[ 1087.253696][ T5871] usb 6-1: SerialNumber: syz
[ 1087.290671][ T5871] usb 6-1: config 0 descriptor??
[ 1087.499227][ T5871] f81534a_ctrl 6-1:0.0: probe with driver f81534a_ctrl failed with error -32
[ 1089.047251][ T2830] team0 (unregistering): Port device team_slave_1 removed
[ 1089.305893][ T2830] team0 (unregistering): Port device team_slave_0 removed
[ 1089.662000][T20966] usb 6-1: USB disconnect, device number 31
[ 1093.025902][T23720] binder: 23719:23720 ioctl 4018620d 0 returned -22
[ 1093.029472][T23720] binder: 23719:23720 ioctl c0306201 200000000240 returned -11
[ 1093.667681][T23732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6690'.
[ 1093.800730][T23410] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1093.876096][T20966] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1093.937969][T23410] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1094.096068][T23410] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1094.129705][   T37] kauditd_printk_skb: 13 callbacks suppressed
[ 1094.129728][   T37] audit: type=1326 audit(1769353667.737:12165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23740 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1094.129771][   T37] audit: type=1326 audit(1769353667.737:12166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23740 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1094.129809][   T37] audit: type=1326 audit(1769353667.737:12167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23740 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1094.129849][   T37] audit: type=1326 audit(1769353667.737:12168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23740 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1094.129886][   T37] audit: type=1326 audit(1769353667.737:12169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23740 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1094.129926][   T37] audit: type=1326 audit(1769353667.737:12170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23740 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1094.131580][T20966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1094.131614][T20966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1094.131638][T20966] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1094.131681][T20966] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1094.131705][T20966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.162342][T20966] usb 8-1: config 0 descriptor??
[ 1094.695219][ T5871] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1094.704462][T23410] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1094.716019][   T37] audit: type=1326 audit(1769353668.317:12171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23740 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1094.716063][   T37] audit: type=1326 audit(1769353668.317:12172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23740 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1094.822030][T20966] usbhid 8-1:0.0: can't add hid device: -71
[ 1094.822163][T20966] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1094.866991][ T5871] usb 6-1: Using ep0 maxpacket: 32
[ 1094.880379][ T5871] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3
[ 1094.880401][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.880412][ T5871] usb 6-1: Product: syz
[ 1094.880421][ T5871] usb 6-1: Manufacturer: syz
[ 1094.880429][ T5871] usb 6-1: SerialNumber: syz
[ 1094.950934][ T5871] usb 6-1: config 0 descriptor??
[ 1095.037060][T20966] usb 8-1: USB disconnect, device number 8
[ 1095.213087][   T37] audit: type=1326 audit(1769353668.827:12173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23740 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd04551a94b code=0x7ffc0000
[ 1095.214101][   T37] audit: type=1326 audit(1769353668.827:12174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23740 comm="syz.5.6693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd04551acb9 code=0x7ffc0000
[ 1095.625716][T20966] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1095.719793][ T5871] f81534a_ctrl 6-1:0.0: probe with driver f81534a_ctrl failed with error -71
[ 1095.755912][ T5871] usb 6-1: USB disconnect, device number 32
[ 1095.793955][T20966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1095.793989][T20966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1095.794011][T20966] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1095.794048][T20966] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1095.794071][T20966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1095.819096][T20966] usb 8-1: config 0 descriptor??
[ 1095.996365][T23768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6697'.
[ 1096.067935][T23771] binder: 23770:23771 ioctl 4018620d 0 returned -22
[ 1096.092439][T23771] binder: 23770:23771 ioctl c0306201 200000000240 returned -11
[ 1096.227985][T20966] acrux 0003:1A34:0802.0018: unexpected long global item
[ 1096.234004][T20966] acrux 0003:1A34:0802.0018: parse failed
[ 1096.234081][T20966] acrux 0003:1A34:0802.0018: probe with driver acrux failed with error -22
[ 1096.695392][T23778] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6700'.
[ 1097.486749][T23410] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1097.519284][T23410] 8021q: adding VLAN 0 to HW filter on device team0
[ 1097.552449][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1097.552540][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1097.595944][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1097.596032][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1098.575891][T23527] usb 8-1: USB disconnect, device number 9
[ 1098.846423][T23793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6705'.
[ 1100.030255][T23527] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1100.300891][T23527] usb 8-1: config 0 has an invalid interface number: 106 but max is 0
[ 1100.300928][T23527] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1100.300948][T23527] usb 8-1: config 0 has no interface number 0
[ 1100.300999][T23527] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1100.301021][T23527] usb 8-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1100.301062][T23527] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1100.301085][T23527] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1100.397567][T23527] usb 8-1: config 0 descriptor??
[ 1100.623569][   T37] kauditd_printk_skb: 1 callbacks suppressed
[ 1100.623589][   T37] audit: type=1326 audit(1769353674.237:12176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23800 comm="syz.0.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1100.623644][   T37] audit: type=1326 audit(1769353674.237:12177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23800 comm="syz.0.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1100.656466][   T37] audit: type=1326 audit(1769353674.277:12178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23800 comm="syz.0.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1100.656539][   T37] audit: type=1326 audit(1769353674.277:12179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23800 comm="syz.0.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1100.656579][   T37] audit: type=1326 audit(1769353674.277:12180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23800 comm="syz.0.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1100.665243][   T37] audit: type=1326 audit(1769353674.277:12181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23800 comm="syz.0.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1100.676577][T23527] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1101.057701][   T37] audit: type=1326 audit(1769353674.627:12182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23800 comm="syz.0.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1101.057808][   T37] audit: type=1326 audit(1769353674.677:12183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23800 comm="syz.0.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de3eacb9 code=0x7ffc0000
[ 1101.791501][ T3561] usb 8-1: Failed to submit usb control message: -71
[ 1101.791538][ T3561] usb 8-1: unable to send the bmi data to the device: -71
[ 1101.791555][ T3561] usb 8-1: unable to get target info from device
[ 1101.791571][ T3561] usb 8-1: could not get target info (-71)
[ 1101.791589][ T3561] usb 8-1: could not probe fw (-71)
[ 1101.805819][ T5878] usb 8-1: USB disconnect, device number 10
[ 1101.807668][T23410] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1102.224785][T23410] veth0_vlan: entered promiscuous mode
[ 1102.281327][T23410] veth1_vlan: entered promiscuous mode
[ 1102.497793][T23410] veth0_macvtap: entered promiscuous mode
[ 1102.562760][T23410] veth1_macvtap: entered promiscuous mode
[ 1102.709475][T23410] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1102.730383][T23410] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1102.781392][   T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1102.781559][   T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1102.781893][   T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1102.782032][   T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.412169][T23829] FAULT_INJECTION: forcing a failure.
[ 1104.412169][T23829] name failslab, interval 1, probability 0, space 0, times 0
[ 1104.412209][T23829] CPU: 0 UID: 0 PID: 23829 Comm: syz.7.6714 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1104.412237][T23829] Tainted: [L]=SOFTLOCKUP
[ 1104.412244][T23829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1104.412257][T23829] Call Trace:
[ 1104.412265][T23829]  <TASK>
[ 1104.412274][T23829]  dump_stack_lvl+0xe8/0x150
[ 1104.412306][T23829]  should_fail_ex+0x46b/0x600
[ 1104.412334][T23829]  ? skb_clone+0x212/0x3a0
[ 1104.412356][T23829]  should_failslab+0xa8/0x100
[ 1104.412376][T23829]  ? skb_clone+0x212/0x3a0
[ 1104.412396][T23829]  kmem_cache_alloc_noprof+0x83/0x6a0
[ 1104.412420][T23829]  ? __netlink_lookup+0xc6/0x8b0
[ 1104.412458][T23829]  skb_clone+0x212/0x3a0
[ 1104.412484][T23829]  __netlink_deliver_tap+0x404/0x850
[ 1104.412517][T23829]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1104.412540][T23829]  netlink_deliver_tap+0x19c/0x1b0
[ 1104.412564][T23829]  netlink_unicast+0x805/0x9f0
[ 1104.412593][T23829]  ? __pfx_netlink_unicast+0x10/0x10
[ 1104.412613][T23829]  ? __alloc_skb+0x193/0x390
[ 1104.412641][T23829]  ? netlink_sendmsg+0x650/0xb40
[ 1104.412661][T23829]  ? skb_put+0x11b/0x210
[ 1104.412684][T23829]  netlink_sendmsg+0x813/0xb40
[ 1104.412716][T23829]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1104.412741][T23829]  ? is_bpf_text_address+0x292/0x2b0
[ 1104.412770][T23829]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1104.412795][T23829]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1104.412819][T23829]  __sock_sendmsg+0x21c/0x270
[ 1104.412847][T23829]  ____sys_sendmsg+0x4e1/0x800
[ 1104.412877][T23829]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1104.412908][T23829]  ? import_iovec+0x73/0xa0
[ 1104.412939][T23829]  ___sys_sendmsg+0x2a5/0x360
[ 1104.412959][T23829]  ? __lock_acquire+0x6b5/0x2cf0
[ 1104.412989][T23829]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1104.413045][T23829]  ? __fget_files+0x2a/0x420
[ 1104.413065][T23829]  ? __fget_files+0x3a6/0x420
[ 1104.413095][T23829]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1104.413119][T23829]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1104.413149][T23829]  ? __pfx_ksys_write+0x10/0x10
[ 1104.413187][T23829]  do_syscall_64+0xe2/0xf80
[ 1104.413213][T23829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.413233][T23829]  ? trace_irq_disable+0x37/0x100
[ 1104.413254][T23829]  ? clear_bhb_loop+0x60/0xb0
[ 1104.413279][T23829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.413298][T23829] RIP: 0033:0x7f8e4f68acb9
[ 1104.413317][T23829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1104.413335][T23829] RSP: 002b:00007f8e4d8e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1104.413358][T23829] RAX: ffffffffffffffda RBX: 00007f8e4f905fa0 RCX: 00007f8e4f68acb9
[ 1104.413373][T23829] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000005
[ 1104.413386][T23829] RBP: 00007f8e4d8e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1104.413399][T23829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1104.413412][T23829] R13: 00007f8e4f906038 R14: 00007f8e4f905fa0 R15: 00007ffce3d46498
[ 1104.413451][T23829]  </TASK>
[ 1104.671391][   T43] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1104.845367][   T43] usb 7-1: Using ep0 maxpacket: 8
[ 1104.850020][   T43] usb 7-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config
[ 1104.850059][   T43] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1104.850086][   T43] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1104.850099][   T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1104.881001][   T43] usbtmc 7-1:16.0: bulk endpoints not found
[ 1104.892392][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1104.892414][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1105.166203][   T37] audit: type=1326 audit(1769353678.787:12184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23835 comm="syz.7.6717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1105.166257][   T37] audit: type=1326 audit(1769353678.787:12185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23835 comm="syz.7.6717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1105.450514][T23837] batadv1: left promiscuous mode
[ 1105.575648][ T5871] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1105.675041][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1105.675057][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1105.741581][ T5871] usb 8-1: Using ep0 maxpacket: 32
[ 1105.754436][ T5871] usb 8-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3
[ 1105.754456][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1105.754468][ T5871] usb 8-1: Product: syz
[ 1105.754477][ T5871] usb 8-1: Manufacturer: syz
[ 1105.754485][ T5871] usb 8-1: SerialNumber: syz
[ 1105.784379][ T5871] usb 8-1: config 0 descriptor??
[ 1106.025452][ T5871] f81534a_ctrl 8-1:0.0: probe with driver f81534a_ctrl failed with error -32
[ 1106.291281][   T37] kauditd_printk_skb: 6 callbacks suppressed
[ 1106.291460][   T37] audit: type=1326 audit(1769353679.907:12192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23849 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df599acb9 code=0x7ffc0000
[ 1106.331295][   T37] audit: type=1326 audit(1769353679.907:12193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23849 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df599acb9 code=0x7ffc0000
[ 1106.331612][   T37] audit: type=1326 audit(1769353679.947:12194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23849 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f4df599acb9 code=0x7ffc0000
[ 1106.331864][   T37] audit: type=1326 audit(1769353679.947:12195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23849 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df599acb9 code=0x7ffc0000
[ 1106.332111][   T37] audit: type=1326 audit(1769353679.947:12196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23849 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df599acb9 code=0x7ffc0000
[ 1106.333627][   T37] audit: type=1326 audit(1769353679.947:12197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23849 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4df599acb9 code=0x7ffc0000
[ 1106.570942][T23855] FAULT_INJECTION: forcing a failure.
[ 1106.570942][T23855] name failslab, interval 1, probability 0, space 0, times 0
[ 1106.570967][T23855] CPU: 1 UID: 0 PID: 23855 Comm: syz.5.6721 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1106.570983][T23855] Tainted: [L]=SOFTLOCKUP
[ 1106.570988][T23855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1106.570995][T23855] Call Trace:
[ 1106.571000][T23855]  <TASK>
[ 1106.571006][T23855]  dump_stack_lvl+0xe8/0x150
[ 1106.571025][T23855]  should_fail_ex+0x46b/0x600
[ 1106.571041][T23855]  ? security_inode_alloc+0x39/0x310
[ 1106.571055][T23855]  should_failslab+0xa8/0x100
[ 1106.571067][T23855]  ? security_inode_alloc+0x39/0x310
[ 1106.571078][T23855]  kmem_cache_alloc_noprof+0x83/0x6a0
[ 1106.571097][T23855]  security_inode_alloc+0x39/0x310
[ 1106.571111][T23855]  inode_init_always_gfp+0x9bf/0xd70
[ 1106.571125][T23855]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1106.571140][T23855]  alloc_inode+0x82/0x1b0
[ 1106.571151][T23855]  do_accept+0x144/0x760
[ 1106.571166][T23855]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1106.571181][T23855]  ? __pfx_do_accept+0x10/0x10
[ 1106.571206][T23855]  __sys_accept4+0x139/0x230
[ 1106.571223][T23855]  ? __pfx___sys_accept4+0x10/0x10
[ 1106.571238][T23855]  ? __pfx_ksys_write+0x10/0x10
[ 1106.571256][T23855]  __x64_sys_accept4+0x9a/0xb0
[ 1106.571280][T23855]  do_syscall_64+0xe2/0xf80
[ 1106.571294][T23855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1106.571306][T23855]  ? trace_irq_disable+0x37/0x100
[ 1106.571318][T23855]  ? clear_bhb_loop+0x60/0xb0
[ 1106.571331][T23855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1106.571342][T23855] RIP: 0033:0x7fd04551acb9
[ 1106.571353][T23855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1106.571362][T23855] RSP: 002b:00007fd043776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 1106.571376][T23855] RAX: ffffffffffffffda RBX: 00007fd045795fa0 RCX: 00007fd04551acb9
[ 1106.571385][T23855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1106.571392][T23855] RBP: 00007fd043776090 R08: 0000000000000000 R09: 0000000000000000
[ 1106.571399][T23855] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[ 1106.571406][T23855] R13: 00007fd045796038 R14: 00007fd045795fa0 R15: 00007ffe50532af8
[ 1106.571423][T23855]  </TASK>
[ 1106.811501][   T43] usb 8-1: USB disconnect, device number 11
[ 1106.919522][   T37] audit: type=1326 audit(1769353680.507:12198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23849 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df599acb9 code=0x7ffc0000
[ 1106.919832][   T37] audit: type=1326 audit(1769353680.537:12199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23849 comm="syz.2.6449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4df599acb9 code=0x7ffc0000
[ 1108.605640][ T5871] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1108.733247][   T43] usb 7-1: USB disconnect, device number 9
[ 1108.795248][ T5871] usb 3-1: Using ep0 maxpacket: 32
[ 1108.798659][ T5871] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3
[ 1108.798679][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1108.798691][ T5871] usb 3-1: Product: syz
[ 1108.798699][ T5871] usb 3-1: Manufacturer: syz
[ 1108.798708][ T5871] usb 3-1: SerialNumber: syz
[ 1108.859698][ T5871] usb 3-1: config 0 descriptor??
[ 1109.093554][T20229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1109.119937][T23864] binder: 23863:23864 ioctl c0306201 0 returned -14
[ 1109.135071][T20229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1109.150593][T20229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1109.176991][T20229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1109.180510][T20229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1109.205889][T23864] binder: 23863:23864 ioctl c0306201 200000000240 returned -11
[ 1110.273227][ T5871] f81534a_ctrl 3-1:0.0: failed to enable ports: -71
[ 1110.273270][ T5871] f81534a_ctrl 3-1:0.0: probe with driver f81534a_ctrl failed with error -71
[ 1110.309238][ T5871] usb 3-1: USB disconnect, device number 22
[ 1111.521894][T13660] Bluetooth: hci4: command tx timeout
[ 1112.585325][ T5871] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1112.763516][ T5871] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1112.763560][ T5871] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1112.763587][ T5871] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1112.763600][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.768573][ T5871] usb 7-1: config 0 descriptor??
[ 1112.805392][ T5871] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1112.875328][T23527] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1113.028626][T23527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1113.028660][T23527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1113.028682][T23527] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1113.028723][T23527] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1113.028745][T23527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.140887][T23527] usb 6-1: config 0 descriptor??
[ 1113.368145][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1113.447072][T23527] usbhid 6-1:0.0: can't add hid device: -71
[ 1113.447202][T23527] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1113.477447][T23527] usb 6-1: USB disconnect, device number 33
[ 1113.555327][T13660] Bluetooth: hci4: command tx timeout
[ 1113.826281][T23527] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1113.907973][   T37] audit: type=1326 audit(1769353687.527:12200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23896 comm="syz.7.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1113.908009][   T37] audit: type=1326 audit(1769353687.527:12201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23896 comm="syz.7.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1113.908033][   T37] audit: type=1326 audit(1769353687.527:12202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23896 comm="syz.7.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1113.908057][   T37] audit: type=1326 audit(1769353687.527:12203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23896 comm="syz.7.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1113.908080][   T37] audit: type=1326 audit(1769353687.527:12204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23896 comm="syz.7.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1115.232125][T23527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1115.232161][T23527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1115.232185][T23527] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1115.232225][T23527] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1115.232249][T23527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1115.297325][T23527] usb 6-1: config 0 descriptor??
[ 1115.384753][ T5953] usb 7-1: USB disconnect, device number 10
[ 1115.396064][T17360] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1115.414148][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1115.545311][T17360] usb 8-1: Using ep0 maxpacket: 32
[ 1115.552506][T17360] usb 8-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3
[ 1115.552592][T17360] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1115.552612][T17360] usb 8-1: Product: syz
[ 1115.552627][T17360] usb 8-1: Manufacturer: syz
[ 1115.552641][T17360] usb 8-1: SerialNumber: syz
[ 1115.606857][T17360] usb 8-1: config 0 descriptor??
[ 1115.633170][   T37] audit: type=1326 audit(1769353689.247:12205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23896 comm="syz.7.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1115.633279][   T37] audit: type=1326 audit(1769353689.247:12206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23896 comm="syz.7.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1115.635370][T13660] Bluetooth: hci4: command tx timeout
[ 1115.717448][T23527] acrux 0003:1A34:0802.0019: unexpected long global item
[ 1115.719352][T23527] acrux 0003:1A34:0802.0019: parse failed
[ 1115.719479][T23527] acrux 0003:1A34:0802.0019: probe with driver acrux failed with error -22
[ 1115.883552][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.883635][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.894531][ T5953] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1115.908619][T17360] f81534a_ctrl 8-1:0.0: probe with driver f81534a_ctrl failed with error -71
[ 1115.915664][   T37] audit: type=1326 audit(1769353689.507:12207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23896 comm="syz.7.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e4f68a94b code=0x7ffc0000
[ 1115.915716][   T37] audit: type=1326 audit(1769353689.517:12208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23896 comm="syz.7.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1115.915756][   T37] audit: type=1326 audit(1769353689.517:12209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23896 comm="syz.7.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4f68acb9 code=0x7ffc0000
[ 1115.993889][T17360] usb 8-1: USB disconnect, device number 12
[ 1116.010263][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.057301][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1116.057331][ T5953] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1116.057357][ T5953] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1116.057370][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1116.075772][ T5953] usb 7-1: config 0 descriptor??
[ 1116.119772][ T5953] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1116.421565][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.609217][T23862] chnl_net:caif_netlink_parms(): no params data found
[ 1116.635393][ T5953] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1116.793141][ T5953] usb 3-1: Using ep0 maxpacket: 8
[ 1116.800669][ T5953] usb 3-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config
[ 1116.800731][ T5953] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1116.800775][ T5953] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1116.800800][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1116.847258][ T5953] usbtmc 3-1:16.0: bulk endpoints not found
[ 1116.933124][T23862] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1116.933297][T23862] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1116.933550][T23862] bridge_slave_0: entered allmulticast mode
[ 1116.935119][T23862] bridge_slave_0: entered promiscuous mode
[ 1117.012832][T23862] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1117.012945][T23862] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1117.013114][T23862] bridge_slave_1: entered allmulticast mode
[ 1117.036511][T23862] bridge_slave_1: entered promiscuous mode
[ 1117.047731][ T5953] usb 6-1: USB disconnect, device number 34
[ 1117.192199][T23862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1117.210675][T23862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1117.307035][T23862] team0: Port device team_slave_0 added
[ 1117.313142][T23862] team0: Port device team_slave_1 added
[ 1117.374187][   T12] bridge_slave_1: left allmulticast mode
[ 1117.374217][   T12] bridge_slave_1: left promiscuous mode
[ 1117.374459][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1117.438057][   T12] bridge_slave_0: left allmulticast mode
[ 1117.438088][   T12] bridge_slave_0: left promiscuous mode
[ 1117.438353][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1117.715334][T13660] Bluetooth: hci4: command tx timeout
[ 1118.572325][ T5906] usb 7-1: USB disconnect, device number 11
[ 1118.615387][   T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1118.867539][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.867612][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1118.867658][   T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1118.867683][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1119.025785][   T10] usb 6-1: config 0 descriptor??
[ 1120.004064][   T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1120.244073][ T5906] usb 3-1: USB disconnect, device number 23
[ 1120.655970][   T12] bond1 (unregistering): (slave gretap1): Releasing backup interface
[ 1120.795273][T13660] Bluetooth: hci0: command 0x0406 tx timeout
[ 1120.920477][   T12] bond2 (unregistering): (slave gretap2): Releasing backup interface
[ 1121.858676][T23527] usb 6-1: USB disconnect, device number 35
[ 1122.077402][   T12] bond0 (unregistering): left promiscuous mode
[ 1122.077425][   T12] bond_slave_0: left promiscuous mode
[ 1122.077645][   T12] bond_slave_1: left promiscuous mode
[ 1122.122355][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1122.220168][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1122.267460][   T12] bond0 (unregistering): Released all slaves
[ 1122.942644][T17360] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1123.130462][T17360] usb 8-1: Using ep0 maxpacket: 8
[ 1123.132698][T17360] usb 8-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config
[ 1123.132760][T17360] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1123.132787][T17360] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1123.132801][T17360] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1123.156073][ T1884] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1123.202444][T17360] usbtmc 8-1:16.0: bulk endpoints not found
[ 1123.347606][ T1884] usb 7-1: config 0 has an invalid interface number: 151 but max is 0
[ 1123.347637][ T1884] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1123.347657][ T1884] usb 7-1: config 0 has no interface number 0
[ 1123.347699][ T1884] usb 7-1: too many endpoints for config 0 interface 151 altsetting 81: 239, using maximum allowed: 30
[ 1123.347738][ T1884] usb 7-1: config 0 interface 151 altsetting 81 has 0 endpoint descriptors, different from the interface descriptor's value: 239
[ 1123.347763][ T1884] usb 7-1: config 0 interface 151 has no altsetting 0
[ 1123.347791][ T1884] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1123.347812][ T1884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1123.352560][ T1884] usb 7-1: config 0 descriptor??
[ 1123.478771][   T12] bond1 (unregistering): Released all slaves
[ 1123.864631][    C0] raw-gadget.1 gadget.6: ignoring, device is not running
[ 1123.864936][    C0] raw-gadget.1 gadget.6: ignoring, device is not running
[ 1123.865369][    C0] raw-gadget.1 gadget.6: ignoring, device is not running
[ 1123.866612][    C0] raw-gadget.1 gadget.6: ignoring, device is not running
[ 1123.892092][ T1884] usb 7-1: USB disconnect, device number 12
[ 1124.517349][   T12] bond2 (unregistering): Released all slaves
[ 1124.995266][   T43] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1125.069838][T23950] batadv_slave_0: entered promiscuous mode
[ 1125.071953][T23951] batadv_slave_0: left promiscuous mode
[ 1125.096995][T23862] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1125.097008][T23862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1125.097024][T23862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1125.128198][T23862] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1125.128218][T23862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1125.128246][T23862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1125.215726][   T43] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1125.215790][   T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1125.221248][   T43] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1125.221282][   T43] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1125.221303][   T43] usb 7-1: Manufacturer: syz
[ 1125.265756][   T12] IPVS: stopping backup sync thread 16125 ...
[ 1125.281275][ T5953] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1125.325371][   T43] usb 7-1: config 0 descriptor??
[ 1125.507692][ T5953] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1125.507729][ T5953] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1125.507770][ T5953] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1125.507795][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1125.519454][T23995] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1125.539372][ T5953] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1125.655736][   T43] rc_core: IR keymap rc-hauppauge not found
[ 1125.655757][   T43] Registered IR keymap rc-empty
[ 1125.799353][   T43] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 1125.982664][T24010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1125.998745][ T5906] usb 8-1: USB disconnect, device number 13
[ 1126.016373][T24010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1126.181286][   T43] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input19
[ 1126.425806][   T43] usb 7-1: USB disconnect, device number 13
[ 1126.658941][T23862] hsr_slave_0: entered promiscuous mode
[ 1126.660310][T23862] hsr_slave_1: entered promiscuous mode
[ 1126.683062][T23862] debugfs: 'hsr0' already exists in 'hsr'
[ 1126.683082][T23862] Cannot create hsr debugfs directory
[ 1126.916735][ T5953] usb 6-1: USB disconnect, device number 36
[ 1130.297538][T24054] futex_wake_op: syz.2.6770 tries to shift op by 32; fix this program
[ 1130.445385][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6771'.
[ 1130.565473][T23834] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1130.792806][T23834] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1130.792833][T23834] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1130.823719][T23834] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1130.823754][T23834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1130.823775][T23834] usb 3-1: SerialNumber: syz
[ 1130.860092][ T5953] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1131.028676][ T5953] usb 8-1: config 0 has an invalid interface number: 106 but max is 0
[ 1131.028708][ T5953] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1131.028729][ T5953] usb 8-1: config 0 has no interface number 0
[ 1131.028832][ T5953] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1131.028857][ T5953] usb 8-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1131.028902][ T5953] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1131.028926][ T5953] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1131.042053][ T5953] usb 8-1: config 0 descriptor??
[ 1131.222326][T24066] FAULT_INJECTION: forcing a failure.
[ 1131.222326][T24066] name failslab, interval 1, probability 0, space 0, times 0
[ 1131.222354][T24066] CPU: 1 UID: 0 PID: 24066 Comm: syz.6.6775 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1131.222380][T24066] Tainted: [L]=SOFTLOCKUP
[ 1131.222387][T24066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1131.222400][T24066] Call Trace:
[ 1131.222408][T24066]  <TASK>
[ 1131.222418][T24066]  dump_stack_lvl+0xe8/0x150
[ 1131.222451][T24066]  should_fail_ex+0x46b/0x600
[ 1131.222479][T24066]  ? vm_area_dup+0x2b/0x670
[ 1131.222495][T24066]  should_failslab+0xa8/0x100
[ 1131.222510][T24066]  ? vm_area_dup+0x2b/0x670
[ 1131.222519][T24066]  kmem_cache_alloc_noprof+0x83/0x6a0
[ 1131.222547][T24066]  vm_area_dup+0x2b/0x670
[ 1131.222571][T24066]  dup_mmap+0x89c/0x1b70
[ 1131.222618][T24066]  ? __pfx_dup_mmap+0x10/0x10
[ 1131.222646][T24066]  ? copy_mm+0x130/0x4b0
[ 1131.222671][T24066]  copy_mm+0x13b/0x4b0
[ 1131.222686][T24066]  copy_process+0x16db/0x3a90
[ 1131.222716][T24066]  ? copy_process+0x939/0x3a90
[ 1131.222749][T24066]  ? __pfx_copy_process+0x10/0x10
[ 1131.222787][T24066]  kernel_clone+0x249/0x7f0
[ 1131.222814][T24066]  ? __pfx_kernel_clone+0x10/0x10
[ 1131.222827][T24066]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1131.222849][T24066]  __x64_sys_clone+0x1b6/0x230
[ 1131.222870][T24066]  ? __pfx___x64_sys_clone+0x10/0x10
[ 1131.222913][T24066]  ? __pfx_ksys_write+0x10/0x10
[ 1131.222938][T24066]  ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0
[ 1131.222963][T24066]  ? syscall_user_dispatch+0x4e/0x90
[ 1131.222988][T24066]  do_syscall_64+0xe2/0xf80
[ 1131.223003][T24066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.223014][T24066]  ? trace_irq_disable+0x37/0x100
[ 1131.223026][T24066]  ? clear_bhb_loop+0x60/0xb0
[ 1131.223050][T24066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.223070][T24066] RIP: 0033:0x7f1747e4acb9
[ 1131.223089][T24066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1131.223105][T24066] RSP: 002b:00007f17460a5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1131.223127][T24066] RAX: ffffffffffffffda RBX: 00007f17480c5fa0 RCX: 00007f1747e4acb9
[ 1131.223141][T24066] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400
[ 1131.223149][T24066] RBP: 00007f17460a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1131.223156][T24066] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[ 1131.223163][T24066] R13: 00007f17480c6038 R14: 00007f17480c5fa0 R15: 00007ffd6ee101b8
[ 1131.223181][T24066]  </TASK>
[ 1131.715846][ T5953] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1131.751914][T23834] usb 3-1: 0:2 : does not exist
[ 1131.752004][T23834] usb 3-1: unit 5: unexpected type 0x0b
[ 1131.997759][T23834] usb 3-1: USB disconnect, device number 24
[ 1132.089664][T23527] usb 8-1: USB disconnect, device number 14
[ 1132.107632][ T1115] usb 8-1: Failed to submit usb control message: -71
[ 1132.107670][ T1115] usb 8-1: unable to send the bmi data to the device: -71
[ 1132.107689][ T1115] usb 8-1: unable to get target info from device
[ 1132.107704][ T1115] usb 8-1: could not get target info (-71)
[ 1132.107723][ T1115] usb 8-1: could not probe fw (-71)
[ 1133.660049][T24012] udevd[24012]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1134.926985][T24097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1135.177262][T24097] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[ 1135.177844][T24097] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1135.267572][   T12] batadv0: left promiscuous mode
[ 1135.665343][   T12] hsr_slave_0: left promiscuous mode
[ 1135.738003][   T12] hsr_slave_1: left promiscuous mode
[ 1135.739203][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1135.739230][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1135.813621][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1135.813652][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1135.895755][T24113] FAULT_INJECTION: forcing a failure.
[ 1135.895755][T24113] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1135.895782][T24113] CPU: 1 UID: 0 PID: 24113 Comm: syz.6.6788 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1135.895798][T24113] Tainted: [L]=SOFTLOCKUP
[ 1135.895802][T24113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1135.895810][T24113] Call Trace:
[ 1135.895815][T24113]  <TASK>
[ 1135.895821][T24113]  dump_stack_lvl+0xe8/0x150
[ 1135.895840][T24113]  should_fail_ex+0x46b/0x600
[ 1135.895857][T24113]  _copy_to_user+0x31/0xb0
[ 1135.895875][T24113]  simple_read_from_buffer+0xe1/0x170
[ 1135.895890][T24113]  proc_fail_nth_read+0x1be/0x230
[ 1135.895907][T24113]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1135.895924][T24113]  ? rw_verify_area+0x2ac/0x4e0
[ 1135.895939][T24113]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1135.895955][T24113]  vfs_read+0x212/0xa70
[ 1135.895973][T24113]  ? __pfx_vfs_read+0x10/0x10
[ 1135.895988][T24113]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1135.896004][T24113]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1135.896023][T24113]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1135.896037][T24113]  ? mutex_lock_nested+0x152/0x1d0
[ 1135.896049][T24113]  ? fdget_pos+0x252/0x320
[ 1135.896065][T24113]  ksys_read+0x156/0x270
[ 1135.896080][T24113]  ? __pfx_ksys_read+0x10/0x10
[ 1135.896094][T24113]  ? __pfx_autofs_dev_ioctl+0x10/0x10
[ 1135.896113][T24113]  do_syscall_64+0xe2/0xf80
[ 1135.896127][T24113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1135.896138][T24113]  ? trace_irq_disable+0x37/0x100
[ 1135.896151][T24113]  ? clear_bhb_loop+0x60/0xb0
[ 1135.896164][T24113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1135.896174][T24113] RIP: 0033:0x7f1747e0b58e
[ 1135.896192][T24113] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1135.896202][T24113] RSP: 002b:00007f17460a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1135.896215][T24113] RAX: ffffffffffffffda RBX: 00007f17460a66c0 RCX: 00007f1747e0b58e
[ 1135.896223][T24113] RDX: 000000000000000f RSI: 00007f17460a60a0 RDI: 0000000000000004
[ 1135.896231][T24113] RBP: 00007f17460a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1135.896238][T24113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1135.896245][T24113] R13: 00007f17480c6038 R14: 00007f17480c5fa0 R15: 00007ffd6ee101b8
[ 1135.896262][T24113]  </TASK>
[ 1136.209555][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6790'.
[ 1136.270392][   T12] veth1_macvtap: left promiscuous mode
[ 1136.270501][   T12] veth0_macvtap: left promiscuous mode
[ 1136.270764][   T12] veth1_vlan: left promiscuous mode
[ 1136.270933][   T12] veth0_vlan: left promiscuous mode
[ 1136.573083][   T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1138.857584][   T10] usb 7-1: config 0 has an invalid interface number: 106 but max is 0
[ 1138.857614][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1138.857634][   T10] usb 7-1: config 0 has no interface number 0
[ 1138.857685][   T10] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1138.857706][   T10] usb 7-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1138.857747][   T10] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1138.857768][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.950033][   T10] usb 7-1: config 0 descriptor??
[ 1139.111336][   T10] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1140.200268][T14866] usb 7-1: Failed to submit usb control message: -110
[ 1140.200306][T14866] usb 7-1: unable to send the bmi data to the device: -110
[ 1140.200325][T14866] usb 7-1: unable to get target info from device
[ 1140.200340][T14866] usb 7-1: could not get target info (-110)
[ 1140.200358][T14866] usb 7-1: could not probe fw (-110)
[ 1140.439847][T24136] netlink: 'syz.2.6792': attribute type 8 has an invalid length.
[ 1141.194242][T24145] FAULT_INJECTION: forcing a failure.
[ 1141.194242][T24145] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1141.194280][T24145] CPU: 1 UID: 0 PID: 24145 Comm: syz.5.6797 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1141.194309][T24145] Tainted: [L]=SOFTLOCKUP
[ 1141.194317][T24145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1141.194328][T24145] Call Trace:
[ 1141.194337][T24145]  <TASK>
[ 1141.194347][T24145]  dump_stack_lvl+0xe8/0x150
[ 1141.194380][T24145]  should_fail_ex+0x46b/0x600
[ 1141.194410][T24145]  _copy_to_user+0x31/0xb0
[ 1141.194440][T24145]  ptr_to_user+0xf0/0x5c0
[ 1141.194467][T24145]  try_set_ext_ctrls_common+0x11ab/0x1840
[ 1141.194516][T24145]  ? __pfx_try_set_ext_ctrls_common+0x10/0x10
[ 1141.194555][T24145]  ? video_devdata+0x6e/0xd0
[ 1141.194599][T24145]  try_set_ext_ctrls+0x9b/0x1d0
[ 1141.194623][T24145]  __video_do_ioctl+0x88c/0xc50
[ 1141.194653][T24145]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1141.194688][T24145]  video_usercopy+0x876/0x1400
[ 1141.194717][T24145]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1141.194738][T24145]  ? __pfx_video_usercopy+0x10/0x10
[ 1141.194756][T24145]  ? smack_file_ioctl+0x2c2/0x360
[ 1141.194804][T24145]  ? __fget_files+0x2a/0x420
[ 1141.194825][T24145]  ? __fget_files+0x3a6/0x420
[ 1141.194849][T24145]  v4l2_ioctl+0x190/0x1e0
[ 1141.194877][T24145]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1141.194905][T24145]  __se_sys_ioctl+0xff/0x170
[ 1141.194933][T24145]  do_syscall_64+0xe2/0xf80
[ 1141.194959][T24145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1141.194978][T24145]  ? trace_irq_disable+0x37/0x100
[ 1141.194999][T24145]  ? clear_bhb_loop+0x60/0xb0
[ 1141.195023][T24145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1141.195043][T24145] RIP: 0033:0x7fd04551acb9
[ 1141.195062][T24145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1141.195080][T24145] RSP: 002b:00007fd043776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1141.195101][T24145] RAX: ffffffffffffffda RBX: 00007fd045795fa0 RCX: 00007fd04551acb9
[ 1141.195117][T24145] RDX: 00002000000000c0 RSI: 00000000c0205648 RDI: 0000000000000003
[ 1141.195134][T24145] RBP: 00007fd043776090 R08: 0000000000000000 R09: 0000000000000000
[ 1141.195144][T24145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1141.195155][T24145] R13: 00007fd045796038 R14: 00007fd045795fa0 R15: 00007ffe50532af8
[ 1141.195182][T24145]  </TASK>
[ 1143.608893][T24159] overlayfs: missing 'lowerdir'
[ 1144.518801][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1144.806708][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1147.557083][T24136] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1147.558102][T24136] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1147.700417][ T1884] usb 7-1: USB disconnect, device number 14
[ 1148.315318][ T5906] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1148.315515][ T1884] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1148.465346][ T5906] usb 6-1: Using ep0 maxpacket: 32
[ 1148.467858][ T1884] usb 7-1: Using ep0 maxpacket: 16
[ 1148.471571][ T1884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1148.471703][ T1884] usb 7-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[ 1148.471726][ T1884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1148.485010][ T5906] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3
[ 1148.485041][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1148.485062][ T5906] usb 6-1: Product: syz
[ 1148.485076][ T5906] usb 6-1: Manufacturer: syz
[ 1148.485091][ T5906] usb 6-1: SerialNumber: syz
[ 1148.558290][ T1884] usb 7-1: config 0 descriptor??
[ 1148.575109][ T5906] usb 6-1: config 0 descriptor??
[ 1150.060611][ T5906] f81534a_ctrl 6-1:0.0: probe with driver f81534a_ctrl failed with error -32
[ 1150.324680][ T1884] uclogic 0003:2179:0077.001A: interface is invalid, ignoring
[ 1150.591862][ T5871] usb 7-1: USB disconnect, device number 15
[ 1150.605330][T24200] overlayfs: missing 'lowerdir'
[ 1150.642898][   T43] usb 6-1: USB disconnect, device number 37
[ 1150.938427][T24207] netlink: 'syz.5.6813': attribute type 8 has an invalid length.
[ 1151.373631][ T1884] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1151.664832][ T1884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1151.664867][ T1884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1151.664890][ T1884] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[ 1151.664941][ T1884] usb 8-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00
[ 1151.664966][ T1884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1151.687158][ T1884] usb 8-1: config 0 descriptor??
[ 1151.895596][T23527] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1152.045306][T23527] usb 6-1: device descriptor read/64, error -71
[ 1152.192039][ T1884] smartjoyplus 0003:0B43:0003.001B: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.7-1/input0
[ 1152.192076][ T1884] smartjoyplus 0003:0B43:0003.001B: Force feedback for SmartJoy PLUS PS2/USB adapter
[ 1152.285254][T23527] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1152.386191][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6814'.
[ 1152.393752][ T1884] usb 8-1: USB disconnect, device number 15
[ 1152.475324][T23527] usb 6-1: device descriptor read/64, error -71
[ 1152.585644][T23527] usb usb6-port1: attempt power cycle
[ 1152.644667][T24234] FAULT_INJECTION: forcing a failure.
[ 1152.644667][T24234] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1152.644704][T24234] CPU: 0 UID: 0 PID: 24234 Comm: syz.6.6819 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1152.644742][T24234] Tainted: [L]=SOFTLOCKUP
[ 1152.644750][T24234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1152.644763][T24234] Call Trace:
[ 1152.644772][T24234]  <TASK>
[ 1152.644781][T24234]  dump_stack_lvl+0xe8/0x150
[ 1152.644817][T24234]  should_fail_ex+0x46b/0x600
[ 1152.644847][T24234]  _copy_to_user+0x31/0xb0
[ 1152.644877][T24234]  bpf_verifier_vlog+0x48c/0x8f0
[ 1152.644914][T24234]  __btf_verifier_log+0xe2/0x140
[ 1152.644939][T24234]  ? __pfx___btf_verifier_log+0x10/0x10
[ 1152.644957][T24234]  ? __might_fault+0xaf/0x130
[ 1152.644989][T24234]  ? btf_parse_hdr+0x1e2/0x760
[ 1152.645017][T24234]  btf_parse_hdr+0x408/0x760
[ 1152.645047][T24234]  btf_new_fd+0x381/0xd50
[ 1152.645070][T24234]  ? safesetid_security_capable+0xa9/0x1a0
[ 1152.645106][T24234]  ? __pfx_btf_new_fd+0x10/0x10
[ 1152.645131][T24234]  ? bpf_token_put+0x143/0x160
[ 1152.645154][T24234]  ? bpf_btf_load+0x126/0x190
[ 1152.645177][T24234]  __sys_bpf+0x45a/0x920
[ 1152.645197][T24234]  ? __pfx___sys_bpf+0x10/0x10
[ 1152.645216][T24234]  ? rt_mutex_slowunlock+0x1cb/0x300
[ 1152.645254][T24234]  ? ksys_write+0x248/0x270
[ 1152.645280][T24234]  ? __pfx_ksys_write+0x10/0x10
[ 1152.645313][T24234]  __x64_sys_bpf+0x7c/0x90
[ 1152.645332][T24234]  do_syscall_64+0xe2/0xf80
[ 1152.645354][T24234]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1152.645370][T24234]  ? trace_irq_disable+0x37/0x100
[ 1152.645387][T24234]  ? clear_bhb_loop+0x60/0xb0
[ 1152.645406][T24234]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1152.645422][T24234] RIP: 0033:0x7f1747e4acb9
[ 1152.645437][T24234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1152.645451][T24234] RSP: 002b:00007f17460a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1152.645469][T24234] RAX: ffffffffffffffda RBX: 00007f17480c5fa0 RCX: 00007f1747e4acb9
[ 1152.645481][T24234] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012
[ 1152.645492][T24234] RBP: 00007f17460a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1152.645503][T24234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1152.645514][T24234] R13: 00007f17480c6038 R14: 00007f17480c5fa0 R15: 00007ffd6ee101b8
[ 1152.645538][T24234]  </TASK>
[ 1152.956797][T23527] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1152.979433][T23527] usb 6-1: device descriptor read/8, error -71
[ 1153.199139][T23862] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1153.246832][T23862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1153.255378][T23527] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1153.286118][T23527] usb 6-1: device descriptor read/8, error -71
[ 1153.294345][T24246] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1153.294401][T24246] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1153.309546][T23862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1153.382380][T23862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1153.406558][T23527] usb usb6-port1: unable to enumerate USB device
[ 1153.577115][T24263] netlink: 'syz.7.6825': attribute type 8 has an invalid length.
[ 1154.075291][   T43] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[ 1154.153747][T24271] binder: 24270:24271 ioctl c0306201 0 returned -14
[ 1154.154648][T24271] binder: 24270:24271 ioctl c0306201 200000000240 returned -11
[ 1154.232155][   T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1154.232186][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1154.232207][   T43] usb 3-1: Product: syz
[ 1154.232222][   T43] usb 3-1: Manufacturer: syz
[ 1154.232237][   T43] usb 3-1: SerialNumber: syz
[ 1154.271088][   T43] usb 3-1: config 0 descriptor??
[ 1154.460101][T23862] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1154.498662][   T43] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1154.538661][T23862] 8021q: adding VLAN 0 to HW filter on device team0
[ 1154.558756][T23359] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1154.558968][T23359] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1154.594477][T23359] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1154.837902][T23359] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1155.343040][T24291] fuse: Unknown parameter 't50x0000000000000003'
[ 1156.546996][T24265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1156.547508][T24265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1156.808200][T24295] FAULT_INJECTION: forcing a failure.
[ 1156.808200][T24295] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1156.808237][T24295] CPU: 0 UID: 0 PID: 24295 Comm: syz.5.6830 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1156.808265][T24295] Tainted: [L]=SOFTLOCKUP
[ 1156.808272][T24295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1156.808285][T24295] Call Trace:
[ 1156.808303][T24295]  <TASK>
[ 1156.808313][T24295]  dump_stack_lvl+0xe8/0x150
[ 1156.808344][T24295]  should_fail_ex+0x46b/0x600
[ 1156.808374][T24295]  _copy_from_iter+0x1d3/0x1670
[ 1156.808399][T24295]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1156.808429][T24295]  ? __pfx__copy_from_iter+0x10/0x10
[ 1156.808459][T24295]  ? set_page_refcounted+0xa0/0x1e0
[ 1156.808480][T24295]  ? page_copy_sane+0x4e/0x270
[ 1156.808505][T24295]  copy_page_from_iter+0xdd/0x170
[ 1156.808534][T24295]  tun_get_user+0x1d4b/0x3de0
[ 1156.808554][T24295]  ? tun_get_user+0x6ff/0x3de0
[ 1156.808589][T24295]  ? __lock_acquire+0x6b5/0x2cf0
[ 1156.808617][T24295]  ? __pfx_tun_get_user+0x10/0x10
[ 1156.808642][T24295]  ? __lock_acquire+0x6b5/0x2cf0
[ 1156.808681][T24295]  ? ref_tracker_alloc+0x339/0x4b0
[ 1156.808704][T24295]  ? get_pid_task+0x20/0x1f0
[ 1156.808732][T24295]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1156.808758][T24295]  ? tun_get+0x1c/0x2f0
[ 1156.808780][T24295]  ? tun_get+0x1c/0x2f0
[ 1156.808808][T24295]  ? tun_get+0x1c/0x2f0
[ 1156.808830][T24295]  ? tun_get+0x1c/0x2f0
[ 1156.808853][T24295]  tun_chr_write_iter+0x119/0x200
[ 1156.808878][T24295]  vfs_write+0x629/0xba0
[ 1156.808910][T24295]  ? __pfx_vfs_write+0x10/0x10
[ 1156.808945][T24295]  ? __fget_files+0x2a/0x420
[ 1156.808974][T24295]  ksys_write+0x156/0x270
[ 1156.809002][T24295]  ? __pfx_ksys_write+0x10/0x10
[ 1156.809039][T24295]  do_syscall_64+0xe2/0xf80
[ 1156.809066][T24295]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1156.809085][T24295]  ? trace_irq_disable+0x37/0x100
[ 1156.809107][T24295]  ? clear_bhb_loop+0x60/0xb0
[ 1156.809130][T24295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1156.809151][T24295] RIP: 0033:0x7fd0454db58e
[ 1156.809169][T24295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1156.809186][T24295] RSP: 002b:00007fd043775fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1156.809206][T24295] RAX: ffffffffffffffda RBX: 00007fd0437766c0 RCX: 00007fd0454db58e
[ 1156.809221][T24295] RDX: 000000000000004a RSI: 0000200000000300 RDI: 00000000000000c8
[ 1156.809234][T24295] RBP: 00007fd043776090 R08: 0000000000000000 R09: 0000000000000000
[ 1156.809247][T24295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1156.809259][T24295] R13: 00007fd045796038 R14: 00007fd045795fa0 R15: 00007ffe50532af8
[ 1156.809290][T24295]  </TASK>
[ 1156.865779][   T43] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1157.105349][   T43] usb 3-1: USB disconnect, device number 25
[ 1157.393614][T24305] bond0: entered promiscuous mode
[ 1157.393640][T24305] bond_slave_0: entered promiscuous mode
[ 1157.393877][T24305] bond_slave_1: entered promiscuous mode
[ 1157.415300][ T5906] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1157.565278][ T5906] usb 8-1: Using ep0 maxpacket: 8
[ 1157.569473][ T5906] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[ 1157.569535][ T5906] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1157.569559][ T5906] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1157.569584][ T5906] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[ 1157.569608][ T5906] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1157.569651][ T5906] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1157.569673][ T5906] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1157.689837][T24313] binder: 24303:24313 ioctl c0306201 2000000003c0 returned -14
[ 1157.748688][T24315] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1157.748744][T24315] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1157.885332][ T5906] usb 8-1: GET_CAPABILITIES returned 0
[ 1157.885389][ T5906] usbtmc 8-1:16.0: can't read capabilities
[ 1158.085017][T23527] usb 8-1: USB disconnect, device number 16
[ 1158.368996][T23862] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1158.691257][T23862] veth0_vlan: entered promiscuous mode
[ 1158.714172][T23862] veth1_vlan: entered promiscuous mode
[ 1158.810642][T24330] netlink: 'syz.5.6836': attribute type 8 has an invalid length.
[ 1158.883915][T24334] binder: 24333:24334 ioctl c0306201 200000000240 returned -11
[ 1158.920725][T23862] veth0_macvtap: entered promiscuous mode
[ 1158.981653][T23862] veth1_macvtap: entered promiscuous mode
[ 1160.017658][T23862] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1160.040930][T23862] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1160.086291][T23358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.086876][T23358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.088154][T23358] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.088582][T23358] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.861807][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1160.861831][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1160.974275][ T5961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1160.974299][ T5961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1162.211263][T24359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6843'.
[ 1162.219133][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1162.304253][T24362] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1162.304313][T24362] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1162.378745][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1162.378774][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1162.378811][   T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1162.378836][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1163.384885][   T10] usb 3-1: config 0 descriptor??
[ 1163.555065][T24371] bridge_slave_0: invalid flags given to default FDB implementation
[ 1165.310615][T24390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1165.311128][T24390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1165.448902][   T43] usb 3-1: USB disconnect, device number 26
[ 1165.733275][T24384] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6852'.
[ 1165.756093][T24401] overlayfs: failed to resolve './file0': -2
[ 1166.063263][T24404] netlink: 'syz.2.6855': attribute type 8 has an invalid length.
[ 1166.655781][T24409] FAULT_INJECTION: forcing a failure.
[ 1166.655781][T24409] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1166.655806][T24409] CPU: 1 UID: 0 PID: 24409 Comm: syz.6.6849 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1166.655822][T24409] Tainted: [L]=SOFTLOCKUP
[ 1166.655827][T24409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1166.655834][T24409] Call Trace:
[ 1166.655839][T24409]  <TASK>
[ 1166.655845][T24409]  dump_stack_lvl+0xe8/0x150
[ 1166.655864][T24409]  should_fail_ex+0x46b/0x600
[ 1166.655882][T24409]  _copy_to_user+0x31/0xb0
[ 1166.655900][T24409]  simple_read_from_buffer+0xe1/0x170
[ 1166.655914][T24409]  proc_fail_nth_read+0x1be/0x230
[ 1166.655932][T24409]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1166.655949][T24409]  ? rw_verify_area+0x2ac/0x4e0
[ 1166.655964][T24409]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1166.655979][T24409]  vfs_read+0x212/0xa70
[ 1166.655998][T24409]  ? __pfx_vfs_read+0x10/0x10
[ 1166.656013][T24409]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1166.656029][T24409]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1166.656043][T24409]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1166.656058][T24409]  ? mutex_lock_nested+0x152/0x1d0
[ 1166.656069][T24409]  ? fdget_pos+0x252/0x320
[ 1166.656085][T24409]  ksys_read+0x156/0x270
[ 1166.656100][T24409]  ? __pfx_ksys_read+0x10/0x10
[ 1166.656120][T24409]  do_syscall_64+0xe2/0xf80
[ 1166.656135][T24409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.656146][T24409]  ? clear_bhb_loop+0x60/0xb0
[ 1166.656159][T24409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1166.656169][T24409] RIP: 0033:0x7f1747e0b58e
[ 1166.656180][T24409] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1166.656190][T24409] RSP: 002b:00007f17460a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1166.656203][T24409] RAX: ffffffffffffffda RBX: 00007f17460a66c0 RCX: 00007f1747e0b58e
[ 1166.656211][T24409] RDX: 000000000000000f RSI: 00007f17460a60a0 RDI: 0000000000000004
[ 1166.656218][T24409] RBP: 00007f17460a6090 R08: 0000000000000000 R09: 0000000000000000
[ 1166.656225][T24409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1166.656232][T24409] R13: 00007f17480c6038 R14: 00007f17480c5fa0 R15: 00007ffd6ee101b8
[ 1166.656249][T24409]  </TASK>
[ 1166.744743][T24411] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6857'.
[ 1167.570027][T24415] bridge_slave_0: invalid flags given to default FDB implementation
[ 1168.175286][ T1884] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1168.274207][T24426] FAULT_INJECTION: forcing a failure.
[ 1168.274207][T24426] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1168.274233][T24426] CPU: 1 UID: 0 PID: 24426 Comm: syz.5.6863 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1168.274249][T24426] Tainted: [L]=SOFTLOCKUP
[ 1168.274253][T24426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1168.274260][T24426] Call Trace:
[ 1168.274265][T24426]  <TASK>
[ 1168.274272][T24426]  dump_stack_lvl+0xe8/0x150
[ 1168.274292][T24426]  should_fail_ex+0x46b/0x600
[ 1168.274309][T24426]  _copy_to_user+0x31/0xb0
[ 1168.274336][T24426]  simple_read_from_buffer+0xe1/0x170
[ 1168.274351][T24426]  proc_fail_nth_read+0x1be/0x230
[ 1168.274368][T24426]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1168.274384][T24426]  ? rw_verify_area+0x2ac/0x4e0
[ 1168.274399][T24426]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1168.274415][T24426]  vfs_read+0x212/0xa70
[ 1168.274433][T24426]  ? __pfx_vfs_read+0x10/0x10
[ 1168.274448][T24426]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1168.274464][T24426]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1168.274479][T24426]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1168.274493][T24426]  ? mutex_lock_nested+0x152/0x1d0
[ 1168.274504][T24426]  ? fdget_pos+0x252/0x320
[ 1168.274520][T24426]  ksys_read+0x156/0x270
[ 1168.274536][T24426]  ? __pfx_ksys_read+0x10/0x10
[ 1168.274548][T24426]  ? fput+0xa0/0xd0
[ 1168.274565][T24426]  do_syscall_64+0xe2/0xf80
[ 1168.274583][T24426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1168.274594][T24426]  ? trace_irq_disable+0x37/0x100
[ 1168.274606][T24426]  ? clear_bhb_loop+0x60/0xb0
[ 1168.274619][T24426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1168.274630][T24426] RIP: 0033:0x7fd0454db58e
[ 1168.274641][T24426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1168.274651][T24426] RSP: 002b:00007fd043775fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1168.274664][T24426] RAX: ffffffffffffffda RBX: 00007fd0437766c0 RCX: 00007fd0454db58e
[ 1168.274673][T24426] RDX: 000000000000000f RSI: 00007fd0437760a0 RDI: 0000000000000004
[ 1168.274680][T24426] RBP: 00007fd043776090 R08: 0000000000000000 R09: 0000000000000000
[ 1168.274688][T24426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1168.274695][T24426] R13: 00007fd045796038 R14: 00007fd045795fa0 R15: 00007ffe50532af8
[ 1168.274712][T24426]  </TASK>
[ 1168.325225][ T1884] usb 1-1: Using ep0 maxpacket: 32
[ 1168.327471][ T1884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1168.327503][ T1884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1168.327542][ T1884] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1168.327563][ T1884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1168.576293][ T1884] usb 1-1: config 0 descriptor??
[ 1169.046394][ T1884] logitech 0003:046D:C29C.001C: unknown main item tag 0x0
[ 1169.046437][ T1884] logitech 0003:046D:C29C.001C: unknown main item tag 0x0
[ 1169.046465][ T1884] logitech 0003:046D:C29C.001C: unknown main item tag 0x0
[ 1169.046493][ T1884] logitech 0003:046D:C29C.001C: unknown main item tag 0x0
[ 1169.046522][ T1884] logitech 0003:046D:C29C.001C: unknown main item tag 0x0
[ 1169.046557][ T1884] logitech 0003:046D:C29C.001C: unknown main item tag 0x0
[ 1169.074936][ T1884] logitech 0003:046D:C29C.001C: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0
[ 1170.641648][ T1884] logitech 0003:046D:C29C.001C: no inputs found
[ 1171.535480][ T1884] usb 1-1: USB disconnect, device number 38
[ 1171.769877][   T37] audit: type=1326 audit(1769353745.387:12210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24436 comm="syz.0.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb105baacb9 code=0x7ffc0000
[ 1171.771794][   T37] audit: type=1326 audit(1769353745.387:12211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24436 comm="syz.0.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb105baacb9 code=0x7ffc0000
[ 1171.957883][T24440] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6868'.
[ 1172.155306][ T1884] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1172.305268][ T1884] usb 1-1: Using ep0 maxpacket: 32
[ 1172.314049][ T1884] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3
[ 1172.314081][ T1884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1172.314102][ T1884] usb 1-1: Product: syz
[ 1172.314117][ T1884] usb 1-1: Manufacturer: syz
[ 1172.314133][ T1884] usb 1-1: SerialNumber: syz
[ 1172.424932][ T1884] usb 1-1: config 0 descriptor??
[ 1173.051504][T24447] bridge_slave_0: invalid flags given to default FDB implementation
[ 1173.118232][T23527] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[ 1173.269897][T23527] usb 8-1: Using ep0 maxpacket: 16
[ 1173.272043][T23527] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1173.272060][T23527] usb 8-1: config 0 has no interface number 0
[ 1173.274178][T23527] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1173.274198][T23527] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1173.274210][T23527] usb 8-1: Product: syz
[ 1173.274218][T23527] usb 8-1: Manufacturer: syz
[ 1173.274227][T23527] usb 8-1: SerialNumber: syz
[ 1173.288659][T23527] usb 8-1: config 0 descriptor??
[ 1173.311922][T23527] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1175.051317][ T1884] usb 1-1: USB disconnect, device number 39
[ 1175.052304][ T1884] f81534a_ctrl 1-1:0.0: failed to enable ports: -19
[ 1175.955178][T24461] 9pnet_virtio: no channels available for device syz
[ 1176.732113][T23527] gspca_spca1528: reg_w err -110
[ 1176.732318][T23527] spca1528 8-1:0.1: probe with driver spca1528 failed with error -110
[ 1176.964265][   T43] usb 8-1: USB disconnect, device number 18
[ 1177.376089][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.376161][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.456053][ T5871] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1178.545449][   T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1178.574946][ T5871] usb 7-1: device descriptor read/all, error -71
[ 1178.715605][   T10] usb 8-1: Using ep0 maxpacket: 16
[ 1180.215756][T24479] FAULT_INJECTION: forcing a failure.
[ 1180.215756][T24479] name failslab, interval 1, probability 0, space 0, times 0
[ 1180.215795][T24479] CPU: 1 UID: 0 PID: 24479 Comm: syz.5.6881 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1180.215824][T24479] Tainted: [L]=SOFTLOCKUP
[ 1180.215832][T24479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1180.215846][T24479] Call Trace:
[ 1180.215854][T24479]  <TASK>
[ 1180.215863][T24479]  dump_stack_lvl+0xe8/0x150
[ 1180.215900][T24479]  should_fail_ex+0x46b/0x600
[ 1180.215930][T24479]  should_failslab+0xa8/0x100
[ 1180.215952][T24479]  __kmalloc_cache_node_noprof+0x8a/0x6e0
[ 1180.215982][T24479]  ? __get_vm_area_node+0x171/0x350
[ 1180.216013][T24479]  __get_vm_area_node+0x171/0x350
[ 1180.216043][T24479]  __vmalloc_node_range_noprof+0x372/0x1730
[ 1180.216070][T24479]  ? bpf_check+0x1ae/0x1c4b0
[ 1180.216098][T24479]  ? lruvec_stat_mod_folio+0x6f/0x2d0
[ 1180.216133][T24479]  ? lruvec_stat_mod_folio+0x1ed/0x2d0
[ 1180.216155][T24479]  ? lruvec_stat_mod_folio+0x6f/0x2d0
[ 1180.216179][T24479]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1180.216207][T24479]  ? rcu_is_watching+0x15/0xb0
[ 1180.216230][T24479]  ? rcu_is_watching+0x15/0xb0
[ 1180.216250][T24479]  ? trace_kmalloc+0x1f/0xb0
[ 1180.216274][T24479]  ? bpf_check+0x1ae/0x1c4b0
[ 1180.216293][T24479]  vzalloc_noprof+0xb2/0xe0
[ 1180.216319][T24479]  ? bpf_check+0x1ae/0x1c4b0
[ 1180.216339][T24479]  bpf_check+0x1ae/0x1c4b0
[ 1180.216370][T24479]  ? try_to_take_rt_mutex+0x840/0xb00
[ 1180.216412][T24479]  ? __lock_acquire+0x6b5/0x2cf0
[ 1180.216441][T24479]  ? __lock_acquire+0x6b5/0x2cf0
[ 1180.216477][T24479]  ? __lock_acquire+0x6b5/0x2cf0
[ 1180.216505][T24479]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1180.216528][T24479]  ? css_rstat_updated+0x23a/0x530
[ 1180.216566][T24479]  ? pcpu_memcg_post_alloc_hook+0x77/0x580
[ 1180.216594][T24479]  ? __pfx_bpf_check+0x10/0x10
[ 1180.216618][T24479]  ? ktime_get_with_offset+0x93/0x2a0
[ 1180.216653][T24479]  ? ktime_get_with_offset+0x93/0x2a0
[ 1180.216681][T24479]  ? __asan_memset+0x22/0x50
[ 1180.216706][T24479]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 1180.216725][T24479]  ? security_bpf_prog_load+0x125/0x3c0
[ 1180.216749][T24479]  bpf_prog_load+0x1484/0x1ae0
[ 1180.216787][T24479]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1180.216815][T24479]  ? __might_fault+0xaf/0x130
[ 1180.216861][T24479]  ? bpf_lsm_bpf+0x9/0x20
[ 1180.216877][T24479]  ? security_bpf+0x7e/0x2d0
[ 1180.216899][T24479]  __sys_bpf+0x570/0x920
[ 1180.216922][T24479]  ? __pfx___sys_bpf+0x10/0x10
[ 1180.216942][T24479]  ? rt_mutex_slowunlock+0x1cb/0x300
[ 1180.216978][T24479]  ? ksys_write+0x248/0x270
[ 1180.217006][T24479]  ? __pfx_ksys_write+0x10/0x10
[ 1180.217039][T24479]  __x64_sys_bpf+0x7c/0x90
[ 1180.217059][T24479]  do_syscall_64+0xe2/0xf80
[ 1180.217082][T24479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1180.217106][T24479]  ? trace_irq_disable+0x37/0x100
[ 1180.217127][T24479]  ? clear_bhb_loop+0x60/0xb0
[ 1180.217150][T24479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1180.217171][T24479] RIP: 0033:0x7fd04551acb9
[ 1180.217190][T24479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1180.217208][T24479] RSP: 002b:00007fd043776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1180.217231][T24479] RAX: ffffffffffffffda RBX: 00007fd045795fa0 RCX: 00007fd04551acb9
[ 1180.217246][T24479] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005
[ 1180.217260][T24479] RBP: 00007fd043776090 R08: 0000000000000000 R09: 0000000000000000
[ 1180.217273][T24479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1180.217286][T24479] R13: 00007fd045796038 R14: 00007fd045795fa0 R15: 00007ffe50532af8
[ 1180.217317][T24479]  </TASK>
[ 1180.224290][T24479] syz.5.6881: vmalloc error: size 1152, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1180.224363][T24479] CPU: 1 UID: 0 PID: 24479 Comm: syz.5.6881 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1180.224397][T24479] Tainted: [L]=SOFTLOCKUP
[ 1180.224405][T24479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1180.224418][T24479] Call Trace:
[ 1180.224426][T24479]  <TASK>
[ 1180.224435][T24479]  dump_stack_lvl+0xe8/0x150
[ 1180.224465][T24479]  warn_alloc+0x263/0x3e0
[ 1180.224493][T24479]  ? should_fail_ex+0x343/0x600
[ 1180.224523][T24479]  ? __pfx_warn_alloc+0x10/0x10
[ 1180.224549][T24479]  ? __kmalloc_cache_node_noprof+0x296/0x6e0
[ 1180.224577][T24479]  ? __get_vm_area_node+0x171/0x350
[ 1180.224606][T24479]  ? __get_vm_area_node+0x2e1/0x350
[ 1180.224637][T24479]  __vmalloc_node_range_noprof+0x397/0x1730
[ 1180.224673][T24479]  ? lruvec_stat_mod_folio+0x6f/0x2d0
[ 1180.224708][T24479]  ? lruvec_stat_mod_folio+0x1ed/0x2d0
[ 1180.224733][T24479]  ? lruvec_stat_mod_folio+0x6f/0x2d0
[ 1180.224757][T24479]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1180.224784][T24479]  ? rcu_is_watching+0x15/0xb0
[ 1180.224806][T24479]  ? rcu_is_watching+0x15/0xb0
[ 1180.224826][T24479]  ? trace_kmalloc+0x1f/0xb0
[ 1180.224851][T24479]  ? bpf_check+0x1ae/0x1c4b0
[ 1180.224870][T24479]  vzalloc_noprof+0xb2/0xe0
[ 1180.224897][T24479]  ? bpf_check+0x1ae/0x1c4b0
[ 1180.224917][T24479]  bpf_check+0x1ae/0x1c4b0
[ 1180.224949][T24479]  ? try_to_take_rt_mutex+0x840/0xb00
[ 1180.224986][T24479]  ? __lock_acquire+0x6b5/0x2cf0
[ 1180.225015][T24479]  ? __lock_acquire+0x6b5/0x2cf0
[ 1180.225052][T24479]  ? __lock_acquire+0x6b5/0x2cf0
[ 1180.225081][T24479]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1180.225104][T24479]  ? css_rstat_updated+0x23a/0x530
[ 1180.225143][T24479]  ? pcpu_memcg_post_alloc_hook+0x77/0x580
[ 1180.225169][T24479]  ? __pfx_bpf_check+0x10/0x10
[ 1180.225193][T24479]  ? ktime_get_with_offset+0x93/0x2a0
[ 1180.225227][T24479]  ? ktime_get_with_offset+0x93/0x2a0
[ 1180.225254][T24479]  ? __asan_memset+0x22/0x50
[ 1180.225278][T24479]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[ 1180.225296][T24479]  ? security_bpf_prog_load+0x125/0x3c0
[ 1180.225321][T24479]  bpf_prog_load+0x1484/0x1ae0
[ 1180.225358][T24479]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1180.225380][T24479]  ? __might_fault+0xaf/0x130
[ 1180.225431][T24479]  ? bpf_lsm_bpf+0x9/0x20
[ 1180.225448][T24479]  ? security_bpf+0x7e/0x2d0
[ 1180.225469][T24479]  __sys_bpf+0x570/0x920
[ 1180.225493][T24479]  ? __pfx___sys_bpf+0x10/0x10
[ 1180.225512][T24479]  ? rt_mutex_slowunlock+0x1cb/0x300
[ 1180.225549][T24479]  ? ksys_write+0x248/0x270
[ 1180.225577][T24479]  ? __pfx_ksys_write+0x10/0x10
[ 1180.225609][T24479]  __x64_sys_bpf+0x7c/0x90
[ 1180.225630][T24479]  do_syscall_64+0xe2/0xf80
[ 1180.225656][T24479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1180.225675][T24479]  ? trace_irq_disable+0x37/0x100
[ 1180.225696][T24479]  ? clear_bhb_loop+0x60/0xb0
[ 1180.225719][T24479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1180.225740][T24479] RIP: 0033:0x7fd04551acb9
[ 1180.225759][T24479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1180.225777][T24479] RSP: 002b:00007fd043776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1180.225799][T24479] RAX: ffffffffffffffda RBX: 00007fd045795fa0 RCX: 00007fd04551acb9
[ 1180.225814][T24479] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005
[ 1180.225828][T24479] RBP: 00007fd043776090 R08: 0000000000000000 R09: 0000000000000000
[ 1180.225842][T24479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1180.225855][T24479] R13: 00007fd045796038 R14: 00007fd045795fa0 R15: 00007ffe50532af8
[ 1180.225887][T24479]  </TASK>
[ 1180.280557][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1180.290668][   T10] usb 8-1: unable to read config index 0 descriptor/start: -71
[ 1180.290706][   T10] usb 8-1: can't read configurations, error -71
[ 1180.536452][T24479] Mem-Info:
[ 1180.536471][T24479] active_anon:294 inactive_anon:16114 isolated_anon:0
[ 1180.536471][T24479]  active_file:31388 inactive_file:36950 isolated_file:0
[ 1180.536471][T24479]  unevictable:768 dirty:198 writeback:0
[ 1180.536471][T24479]  slab_reclaimable:12962 slab_unreclaimable:110979
[ 1180.536471][T24479]  mapped:31597 shmem:11206 pagetables:1452
[ 1180.536471][T24479]  sec_pagetables:0 bounce:0
[ 1180.536471][T24479]  kernel_misc_reclaimable:0
[ 1180.536471][T24479]  free:1275969 free_pcp:3451 free_cma:0
[ 1180.536523][T24479] Node 0 active_anon:1176kB inactive_anon:64456kB active_file:125296kB inactive_file:147800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126336kB dirty:792kB writeback:0kB shmem:43288kB kernel_stack:13684kB pagetables:5660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1180.536568][T24479] Node 1 active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1180.536609][T24479] Node 0 DMA free:15356kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1180.536668][T24479] lowmem_reserve[]: 0 2508 2509 2509 2509
[ 1180.536783][T24479] Node 0 DMA32 free:1187444kB boost:0kB min:3936kB low:6476kB high:9016kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1176kB inactive_anon:64460kB active_file:125296kB inactive_file:147800kB unevictable:1536kB writepending:792kB zspages:0kB present:3129332kB managed:2569016kB mlocked:0kB bounce:0kB free_pcp:13804kB local_pcp:3888kB free_cma:0kB
[ 1180.536847][T24479] lowmem_reserve[]: 0 0 0 0 0
[ 1180.536880][T24479] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1180.536934][T24479] lowmem_reserve[]: 0 0 0 0 0
[ 1180.536967][T24479] Node 1 Normal free:3901076kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:256kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1180.537025][T24479] lowmem_reserve[]: 0 0 0 0 0
[ 1180.537057][T24479] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB
[ 1180.537210][T24479] Node 0 DMA32: 2001*4kB (UM) 4117*8kB (UME) 2886*16kB (UME) 1132*32kB (UME) 364*64kB (UME) 415*128kB (UME) 382*256kB (UME) 256*512kB (UME) 151*1024kB (UME) 83*2048kB (UM) 106*4096kB (UM) = 1187404kB
[ 1180.537370][T24479] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1180.537507][T24479] Node 1 Normal: 195*4kB (U) 45*8kB (UE) 32*16kB (UE) 203*32kB (UE) 83*64kB (UME) 36*128kB (UME) 14*256kB (UM) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (ME) 945*4096kB (M) = 3901076kB
[ 1180.537669][T24479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1180.537686][T24479] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1180.537703][T24479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1180.537719][T24479] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1180.537736][T24479] 79539 total pagecache pages
[ 1180.537745][T24479] 0 pages in swap cache
[ 1180.537754][T24479] Free swap  = 124996kB
[ 1180.537762][T24479] Total swap = 124996kB
[ 1180.537770][T24479] 2097051 pages RAM
[ 1180.537777][T24479] 0 pages HighMem/MovableOnly
[ 1180.537786][T24479] 422963 pages reserved
[ 1180.537792][T24479] 0 pages cma reserved
[ 1181.626724][T24490] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6885'.
[ 1182.777948][T24494] kvm: kvm [24491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x49db
[ 1182.778014][T24494] kvm: kvm [24491]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x49dc
[ 1182.817194][T24494] kvm: kvm [24491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x9134
[ 1182.817254][T24494] kvm: kvm [24491]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x9135
[ 1182.923603][T24494] kvm_intel: kvm [24491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x8867
[ 1182.950248][T24494] kvm_intel: kvm [24491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xb909
[ 1182.952407][T24494] kvm: kvm [24491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x7056
[ 1182.952453][T24494] kvm: kvm [24491]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x7057
[ 1182.991892][T24494] kvm_intel: kvm [24491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xb0f9
[ 1182.992011][T24494] kvm: kvm [24491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xb0f9
[ 1182.992045][T24494] kvm: kvm [24491]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xb0fa
[ 1182.993818][T24494] kvm: kvm [24491]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x8847
[ 1182.993870][T24494] kvm: kvm [24491]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x8848
[ 1182.996177][ T1246] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1183.202247][ T1246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1183.202285][ T1246] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1183.202337][ T1246] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1183.202368][ T1246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.142604][ T1246] usb 6-1: config 0 descriptor??
[ 1184.184217][ T1246] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1184.442559][T24518] netlink: 'syz.7.6893': attribute type 1 has an invalid length.
[ 1184.520527][T13660] Bluetooth: hci2: command 0x0406 tx timeout
[ 1184.958450][T23834] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1185.053469][T24528] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6896'.
[ 1185.208179][T23834] usb 7-1: too many configurations: 25, using maximum allowed: 8
[ 1185.605448][T23834] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1185.605482][T23834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1185.605504][T23834] usb 7-1: Product: syz
[ 1185.605520][T23834] usb 7-1: Manufacturer: syz
[ 1185.605536][T23834] usb 7-1: SerialNumber: syz
[ 1185.965331][T23834] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1185.965393][T23834] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1185.965415][T23834] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1185.975303][   T10] usb 6-1: USB disconnect, device number 42
[ 1186.060614][T23834] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[ 1186.101718][T23834] usb 7-1: USB disconnect, device number 18
[ 1186.109079][T24535] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1186.710752][T24556] netlink: 'syz.0.6904': attribute type 1 has an invalid length.
[ 1186.944400][T24556] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1187.577220][T23834] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1187.937884][T24603] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6908'.
[ 1188.425333][   T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1188.467872][T23834] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1188.467909][T23834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1188.473790][T23834] usb 7-1: config 0 descriptor??
[ 1188.547275][T24607] netlink: 'syz.0.6909': attribute type 8 has an invalid length.
[ 1188.617984][T23834] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1188.648700][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1188.648760][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1188.648850][   T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1188.648884][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1188.670965][T24607] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1188.671599][T24607] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1188.897495][T23834] gspca_cpia1: usb_control_msg 03, error -71
[ 1188.897966][T23834] gspca_cpia1: usb_control_msg 01, error -71
[ 1188.897997][T23834] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[ 1189.037407][   T10] usb 6-1: config 0 descriptor??
[ 1189.070142][T23834] ==================================================================
[ 1189.070162][T23834] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[ 1189.070194][T23834] Read of size 8 at addr ffffc9000db1a008 by task kworker/0:6/23834
[ 1189.070212][T23834] 
[ 1189.070226][T23834] CPU: 0 UID: 0 PID: 23834 Comm: kworker/0:6 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1189.070255][T23834] Tainted: [L]=SOFTLOCKUP
[ 1189.070263][T23834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1189.070278][T23834] Workqueue: usb_hub_wq hub_event
[ 1189.070304][T23834] Call Trace:
[ 1189.070312][T23834]  <TASK>
[ 1189.070323][T23834]  dump_stack_lvl+0xe8/0x150
[ 1189.070350][T23834]  print_report+0xba/0x230
[ 1189.070373][T23834]  ? __list_add_valid_or_report+0x4e/0x130
[ 1189.070394][T23834]  kasan_report+0x117/0x150
[ 1189.070423][T23834]  ? __list_add_valid_or_report+0x4e/0x130
[ 1189.070449][T23834]  __list_add_valid_or_report+0x4e/0x130
[ 1189.070471][T23834]  kcov_remote_stop+0x457/0x680
[ 1189.070497][T23834]  hub_event+0x49d8/0x4f60
[ 1189.070543][T23834]  ? __pfx_hub_event+0x10/0x10
[ 1189.070565][T23834]  ? process_scheduled_works+0xa0f/0x17a0
[ 1189.070592][T23834]  ? process_scheduled_works+0xa0f/0x17a0
[ 1189.070613][T23834]  ? process_scheduled_works+0xa0f/0x17a0
[ 1189.070636][T23834]  process_scheduled_works+0xaec/0x17a0
[ 1189.070672][T23834]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1189.070694][T23834]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1189.070719][T23834]  ? assign_work+0x3d3/0x440
[ 1189.070742][T23834]  worker_thread+0x89f/0xd90
[ 1189.070782][T23834]  ? __kthread_parkme+0x7a/0x1f0
[ 1189.070812][T23834]  kthread+0x726/0x8b0
[ 1189.070839][T23834]  ? __pfx_worker_thread+0x10/0x10
[ 1189.070862][T23834]  ? __pfx_kthread+0x10/0x10
[ 1189.070887][T23834]  ? rt_spin_unlock+0x14f/0x200
[ 1189.070912][T23834]  ? rt_spin_unlock+0x160/0x200
[ 1189.070933][T23834]  ? __pfx_kthread+0x10/0x10
[ 1189.070959][T23834]  ret_from_fork+0x51b/0xa40
[ 1189.070984][T23834]  ? __pfx_ret_from_fork+0x10/0x10
[ 1189.071012][T23834]  ? __switch_to+0xc82/0x1410
[ 1189.071032][T23834]  ? __pfx_kthread+0x10/0x10
[ 1189.071056][T23834]  ret_from_fork_asm+0x1a/0x30
[ 1189.071088][T23834]  </TASK>
[ 1189.071096][T23834] 
[ 1189.071100][T23834] The buggy address belongs to a vmalloc virtual mapping
[ 1189.071120][T23834] Memory state around the buggy address:
[ 1189.071131][T23834]  ffffc9000db19f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1189.071145][T23834]  ffffc9000db19f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1189.071159][T23834] >ffffc9000db1a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1189.071170][T23834]                       ^
[ 1189.071182][T23834]  ffffc9000db1a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1189.071196][T23834]  ffffc9000db1a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1189.071207][T23834] ==================================================================
[ 1189.071229][T23834] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1189.071249][T23834] CPU: 0 UID: 0 PID: 23834 Comm: kworker/0:6 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1189.071278][T23834] Tainted: [L]=SOFTLOCKUP
[ 1189.071286][T23834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1189.071300][T23834] Workqueue: usb_hub_wq hub_event
[ 1189.071328][T23834] Call Trace:
[ 1189.071337][T23834]  <TASK>
[ 1189.071345][T23834]  vpanic+0x1e0/0x670
[ 1189.071374][T23834]  panic+0xc5/0xd0
[ 1189.071400][T23834]  ? __pfx_panic+0x10/0x10
[ 1189.071426][T23834]  ? __list_add_valid_or_report+0x4e/0x130
[ 1189.071453][T23834]  ? __list_add_valid_or_report+0x4e/0x130
[ 1189.071475][T23834]  check_panic_on_warn+0x89/0xb0
[ 1189.071505][T23834]  ? __list_add_valid_or_report+0x4e/0x130
[ 1189.071526][T23834]  end_report+0x6f/0x140
[ 1189.071554][T23834]  kasan_report+0x128/0x150
[ 1189.071588][T23834]  ? __list_add_valid_or_report+0x4e/0x130
[ 1189.071614][T23834]  __list_add_valid_or_report+0x4e/0x130
[ 1189.071639][T23834]  kcov_remote_stop+0x457/0x680
[ 1189.071664][T23834]  hub_event+0x49d8/0x4f60
[ 1189.071711][T23834]  ? __pfx_hub_event+0x10/0x10
[ 1189.071735][T23834]  ? process_scheduled_works+0xa0f/0x17a0
[ 1189.071760][T23834]  ? process_scheduled_works+0xa0f/0x17a0
[ 1189.071782][T23834]  ? process_scheduled_works+0xa0f/0x17a0
[ 1189.071806][T23834]  process_scheduled_works+0xaec/0x17a0
[ 1189.071843][T23834]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1189.071865][T23834]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1189.071890][T23834]  ? assign_work+0x3d3/0x440
[ 1189.071914][T23834]  worker_thread+0x89f/0xd90
[ 1189.071944][T23834]  ? __kthread_parkme+0x7a/0x1f0
[ 1189.071973][T23834]  kthread+0x726/0x8b0
[ 1189.072030][T23834]  ? __pfx_worker_thread+0x10/0x10
[ 1189.072053][T23834]  ? __pfx_kthread+0x10/0x10
[ 1189.072078][T23834]  ? rt_spin_unlock+0x14f/0x200
[ 1189.072101][T23834]  ? rt_spin_unlock+0x160/0x200
[ 1189.072122][T23834]  ? __pfx_kthread+0x10/0x10
[ 1189.072149][T23834]  ret_from_fork+0x51b/0xa40
[ 1189.072171][T23834]  ? __pfx_ret_from_fork+0x10/0x10
[ 1189.072190][T23834]  ? __switch_to+0xc82/0x1410
[ 1189.072211][T23834]  ? __pfx_kthread+0x10/0x10
[ 1189.072237][T23834]  ret_from_fork_asm+0x1a/0x30
[ 1189.072272][T23834]  </TASK>
[ 1189.072965][T23834] Kernel Offset: disabled