last executing test programs:

2m39.98399114s ago: executing program 3 (id=982):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r6=>r2, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x8004}, 0xffc4)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)

2m38.2976234s ago: executing program 3 (id=989):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="45000000060000000000000000000000000000000000000009000000000000001c000000000000002f7379732f6b65726e656c2f64656275672f73796e632f696e666f0000"], 0x45)

2m37.915913594s ago: executing program 3 (id=994):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0xffffff00}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x50, 0x117, 0x2, 0x3a, "0a3497f396c0070e55757d031f5ed335e4b71d92c30163f237ecbcccea7a44e42099ce33d081112db2cf0f3d443f8490859f0d6d432f35e06e4a"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x18, 0x117, 0x2, 0x3, "4b41b2"}], 0x10e0, 0x44014}, 0x14000012)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}}, 0x62}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/1, 0x1}, {&(0x7f00000001c0)=""/64, 0x40}], 0x2}, 0x8}], 0x1, 0x2, 0x0)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000800)=[{0x3, 0x0, {0x1, 0x0, 0x3}, {0x0, 0xf0, 0x3}, 0xfd, 0xfe}, {0x9, 0x0, {0x1, 0x1, 0x2}, {0x0, 0x1, 0x3}, 0x0, 0x1}, {0x1, 0x0, {0x2}, {0x0, 0x1, 0x1}}, {0x3, 0x0, {0x0, 0xf0, 0x2}, {0x0, 0x0, 0x4}, 0xfd, 0x1}], 0x80)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r4=>0xffffffffffffffff})
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
close(r8)
splice(r8, 0x0, r6, 0x0, 0x8001, 0x0)
splice(r1, 0x0, r6, 0x0, 0x80, 0x4)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = accept4$phonet_pipe(r9, 0x0, 0x0, 0x80800)
read(r1, &(0x7f0000000240)=""/233, 0xe9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendto$rxrpc(r5, &(0x7f0000000440)="10fa07061815e196d5df16a9f0ba3da74ac3bd320b0f7fc5b7df13a2fd6cce47acfcb2d652a2bb7befdcb3c703eb6861c14566004a1ec53c04a25899c98b9cc79898f0d0da967808383cdfb4febcfce810c4100f1bca8d55a130bade8481a0d5bf273b17f716360c7da321281de2e8158defac3d3ffd9fe36ce05dd65a609bb4d226726cb854773a6c4992137af3a0cb22041873865335cb241ce771ab45db8ccb39b9c501ea296790a2134e288081e2a413f111b53aeffd27b6a62ed94161566b1885b5e79c46f6e54fd254c8e62d576ca9456e4aca7d02d28f64ad452d5c8ae5", 0xe1, 0x94, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfea6}}, 0x24)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000000700)=<r12=>0x0, &(0x7f0000000740)=0x4)
setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000780)={@private0={0xfc, 0x0, '\x00', 0x1}, r12}, 0x14)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000000c0)=@ethtool_channels={0x3c, 0x7, 0xfffffffb, 0xfffffffc, 0x1ff, 0x4, 0x1, 0x24ca, 0x80000001}})
write(r4, 0x0, 0x0)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r13, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c000011)

2m36.343391137s ago: executing program 3 (id=1001):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180)
chdir(&(0x7f0000000140)='./file0/file0\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x1}]}]}, {0x0, [0x5f, 0x3]}}, 0x0, 0x30, 0x0, 0x1}, 0x28)

2m35.979307971s ago: executing program 3 (id=1002):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2)
futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x5000001)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2020, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x2000, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

2m34.795278574s ago: executing program 3 (id=1006):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2711}, 0x10)
read$msr(r0, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x4, 0x0, 0x38415262, 0x3, 0x9, [{0x9, 0x4}, {0x0, 0x5724}, {0x2, 0x7f}, {0x5, 0x8}, {0x69b42e76, 0x3}, {0x101, 0x2}, {0x0, 0xfffffffd}, {0x150c, 0xffff1901}], 0x4, 0x8, 0x0, 0x1, 0x5}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000b01fcfffffffddbdf258a7c0000080036800400020004000180"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0xa)
read$FUSE(r6, &(0x7f0000019300)={0x2020, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
wait4(r9, 0x0, 0x1, &(0x7f000001b340))

2m19.645435777s ago: executing program 32 (id=1006):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2711}, 0x10)
read$msr(r0, 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x4, 0x0, 0x38415262, 0x3, 0x9, [{0x9, 0x4}, {0x0, 0x5724}, {0x2, 0x7f}, {0x5, 0x8}, {0x69b42e76, 0x3}, {0x101, 0x2}, {0x0, 0xfffffffd}, {0x150c, 0xffff1901}], 0x4, 0x8, 0x0, 0x1, 0x5}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000b01fcfffffffddbdf258a7c0000080036800400020004000180"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0xa)
read$FUSE(r6, &(0x7f0000019300)={0x2020, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
wait4(r9, 0x0, 0x1, &(0x7f000001b340))

1m23.628008012s ago: executing program 2 (id=1243):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x30, r0, 0x4bb78000)

1m23.452802798s ago: executing program 2 (id=1245):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x500, 0x8774a0e954886b23, 0x578, 0x30, 0xedbb, 0x38fd, 0xf, 0x2, {0x0, 0x5f4}, {0xe3, 0x1}, {0x9, 0x10001, 0x1}, {0xfffffffe, 0xfffffffa}, 0x2, 0x2, 0x55a4, 0x0, 0x1, 0x6, 0x3, 0x9, 0x6, 0x3, 0x8, 0x0, 0xd, 0x2, 0x3, 0x6})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000003c0)={0x400, 0x1, &(0x7f0000000300)=[r2], &(0x7f00000000c0)=[0x2], &(0x7f0000000400), &(0x7f00000001c0), 0x0, 0x7}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x560, &(0x7f00000001c0)={0x0, 0x2b5a, 0x4000, 0x2, 0x15a}, &(0x7f0000000040), &(0x7f0000000240)) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c00000010003b0c000000000000000002000000aaa805f265004fe01203ed5803b881c8a411923cf2ed740fa5ef55107d32c9b74756e1126eb0c258e08c4ce58243801554ee248c33f6ef40e66a2e9f98ea2612711308bc1a0e0900a52079bb016acd811b397925c33799743483a76a078164b996eb545d2cef4f1132e5668eead9cfe83063f3c36bec56341442e2f5fa6a8cd9f4dd1417a2b1c315526e2db4451f2e6b8e6b77d1b50aa853efc81c2ae082daf94363e6b776e8aeabbf5a6e09db3456b1073f458e66fabaf0ad8f", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500080001000000050009008f0000000500270008000000"], 0x4c}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async)
ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f0000000140)={0x8, 0xc}) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c00010002000000000000000c000100bf000000000400000c00010002000300ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c00010002000000a400000014000300766c616e30"], 0xd0}}, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x100cd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x60d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000001, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) (async)
madvise(&(0x7f000016d000/0x4000)=nil, 0x4000, 0xf) (async)
brk(0x101)

1m22.080169569s ago: executing program 2 (id=1253):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00')
pread64(r0, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
fsmount(r0, 0x0, 0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0xfffffffd, 0x7ffffe, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_FLOW={0x8, 0xb, 0xf}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresgid(0xee00, 0x0, 0xee00)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0)
syz_emit_ethernet(0x192, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x15c, 0x6, 0x0, @local, @local, {[@routing={0x3da0bcf268416380, 0x6, 0x1, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty]}, @routing={0xa7d1a0c6f49728ba, 0x8, 0x0, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}, @srh={0x1, 0x8, 0x4, 0x4, 0x2, 0x20, 0x6, [@dev={0xfe, 0x80, '\x00', 0x20}, @remote, @empty, @mcast2]}, @srh={0x87, 0xc, 0x4, 0x6, 0x3, 0x8, 0x81, [@empty, @remote, @mcast2, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}, @dstopts={0x6c, 0x1, '\x00', [@enc_lim, @jumbo={0xc2, 0x4, 0xd}, @enc_lim={0x4, 0x1, 0x42}, @enc_lim]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0)
setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x1000000, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xa9, 0xec, 0x40, 0xc383, 0xabd3, 0x60bf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaa, 0x3, 0x1, 0xef, 0x1, 0x1, 0x0, [], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x81, 0x80, 0xff}}]}}]}}]}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x3b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

1m19.930756416s ago: executing program 2 (id=1267):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (rerun: 64)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40)

1m17.075976575s ago: executing program 2 (id=1276):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
r1 = open(&(0x7f0000000180)='./bus\x00', 0x6529c2, 0x0)
fallocate(r1, 0x0, 0x0, 0x1001f0)
lseek(r1, 0x1fd, 0x3)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
close(r4)
capset(0x0, &(0x7f0000000140)={0x1, 0xfffffffe, 0x0, 0x81, 0xf7fffffb})
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000009000000040000000a00000000000000119d252a7a1911f068dcb460e82f6b2faa49002d14965c9eef03e4fabf9e6308fd3a45c98b80c75dc6b687565ec616582e69f80350b15e362207250b6c3ded81a6300ffd3922e91b62068c4d0b205b913ed0e72f9bcdc8a9bbb7da122529bedca0ab8850dfac7eabc9636f3a88e5fc45502c6fdf6550d4e14f11f95f726dbd866c2a74d3650b43dd7a0779044563555f72415290320668b0f354e300bfdd1ea042087764f8c4aef16d082d73d8a75224a0000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m13.948055732s ago: executing program 2 (id=1286):
socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x3, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5]}}})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x2, @vbi={0xfffffffd, 0x6, 0x8, 0x3234564e, [0x800, 0x4], [0x527, 0x2]}})

1m13.619306799s ago: executing program 33 (id=1286):
socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x3, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5]}}})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0x2, @vbi={0xfffffffd, 0x6, 0x8, 0x3234564e, [0x800, 0x4], [0x527, 0x2]}})

1m8.239736826s ago: executing program 0 (id=1303):
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)={<r0=>0x0, 0x57, "c8c974fa6def267dada41645845785d9302114225088dcaa502abf446b95277a765524bb582f1d874494b286c14d3bba77e70d3878f207219bcc437ad268c7f7342ec2e2f83fca3961eff3376624a4147dc6950c57c507"}, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES8=0x0], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "89b10666e894a2db47f340cca991422e105eac1404a4ecff8db97e1183dbca692ac7124e795636fc6d186417994ee08c9f03f0d06fbc66e7508d5e23dca45b89", 0x3}, 0x48, r2)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffff0, 0xb, 0x5}}}}]}, 0x40}}, 0x4000010)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000003d80)=@broute={'broute\x00', 0x20, 0x2, 0x14e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000003780], 0x0, 0x0, &(0x7f0000003780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0xd9878f71ca44b750, 0x18, 0x892f, 'pimreg\x00', 'veth0_to_bond\x00', 'vlan0\x00', 'ip6tnl0\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz0\x00', {0xfff}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x1c6)

1m4.993509469s ago: executing program 0 (id=1316):
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async, rerun: 32)
syz_usb_connect(0x2, 0x3b, &(0x7f0000001b80)=ANY=[], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) (rerun: 32)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x1}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async, rerun: 64)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async)
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
socket(0x2a, 0x2, 0x0) (async)
select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x8000000, 0x100000001, 0x201, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) (async)
close(0x3)
r5 = socket$inet6(0xa, 0x1, 0x0) (async)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=@bloom_filter={0x1e, 0xfff, 0x0, 0x3, 0x80, r2, 0x8593, '\x00', 0x0, r2, 0x1, 0x2, 0x3, 0xa}, 0x50) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000001000000650000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000b2d600000100009c00"/28], 0x50) (async, rerun: 64)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x5, 0x46, @loopback, @mcast1, 0x8, 0x0, 0x6, 0x3}}) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) (rerun: 64)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)

1m1.231211957s ago: executing program 0 (id=1324):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

1m0.018893659s ago: executing program 0 (id=1327):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b3fffabbd31e802cec485c4c790a9ef0000fbddce2b2acc18f4a7430d4172ebd59f6edab88b044be8904ba63a41a6a82e39982481b005bb10cf9c4e737dcb3509ac8e47fc2686768b3b8044d45aa60a560a22be8ba92c960b35841c14b321afa379088f5e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r3, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x0, 0x1, 0x7fff, 0x4000001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltfilter={0x2c, 0x2d, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff3, 0x9}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
socketpair(0x5, 0xa, 0x1, &(0x7f0000000000))
r11 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r11, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
bind$tipc(r11, &(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x1}}, 0x10)

58.761142103s ago: executing program 0 (id=1330):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x80402, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_io_uring_setup(0xca6, &(0x7f0000000080)={0x0, 0xa8fa, 0x80, 0x1, 0x272}, &(0x7f0000000180), &(0x7f00000001c0))
r2 = syz_io_uring_setup(0x22f, &(0x7f0000000100)={0x0, 0x1, 0x10100, 0x1, 0x0, 0x0, r1}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0)

55.475854282s ago: executing program 0 (id=1341):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, 0x0, 0x7, 0x286b0dfbde86eb3e, 0x0, 0x0, {0x3}, [@NFACCT_PKTS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c01}, 0x4040004)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x22)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
socket$l2tp(0x2, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r9, @ANYBLOB="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"/456], 0x11c}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10)
read$msr(0xffffffffffffffff, &(0x7f00000006c0)=""/212, 0xd4)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x3fb, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10)

40.303956342s ago: executing program 34 (id=1341):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, 0x0, 0x7, 0x286b0dfbde86eb3e, 0x0, 0x0, {0x3}, [@NFACCT_PKTS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c01}, 0x4040004)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x22)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
socket$l2tp(0x2, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r9, @ANYBLOB="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"/456], 0x11c}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10)
read$msr(0xffffffffffffffff, &(0x7f00000006c0)=""/212, 0xd4)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x3fb, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10)

14.493270291s ago: executing program 6 (id=1465):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1c00, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000280)=""/159, 0x9f, <r3=>0x0, &(0x7f0000000340)=""/247, 0xf7}}, 0x10)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x36b0594b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pI4   \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%pi6   \x00'}, 0x20)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1220, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x37}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x32, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x0, 0x40, 0x40}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f0000000840)=[r4, r5, r6, r7, 0x1, r8, r9], &(0x7f0000000880)=[{0x0, 0x4, 0x3, 0x9}, {0x2, 0x3, 0xd, 0x8}, {0x5, 0x1, 0x8, 0xc}, {0x0, 0x1, 0x9, 0x5}, {0x3, 0x5, 0x6, 0x9}], 0x10, 0x80000000}, 0x94)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000009c0)={0xa, @capture={0x0, 0x1, {0xf13, 0x1}, 0x7, 0x7fff}})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c00)={&(0x7f0000000ac0)="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", &(0x7f0000001ac0)=""/6, &(0x7f0000001b00)="a9e08f815855d914ad593a66c8e0a8420cc7be1e2c45b0892013f39de558a519e3d6bebda93ee61723070f4dfd73e53b7cc2755693c040b0f1d1981e5264fb8f839d85c038327a5c665dd028323b37a418c33bd752bf7b4de5da204a25a667720f00a18d6289ecc3fe31283d2151d85baa17495a", &(0x7f0000001b80)="d89afee713deeb2bb5f1424398e06c6d1fdbf2a1a238a3bf81df218cceeb0c175f21bfccd42a1c80fcee44e28663aed07d382e6b01d7c0427976c9d9e206eb9abf712ff9723c40fbb6b64efa7c1f0b664d", 0x0, r0, 0x4}, 0x38)
r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001c40), 0x400400, 0x0)
getpeername$ax25(r10, &(0x7f0000001c80)={{0x3, @default}, [@bcast, @netrom, @rose, @default, @default, @null, @null, @default]}, &(0x7f0000001d00)=0x48)
ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000001d40)=r10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001dc0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r11, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x58, r12, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x13, 0x7, '/usr/sbin/ntpd\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
sendto$phonet(r4, &(0x7f0000001f00)="4e4c01187ed243e370c81f4824166cc9059ecfea6bcaa2300dae4f9fe3f3977499083aecc6d1f4e47e3f731cfb4237702d0ddcdd2b2b405cd94bdf3eedfaec2b0ebda334cf60e8a06d354280cafce0db1a53f80ad58c816e0fd106e995e7c2341a1557d6d01d4667f5b5dfa4b093e08b1c31acc29e6ae03375a96d62e17ed498a3c1fb23e54f90b1c8583a8b761e89a128b99be170cfb8e0fdc4d8a96f67b72184c64220fbe7386498b8502285d1fd1bb12893be20f1ca9d69f4326453012bd214e42d8aef3e1d32f9c416a9aff8b4", 0xcf, 0x8010, &(0x7f0000002000)={0x23, 0x31, 0x1}, 0x10)
socket$inet(0x2, 0x8000a, 0xb)
r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r13, 0x800442d3, &(0x7f0000002040)={0x6, 0x4, 0x1000, @remote, 'macvlan0\x00'})
r14 = syz_genetlink_get_family_id$l2tp(&(0x7f00000020c0), r10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r10, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8800200}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x58, r14, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0xb85}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bridge\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000810)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000002280)={'ip6_vti0\x00', &(0x7f0000002200)={'ip6tnl0\x00', <r15=>0x0, 0x2f, 0x10, 0x80, 0x3, 0x14, @loopback, @mcast2, 0x10, 0x20, 0x8121, 0xffffffff}})
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f00000022c0)={@local, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x100, 0x34a, 0x400, 0xffffffffffffff7f, 0x100001, r15})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r10, 0x7a5, &(0x7f0000002340)={{@host}})
sendmsg$NFT_MSG_GETTABLE(r9, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x78, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x1a, 0x6, "c3c75ae8ea7206dd85b11a136e0c109dff41d70bbe70"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004080}, 0x880)
getpeername$netlink(r10, &(0x7f00000024c0), &(0x7f0000002500)=0xc)

14.335913034s ago: executing program 6 (id=1467):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/key-users\x00', 0x0, 0x0)
lseek(r0, 0x9, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x139d, 0x4)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000180)={0x0, 0x0})
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
syz_open_dev$MSR(&(0x7f0000000040), 0x1, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xfffffe4f}, {0xc}}}]}]}, 0x84}}, 0x0)

14.095842398s ago: executing program 6 (id=1469):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0x12)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000009c0)=ANY=[])
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000380)={0x32, 0xe, 0x2, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0]}, 0x78)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r2}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x102)
mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0)
r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r6)
unlink(&(0x7f0000000140)='./cgroup\x00')
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0x9, 0x1, 0x0, @SEQ_CONTROLLER=0xff, 0x51})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0)

12.045655038s ago: executing program 6 (id=1472):
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x5}, {0x2, 0x3}], {}, [], {}, {0x20, 0x3}}, 0x34, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$dsp(0xffffffffffffffff, &(0x7f0000000880), 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x2d)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0xfffffffc, 0x104)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0)
umount2(0x0, 0x4)
socket$inet_icmp(0x2, 0x2, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
userfaultfd(0x801)
syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x683)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)

10.558448552s ago: executing program 6 (id=1480):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000001003000100000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x10)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) (async)
r5 = creat(0x0, 0x112) (async)
listen(r2, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
lseek(r6, 0x10000000005, 0xfff5)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
munmap(&(0x7f0000584000/0x800000)=nil, 0x800000) (async)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
io_uring_setup(0x1fc3, &(0x7f00000002c0)={0x0, 0x4bb6, 0x725bd13513a250c0, 0xfffffffe, 0x40002b, 0x0, r5})
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
uname(0x0) (async)
syz_usb_connect(0xd57adc9555e6c010, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1)

9.525329595s ago: executing program 5 (id=1482):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0x12)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000009c0)=ANY=[])
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000380)={0x32, 0xe, 0x2, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0]}, 0x78)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r2}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x102)
mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0)
r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r6)
unlink(&(0x7f0000000140)='./cgroup\x00')
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0x9, 0x1, 0x0, @SEQ_CONTROLLER=0xff, 0x51})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0)

9.2012326s ago: executing program 6 (id=1483):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x801, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000fcffffffffffff92ee25250b2004aaff0001"], 0x0}, 0x94)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000117000000000000000001"], 0x114}], 0x1}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @remote}, &(0x7f0000000200)=0xc)
sendmsg$DCCPDIAG_GETSOCK(r1, 0x0, 0x811)
r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x2b00, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6)
sendmsg(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)='\'U', 0x2}], 0x1}, 0x20000000)
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000033a80)=""/102373, 0x18ff2}, {0x0, 0x2e}], 0x1000000000000070, 0x0, 0x0)
r7 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
listen(0xffffffffffffffff, 0x3)
close_range(r4, r7, 0x0)

8.696156043s ago: executing program 1 (id=1485):
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
setxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) (fail_nth: 2)

7.508967432s ago: executing program 35 (id=1483):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x801, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000fcffffffffffff92ee25250b2004aaff0001"], 0x0}, 0x94)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000117000000000000000001"], 0x114}], 0x1}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @remote}, &(0x7f0000000200)=0xc)
sendmsg$DCCPDIAG_GETSOCK(r1, 0x0, 0x811)
r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x2b00, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6)
sendmsg(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)='\'U', 0x2}], 0x1}, 0x20000000)
preadv(r4, &(0x7f0000001440)=[{&(0x7f0000033a80)=""/102373, 0x18ff2}, {0x0, 0x2e}], 0x1000000000000070, 0x0, 0x0)
r7 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
listen(0xffffffffffffffff, 0x3)
close_range(r4, r7, 0x0)

7.490500287s ago: executing program 1 (id=1487):
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x20048000)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7.489675438s ago: executing program 5 (id=1488):
r0 = socket(0x10, 0x3, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x2, {0xd, 0x7}, 0x6}, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x2e, 0x10]}}, 0x0, 0x28, 0x0, 0x2, 0x10}, 0x28)
socket(0x10, 0x3, 0x0) (async)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x2, {0xd, 0x7}, 0x6}, 0x1) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x2e, 0x10]}}, 0x0, 0x28, 0x0, 0x2, 0x10}, 0x28) (async)

7.231999575s ago: executing program 5 (id=1491):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x1, {}, 0xff}, 0x18)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r3, 0x1, {0x0, 0x0, 0x2}, 0x1}, 0x18)
close(0x3)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x36, 0x1, 0x3, "3a8e00000034b52ba75066c27891ca55e21f0000000000b2b678d200", 0x30364d54})
bind$bt_hci(r7, 0x0, 0x0)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe)

7.230427556s ago: executing program 1 (id=1492):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3e8, 0x178, 0x178, 0x3e8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x200, 0x220, 0xc, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'syzkaller1\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x2000)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c)
r4 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c)
connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0x6, 0xe3, '\x00', 0x7})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.826394545s ago: executing program 7 (id=1493):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
close(0x3)
chdir(&(0x7f00000001c0)='./bus\x00')
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x0)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x5d})

6.605859746s ago: executing program 1 (id=1494):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x2}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r8, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x642, 0x1, 0x3, 0xd59f83, 0xc, 0x46, 0x7fffffff, 0x3, 0x7, 0x2800, 0x2800, 0x6, 0x20ba1, 0xd, 0x23, {0xc}, 0xd0, 0xb}})
socket$tipc(0x1e, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SET_TSC(0x1a, 0x3)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(r9, 0xc038563b, &(0x7f00000003c0)={0x0, 0x0, {0x5, 0x800007, 0x4e3c, 0x9d}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)
syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, 0x0, &(0x7f0000000280))

5.90171435s ago: executing program 7 (id=1496):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmmsg(r3, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x1000e}], 0x1}}], 0x34000, 0x24005805)
sendmsg$nl_route(r2, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x101802)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000004000001000000b9ad15b0bfa208000000fcffffffb7030000083f3422402fe00000fab60400000000000085000070d51570ec669b4d34f28076ab5aef18794dd81cefc3868517a7f868c7725ca4efb89d185d1cce0f3f982d9b49a932bc13bf9a1cbc1dce6f553c648eaa7ce6f2a09801bc083655ede8bdaaed6372b8bc1d9459e0d728faf76d62af9f6aea9708a882c247c000f4b8938c3c07826e0fa9ef4197790a6bcb785b0e696193c7c37c9e9bb74e81d3bd352680521ad4d9ca4de13f13d6c531c68941f0ac16d3e9caa47d507c1aef110ce3e2bcb7758f628a48821d610c085087f27e1c839231421f31e93619aa20ab305c3fb9e98b55a62e36145fba981e60f7b144b33b8c52eba67e5ba1c85754a799172301c55dce22604675c5f20ae5dc5bd799e3f098e1c6f1fe986c9f844da6923abae3ebafea1e2f5e90b0bc3272f4e8a38d1a8f5c9499e1a8cc4acf96a065ed758fbc9b2c68c9c2fea709df537d02ad5e8d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

5.327766268s ago: executing program 1 (id=1498):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0x12)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000009c0)=ANY=[])
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000380)={0x32, 0xe, 0x2, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0]}, 0x78)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x102)
mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r5)
unlink(&(0x7f0000000140)='./cgroup\x00')
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0x9, 0x1, 0x0, @SEQ_CONTROLLER=0xff, 0x51})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})

5.067266227s ago: executing program 1 (id=1499):
unshare(0x6a040000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000c2800000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

3.972013639s ago: executing program 4 (id=1504):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
io_setup(0x3ff, &(0x7f0000000500)=<r1=>0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x400, r0, &(0x7f0000000000)="2d39200ab722aaa8df949b433671b098bf69744920a2c37610ef59ffaa24d3030f3a4dcaacfc07c6b248d35763dd2d258876a426645989a62bb28823519a9de28046fcb1ba11848d2c5aadbbb20528da0634f4005bed5c0ff23726f243117fd965e520a5f3f9d10a09d77aa45424655bbda807c4bb3f7320f0aeef2f82482e40660f1d2733426881eed036db9ede0e15473ade441fdf0be420f4a19845ba9748a8c685b3d22044943002f548a03ca64ced2cd31a8889b21971869ec23b73b3bdc5d49c384a3416d29fb73a143f13675292228b3d85aa727ec24bb170fb48f4e17a124ce6d5", 0xe5, 0x0, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000140), 0x0, 0x9, 0x0, 0x2, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000400)="aaa048c233643f5f9b866dedb5f6d7401c818f750106e79203d1b4c1a80a0b49204b8478082a0a7c5186708899ef3d76caa9d5b7ec0dd47ef57bbc7d9ad27fba20ae084556f259a7b2da0274d7874a2c1064ba7e43e5d13017e39cc4a2b9da74369e7c4a7d8ac3550398f5dee6ffc4dfdeda311c96b831cfbcf2ead53b323a5c24444a4971cf20a85875809090a16d59c500851cff2d798c", 0x98, 0x89, 0x0, 0x0, r2}])

3.816098728s ago: executing program 5 (id=1505):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
getpid()
mmap(&(0x7f00003d6000/0x4000)=nil, 0x4000, 0xb635773f05ebbee9, 0x100010, 0xffffffffffffffff, 0x963ac000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
prlimit64(0x0, 0x5, &(0x7f0000000340)={0x4000000009, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r4, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@delqdisc={0x158, 0x25, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xf}, {0xfff1, 0xf}, {0x5, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xa374}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfff}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0xc, [0xd, 0xc, 0x6, 0xd, 0x8, 0x1, 0xb, 0x4, 0xf, 0x1, 0xc, 0x8, 0x6, 0x0, 0x4, 0xf], 0x1, [0x9, 0x5, 0x92, 0xc, 0x5, 0x9, 0x2, 0x5, 0x5, 0x5, 0x2, 0xffff, 0x5, 0x2ae5, 0x401, 0x873], [0x5, 0x6, 0x189, 0x8000, 0x8, 0x2, 0x8, 0x3, 0x7f, 0x6, 0x4, 0x4, 0x1, 0x3, 0x6, 0xcdfe]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}, @TCA_RATE={0x6, 0x5, {0xb6, 0x53}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x4, 0x401, 0x8000, 0x2, 0x3, 0x400, 0x3}}, {0xa, 0x2, [0x1ff, 0x0, 0x3]}}, {{0x1c, 0x1, {0x3, 0x4, 0xdf, 0x8, 0x0, 0x2, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x48, 0x1a, 0x3, 0x200, 0x2, 0xff, 0x4, 0x9}}, {0x16, 0x2, [0x1ff, 0x7, 0x65, 0x0, 0xc17b, 0x2, 0x6, 0xfffb, 0x5]}}, {{0x1c, 0x1, {0x9, 0x2, 0x6, 0x6, 0x0, 0x6, 0x1}}, {0x4}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051)
recvmsg$can_raw(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x2}, 0x10120)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0xf)
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)

3.760457293s ago: executing program 4 (id=1506):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4407000026000104001d0cac5a8084d50000ffff", @ANYRES32=0x0, @ANYBLOB="0000000000010000240012800b00010062726964676500001400028006000600060000000600090005000000"], 0x44}}, 0x4048000)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
clock_gettime(0x0, 0x0) (async)
clock_gettime(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000180))
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f0000000240)) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f0000000240))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0)
r9 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r9, &(0x7f0000000040)='FROZEN\x00', 0x7) (async)
write$cgroup_freezer_state(r9, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendfile(r9, r9, 0x0, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x8)

3.667600916s ago: executing program 4 (id=1507):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0x6, 0xcbff, 0x0, {0x5, 0x6, 0x200000003, 0x6c, 0x7, 0x40000000000d, 0x3, 0xfffff2df, 0x101, 0x4000, 0xfffffffe, 0xee00, 0xffffffffffffffff, 0x4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
chown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0)
setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r4, 0x5, 0xffffffff, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x488c0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x19, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080004}, 0x0)
mount$fuseblk(&(0x7f0000000080), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303090c58df0d631ce1b303030303032303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000540), 0x1004040, 0x0)

3.335684826s ago: executing program 7 (id=1508):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x2, 0x12)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000009c0)=ANY=[])
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000380)={0x32, 0xe, 0x2, 0x0, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0]}, 0x78)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x102)
mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r5)
unlink(&(0x7f0000000140)='./cgroup\x00')
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0x9, 0x1, 0x0, @SEQ_CONTROLLER=0xff, 0x51})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})

3.324809091s ago: executing program 4 (id=1509):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="780100000314040029bd7000ffdbdf250900020073797a320000060008004100727865001400330076657468305f746f5f687372000000000900020073797a31000000000800410072786500140033006261746164765f736c6176655f3000000900020073797a30000000000800410073697700140033006261746164765f736c6176655f3100000900020073797a300000000008004100727865001400330064766d727030000000000000000000000900020073797a31000000000800410072786500140033006e6574706369300000000000000000000900020073797a30000000000800410073697700140033006d6163766c616e3100000000000000000900020073797a3200000000080041007278650014003300766574683100000000000000000000000900020073797a3000000000080041007369770014003300626174616476300000000000000000000900020073797a310000000008004100736977001400330067656e65766531000000000000000000"], 0x178}, 0x1, 0x0, 0x0, 0x54}, 0x1) (async)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x500}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x4000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xd4}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x23}, 0x94) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32)
dup(r2)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r6=>0x0})
ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f00000002c0))
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, <r8=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x6, 0x2799a1, 0x1835d8})

2.514216646s ago: executing program 4 (id=1510):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
close(r3)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil)
unshare(0x24020400)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT=r6], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000)
unshare(0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r7 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0045543, 0x0)
socket$kcm(0xa, 0x1, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r8], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8})

2.251775416s ago: executing program 7 (id=1511):
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x20048000)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.123705069s ago: executing program 4 (id=1512):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
syz_open_procfs(r0, &(0x7f0000000040)='task\x00')
r2 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = getpid()
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
prlimit64(0x0, 0x4, 0x0, 0x0)
r5 = getpgrp(0xffffffffffffffff)
ptrace$setregs(0xf, r5, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000380)={r4, r4})
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
rseq(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94)
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4000)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
syz_pidfd_open(r3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f00000003c0)=""/102391, 0x18ff7)

1.672000312s ago: executing program 5 (id=1513):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601010000000000000000010000000c00078005001500a10bef53050005000a0000000900020073797a30000000000500040000000000050001000600000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x240040c1}, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e"], 0x0)

1.398622172s ago: executing program 7 (id=1514):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)

1.248700927s ago: executing program 7 (id=1515):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x50583, 0x42008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7ff}]}}}]}, 0x3c}}, 0x4000000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x0)

0s ago: executing program 5 (id=1516):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32"], 0x54}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x602, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x36)
r5 = syz_io_uring_setup(0x21c1, &(0x7f0000000480)={0x0, 0x8902, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000600)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x7}, 0xc)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r9 = syz_io_uring_setup(0x3b9, &(0x7f0000000300)={0x0, 0x0, 0x40, 0xfffffffc, 0x30a}, &(0x7f0000000400), &(0x7f0000000280))
io_uring_enter(r9, 0x47f9, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
clock_gettime(0x3, &(0x7f00000003c0))

kernel console output (not intermixed with test programs):

attributes in process `syz.1.835'.
[  581.930467][ T8953] block nbd2: NBD_DISCONNECT
[  582.148632][ T8957] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.838'.
[  584.718005][ T8986] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  584.956667][ T8987] Invalid option length (8481) for dns_resolver key
[  585.505162][ T8999] fuse: Bad value for 'fd'
[  585.614487][ T8999] macvlan0: entered promiscuous mode
[  585.640510][ T8999] macvlan1: entered promiscuous mode
[  585.686604][ T8999] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  585.722219][ T8999] Cannot create hsr debugfs directory
[  585.741936][ T8999] hsr1: entered promiscuous mode
[  588.616903][ T9031] overlayfs: failed to clone upperpath
[  588.826339][ T9036] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  589.021093][ T9032] lo speed is unknown, defaulting to 1000
[  589.862263][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'.
[  589.871494][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'.
[  591.346085][   T30] audit: type=1326 audit(1754906785.406:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  591.424994][   T30] audit: type=1326 audit(1754906785.406:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  591.429806][ T9056] mkiss: ax0: crc mode is auto.
[  591.446479][   T30] audit: type=1326 audit(1754906785.436:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  591.446534][   T30] audit: type=1326 audit(1754906785.436:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  591.446577][   T30] audit: type=1326 audit(1754906785.436:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  592.150088][   T30] audit: type=1326 audit(1754906785.486:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  592.171797][   T30] audit: type=1326 audit(1754906785.486:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  592.345667][   T30] audit: type=1326 audit(1754906785.486:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  592.500712][ T9067] netlink: 56 bytes leftover after parsing attributes in process `syz.1.867'.
[  592.527855][   T30] audit: type=1326 audit(1754906785.486:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  592.745003][   T30] audit: type=1326 audit(1754906785.486:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9059 comm="syz.0.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  593.020580][ T9076] overlayfs: failed to clone upperpath
[  594.066761][ T9100] netlink: 56 bytes leftover after parsing attributes in process `syz.4.877'.
[  595.397904][ T9104] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.878'.
[  595.652463][ T9109] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  595.747985][ T9111] netlink: 148 bytes leftover after parsing attributes in process `syz.4.880'.
[  596.154123][ T9109] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  596.174756][ T9109] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  596.184884][ T9109] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  596.205127][ T9109] geneve3: entered promiscuous mode
[  596.225049][ T9109] geneve3: entered allmulticast mode
[  596.254709][ T9109] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  596.274952][ T9109] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  596.289463][ T9109] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  596.351347][ T9109] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  596.606732][ T9116] overlayfs: failed to clone upperpath
[  596.743349][ T9113] nbd0: detected capacity change from 0 to 549764202496
[  596.912000][   T51] block nbd0: Receive control failed (result -104)
[  597.381474][ T9131] netlink: 'syz.2.886': attribute type 1 has an invalid length.
[  597.398851][ T1207] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  597.482026][ T9131] netlink: 224 bytes leftover after parsing attributes in process `syz.2.886'.
[  597.597605][ T1207] usb 4-1: device descriptor read/64, error -71
[  597.867963][ T1207] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  598.057556][ T1207] usb 4-1: device descriptor read/64, error -71
[  598.188361][ T1207] usb usb4-port1: attempt power cycle
[  598.556328][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'.
[  598.565508][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'.
[  599.186224][ T1207] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  599.208331][ T1207] usb 4-1: device descriptor read/8, error -71
[  599.278630][ T9161] overlayfs: failed to clone upperpath
[  599.285867][ T9163] syz_tun: entered allmulticast mode
[  599.320409][ T9163] syz_tun: left allmulticast mode
[  599.374307][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.896'.
[  599.468300][ T1207] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  599.505853][ T1207] usb 4-1: device descriptor read/8, error -71
[  599.633135][ T1207] usb usb4-port1: unable to enumerate USB device
[  600.017577][ T1207] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  600.097653][ T5967] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  600.287745][ T5967] usb 1-1: device descriptor read/64, error -71
[  600.316150][ T1207] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  600.384539][ T1207] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  600.451890][ T1207] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  600.509119][ T9197] overlayfs: failed to resolve './file0': -2
[  600.549173][ T1207] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  600.583057][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.607698][ T5967] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  600.627598][ T1207] usb 5-1: Product: syz
[  600.653850][ T1207] usb 5-1: Manufacturer: syz
[  600.687668][ T1207] usb 5-1: SerialNumber: syz
[  600.767601][ T5967] usb 1-1: device descriptor read/64, error -71
[  600.802913][ T9198] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.905'.
[  600.817356][ T1207] hub 5-1:1.0: bad descriptor, ignoring hub
[  600.858771][ T1207] hub 5-1:1.0: probe with driver hub failed with error -5
[  600.878897][ T5967] usb usb1-port1: attempt power cycle
[  600.990895][ T1207] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  601.297575][ T5967] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  601.398252][ T1207] usb 5-1: reset high-speed USB device number 18 using dummy_hcd
[  601.429743][ T5967] usb 1-1: device descriptor read/8, error -71
[  601.541901][ T9215] input: syz0 as /devices/virtual/input/input17
[  601.687615][ T5967] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  601.718389][ T5967] usb 1-1: device descriptor read/8, error -71
[  601.795477][ T9181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.822973][ T9224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.912'.
[  601.842138][ T5967] usb usb1-port1: unable to enumerate USB device
[  601.860153][ T9224] fuse: Bad value for 'group_id'
[  601.865564][ T9224] fuse: Bad value for 'group_id'
[  601.878171][ T9181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.931902][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  601.931922][   T30] audit: type=1326 audit(1754906795.996:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e918ebe9 code=0x7ffc0000
[  601.967378][   T30] audit: type=1326 audit(1754906795.996:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e918ebe9 code=0x7ffc0000
[  602.037638][   T30] audit: type=1326 audit(1754906796.026:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30e918ebe9 code=0x7ffc0000
[  602.085620][   T30] audit: type=1326 audit(1754906796.026:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e918ebe9 code=0x7ffc0000
[  602.118472][   T30] audit: type=1326 audit(1754906796.026:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e918ebe9 code=0x7ffc0000
[  602.144912][   T30] audit: type=1326 audit(1754906796.036:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f30e918ebe9 code=0x7ffc0000
[  602.177062][   T30] audit: type=1326 audit(1754906796.036:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e918ebe9 code=0x7ffc0000
[  602.203750][   T30] audit: type=1326 audit(1754906796.036:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e918ebe9 code=0x7ffc0000
[  602.207398][   T44] usb 5-1: USB disconnect, device number 18
[  602.240493][   T30] audit: type=1326 audit(1754906796.036:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f30e918ebe9 code=0x7ffc0000
[  602.271291][   T30] audit: type=1326 audit(1754906796.036:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e918ebe9 code=0x7ffc0000
[  602.277409][   T44] usblp0: removed
[  602.677765][ T1207] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  602.857556][ T1207] usb 4-1: Using ep0 maxpacket: 32
[  603.016306][ T1207] usb 4-1: config 0 interface 0 has no altsetting 0
[  603.031275][ T1207] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  603.060363][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.070044][ T1207] usb 4-1: Product: syz
[  603.075667][ T1207] usb 4-1: Manufacturer: syz
[  603.081462][ T1207] usb 4-1: SerialNumber: syz
[  603.105059][ T1207] usb 4-1: config 0 descriptor??
[  603.140937][ T9240] overlayfs: failed to resolve './file0': -2
[  603.588149][ T1207] gs_usb 4-1:0.0: Configuring for 197 interfaces
[  604.417782][ T1207] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  604.448503][ T1207] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22
[  605.378104][ T1207] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  605.458273][ T9264] bridge0: port 3(syz_tun) entered blocking state
[  605.465713][ T9264] bridge0: port 3(syz_tun) entered disabled state
[  605.473493][ T9264] syz_tun: entered allmulticast mode
[  605.491051][ T9264] syz_tun: entered promiscuous mode
[  605.504747][ T9264] bridge0: port 3(syz_tun) entered blocking state
[  605.511812][ T9264] bridge0: port 3(syz_tun) entered forwarding state
[  606.224595][ T9187] usb 4-1: USB disconnect, device number 40
[  606.354285][ T1207] usb 3-1: Using ep0 maxpacket: 16
[  606.368382][ T1207] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  606.411854][ T1207] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  606.662636][ T1207] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  607.079868][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'.
[  607.089571][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'.
[  607.111923][ T1207] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  607.121239][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.164258][ T1207] usb 3-1: Product: syz
[  607.345911][ T1207] usb 3-1: Manufacturer: syz
[  607.369772][ T1207] usb 3-1: SerialNumber: syz
[  607.818223][ T1207] usb 3-1: 0:2 : does not exist
[  607.927776][ T1207] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1)
[  608.062561][ T1207] usb 3-1: USB disconnect, device number 32
[  608.198205][ T8040] udevd[8040]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  608.265806][ T9306] vim2m vim2m.0: vidioc_s_fmt queue busy
[  608.470736][ T9187] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  608.657802][ T9187] usb 5-1: Using ep0 maxpacket: 8
[  608.737880][ T9187] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  608.762756][ T9187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.786896][ T9187] usb 5-1: Product: syz
[  608.792628][ T9187] usb 5-1: Manufacturer: syz
[  608.798095][ T9187] usb 5-1: SerialNumber: syz
[  608.828882][ T9187] usb 5-1: config 0 descriptor??
[  608.858492][ T9187] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244)
[  609.193531][ T9304] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns
[  609.237897][ T9304] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  609.452617][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  609.532922][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  609.619918][ T9304] 9pnet: Could not find request transport: trt=0x0000200000004e22
[  609.856105][ T9187] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  610.352679][ T9187] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  610.375406][ T9187] usb 5-1: USB disconnect, device number 19
[  611.285838][ T9330] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.598719][ T9343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.945'.
[  611.697895][   T24] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  611.880695][   T24] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  611.906839][   T24] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  611.937995][   T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  611.958131][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.073180][   T24] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1
[  612.523798][ T9187] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  612.822812][   T24] usb 3-1: USB disconnect, device number 33
[  612.912845][ T9187] usb 5-1: Using ep0 maxpacket: 32
[  613.046016][ T9187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  613.072675][ T9187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  613.147650][ T9187] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  613.156907][ T9187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.279103][ T9187] usb 5-1: config 0 descriptor??
[  613.296745][ T9187] hub 5-1:0.0: USB hub found
[  613.427754][ T9374] vim2m vim2m.0: vidioc_s_fmt queue busy
[  613.499507][ T9187] hub 5-1:0.0: 1 port detected
[  613.716173][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  613.797305][ T9187] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  613.815014][ T9187] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  613.857246][ T9187] usbhid 5-1:0.0: can't add hid device: -71
[  613.879530][ T9187] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  614.028617][ T9187] usb 5-1: USB disconnect, device number 20
[  617.339316][ T5919] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  617.916726][ T5919] usb 5-1: unable to get BOS descriptor or descriptor too short
[  618.048628][ T5919] usb 5-1: config 7 has an invalid interface number: 3 but max is 0
[  618.061637][ T5919] usb 5-1: config 7 has no interface number 0
[  618.069845][ T5919] usb 5-1: config 7 interface 3 has no altsetting 0
[  618.091590][ T5919] usb 5-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=6f.b0
[  618.107057][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.340021][ T5919] usb 5-1: Product: syz
[  618.344528][ T5919] usb 5-1: Manufacturer: syz
[  618.349869][ T5919] usb 5-1: SerialNumber: syz
[  618.455001][ T8584] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  618.827812][ T8584] usb 4-1: device descriptor read/64, error -71
[  618.886923][ T9398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  619.104633][ T9398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  619.159217][ T5919] usb 5-1: USB disconnect, device number 21
[  619.216796][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'.
[  619.226986][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'.
[  619.236301][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'.
[  619.245891][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'.
[  619.255522][ T9418] netlink: 104 bytes leftover after parsing attributes in process `syz.1.967'.
[  619.273563][ T8584] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  619.447805][ T8584] usb 4-1: device descriptor read/64, error -71
[  619.530349][ T9421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.968'.
[  619.650079][ T8584] usb usb4-port1: attempt power cycle
[  620.137623][ T8584] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  620.297783][ T8584] usb 4-1: device descriptor read/8, error -71
[  620.987669][ T8584] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  621.248069][ T8584] usb 4-1: device not accepting address 44, error -71
[  621.274469][ T8584] usb usb4-port1: unable to enumerate USB device
[  621.362818][ T5967] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  621.420670][ T9432] lo speed is unknown, defaulting to 1000
[  621.507411][ T9447] vim2m vim2m.0: vidioc_s_fmt queue busy
[  621.947831][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.987657][ T5967] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  622.074156][ T5967] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  622.092410][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.144647][ T5967] usb 5-1: config 0 descriptor??
[  622.487646][ T5919] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  622.637689][ T5919] usb 3-1: Using ep0 maxpacket: 8
[  622.656301][ T5919] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  622.666136][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.677791][ T5919] usb 3-1: Product: syz
[  622.682148][ T5919] usb 3-1: Manufacturer: syz
[  622.691787][ T5919] usb 3-1: SerialNumber: syz
[  622.702199][ T5919] usb 3-1: config 0 descriptor??
[  622.758210][ T5967] usbhid 5-1:0.0: can't add hid device: -71
[  622.769782][ T5967] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  622.791274][ T5967] usb 5-1: USB disconnect, device number 22
[  622.913397][ T5919] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  622.986070][ T5919] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  623.068371][ T5919] usb 3-1: USB disconnect, device number 34
[  623.286843][ T9461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.978'.
[  623.317118][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.978'.
[  623.457949][ T9461] ip6gretap1: entered allmulticast mode
[  623.681155][ T9478] FAULT_INJECTION: forcing a failure.
[  623.681155][ T9478] name failslab, interval 1, probability 0, space 0, times 1
[  623.694098][ T9478] CPU: 0 UID: 0 PID: 9478 Comm: syz.0.979 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  623.694127][ T9478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  623.694144][ T9478] Call Trace:
[  623.694157][ T9478]  <TASK>
[  623.694167][ T9478]  dump_stack_lvl+0x189/0x250
[  623.694199][ T9478]  ? lockdep_hardirqs_on+0x9c/0x150
[  623.694225][ T9478]  ? __pfx_dump_stack_lvl+0x10/0x10
[  623.694269][ T9478]  should_fail_ex+0x414/0x560
[  623.694298][ T9478]  should_failslab+0xa8/0x100
[  623.694326][ T9478]  __kmalloc_cache_node_noprof+0x73/0x3d0
[  623.694351][ T9478]  ? __get_vm_area_node+0x13f/0x300
[  623.694380][ T9478]  __get_vm_area_node+0x13f/0x300
[  623.694408][ T9478]  __vmalloc_node_range_noprof+0x301/0x12f0
[  623.694434][ T9478]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  623.694477][ T9478]  ? finish_task_switch+0x266/0x950
[  623.694510][ T9478]  ? lockdep_hardirqs_on+0x9c/0x150
[  623.694538][ T9478]  ? rcu_is_watching+0x15/0xb0
[  623.694566][ T9478]  ? __schedule+0x16c8/0x4c90
[  623.694598][ T9478]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  623.694636][ T9478]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  623.694668][ T9478]  __vmalloc_noprof+0xb1/0xf0
[  623.694692][ T9478]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  623.694730][ T9478]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  623.694770][ T9478]  bpf_prog_alloc+0x3c/0x1a0
[  623.694807][ T9478]  bpf_prog_load+0x735/0x1930
[  623.694854][ T9478]  ? __pfx_bpf_prog_load+0x10/0x10
[  623.694886][ T9478]  ? irqentry_exit+0x74/0x90
[  623.694930][ T9478]  ? security_bpf+0xb1/0x300
[  623.694958][ T9478]  ? security_bpf+0x7e/0x300
[  623.694987][ T9478]  __sys_bpf+0x5f1/0x860
[  623.695022][ T9478]  ? __pfx___sys_bpf+0x10/0x10
[  623.695068][ T9478]  ? ksys_write+0x22a/0x250
[  623.695093][ T9478]  ? __pfx_ksys_write+0x10/0x10
[  623.695110][ T9478]  ? rcu_is_watching+0x15/0xb0
[  623.695142][ T9478]  __x64_sys_bpf+0x7c/0x90
[  623.695172][ T9478]  do_syscall_64+0xfa/0x3b0
[  623.695199][ T9478]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.695220][ T9478]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  623.695242][ T9478]  ? clear_bhb_loop+0x60/0xb0
[  623.695269][ T9478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.695290][ T9478] RIP: 0033:0x7fd58978ebe9
[  623.695316][ T9478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  623.695335][ T9478] RSP: 002b:00007fd58a595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  623.695359][ T9478] RAX: ffffffffffffffda RBX: 00007fd5899b6180 RCX: 00007fd58978ebe9
[  623.695375][ T9478] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  623.695390][ T9478] RBP: 00007fd58a595090 R08: 0000000000000000 R09: 0000000000000000
[  623.695403][ T9478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  623.695417][ T9478] R13: 00007fd5899b6218 R14: 00007fd5899b6180 R15: 00007ffee916a1b8
[  623.695458][ T9478]  </TASK>
[  623.695732][ T9478] syz.0.979: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  624.002408][ T9478] CPU: 0 UID: 0 PID: 9478 Comm: syz.0.979 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  624.002452][ T9478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  624.002466][ T9478] Call Trace:
[  624.002475][ T9478]  <TASK>
[  624.002484][ T9478]  dump_stack_lvl+0x189/0x250
[  624.002515][ T9478]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  624.002550][ T9478]  ? __pfx_dump_stack_lvl+0x10/0x10
[  624.002575][ T9478]  ? __pfx__printk+0x10/0x10
[  624.002604][ T9478]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  624.002632][ T9478]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  624.002668][ T9478]  warn_alloc+0x214/0x310
[  624.002701][ T9478]  ? __pfx_warn_alloc+0x10/0x10
[  624.002729][ T9478]  ? __get_vm_area_node+0x13f/0x300
[  624.002757][ T9478]  ? __get_vm_area_node+0x2b5/0x300
[  624.002788][ T9478]  __vmalloc_node_range_noprof+0x326/0x12f0
[  624.002813][ T9478]  ? finish_task_switch+0x266/0x950
[  624.002846][ T9478]  ? lockdep_hardirqs_on+0x9c/0x150
[  624.002875][ T9478]  ? rcu_is_watching+0x15/0xb0
[  624.002903][ T9478]  ? __schedule+0x16c8/0x4c90
[  624.002934][ T9478]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  624.002973][ T9478]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  624.003006][ T9478]  __vmalloc_noprof+0xb1/0xf0
[  624.003029][ T9478]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  624.003067][ T9478]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  624.003107][ T9478]  bpf_prog_alloc+0x3c/0x1a0
[  624.003144][ T9478]  bpf_prog_load+0x735/0x1930
[  624.003191][ T9478]  ? __pfx_bpf_prog_load+0x10/0x10
[  624.003224][ T9478]  ? irqentry_exit+0x74/0x90
[  624.003267][ T9478]  ? security_bpf+0xb1/0x300
[  624.003294][ T9478]  ? security_bpf+0x7e/0x300
[  624.003324][ T9478]  __sys_bpf+0x5f1/0x860
[  624.003358][ T9478]  ? __pfx___sys_bpf+0x10/0x10
[  624.003409][ T9478]  ? ksys_write+0x22a/0x250
[  624.003503][ T9478]  ? __pfx_ksys_write+0x10/0x10
[  624.003521][ T9478]  ? rcu_is_watching+0x15/0xb0
[  624.003554][ T9478]  __x64_sys_bpf+0x7c/0x90
[  624.003583][ T9478]  do_syscall_64+0xfa/0x3b0
[  624.003610][ T9478]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.003632][ T9478]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  624.003653][ T9478]  ? clear_bhb_loop+0x60/0xb0
[  624.003679][ T9478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.003701][ T9478] RIP: 0033:0x7fd58978ebe9
[  624.003720][ T9478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  624.003740][ T9478] RSP: 002b:00007fd58a595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  624.003763][ T9478] RAX: ffffffffffffffda RBX: 00007fd5899b6180 RCX: 00007fd58978ebe9
[  624.003779][ T9478] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  624.003793][ T9478] RBP: 00007fd58a595090 R08: 0000000000000000 R09: 0000000000000000
[  624.003807][ T9478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.003820][ T9478] R13: 00007fd5899b6218 R14: 00007fd5899b6180 R15: 00007ffee916a1b8
[  624.003855][ T9478]  </TASK>
[  624.003948][ T9478] Mem-Info:
[  624.306605][ T9478] active_anon:2294 inactive_anon:24591 isolated_anon:0
[  624.306605][ T9478]  active_file:15956 inactive_file:41121 isolated_file:0
[  624.306605][ T9478]  unevictable:770 dirty:69 writeback:0
[  624.306605][ T9478]  slab_reclaimable:10340 slab_unreclaimable:101560
[  624.306605][ T9478]  mapped:33117 shmem:22632 pagetables:1348
[  624.306605][ T9478]  sec_pagetables:0 bounce:0
[  624.306605][ T9478]  kernel_misc_reclaimable:0
[  624.306605][ T9478]  free:1289289 free_pcp:11475 free_cma:0
[  624.352864][ T9478] Node 0 active_anon:9176kB inactive_anon:98364kB active_file:63624kB inactive_file:164484kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:132468kB dirty:276kB writeback:0kB shmem:88992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12216kB pagetables:5236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  624.388556][ T9478] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  624.421060][ T9478] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  624.450173][ T9478] lowmem_reserve[]: 0 2500 2502 2502 2502
[  624.456092][ T9478] Node 0 DMA32 free:1247636kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9248kB inactive_anon:98240kB active_file:61868kB inactive_file:164416kB unevictable:1544kB writepending:288kB present:3129332kB managed:2560996kB mlocked:8kB bounce:0kB free_pcp:23264kB local_pcp:11376kB free_cma:0kB
[  624.489396][ T9478] lowmem_reserve[]: 0 0 1 1 1
[  624.495872][ T9478] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1756kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  624.526345][ T9478] lowmem_reserve[]: 0 0 0 0 0
[  624.531338][ T9478] Node 1 Normal free:3894084kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22380kB local_pcp:12748kB free_cma:0kB
[  624.562780][ T9478] lowmem_reserve[]: 0 0 0 0 0
[  624.567698][ T9478] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  624.584654][ T9478] Node 0 DMA32: 685*4kB (UM) 678*8kB (UME) 203*16kB (M) 2108*32kB (UME) 876*64kB (UM) 423*128kB (UME) 203*256kB (UM) 80*512kB (UM) 43*1024kB (UME) 26*2048kB (UM) 212*4096kB (UM) = 1247636kB
[  624.605268][ T9478] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  624.618088][ T9478] Node 1 Normal: 145*4kB (UM) 58*8kB (UME) 29*16kB (UME) 95*32kB (UE) 36*64kB (UME) 9*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (M) 1*2048kB (M) 947*4096kB (ME) = 3894084kB
[  624.636160][ T9478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  624.645844][ T9478] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=1 hugepages_size=2048kB
[  624.655219][ T9478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  624.665391][ T9478] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  624.674899][ T9478] 79873 total pagecache pages
[  624.679699][ T9478] 0 pages in swap cache
[  624.683907][ T9478] Free swap  = 124996kB
[  624.688139][ T9478] Total swap = 124996kB
[  624.692332][ T9478] 2097051 pages RAM
[  624.697784][ T9478] 0 pages HighMem/MovableOnly
[  624.702602][ T9478] 424695 pages reserved
[  624.706805][ T9478] 0 pages cma reserved
[  625.278643][ T9492] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[9492]
[  626.419937][ T9508] ip6gre1: entered allmulticast mode
[  626.427535][ T8523] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  626.451306][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.993'.
[  626.847982][ T5919] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  626.911224][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'.
[  626.920429][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'.
[  627.482701][   T93] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 30 seconds
[  627.600406][ T9528] vim2m vim2m.0: vidioc_s_fmt queue busy
[  627.888915][ T5919] usb 5-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ce.1a
[  628.049499][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.097845][ T5919] usb 5-1: Product: syz
[  628.102102][ T5919] usb 5-1: Manufacturer: syz
[  628.115404][ T5919] usb 5-1: SerialNumber: syz
[  628.129026][ T5919] usb 5-1: config 0 descriptor??
[  628.347661][ T8584] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  628.374685][ T9521] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  628.381598][ T9521] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  628.405249][ T9521] vhci_hcd vhci_hcd.0: Device attached
[  628.422378][ T9187] usb 5-1: USB disconnect, device number 23
[  628.448148][ T9542] vhci_hcd: connection closed
[  628.454860][ T8523] vhci_hcd: stop threads
[  628.466363][ T8523] vhci_hcd: release socket
[  628.481624][ T8523] vhci_hcd: disconnect device
[  628.668746][ T8584] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  628.678725][ T8584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.953887][ T8584] usb 1-1: config 0 descriptor??
[  629.104208][ T8584] cp210x 1-1:0.0: cp210x converter detected
[  629.282675][ T8584] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121
[  629.316086][ T8584] cp210x 1-1:0.0: querying part number failed
[  629.358405][ T8584] usb 1-1: cp210x converter now attached to ttyUSB0
[  629.706960][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  629.849568][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'.
[  630.118472][ T9571] netlink: 'syz.2.1011': attribute type 10 has an invalid length.
[  630.246446][ T9571] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  630.738290][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  631.037198][ T1207] usb 1-1: USB disconnect, device number 37
[  631.066437][ T1207] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  631.109219][ T1207] cp210x 1-1:0.0: device disconnected
[  631.658121][ T9587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1016'.
[  633.049495][ T9620] loop4: detected capacity change from 0 to 524255232
[  633.258431][ T9618] loop4: detected capacity change from 524255232 to 524287935
[  634.314314][ T9638] overlayfs: failed to resolve './file1': -2
[  635.331322][ T9647] overlayfs: failed to clone upperpath
[  635.481488][ T9650] netlink: 'syz.4.1032': attribute type 10 has an invalid length.
[  635.543887][ T9650] team0: Cannot enslave team device to itself
[  635.559737][ T9655] netlink: 'syz.0.1036': attribute type 10 has an invalid length.
[  635.616142][ T9655] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.655379][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'.
[  635.667629][ T9655] bridge_slave_1: left allmulticast mode
[  635.673416][ T9655] bridge_slave_1: left promiscuous mode
[  635.682649][ T9655] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.699420][ T9655] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  635.757676][   T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  635.940915][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  636.039270][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  636.128371][   T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  636.188413][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.415458][   T24] usb 3-1: config 0 descriptor??
[  638.741197][   T24] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x3
[  638.753528][   T24] arvo 0003:1E7D:30D4.000A: invalid report_count 6471447
[  638.768305][   T24] arvo 0003:1E7D:30D4.000A: item 0 4 1 9 parsing failed
[  638.788483][   T24] arvo 0003:1E7D:30D4.000A: parse failed
[  638.798600][   T24] arvo 0003:1E7D:30D4.000A: probe with driver arvo failed with error -22
[  638.849017][ T9686] overlayfs: failed to resolve './file0': -2
[  638.975103][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1034'.
[  638.995471][   T24] usb 3-1: USB disconnect, device number 35
[  639.873162][ T9698] 9pnet_fd: Insufficient options for proto=fd
[  639.895369][ T9700] input: syz1 as /devices/virtual/input/input19
[  639.939778][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  640.168822][   T44] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  640.327648][   T44] usb 3-1: device descriptor read/64, error -71
[  640.580005][   T44] usb 3-1: new full-speed USB device number 37 using dummy_hcd
[  640.738391][   T44] usb 3-1: device descriptor read/64, error -71
[  640.868672][   T44] usb usb3-port1: attempt power cycle
[  641.005430][ T9704] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  641.448116][   T44] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  641.478783][   T44] usb 3-1: device descriptor read/8, error -71
[  641.685879][ T9720] lo speed is unknown, defaulting to 1000
[  641.717781][   T44] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  641.923942][ T9726] xt_TPROXY: Can be used only with -p tcp or -p udp
[  641.987154][   T44] usb 3-1: device descriptor read/8, error -71
[  642.115010][   T44] usb usb3-port1: unable to enumerate USB device
[  642.568079][ T9734] overlayfs: failed to resolve './file0': -2
[  642.590231][   T44] IPVS: starting estimator thread 0...
[  642.718596][ T9737] IPVS: using max 24 ests per chain, 57600 per kthread
[  643.007217][   T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  643.054529][   T30] kauditd_printk_skb: 66 callbacks suppressed
[  643.054559][   T30] audit: type=1326 audit(1754906836.996:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ef8ebe9 code=0x7ffc0000
[  643.290955][   T30] audit: type=1326 audit(1754906837.006:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ef8ebe9 code=0x7ffc0000
[  643.346257][   T24] usb 1-1: config 0 has an invalid interface number: 84 but max is 0
[  643.404935][   T24] usb 1-1: config 0 has an invalid interface number: 66 but max is 0
[  643.476857][   T24] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  643.525631][   T30] audit: type=1326 audit(1754906837.006:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f074ef8ebe9 code=0x7ffc0000
[  643.594443][   T24] usb 1-1: config 0 has no interface number 0
[  643.641538][   T30] audit: type=1326 audit(1754906837.006:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ef8ebe9 code=0x7ffc0000
[  643.652928][   T24] usb 1-1: config 0 has no interface number 1
[  643.663419][   T30] audit: type=1326 audit(1754906837.006:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ef8ebe9 code=0x7ffc0000
[  643.707747][   T30] audit: type=1326 audit(1754906837.006:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f074ef8ebe9 code=0x7ffc0000
[  643.730253][   T30] audit: type=1326 audit(1754906837.006:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ef8ebe9 code=0x7ffc0000
[  643.753359][   T30] audit: type=1326 audit(1754906837.006:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9738 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f074ef8ebe9 code=0x7ffc0000
[  643.759473][   T24] usb 1-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64
[  643.969890][ T9753] tap0: tun_chr_ioctl cmd 1074025677
[  643.982641][   T24] usb 1-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  644.034312][ T9753] tap0: linktype set to 270
[  644.038935][   T24] usb 1-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[  644.040313][   T24] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32
[  644.176956][   T24] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2
[  644.197823][   T24] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86
[  644.212339][   T24] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 53
[  644.336211][   T24] usb 1-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216
[  644.371278][   T24] usb 1-1: config 0 interface 66 has no altsetting 0
[  644.382728][   T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  644.392493][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.401455][   T24] usb 1-1: Product: syz
[  644.415624][   T24] usb 1-1: Manufacturer: syz
[  644.427569][   T24] usb 1-1: SerialNumber: syz
[  644.455523][   T24] usb 1-1: config 0 descriptor??
[  644.489746][   T24] ljca 1-1:0.84: bulk endpoints not found
[  644.600183][ T9758] lo speed is unknown, defaulting to 1000
[  644.633428][ T9765] overlayfs: failed to resolve './file0': -2
[  644.729883][   T24] ljca 1-1:0.66: probe with driver ljca failed with error -71
[  645.081715][   T24] usb 1-1: USB disconnect, device number 38
[  645.603151][ T9779] random: crng reseeded on system resumption
[  646.718123][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  646.734225][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  646.743025][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  646.771053][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  646.779176][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  646.868802][ T9788] lo speed is unknown, defaulting to 1000
[  647.568772][ T9803] loop4: detected capacity change from 0 to 524255232
[  647.761851][ T9806] loop4: detected capacity change from 524255232 to 524287935
[  648.164393][ T9788] chnl_net:caif_netlink_parms(): no params data found
[  649.116853][ T5156] Bluetooth: hci5: command tx timeout
[  649.242535][ T9818] overlayfs: failed to resolve './file0': -2
[  650.272016][ T9788] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.299006][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.323033][ T9788] bridge_slave_0: entered allmulticast mode
[  650.330700][ T9836] netlink: 'syz.1.1084': attribute type 1 has an invalid length.
[  650.345945][ T9788] bridge_slave_0: entered promiscuous mode
[  650.347662][ T5906] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  650.353592][ T9836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  650.379601][ T9788] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.387144][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.405720][ T9840] netlink: 'syz.1.1084': attribute type 1 has an invalid length.
[  650.425935][ T9840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  650.443150][ T9788] bridge_slave_1: entered allmulticast mode
[  650.458094][ T9788] bridge_slave_1: entered promiscuous mode
[  650.507658][ T5906] usb 5-1: device descriptor read/64, error -71
[  650.557658][ T8584] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  650.621449][ T9788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  650.648681][ T9788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  650.760653][ T9788] team0: Port device team_slave_0 added
[  650.784608][ T9788] team0: Port device team_slave_1 added
[  650.884597][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  650.900767][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  650.938166][ T5906] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  650.960134][ T8584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  650.971724][ T9788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  650.991224][ T8584] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  651.010005][ T9788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  651.022883][ T8584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  651.027579][ T9788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  651.050644][ T8584] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  651.064953][ T9788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  651.087876][ T5906] usb 5-1: device descriptor read/64, error -71
[  651.114888][ T8584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.128253][ T8584] usb 1-1: Product: syz
[  651.132496][ T8584] usb 1-1: Manufacturer: syz
[  651.137212][ T8584] usb 1-1: SerialNumber: syz
[  651.145553][ T8584] usb 1-1: config 0 descriptor??
[  651.149510][ T5156] Bluetooth: hci5: command tx timeout
[  651.158554][ T9838] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  651.166196][ T9838] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  651.176427][ T8584] usb 1-1: ucan: probing device on interface #0
[  651.205681][ T9788] hsr_slave_0: entered promiscuous mode
[  651.208309][ T5906] usb usb5-port1: attempt power cycle
[  651.212949][ T9788] hsr_slave_1: entered promiscuous mode
[  651.578620][ T5906] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  651.591142][ T8584] usb 1-1: ucan: device reported invalid device info
[  651.612155][ T8584] usb 1-1: ucan: probe failed; try to update the device firmware
[  651.622196][ T9788] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  651.629913][ T5906] usb 5-1: device descriptor read/8, error -71
[  651.660101][ T9788] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  651.673521][ T9788] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  651.685223][ T9788] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  651.782687][ T9788] 8021q: adding VLAN 0 to HW filter on device bond0
[  651.797240][ T9838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  651.811801][ T9788] 8021q: adding VLAN 0 to HW filter on device team0
[  651.834111][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.838012][ T9838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  651.841378][ T8523] bridge0: port 1(bridge_slave_0) entered forwarding state
[  651.857088][ T1207] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  651.882719][ T5906] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  651.894127][ T7303] bridge0: port 2(bridge_slave_1) entered blocking state
[  651.901508][ T7303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  651.937944][ T5906] usb 5-1: device descriptor read/8, error -71
[  651.960467][   T24] usb 1-1: USB disconnect, device number 39
[  652.020433][ T1207] usb 3-1: Using ep0 maxpacket: 32
[  652.033016][ T1207] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  652.044286][ T9788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  652.054884][ T1207] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  652.059643][ T5906] usb usb5-port1: unable to enumerate USB device
[  652.071081][ T1207] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  652.265868][ T1207] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  652.479384][ T1207] usb 3-1: config 0 interface 0 has no altsetting 0
[  652.647139][ T1207] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  652.736967][ T1207] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  652.758656][ T1207] usb 3-1: Product: syz
[  652.762993][ T1207] usb 3-1: Manufacturer: syz
[  652.785040][ T1207] usb 3-1: SerialNumber: syz
[  652.820245][ T1207] usb 3-1: config 0 descriptor??
[  652.829513][ T1207] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  652.883949][ T1207] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  652.962728][ T9878] overlayfs: failed to resolve './file0': -2
[  653.177124][ T9788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  653.217784][ T5156] Bluetooth: hci5: command tx timeout
[  655.253273][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'.
[  655.299293][ T5156] Bluetooth: hci5: command tx timeout
[  655.614180][ T9788] veth0_vlan: entered promiscuous mode
[  655.871500][   T24] usb 3-1: USB disconnect, device number 40
[  655.877833][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  656.190946][   T24] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  656.355754][ T9788] veth1_vlan: entered promiscuous mode
[  656.461962][ T9788] veth0_macvtap: entered promiscuous mode
[  656.761440][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'.
[  656.771573][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'.
[  657.829969][ T9923] lo speed is unknown, defaulting to 1000
[  657.857766][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  657.867318][   T93] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 60 seconds
[  657.889729][ T9926] overlayfs: failed to resolve './file0': -2
[  657.904075][ T9788] veth1_macvtap: entered promiscuous mode
[  658.329674][ T9788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  658.363996][ T9788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  658.550093][ T9788] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  658.615326][ T9788] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.667942][ T9788] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.676729][ T9788] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  658.998983][ T1207] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  659.177613][ T1207] usb 1-1: device descriptor read/64, error -71
[  659.198816][ T8522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.244776][ T8522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.375948][ T8521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  659.427601][ T1207] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  659.437223][ T8521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  659.567813][ T1207] usb 1-1: device descriptor read/64, error -71
[  659.678889][ T1207] usb usb1-port1: attempt power cycle
[  660.307946][ T1207] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  660.401094][ T1207] usb 1-1: device descriptor read/8, error -71
[  660.449607][ T9969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1112'.
[  660.574965][ T9977] overlayfs: failed to clone upperpath
[  660.667713][ T1207] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  660.781419][ T1207] usb 1-1: device descriptor read/8, error -71
[  660.970208][ T1207] usb usb1-port1: unable to enumerate USB device
[  663.883591][   T30] audit: type=1326 audit(1754906857.926:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9975 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8118ebe9 code=0x7fc00000
[  665.387561][   T30] audit: type=1326 audit(1754906858.036:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9975 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f8112add9 code=0x7fc00000
[  665.470458][   T30] audit: type=1326 audit(1754906858.036:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9975 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9f8112ae9f code=0x7fc00000
[  665.502499][   T30] audit: type=1326 audit(1754906858.036:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9975 comm="syz.2.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9f8118ebe9 code=0x7fc00000
[  666.708323][   T44] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  667.087537][   T44] usb 6-1: Using ep0 maxpacket: 32
[  667.308355][   T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  667.327617][   T44] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  667.336949][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.380752][   T44] usb 6-1: config 0 descriptor??
[  667.895583][T10037] netlink: 'syz.0.1131': attribute type 12 has an invalid length.
[  667.922312][T10037] netlink: 'syz.0.1131': attribute type 29 has an invalid length.
[  667.948905][T10037] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1131'.
[  667.987820][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'.
[  668.001325][   T44] usb 6-1: string descriptor 0 read error: -71
[  668.020375][   T44] uclogic 0003:5543:004D.000B: failed retrieving string descriptor #200: -71
[  668.062992][   T44] uclogic 0003:5543:004D.000B: failed retrieving pen parameters: -71
[  668.137576][   T44] uclogic 0003:5543:004D.000B: failed probing pen v2 parameters: -71
[  668.145918][   T44] uclogic 0003:5543:004D.000B: failed probing parameters: -71
[  668.154795][   T44] uclogic 0003:5543:004D.000B: probe with driver uclogic failed with error -71
[  668.191405][   T44] usb 6-1: USB disconnect, device number 2
[  668.944635][T10051] netlink: 'syz.0.1135': attribute type 30 has an invalid length.
[  669.388493][ T9187] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  670.718496][ T1207] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  670.729277][T10071] overlayfs: failed to clone upperpath
[  670.740118][ T9187] usb 6-1: Using ep0 maxpacket: 8
[  670.747047][ T9187] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  670.756832][ T9187] usb 6-1: config 0 has no interface number 0
[  670.769419][ T9187] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  670.797521][ T9187] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  670.823725][ T9187] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  670.837872][   T44] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  670.844371][ T9187] usb 6-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF
[  670.869733][ T9187] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xF has invalid maxpacket 28271, setting to 1024
[  670.907928][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  670.923957][ T9187] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[  670.934518][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  670.967730][ T1207] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  671.047887][   T44] usb 3-1: Using ep0 maxpacket: 32
[  671.049029][ T9187] usb 6-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82
[  671.055706][   T44] usb 3-1: config 0 has an invalid interface number: 202 but max is 0
[  671.063056][ T9187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.096610][ T1207] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  671.148437][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.203111][   T44] usb 3-1: config 0 has no interface number 0
[  671.249899][   T44] usb 3-1: config 0 interface 202 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  671.255112][ T9187] usb 6-1: Product: syz
[  671.462690][   T44] usb 3-1: New USB device found, idVendor=08ca, idProduct=0103, bcdDevice=bf.1b
[  671.464650][ T1207] usb 1-1: config 0 descriptor??
[  671.567540][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.586054][   T44] usb 3-1: Product: syz
[  671.593019][   T44] usb 3-1: Manufacturer: syz
[  671.599793][   T44] usb 3-1: SerialNumber: syz
[  671.603945][ T9187] usb 6-1: Manufacturer: syz
[  671.613988][   T44] usb 3-1: config 0 descriptor??
[  671.619576][ T9187] usb 6-1: SerialNumber: syz
[  671.670633][ T9187] usb 6-1: config 0 descriptor??
[  671.699583][T10053] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  671.726148][T10086] tc_dump_action: action bad kind
[  671.825647][   T44] gspca_main: spca500-2.14.0 probing 08ca:0103
[  671.895513][   T44] usb 3-1: USB disconnect, device number 41
[  671.926389][ T9187] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk.
[  671.958100][ T9187] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out.
[  671.984143][ T9187] usb 6-1: USB disconnect, device number 3
[  672.112418][ T1207] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  672.337270][ T9187] usb 1-1: USB disconnect, device number 44
[  675.347619][   T44] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  675.459371][T10140] tmpfs: Unknown parameter 'nr_ino'
[  675.527948][   T44] usb 6-1: Using ep0 maxpacket: 32
[  675.698500][   T44] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  676.251212][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'.
[  676.260272][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'.
[  676.484613][   T44] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  676.495398][T10148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  676.524801][   T44] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  676.618533][T10138] 9pnet_fd: Insufficient options for proto=fd
[  676.645883][   T44] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  676.662359][T10141] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  676.946000][   T44] usb 6-1: config 0 interface 0 has no altsetting 0
[  676.955985][   T44] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  676.972627][   T44] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  676.981303][   T44] usb 6-1: Product: syz
[  676.985821][   T44] usb 6-1: Manufacturer: syz
[  676.990572][   T44] usb 6-1: SerialNumber: syz
[  677.022410][   T44] usb 6-1: config 0 descriptor??
[  677.050909][   T44] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  677.063557][   T44] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  677.989909][T10151] lo speed is unknown, defaulting to 1000
[  679.610946][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'.
[  679.622336][T10186] vcan0: entered promiscuous mode
[  679.627625][T10186] vcan0: entered allmulticast mode
[  680.521145][ T5925] usb 6-1: USB disconnect, device number 4
[  680.521280][    C1] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  680.620818][ T5925] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  681.120419][T10192] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1172'.
[  681.294512][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1171'.
[  681.303670][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1171'.
[  682.279870][   T30] audit: type=1326 audit(1754906876.336:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  682.359696][   T30] audit: type=1326 audit(1754906876.336:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  682.460102][   T30] audit: type=1326 audit(1754906876.346:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10203 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd58978ebe9 code=0x7ffc0000
[  682.727563][ T1207] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[  683.762189][ T1207] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  683.774588][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.788404][ T1207] usb 3-1: config 0 descriptor??
[  684.305213][ T1207] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  684.471438][T10229] sctp: [Deprecated]: syz.1.1181 (pid 10229) Use of int in max_burst socket option deprecated.
[  684.471438][T10229] Use struct sctp_assoc_value instead
[  684.770499][ T1207] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  684.791910][ T1207] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  687.306686][T10276] ipvlan0: entered promiscuous mode
[  687.598534][ T8584] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  688.393751][   T93] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 90 seconds
[  688.409136][ T8584] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  688.459562][ T8584] usb 6-1: config 0 interface 0 has no altsetting 0
[  688.512707][ T8584] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  688.571689][ T8584] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  688.613137][ T8584] usb 6-1: Product: syz
[  688.625585][ T8584] usb 6-1: Manufacturer: syz
[  688.662943][ T8584] usb 6-1: SerialNumber: syz
[  688.712463][ T8584] usb 6-1: config 0 descriptor??
[  688.746952][ T8584] usb 6-1: selecting invalid altsetting 0
[  689.275758][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'.
[  689.419535][T10292] team1: entered promiscuous mode
[  689.442710][T10292] team1: entered allmulticast mode
[  689.466697][ T8584] usb 6-1: USB disconnect, device number 5
[  689.466855][T10294] netlink: 'syz.1.1201': attribute type 29 has an invalid length.
[  689.783437][T10302] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  690.637751][ T1207] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  690.807603][ T8584] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  690.807651][ T1207] usb 1-1: Using ep0 maxpacket: 16
[  690.868837][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  690.890493][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  690.933308][ T1207] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  690.958399][ T1207] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  690.993215][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.027397][T10321] overlayfs: failed to clone upperpath
[  691.040894][ T1207] usb 1-1: config 0 descriptor??
[  691.146330][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  691.879709][ T8584] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  691.891427][T10321] overlayfs: failed to resolve './file1:subj_role=/#u/': -2
[  691.921130][ T8584] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  691.933681][ T8584] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  691.943373][ T8584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  691.952250][ T8584] usb 6-1: SerialNumber: syz
[  693.057997][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  693.439071][ T8584] usb 6-1: 0:2 : does not exist
[  693.454381][T10325] loop4: detected capacity change from 0 to 524255232
[  693.517024][ T8584] usb 6-1: USB disconnect, device number 6
[  693.527629][T10325] loop4: detected capacity change from 524255232 to 524287935
[  693.553322][ T5847] usb 3-1: USB disconnect, device number 42
[  694.751707][ T1207] usbhid 1-1:0.0: can't add hid device: -71
[  694.764359][ T1207] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  695.251802][ T1207] usb 1-1: USB disconnect, device number 45
[  695.699267][T10367] sctp: [Deprecated]: syz.4.1224 (pid 10367) Use of int in max_burst socket option deprecated.
[  695.699267][T10367] Use struct sctp_assoc_value instead
[  696.211183][T10380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1227'.
[  696.889004][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1229'.
[  696.898276][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1229'.
[  697.663711][T10383] block nbd5: shutting down sockets
[  698.728183][   T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  699.589985][T10422] netlink: 187436 bytes leftover after parsing attributes in process `syz.1.1239'.
[  699.627075][T10422] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'.
[  699.636875][T10422] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'.
[  699.683314][T10422] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  699.700284][   T10] usb 5-1: Using ep0 maxpacket: 16
[  699.730019][   T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  699.741476][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  699.780111][   T10] usb 5-1: config 0 has no interface number 0
[  699.792393][T10426] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1240'.
[  699.815732][   T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  699.825645][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.844138][   T30] audit: type=1326 audit(1754906893.896:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10395 comm="syz.2.1232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f8118ebe9 code=0x0
[  699.879422][T10432] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1241'.
[  699.889835][T10432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  699.928418][   T10] usb 5-1: Product: syz
[  699.932668][   T10] usb 5-1: Manufacturer: syz
[  699.937301][   T10] usb 5-1: SerialNumber: syz
[  699.992741][   T10] usb 5-1: config 0 descriptor??
[  700.032860][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  700.176461][   T10] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -2
[  700.221637][   T10] usb 5-1: USB disconnect, device number 28
[  700.285551][ T8040] udevd[8040]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  700.897719][T10446] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1245'.
[  701.058818][T10450] netlink: 'syz.1.1247': attribute type 10 has an invalid length.
[  701.098553][T10450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1247'.
[  701.257856][ T9187] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  701.420559][ T9187] usb 5-1: device descriptor read/64, error -71
[  701.678097][ T9187] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  701.877562][ T9187] usb 5-1: device descriptor read/64, error -71
[  701.997997][ T9187] usb usb5-port1: attempt power cycle
[  702.377687][ T9187] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  702.455440][ T9187] usb 5-1: device descriptor read/8, error -71
[  702.615720][ T1207] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  702.698973][ T9187] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  702.769027][ T9187] usb 5-1: device descriptor read/8, error -71
[  702.799826][ T1207] usb 3-1: config 0 has an invalid interface number: 170 but max is 0
[  702.819887][ T1207] usb 3-1: config 0 has no interface number 0
[  702.888044][ T9187] usb usb5-port1: unable to enumerate USB device
[  702.906453][ T1207] usb 3-1: config 0 interface 170 has no altsetting 0
[  702.927716][ T1207] usb 3-1: New USB device found, idVendor=c383, idProduct=abd3, bcdDevice=60.bf
[  702.985252][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.006175][T10487] lo speed is unknown, defaulting to 1000
[  703.026319][ T1207] usb 3-1: config 0 descriptor??
[  703.076119][ T1207] usb 3-1: bad CDC descriptors
[  703.286957][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'.
[  703.296522][T10471] netlink: 'syz.2.1253': attribute type 21 has an invalid length.
[  703.323406][   T24] usb 3-1: USB disconnect, device number 43
[  703.809400][T10509] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  704.360744][T10516] netlink: 'syz.1.1266': attribute type 1 has an invalid length.
[  704.572684][T10516] bond2: entered promiscuous mode
[  704.578073][T10516] bond2: entered allmulticast mode
[  704.625963][T10520] bridge2: entered promiscuous mode
[  704.647209][T10520] bridge2: entered allmulticast mode
[  704.661090][T10520] bond2: (slave bridge2): making interface the new active one
[  704.671680][T10520] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  705.031012][ T5847] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  705.207737][ T5847] usb 1-1: Using ep0 maxpacket: 32
[  705.224821][ T5847] usb 1-1: config 0 has an invalid interface number: 23 but max is 0
[  705.380225][ T5847] usb 1-1: config 0 has no interface number 0
[  705.388253][ T5847] usb 1-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62
[  705.401142][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.427033][ T5847] usb 1-1: config 0 descriptor??
[  706.137332][ T5847] gspca_main: sunplus-2.14.0 probing 052b:1803
[  706.358366][ T5847] gspca_sunplus: reg_r err -71
[  706.372352][ T5847] sunplus 1-1:0.23: probe with driver sunplus failed with error -71
[  706.432280][ T5847] usb 1-1: USB disconnect, device number 46
[  706.789604][T10545] lo speed is unknown, defaulting to 1000
[  707.596408][T10558] overlayfs: failed to clone upperpath
[  708.487823][ T8584] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  708.537594][ T5847] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  708.668260][ T8584] usb 1-1: device descriptor read/64, error -71
[  708.985714][ T5847] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  709.103047][ T5847] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  709.157805][ T8584] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  709.725947][ T5847] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  709.735898][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.765217][T10566] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  709.818201][ T5847] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  709.857768][ T8584] usb 1-1: device descriptor read/64, error -71
[  709.967995][ T8584] usb usb1-port1: attempt power cycle
[  710.105836][T10566] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  710.129013][T10566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  710.141440][T10566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  710.153141][ T5847] usb 6-1: USB disconnect, device number 7
[  710.339238][ T8584] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  710.368342][ T8584] usb 1-1: device descriptor read/8, error -71
[  710.437641][   T44] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  710.588202][   T44] usb 5-1: Using ep0 maxpacket: 32
[  710.599770][   T44] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[  710.609414][ T8584] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  710.627949][   T44] usb 5-1: config 0 has no interface number 0
[  710.638041][   T44] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  710.658030][ T8584] usb 1-1: device descriptor read/8, error -71
[  710.667550][   T44] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  710.690237][   T44] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  710.717568][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.733403][   T44] usb 5-1: Product: syz
[  710.744342][   T44] usb 5-1: Manufacturer: syz
[  710.770859][   T44] usb 5-1: SerialNumber: syz
[  710.777613][ T8584] usb usb1-port1: unable to enumerate USB device
[  710.796052][   T44] usb 5-1: config 0 descriptor??
[  710.823842][T10579] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  710.835895][T10579] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  711.948337][   T44] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 42:f8:8e:be:c7:3b
[  711.969182][   T44] usb 5-1: USB disconnect, device number 33
[  711.977374][   T44] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  712.138489][T10589] netlink: 'syz.0.1290': attribute type 1 has an invalid length.
[  712.177926][T10589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1290'.
[  712.238842][T10589] nbd: illegal input index 65544
[  712.477593][ T5925] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  712.569205][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  712.580479][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  712.610221][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  712.637563][ T5925] usb 1-1: device descriptor read/64, error -71
[  712.656956][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  712.666186][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  712.816087][T10596] lo speed is unknown, defaulting to 1000
[  712.887643][ T5925] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  713.244076][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1296'.
[  713.253298][T10596] chnl_net:caif_netlink_parms(): no params data found
[  713.257572][ T5925] usb 1-1: device descriptor read/64, error -71
[  713.260995][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1296'.
[  713.368202][ T5925] usb usb1-port1: attempt power cycle
[  713.478226][T10596] bridge0: port 1(bridge_slave_0) entered blocking state
[  713.513558][T10596] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.562460][T10596] bridge_slave_0: entered allmulticast mode
[  713.592813][T10596] bridge_slave_0: entered promiscuous mode
[  713.640716][T10624] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1299'.
[  713.665567][T10596] bridge0: port 2(bridge_slave_1) entered blocking state
[  713.673808][   T30] audit: type=1326 audit(1754906907.736:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10623 comm="syz.1.1299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4671f8ebe9 code=0x0
[  713.688107][T10596] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.702453][T10596] bridge_slave_1: entered allmulticast mode
[  713.710918][T10596] bridge_slave_1: entered promiscuous mode
[  713.717786][ T5925] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  713.749942][ T5925] usb 1-1: device descriptor read/8, error -71
[  713.906670][T10596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  713.935150][T10596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  714.066871][ T5925] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  714.665037][ T5925] usb 1-1: device descriptor read/8, error -71
[  714.737808][   T51] Bluetooth: hci2: command tx timeout
[  714.854141][ T5925] usb usb1-port1: unable to enumerate USB device
[  715.286338][T10596] team0: Port device team_slave_0 added
[  715.648156][T10596] team0: Port device team_slave_1 added
[  716.150928][T10596] batman_adv: batadv0: Adding interface: batadv_slave_0
[  716.185542][T10596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  716.338712][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'.
[  716.344574][   T44] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  716.598642][   T44] usb 1-1: device descriptor read/64, error -71
[  716.809393][T10596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  716.827994][   T51] Bluetooth: hci2: command tx timeout
[  716.846706][T10596] batman_adv: batadv0: Adding interface: batadv_slave_1
[  716.884747][T10596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  716.937779][   T44] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  716.954566][T10596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  717.108068][   T44] usb 1-1: device descriptor read/64, error -71
[  717.210851][T10596] hsr_slave_0: entered promiscuous mode
[  717.221808][T10596] hsr_slave_1: entered promiscuous mode
[  717.223773][   T44] usb usb1-port1: attempt power cycle
[  717.229469][T10596] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  717.242128][T10596] Cannot create hsr debugfs directory
[  717.570454][   T44] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  717.628533][T10659] 9pnet_fd: Insufficient options for proto=fd
[  717.665490][   T44] usb 1-1: device descriptor read/8, error -71
[  717.681271][T10662] x_tables: duplicate underflow at hook 1
[  717.947563][   T44] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  717.956932][T10662] lo speed is unknown, defaulting to 1000
[  717.973235][   T44] usb 1-1: device descriptor read/8, error -71
[  717.983763][T10596] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  718.012440][T10596] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  718.040268][T10596] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  718.063010][T10596] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  718.077559][ T1207] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  718.100950][   T44] usb usb1-port1: unable to enumerate USB device
[  718.262632][ T5925] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  718.271379][ T1207] usb 5-1: Using ep0 maxpacket: 32
[  718.287537][ T1207] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  718.308235][ T1207] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  718.330238][ T1207] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  718.353988][ T1207] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  718.368080][ T1207] usb 5-1: config 0 interface 0 has no altsetting 0
[  718.377226][ T1207] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  718.393741][ T1207] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  718.402771][ T1207] usb 5-1: Product: syz
[  718.407098][ T1207] usb 5-1: Manufacturer: syz
[  718.412282][ T5925] usb 6-1: device descriptor read/64, error -71
[  718.418888][ T1207] usb 5-1: SerialNumber: syz
[  718.433091][ T1207] usb 5-1: config 0 descriptor??
[  718.449537][ T1207] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  718.453218][T10596] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.471872][ T1207] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  718.504791][T10596] 8021q: adding VLAN 0 to HW filter on device team0
[  718.524246][ T8525] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.531501][ T8525] bridge0: port 1(bridge_slave_0) entered forwarding state
[  718.558384][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state
[  718.565743][ T8525] bridge0: port 2(bridge_slave_1) entered forwarding state
[  718.662861][   T93] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 120 seconds
[  718.687910][ T5925] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  718.828542][T10596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  718.837984][ T5925] usb 6-1: device descriptor read/64, error -71
[  718.898574][   T51] Bluetooth: hci2: command tx timeout
[  718.959268][ T5925] usb usb6-port1: attempt power cycle
[  719.267982][T10686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  719.338220][ T5925] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  719.352344][T10686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  719.401006][ T5925] usb 6-1: device descriptor read/8, error -71
[  719.440388][T10691] ldusb 5-1:0.0: Write buffer overflow, 2147479232 bytes dropped
[  719.692059][T10596] veth0_vlan: entered promiscuous mode
[  719.725396][T10596] veth1_vlan: entered promiscuous mode
[  719.731432][ T5925] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  719.758924][ T5925] usb 6-1: device descriptor read/8, error -71
[  719.841493][T10596] veth0_macvtap: entered promiscuous mode
[  719.866248][T10596] veth1_macvtap: entered promiscuous mode
[  719.883547][   T24] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  719.898591][ T5925] usb usb6-port1: unable to enumerate USB device
[  719.926149][T10596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  719.961368][T10596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  719.985935][T10596] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  720.008776][T10596] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  720.022415][T10596] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  720.037736][   T24] usb 1-1: device descriptor read/64, error -71
[  720.055262][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'.
[  720.064478][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'.
[  720.082418][T10596] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  720.246112][ T8515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.276691][ T8515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.295068][   T24] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  720.363488][ T8515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.373387][ T8515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.447625][   T24] usb 1-1: device descriptor read/64, error -71
[  720.568275][   T24] usb usb1-port1: attempt power cycle
[  720.818490][ T5967] usb 5-1: USB disconnect, device number 34
[  720.824531][    C0] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  720.859643][ T5967] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  720.937980][   T24] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[  720.978199][   T51] Bluetooth: hci2: command tx timeout
[  721.025329][T10710] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  721.039836][   T24] usb 1-1: device descriptor read/8, error -71
[  721.367791][   T24] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  721.424673][   T24] usb 1-1: device descriptor read/8, error -71
[  721.589947][   T24] usb usb1-port1: unable to enumerate USB device
[  722.875234][T10717] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  723.220828][ T5925] IPVS: starting estimator thread 0...
[  723.228410][T10731] overlayfs: failed to clone upperpath
[  723.327916][T10732] IPVS: using max 35 ests per chain, 84000 per kthread
[  724.918394][T10740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  724.958299][T10740] syzkaller0: entered promiscuous mode
[  724.965854][T10740] syzkaller0: entered allmulticast mode
[  725.064036][T10740] tipc: Resetting bearer <eth:syzkaller0>
[  725.246706][T10739] tipc: Resetting bearer <eth:syzkaller0>
[  725.254598][T10750] binder: 10749:10750 ioctl c0306201 200000000080 returned -14
[  725.290963][T10739] tipc: Disabling bearer <eth:syzkaller0>
[  725.303955][T10750] binder: BINDER_SET_CONTEXT_MGR already set
[  725.313021][T10750] binder: 10749:10750 ioctl 4018620d 200000000040 returned -16
[  725.386819][T10750] binder: 10749:10750 ioctl c0306201 2000000003c0 returned -22
[  725.416963][T10750] binder: 10749:10750 ioctl 5 200000000640 returned -22
[  725.808984][ T1207] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  726.007907][ T1207] usb 1-1: Using ep0 maxpacket: 32
[  726.027584][ T1207] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  726.036167][ T1207] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  726.051170][ T1207] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  726.064015][ T1207] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  726.088593][ T1207] usb 1-1: config 0 interface 0 has no altsetting 0
[  726.113051][ T1207] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  726.131002][ T1207] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  726.155789][ T1207] usb 1-1: Product: syz
[  726.181170][ T1207] usb 1-1: Manufacturer: syz
[  726.191741][ T1207] usb 1-1: SerialNumber: syz
[  726.248454][ T1207] usb 1-1: config 0 descriptor??
[  726.269131][ T1207] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  726.452452][ T1207] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  726.475732][T10762] dlm: no local IP address has been set
[  726.502146][T10762] dlm: cannot start dlm midcomms -107
[  726.926094][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1336'.
[  726.935408][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1336'.
[  728.547884][   T24] usb 1-1: USB disconnect, device number 63
[  728.553944][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  728.588401][   T24] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  729.164968][T10787] netlink: 'syz.4.1340': attribute type 10 has an invalid length.
[  729.262604][T10787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1340'.
[  732.297855][   T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  732.392723][T10827] comedi comedi3: comedi_config --init_data is deprecated
[  732.487632][   T44] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  732.671076][   T44] usb 5-1: Using ep0 maxpacket: 8
[  732.766514][   T44] usb 5-1: config 6 has an invalid interface number: 2 but max is 0
[  732.884936][   T44] usb 5-1: config 6 has no interface number 0
[  733.087082][   T44] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  733.129281][   T44] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  733.163672][   T44] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  733.210371][   T44] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  733.228411][   T10] usb 7-1: Using ep0 maxpacket: 32
[  733.240842][   T10] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  733.257521][   T10] usb 7-1: config 0 has no interface number 0
[  733.273167][   T10] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  733.288893][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.297802][   T10] usb 7-1: Product: syz
[  733.302042][   T10] usb 7-1: Manufacturer: syz
[  733.307071][   T10] usb 7-1: SerialNumber: syz
[  733.403483][   T10] usb 7-1: config 0 descriptor??
[  733.421474][   T10] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  733.454983][   T44] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  733.466891][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.475695][   T44] usb 5-1: Product: syz
[  733.480020][   T44] usb 5-1: Manufacturer: syz
[  733.484851][   T44] usb 5-1: SerialNumber: syz
[  733.500403][   T44] hso 5-1:6.2: Failed to find BULK IN ep
[  733.898422][ T5925] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  734.059021][ T5925] usb 6-1: Using ep0 maxpacket: 16
[  734.119297][   T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  734.119557][   T44] usb 5-1: USB disconnect, device number 35
[  734.135529][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  734.153953][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  734.179512][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  734.197071][   T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  734.219327][ T5925] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  734.246075][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.279039][ T5925] usb 6-1: config 0 descriptor??
[  734.710972][ T5925] HID 045e:07da: Invalid code 65791 type 1
[  734.750333][ T5925] HID 045e:07da: Invalid code 768 type 1
[  734.766908][ T5925] HID 045e:07da: Invalid code 769 type 1
[  734.777006][ T5925] HID 045e:07da: Invalid code 770 type 1
[  734.793894][ T5925] HID 045e:07da: Invalid code 771 type 1
[  734.806661][ T5925] HID 045e:07da: Invalid code 772 type 1
[  734.819707][ T5925] HID 045e:07da: Invalid code 773 type 1
[  734.856416][ T5925] HID 045e:07da: Invalid code 774 type 1
[  734.862775][ T5925] HID 045e:07da: Invalid code 775 type 1
[  734.869404][ T5925] HID 045e:07da: Invalid code 776 type 1
[  734.894549][ T5925] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000D/input/input20
[  735.095126][ T5925] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  735.127820][T10853] tipc: Started in network mode
[  735.132778][T10853] tipc: Node identity 7f000001, cluster identity 4711
[  735.243851][T10853] tipc: Enabled bearer <udp:syz2>, priority 10
[  736.010096][T10853] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0038
[  736.030034][T10853] tipc: Enabled bearer <udp:syz0>, priority 10
[  736.081589][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  736.089880][ T5967] usb 7-1: USB disconnect, device number 2
[  736.102832][ T5967] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  736.135703][ T9187] usb 6-1: reset high-speed USB device number 12 using dummy_hcd
[  736.314222][ T5967] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  736.330073][ T5967] quatech2 7-1:0.51: device disconnected
[  737.091384][ T5925] usb 6-1: USB disconnect, device number 12
[  737.278059][   T44] tipc: Node number set to 2130706433
[  738.202111][T10884] IPVS: Error connecting to the multicast addr
[  739.109679][T10892] bond_slave_1: entered promiscuous mode
[  739.311010][T10892] bond_slave_1: left promiscuous mode
[  739.957190][T10894] lo speed is unknown, defaulting to 1000
[  740.067624][ T9187] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  740.240055][ T9187] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  740.255058][ T9187] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  740.286772][ T9187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.307616][ T9187] usb 5-1: Product: syz
[  740.315540][ T9187] usb 5-1: Manufacturer: syz
[  740.326099][ T9187] usb 5-1: SerialNumber: syz
[  740.666869][ T9187] comedi comedi5: Wrong number of endpoints
[  740.676451][ T9187] ni6501 5-1:5.0: driver 'ni6501' failed to auto-configure device.
[  740.699437][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1371'.
[  740.725501][ T9187] usb 5-1: USB disconnect, device number 36
[  742.813471][T10928] lo speed is unknown, defaulting to 1000
[  743.640431][T10956] openvswitch: netlink: IPv4 tun info is not correct
[  743.729545][T10960] overlay: Unknown parameter 'dont_hash'
[  743.924364][ T8584] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  744.111829][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'.
[  744.244864][T10974] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  744.317328][T10974] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  745.533830][T10987] lo speed is unknown, defaulting to 1000
[  745.553439][ T5156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  745.568609][ T5156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  745.578411][ T5156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  745.607376][ T5156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  745.617979][   T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  745.635290][ T5156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  745.782641][   T10] usb 5-1: too many configurations: 151, using maximum allowed: 8
[  745.794047][T10989] lo speed is unknown, defaulting to 1000
[  745.858605][   T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  745.878435][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  745.892243][   T10] usb 5-1: Product: syz
[  745.896593][   T10] usb 5-1: Manufacturer: syz
[  745.901696][   T10] usb 5-1: SerialNumber: syz
[  745.922720][   T10] usb 5-1: config 0 descriptor??
[  746.166514][T10986] netlink: 'syz.4.1393': attribute type 2 has an invalid length.
[  746.203317][ T8584] usb 5-1: USB disconnect, device number 38
[  746.557956][T11015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1399'.
[  746.567130][T11015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1399'.
[  746.576775][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1399'.
[  746.644522][T10989] chnl_net:caif_netlink_parms(): no params data found
[  746.821533][T10989] bridge0: port 1(bridge_slave_0) entered blocking state
[  746.831800][ T8584] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  746.852590][T10989] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.866770][T10989] bridge_slave_0: entered allmulticast mode
[  746.876627][T10989] bridge_slave_0: entered promiscuous mode
[  746.885942][T10989] bridge0: port 2(bridge_slave_1) entered blocking state
[  746.910521][T10989] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.918469][T10989] bridge_slave_1: entered allmulticast mode
[  746.930306][T10989] bridge_slave_1: entered promiscuous mode
[  746.995257][T10989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  747.007774][ T8584] usb 7-1: Using ep0 maxpacket: 16
[  747.010710][ T8584] usb 7-1: config index 0 descriptor too short (expected 1828, got 36)
[  747.022046][T10989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  747.033660][ T8584] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  747.065282][ T8584] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  747.075838][ T8584] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  747.086655][ T8584] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  747.098935][ T8584] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  747.132671][ T8584] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  747.153564][ T8584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.172754][ T8584] usb 7-1: Product: syz
[  747.177005][ T8584] usb 7-1: Manufacturer: syz
[  747.184754][ T8584] usb 7-1: SerialNumber: syz
[  747.197638][   T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  747.199766][T10989] team0: Port device team_slave_0 added
[  747.206784][ T8584] usb 7-1: config 0 descriptor??
[  747.232257][ T8584] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected
[  747.246026][T10989] team0: Port device team_slave_1 added
[  747.304545][ T8584] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87
[  747.313022][ T8584] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7
[  747.336288][ T8584] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81
[  747.354416][T10989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  747.367759][   T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  747.376227][ T8584] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1
[  747.378285][T10989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  747.384833][   T24] usb 6-1: Using ep0 maxpacket: 16
[  747.431338][ T8584] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2
[  747.431554][   T30] audit: type=1326 audit(1754906941.486:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671f8ebe9 code=0x7ff00000
[  747.441020][T11017] netlink: 'syz.6.1400': attribute type 10 has an invalid length.
[  747.463608][T10989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  747.488519][ T8584] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85
[  747.496340][ T8584] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5
[  747.502866][T10989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  747.510513][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  747.512027][   T30] audit: type=1326 audit(1754906941.486:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671f8ebe9 code=0x7ff00000
[  747.545028][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  747.553537][T10989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  747.556239][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  747.582129][    C1] vkms_vblank_simulate: vblank timer overrun
[  747.585544][   T30] audit: type=1326 audit(1754906941.486:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671f8ebe9 code=0x7ff00000
[  747.598196][ T8584] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  747.600937][   T10] usb 5-1: Using ep0 maxpacket: 16
[  747.636234][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  747.641084][T10989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  747.647851][ T8584] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83
[  747.664956][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  747.678164][   T30] audit: type=1326 audit(1754906941.486:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671f8ebe9 code=0x7ff00000
[  747.678223][   T30] audit: type=1326 audit(1754906941.486:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671f8ebe9 code=0x7ff00000
[  747.678269][   T30] audit: type=1326 audit(1754906941.486:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671f8ebe9 code=0x7ff00000
[  747.678307][   T30] audit: type=1326 audit(1754906941.486:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671f8ebe9 code=0x7ff00000
[  747.678348][   T30] audit: type=1326 audit(1754906941.486:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671f8ebe9 code=0x7ff00000
[  747.678395][   T30] audit: type=1326 audit(1754906941.486:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671f8ebe9 code=0x7ff00000
[  747.678442][   T30] audit: type=1326 audit(1754906941.486:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.1.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671f8ebe9 code=0x7ff00000
[  747.701023][    C1] vkms_vblank_simulate: vblank timer overrun
[  747.767213][    C1] vkms_vblank_simulate: vblank timer overrun
[  747.767659][   T51] Bluetooth: hci6: command tx timeout
[  747.792099][ T8584] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4
[  747.833414][    C1] vkms_vblank_simulate: vblank timer overrun
[  747.853456][   T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  747.877042][   T10] usb 5-1: config 0 has no interface number 0
[  747.885399][   T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  747.896790][   T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  747.907011][   T10] usb 5-1: config 0 interface 41 has no altsetting 0
[  747.914109][ T8584] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86
[  747.916768][   T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  747.937194][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.950750][   T10] usb 5-1: Product: syz
[  747.955003][   T10] usb 5-1: Manufacturer: syz
[  747.959719][   T10] usb 5-1: SerialNumber: syz
[  747.964919][T11017] team0: Device hsr_slave_0 failed to register rx_handler
[  747.979187][   T10] usb 5-1: config 0 descriptor??
[  747.987710][T11033] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  747.995039][T11033] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  748.006897][ T8584] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6
[  748.113950][ T8584] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  748.331881][T11033] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  748.345376][T11033] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  748.353575][ T8584] usb 7-1: USB disconnect, device number 3
[  748.479505][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  748.505375][   T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  748.742921][   T93] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 150 seconds
[  748.865977][   T10] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  748.867761][   T24] usb 6-1: Manufacturer: syz
[  748.876187][   T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  748.901004][ T8584] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  749.071095][   T10] usb 5-1: USB disconnect, device number 39
[  749.100614][   T24] usb 6-1: config 0 descriptor??
[  749.107044][ T8584] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  749.168369][ T8584] keyspan 7-1:0.0: device disconnected
[  749.565480][T11041] lo speed is unknown, defaulting to 1000
[  749.857660][   T51] Bluetooth: hci6: command tx timeout
[  749.904316][T11047] netlink: 'syz.6.1406': attribute type 1 has an invalid length.
[  750.043889][T10989] hsr_slave_0: entered promiscuous mode
[  750.050448][   T24] rc_core: IR keymap rc-hauppauge not found
[  750.056628][   T24] Registered IR keymap rc-empty
[  750.120388][T10989] hsr_slave_1: entered promiscuous mode
[  750.130323][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  750.164670][T10989] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  750.202759][T10989] Cannot create hsr debugfs directory
[  750.208613][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  750.295625][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  750.345166][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21
[  750.398281][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  750.429175][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  750.457820][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  750.479205][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  750.507856][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  750.552721][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  750.610347][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  750.638747][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  750.686266][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  750.707749][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  750.735726][   T24] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  750.753307][   T24] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  751.150909][   T24] usb 6-1: USB disconnect, device number 13
[  751.469970][T10989] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  751.514105][T10989] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  751.700260][T10989] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  751.866488][T10989] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  751.957511][   T51] Bluetooth: hci6: command tx timeout
[  752.591790][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  755.257640][ T5206] udevd[5206]: worker [8037] /devices/virtual/block/nbd0 is taking a long time
[  755.543720][T11092] syz.4.1416 (11092): drop_caches: 2
[  755.967790][   T51] Bluetooth: hci6: command tx timeout
[  756.773353][T10989] 8021q: adding VLAN 0 to HW filter on device bond0
[  756.877048][T10989] 8021q: adding VLAN 0 to HW filter on device team0
[  756.891311][T11101] lo speed is unknown, defaulting to 1000
[  757.026108][ T8525] bridge0: port 1(bridge_slave_0) entered blocking state
[  757.033522][ T8525] bridge0: port 1(bridge_slave_0) entered forwarding state
[  757.126332][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state
[  757.133538][ T8525] bridge0: port 2(bridge_slave_1) entered forwarding state
[  757.585347][   T30] kauditd_printk_skb: 9673 callbacks suppressed
[  757.585368][   T30] audit: type=1326 audit(1754906951.646:9835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.6.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ed8ebe9 code=0x7ffc0000
[  757.699141][   T30] audit: type=1326 audit(1754906951.686:9836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.6.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ed8ebe9 code=0x7ffc0000
[  757.732527][   T30] audit: type=1326 audit(1754906951.696:9837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.6.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f329ed8ebe9 code=0x7ffc0000
[  757.969475][   T30] audit: type=1326 audit(1754906951.696:9838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.6.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ed8ebe9 code=0x7ffc0000
[  758.149028][   T30] audit: type=1326 audit(1754906951.706:9839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.6.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ed8ebe9 code=0x7ffc0000
[  758.234643][   T30] audit: type=1326 audit(1754906951.716:9840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.6.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f329ed8ebe9 code=0x7ffc0000
[  758.385947][   T30] audit: type=1326 audit(1754906951.716:9841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.6.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ed8ebe9 code=0x7ffc0000
[  758.427213][   T30] audit: type=1326 audit(1754906951.716:9842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.6.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f329ed8ebe9 code=0x7ffc0000
[  758.490255][   T30] audit: type=1326 audit(1754906951.716:9843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.6.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329ed8ebe9 code=0x7ffc0000
[  758.569979][   T30] audit: type=1326 audit(1754906951.716:9844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11104 comm="syz.6.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f329ed8ebe9 code=0x7ffc0000
[  758.906602][T11125] 9pnet_fd: Insufficient options for proto=fd
[  758.922316][T11124] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  760.575079][T11133] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1426'.
[  760.592481][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1426'.
[  760.664486][T11136] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1429'.
[  761.007263][T11144] lo speed is unknown, defaulting to 1000
[  761.033642][T10989] 8021q: adding VLAN 0 to HW filter on device batadv0
[  762.192333][T11181] netlink: 'syz.5.1441': attribute type 8 has an invalid length.
[  762.279915][T10989] veth0_vlan: entered promiscuous mode
[  762.336716][T10989] veth1_vlan: entered promiscuous mode
[  762.490560][T10989] veth0_macvtap: entered promiscuous mode
[  762.565879][T11186] Can't find a SQUASHFS superblock on nullb0
[  762.901786][T10989] veth1_macvtap: entered promiscuous mode
[  763.052243][T10989] batman_adv: batadv0: Interface activated: batadv_slave_0
[  763.112036][T11188] lo speed is unknown, defaulting to 1000
[  763.128622][T10989] batman_adv: batadv0: Interface activated: batadv_slave_1
[  763.151119][ T9187] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  763.308560][T10989] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  763.327594][ T9187] usb 7-1: Using ep0 maxpacket: 8
[  763.327711][T10989] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  763.344787][ T9187] usb 7-1: config 0 has an invalid interface number: 254 but max is 0
[  763.359509][ T9187] usb 7-1: config 0 has no interface number 0
[  763.365895][ T9187] usb 7-1: too many endpoints for config 0 interface 254 altsetting 255: 255, using maximum allowed: 30
[  763.382484][ T9187] usb 7-1: config 0 interface 254 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  763.418448][ T9187] usb 7-1: config 0 interface 254 has no altsetting 0
[  763.436612][ T9187] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  763.448728][ T9187] usb 7-1: New USB device strings: Mfr=1, Product=68, SerialNumber=3
[  763.467169][ T9187] usb 7-1: Product: syz
[  763.479936][ T9187] usb 7-1: Manufacturer: syz
[  763.490435][ T9187] usb 7-1: SerialNumber: syz
[  763.510782][ T9187] usb 7-1: config 0 descriptor??
[  763.535698][ T9187] gspca_main: sq905-2.14.0 probing 2770:9120
[  763.579537][T10989] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  763.588587][T10989] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  763.937281][T11198] netlink: 'syz.1.1446': attribute type 10 has an invalid length.
[  763.966846][T11198] bridge0: port 3(syz_tun) entered disabled state
[  763.974081][T11198] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.981636][T11198] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.054795][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1446'.
[  764.088982][T11198] bridge0: port 3(syz_tun) entered blocking state
[  764.095744][T11198] bridge0: port 3(syz_tun) entered forwarding state
[  764.104107][T11198] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.111352][T11198] bridge0: port 2(bridge_slave_1) entered forwarding state
[  764.119133][T11198] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.126402][T11198] bridge0: port 1(bridge_slave_0) entered forwarding state
[  764.156500][T11198] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  764.188456][T11199] syz_tun: left allmulticast mode
[  764.194058][T11199] syz_tun: left promiscuous mode
[  764.202894][T11199] bridge0: port 3(syz_tun) entered disabled state
[  764.213652][T11199] bridge_slave_1: left allmulticast mode
[  764.219503][T11199] bridge_slave_1: left promiscuous mode
[  764.225355][T11199] bridge0: port 2(bridge_slave_1) entered disabled state
[  764.239244][T11199] bridge_slave_0: left promiscuous mode
[  764.245265][T11199] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.300115][T11199] bond0: (slave bridge0): Releasing backup interface
[  764.445829][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.490535][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  764.570828][ T9187] gspca_sq905: bulk read fail (-22) len 0/4
[  764.581811][ T9187] sq905 7-1:0.254: probe with driver sq905 failed with error -5
[  765.170492][ T5925] usb 7-1: USB disconnect, device number 4
[  765.329231][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  765.442008][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  766.284378][T11217] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  767.549877][T11228] x_tables: unsorted entry at hook 2
[  767.939365][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  768.747539][   T44] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  768.876279][T11235] lo speed is unknown, defaulting to 1000
[  768.909731][   T44] usb 6-1: config 0 has an invalid interface number: 197 but max is 0
[  768.948040][   T44] usb 6-1: config 0 has no interface number 0
[  768.956184][   T44] usb 6-1: config 0 interface 197 has no altsetting 0
[  769.011899][   T44] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=86.12
[  769.036312][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.090709][   T44] usb 6-1: Product: syz
[  769.095060][   T44] usb 6-1: Manufacturer: syz
[  769.137743][   T44] usb 6-1: SerialNumber: syz
[  769.161259][   T44] usb 6-1: config 0 descriptor??
[  769.291198][T11249] netlink: 'syz.7.1461': attribute type 2 has an invalid length.
[  769.329809][T11246] batadv0: entered promiscuous mode
[  769.365985][T11246] bridge0: entered promiscuous mode
[  769.383564][T11246] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  769.414370][T11246] Cannot create hsr debugfs directory
[  769.422687][   T44] redrat3 6-1:0.197: Couldn't find all endpoints
[  769.428719][T11246] hsr1: entered allmulticast mode
[  769.456859][   T44] usb 6-1: USB disconnect, device number 14
[  769.463974][T11246] batadv0: entered allmulticast mode
[  769.485524][T11246] bridge0: entered allmulticast mode
[  769.910002][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1467'.
[  769.926201][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1467'.
[  770.027889][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  772.076268][T11284] overlayfs: failed to clone upperpath
[  772.163086][T11286] FAULT_INJECTION: forcing a failure.
[  772.163086][T11286] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  772.202131][T11286] CPU: 1 UID: 0 PID: 11286 Comm: syz.5.1471 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  772.202163][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  772.202179][T11286] Call Trace:
[  772.202188][T11286]  <TASK>
[  772.202198][T11286]  dump_stack_lvl+0x189/0x250
[  772.202230][T11286]  ? __pfx____ratelimit+0x10/0x10
[  772.202255][T11286]  ? __pfx_dump_stack_lvl+0x10/0x10
[  772.202279][T11286]  ? __pfx__printk+0x10/0x10
[  772.202323][T11286]  should_fail_ex+0x414/0x560
[  772.202352][T11286]  strncpy_from_user+0x36/0x290
[  772.202391][T11286]  path_setxattrat+0x150/0x3a0
[  772.202434][T11286]  ? __pfx_path_setxattrat+0x10/0x10
[  772.202462][T11286]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  772.202516][T11286]  ? ksys_write+0x22a/0x250
[  772.202540][T11286]  ? __pfx_ksys_write+0x10/0x10
[  772.202558][T11286]  ? rcu_is_watching+0x15/0xb0
[  772.202595][T11286]  __x64_sys_setxattr+0xbc/0xe0
[  772.202626][T11286]  do_syscall_64+0xfa/0x3b0
[  772.202650][T11286]  ? lockdep_hardirqs_on+0x9c/0x150
[  772.202672][T11286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  772.202695][T11286]  ? clear_bhb_loop+0x60/0xb0
[  772.202722][T11286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  772.202743][T11286] RIP: 0033:0x7f7e11b8ebe9
[  772.202763][T11286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  772.202783][T11286] RSP: 002b:00007f7e12ac2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  772.202806][T11286] RAX: ffffffffffffffda RBX: 00007f7e11db5fa0 RCX: 00007f7e11b8ebe9
[  772.202822][T11286] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000040
[  772.202837][T11286] RBP: 00007f7e12ac2090 R08: 0000000000000003 R09: 0000000000000000
[  772.202851][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  772.202864][T11286] R13: 00007f7e11db6038 R14: 00007f7e11db5fa0 R15: 00007ffc99d765b8
[  772.202897][T11286]  </TASK>
[  772.705882][T11295] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  773.154852][T11301] lo speed is unknown, defaulting to 1000
[  773.539965][T11298] orangefs_mount: mount request failed with -4
[  774.654488][T11317] gretap0: entered promiscuous mode
[  775.749148][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1484'.
[  775.758372][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1484'.
[  776.367251][T11328] overlayfs: failed to clone upperpath
[  776.670280][ T8523] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.922945][ T8523] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.044026][T11345] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1490'.
[  777.070489][ T8523] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.260412][ T8523] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.599606][T11353] binder: BINDER_SET_CONTEXT_MGR already set
[  777.605688][T11353] binder: 11351:11353 ioctl 4018620d 200000000040 returned -16
[  777.693797][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  777.710292][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  777.726921][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  777.761048][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  777.924393][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  778.010034][ T8523] bridge_slave_1: left allmulticast mode
[  778.016331][ T8523] bridge_slave_1: left promiscuous mode
[  778.046703][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state
[  778.709024][ T8523] bridge_slave_0: left allmulticast mode
[  778.714787][ T8523] bridge_slave_0: left promiscuous mode
[  778.804355][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state
[  778.821460][   T93] block nbd0: Possible stuck request ffff888025820000: control (read@0,4096B). Runtime 180 seconds
[  778.984473][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1497'.
[  780.000210][ T8523] bridge0 (unregistering): left promiscuous mode
[  780.017824][   T51] Bluetooth: hci2: command tx timeout
[  780.487022][ T8523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  780.529104][ T8523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  780.560425][ T8523] bond0 (unregistering): Released all slaves
[  780.582357][T11409] fuse: Bad value for 'fd'
[  780.597783][ T8523] bond1 (unregistering): Released all slaves
[  780.629944][ T8523] bond2 (unregistering): Released all slaves
[  780.911574][T11381] lo speed is unknown, defaulting to 1000
[  781.013294][T11354] lo speed is unknown, defaulting to 1000
[  782.100442][   T51] Bluetooth: hci2: command tx timeout
[  782.872157][ T8523] batadv0: left promiscuous mode
[  782.898595][   T44] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  782.952632][ T8523] hsr_slave_0: left promiscuous mode
[  782.991650][ T8523] hsr_slave_1: left promiscuous mode
[  783.028779][ T8523] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  783.047884][ T8523] batman_adv: batadv0: Removing interface: batadv_slave_0
[  783.091974][   T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  783.114280][ T8523] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  783.134982][   T44] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  783.155495][ T8523] batman_adv: batadv0: Removing interface: batadv_slave_1
[  783.172783][   T44] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  783.198421][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.228312][   T44] usb 6-1: Product: syz
[  783.238540][   T44] usb 6-1: Manufacturer: syz
[  783.246980][ T8523] veth1_macvtap: left promiscuous mode
[  783.257892][   T44] usb 6-1: SerialNumber: syz
[  783.266229][ T8523] veth0_macvtap: left promiscuous mode
[  783.280026][ T8523] veth1_vlan: left promiscuous mode
[  783.285761][ T8523] veth0_vlan: left promiscuous mode
[  783.292916][   T44] usb 6-1: config 0 descriptor??
[  783.302293][T11445] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  783.331046][   T44] usb 6-1: ucan: probing device on interface #0
[  783.530368][   T44] usb 6-1: ucan: could not read protocol version, ret=-71
[  783.551401][   T44] usb 6-1: ucan: probe failed; try to update the device firmware
[  783.603930][   T44] usb 6-1: USB disconnect, device number 15
[  784.188498][   T51] Bluetooth: hci2: command tx timeout
[  786.258311][   T51] Bluetooth: hci2: command tx timeout
[  786.891883][ T8523] team0 (unregistering): Port device team_slave_1 removed
[  786.991381][ T8523] team0 (unregistering): Port device team_slave_0 removed
[  787.537909][ T5206] udevd[5206]: worker [8037] /devices/virtual/block/nbd0 timeout; kill it
[  787.546614][ T5206] udevd[5206]: seq 13758 '/devices/virtual/block/nbd0' killed
[  788.437902][   T31] INFO: task syz.3.1006:9557 blocked for more than 143 seconds.
[  788.445739][   T31]       Not tainted 6.16.0-syzkaller #0
[  788.472203][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  788.484133][   T31] task:syz.3.1006      state:D stack:23672 pid:9557  tgid:9553  ppid:5845   task_flags:0x400140 flags:0x00004006
[  788.496640][   T31] Call Trace:
[  788.500555][   T31]  <TASK>
[  788.504000][   T31]  __schedule+0x16aa/0x4c90
[  788.508688][   T31]  ? schedule+0x165/0x360
[  788.513189][   T31]  ? __pfx___schedule+0x10/0x10
[  788.518311][   T31]  ? schedule+0x91/0x360
[  788.522705][   T31]  schedule+0x165/0x360
[  788.526917][   T31]  io_schedule+0x81/0xe0
[  788.531302][   T31]  folio_wait_bit_common+0x6b0/0xb90
[  788.538081][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  788.543999][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  788.551064][   T31]  ? free_pages_prepare+0x3f2/0xa30
[  788.556428][   T31]  ? __pfx_compaction_alloc+0x10/0x10
[  788.597662][   T31]  migrate_pages_batch+0x13a6/0x2830
[  788.603088][   T31]  ? __pfx_compaction_free+0x10/0x10
[  788.627456][   T31]  ? __pfx_compaction_alloc+0x10/0x10
[  788.632941][   T31]  ? __pfx_migrate_pages_batch+0x10/0x10
[  788.668112][   T31]  ? __lock_acquire+0xab9/0xd20
[  788.678352][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  788.683914][   T31]  ? __schedule+0x16c8/0x4c90
[  788.697657][   T31]  migrate_pages+0x2038/0x2930
[  788.702537][   T31]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  788.716377][   T31]  ? __pfx_compaction_free+0x10/0x10
[  788.722183][   T31]  ? __pfx_compaction_alloc+0x10/0x10
[  788.729858][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  788.735163][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  788.742948][   T31]  ? __pfx_migrate_pages+0x10/0x10
[  788.748541][   T31]  ? rcu_is_watching+0x15/0xb0
[  788.753382][   T31]  ? rcu_is_watching+0x15/0xb0
[  788.758709][   T31]  ? isolate_migratepages_block+0x33cd/0x3a30
[  788.764894][   T31]  compact_zone+0x23f4/0x4ad0
[  788.771549][   T31]  ? __pfx_compact_zone+0x10/0x10
[  788.776667][   T31]  sysctl_compaction_handler+0x3a4/0x7b0
[  788.782962][   T31]  ? __pfx_sysctl_compaction_handler+0x10/0x10
[  788.789509][   T31]  ? rcu_is_watching+0x15/0xb0
[  788.794327][   T31]  ? proc_sys_call_handler+0x3ca/0x700
[  788.800334][   T31]  ? trace_kmalloc+0x1f/0xd0
[  788.804989][   T31]  ? __kvmalloc_node_noprof+0x331/0x5f0
[  788.811043][   T31]  ? proc_sys_call_handler+0x3ca/0x700
[  788.816596][   T31]  proc_sys_call_handler+0x4c6/0x700
[  788.822703][   T31]  ? __pfx_proc_sys_call_handler+0x10/0x10
[  788.828884][   T31]  ? __asan_memset+0x22/0x50
[  788.833544][   T31]  iter_file_splice_write+0x937/0x1000
[  788.839294][   T31]  ? __pfx_iter_file_splice_write+0x10/0x10
[  788.845991][   T31]  ? rcu_read_lock_any_held+0xb3/0x120
[  788.851602][   T31]  ? __pfx_iter_file_splice_write+0x10/0x10
[  788.857740][   T31]  direct_splice_actor+0x101/0x160
[  788.862906][   T31]  splice_direct_to_actor+0x5a5/0xcc0
[  788.868885][   T31]  ? __pfx_direct_splice_actor+0x10/0x10
[  788.874584][   T31]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  788.880644][   T31]  do_splice_direct+0x181/0x270
[  788.885558][   T31]  ? __pfx_do_splice_direct+0x10/0x10
[  788.891032][   T31]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  788.896984][   T31]  ? rw_verify_area+0x258/0x650
[  788.907295][   T31]  do_sendfile+0x4da/0x7e0
[  788.911890][   T31]  ? __pfx_do_sendfile+0x10/0x10
[  788.916951][   T31]  __se_sys_sendfile64+0xd9/0x190
[  788.922136][   T31]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  788.928006][   T31]  ? rcu_is_watching+0x15/0xb0
[  788.932834][   T31]  ? do_syscall_64+0xbe/0x3b0
[  788.937727][   T31]  do_syscall_64+0xfa/0x3b0
[  788.942334][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  788.948599][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  788.954734][   T31]  ? clear_bhb_loop+0x60/0xb0
[  788.959526][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  788.965552][   T31] RIP: 0033:0x7f30e918ebe9
[  788.970051][   T31] RSP: 002b:00007f30e9f83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  788.978649][   T31] RAX: ffffffffffffffda RBX: 00007f30e93b5fa0 RCX: 00007f30e918ebe9
[  788.986849][   T31] RDX: 00002000000000c0 RSI: 0000000000000006 RDI: 0000000000000007
[  788.994941][   T31] RBP: 00007f30e9211e19 R08: 0000000000000000 R09: 0000000000000000
[  789.003011][   T31] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000
[  789.011070][   T31] R13: 00007f30e93b6038 R14: 00007f30e93b5fa0 R15: 00007ffce7891768
[  789.019189][   T31]  </TASK>
[  789.022366][   T31] 
[  789.022366][   T31] Showing all locks held in the system:
[  789.030316][   T31] 3 locks held by kworker/u8:1/13:
[  789.035483][   T31] 1 lock held by khungtaskd/31:
[  789.070706][   T31]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  789.087535][   T31] 2 locks held by kworker/u8:2/36:
[  789.098008][   T31]  #0: ffff88801dfe6948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  789.109556][   T31]  #1: ffffc90000ac7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  789.122195][   T31] 4 locks held by kworker/1:1/44:
[  789.128044][   T31]  #0: ffff88814c97dd48 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  789.140006][   T31]  #1: ffffc90000b47bc0 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  789.157626][   T31]  #2: ffff888075f1e458 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect_work+0x1f7/0x920
[  789.180056][   T31]  #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x385/0x4e0
[  789.211755][   T31] 1 lock held by dhcpcd/5501:
[  789.216473][   T31]  #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50
[  789.237674][   T31] 2 locks held by getty/5595:
[  789.242414][   T31]  #0: ffff88814c7ac0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  789.277886][   T31]  #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  789.322237][   T31] 1 lock held by udevd/8037:
[  789.326970][   T31]  #0: ffff88802536e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  789.355204][   T31] 2 locks held by kworker/u8:16/8516:
[  789.363561][   T31]  #0: ffff88801dfe6948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  789.378257][   T31]  #1: ffffc9000b877bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  789.397568][   T31] 3 locks held by kworker/u8:21/8522:
[  789.403058][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  789.416565][   T31]  #1: ffffc90005207bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  789.437720][   T31]  #2: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  789.447731][   T31] 5 locks held by kworker/u8:22/8523:
[  789.453134][   T31]  #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  789.477488][   T31]  #1: ffffc90005167bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  789.507548][   T31]  #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  789.519322][   T31]  #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890
[  789.538170][   T31]  #4: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  789.558143][   T31] 1 lock held by syz.3.1006/9557:
[  789.568784][   T31]  #0: ffff8880270b8428 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160
[  789.579469][   T31] 1 lock held by syz.0.1341/10796:
[  789.587787][   T31]  #0: ffff88802536e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  789.597758][   T31] 1 lock held by syz-executor/11354:
[  789.603106][   T31]  #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20
[  789.618290][   T31] 2 locks held by syz.1.1499/11381:
[  789.623560][   T31]  #0: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[  789.633775][   T31]  #1: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: gate_exit_net+0x30/0x110
[  789.643329][   T31] 1 lock held by syz.4.1512/11433:
[  789.648851][   T31] 1 lock held by syz.7.1515/11451:
[  789.654018][   T31]  #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_attach+0xec/0x8c0
[  789.667579][   T31] 3 locks held by syz.5.1516/11456:
[  789.674608][   T31]  #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  789.710889][   T31]  #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  789.741709][   T31]  #2: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_bearer_disable+0x17/0x40
[  789.754925][T11433] Set syz1 is full, maxelem 65536 reached
[  789.764459][   T31] 
[  789.795253][   T31] =============================================
[  789.795253][   T31] 
[  789.819654][   T31] NMI backtrace for cpu 1
[  789.819674][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  789.819699][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  789.819712][   T31] Call Trace:
[  789.819722][   T31]  <TASK>
[  789.819731][   T31]  dump_stack_lvl+0x189/0x250
[  789.819759][   T31]  ? __wake_up_klogd+0xd9/0x110
[  789.819792][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  789.819816][   T31]  ? __pfx__printk+0x10/0x10
[  789.819859][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  789.819904][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  789.819933][   T31]  ? _printk+0xcf/0x120
[  789.819966][   T31]  ? __pfx__printk+0x10/0x10
[  789.819996][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  789.820033][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  789.820070][   T31]  watchdog+0xfee/0x1030
[  789.820105][   T31]  ? watchdog+0x1de/0x1030
[  789.820146][   T31]  kthread+0x70e/0x8a0
[  789.820179][   T31]  ? __pfx_watchdog+0x10/0x10
[  789.820210][   T31]  ? __pfx_kthread+0x10/0x10
[  789.820241][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  789.820261][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  789.820281][   T31]  ? __pfx_kthread+0x10/0x10
[  789.820312][   T31]  ret_from_fork+0x3fc/0x770
[  789.820336][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  789.820365][   T31]  ? __switch_to_asm+0x39/0x70
[  789.820390][   T31]  ? __switch_to_asm+0x33/0x70
[  789.820415][   T31]  ? __pfx_kthread+0x10/0x10
[  789.820446][   T31]  ret_from_fork_asm+0x1a/0x30
[  789.820491][   T31]  </TASK>
[  789.820499][   T31] Sending NMI from CPU 1 to CPUs 0:
[  789.980437][    C0] NMI backtrace for cpu 0
[  789.980454][    C0] CPU: 0 UID: 0 PID: 2911 Comm: kworker/u8:6 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  789.980476][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  789.980489][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  789.980520][    C0] RIP: 0010:__sanitizer_cov_trace_cmp8+0x8/0x90
[  789.980549][    C0] Code: 48 89 44 11 20 e9 18 3b a9 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 90 9c 92 65 8b 15 f8 67 dc 10 81 e2 00 01 ff 00
[  789.980566][    C0] RSP: 0018:ffffc9000b8b7620 EFLAGS: 00000246
[  789.980581][    C0] RAX: ffffffff8ae8c85f RBX: 0000000000000008 RCX: 0000000000000000
[  789.980593][    C0] RDX: ffff88802f8bbc00 RSI: 0000000000000008 RDI: 0000000000000000
[  789.980605][    C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 000000000000000c
[  789.980616][    C0] R10: 000000000000000c R11: 0000000000000000 R12: 1ffff1100491761a
[  789.980628][    C0] R13: ffff88806b674038 R14: 0000000000000000 R15: ffff8880248bb0d0
[  789.980641][    C0] FS:  0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
[  789.980657][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  789.980669][    C0] CR2: 000055557da1a5c8 CR3: 0000000033982000 CR4: 00000000003526f0
[  789.980686][    C0] Call Trace:
[  789.980693][    C0]  <TASK>
[  789.980699][    C0]  ieee80211_sta_get_rates+0x1af/0x5d0
[  789.980738][    C0]  ieee80211_ibss_rx_queued_mgmt+0x1303/0x2ae0
[  789.980782][    C0]  ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0
[  789.980812][    C0]  ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10
[  789.980847][    C0]  ? __lock_acquire+0xab9/0xd20
[  789.980887][    C0]  ieee80211_iface_work+0x806/0xfe0
[  789.980914][    C0]  cfg80211_wiphy_work+0x2dc/0x460
[  789.980937][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  789.980958][    C0]  process_scheduled_works+0xade/0x17b0
[  789.980994][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  789.981022][    C0]  worker_thread+0x8a0/0xda0
[  789.981058][    C0]  kthread+0x70e/0x8a0
[  789.981083][    C0]  ? __pfx_worker_thread+0x10/0x10
[  789.981103][    C0]  ? __pfx_kthread+0x10/0x10
[  789.981127][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  789.981151][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  789.981168][    C0]  ? __pfx_kthread+0x10/0x10
[  789.981191][    C0]  ret_from_fork+0x3fc/0x770
[  789.981210][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  789.981231][    C0]  ? __switch_to_asm+0x39/0x70
[  789.981253][    C0]  ? __switch_to_asm+0x33/0x70
[  789.981274][    C0]  ? __pfx_kthread+0x10/0x10
[  789.981298][    C0]  ret_from_fork_asm+0x1a/0x30
[  789.981330][    C0]  </TASK>
[  790.268197][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  790.275172][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  790.284932][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  790.295009][   T31] Call Trace:
[  790.298308][   T31]  <TASK>
[  790.301253][   T31]  dump_stack_lvl+0x99/0x250
[  790.305856][   T31]  ? __asan_memcpy+0x40/0x70
[  790.310471][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  790.315696][   T31]  ? __pfx__printk+0x10/0x10
[  790.320312][   T31]  panic+0x2db/0x790
[  790.324312][   T31]  ? __pfx_panic+0x10/0x10
[  790.328748][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  790.334595][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  790.340006][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  790.346183][   T31]  watchdog+0x102d/0x1030
[  790.350546][   T31]  ? watchdog+0x1de/0x1030
[  790.355024][   T31]  kthread+0x70e/0x8a0
[  790.359146][   T31]  ? __pfx_watchdog+0x10/0x10
[  790.363867][   T31]  ? __pfx_kthread+0x10/0x10
[  790.368493][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  790.373718][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  790.378948][   T31]  ? __pfx_kthread+0x10/0x10
[  790.383589][   T31]  ret_from_fork+0x3fc/0x770
[  790.388210][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  790.393331][   T31]  ? __switch_to_asm+0x39/0x70
[  790.398121][   T31]  ? __switch_to_asm+0x33/0x70
[  790.402922][   T31]  ? __pfx_kthread+0x10/0x10
[  790.407558][   T31]  ret_from_fork_asm+0x1a/0x30
[  790.412344][   T31]  </TASK>
[  790.415761][   T31] Kernel Offset: disabled
[  790.420106][   T31] Rebooting in 86400 seconds..