last executing test programs:

29m16.273936607s ago: executing program 4 (id=46):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x2, &(0x7f00000001c0)) (async)
r3 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0f07000007020002002e3a08000000"], 0xf) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async)
rseq(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x2b) (async)
listen(r5, 0x101) (async, rerun: 64)
connect$bt_sco(r5, &(0x7f0000000100)={0x1f, @none}, 0x8) (async, rerun: 64)
unshare(0x2040400)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/56, 0x38}], 0x1) (async)
socket$inet6(0xa, 0x3, 0x5)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
r8 = dup3(r7, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0xff, 0x9}, 0x20) (async)
sendmmsg$inet6(r8, &(0x7f0000001580)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x18}}], 0x1, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x28}}, 0x880)

29m15.977718117s ago: executing program 4 (id=50):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x94)
r1 = socket(0xa, 0x3, 0x3a)
recvmmsg(r1, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)=""/152, 0x98}], 0x1}, 0x2}], 0x1, 0x2, 0x0)
sendto$l2tp6(r1, &(0x7f0000000280)="bd5da3c2", 0x4, 0x40, &(0x7f0000000200)={0xa, 0x0, 0x2, @empty, 0xb8, 0x1}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='freezer.parent_freezing\x00', 0x0, 0x0)
preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
r8 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r8, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000280)='1', 0x1)
socketpair(0x1f, 0x800, 0x9, &(0x7f00000002c0)={<r9=>0xffffffffffffffff})
recvmmsg(r9, &(0x7f0000007580)=[{{&(0x7f0000000500)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000580)=""/232, 0xe8}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/34, 0x22}, {&(0x7f00000006c0)=""/97, 0x61}, {&(0x7f0000000740)=""/146, 0x92}, {&(0x7f0000000800)=""/10, 0xa}, {&(0x7f0000000840)=""/89, 0x59}, {&(0x7f00000008c0)=""/142, 0x8e}, {&(0x7f0000000980)=""/181, 0xb5}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x8, &(0x7f0000000ac0)=""/223, 0xdf}, 0x5}, {{&(0x7f0000000bc0)=@sco, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c40)=""/115, 0x73}], 0x1, &(0x7f0000002c00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000000d00)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d80)=""/132, 0x84}, {&(0x7f0000000e40)=""/183, 0xb7}], 0x2, &(0x7f0000000f40)=""/232, 0xe8}, 0x8}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001040)=""/34, 0x22}, {&(0x7f0000001080)=""/159, 0x9f}, {&(0x7f0000001140)=""/233, 0xe9}, {&(0x7f0000001240)=""/73, 0x49}], 0x4, &(0x7f0000001300)=""/122, 0x7a}, 0x7}, {{&(0x7f0000001380), 0x80, &(0x7f0000001400)=[{&(0x7f0000001500)=""/105, 0x69}], 0x1, &(0x7f0000001580)=""/201, 0xc9}, 0x1}, {{&(0x7f0000001680)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001700)=""/10, 0xa}], 0x1, &(0x7f0000001840)=""/223, 0xdf}, 0x1}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001780)=""/109, 0x6d}, {&(0x7f0000001940)=""/35, 0x23}, {&(0x7f0000001980)=""/183, 0xb7}, {&(0x7f0000001a40)=""/102, 0x66}, {&(0x7f0000001ac0)=""/60, 0x3c}], 0x5, &(0x7f0000003c00)=""/240, 0xf0}, 0x7}, {{&(0x7f0000003d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004100)=[{&(0x7f0000003d80)=""/142, 0x8e}, {&(0x7f0000003e40)=""/253, 0xfd}, {&(0x7f0000001b80)=""/46, 0x2e}, {&(0x7f0000003f40)=""/212, 0xd4}, {&(0x7f0000004040)=""/45, 0x2d}, {&(0x7f0000004080)=""/110, 0x6e}], 0x6, &(0x7f0000004180)=""/175, 0xaf}, 0x363}, {{&(0x7f0000004240)=@un=@abs, 0x80, &(0x7f0000006500)=[{&(0x7f00000042c0)=""/189, 0xbd}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/156, 0x9c}, {&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000006440)=""/175, 0xaf}], 0x5, &(0x7f0000006580)=""/4096, 0x1000}, 0x80000001}], 0xa, 0x10000, 0x0)

29m14.917911741s ago: executing program 4 (id=51):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x900, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa8}}, 0x0)

29m14.746243896s ago: executing program 4 (id=52):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000300)=@generic, &(0x7f00000003c0)=0x80)
lstat(&(0x7f0000000440)='./file1/file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r1, &(0x7f0000000500))
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r2, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)={0x20882, 0xc, 0x1a}, 0x18)
mkdirat(r3, &(0x7f0000000240)='./file0/file0\x00', 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000000c0)={0x2, 0xf, 0x7, 0x4, 0x63dddb36, 0x7})
setpgid(0x0, r2)
mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
vmsplice(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)="798f5f", 0x3}], 0x1, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='xen_mc_entry\x00', r5, 0x0, 0x401}, 0x18)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x84)

29m14.490174234s ago: executing program 4 (id=56):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2d, 0xe, {{{}, {}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @val, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x21, 0x91, "04ff8239e3cc3aea9a26d1d0c7ad1383efaaeb895eb1cdc38538d062b0"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}]}, 0x88}, 0x1, 0x0, 0x200000000000000, 0x20000000}, 0x0)

29m13.965748117s ago: executing program 4 (id=60):
socket$netlink(0x10, 0x3, 0x10)
syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000100), 0x4)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x12, r3, 0x100000000)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x8040)
syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="043406000000000000e848ebf6b98c474f398c0c3a28af9fae64407bacf077c7e4e74a66e11df33f66739d972dbb7c6eacebf35127a205c464176621bbbbc6ddc4440c5aac7e201dc7f9c5bb3fe7afc92f63a748f0757183a3b39f16d5010000001974d66738c12dfbcfc811df6a5816a9343e0a811b831833f634289f912d2da24b33bafad1aad3d8806a848ae087c8fcb4f8c051ec3282ba366dc4ccd934f43fc18fdd51fa53c18c645d85694472fa5bbc0e02c7695f6f8cdfa0bf992606a5026909b5c00ef94926af7b73d828f716818657cb06c2"], 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$setregs(0x1a, r7, 0xb, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x80000001, 0x0, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f0000001840)=""/205, 0xcd}, {&(0x7f0000001940)=""/215, 0xd7}, {&(0x7f0000001a40)=""/112, 0x70}, {&(0x7f0000001ac0)=""/94, 0x5e}], 0x6, &(0x7f0000001bc0)=""/73, 0x49}, 0x7}], 0x1, 0x42, &(0x7f0000001c40))
syz_io_uring_setup(0x7fa4, &(0x7f0000000640)={0x0, 0xec28, 0x10000, 0x1, 0x345}, &(0x7f0000000440)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0xc4, &(0x7f0000000040)=0x1, 0x0, 0x4)
unshare(0x22020480)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x44, 0x2004, @fd, 0x6, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f0000001c80)=""/125, 0x7d}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000700)=""/238, 0xee}], 0x4, 0x1, 0x1})

29m12.778023024s ago: executing program 32 (id=60):
socket$netlink(0x10, 0x3, 0x10)
syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000100), 0x4)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x12, r3, 0x100000000)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x8040)
syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="043406000000000000e848ebf6b98c474f398c0c3a28af9fae64407bacf077c7e4e74a66e11df33f66739d972dbb7c6eacebf35127a205c464176621bbbbc6ddc4440c5aac7e201dc7f9c5bb3fe7afc92f63a748f0757183a3b39f16d5010000001974d66738c12dfbcfc811df6a5816a9343e0a811b831833f634289f912d2da24b33bafad1aad3d8806a848ae087c8fcb4f8c051ec3282ba366dc4ccd934f43fc18fdd51fa53c18c645d85694472fa5bbc0e02c7695f6f8cdfa0bf992606a5026909b5c00ef94926af7b73d828f716818657cb06c2"], 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$setregs(0x1a, r7, 0xb, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x80000001, 0x0, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f0000001840)=""/205, 0xcd}, {&(0x7f0000001940)=""/215, 0xd7}, {&(0x7f0000001a40)=""/112, 0x70}, {&(0x7f0000001ac0)=""/94, 0x5e}], 0x6, &(0x7f0000001bc0)=""/73, 0x49}, 0x7}], 0x1, 0x42, &(0x7f0000001c40))
syz_io_uring_setup(0x7fa4, &(0x7f0000000640)={0x0, 0xec28, 0x10000, 0x1, 0x345}, &(0x7f0000000440)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0xc4, &(0x7f0000000040)=0x1, 0x0, 0x4)
unshare(0x22020480)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x44, 0x2004, @fd, 0x6, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/140, 0x8c}, {&(0x7f0000001c80)=""/125, 0x7d}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000700)=""/238, 0xee}], 0x4, 0x1, 0x1})

5m58.778297055s ago: executing program 5 (id=4477):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x78)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r5, 0x0, 0x18, 0x0, &(0x7f0000000040))

5m56.641399542s ago: executing program 5 (id=4480):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffd)
execve(&(0x7f0000000000)='./file2\x00', 0x0, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r4 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
r5 = add_key$user(&(0x7f0000000040), &(0x7f0000001180)={'syz', 0x3}, &(0x7f00000000c0)="2538a31458875a3834", 0x9, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000001340)={r3, r4, r5}, &(0x7f0000000180)=""/4093, 0xffd, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
close_range(r6, r6, 0x2)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'gre0\x00', @link_local})
bind$netlink(r1, 0x0, 0x0)
fchdir(r2)
fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, <r8=>0x0})
syz_open_procfs(r8, &(0x7f0000000340)='ns\x00')
mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0)
mount(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000001080))
sendmsg$NFT_BATCH(r1, &(0x7f0000001240)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f0000002940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x5bb0, 0xe, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5b68, 0x3, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x18}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, {0xc4, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xb4, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x30}, @NFTA_INNER_EXPR={0x5c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_EXPR={0x20, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}}}]}]}, {0x1098, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1094, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x5f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x488, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x478, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_TO_DATA={0x464, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5c, 0x1, "83b30d90b901ea972cf43e383ebd634d0c3e09375583becbc8a896634be7cf3036e389e890a39af64686bd71d9c317374fe8bf10838ebb4ec19ae29aa0b9bcb0faf3fecadf499792b0206cd88f766ab1cfac75307fffcceb"}, @NFTA_DATA_VALUE={0x80, 0x1, "96900910b27c46776afebce9beeeb8bf0680d4a500cbe530f04e46a2461d943eea4355268e5a56632667e28bc6fe5f9c6b0dbef9a21e0ebd72361116783135ddef42cc46e565bb409edecc2a0a1430bbc332711e85c879044d070098675eb2012817980536678515c105e0a34ad8045d7d683e1a0dcbbb56febf5290"}, @NFTA_DATA_VALUE={0xef, 0x1, "2ea90b7b2ca353eb4bc29f942cf87f8f48265f6b11484f793be5cd01cd487ced91d8b2106faf2b40de6029fa747262f17dfd0bf2b4852927aa006fb099e4cac20cd7f351ed033e094d867b60a3f67558616e7941dd539012c9f4dbdcf386dfca7907d6ff3db534050b0dcb81782106865779b39129f475089060c098de20f3bba55087d6b86049f13af5e63c08ba02b0e53d04d7d4c476e6dc2b90286c7832af9b99baedcea4acd67abbdc241362bf7df3637153c17e6189002b24609bd72efa0a17bc611cf660d3f7054273908fd00bbe71ff2846d834f6ba67db6829f7e16bf975c6cde57a891dd1e093"}, @NFTA_DATA_VALUE={0xd, 0x1, "e58edeb4b1342fd7f0"}, @NFTA_DATA_VALUE={0xd2, 0x1, "d0662d8e549737013f1a5014d096c01794beb4700f3415c67b1ff4232758a0221a40617c89ad0965bd6691d0d3b5ac41c65b4ea69e9ff803fcd969bb1949c4b2c94eec251763500eebeebc53df02a9ecbe5270f37110b02415a13dca68e3058905224856ccf68a7a6e92c8f93ec6663931c56fcd3a16294dd88354a345ef79893a64096c92148ca2fcce98fe56426e00f9ae87dc5a762b129ad0593123d7eb39946e25957a6fbbbd6c999d69ec83b082975aa93e7b89f36d715c557dded013b971f12e519c591011a96d03b4d605"}, @NFTA_DATA_VALUE={0x3f, 0x1, "61e9e1d4b703834cf02720d91b71ee45a0b0d6f0df785694282f77b511fa40acfed5c9d0c017fe2754c9c85fb29840e441db1817bb9eee9859ca1b"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xdf, 0x1, "80d7b409fd25c444d1fbcd4546fdc2d4bc60a4d9a746b26e1997b103cdd61aa87c1622a39fb7010244d1edd796cace9c96c5fcfbe6b43669c3e8724db0658e5a9e1b6fc5603c949541bab4f712e3d5df7d655608ad017dc915a7e1f6874556bdf2bc3b37a36c7e32e320047ad8ed0075e0988078991531fd27982f4ca70eb002e80b8184b1477691f0cc4e29896d59e7f3b08efe7a3cddce9ee5566b32258357451261a0716a05e1d4cac02d4e2e56009baada1bca9d3f8c06f2d805161f48c20a1796b31c70a0c20d5ade124ecbe70e50aaac438b9c3b128a1347"}, @NFTA_DATA_VALUE={0x66, 0x1, "a2641942e0fe8a6f87c5262f84d5a231ac9ac54e5a2bdd15c1ca97fe5ca36a48e5a4cc49ccee5d1cc1578587086eef550af486ea903ba3c8dc87d62ad4db7785f1907cc9df02117d72668269fb656f3fb31761bef0cbd19904e882964a3bddd1ac8b"}]}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x150, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "6953e117bd9712d95aaa45736b6e2143cb26255fbf5e348c0dc3cd49e0718590bc9619d6e09ae02c22356ef0647df97285f0167940b458560580eff93b93fd1dfd6681cfdf22be176f91cf3c91166cd1b45d6f0a695b2342cbbadcd60bb077c7bd74ec24ce6363f12c6d733cb4c331c6d4024db9da"}, @NFTA_DATA_VALUE={0x71, 0x1, "f809639743171da0e1191ae39ecdb8adf175895b73b30e864694d58ff8856da677bf368b128151c9d2a61b04359ae609eca2431b1ed68444a060168c9376697fc7b46cc41edab49de9b88f6d913c3a6f6bb91c529e094b1bb8775bdc998a2ef5ee36b0360dfc2f1a0a76bd9173"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x91}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x1160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1128, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "626d706aa6c53467d6051671626551d9fc42a2b54dff5e5b6d1cbeb7b74b2b1942e7e3a1bfbab2ca90685dd0d24a8945e78b7e5c0b8fa29f2403d230b0d748eaac1c78a1d3fd549a87426ce4439c0f8e95ffbaeaee5d17548cba3965a018f09ca5034994454623e6ce5b9b9ca6a45aa9f8fb0718a4faeec879b723c1f9a77e22ad03088ddf09e47b1453ab1a9764d839125a706b88a179ee39582e62a707c32696aace244a536942951bc79fcd2eb7894c70d889eb8aec884dd17c068e5a2c6bb702221ec8acc5dfa0381054a361008a78a3215f15d6601f59dd1b128dc36139a06dcf6ecb"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0x25, 0x6, 0x1, 0x0, "e944f8982e0e73e0d19db183153596da1932a01596fab729f6c1ffa22c2c899a08"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf14a}]}, {0x318c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x3154, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xfe4, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_CT_DIRECTION={0x5}]}}}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xda}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0xa8, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_USERDATA={0x67, 0xd, 0x1, 0x0, "280cd58899bb3e5f16fbc07889535bc80a362a59cb3f0609911fdfb51dcfa651864cd864beb05b18d40e13a2302ffc8f03eed2e3509aa9648c34261da07ebbeb74064af1825fad0d7ce98b842a8231866df905b8e8c8e87dac8b4bf65b1b7cfee7c5c0"}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x9, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x5e, 0x7, 0x1, 0x0, "cd44df3fc55be522dc16d2e2de9a194fe6dd3d7ac982542bf958958337e0ba5904c51f1a8c6aaa913fde5d6d5a19a912f7f3f3c4aad06cfe366ac9bb1fea106ce7125b2f4532533702ce75e9b29b015f190aa910b46f00ce0ff8"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x10c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xef, 0x6, "60910ecc32c5d5aaa75e33dadaf70fef3e9dd0a7de795865caed21ac6957f25762caec1c45661860a757c346c5944e0fd12e603334c0da8a8bfe969cd61e35c4d61d098976bb3cd815ff0ba7af42835cef7b9e43774cd11a85a22400431c782b1d16ba3e9b4d02e77709eb9ba7e808b5abaa5d2507de5c9bcb7771d28ef8bfd1d4e21bf5011d3e9e8dfa04912718961f87a0757488a3112da201e10bd0b5f0e8c080e1238b79155c68012b672eb04dc7082f6d3796b084933f7a6833a5976e916c040f8c3c102c01ddbfa6b33c5fc7add5e4941f0975f377c40ed3c030ec7f8f42d301a547c19c4af67feb"}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x200, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb}]}, @NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6048}, 0x1, 0x0, 0x0, 0x40010}, 0x20048080)

5m54.696443791s ago: executing program 5 (id=4486):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='workqueue_activate_work\x00', r1}, 0x18)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x400, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x58}, 0x1, 0xba01, 0x0, 0x20004001}, 0x4008090)
r2 = socket(0x5, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa30, 0x0, 0x25, 0x148, 0xe0, 0x60, 0x998, 0x2a8, 0x2a8, 0x998, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @rand_addr=0x64010101, 0xffffff00, 0xff, 'gre0\x00', 'xfrm0\x00', {}, {0xff}, 0x1, 0x2, 0x65}, 0x0, 0x98, 0xe0, 0x0, {0x200003ae, 0x7f00}, [@common=@ttl={{0x28}, {0x1, 0xff}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x61, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xff000000, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x0, 0x28}, 0x0, 0x850, 0x8b8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x800, 0x1}, {0xfff}, {0x1ff, 0x2}, {0xfffffffb, 0x2}, {0x3, 0x2}, {0x2, 0x2}, {0x3ff}, {0x18b, 0x1}, {0x9, 0x2}, {0x1de}, {0x0, 0x3}], [{0x7ff, 0x9a0f}, {0x81, 0x2e}, {0x5, 0x6}, {0x3}, {0xfffff001, 0x8}, {0x8, 0x21b}, {0x1, 0x9c}, {0xf, 0x8}, {0x8fb, 0x41}, {0xfffff000, 0x800}, {0x7f0, 0xfffffff9}], 0x0, 0x1}, {[{0x8}, {0xfff, 0x3}, {0x8, 0x3}, {0x7, 0x1}, {0xffff7fff, 0x1}, {0x4, 0x1}, {0xb, 0x2}, {0x9, 0x2}, {0xa, 0x1}, {0x12000}, {0x8, 0x1}], [{0x6, 0x5}, {0x2, 0xfffffff9}, {0x3, 0xfd2}, {0x3, 0x9}, {0x0, 0xff}, {0x3, 0xfffffff6}, {0x2, 0xfffffffe}, {0x3, 0xffff8001}, {0x7, 0x1}, {0x1, 0x2}, {0x5, 0xfffffffb}], 0x6, 0x8}, {[{0x2, 0x1}, {0xfffff200, 0x3}, {0x8, 0x2}, {0x7}, {0xf, 0x1}, {0xb29}, {0xfffffc2a, 0x2}, {0x7fff, 0x3}, {0xedfb, 0x2}, {0x9, 0x2}, {0x5, 0x1}], [{0x7, 0x4}, {0xf, 0xc6b}, {0x4, 0x6}, {0x2, 0x5}, {0x8, 0xfffffffa}, {0x7, 0x2}, {0x60, 0x8}, {0x8, 0x8}, {0x5, 0xffffffff}, {0xffff, 0x5}, {0x7fff}], 0x9, 0x6}, {[{0x9, 0x1}, {0x7, 0x3}, {0xa3ea1d1, 0x2}, {0xfffffff9, 0x1}, {0xfff}, {0x3}, {0x7ff}, {0x2, 0x3}, {0x81}, {0x200}, {0x8, 0x1}], [{0x8, 0x800}, {0x5, 0x8}, {0x6, 0x3}, {0x3, 0x10000}, {0x3, 0xffff}, {0x5, 0x4}, {0x2, 0xa3}, {0x9, 0x9}, {0x4000, 0x7}, {0xab38, 0x7}, {0x100, 0xf}], 0xb}, {[{0x0, 0x691df39cb73d7b9d}, {0x0, 0x1}, {0x5, 0x1}, {0x3ff, 0x1}, {0xfffffffa, 0x2}, {0x3, 0x2}, {0x5}, {0xf5, 0x2}, {0xdf5}, {0x6}, {0x3}], [{0x4, 0x400}, {0x3, 0x9}, {0x3, 0x9}, {0x100, 0xffffd7b9}, {0x3, 0x3}, {0x8, 0x2}, {0x8, 0x6}, {0x5, 0x3422}, {0x2, 0x5}, {0x0, 0xfffffffe}, {0x7fffffff, 0x30c}], 0x3}, {[{0x4, 0x3}, {0x9}, {0x6, 0x2}, {0x6, 0x3}, {0x4, 0x3}, {0x81, 0x3}, {0x101, 0x2}, {0x40, 0x2}, {0x9, 0x1}, {0xd, 0x2}, {0xfffffffc, 0x1}], [{0x5, 0x8001}, {0x6, 0xb}, {0x0, 0x7}, {0x4, 0x7ff}, {0x2, 0x5}, {0x3, 0x8000}, {0x1, 0x2}, {0xe5, 0xfffffffd}, {0x6}, {0xfffffff9, 0x9}, {0x8000, 0x6}], 0x7, 0x1}, {[{0x4a, 0x3}, {0x4, 0x2}, {0x0, 0x3}, {0x7f, 0x2}, {0xc, 0x3}, {0xfffffeff, 0x2}, {0x7, 0x3}, {0x9, 0x1}, {}, {0x4}, {0x4}], [{0xffff, 0xc}, {0x4, 0xcfb9}, {0x4, 0xa6}, {0x5, 0x1}, {0x4e0f, 0x9}, {0x9, 0x8000}, {0x9, 0x5}, {0xb, 0x1000}, {0x2, 0x1}, {0x0, 0xfff}, {0x5}], 0xb, 0x4}, {[{0x100, 0x1}, {0x1}, {0x8, 0x3}, {0xb41, 0x2}, {0x0, 0x1}, {0x92}, {0xfffffef5, 0x2}, {0xa38, 0x1}, {0x10000, 0x2}, {0xffff, 0x1}, {0x5}], [{0x7, 0x4685}, {0x7, 0x5b}, {0xfed, 0x3}, {0x0, 0x5}, {0x2, 0x8}, {0x2000, 0x2}, {0x9, 0x8}, {0x2, 0x4}, {0x200, 0x1}, {0x1d0, 0x6}, {0xbe, 0x9}], 0x7, 0x1}, {[{0x67, 0x2}, {0xe0a}, {0xe, 0x3}, {0xe9b}, {}, {0x2, 0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x3}, {0x9, 0x1}, {0x1, 0x2}], [{0x7e, 0x43}, {0x10, 0x80000000}, {0x5, 0x5}, {0x5, 0x7fff}, {0x1000, 0x2}, {0x7, 0x2}, {0x4, 0xfffffffb}, {0x8, 0x282}, {}, {0x7f, 0x3}, {0x7, 0x10000}], 0x2, 0x9}, {[{0x1, 0x1}, {0xfffffffa, 0x3}, {0xa3f, 0x2}, {0xbd, 0x2}, {0x80000000, 0x1}, {0x3, 0x1}, {0x2f, 0x1}, {0xa79, 0x1}, {0x2}, {0x2, 0x2}, {0x0, 0x3}], [{0x79d4, 0x2}, {0xf5de, 0x1}, {0xe, 0x4}, {0xf, 0xfffffff8}, {0x2}, {0x6, 0x6}, {0x1ff, 0x6}, {0x5, 0xfffffffe}, {0x2, 0xa}, {0x200, 0x7a}, {0xd, 0xd35}], 0x6, 0x3}, {[{0x2, 0x3}, {0xd}, {0x3}, {0xffff, 0x3}, {0x1, 0x2}, {0x3}, {0x5, 0x1}, {0x5, 0x2}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x1}], [{0x7, 0x7ff}, {0x3f7, 0x5}, {0x0, 0xffffffff}, {0x73, 0x2}, {0xfffffff9, 0x6fb}, {0x9, 0x400}, {0x6, 0x85a0}, {0xbff, 0x6}, {0x34d, 0x3}, {0x0, 0x6}, {0x1, 0xd}], 0xb, 0x3}], 0xd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xed, 0x0, 0x1, '\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xa90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)

5m53.223761773s ago: executing program 5 (id=4492):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r3, 0x29, 0x19, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x9, 0x2, 0x200, 0x0, 0x8}, 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0x300, 0x7fffffff, 0x100002}, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000100)=""/49)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r4 = syz_open_pts(r0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[])
ioctl$TIOCSTI(r4, 0x5412, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4)

5m50.124483045s ago: executing program 5 (id=4500):
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30)

5m49.765562377s ago: executing program 5 (id=4504):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x81}}, './file0\x00'})
fsopen(&(0x7f0000000300)='befs\x00', 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x8d0, &(0x7f00000000c0)={0x0, 0xc48a, 0x800, 0x3}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x5)
connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x1f, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1a4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @alu={0x7, 0x1, 0x4, 0xb, 0x1, 0x40, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x436f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd3, &(0x7f0000000240)=""/211, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000076f10c18762a6186649678808ad79445d3ccdbc3f4eba250082750bd90bd890a67e35da41a31da9c91b36ede92b3ca7f5fae4b98305a1d9782478de396dc6081d4af0d31ce148d8bcede58f76385092adac9ee2c1bf4f2875cb7d3bdddbb6b3d1906974eb9749bbaaa4cbab4276221e254fe98815376aa54d7d9544487e9ce", @ANYRES16=r8, @ANYBLOB="010023484af53b607cc707"], 0x2c}}, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

5m33.685561194s ago: executing program 33 (id=4504):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x81}}, './file0\x00'})
fsopen(&(0x7f0000000300)='befs\x00', 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x8d0, &(0x7f00000000c0)={0x0, 0xc48a, 0x800, 0x3}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x5)
connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x1f, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1a4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @alu={0x7, 0x1, 0x4, 0xb, 0x1, 0x40, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x436f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd3, &(0x7f0000000240)=""/211, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000076f10c18762a6186649678808ad79445d3ccdbc3f4eba250082750bd90bd890a67e35da41a31da9c91b36ede92b3ca7f5fae4b98305a1d9782478de396dc6081d4af0d31ce148d8bcede58f76385092adac9ee2c1bf4f2875cb7d3bdddbb6b3d1906974eb9749bbaaa4cbab4276221e254fe98815376aa54d7d9544487e9ce", @ANYRES16=r8, @ANYBLOB="010023484af53b607cc707"], 0x2c}}, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

2m5.294776148s ago: executing program 1 (id=5337):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xa1641000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2004e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0xa000200)
semget$private(0x0, 0x4000, 0x40)
semop(0x0, 0x0, 0x0)
semctl$GETZCNT(0x0, 0x4, 0xf, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0)
fremovexattr(r0, &(0x7f0000000140)=@known='system.posix_acl_default\x00')
r5 = gettid()
r6 = socket$unix(0x1, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000a80))
recvmmsg$unix(r6, &(0x7f0000000980)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000100)=""/48, 0x30}], 0x1, &(0x7f00000001c0)}}, {{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/201, 0xc9}], 0x1, &(0x7f0000000440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000480), 0x6e, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/250, 0xfa}], 0x2, &(0x7f00000008c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}], 0x4, 0x30000, &(0x7f0000000ac0))
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000900ffffffffffff000000000000aaaaaaaaaaaaaaaaaaaaaa0900ffffffffffaaaaaaaaaaaa000000000000bbbbbbbbbbbbff"])
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000300))
accept$phonet_pipe(r7, &(0x7f0000000500), &(0x7f0000000b00)=0x10)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1901000018c4050830088000ac46010203010902120001000000000904"], 0x0)

1m58.969587454s ago: executing program 1 (id=5352):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x78)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r5, 0x0, 0x18, 0x0, &(0x7f0000000040)=0x2900)

1m57.936393042s ago: executing program 1 (id=5365):
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0xf000000)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, {0x0, 0x200000, 0x7}, {0xdb6, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@local}]}, 0x104}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

1m56.902041648s ago: executing program 1 (id=5370):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x5, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60)
read$FUSE(r0, &(0x7f0000001d40)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x2c, 0x0, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d4e01051d6ff63"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x803341)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0x7fffffffffffffff, 0x1, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)='\r', 0x0, 0x400, 0x20004, 0x1, 0x0})
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0)
chdir(0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000140)={0x0, 0xffa6, &(0x7f00000000c0)={&(0x7f0000000a00)={0x14, r6, 0x701, 0x70bd25, 0x0, {0xb}}, 0x14}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x170b92c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40955}, 0x4014)

1m56.57017676s ago: executing program 1 (id=5371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) (async)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x8, 0x4) (async)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) (async)
setsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010100, @remote}, 0xc)

1m55.883180937s ago: executing program 1 (id=5373):
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_dev$sg(0x0, 0x0, 0x8400)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8)
setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x1c2, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d10300009078000013120f634b3dc7c4b13de28b7aec217b30b9080a000000030000000703030b008326051bb734c8d20e5ad26fd08da45fc93a808dd34866ad04cbc91e8d"], 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x9, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00')
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000ffffffef00010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1m39.681599632s ago: executing program 34 (id=5373):
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_open_dev$sg(0x0, 0x0, 0x8400)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8)
setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x1c2, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d10300009078000013120f634b3dc7c4b13de28b7aec217b30b9080a000000030000000703030b008326051bb734c8d20e5ad26fd08da45fc93a808dd34866ad04cbc91e8d"], 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x9, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00')
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000ffffffef00010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

10.918674895s ago: executing program 0 (id=5764):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000000000000700000044140823e0000002e0000002e00000010000100000000000dc00000000000000840000000800000094040000863900000001000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x40)

9.938349924s ago: executing program 0 (id=5769):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1700000001000000070000000600000018480000", @ANYRES32, @ANYBLOB="0200000000000000000000000000000000000000b7e9c2546303aa2b0c17ce09b15e227b274489b0bd1e629923bcfa2f4860aed2eb0cb332f191a1ad2350501472b505c7281d958752b164756d89", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000100"/28], 0x50)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x6000042, 0x1, 0x3}, 0x10)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newqdisc={0x104, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xd4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x200}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x1, 0xa, 0x6, 0x8, 0x1, 0xf, 0x5, 0xc, 0x2, 0x4, 0xe, 0x2, 0x8, 0xb, 0xc, 0x1], 0x1, [0x40, 0x0, 0x7ff, 0x7f, 0xe443, 0x10, 0xfffd, 0x0, 0x1, 0x4, 0x7ff, 0x8, 0x4, 0xe879, 0x1, 0x3], [0x2, 0xb, 0x5, 0x800, 0x7, 0xd, 0x7fff, 0x3, 0x0, 0xfff, 0x401, 0x2c6, 0xffff, 0x4, 0x9, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x5}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x6, 0x6, 0x5, 0x6, 0x1, 0x8, 0xe, 0x0, 0xc, 0x4, 0xb, 0x10, 0x10, 0x4, 0x0, 0xf], 0x0, [0x1, 0xb2e, 0x5, 0x1000, 0x5, 0x4, 0x401, 0x8001, 0x9, 0x5, 0x7, 0x2, 0x9, 0x2, 0x1, 0x3], [0x4, 0x0, 0x756, 0xe, 0xc26, 0xa5, 0x1, 0x1, 0x100, 0x1ff, 0x1000, 0xe52, 0x2, 0xb, 0xff00]}}]}}]}, 0x104}}, 0x0)

9.368836591s ago: executing program 0 (id=5776):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="5000000010000305000000000000000000002100", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r2], 0x50}}, 0x800)

8.651786363s ago: executing program 0 (id=5781):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x18})
mmap(&(0x7f0000684000/0x4000)=nil, 0x4000, 0x1000007, 0x11, r1, 0xffffd000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair(0x23, 0x5, 0x0, &(0x7f0000000080))
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x75, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2, 0x1, 0x0, 0x5}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xe000, 0x0, 0x2, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, @timestamp_reply={0x11}}}}}, 0x0)
gettid()
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/69, 0x0, 0xd000})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000a40))

7.611213437s ago: executing program 0 (id=5785):
unshare(0x6a040000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)

6.173949407s ago: executing program 7 (id=5790):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x101)
write$FUSE_CREATE_OPEN(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000974281408205050083e50102030109021b0002000000000904000000eca19d000904ba"], 0x0)

5.688862962s ago: executing program 0 (id=5797):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4000000000101040000000000000000020000002400018014000180080001007f00000108000200e00000010c00028005000100ff880000240002800c000280050001000000000014000180080001000000000008000200e000000208000740000000001c0018800800014000000452080001400000b490080001400000993210000580090001"], 0xa4}}, 0x0)
socket$inet6(0xa, 0x6, 0xff)

4.670904025s ago: executing program 2 (id=5802):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x1d)

4.45027435s ago: executing program 2 (id=5803):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x65}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000080)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800)
ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000080)=@buf)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

4.374011021s ago: executing program 7 (id=5804):
r0 = socket$kcm(0xf, 0x3, 0x2)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x2000000, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a4402789", 0x18}], 0x1}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x100)
write$FUSE_WRITE(r2, &(0x7f0000000200)={0x18}, 0xe00)
r3 = memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\xa6Ey\xdb\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r4 = dup(r3)
r5 = fanotify_init(0x0, 0x0)
fanotify_mark(r5, 0x1, 0x40000033, r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x23, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xcf}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7d2e1528}, @ldst={0x3, 0x2, 0x0, 0x9, 0x3, 0xffffffffffffffff, 0x8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94)

4.30130402s ago: executing program 2 (id=5805):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a1", 0x2c, 0x4000000, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80040c0)
syz_emit_ethernet(0x7e, &(0x7f0000000980)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000286dd6455d759004800fffc010000000000000000000000000000200100000000000000000000000000025c03000000000000c910ff0100000000000000000000000000010708000000030008000000000000010000000000000021020401ab105200fe8000"/122], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
socket$inet(0x2, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x20000000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r5, 0x6)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept(r4, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001ffa7004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)

4.240149503s ago: executing program 7 (id=5806):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setuid(0xee00)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48)

3.866110241s ago: executing program 2 (id=5809):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000001800791238000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

3.509920372s ago: executing program 2 (id=5810):
syz_open_dev$ndb(0x0, 0x0, 0x100000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0xb00}, 0x0)

3.061846334s ago: executing program 7 (id=5813):
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0006000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aa"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=""/198, 0x0, &(0x7f0000000340)=""/111, 0xd000})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)

2.71013279s ago: executing program 2 (id=5816):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r2, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)

2.676687769s ago: executing program 6 (id=5817):
socketpair(0x1, 0x100000005, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
dup(r1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8)

1.13545218s ago: executing program 6 (id=5819):
socket(0x1a, 0x800, 0x403d)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
write$snapshot(0xffffffffffffffff, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=<r1=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000500)=0xc) (async)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)={0x74, 0x13, 0x7, 0x401, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x5}, [@typed={0x8, 0xfd, 0x0, 0x0, @pid=r1}, @nested={0x8, 0xf9, 0x0, 0x1, [@nested={0x4, 0x3c}]}, @nested={0x46, 0xc8, 0x0, 0x1, [@generic="790881bcfa13f257b35322a5c10e711b58383eebcda0a5a0aa9038eec246329026e8067860efe08f54c1d1c135cbe861479ccce6b2967f924914f03e9db1dd62db90"]}, @nested={0x8, 0xbc, 0x0, 0x1, [@nested={0x4, 0xe8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe(&(0x7f0000000080)) (async)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x2c, r5, 0x483, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x4)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) (async)
pselect6(0x0, 0x0, &(0x7f0000000180)={0x2, 0xff, 0x7, 0xc, 0x8, 0x8001, 0x8, 0xf}, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0x9, 0x7c3, 0x8, 0x1, 0x8}, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x20000000, 0x71, 0x200000009})
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) (async)
r7 = syz_open_dev$dri(0x0, 0x1, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x4a, 0x0) (async)
ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, 0x0)

856.773803ms ago: executing program 6 (id=5821):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0xfffffffffffffffd, 0x1, 0x1]})
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="94e64dcf093fb35628a2492b88e39774b66104792bedb5a0497e60af608b4f3a2fc8636f41b80f9866a0725e85a14dd53128d8f2ed7ac2b5f0b5cd0939f89ee99451ba8fd8c51c8903ef7e69ecb47169ff3975388da9a17a13c1e8e14878371fa0bdeb3debf9ddcfe057c0", 0x6b}, {0x0}], 0x2)

716.358896ms ago: executing program 3 (id=5822):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe880000000000000000000000000101ac1414bb00200000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01010000000000000000000000000000ff0f000000000000000080000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000020000000000000004010500ac1e0001000000000000000000000000000000003300"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

705.691401ms ago: executing program 6 (id=5823):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000030000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48)

562.173748ms ago: executing program 3 (id=5824):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x8}, {0xfff1, 0xffff}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000010a63a69e2ff01000000000000000000000000000000000000000000010000007a01e54986f60000000000000036cb07670484c3717210ab00000000000020ffffffff000000000000000000000008000500000000000000000000000000000000000000000000000000000000000000000000b56b6e0000017b381ae434526d129f8ff9d8d15af2ce4207a813724209b5047a8cb847c542a9027e24b18229"], 0xb8}}, 0x0)

561.367221ms ago: executing program 6 (id=5825):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}}, 0x0)

516.474448ms ago: executing program 6 (id=5826):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bridge0\x00', <r1=>0x0})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, r0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x80, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x28, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0xdc}, 0x20}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2}, 0x18)
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000400)="6303cf721169a8b9af9cf57a92bf481cfaa48fcb6430f4acd0865f6138101645c10701f1fa3ba572ea1683a80d8461f926f8a1c4c6288df9504fddb2d5b27fc6242c81db1d1a84dda5837a3f50115795b9a82a2725fb91200e7132eedb11fc8e6da277164f722e488096b40c458f6cfa085bf834f490cb6c9108cd0936b00d2bfd62f1bea71c05481a64f869db84c15be5113b", &(0x7f00000005c0)="bba34e384349ae35510f67e3d174d73bfebe09c8403acb1a31fef34309a4e183287c8f60464a62fa08ff8ed8ecf51f0000cb58e2ee297dbb6a713ee28874e18f5c40a8e46bc82782293a90156f62e4a8f8d1e904df96a1530b9384f08e6dd3b0b07e222c4a4491cff23723ee34d87a7dfaa04b36a5aeb804e84cea054ecef461763bc12adf8b8cc20049c89cee57c6686afcfc2913f4250f35cfc2952ab6d2a145a10bbbc7af0876010039f9c287ff2669385ceb6cade769c797848dacd9c5d81e734f206b888196710eb0c8d1b1742584753d63f793"}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$vhost_msg_v2(r4, 0x0, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
r8 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_ts_info={0x15}})

451.448282ms ago: executing program 3 (id=5827):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)

206.275582ms ago: executing program 3 (id=5828):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
gettid()
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

201.004385ms ago: executing program 7 (id=5829):
socket$inet6(0xa, 0x1, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x20, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000160033060000000000000080e0000002000000000000000000000000ff02000000000000000000000000000100000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000080004d2320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000003000000000000000000000000000000050000000000000004000000000000000000000002000000020000000a000418000000000000000048000200656362286369706865725f6e756c6c2900"/200], 0x138}}, 0x0)

136.516612ms ago: executing program 7 (id=5830):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10)
syz_open_dev$ptys(0xc, 0x3, 0x0)
timer_delete(0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x122)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@fallback, 0xffffffffffffffff, 0x0, 0x20}, 0x20)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x4, 0x0, 0x0, 0xef5f, 0x0, 0x2, 0x6], 0x0, 0x8340})
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r10 = fanotify_init(0xf00, 0x0)
fanotify_mark(r10, 0x105, 0x5000003a, r9, 0x0)
creat(&(0x7f0000000200)='./file5\x00', 0x10)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00')

90.263222ms ago: executing program 3 (id=5831):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

0s ago: executing program 3 (id=5832):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0xfffffffffffffffd, 0x1, 0x1]})
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="94e64dcf093fb35628a2492b88e39774b66104792bedb5a0497e60af608b4f3a2fc8636f41b80f9866a0725e85a14dd53128d8f2ed7ac2b5f0b5cd0939f89ee99451ba8fd8c51c8903ef7e69ecb47169ff3975388da9a17a13c1e8e14878371fa0bdeb3debf9ddcfe057c0", 0x6b}, {0x0}], 0x2)

kernel console output (not intermixed with test programs):

x7ffc0000
[ 1558.178743][   T48] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1558.270344][   T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1558.341137][   T30] audit: type=1326 audit(1751447676.380:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21420 comm="syz.6.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1558.390482][   T48] usb 4-1: Product: syz
[ 1558.442995][   T48] usb 4-1: Manufacturer: syz
[ 1558.499128][   T48] usb 4-1: SerialNumber: syz
[ 1558.622882][   T30] audit: type=1326 audit(1751447676.390:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21420 comm="syz.6.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1558.814618][   T30] audit: type=1326 audit(1751447676.390:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21420 comm="syz.6.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1558.907147][   T30] audit: type=1326 audit(1751447676.390:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21420 comm="syz.6.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1559.013297][   T30] audit: type=1326 audit(1751447676.390:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21420 comm="syz.6.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1559.470948][   T30] audit: type=1326 audit(1751447676.408:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21420 comm="syz.6.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1559.542982][   T48] usb 4-1: bad CDC descriptors
[ 1559.595065][   T30] audit: type=1326 audit(1751447676.408:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21420 comm="syz.6.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1559.596493][   T48] usb 4-1: USB disconnect, device number 106
[ 1559.899435][   T30] audit: type=1326 audit(1751447676.455:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21420 comm="syz.6.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1565.219474][   T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1565.320192][T21497] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4671'.
[ 1565.870167][T21500] Invalid logical block size (3)
[ 1565.881092][   T10] usb 4-1: Using ep0 maxpacket: 16
[ 1565.918819][   T10] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[ 1565.937126][   T10] usb 4-1: config 0 has no interface number 0
[ 1565.945244][   T10] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1565.975530][   T10] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1566.008178][   T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1566.019453][   T10] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1566.041601][   T10] usb 4-1: Product: syz
[ 1566.045940][   T10] usb 4-1: SerialNumber: syz
[ 1566.069313][   T10] usb 4-1: config 0 descriptor??
[ 1566.079350][   T10] cm109 4-1:0.8: invalid payload size 0, expected 4
[ 1566.092974][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input61
[ 1566.304349][    C0] cm109_urb_ctl_callback: 498 callbacks suppressed
[ 1566.304379][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1566.318460][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1566.325857][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1566.333098][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1566.340277][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1566.347784][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1566.357722][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1566.367098][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1566.374645][   T10] usb 4-1: USB disconnect, device number 107
[ 1566.380775][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1566.380796][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1566.398169][T21510] binder: 21507:21510 ioctl c0306201 200000000540 returned -14
[ 1566.416740][   T10] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1567.647605][T21527] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1567.662299][T21527] batman_adv: batadv0: Adding interface: gretap1
[ 1567.669632][T21527] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1567.746700][T21527] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[ 1570.152312][T21550] No such timeout policy "syz1"
[ 1570.627945][T21554] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4691'.
[ 1571.383242][T21561] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4694'.
[ 1571.411866][T21561] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4694'.
[ 1571.441169][T21561] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4694'.
[ 1571.480059][T21561] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4694'.
[ 1572.981394][T21569] FAULT_INJECTION: forcing a failure.
[ 1572.981394][T21569] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1572.995283][T21569] CPU: 1 UID: 0 PID: 21569 Comm: syz.2.4696 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[ 1572.995310][T21569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1572.995322][T21569] Call Trace:
[ 1572.995330][T21569]  <TASK>
[ 1572.995338][T21569]  dump_stack_lvl+0x189/0x250
[ 1572.995370][T21569]  ? __pfx____ratelimit+0x10/0x10
[ 1572.995396][T21569]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1572.995423][T21569]  ? __pfx__printk+0x10/0x10
[ 1572.995441][T21569]  ? __might_fault+0xb0/0x130
[ 1572.995474][T21569]  should_fail_ex+0x414/0x560
[ 1572.995500][T21569]  _copy_from_user+0x2d/0xb0
[ 1572.995528][T21569]  drm_ioctl+0x58a/0xb10
[ 1572.995549][T21569]  ? smk_tskacc+0x2fc/0x370
[ 1572.995580][T21569]  ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10
[ 1572.995609][T21569]  ? __pfx_drm_ioctl+0x10/0x10
[ 1572.995644][T21569]  ? __fget_files+0x2a/0x420
[ 1572.995671][T21569]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1572.995697][T21569]  ? __pfx_drm_ioctl+0x10/0x10
[ 1572.995718][T21569]  __se_sys_ioctl+0xfc/0x170
[ 1572.995740][T21569]  do_syscall_64+0xfa/0x3b0
[ 1572.995765][T21569]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1572.995790][T21569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1572.995808][T21569]  ? clear_bhb_loop+0x60/0xb0
[ 1572.995830][T21569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1572.995848][T21569] RIP: 0033:0x7fcebff8e929
[ 1572.995864][T21569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1572.995881][T21569] RSP: 002b:00007fcec0e02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1572.995900][T21569] RAX: ffffffffffffffda RBX: 00007fcec01b6080 RCX: 00007fcebff8e929
[ 1572.995914][T21569] RDX: 0000200000000040 RSI: 00000000c01864c6 RDI: 000000000000000b
[ 1572.995927][T21569] RBP: 00007fcec0e02090 R08: 0000000000000000 R09: 0000000000000000
[ 1572.995939][T21569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1572.995950][T21569] R13: 0000000000000000 R14: 00007fcec01b6080 R15: 00007fffca69f088
[ 1572.995979][T21569]  </TASK>
[ 1573.370313][T21576] ubi: mtd0 is already attached to ubi31
[ 1575.582604][T21597] Invalid logical block size (3)
[ 1575.693416][T21599] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4705'.
[ 1575.712401][T17884] kernel read not supported for file /dsp (pid: 17884 comm: kworker/0:2)
[ 1575.917641][T21608] ubi: mtd0 is already attached to ubi31
[ 1576.820130][T21623] bridge2: entered promiscuous mode
[ 1576.916119][T21623] bridge2: entered allmulticast mode
[ 1577.342323][T21623] team0: Port device bridge2 added
[ 1578.560736][   T48] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1578.862701][   T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1578.890544][   T48] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1579.066279][   T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1579.683415][   T48] usb 3-1: config 0 descriptor??
[ 1580.271068][   T48] usb 3-1: string descriptor 0 read error: -71
[ 1580.290421][   T48] ath6kl: Failed to submit usb control message: -71
[ 1580.306197][   T48] ath6kl: unable to send the bmi data to the device: -71
[ 1580.353346][   T48] ath6kl: Unable to send get target info: -71
[ 1581.229891][   T48] ath6kl: Failed to init ath6kl core: -71
[ 1581.594919][   T48] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1581.810835][   T48] usb 3-1: USB disconnect, device number 95
[ 1581.885545][T21674] loop6: detected capacity change from 0 to 63
[ 1581.892288][T21674] buffer_io_error: 6 callbacks suppressed
[ 1581.892301][T21674] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1581.906014][T21674] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1581.914025][T21674] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1581.922015][T21674] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1581.930013][T21674] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1581.937938][T21674] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1581.945902][T21674] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1581.953833][T21674] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1581.961770][T21674] ldm_validate_partition_table(): Disk read failed.
[ 1581.969051][T21674] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1581.976994][T21674] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1581.985000][T21674] Dev loop6: unable to read RDB block 0
[ 1581.990881][T21674]  loop6: unable to read partition table
[ 1581.996841][T21674] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[ 1582.094447][T21671] loop4: detected capacity change from 0 to 7
[ 1582.614271][T21671] Dev loop4: unable to read RDB block 7
[ 1583.619465][T21671]  loop4: unable to read partition table
[ 1583.716479][T21671] loop4: partition table beyond EOD, truncated
[ 1584.562138][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1584.619436][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1585.798778][T21671] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[ 1586.123305][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 1586.123323][   T30] audit: type=1326 audit(1751447702.824:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1586.203991][   T30] audit: type=1326 audit(1751447702.824:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1586.246953][   T30] audit: type=1326 audit(1751447702.824:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1586.313805][   T30] audit: type=1326 audit(1751447702.833:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1586.426104][   T30] audit: type=1326 audit(1751447702.833:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1586.465504][   T30] audit: type=1326 audit(1751447702.833:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1586.487942][   T30] audit: type=1326 audit(1751447702.833:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1586.511316][   T30] audit: type=1326 audit(1751447702.833:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1586.533136][   T30] audit: type=1326 audit(1751447702.862:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1587.219305][   T30] audit: type=1326 audit(1751447702.862:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.0.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1587.272364][T21696] @: renamed from vlan0 (while UP)
[ 1587.882151][T21702] veth1_macvtap: left promiscuous mode
[ 1587.899313][T21698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4739'.
[ 1588.015891][T21709] No such timeout policy "syz0"
[ 1590.697441][T21721] overlayfs: statfs failed on './file0'
[ 1591.207729][T21745] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4754'.
[ 1592.928911][ T5878] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 1593.152907][ T5878] usb 3-1: Using ep0 maxpacket: 32
[ 1593.217568][ T5878] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1593.355999][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1593.394042][ T5878] usb 3-1: config 0 descriptor??
[ 1593.707392][ T5878] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1593.745632][ T5878] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 1593.797913][ T5878] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 1593.859170][T21770] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4760'.
[ 1595.275729][T21785] netlink: 'syz.6.4764': attribute type 8 has an invalid length.
[ 1598.214033][T21826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4780'.
[ 1598.728400][T14415] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1599.143153][T14415] usb 4-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config
[ 1599.159917][T14415] usb 4-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1599.176290][T14415] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1599.193586][T14415] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.40
[ 1599.203859][T14415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1599.208923][T21841] input: syz0 as /devices/virtual/input/input62
[ 1599.212181][T14415] usb 4-1: Product: ᐉ
[ 1599.222889][T14415] usb 4-1: Manufacturer: 
[ 1599.227697][T14415] usb 4-1: SerialNumber: 菬㰢곣듒绰猂⺮莶鐼씣ىݺ뺲杲ᕽ䲛쀛骰쒔ኞϋ꿽㠟뻶땍᷍㿬䓂뗽蜁즲﯐岵ᚥ㧾౜䲙瘟骐굗㩮䪏䣃춖즌㩚鿿渴奿휭鞙ｆ籞溛鞴礼돠㡭媥陜嗱鴩氓굃땘ﺫ⛽彪㑡㓦轾ꄱ叕Შ狝괋꣈鍄௛ᢷ鮜쵇趑椹髢힏생⋅ﴭ㣉⍡芦䜻슱和眭ⷜ⪴
[ 1599.260451][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1599.915799][T14415] hub 4-1:1.0: bad descriptor, ignoring hub
[ 1599.923388][T14415] hub 4-1:1.0: probe with driver hub failed with error -5
[ 1599.957108][T14415] usb 4-1: USB disconnect, device number 108
[ 1600.724728][T21862] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[ 1602.832480][T21884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4800'.
[ 1603.075923][T21891] Cannot find set identified by id 768 to match
[ 1603.684163][T21895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4804'.
[ 1603.786539][T21895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4804'.
[ 1603.801489][T21895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4804'.
[ 1603.836683][T21895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4804'.
[ 1605.121021][T21907] FAULT_INJECTION: forcing a failure.
[ 1605.121021][T21907] name failslab, interval 1, probability 0, space 0, times 0
[ 1605.133819][T21907] CPU: 1 UID: 0 PID: 21907 Comm: syz.2.4807 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[ 1605.133843][T21907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1605.133855][T21907] Call Trace:
[ 1605.133863][T21907]  <TASK>
[ 1605.133871][T21907]  dump_stack_lvl+0x189/0x250
[ 1605.133904][T21907]  ? __pfx____ratelimit+0x10/0x10
[ 1605.133930][T21907]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1605.133956][T21907]  ? __pfx__printk+0x10/0x10
[ 1605.133980][T21907]  ? __pfx___might_resched+0x10/0x10
[ 1605.134005][T21907]  ? fs_reclaim_acquire+0x7d/0x100
[ 1605.134036][T21907]  should_fail_ex+0x414/0x560
[ 1605.134061][T21907]  should_failslab+0xa8/0x100
[ 1605.134087][T21907]  __kmalloc_noprof+0xcb/0x4f0
[ 1605.134108][T21907]  ? drm_mode_create_lease_ioctl+0x4d6/0x1970
[ 1605.134131][T21907]  ? _copy_from_user+0x94/0xb0
[ 1605.134162][T21907]  drm_mode_create_lease_ioctl+0x4d6/0x1970
[ 1605.134199][T21907]  ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10
[ 1605.134242][T21907]  ? do_raw_spin_unlock+0x122/0x240
[ 1605.134265][T21907]  ? _raw_spin_unlock+0x28/0x50
[ 1605.134287][T21907]  ? drm_is_current_master+0x19f/0x200
[ 1605.134309][T21907]  drm_ioctl_kernel+0x2cc/0x390
[ 1605.134332][T21907]  ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10
[ 1605.134356][T21907]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 1605.134387][T21907]  drm_ioctl+0x67f/0xb10
[ 1605.134407][T21907]  ? smk_tskacc+0x2fc/0x370
[ 1605.134438][T21907]  ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10
[ 1605.134467][T21907]  ? __pfx_drm_ioctl+0x10/0x10
[ 1605.134500][T21907]  ? __fget_files+0x2a/0x420
[ 1605.134529][T21907]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1605.134553][T21907]  ? __pfx_drm_ioctl+0x10/0x10
[ 1605.134575][T21907]  __se_sys_ioctl+0xfc/0x170
[ 1605.134597][T21907]  do_syscall_64+0xfa/0x3b0
[ 1605.134622][T21907]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1605.134647][T21907]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1605.134665][T21907]  ? clear_bhb_loop+0x60/0xb0
[ 1605.134687][T21907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1605.134705][T21907] RIP: 0033:0x7fcebff8e929
[ 1605.134722][T21907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1605.134738][T21907] RSP: 002b:00007fcec0e02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1605.134758][T21907] RAX: ffffffffffffffda RBX: 00007fcec01b6080 RCX: 00007fcebff8e929
[ 1605.134771][T21907] RDX: 0000200000000040 RSI: 00000000c01864c6 RDI: 000000000000000c
[ 1605.134791][T21907] RBP: 00007fcec0e02090 R08: 0000000000000000 R09: 0000000000000000
[ 1605.134803][T21907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1605.134814][T21907] R13: 0000000000000000 R14: 00007fcec01b6080 R15: 00007fffca69f088
[ 1605.134842][T21907]  </TASK>
[ 1606.917244][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4816'.
[ 1607.143503][T21944] overlayfs: failed to clone upperpath
[ 1607.320362][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4821'.
[ 1607.338387][T21948] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4821'.
[ 1607.852145][T14415] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1608.096947][T14415] usb 2-1: Using ep0 maxpacket: 16
[ 1608.105113][T14415] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[ 1608.196526][T14415] usb 2-1: config 0 has no interface number 0
[ 1608.204346][T14415] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1608.215596][T14415] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1608.227620][T14415] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1608.236699][T14415] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1608.250584][T14415] usb 2-1: Product: syz
[ 1608.254796][T14415] usb 2-1: SerialNumber: syz
[ 1608.272164][T14415] usb 2-1: config 0 descriptor??
[ 1608.287833][T14415] cm109 2-1:0.8: invalid payload size 0, expected 4
[ 1608.304728][T14415] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input63
[ 1608.512957][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1608.520253][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1608.527927][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1608.535136][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1608.542318][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1608.550811][T14415] usb 2-1: USB disconnect, device number 88
[ 1608.556845][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1608.563805][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1608.596743][T14415] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1611.095901][T21979] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4830'.
[ 1611.236427][   T10] kernel write not supported for file /vcsu (pid: 10 comm: kworker/0:1)
[ 1614.577004][T17884] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1614.743169][T17884] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1614.924165][T17884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1615.657554][T17884] usb 4-1: config 0 descriptor??
[ 1615.679328][T17884] cp210x 4-1:0.0: cp210x converter detected
[ 1615.906027][T17884] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[ 1615.927448][T17884] cp210x 4-1:0.0: querying part number failed
[ 1615.956115][T17884] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1615.978228][T17884] usb 4-1: USB disconnect, device number 109
[ 1615.999436][T17884] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1616.007606][T17884] cp210x 4-1:0.0: device disconnected
[ 1616.233832][   T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1616.579906][   T24] usb 2-1: too many configurations: 151, using maximum allowed: 8
[ 1616.837973][   T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[ 1616.975715][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[ 1617.011847][   T24] usb 2-1: Product: syz
[ 1617.023165][   T24] usb 2-1: Manufacturer: syz
[ 1617.038710][   T24] usb 2-1: SerialNumber: syz
[ 1617.057927][   T24] usb 2-1: config 0 descriptor??
[ 1618.717038][T22067] No source specified
[ 1619.802189][T22078] hsr0: entered promiscuous mode
[ 1619.819536][T22081] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4861'.
[ 1619.846657][T22078] vlan2: entered promiscuous mode
[ 1619.908821][T22084] overlayfs: failed to resolve './file0': -2
[ 1619.915573][T22081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4861'.
[ 1620.549046][   T24] usb 2-1: bad CDC descriptors
[ 1620.575694][   T24] usb 2-1: USB disconnect, device number 89
[ 1620.685891][T22085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4861'.
[ 1620.706613][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4861'.
[ 1621.328360][T22092] bridge0: entered promiscuous mode
[ 1621.334552][T22092] macvlan2: entered promiscuous mode
[ 1623.030312][T22119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4874'.
[ 1623.125975][T22123] netlink: 216 bytes leftover after parsing attributes in process `syz.6.4876'.
[ 1623.275128][T22129] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4877'.
[ 1623.395669][T22131] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4877'.
[ 1625.197613][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1625.198264][   T30] audit: type=1326 audit(1751447739.370:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1625.240409][T22156] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1625.260423][T22156] syzkaller1: Refused to change device type
[ 1625.299489][   T30] audit: type=1326 audit(1751447739.370:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1625.374361][   T30] audit: type=1326 audit(1751447739.370:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1625.451535][   T30] audit: type=1326 audit(1751447739.370:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1625.531906][   T30] audit: type=1326 audit(1751447739.370:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1625.534711][T17884] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1625.590872][   T30] audit: type=1326 audit(1751447739.370:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1625.719098][   T30] audit: type=1326 audit(1751447739.370:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1625.740855][   T30] audit: type=1326 audit(1751447739.370:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1625.762684][   T30] audit: type=1326 audit(1751447739.398:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1625.809901][   T30] audit: type=1326 audit(1751447739.398:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22157 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1625.885607][T22169] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[ 1625.892363][T22169] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1625.948696][T22169] vhci_hcd vhci_hcd.0: Device attached
[ 1625.975893][T17884] usb 2-1: Using ep0 maxpacket: 8
[ 1625.981734][T22167] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13)
[ 1625.988386][T22167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1626.036850][T22168] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12)
[ 1626.043511][T22168] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1626.088882][T22167] vhci_hcd vhci_hcd.0: Device attached
[ 1626.112156][T22168] vhci_hcd vhci_hcd.0: Device attached
[ 1626.133692][   T24] vhci_hcd: vhci_device speed not set
[ 1626.188860][T22179] vhci_hcd: connection closed
[ 1626.190477][   T12] vhci_hcd: stop threads
[ 1626.199974][   T24] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[ 1626.212497][T22170] vhci_hcd: connection closed
[ 1626.214429][T22174] vhci_hcd: connection closed
[ 1626.221655][T22171] vhci_hcd: sendmsg failed!, ret=-32 for 48
[ 1626.273660][   T12] vhci_hcd: release socket
[ 1626.307257][T17884] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1626.321082][T17884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1626.327181][   T12] vhci_hcd: disconnect device
[ 1626.342655][T17884] usb 2-1: Product: syz
[ 1626.354289][   T12] vhci_hcd: stop threads
[ 1626.356418][T17884] usb 2-1: Manufacturer: syz
[ 1626.364367][   T12] vhci_hcd: release socket
[ 1626.367920][T17884] usb 2-1: SerialNumber: syz
[ 1626.377968][   T12] vhci_hcd: disconnect device
[ 1626.393510][   T12] vhci_hcd: stop threads
[ 1626.399367][T17884] usb 2-1: config 0 descriptor??
[ 1626.403456][   T12] vhci_hcd: release socket
[ 1626.433312][T22189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4893'.
[ 1626.442650][   T12] vhci_hcd: disconnect device
[ 1626.643795][T17884] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1627.117019][T17884] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1627.152094][T17884] usb 2-1: USB disconnect, device number 90
[ 1627.502176][ T5946] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1627.865496][ T5946] usb 4-1: device descriptor read/64, error -71
[ 1628.271505][ T5946] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1628.365928][T22217] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4903'.
[ 1629.071218][ T5946] usb 4-1: device descriptor read/64, error -71
[ 1629.205054][ T5946] usb usb4-port1: attempt power cycle
[ 1629.332923][T22223] ip6gre1: entered promiscuous mode
[ 1630.078426][ T5946] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1630.112457][ T5946] usb 4-1: device descriptor read/8, error -71
[ 1630.227927][T22227] FAULT_INJECTION: forcing a failure.
[ 1630.227927][T22227] name failslab, interval 1, probability 0, space 0, times 0
[ 1630.241925][T22227] CPU: 1 UID: 0 PID: 22227 Comm: syz.1.4905 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[ 1630.241955][T22227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1630.241986][T22227] Call Trace:
[ 1630.241995][T22227]  <TASK>
[ 1630.242005][T22227]  dump_stack_lvl+0x189/0x250
[ 1630.242042][T22227]  ? __pfx____ratelimit+0x10/0x10
[ 1630.242073][T22227]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1630.242104][T22227]  ? __pfx__printk+0x10/0x10
[ 1630.242133][T22227]  ? __pfx___might_resched+0x10/0x10
[ 1630.242161][T22227]  ? fs_reclaim_acquire+0x7d/0x100
[ 1630.242208][T22227]  should_fail_ex+0x414/0x560
[ 1630.242240][T22227]  should_failslab+0xa8/0x100
[ 1630.242269][T22227]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1630.242294][T22227]  ? ptlock_alloc+0x20/0x70
[ 1630.242324][T22227]  ptlock_alloc+0x20/0x70
[ 1630.242349][T22227]  pte_alloc_one+0x7d/0x170
[ 1630.242382][T22227]  __handle_mm_fault+0x294d/0x5620
[ 1630.242429][T22227]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1630.242476][T22227]  ? find_vma+0xe7/0x160
[ 1630.242500][T22227]  ? __pfx_find_vma+0x10/0x10
[ 1630.242527][T22227]  handle_mm_fault+0x2d5/0x7f0
[ 1630.242564][T22227]  do_user_addr_fault+0x764/0x1390
[ 1630.242607][T22227]  exc_page_fault+0x76/0xf0
[ 1630.242639][T22227]  asm_exc_page_fault+0x26/0x30
[ 1630.242659][T22227] RIP: 0010:rep_movs_alternative+0x30/0x90
[ 1630.242683][T22227] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[ 1630.242702][T22227] RSP: 0018:ffffc90012f57d58 EFLAGS: 00050206
[ 1630.242721][T22227] RAX: 00007ffffffff001 RBX: 000000000000001c RCX: 000000000000001c
[ 1630.242736][T22227] RDX: 0000000000000001 RSI: 0000200000d84000 RDI: ffffc90012f57dc0
[ 1630.242751][T22227] RBP: ffffc90012f57eb8 R08: ffffc90012f57ddb R09: 1ffff920025eafbb
[ 1630.242768][T22227] R10: dffffc0000000000 R11: fffff520025eafbc R12: 0000200000d84000
[ 1630.242784][T22227] R13: ffff88807f5db600 R14: ffffc90012f57dc0 R15: 0000200000d84000
[ 1630.242822][T22227]  _copy_from_user+0x7a/0xb0
[ 1630.242855][T22227]  __sys_bind+0x199/0x3e0
[ 1630.242891][T22227]  ? __pfx___sys_bind+0x10/0x10
[ 1630.242936][T22227]  ? __pfx_ksys_write+0x10/0x10
[ 1630.242966][T22227]  ? rcu_is_watching+0x15/0xb0
[ 1630.243004][T22227]  __x64_sys_bind+0x7a/0x90
[ 1630.243036][T22227]  do_syscall_64+0xfa/0x3b0
[ 1630.243065][T22227]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1630.243093][T22227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1630.243114][T22227]  ? clear_bhb_loop+0x60/0xb0
[ 1630.243140][T22227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1630.243160][T22227] RIP: 0033:0x7f78fe18e929
[ 1630.243179][T22227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1630.243203][T22227] RSP: 002b:00007f78ff0e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1630.243224][T22227] RAX: ffffffffffffffda RBX: 00007f78fe3b5fa0 RCX: 00007f78fe18e929
[ 1630.243240][T22227] RDX: 000000000000001c RSI: 0000200000d84000 RDI: 0000000000000004
[ 1630.243254][T22227] RBP: 00007f78ff0e3090 R08: 0000000000000000 R09: 0000000000000000
[ 1630.243268][T22227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1630.243281][T22227] R13: 0000000000000000 R14: 00007f78fe3b5fa0 R15: 00007ffddeefcd98
[ 1630.243316][T22227]  </TASK>
[ 1630.572168][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1630.698427][ T5946] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1630.930973][T22239] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4910'.
[ 1631.027835][ T5946] usb 4-1: device not accepting address 113, error -71
[ 1631.051545][ T5946] usb usb4-port1: unable to enumerate USB device
[ 1631.828890][   T24] vhci_hcd: vhci_device speed not set
[ 1635.848533][T22254] loop2: detected capacity change from 0 to 524287999
[ 1636.147914][T22266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4917'.
[ 1636.185978][T22266] netlink: 41 bytes leftover after parsing attributes in process `syz.1.4917'.
[ 1636.212801][T22269] nftables ruleset with unbound chain
[ 1636.490635][T22277] Cannot find set identified by id 768 to match
[ 1638.222022][T22287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4926'.
[ 1640.737228][T22307] macsec2: entered promiscuous mode
[ 1640.747577][T22307] team0: entered promiscuous mode
[ 1640.791804][T22307] team_slave_0: entered promiscuous mode
[ 1640.823873][T22307] team_slave_1: entered promiscuous mode
[ 1640.860949][T22307] team0: left promiscuous mode
[ 1640.897335][T22307] team_slave_0: left promiscuous mode
[ 1640.972342][T22307] team_slave_1: left promiscuous mode
[ 1642.340431][   T24] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1642.520091][   T24] usb 4-1: Using ep0 maxpacket: 8
[ 1642.529425][   T24] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9
[ 1642.529466][   T24] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1642.542231][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[ 1642.542265][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1642.542288][   T24] usb 4-1: Product: syz
[ 1642.542306][   T24] usb 4-1: Manufacturer: syz
[ 1642.542323][   T24] usb 4-1: SerialNumber: syz
[ 1643.743166][   T24] usbhid 4-1:1.0: can't add hid device: -71
[ 1643.749238][   T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[ 1643.760319][   T24] usb 4-1: USB disconnect, device number 114
[ 1645.798578][T22374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4953'.
[ 1647.496631][T22386] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4956'.
[ 1650.044647][T22424] team_slave_0: entered promiscuous mode
[ 1650.050817][T22424] team_slave_1: entered promiscuous mode
[ 1650.056680][T22424] bond_slave_0: entered promiscuous mode
[ 1650.062725][T22424] bond_slave_1: entered promiscuous mode
[ 1650.076464][T22424] macsec1: entered promiscuous mode
[ 1650.081976][T22424] team0: entered promiscuous mode
[ 1650.090386][T22424] bond0: entered promiscuous mode
[ 1650.111636][T22424] team0: left promiscuous mode
[ 1650.124876][T22424] bond0: left promiscuous mode
[ 1650.141439][T22424] team_slave_0: left promiscuous mode
[ 1650.146945][T22424] team_slave_1: left promiscuous mode
[ 1650.152548][T22424] bond_slave_0: left promiscuous mode
[ 1650.158003][T22424] bond_slave_1: left promiscuous mode
[ 1650.253616][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1650.260258][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1651.088301][T22440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4978'.
[ 1651.097385][T22440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4978'.
[ 1651.106374][T22440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4978'.
[ 1651.288020][T22444] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4980'.
[ 1651.297407][T22444] openvswitch: netlink: Flow key attr not present in new flow.
[ 1653.648106][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4985'.
[ 1653.737111][T22469] No such timeout policy "syz0"
[ 1655.874068][T22503] Cannot find add_set index 0 as target
[ 1656.127990][T22506] --map-set only usable from mangle table
[ 1656.517381][T22510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4999'.
[ 1656.526945][T22510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4999'.
[ 1657.941013][T14008] Bluetooth: hci5: command 0x0406 tx timeout
[ 1658.207803][T22539] loop5: detected capacity change from 0 to 1
[ 1658.372576][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5007'.
[ 1661.576974][ T5878] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1661.577046][ T5878] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 1661.581712][ T5878] usb 3-1: USB disconnect, device number 96
[ 1662.455341][T22596] No such timeout policy "syz0"
[ 1663.270863][   T30] kauditd_printk_skb: 5 callbacks suppressed
[ 1663.270883][   T30] audit: type=1326 audit(1751447774.981:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22602 comm="syz.6.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1663.366034][   T30] audit: type=1326 audit(1751447774.981:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22602 comm="syz.6.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1663.388088][   T30] audit: type=1326 audit(1751447774.981:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22602 comm="syz.6.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1663.422552][   T30] audit: type=1326 audit(1751447774.981:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22602 comm="syz.6.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1663.447581][   T30] audit: type=1326 audit(1751447774.990:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22602 comm="syz.6.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1663.490419][   T30] audit: type=1326 audit(1751447774.990:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22602 comm="syz.6.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1663.512418][   T30] audit: type=1326 audit(1751447774.990:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22602 comm="syz.6.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1663.568774][   T30] audit: type=1326 audit(1751447774.990:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22602 comm="syz.6.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1663.648147][   T30] audit: type=1326 audit(1751447774.990:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22602 comm="syz.6.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1663.677371][   T30] audit: type=1326 audit(1751447774.990:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22602 comm="syz.6.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dca78e929 code=0x7ffc0000
[ 1666.768520][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5049'.
[ 1667.115110][T14388] usb 3-1: new low-speed USB device number 97 using dummy_hcd
[ 1667.181997][T22666] xt_connbytes: Forcing CT accounting to be enabled
[ 1667.188788][T22666] Cannot find set identified by id 768 to match
[ 1667.840921][T22670] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5053'.
[ 1667.944356][T14388] usb 3-1: device descriptor read/64, error -71
[ 1668.147600][ T5878] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1668.233070][T14388] usb 3-1: new low-speed USB device number 98 using dummy_hcd
[ 1669.226038][ T5878] usb 4-1: Using ep0 maxpacket: 8
[ 1669.244727][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1669.264427][T14388] usb 3-1: device descriptor read/64, error -71
[ 1669.293286][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1669.328677][ T5878] usb 4-1: New USB device found, idVendor=0eef, idProduct=7302, bcdDevice= 0.00
[ 1669.348695][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1669.388072][T14388] usb usb3-port1: attempt power cycle
[ 1669.397494][ T5878] usb 4-1: config 0 descriptor??
[ 1670.168219][T14388] usb 3-1: new low-speed USB device number 99 using dummy_hcd
[ 1670.413859][T14388] usb 3-1: device not accepting address 99, error -71
[ 1670.537644][T22705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5068'.
[ 1670.662773][ T5878] hid-generic 0003:0EEF:7302.0039: unknown main item tag 0x0
[ 1671.301487][ T5878] hid-generic 0003:0EEF:7302.0039: hidraw0: USB HID v0.03 Device [HID 0eef:7302] on usb-dummy_hcd.3-1/input0
[ 1671.899903][T14388] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 1671.940173][T14388] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[ 1671.991951][T14388] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1672.033083][T14388] usb 3-1: config 0 has no interface number 0
[ 1672.051697][T14388] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1672.072918][T14388] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1672.105900][T14388] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1672.125532][T14388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1672.147661][T14388] usb 3-1: Product: syz
[ 1672.151876][T14388] usb 3-1: Manufacturer: syz
[ 1672.177766][T14388] usb 3-1: SerialNumber: syz
[ 1672.190795][T14388] usb 3-1: config 0 descriptor??
[ 1672.365702][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5074'.
[ 1672.375096][T22726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5074'.
[ 1672.414398][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5074'.
[ 1672.423543][T22725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1672.431102][T22725] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1672.439859][T22725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1672.449128][T22725] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1672.457233][T22725] batman_adv: batadv0: Removing interface: gretap1
[ 1672.607531][T17884] usb 4-1: USB disconnect, device number 115
[ 1672.857994][ T9610] usb 3-1: USB disconnect, device number 100
[ 1673.118703][T17884] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1673.279113][T17884] usb 4-1: Using ep0 maxpacket: 32
[ 1673.292616][T17884] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1673.354038][T17884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1673.815500][T17884] usb 4-1: config 0 descriptor??
[ 1674.052084][T17884] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1674.071150][T17884] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 1674.083404][T22754] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5085'.
[ 1674.092506][T17884] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 1674.915718][ T9610] usb 6-1: USB disconnect, device number 79
[ 1676.663689][T22801] team_slave_0: entered promiscuous mode
[ 1676.669530][T22801] team_slave_1: entered promiscuous mode
[ 1676.675375][T22801] macsec2: entered promiscuous mode
[ 1676.682898][T22801] team0: entered promiscuous mode
[ 1676.691086][T22801] team0: left promiscuous mode
[ 1676.696269][T22801] team_slave_0: left promiscuous mode
[ 1676.701716][T22801] team_slave_1: left promiscuous mode
[ 1677.183077][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5103'.
[ 1677.192667][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5103'.
[ 1677.201701][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5103'.
[ 1677.745704][T22817] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1679.264965][T22830] sp0: Synchronizing with TNC
[ 1679.314205][T22830] cgroup: noprefix used incorrectly
[ 1680.842819][T22845] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[ 1680.893410][T22850] netlink: 'syz.1.5115': attribute type 1 has an invalid length.
[ 1680.922995][T22849] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[ 1681.302777][T22852] bond3: (slave bridge3): making interface the new active one
[ 1681.328764][T22852] bond3: (slave bridge3): Enslaving as an active interface with an up link
[ 1682.548944][T22864] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5120'.
[ 1682.771304][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1682.771321][   T30] audit: type=1326 audit(1751447793.221:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1682.805840][   T30] audit: type=1326 audit(1751447793.221:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1682.827476][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1682.835754][   T30] audit: type=1326 audit(1751447793.259:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1682.870957][T22876] netdevsim netdevsim3: Direct firmware load for .
[ 1682.870957][T22876]  failed with error -2
[ 1682.873193][   T30] audit: type=1326 audit(1751447793.259:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1682.883304][T22876] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1682.883304][T22876] 
[ 1682.907664][   T30] audit: type=1326 audit(1751447793.259:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1682.936585][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1682.946503][   T30] audit: type=1326 audit(1751447793.259:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1682.968673][   T30] audit: type=1326 audit(1751447793.259:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1683.002460][   T30] audit: type=1326 audit(1751447793.259:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1683.057667][T22880] ubi: mtd0 is already attached to ubi31
[ 1683.471291][   T30] audit: type=1326 audit(1751447793.259:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1683.496152][   T30] audit: type=1326 audit(1751447793.315:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22871 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1685.140799][ T5832] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 1686.624915][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1686.636502][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1686.754541][ T5832] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1686.764419][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1686.780359][ T5832] usb 3-1: config 0 descriptor??
[ 1686.891588][ T5832] usbhid 3-1:0.0: can't add hid device: -71
[ 1686.910400][ T5832] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1686.926992][ T5832] usb 3-1: USB disconnect, device number 101
[ 1687.335028][T22931] ubi: mtd0 is already attached to ubi31
[ 1687.865460][T22936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5146'.
[ 1687.874902][T22936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5146'.
[ 1687.884279][T22936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5146'.
[ 1687.893560][T22936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5146'.
[ 1689.115830][T22946] --map-set only usable from mangle table
[ 1689.282862][ T5946] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1689.464609][ T5946] usb 2-1: Using ep0 maxpacket: 32
[ 1689.472764][ T5946] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1689.487416][ T5946] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[ 1689.506146][ T5946] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[ 1689.527333][ T5946] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[ 1689.538355][ T5946] usb 2-1: config 128 has no interface number 0
[ 1689.725876][ T5946] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[ 1689.738319][ T5946] usb 2-1: config 128 interface 127 has no altsetting 0
[ 1689.749038][ T5946] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[ 1689.759318][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1689.767408][ T5946] usb 2-1: Product: syz
[ 1689.771598][ T5946] usb 2-1: Manufacturer: syz
[ 1689.776266][ T5946] usb 2-1: SerialNumber: syz
[ 1689.784407][T22948] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1691.905536][ T5946] usb 2-1: USB disconnect, device number 91
[ 1692.201560][T14388] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 1692.764019][T14388] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1692.785170][T14388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.798548][T14388] usb 3-1: config 0 descriptor??
[ 1692.814698][T14388] cp210x 3-1:0.0: cp210x converter detected
[ 1693.460791][T14388] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1693.506741][T14388] usb 3-1: cp210x converter now attached to ttyUSB0
[ 1693.544425][T22997] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[ 1693.623250][T23001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5171'.
[ 1693.977632][T23010] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[ 1694.178398][T23013] Cannot find set identified by id 768 to match
[ 1694.886535][T23022] Cannot find set identified by id 0 to match
[ 1695.465524][T23024] overlay: Unknown parameter 'rootcontext'
[ 1696.134978][ T5832] usb 3-1: USB disconnect, device number 102
[ 1696.604188][ T5832] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1696.652183][ T5832] cp210x 3-1:0.0: device disconnected
[ 1697.966948][T23061] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5187'.
[ 1699.239383][T23087] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1699.791651][ T5832] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1700.116798][T23103] ubi: mtd0 is already attached to ubi31
[ 1700.142950][ T5832] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1700.457202][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1700.555410][ T5832] usb 2-1: config 0 descriptor??
[ 1700.568034][ T5832] cp210x 2-1:0.0: cp210x converter detected
[ 1700.802093][T23109] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1700.812772][T23109] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1700.985300][T23120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5207'.
[ 1700.996110][ T5832] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1701.057973][ T5832] usb 2-1: cp210x converter now attached to ttyUSB0
[ 1701.481798][ T5946] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 1701.694817][ T5946] usb 3-1: Using ep0 maxpacket: 32
[ 1701.757592][ T5946] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1701.983743][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1701.996502][ T5946] usb 3-1: config 0 descriptor??
[ 1702.252320][ T5946] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1702.323427][ T9610] usb 2-1: USB disconnect, device number 92
[ 1702.531207][ T9610] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1702.867279][ T9610] cp210x 2-1:0.0: device disconnected
[ 1703.091888][T23139] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5215'.
[ 1707.387312][T23191] IPVS: set_ctl: invalid protocol: 136 10.65.1.2:20004
[ 1713.167830][T23262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5248'.
[ 1713.221408][T23262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5248'.
[ 1713.271392][T23262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5248'.
[ 1713.313618][T23262] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5248'.
[ 1713.430675][T23270] 9pnet_fd: Insufficient options for proto=fd
[ 1714.002398][T23290] No such timeout policy "syz0"
[ 1716.949679][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1716.962191][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1717.321328][T14008] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1717.403565][T23305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1717.816035][   T30] kauditd_printk_skb: 6 callbacks suppressed
[ 1717.816054][   T30] audit: type=1326 audit(1751447826.007:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.1.5266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1717.984113][   T30] audit: type=1326 audit(1751447826.007:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.1.5266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1718.091132][T23324] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5270'.
[ 1718.103061][   T30] audit: type=1326 audit(1751447826.007:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.1.5266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1718.133771][T23326] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5271'.
[ 1718.143695][   T30] audit: type=1326 audit(1751447826.007:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.1.5266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1718.172296][   T30] audit: type=1326 audit(1751447826.007:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.1.5266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1718.195933][   T30] audit: type=1326 audit(1751447826.007:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.1.5266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1718.223569][   T30] audit: type=1326 audit(1751447826.007:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.1.5266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1718.245865][ T9610] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1718.274655][   T30] audit: type=1326 audit(1751447826.007:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.1.5266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1718.339692][   T30] audit: type=1326 audit(1751447826.007:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.1.5266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1718.385358][   T30] audit: type=1326 audit(1751447826.035:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23314 comm="syz.1.5266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f78fe18e929 code=0x7ffc0000
[ 1718.447813][ T9610] usb 2-1: Using ep0 maxpacket: 32
[ 1718.462941][ T9610] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5
[ 1719.161936][ T9610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1719.170491][ T9610] usb 2-1: Product: syz
[ 1719.175037][ T9610] usb 2-1: Manufacturer: syz
[ 1719.179656][ T9610] usb 2-1: SerialNumber: syz
[ 1719.187753][ T9610] usb 2-1: config 0 descriptor??
[ 1719.199917][ T9610] gspca_main: mars-2.14.0 probing 093a:050f
[ 1719.410604][ T9610] usb 2-1: USB disconnect, device number 93
[ 1720.845878][T23362] overlayfs: unescaped trailing colons in lowerdir mount option.
[ 1722.439165][T23388] set match dimension is over the limit!
[ 1723.009573][T23389] No such timeout policy "syz0"
[ 1723.755833][T23409] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[ 1723.883938][T14388] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1724.059407][T14388] usb 2-1: Using ep0 maxpacket: 32
[ 1724.066441][T14388] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1724.075650][T14388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1724.090788][T14388] usb 2-1: config 0 descriptor??
[ 1724.313510][T14388] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 1724.531925][T23405] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1724.860146][T23418] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1725.528424][T23428] SET target dimension over the limit!
[ 1726.131710][T23432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5308'.
[ 1726.141752][T23432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5308'.
[ 1726.159641][T23432] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1726.169203][T23432] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1726.177958][T23432] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1726.186720][T23432] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1729.824627][T23483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5327'.
[ 1729.855660][T23485] netlink: 'syz.6.5328': attribute type 1 has an invalid length.
[ 1738.583064][T23584] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5357'.
[ 1738.634256][T23586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5358'.
[ 1738.728711][T23595] overlayfs: missing 'workdir'
[ 1738.738035][T23595] overlayfs: failed to clone upperpath
[ 1738.765109][   T30] kauditd_printk_skb: 5 callbacks suppressed
[ 1738.765126][   T30] audit: type=1400 audit(1751447845.604:1171): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=23594 comm="syz.6.5361" dest=20002 netif=wpan0
[ 1738.800072][T23597] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1740.122153][T23613] tipc: Started in network mode
[ 1740.127198][T23613] tipc: Node identity ac14140f, cluster identity 4711
[ 1740.134619][T23613] tipc: New replicast peer: 255.255.255.255
[ 1740.144486][T23613] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1740.151730][T23613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5369'.
[ 1740.163005][T23613] tipc: Disabling bearer <udp:syz2>
[ 1740.204340][T23615] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[ 1740.797744][T23624] Cannot find set identified by id 768 to match
[ 1743.434947][T23646] mkiss: ax0: crc mode is auto.
[ 1743.435443][T14388] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1743.440238][ T5946] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1743.472617][T17884] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1743.497822][T17884] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 1743.514338][T17884] usb 4-1: USB disconnect, device number 116
[ 1743.520244][ T5946] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2
[ 1743.522528][ T5946] usb 3-1: USB disconnect, device number 103
[ 1743.597124][T14388] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2
[ 1743.604902][T14388] usb 2-1: USB disconnect, device number 94
[ 1743.648900][T23652] netlink: ct family unspecified
[ 1743.648933][T23652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1743.711685][T23652] vlan0: entered promiscuous mode
[ 1743.711728][T23652] bridge0: entered promiscuous mode
[ 1743.711880][T23652] vlan0: entered allmulticast mode
[ 1743.711897][T23652] bridge0: entered allmulticast mode
[ 1743.760347][T23655] hsr0: entered promiscuous mode
[ 1743.760541][T23655] vlan0: entered promiscuous mode
[ 1744.341919][T23664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5385'.
[ 1745.439939][T23674] netlink: 'syz.6.5389': attribute type 1 has an invalid length.
[ 1745.624288][T23683] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1745.762647][T14388] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 1745.964377][T14388] usb 3-1: Using ep0 maxpacket: 8
[ 1745.971817][T14388] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1745.981358][T14388] usb 3-1: config 8 has an invalid interface number: 119 but max is 0
[ 1745.990928][T14388] usb 3-1: config 8 has no interface number 0
[ 1745.997146][T14388] usb 3-1: config 8 interface 119 has no altsetting 0
[ 1746.006440][T14388] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0202, bcdDevice=4a.34
[ 1746.018303][T14388] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1746.026433][T14388] usb 3-1: Product: syz
[ 1746.030921][T14388] usb 3-1: Manufacturer: syz
[ 1746.035624][T14388] usb 3-1: SerialNumber: syz
[ 1746.279195][T14388] cp210x 3-1:8.119: cp210x converter detected
[ 1746.290402][T14388] cp210x 3-1:8.119: failed to get vendor val 0x370b size 1: -71
[ 1746.299415][T14388] cp210x 3-1:8.119: querying part number failed
[ 1746.312667][T14388] usb 3-1: cp210x converter now attached to ttyUSB0
[ 1746.332885][T14388] usb 3-1: USB disconnect, device number 104
[ 1746.348618][T14388] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1746.361572][T14388] cp210x 3-1:8.119: device disconnected
[ 1748.260548][T23724] netlink: 'syz.6.5406': attribute type 8 has an invalid length.
[ 1749.876270][T23745] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[ 1750.527584][T23753] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5415'.
[ 1751.217046][T23769] fuse: Bad value for 'fd'
[ 1752.360950][T23783] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5426'.
[ 1753.257264][T23792] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5428'.
[ 1753.384171][T14008] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1753.458618][T23759] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[ 1753.780286][T23800] netlink: 'syz.6.5431': attribute type 1 has an invalid length.
[ 1753.960573][T23759] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1753.979658][T23759] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1753.999217][T23759] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1754.025829][T23759] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1755.166589][ T5946] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1755.952685][T14008] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1756.076545][T23834] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5442'.
[ 1756.097247][T23834] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5442'.
[ 1756.103136][T23832] fuse: Unknown parameter '��0x0000000000000008'
[ 1756.109785][ T5946] usb 4-1: device descriptor read/64, error -71
[ 1756.123627][T14008] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1756.205980][T14008] Bluetooth: hci5: command 0x0406 tx timeout
[ 1756.323937][T23845] netlink: 'syz.6.5446': attribute type 8 has an invalid length.
[ 1756.387817][ T5946] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1756.847559][ T5946] usb 4-1: device descriptor read/64, error -71
[ 1756.977102][ T5946] usb usb4-port1: attempt power cycle
[ 1756.994041][T23857] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[ 1757.478176][ T5946] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1757.514511][T23849] ptrace attach of "./syz-executor exec"[23864] was attempted by "./syz-executor exec"[23849]
[ 1757.924784][T23866] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1758.451903][T14008] Bluetooth: hci5: command 0x0406 tx timeout
[ 1758.470022][ T5946] usb 4-1: device not accepting address 119, error -71
[ 1758.972019][T21082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1758.985299][T21082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1758.998307][T21082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1759.014709][T21082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1759.036474][T21082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1759.343973][T23877] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5457'.
[ 1759.457809][T23883] netlink: 'syz.2.5458': attribute type 1 has an invalid length.
[ 1759.465849][T23883] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5458'.
[ 1760.480352][T23889] FAULT_INJECTION: forcing a failure.
[ 1760.480352][T23889] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1760.499236][T23889] CPU: 1 UID: 0 PID: 23889 Comm: syz.3.5459 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[ 1760.499268][T23889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1760.499281][T23889] Call Trace:
[ 1760.499291][T23889]  <TASK>
[ 1760.499301][T23889]  dump_stack_lvl+0x189/0x250
[ 1760.499339][T23889]  ? __pfx____ratelimit+0x10/0x10
[ 1760.499369][T23889]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1760.499406][T23889]  ? __pfx__printk+0x10/0x10
[ 1760.499441][T23889]  should_fail_ex+0x414/0x560
[ 1760.499470][T23889]  _copy_to_user+0x31/0xb0
[ 1760.499503][T23889]  tipc_getsockopt+0x44e/0x580
[ 1760.499533][T23889]  ? __pfx_tipc_getsockopt+0x10/0x10
[ 1760.499573][T23889]  do_sock_getsockopt+0x35d/0x650
[ 1760.499599][T23889]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1760.499621][T23889]  ? do_syscall_64+0x40/0x3b0
[ 1760.499650][T23889]  ? __fget_files+0x3a0/0x420
[ 1760.499680][T23889]  ? __fget_files+0x2a/0x420
[ 1760.499714][T23889]  __x64_sys_getsockopt+0x1a5/0x250
[ 1760.499737][T23889]  ? do_syscall_64+0x40/0x3b0
[ 1760.499767][T23889]  ? do_syscall_64+0x40/0x3b0
[ 1760.499800][T23889]  do_syscall_64+0xfa/0x3b0
[ 1760.499827][T23889]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1760.499855][T23889]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1760.499876][T23889]  ? clear_bhb_loop+0x60/0xb0
[ 1760.499901][T23889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1760.499921][T23889] RIP: 0033:0x7f1dac98e929
[ 1760.499939][T23889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1760.499957][T23889] RSP: 002b:00007f1dad721038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1760.499979][T23889] RAX: ffffffffffffffda RBX: 00007f1dacbb5fa0 RCX: 00007f1dac98e929
[ 1760.499995][T23889] RDX: 000000000000007f RSI: 000000000000010f RDI: 0000000000000004
[ 1760.500008][T23889] RBP: 00007f1dad721090 R08: 00002000000001c0 R09: 0000000000000000
[ 1760.500022][T23889] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[ 1760.500035][T23889] R13: 0000000000000000 R14: 00007f1dacbb5fa0 R15: 00007ffdcfe113f8
[ 1760.500067][T23889]  </TASK>
[ 1760.711042][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1761.525047][T21082] Bluetooth: hci0: command tx timeout
[ 1761.533650][T23875] chnl_net:caif_netlink_parms(): no params data found
[ 1761.690701][ T5946] usb 4-1: new full-speed USB device number 121 using dummy_hcd
[ 1761.785441][T23875] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1761.800023][T23875] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1761.807699][T23875] bridge_slave_0: entered allmulticast mode
[ 1761.815907][T23875] bridge_slave_0: entered promiscuous mode
[ 1761.824734][   T30] audit: type=1326 audit(1751447867.174:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1761.850650][T23875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1761.869973][T23875] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1761.878159][T23875] bridge_slave_1: entered allmulticast mode
[ 1761.887572][   T30] audit: type=1326 audit(1751447867.174:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1761.918134][T23875] bridge_slave_1: entered promiscuous mode
[ 1761.926775][ T5946] usb 4-1: config 0 has an invalid interface number: 30 but max is 0
[ 1761.945832][ T5946] usb 4-1: config 0 has no interface number 0
[ 1761.962335][   T30] audit: type=1326 audit(1751447867.174:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1761.991615][ T5946] usb 4-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04
[ 1762.021923][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1762.037880][ T5946] usb 4-1: Product: syz
[ 1762.042245][   T30] audit: type=1326 audit(1751447867.174:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1762.066461][ T5946] usb 4-1: Manufacturer: syz
[ 1762.071100][ T5946] usb 4-1: SerialNumber: syz
[ 1762.080772][T23908] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5465'.
[ 1762.104439][ T5946] usb 4-1: config 0 descriptor??
[ 1762.115238][ T5946] hub 4-1:0.30: bad descriptor, ignoring hub
[ 1762.127430][   T30] audit: type=1326 audit(1751447867.174:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1762.152594][ T5946] hub 4-1:0.30: probe with driver hub failed with error -5
[ 1762.160821][ T5946] keyspan 4-1:0.30: Keyspan - (without firmware) converter detected
[ 1762.185305][   T30] audit: type=1326 audit(1751447867.202:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1762.190944][T23875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1762.238011][   T30] audit: type=1326 audit(1751447867.202:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1762.285266][T23875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1762.309252][T23916] FAULT_INJECTION: forcing a failure.
[ 1762.309252][T23916] name failslab, interval 1, probability 0, space 0, times 0
[ 1762.359110][T23916] CPU: 1 UID: 0 PID: 23916 Comm: syz.0.5467 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[ 1762.359142][T23916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1762.359156][T23916] Call Trace:
[ 1762.359165][T23916]  <TASK>
[ 1762.359175][T23916]  dump_stack_lvl+0x189/0x250
[ 1762.359211][T23916]  ? __pfx____ratelimit+0x10/0x10
[ 1762.359241][T23916]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1762.359290][T23916]  ? __pfx__printk+0x10/0x10
[ 1762.359318][T23916]  ? __pfx___might_resched+0x10/0x10
[ 1762.359347][T23916]  ? fs_reclaim_acquire+0x7d/0x100
[ 1762.359391][T23916]  should_fail_ex+0x414/0x560
[ 1762.359422][T23916]  should_failslab+0xa8/0x100
[ 1762.359452][T23916]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1762.359478][T23916]  ? nft_flush_table+0xb0a/0xea0
[ 1762.359512][T23916]  nft_flush_table+0xb0a/0xea0
[ 1762.359551][T23916]  nf_tables_deltable+0x5cc/0xe10
[ 1762.359585][T23916]  ? __pfx_nf_tables_deltable+0x10/0x10
[ 1762.359609][T23916]  ? nfnl_pernet+0x23/0x240
[ 1762.359650][T23916]  ? __nla_parse+0x40/0x60
[ 1762.359684][T23916]  nfnetlink_rcv+0x112f/0x2520
[ 1762.359751][T23916]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1762.359795][T23916]  ? __lock_acquire+0xab9/0xd20
[ 1762.359878][T23916]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1762.359901][T23916]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1762.359931][T23916]  netlink_unicast+0x758/0x8d0
[ 1762.359977][T23916]  netlink_sendmsg+0x805/0xb30
[ 1762.360012][T23916]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1762.360046][T23916]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1762.360072][T23916]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1762.360096][T23916]  __sock_sendmsg+0x219/0x270
[ 1762.360143][T23916]  ____sys_sendmsg+0x505/0x830
[ 1762.360174][T23916]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1762.360209][T23916]  ? import_iovec+0x74/0xa0
[ 1762.360244][T23916]  ___sys_sendmsg+0x21f/0x2a0
[ 1762.360271][T23916]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1762.360336][T23916]  ? __fget_files+0x2a/0x420
[ 1762.360371][T23916]  ? __fget_files+0x3a0/0x420
[ 1762.360410][T23916]  __x64_sys_sendmsg+0x19b/0x260
[ 1762.360438][T23916]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1762.360474][T23916]  ? __pfx_ksys_write+0x10/0x10
[ 1762.360496][T23916]  ? rcu_is_watching+0x15/0xb0
[ 1762.360532][T23916]  ? do_syscall_64+0xbe/0x3b0
[ 1762.360567][T23916]  do_syscall_64+0xfa/0x3b0
[ 1762.360595][T23916]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1762.360623][T23916]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1762.360643][T23916]  ? clear_bhb_loop+0x60/0xb0
[ 1762.360669][T23916]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1762.360689][T23916] RIP: 0033:0x7f5355d8e929
[ 1762.360707][T23916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1762.360725][T23916] RSP: 002b:00007f5356cb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1762.360747][T23916] RAX: ffffffffffffffda RBX: 00007f5355fb6080 RCX: 00007f5355d8e929
[ 1762.360763][T23916] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[ 1762.360776][T23916] RBP: 00007f5356cb8090 R08: 0000000000000000 R09: 0000000000000000
[ 1762.360789][T23916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1762.360802][T23916] R13: 0000000000000000 R14: 00007f5355fb6080 R15: 00007fff2c07fc08
[ 1762.360835][T23916]  </TASK>
[ 1762.465786][   T30] audit: type=1326 audit(1751447867.202:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1762.470602][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1762.475744][   T30] audit: type=1326 audit(1751447867.202:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1762.751749][   T30] audit: type=1326 audit(1751447867.202:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23905 comm="syz.2.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1762.914215][T23875] team0: Port device team_slave_0 added
[ 1762.936425][T23921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5469'.
[ 1762.950167][T23875] team0: Port device team_slave_1 added
[ 1763.026021][T23875] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1763.041129][T23875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1763.067134][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1763.090197][T23875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1763.105139][T23875] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1763.120652][T23875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1763.147728][T23875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1763.345679][T23875] hsr_slave_0: entered promiscuous mode
[ 1763.359541][T23875] hsr_slave_1: entered promiscuous mode
[ 1763.365988][T23875] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1763.390142][T23875] Cannot create hsr debugfs directory
[ 1763.413867][T23932] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5473'.
[ 1763.431238][T23932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5473'.
[ 1763.440664][T23932] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5473'.
[ 1763.453565][T23932] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5473'.
[ 1763.682561][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5470'.
[ 1763.702446][T23925] bridge0: entered promiscuous mode
[ 1763.710607][T23925] bridge0: left promiscuous mode
[ 1763.732185][T21082] Bluetooth: hci0: command tx timeout
[ 1764.834625][T23943] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1764.887335][T14388] usb 4-1: USB disconnect, device number 121
[ 1764.894620][T14388] keyspan 4-1:0.30: device disconnected
[ 1765.021336][T23875] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1765.821651][T23875] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1765.937729][T23954] ubi: mtd0 is already attached to ubi31
[ 1765.956219][T21082] Bluetooth: hci0: command tx timeout
[ 1765.959671][T23875] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1766.191374][T23875] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1766.478599][ T5878] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 1766.614770][T23875] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1766.659153][T23875] 8021q: adding VLAN 0 to HW filter on device team0
[ 1766.663791][ T5878] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1766.690288][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1766.690619][T21233] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1766.705508][T21233] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1766.731667][ T5878] usb 3-1: config 0 descriptor??
[ 1766.765301][T21233] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1766.772620][T21233] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1766.808236][T23974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5486'.
[ 1766.817361][T23974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5486'.
[ 1766.826468][T23974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5486'.
[ 1767.013614][T23875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1767.431185][ T5878] usb 3-1: Cannot set autoneg
[ 1767.442078][ T5878] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1767.503372][ T5878] usb 3-1: USB disconnect, device number 105
[ 1768.099039][T23875] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1768.180106][T21082] Bluetooth: hci0: command tx timeout
[ 1768.192431][T23993] overlayfs: failed to resolve './file1': -2
[ 1768.611667][ T5946] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 1768.737491][T24005] batman_adv: batadv0: Adding interface: macsec2
[ 1768.744037][T24005] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1768.769881][T24005] batman_adv: batadv0: Interface activated: macsec2
[ 1770.461842][T24010] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[ 1770.671019][ T5946] usb 3-1: Using ep0 maxpacket: 32
[ 1770.702540][ T5946] usb 3-1: config 0 has an invalid interface number: 126 but max is 0
[ 1770.741467][ T5946] usb 3-1: config 0 has no interface number 0
[ 1770.816069][T23875] veth0_vlan: entered promiscuous mode
[ 1770.824620][ T5946] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1770.829136][T23875] veth1_vlan: entered promiscuous mode
[ 1771.038895][ T5946] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[ 1771.049156][ T5946] usb 3-1: config 0 interface 126 has no altsetting 0
[ 1771.062452][ T5946] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[ 1771.947716][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1772.701816][T23875] veth0_macvtap: entered promiscuous mode
[ 1772.716772][T23875] veth1_macvtap: entered promiscuous mode
[ 1772.765762][ T5946] usb 3-1: Product: syz
[ 1772.770031][ T5946] usb 3-1: Manufacturer: syz
[ 1772.774696][ T5946] usb 3-1: SerialNumber: syz
[ 1772.826388][T23875] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1772.836837][ T5946] usb 3-1: config 0 descriptor??
[ 1772.902791][T23875] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1772.939009][T23875] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1773.023191][T24033] Cannot find set identified by id 768 to match
[ 1773.071975][ T5946] usb 3-1: can't set config #0, error -71
[ 1773.116532][ T5946] usb 3-1: USB disconnect, device number 106
[ 1773.150113][T23875] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1774.043171][T23875] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1774.065433][T23875] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1774.781897][ T8021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1774.812078][T24039] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5500'.
[ 1774.822392][ T8021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1774.895119][T21233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1774.902988][T21233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1774.913473][T24040] nvme_fabrics: missing parameter 'transport=%s'
[ 1774.928492][T24040] nvme_fabrics: missing parameter 'nqn=%s'
[ 1778.205847][T24085] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5517'.
[ 1778.740729][T24099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1778.864430][T24099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1780.607444][T24128] No such timeout policy "syz0"
[ 1781.724922][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1782.884175][T24141] tipc: Cannot configure node identity twice
[ 1783.199117][T24152] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1783.956513][T24156] ubi: mtd0 is already attached to ubi31
[ 1784.152523][T23466] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 1784.633349][T23466] usb 3-1: device descriptor read/64, error -71
[ 1784.988496][T23466] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 1785.188684][T23466] usb 3-1: device descriptor read/64, error -71
[ 1785.393272][T24178] fuse: Unknown parameter 'ߊ�4SOYC+Ry5{dn���g�M����*	�00000000000000000000005'
[ 1785.413808][T24178] : entered promiscuous mode
[ 1786.262984][T23466] usb usb3-port1: attempt power cycle
[ 1790.351956][ T5832] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 1790.425859][T24208] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5554'.
[ 1790.541044][T24215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5557'.
[ 1790.675567][ T5832] usb 4-1: config 235 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1790.687026][ T5832] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1790.696204][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1790.803868][T24220] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1791.152734][ T5832] usb 4-1: string descriptor 0 read error: -71
[ 1791.314617][ T5832] ath6kl: Failed to submit usb control message: -71
[ 1791.321406][ T5832] ath6kl: unable to send the bmi data to the device: -71
[ 1791.330988][ T5832] ath6kl: Unable to send get target info: -71
[ 1791.451667][ T5832] ath6kl: Failed to init ath6kl core: -71
[ 1791.460241][ T5832] ath6kl_usb 4-1:235.0: probe with driver ath6kl_usb failed with error -71
[ 1791.473245][ T5832] usb 4-1: USB disconnect, device number 122
[ 1791.698919][T24237] FAULT_INJECTION: forcing a failure.
[ 1791.698919][T24237] name failslab, interval 1, probability 0, space 0, times 0
[ 1791.721644][T24237] CPU: 0 UID: 0 PID: 24237 Comm: syz.0.5564 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[ 1791.721671][T24237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1791.721737][T24237] Call Trace:
[ 1791.721746][T24237]  <TASK>
[ 1791.721754][T24237]  dump_stack_lvl+0x189/0x250
[ 1791.721787][T24237]  ? __pfx____ratelimit+0x10/0x10
[ 1791.721831][T24237]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1791.721862][T24237]  ? __pfx__printk+0x10/0x10
[ 1791.721889][T24237]  ? __pfx___might_resched+0x10/0x10
[ 1791.721921][T24237]  ? fs_reclaim_acquire+0x7d/0x100
[ 1791.721956][T24237]  should_fail_ex+0x414/0x560
[ 1791.721995][T24237]  ? rhashtable_init_noprof+0x4ee/0xbb0
[ 1791.722020][T24237]  should_failslab+0xa8/0x100
[ 1791.722075][T24237]  __kvmalloc_node_noprof+0x161/0x5f0
[ 1791.722119][T24237]  ? rhashtable_init_noprof+0x4ee/0xbb0
[ 1791.722155][T24237]  rhashtable_init_noprof+0x4ee/0xbb0
[ 1791.722191][T24237]  rhltable_init_noprof+0x1e/0x60
[ 1791.722222][T24237]  nf_tables_newtable+0x68f/0x1890
[ 1791.722271][T24237]  nfnetlink_rcv+0x112f/0x2520
[ 1791.722338][T24237]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1791.722382][T24237]  ? __lock_acquire+0xab9/0xd20
[ 1791.722463][T24237]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1791.722487][T24237]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1791.722516][T24237]  netlink_unicast+0x758/0x8d0
[ 1791.722562][T24237]  netlink_sendmsg+0x805/0xb30
[ 1791.722596][T24237]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1791.722629][T24237]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1791.722655][T24237]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1791.722680][T24237]  __sock_sendmsg+0x219/0x270
[ 1791.722715][T24237]  ____sys_sendmsg+0x505/0x830
[ 1791.722746][T24237]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1791.722781][T24237]  ? import_iovec+0x74/0xa0
[ 1791.722817][T24237]  ___sys_sendmsg+0x21f/0x2a0
[ 1791.722844][T24237]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1791.722910][T24237]  ? __fget_files+0x2a/0x420
[ 1791.722937][T24237]  ? __fget_files+0x3a0/0x420
[ 1791.722976][T24237]  __x64_sys_sendmsg+0x19b/0x260
[ 1791.723004][T24237]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1791.723041][T24237]  ? __pfx_ksys_write+0x10/0x10
[ 1791.723069][T24237]  ? rcu_is_watching+0x15/0xb0
[ 1791.723105][T24237]  ? do_syscall_64+0xbe/0x3b0
[ 1791.723141][T24237]  do_syscall_64+0xfa/0x3b0
[ 1791.723181][T24237]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1791.723209][T24237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1791.723243][T24237]  ? clear_bhb_loop+0x60/0xb0
[ 1791.723267][T24237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1791.723285][T24237] RIP: 0033:0x7f5355d8e929
[ 1791.723303][T24237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1791.723321][T24237] RSP: 002b:00007f5356cd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1791.723341][T24237] RAX: ffffffffffffffda RBX: 00007f5355fb5fa0 RCX: 00007f5355d8e929
[ 1791.723356][T24237] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[ 1791.723369][T24237] RBP: 00007f5356cd9090 R08: 0000000000000000 R09: 0000000000000000
[ 1791.723381][T24237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1791.723393][T24237] R13: 0000000000000000 R14: 00007f5355fb5fa0 R15: 00007fff2c07fc08
[ 1791.723424][T24237]  </TASK>
[ 1794.370546][T24266] Falling back ldisc for ptm0.
[ 1795.490914][T24280] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1795.586880][T24287] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[ 1797.751071][T24296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1798.501659][T24296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1798.583867][   T12] bridge_slave_1: left promiscuous mode
[ 1798.669744][T23466] usb 3-1: new full-speed USB device number 110 using dummy_hcd
[ 1798.692283][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1798.868357][T23466] usb 3-1: config 7 has an invalid interface number: 192 but max is 0
[ 1798.894883][   T12] bridge_slave_0: left promiscuous mode
[ 1798.925082][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1798.941023][T23466] usb 3-1: config 7 has no interface number 0
[ 1798.977033][T23466] usb 3-1: config 7 interface 192 has no altsetting 0
[ 1799.686547][T23466] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d
[ 1799.695807][T23466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1799.703832][T23466] usb 3-1: Product: syz
[ 1799.716786][T23466] usb 3-1: Manufacturer: syz
[ 1799.721436][T23466] usb 3-1: SerialNumber: syz
[ 1800.028709][T24322] 9pnet_fd: Insufficient options for proto=fd
[ 1800.037747][T23466] usb 3-1: USB disconnect, device number 110
[ 1800.497206][T24329] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5591'.
[ 1800.499668][T24324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5592'.
[ 1800.534344][T24324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5592'.
[ 1800.570868][T24331] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1800.580143][T24328] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.5592'.
[ 1800.598314][T24331] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[ 1800.610859][T24331] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1800.638144][T24331] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[ 1800.926418][   T30] kauditd_printk_skb: 33 callbacks suppressed
[ 1800.926433][   T30] audit: type=1326 audit(1751447903.748:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24335 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1800.966343][   T30] audit: type=1326 audit(1751447903.785:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24335 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1800.996082][   T30] audit: type=1326 audit(1751447903.785:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24335 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1801.018269][   T30] audit: type=1326 audit(1751447903.785:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24335 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1801.040411][   T30] audit: type=1326 audit(1751447903.785:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24335 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1801.062303][   T30] audit: type=1326 audit(1751447903.785:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24335 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1801.084114][   T30] audit: type=1326 audit(1751447903.785:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24335 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5355d8e929 code=0x7ffc0000
[ 1801.105927][   T30] audit: type=1326 audit(1751447903.785:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24335 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5355d8d290 code=0x7ffc0000
[ 1801.134080][   T12] bond1 (unregistering): (slave bridge1): Releasing active interface
[ 1801.140597][   T30] audit: type=1326 audit(1751447903.785:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24335 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5355d8e52b code=0x7ffc0000
[ 1801.166217][   T30] audit: type=1326 audit(1751447903.785:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24335 comm="syz.0.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5355d8e52b code=0x7ffc0000
[ 1801.267433][   T10] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1801.334461][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1801.344605][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1801.354412][   T12] bond0 (unregistering): Released all slaves
[ 1801.371857][   T12] bond1 (unregistering): Released all slaves
[ 1801.453916][   T10] usb 4-1: Using ep0 maxpacket: 8
[ 1801.471607][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1801.502313][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1801.512277][   T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[ 1801.524565][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1801.536535][   T10] usb 4-1: config 0 descriptor??
[ 1801.557535][   T12] bond2 (unregistering): Released all slaves
[ 1801.618990][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5596'.
[ 1801.686873][   T12] tipc: Left network mode
[ 1801.754887][T24348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5597'.
[ 1801.764055][T24348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5597'.
[ 1801.773213][T24348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5597'.
[ 1801.887244][   T10] wacom 0003:056A:0000.003A: unbalanced collection at end of report description
[ 1801.907327][   T10] wacom 0003:056A:0000.003A: parse failed
[ 1801.922140][   T10] wacom 0003:056A:0000.003A: probe with driver wacom failed with error -22
[ 1802.069167][ T5878] usb 4-1: USB disconnect, device number 123
[ 1802.108004][T24357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5600'.
[ 1802.141161][T24358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5600'.
[ 1802.192409][   T12] hsr_slave_0: left promiscuous mode
[ 1802.232573][   T12] hsr_slave_1: left promiscuous mode
[ 1802.249994][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1802.326463][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1802.757341][T24371] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[ 1802.763933][T24371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1802.792433][T24371] vhci_hcd vhci_hcd.0: Device attached
[ 1802.818200][T24374] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1802.880239][T24371] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13)
[ 1802.886912][T24371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1802.917699][T24371] vhci_hcd vhci_hcd.0: Device attached
[ 1802.970586][T24371] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15)
[ 1802.977268][T24371] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1802.992630][T24371] vhci_hcd vhci_hcd.0: Device attached
[ 1802.998907][ T5878] vhci_hcd: vhci_device speed not set
[ 1803.020398][T24374] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17)
[ 1803.027042][T24374] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1803.038187][T24374] vhci_hcd vhci_hcd.0: Device attached
[ 1803.051623][T24371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1803.063006][ T5878] usb 37-1: new full-speed USB device number 3 using vhci_hcd
[ 1803.064322][T24371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1803.130338][T24371] nfs: Unknown parameter 'ntext'
[ 1803.155843][T24387] vhci_hcd: connection closed
[ 1803.156055][T24375] vhci_hcd: connection closed
[ 1803.158724][T21233] vhci_hcd: stop threads
[ 1803.161013][T24372] vhci_hcd: connection reset by peer
[ 1803.161205][T24382] vhci_hcd: connection closed
[ 1803.196665][T21233] vhci_hcd: release socket
[ 1803.234470][T21233] vhci_hcd: disconnect device
[ 1803.239582][T21233] vhci_hcd: stop threads
[ 1803.252440][T21233] vhci_hcd: release socket
[ 1803.258448][T14388] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1803.258481][T21233] vhci_hcd: disconnect device
[ 1803.281937][T21233] vhci_hcd: stop threads
[ 1803.286227][T21233] vhci_hcd: release socket
[ 1803.300899][T21233] vhci_hcd: disconnect device
[ 1803.305962][T21233] vhci_hcd: stop threads
[ 1803.318319][T21233] vhci_hcd: release socket
[ 1803.337859][T21233] vhci_hcd: disconnect device
[ 1803.430440][T14388] usb 4-1: Using ep0 maxpacket: 16
[ 1803.451288][T14388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1803.465418][T14388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1803.482154][T14388] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1803.529794][T14388] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1803.542401][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1803.549974][T14388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1803.560028][T14388] usb 4-1: config 0 descriptor??
[ 1803.604629][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1804.763090][T24380] random: crng reseeded on system resumption
[ 1805.986719][T14388] usbhid 4-1:0.0: can't add hid device: -71
[ 1806.014946][T14388] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1806.049971][T14388] usb 4-1: USB disconnect, device number 124
[ 1806.149116][T24417] __nla_validate_parse: 4 callbacks suppressed
[ 1806.149136][T24417] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5617'.
[ 1808.301503][   T24] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1809.078472][ T5878] vhci_hcd: vhci_device speed not set
[ 1809.083974][   T24] usb 4-1: Using ep0 maxpacket: 32
[ 1809.124587][   T24] usb 4-1: too many configurations: 181, using maximum allowed: 8
[ 1809.139292][   T24] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1809.150641][   T24] usb 4-1: can't read configurations, error -61
[ 1809.317426][   T24] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1809.498787][   T24] usb 4-1: Using ep0 maxpacket: 32
[ 1809.536010][   T24] usb 4-1: too many configurations: 181, using maximum allowed: 8
[ 1809.554038][   T24] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1809.629610][   T24] usb 4-1: can't read configurations, error -61
[ 1809.668096][   T24] usb usb4-port1: attempt power cycle
[ 1810.227782][T24483] netlink: 'syz.6.5639': attribute type 1 has an invalid length.
[ 1810.330075][T24486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5640'.
[ 1810.644917][   T24] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1810.723581][   T24] usb 4-1: Using ep0 maxpacket: 32
[ 1810.863565][   T24] usb 4-1: too many configurations: 181, using maximum allowed: 8
[ 1811.018801][   T24] usb 4-1: unable to read config index 0 descriptor/start: -61
[ 1811.026460][   T24] usb 4-1: can't read configurations, error -61
[ 1811.187971][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1811.220736][   T24] usb 4-1: Using ep0 maxpacket: 32
[ 1811.248278][   T24] usb 4-1: too many configurations: 181, using maximum allowed: 8
[ 1811.298439][   T24] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1811.316693][   T24] usb 4-1: can't read configurations, error -71
[ 1811.323607][   T24] usb usb4-port1: unable to enumerate USB device
[ 1811.558256][T24506] loop8: detected capacity change from 0 to 524255232
[ 1811.626644][T24506] loop8: detected capacity change from 524255232 to 524287936
[ 1812.848276][T24524] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5653'.
[ 1813.555537][T24528] ubi: mtd0 is already attached to ubi31
[ 1815.028276][T24539] netlink: 'syz.3.5660': attribute type 2 has an invalid length.
[ 1815.431954][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1815.644394][   T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1816.682912][   T24] usb 4-1: Using ep0 maxpacket: 16
[ 1816.790417][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1816.810520][   T24] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1816.838711][T24569] hsr0: entered allmulticast mode
[ 1816.846277][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1816.854385][T24569] hsr_slave_0: entered allmulticast mode
[ 1816.854407][T24569] hsr_slave_1: entered allmulticast mode
[ 1816.867015][   T24] usb 4-1: Product: syz
[ 1816.870196][T24569] hsr_slave_0: left promiscuous mode
[ 1816.871406][   T24] usb 4-1: Manufacturer: syz
[ 1816.882674][   T24] usb 4-1: SerialNumber: syz
[ 1816.890454][T24569] hsr_slave_1: left promiscuous mode
[ 1816.891124][   T24] usb 4-1: config 0 descriptor??
[ 1816.908153][   T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[ 1816.921448][   T24] usb 4-1: Detected FT232R
[ 1816.922972][T24569] hsr0 (unregistering): left allmulticast mode
[ 1816.948519][T24572] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[ 1816.971460][   T10] usb 8-1: Using ep0 maxpacket: 16
[ 1817.016990][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1817.030477][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1817.041930][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1817.054933][   T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1817.064753][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1817.082607][   T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1817.092142][   T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1817.106663][   T10] usb 8-1: Manufacturer: syz
[ 1817.116813][   T10] usb 8-1: config 0 descriptor??
[ 1817.249747][   T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1817.267404][   T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1817.282336][   T24] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[ 1817.293243][   T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1817.307155][   T24] usb 4-1: USB disconnect, device number 3
[ 1817.316429][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1817.356576][   T24] ftdi_sio 4-1:0.0: device disconnected
[ 1819.162990][   T10] rc_core: IR keymap rc-hauppauge not found
[ 1819.169188][   T10] Registered IR keymap rc-empty
[ 1819.184534][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1819.205341][T24593] ubi: mtd0 is already attached to ubi31
[ 1819.283568][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1819.448776][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 1819.521174][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input66
[ 1819.573905][T24601] Cannot find set identified by id 768 to match
[ 1819.784853][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1820.275262][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1820.300871][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1820.396604][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1820.502613][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1820.521105][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1820.542218][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1820.563529][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1820.638877][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1820.670460][   T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1821.026986][   T10] mceusb 8-1:0.0: Registered  with mce emulator interface version 1
[ 1821.246299][   T10] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1821.360431][   T10] usb 8-1: USB disconnect, device number 2
[ 1821.728771][   T10] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[ 1822.983602][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5686'.
[ 1822.992623][T24634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5686'.
[ 1823.048158][T24634] bridge0: port 3(vlan0) entered blocking state
[ 1823.055282][T24634] bridge0: port 3(vlan0) entered disabled state
[ 1823.062934][T24634] vlan0: entered allmulticast mode
[ 1823.552446][T24634] vlan0: left allmulticast mode
[ 1823.600766][   T10] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1823.721577][   T10] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1823.730574][T24635] pty pty27: ldisc open failed (-12), clearing slot 27
[ 1823.745227][   T10] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1823.777310][   T10] usb 8-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00
[ 1823.802674][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1823.824498][   T10] usb 8-1: config 0 descriptor??
[ 1824.107407][T24642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5690'.
[ 1824.118631][   T10] usbhid 8-1:0.0: can't add hid device: -71
[ 1824.124879][   T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1824.136327][   T10] usb 8-1: USB disconnect, device number 3
[ 1825.527465][T24666] trusted_key: encrypted_key: insufficient parameters specified
[ 1826.847834][   T24] hid-generic 0001:0004:0009.003B: unknown main item tag 0x0
[ 1827.003278][   T24] hid-generic 0001:0004:0009.003B: unknown main item tag 0x0
[ 1827.013314][   T24] hid-generic 0001:0004:0009.003B: unknown main item tag 0x0
[ 1827.021316][   T24] hid-generic 0001:0004:0009.003B: unknown main item tag 0x0
[ 1827.028759][   T24] hid-generic 0001:0004:0009.003B: unknown main item tag 0x0
[ 1827.036213][   T24] hid-generic 0001:0004:0009.003B: unknown main item tag 0x0
[ 1827.049883][   T24] hid-generic 0001:0004:0009.003B: item fetching failed at offset 8/17
[ 1827.060389][   T24] hid-generic 0001:0004:0009.003B: probe with driver hid-generic failed with error -22
[ 1828.502527][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1828.502551][   T30] audit: type=1326 audit(1751447928.630:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24686 comm="syz.2.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1828.530368][   T30] audit: type=1326 audit(1751447928.630:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24686 comm="syz.2.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1828.908703][   T30] audit: type=1326 audit(1751447928.630:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24686 comm="syz.2.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1828.930445][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1828.961255][   T30] audit: type=1326 audit(1751447928.639:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24686 comm="syz.2.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1828.983024][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1829.206661][   T30] audit: type=1326 audit(1751447928.639:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24686 comm="syz.2.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1829.289270][T24694] Cannot find set identified by id 768 to match
[ 1829.452305][T24696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5705'.
[ 1829.774721][   T30] audit: type=1326 audit(1751447928.639:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24686 comm="syz.2.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1829.895138][   T30] audit: type=1326 audit(1751447928.639:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24686 comm="syz.2.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1830.302673][   T30] audit: type=1326 audit(1751447928.639:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24686 comm="syz.2.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1830.545849][   T30] audit: type=1326 audit(1751447928.639:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24686 comm="syz.2.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1830.567545][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1830.574117][   T30] audit: type=1326 audit(1751447928.648:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24686 comm="syz.2.5701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1834.235841][T24746] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[ 1834.268003][T24748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5721'.
[ 1835.341518][T24764] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5724'.
[ 1835.849394][T24772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5727'.
[ 1836.114001][T24777] tmpfs: Unknown parameter 'm�pquotaE�'
[ 1836.998887][T24796] mkiss: ax0: crc mode is auto.
[ 1837.454699][T23466] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1837.508108][   T24] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 1837.625864][T23466] usb 4-1: Using ep0 maxpacket: 8
[ 1837.746641][T23466] usb 4-1: config 0 has an invalid interface number: 151 but max is 0
[ 1837.758228][T23466] usb 4-1: config 0 has no interface number 0
[ 1837.764529][T23466] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E
[ 1837.779331][T23466] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1837.793083][T23466] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=fa.6f
[ 1837.804751][T23466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1837.922869][   T24] usb 3-1: Using ep0 maxpacket: 8
[ 1837.928288][T23466] usb 4-1: Product: syz
[ 1837.928308][T23466] usb 4-1: Manufacturer: syz
[ 1837.928323][T23466] usb 4-1: SerialNumber: syz
[ 1837.945017][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1837.950513][T23466] usb 4-1: config 0 descriptor??
[ 1837.957321][   T24] usb 3-1: config index 0 descriptor too short (expected 274, got 18)
[ 1837.970443][   T24] usb 3-1: config 4 interface 0 has no altsetting 0
[ 1837.981385][T23466] sisusb 4-1:0.151: Invalid USB2VGA device
[ 1837.992835][T23466] sisusb 4-1:0.151: probe with driver sisusb failed with error -22
[ 1837.998941][   T24] usb 3-1: string descriptor 0 read error: -22
[ 1838.007314][   T24] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1838.019666][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1838.036262][   T24] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1838.058195][   T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1838.070789][   T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1838.078676][   T24] usb 3-1: media controller created
[ 1838.113090][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1838.199707][T24807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1838.209098][T24807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1838.219564][T23466] usb 4-1: USB disconnect, device number 4
[ 1838.253469][   T24] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1838.336552][   T24] usb 3-1: USB disconnect, device number 111
[ 1839.226991][T24830] hsr0: entered promiscuous mode
[ 1839.233974][T24830] macvtap1: entered promiscuous mode
[ 1839.239601][T24830] macvtap1: entered allmulticast mode
[ 1839.248477][T24830] hsr0: entered allmulticast mode
[ 1839.260490][T24830] hsr_slave_0: entered allmulticast mode
[ 1839.363902][T24830] hsr_slave_1: entered allmulticast mode
[ 1839.397008][T24839] netlink: 'syz.2.5746': attribute type 1 has an invalid length.
[ 1839.403358][T24830] hsr0: left allmulticast mode
[ 1839.414249][T24830] hsr_slave_0: left allmulticast mode
[ 1839.419816][T24830] hsr_slave_1: left allmulticast mode
[ 1839.662880][T24852] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1843.835614][T24884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5762'.
[ 1844.821992][T24892] xt_connbytes: Forcing CT accounting to be enabled
[ 1844.828847][T24892] set match dimension is over the limit!
[ 1846.152001][T24894] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[ 1846.453394][T24900] tipc: Can't bind to reserved service type 1
[ 1846.476335][T24905] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5767'.
[ 1847.047466][T24905] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5767'.
[ 1847.056700][T24905] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5767'.
[ 1847.066854][T24905] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5767'.
[ 1847.172638][T24900] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5763'.
[ 1847.203600][T24900] openvswitch: netlink: Flow key attr not present in new flow.
[ 1847.295975][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1847.698394][T24928] netlink: 'syz.3.5773': attribute type 8 has an invalid length.
[ 1848.329223][T24936] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5777'.
[ 1848.496676][T24947] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1848.508679][T24947] batman_adv: batadv0: Adding interface: gretap1
[ 1848.515053][T24947] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1848.551644][T24947] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[ 1850.585081][T24972] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[ 1851.029917][T24983] usb usb6: usbfs: process 24983 (syz.3.5792) did not claim interface 46 before use
[ 1851.082927][T24986] vlan0: entered promiscuous mode
[ 1851.299100][ T5832] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1851.450231][T25003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5797'.
[ 1851.483992][ T5832] usb 8-1: config 0 has an invalid interface number: 186 but max is 1
[ 1851.514044][ T5832] usb 8-1: config 0 has no interface number 1
[ 1851.527799][ T5832] usb 8-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83
[ 1851.544815][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1851.568847][ T5832] usb 8-1: Product: syz
[ 1851.577635][ T5832] usb 8-1: Manufacturer: syz
[ 1851.589899][ T5832] usb 8-1: SerialNumber: syz
[ 1851.605242][ T5832] usb 8-1: config 0 descriptor??
[ 1851.839774][T23466] usb 8-1: USB disconnect, device number 4
[ 1852.314417][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 1852.314450][   T30] audit: type=1326 audit(1751447951.809:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25013 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1852.450912][   T30] audit: type=1326 audit(1751447951.809:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25013 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1852.514094][   T30] audit: type=1326 audit(1751447951.809:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25013 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1852.541586][   T30] audit: type=1326 audit(1751447951.809:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25013 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1852.566503][   T30] audit: type=1326 audit(1751447951.809:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25013 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1852.597493][   T30] audit: type=1326 audit(1751447951.809:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25013 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1852.646801][   T30] audit: type=1326 audit(1751447951.809:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25013 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1852.672994][   T30] audit: type=1326 audit(1751447951.809:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25013 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1852.769338][   T30] audit: type=1326 audit(1751447951.809:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25013 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1852.831073][   T30] audit: type=1326 audit(1751447951.809:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25013 comm="syz.2.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcebff8e929 code=0x7ffc0000
[ 1852.874725][T25027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5805'.
[ 1852.888065][T25027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5805'.
[ 1852.913938][T25027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5805'.
[ 1852.964915][T25027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5805'.
[ 1852.991600][T14008] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1853.004513][T14008] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1853.013830][T14008] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1853.025090][T14008] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1853.032922][T14008] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1854.048216][T25052] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5813'.
[ 1854.058949][T25052] netlink: 'syz.7.5813': attribute type 6 has an invalid length.
[ 1854.078208][T25052] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5813'.
[ 1854.248548][T25034] chnl_net:caif_netlink_parms(): no params data found
[ 1854.438384][T25034] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1854.445779][T25034] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1854.456828][T25034] bridge_slave_0: entered allmulticast mode
[ 1854.464915][T25034] bridge_slave_0: entered promiscuous mode
[ 1854.473501][T25034] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1854.504631][T25034] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1854.524488][T25034] bridge_slave_1: entered allmulticast mode
[ 1854.546807][T25034] bridge_slave_1: entered promiscuous mode
[ 1854.638872][T25034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1854.825195][T25076] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1855.611073][T14008] Bluetooth: hci1: command tx timeout
[ 1855.678763][T25034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1855.693009][   T24] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 1855.941864][T25034] team0: Port device team_slave_0 added
[ 1855.958924][T25034] team0: Port device team_slave_1 added
[ 1856.122165][T25082] syz.6.5819 (25082): attempted to duplicate a private mapping with mremap.  This is not supported.
[ 1856.161270][T25034] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1856.173502][T25034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1856.199410][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1856.206912][T25034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1856.219793][T25034] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1856.226769][T25034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1856.252641][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1856.258998][T25034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1856.295776][   T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 1856.305074][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1856.323544][   T24] usb 3-1: Product: syz
[ 1856.327746][   T24] usb 3-1: Manufacturer: syz
[ 1856.332369][   T24] usb 3-1: SerialNumber: syz
[ 1856.344557][   T24] usb 3-1: config 0 descriptor??
[ 1856.393860][T25034] hsr_slave_0: entered promiscuous mode
[ 1856.402536][T25034] hsr_slave_1: entered promiscuous mode
[ 1856.532712][T25095] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5824'.
[ 1856.661173][T25100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5827'.
[ 1856.877285][T25104] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5829'.
[ 1857.006033][   T24] usb 3-1: f81604_read: reg: 105 failed: -EPROTO
[ 1857.021151][   T24] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO
[ 1857.028697][   T24] f81604 3-1:0.0: probe with driver f81604 failed with error -71
[ 1857.050170][T25108] ------------[ cut here ]------------
[ 1857.062484][T25108] WARNING: CPU: 0 PID: 25108 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310
[ 1857.073266][T25108] Modules linked in:
[ 1857.077569][T25108] CPU: 0 UID: 0 PID: 25108 Comm: syz.7.5830 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[ 1857.086245][   T24] usb 3-1: USB disconnect, device number 112
[ 1857.089703][T25108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1857.105805][T25108] RIP: 0010:folio_memcg+0x1a8/0x310
[ 1857.111054][T25108] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cc 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 89 74 ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[ 1857.131368][T25108] RSP: 0018:ffffc90004fe7250 EFLAGS: 00010287
[ 1857.138118][T25108] RAX: ffffffff8205d907 RBX: 0000000000000000 RCX: 0000000000080000
[ 1857.146412][T25108] RDX: ffffc900112a7000 RSI: 000000000001eb05 RDI: 000000000001eb06
[ 1857.154901][T25108] RBP: 0000000000000000 R08: ffffea0000e9e507 R09: 1ffffd40001d3ca0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1857.162953][T25108] R10: dffffc0000000000 R11: fffff940001d3ca1 R12: ffffea0000e9e530
[ 1857.171025][T25108] R13: dffffc0000000000 R14: ffff888031dec600 R15: 0000000000000002
[ 1857.179183][T25108] FS:  00007f74a05f66c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000
[ 1857.188148][T25108] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1857.195001][T25108] CR2: 0000000000000000 CR3: 000000003a6b0000 CR4: 00000000003526f0
[ 1857.203044][T25108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000040006
[ 1857.211324][T25108] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1857.219322][T25108] Call Trace:
[ 1857.222697][T25108]  <TASK>
[ 1857.225663][T25108]  workingset_activation+0x5f/0x4a0
[ 1857.227490][T25034] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1857.230877][T25108]  ? folio_mark_accessed+0x341/0x4a0
[ 1857.242971][T25108]  folio_mark_accessed+0x3b5/0x4a0
[ 1857.248123][T25108]  kvm_release_page_dirty+0xa2/0xf0
[ 1857.253380][T25108]  kvm_tdp_page_fault+0x2dd/0x370
[ 1857.258511][T25108]  kvm_mmu_do_page_fault+0x2c5/0x640
[ 1857.263831][T25108]  ? vmx_vcpu_run+0xd8b/0x25d0
[ 1857.269281][T25108]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[ 1857.275201][T25108]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[ 1857.280790][T25108]  ? __pfx_current_save_fsgs+0x10/0x10
[ 1857.286349][T25108]  kvm_mmu_page_fault+0x22f/0xb70
[ 1857.291555][T25108]  ? __pfx_handle_ept_violation+0x10/0x10
[ 1857.297510][T25108]  vmx_handle_exit+0x1093/0x18a0
[ 1857.302499][T25108]  ? vcpu_run+0x361c/0x6f70
[ 1857.307080][T25108]  ? rcu_is_watching+0x15/0xb0
[ 1857.311892][T25108]  vcpu_run+0x432e/0x6f70
[ 1857.316270][T25108]  ? vcpu_run+0x361c/0x6f70
[ 1857.320910][T25108]  ? __pfx_vcpu_run+0x10/0x10
[ 1857.325621][T25108]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 1857.331406][T25108]  ? rcu_is_watching+0x15/0xb0
[ 1857.336215][T25108]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[ 1857.341890][T25108]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 1857.347629][T25108]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1857.353702][T25108]  ? rcu_is_watching+0x15/0xb0
[ 1857.358513][T25108]  ? look_up_lock_class+0x74/0x170
[ 1857.363707][T25108]  ? register_lock_class+0x51/0x320
[ 1857.368939][T25108]  ? __lock_acquire+0xab9/0xd20
[ 1857.373998][T25108]  kvm_vcpu_ioctl+0x95c/0xe90
[ 1857.378714][T25108]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1857.384025][T25108]  ? __lock_acquire+0xab9/0xd20
[ 1857.388909][T25108]  ? __asan_memset+0x22/0x50
[ 1857.393570][T25108]  ? smack_file_ioctl+0x302/0x340
[ 1857.398767][T25108]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1857.404241][T25108]  ? __fget_files+0x2a/0x420
[ 1857.408866][T25108]  ? __fget_files+0x3a0/0x420
[ 1857.413583][T25108]  ? __fget_files+0x2a/0x420
[ 1857.418249][T25108]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1857.423229][T25108]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1857.428539][T25108]  __se_sys_ioctl+0xfc/0x170
[ 1857.433182][T25108]  do_syscall_64+0xfa/0x3b0
[ 1857.437761][T25108]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1857.443003][T25108]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1857.449150][T25108]  ? clear_bhb_loop+0x60/0xb0
[ 1857.453878][T25108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1857.459856][T25108] RIP: 0033:0x7f74a278e929
[ 1857.464298][T25108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1857.484041][T25108] RSP: 002b:00007f74a05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1857.492577][T25108] RAX: ffffffffffffffda RBX: 00007f74a29b5fa0 RCX: 00007f74a278e929
[ 1857.500647][T25108] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c
[ 1857.508910][T25108] RBP: 00007f74a2810b39 R08: 0000000000000000 R09: 0000000000000000
[ 1857.516978][T25108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1857.525061][T25108] R13: 0000000000000000 R14: 00007f74a29b5fa0 R15: 00007fff97b3c268
[ 1857.533177][T25108]  </TASK>
[ 1857.536242][T25108] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1857.543550][T25108] CPU: 0 UID: 0 PID: 25108 Comm: syz.7.5830 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) 
[ 1857.555647][T25108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1857.565731][T25108] Call Trace:
[ 1857.569037][T25108]  <TASK>
[ 1857.571992][T25108]  dump_stack_lvl+0x99/0x250
[ 1857.576612][T25108]  ? __asan_memcpy+0x40/0x70
[ 1857.581223][T25108]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1857.586450][T25108]  ? __pfx__printk+0x10/0x10
[ 1857.591075][T25108]  panic+0x2db/0x790
[ 1857.595010][T25108]  ? __pfx_panic+0x10/0x10
[ 1857.599509][T25108]  __warn+0x31b/0x4b0
[ 1857.603523][T25108]  ? folio_memcg+0x1a8/0x310
[ 1857.608168][T25108]  ? folio_memcg+0x1a8/0x310
[ 1857.612801][T25108]  report_bug+0x2be/0x4f0
[ 1857.617169][T25108]  ? folio_memcg+0x1a8/0x310
[ 1857.621786][T25108]  ? folio_memcg+0x1a8/0x310
[ 1857.626400][T25108]  ? folio_memcg+0x1aa/0x310
[ 1857.631020][T25108]  handle_bug+0x84/0x160
[ 1857.635285][T25108]  exc_invalid_op+0x1a/0x50
[ 1857.639817][T25108]  asm_exc_invalid_op+0x1a/0x20
[ 1857.644686][T25108] RIP: 0010:folio_memcg+0x1a8/0x310
[ 1857.649922][T25108] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cc 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 89 74 ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[ 1857.669564][T25108] RSP: 0018:ffffc90004fe7250 EFLAGS: 00010287
[ 1857.675669][T25108] RAX: ffffffff8205d907 RBX: 0000000000000000 RCX: 0000000000080000
[ 1857.683669][T25108] RDX: ffffc900112a7000 RSI: 000000000001eb05 RDI: 000000000001eb06
[ 1857.691672][T25108] RBP: 0000000000000000 R08: ffffea0000e9e507 R09: 1ffffd40001d3ca0
[ 1857.699668][T25108] R10: dffffc0000000000 R11: fffff940001d3ca1 R12: ffffea0000e9e530
[ 1857.707657][T25108] R13: dffffc0000000000 R14: ffff888031dec600 R15: 0000000000000002
[ 1857.715655][T25108]  ? folio_memcg+0x1a7/0x310
[ 1857.720285][T25108]  workingset_activation+0x5f/0x4a0
[ 1857.725510][T25108]  ? folio_mark_accessed+0x341/0x4a0
[ 1857.730822][T25108]  folio_mark_accessed+0x3b5/0x4a0
[ 1857.735961][T25108]  kvm_release_page_dirty+0xa2/0xf0
[ 1857.741189][T25108]  kvm_tdp_page_fault+0x2dd/0x370
[ 1857.746334][T25108]  kvm_mmu_do_page_fault+0x2c5/0x640
[ 1857.751656][T25108]  ? vmx_vcpu_run+0xd8b/0x25d0
[ 1857.756470][T25108]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[ 1857.762345][T25108]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[ 1857.767931][T25108]  ? __pfx_current_save_fsgs+0x10/0x10
[ 1857.773425][T25108]  kvm_mmu_page_fault+0x22f/0xb70
[ 1857.778489][T25108]  ? __pfx_handle_ept_violation+0x10/0x10
[ 1857.784215][T25108]  vmx_handle_exit+0x1093/0x18a0
[ 1857.789165][T25108]  ? vcpu_run+0x361c/0x6f70
[ 1857.793674][T25108]  ? rcu_is_watching+0x15/0xb0
[ 1857.798457][T25108]  vcpu_run+0x432e/0x6f70
[ 1857.802811][T25108]  ? vcpu_run+0x361c/0x6f70
[ 1857.807359][T25108]  ? __pfx_vcpu_run+0x10/0x10
[ 1857.812043][T25108]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 1857.817791][T25108]  ? rcu_is_watching+0x15/0xb0
[ 1857.822594][T25108]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[ 1857.828156][T25108]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 1857.833883][T25108]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1857.839877][T25108]  ? rcu_is_watching+0x15/0xb0
[ 1857.844651][T25108]  ? look_up_lock_class+0x74/0x170
[ 1857.849772][T25108]  ? register_lock_class+0x51/0x320
[ 1857.854983][T25108]  ? __lock_acquire+0xab9/0xd20
[ 1857.859857][T25108]  kvm_vcpu_ioctl+0x95c/0xe90
[ 1857.864545][T25108]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1857.869757][T25108]  ? __lock_acquire+0xab9/0xd20
[ 1857.874618][T25108]  ? __asan_memset+0x22/0x50
[ 1857.879207][T25108]  ? smack_file_ioctl+0x302/0x340
[ 1857.884233][T25108]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1857.889615][T25108]  ? __fget_files+0x2a/0x420
[ 1857.894212][T25108]  ? __fget_files+0x3a0/0x420
[ 1857.898898][T25108]  ? __fget_files+0x2a/0x420
[ 1857.903495][T25108]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1857.908441][T25108]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1857.913658][T25108]  __se_sys_ioctl+0xfc/0x170
[ 1857.918259][T25108]  do_syscall_64+0xfa/0x3b0
[ 1857.922774][T25108]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1857.927990][T25108]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1857.934073][T25108]  ? clear_bhb_loop+0x60/0xb0
[ 1857.938778][T25108]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1857.944675][T25108] RIP: 0033:0x7f74a278e929
[ 1857.949101][T25108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1857.968743][T25108] RSP: 002b:00007f74a05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1857.977200][T25108] RAX: ffffffffffffffda RBX: 00007f74a29b5fa0 RCX: 00007f74a278e929
[ 1857.985195][T25108] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c
[ 1857.993183][T25108] RBP: 00007f74a2810b39 R08: 0000000000000000 R09: 0000000000000000
[ 1858.001173][T25108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1858.009154][T25108] R13: 0000000000000000 R14: 00007f74a29b5fa0 R15: 00007fff97b3c268
[ 1858.017146][T25108]  </TASK>
[ 1858.020531][T25108] Kernel Offset: disabled
[ 1858.024876][T25108] Rebooting in 86400 seconds..