last executing test programs:

8m12.842108127s ago: executing program 4 (id=552):
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x4600, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

8m12.062204438s ago: executing program 4 (id=555):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
sendmmsg$inet(r1, 0x0, 0x0, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
open(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r3)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'dummy0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
open(0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x11, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="915f9febe000180000000000000089000000890000000800000000000000090000060400000009000000030000000a000000070000000b000000000000000d000000ffff000008000000020000000b00000001000000090000000700000000000000010000000b00000001000000070000000100000f01000000010000000300000000000000e0050000000000000a0500000007000000000000010000005f6c3030005f00"/174], &(0x7f0000000240)=""/108, 0xac, 0x6c, 0x1, 0xe}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @cgroup_skb}, 0x94)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x5, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x4d3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

8m11.216605273s ago: executing program 4 (id=558):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = epoll_create(0x752)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x20000008})
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000002c0)=0x1, 0x4)

8m10.972466942s ago: executing program 4 (id=561):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000dc0), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000e00)={0x1, 0x5})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10)
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @remote, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev={0xac, 0x14, 0x14, 0xa}}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xd000, 0x11, 0x0, 0x27)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
io_uring_enter(r5, 0x2109, 0x6b54, 0x11, &(0x7f0000000040)={[0x200]}, 0x8)

8m10.74302047s ago: executing program 4 (id=562):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_emit_ethernet(0x5e, &(0x7f0000000900)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "511800", 0x28, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local}}}}}}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000200004000000000060000000000000002000040"])
close_range(r3, r0, 0x2)

8m10.450083963s ago: executing program 4 (id=565):
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

8m9.932419419s ago: executing program 32 (id=565):
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

43.941164706s ago: executing program 2 (id=2299):
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, 0x0)
bind$l2tp(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x5, 0xe, '\x00', 0x200})
ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000280)={0xf0003, 0x0, [0x800, 0x10000ff, 0xfffffffffffffff7, 0x5, 0x10004, 0x46a9, 0x9, 0x8]})
io_uring_enter(0xffffffffffffffff, 0x54, 0x4, 0xf, 0x0, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)

42.18758073s ago: executing program 2 (id=2304):
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_tables_targets\x00')
pread64(r0, &(0x7f00000000c0)=""/70, 0x46, 0x5)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000054, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup3(r5, r6, 0x0)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x30, r7, 0x10000000)
syz_io_uring_submit(0x0, r8, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x20, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x14, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
mount$nfs(0x0, 0x0, 0x0, 0x3089469, 0x0)
mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0)

40.698916105s ago: executing program 2 (id=2311):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xa, &(0x7f0000000040)={0x4, 0x1d9}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})

37.836881322s ago: executing program 2 (id=2320):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2860014, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) (async)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0}, 0x18)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_COMMENT={0xe, 0x1a, '%-}/%/^*%\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4) (async)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r4, 0x0, 0x0) (async)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)

37.520275032s ago: executing program 2 (id=2321):
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x4)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000800)={'sit0\x00', 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="060000000400"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x6b0, 0xd0, 0x438, 0xd0, 0x0, 0x300, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [0x0, 0x0, 0x0, 0x4000], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0xfe}, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x438}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'tunl0\x00', {}, 'bond_slave_0\x00', {}, 0xe}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x710)
r4 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x1c7)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=0x0], 0x14}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x7)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000007780), 0x0, 0x60, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c040)

37.204041126s ago: executing program 2 (id=2322):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000000))
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0))
r1 = openat$cgroup_devices(r0, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0)
fcntl$notify(r1, 0x402, 0x8)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10)
syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000340)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6}, @broadcast, @device_a, @from_mac=@broadcast, {0xf, 0x4}}, 0x800, 0x53, @default, @void, @void, [{0xdd, 0x7, "d99a6328b1f679"}, {0xdd, 0x2d, "4d2c62b5dfb655dcc39a8f26745f6a50170a7b19d3187ec6a7d80ac3cb47d6f3c542de590e917264f1c784f6dc"}, {0xdd, 0x30, "61c37c0baf617daaaec67b6395d3633e849b7fe8d67d175342e6668c54506ce2579d6e32ac182295149cba6a4d520a40"}, {0xdd, 0xe8, "31a4e48527bf7a4147aa04a610490857c8f6ab90e1fc9eb1a6f75e3798dccd9582349b32d854d1ebabfaf6a930a68d43950b2c686d7f2adb6250c82719cebaa51b2b2b0a5b24721aa32cefc03ad4ab24204c245515c1c67819832f89effed9ffd4f030cc8d848ddcc279816828ba4f1b531da96048a45c1f5de986b5e162f649e199f6f2247ed935ee1e5a55f2671e8a5de520c04ead390c2a74a383fc4a837b115467d3d1d533c722c9ef1e36957be53b216d81d8ce0046ea3c322f5cb6602b0e680cf7e7cd90194ec717f982314f93864d27bd38cdc4099b13d8e11c30a2c9af19dc5913bcf36a"}]}, 0x172)
utimensat(r0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={{0x77359400}, {0x77359400}}, 0x0)
write$6lowpan_control(r0, &(0x7f0000000540)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)
write$cgroup_devices(r1, &(0x7f0000000580)={'b', ' *:* ', 'wm\x00'}, 0x9)
syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000600)=@ctrl_frame=@cts={{}, {0x1}, @broadcast}, 0xa)
shutdown(r0, 0x1)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000000640)={0xa8, 0x0, 0x3})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/custom1\x00', 0x1802, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046305, 0x1}], 0x2c, 0x0, &(0x7f0000000740)="2b9657fc23ef1822e4bb39e2b4d0c4434ac4b4c3a0db99268abf66a47945b9366d48365d65e359c6b11810b5"})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000007c0)={<r3=>r1, 0x7fffffffffffffff, 0xe93, 0x1})
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000800)={<r4=>0x0}, &(0x7f0000000840)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000880)={r4, @in6={{0xa, 0x4e24, 0x7f, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}, 0xffff, 0x6, 0x6, 0x3, 0x6, 0x4, 0x2}, 0x9c)
fcntl$setflags(r1, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r5=>r0, {0x1}}, './file0\x00'})
connect$unix(r5, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000a00)=0x1)
syz_io_uring_setup(0x59c6, &(0x7f0000000a40)={0x0, 0xe62f, 0x1000, 0x0, 0x2ba}, &(0x7f0000000ac0)=<r6=>0x0, &(0x7f0000000b00))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x0, &(0x7f0000000b40)=0x8, 0x0, 0x4)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000b80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000dc0)={r4, @in6={{0xa, 0x4e23, 0x8, @remote, 0x10}}, 0xf77, 0x40, 0x7, 0x3, 0x9, 0x0, 0x80}, 0x9c)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000e80)={'bridge0\x00', 0x200})
sendto$l2tp6(r5, &(0x7f0000000ec0)="4d0cee98c34cf00391b3d3f0285d741fe5fca4d774aed28ee525a9ee987f502022aae5a6bdc2e6ca8bb9cddea913bb11d5fa23dd4fbbc8d78835a50c334fd65e7b1d87865630c880ee9ffe0864516e3f028aeb69f0532b39a4e867e82cd9773a103ce584c1350460004aafcc980e460fd6a60f35b6", 0x75, 0x24041, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000001040)={0xfffffffffffffff8, 0x0, 0x0, 0xc0c0c0c0})

36.648645391s ago: executing program 33 (id=2322):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000000))
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0))
r1 = openat$cgroup_devices(r0, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0)
fcntl$notify(r1, 0x402, 0x8)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @empty}, 0x10)
syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000340)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6}, @broadcast, @device_a, @from_mac=@broadcast, {0xf, 0x4}}, 0x800, 0x53, @default, @void, @void, [{0xdd, 0x7, "d99a6328b1f679"}, {0xdd, 0x2d, "4d2c62b5dfb655dcc39a8f26745f6a50170a7b19d3187ec6a7d80ac3cb47d6f3c542de590e917264f1c784f6dc"}, {0xdd, 0x30, "61c37c0baf617daaaec67b6395d3633e849b7fe8d67d175342e6668c54506ce2579d6e32ac182295149cba6a4d520a40"}, {0xdd, 0xe8, "31a4e48527bf7a4147aa04a610490857c8f6ab90e1fc9eb1a6f75e3798dccd9582349b32d854d1ebabfaf6a930a68d43950b2c686d7f2adb6250c82719cebaa51b2b2b0a5b24721aa32cefc03ad4ab24204c245515c1c67819832f89effed9ffd4f030cc8d848ddcc279816828ba4f1b531da96048a45c1f5de986b5e162f649e199f6f2247ed935ee1e5a55f2671e8a5de520c04ead390c2a74a383fc4a837b115467d3d1d533c722c9ef1e36957be53b216d81d8ce0046ea3c322f5cb6602b0e680cf7e7cd90194ec717f982314f93864d27bd38cdc4099b13d8e11c30a2c9af19dc5913bcf36a"}]}, 0x172)
utimensat(r0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={{0x77359400}, {0x77359400}}, 0x0)
write$6lowpan_control(r0, &(0x7f0000000540)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)
write$cgroup_devices(r1, &(0x7f0000000580)={'b', ' *:* ', 'wm\x00'}, 0x9)
syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000600)=@ctrl_frame=@cts={{}, {0x1}, @broadcast}, 0xa)
shutdown(r0, 0x1)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r0, 0x4068aea3, &(0x7f0000000640)={0xa8, 0x0, 0x3})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/custom1\x00', 0x1802, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000700)=[@acquire={0x40046305, 0x1}], 0x2c, 0x0, &(0x7f0000000740)="2b9657fc23ef1822e4bb39e2b4d0c4434ac4b4c3a0db99268abf66a47945b9366d48365d65e359c6b11810b5"})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000007c0)={<r3=>r1, 0x7fffffffffffffff, 0xe93, 0x1})
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000800)={<r4=>0x0}, &(0x7f0000000840)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000880)={r4, @in6={{0xa, 0x4e24, 0x7f, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}, 0xffff, 0x6, 0x6, 0x3, 0x6, 0x4, 0x2}, 0x9c)
fcntl$setflags(r1, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r5=>r0, {0x1}}, './file0\x00'})
connect$unix(r5, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000a00)=0x1)
syz_io_uring_setup(0x59c6, &(0x7f0000000a40)={0x0, 0xe62f, 0x1000, 0x0, 0x2ba}, &(0x7f0000000ac0)=<r6=>0x0, &(0x7f0000000b00))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x0, &(0x7f0000000b40)=0x8, 0x0, 0x4)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000b80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000dc0)={r4, @in6={{0xa, 0x4e23, 0x8, @remote, 0x10}}, 0xf77, 0x40, 0x7, 0x3, 0x9, 0x0, 0x80}, 0x9c)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000e80)={'bridge0\x00', 0x200})
sendto$l2tp6(r5, &(0x7f0000000ec0)="4d0cee98c34cf00391b3d3f0285d741fe5fca4d774aed28ee525a9ee987f502022aae5a6bdc2e6ca8bb9cddea913bb11d5fa23dd4fbbc8d78835a50c334fd65e7b1d87865630c880ee9ffe0864516e3f028aeb69f0532b39a4e867e82cd9773a103ce584c1350460004aafcc980e460fd6a60f35b6", 0x75, 0x24041, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000001040)={0xfffffffffffffff8, 0x0, 0x0, 0xc0c0c0c0})

14.344698376s ago: executing program 3 (id=2416):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_procfs$pagemap(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0x25, 0x0, 'client0\x00', 0x0, "fca77e7fbadd83c4", "fd6581ac4b8a5d32a2763732acee190e65e0f6d112d11261c517ef5eca53c5ee", 0x9, 0xfffffffa})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000200), &(0x7f00000003c0)=r3}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20)
syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0), 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

14.083776555s ago: executing program 3 (id=2418):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_getroute={0xdc, 0x1a, 0x2, 0x70bd29, 0x25dfdbfb, {0x1c, 0x80, 0x0, 0x10, 0xfe, 0x3, 0xc8, 0x3, 0x3700}, [@RTA_VIA={0x14, 0x12, {0x1f, "aebe677eb6520578b26f06a7cd3e"}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x0, 0xfb, r2}}, @RTA_NEWDST={0x84, 0x13, [{0x81}, {0x1, 0x0, 0x1}, {}, {0x56ff}, {0xe4bb}, {0x6}, {0xa8}, {0x2, 0x0, 0x1}, {0xf}, {0x5}, {0x5}, {0x3ff, 0x0, 0x1}, {0x9}, {0x71a}, {0x1}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5f46, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x4}, {0x40d, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xdc79, 0x0, 0x1}, {0x9}, {0x543, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xf4b}, {0x7}, {0x9, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x20, 0x2, r2}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_DST={0x8, 0x1, {0x3}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000491}, 0x40040d4)

13.89635745s ago: executing program 3 (id=2420):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', <r1=>0x0})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000fd0400000003000000000000000000000000000000000000006077cb46e78774100072bea81e317e"], 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c2c2500000000002020207b1af8ff00000000bfa1000000000000070100006a0b0000b702000008000000b70300000300000085000000060067699e627d262aa2000085000000000000005f4586d4eee2cb731af533354c6789f41959ae69a049712b122b584e4d5b6a15122cc08e6095186c55cfd6f56c2dc83a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c2c2500000000002020207b1af8ff00000000bfa1000000000000070100006a0b0000b702000008000000b70300000300000085000000060067699e627d262aa2000085000000000000005f4586d4eee2cb731af533354c6789f41959ae69a049712b122b584e4d5b6a15122cc08e6095186c55cfd6f56c2dc83a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='svcrdma_decode_wseg\x00', r4, 0x0, 0x1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@delneigh={0x1c, 0x1d, 0x10, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r5, 0x10, 0xd8, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@delneigh={0x1c, 0x1d, 0x10, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r5, 0x10, 0xd8, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[], 0x0)
setfsgid(0xee01) (async)
setfsgid(0xee01)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000fc0100000000000000000000000000004e220000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe880000000000000000000000000001020000000000000000000000000000000000000000000000000000000000000000000000008c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000affffff00000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020000000000000000000ac1e00010000000000000000000000001c000400"/287], 0x170}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
dup2(r8, 0xffffffffffffffff)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000100))

13.724538738s ago: executing program 1 (id=2421):
syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfdff, 0x0, 0x0, 0x0, @rand_addr, @multicast2}}}}}}, 0x0)

13.248469517s ago: executing program 1 (id=2422):
r0 = userfaultfd(0x80001)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000340)=@raw=[@alu={0x7, 0x0, 0x6, 0x0, 0x4, 0x4, 0xfffffffffffffff0}], &(0x7f0000000380)='GPL\x00', 0x1, 0xb7, &(0x7f00000003c0)=""/183, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x6}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x20001000}, 0x0, 0x0}}], 0x58}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@generic={0x1, 0x8, 0x4, 0x1, 0x8}, @ldst={0x0, 0x0, 0x2, 0x9, 0x0, 0x4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0xc5, &(0x7f00000001c0)=""/197, 0x41000, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x23007, r1, 0x0, &(0x7f0000000740)=[r4, r5, r6, r7, 0xffffffffffffffff], &(0x7f0000000780), 0x10, 0x40}, 0x94)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000029c000/0x4000)=nil, 0x4000}, 0x41})
syz_usb_connect(0x0, 0x46, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc5, 0x66, 0x73, 0x40, 0x45e, 0x467, 0x6d1a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd7, 0x4, 0x2, 0x8f, 0x64, 0x88, 0x0, [], [{{0x9, 0x5, 0xa, 0xc, 0x40, 0x81, 0xf, 0x8, [@generic={0x8, 0xb, "85e9aec2fa7b"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x5, 0x60, 0x7, [@generic={0x8, 0xb, "8247f09fdcb7"}]}}]}}]}}]}}, 0x0)

13.24763284s ago: executing program 3 (id=2423):
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x36, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x4600, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xa1c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xd289cef9034efd5e, 0x0, 0x2}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8f}]}}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x100000001}, @NFTA_SET_EXPR={0x9c8, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x9b4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DATA={0x1a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "aa02226944eef7a7388dc6eed8502daf93d46b4933bba00dc4547e5a5f5531958a0813b610d57eee7d2f90ecfcdbc31f55b0b877539f003f9a638f0f2768a3fea7df6bd857bef9e7b8b49868a5d22639a542abdc3ccb0ee7f58674ce87bd08d2a5b524dbf53ce5abbf8bff84c7ba4eb834f2b452d60de24986532d8e4023ffef394679883ac18b8975f76ba35d5bf5d9274362a5e3094687edc11b9a4bba8b5bfd9be2369d59edd42e38704af626495a27c98dd3ad75e1cc6b9e8ba919510a352081b616a85ee430892e4c149d11c6deb81a0d6d49815a7682dacf561df3139734b56148ce85f6174a"}, @NFTA_DATA_VALUE={0x21, 0x1, "23dbcee833885ba9e31ddea371c6b13a1b5b68fa426b8965334ee7a8ac"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x28c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "1864914d1b1a32b77aa590baec26c0712c266ba034b64763d47d1b0105df5da1c56063b6ae549c4a33d30db60abf981c25aef62e8455dfa5a0dabcef10b2eb7c98234a4b1d27a21a5a88c58413a4c493b5f63218329d4e24b2b178bdb60f5a31f98c775fb3c632ad893af4"}, @NFTA_DATA_VALUE={0xc0, 0x1, "2648861169fb16188e4aa4f3315d14e3c608f8ead2c46433567b8f8653d210526345c5a22a2e181a26dbdb1b8f8a1c06f756a39489addefcd25a8744bd85471c15e7d84acf2cc41fc7bc3e8adc610f5372f5336187cad70a7f77827b401bff30d82e3eae011d3db952c2ba076805a24f0d3296bf3f9039206ab72f00ae5bc2077acf36a9d9e83bb13a6c2967120ef4f86d7a171f94cca0835363899fa3a16fa5bda63d2958e6419e702c048873e4c944d1db907b2af22c0e94091b85"}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "0e71af24306553bc7554d1a840e1c53fd71de557c21ab0fef90b6fbf63787de11ab55891f76dae65ead6e87816690ec204fcdc1de02a6b4c8e0f8b86777cb7a352e17c24d46ebb4abd0dafe8cce8a5ee48533d7e752203a711e87bfc6a2488203b5fe6843d46390ad73b7bd6e70964bdf3fff713893fe0cc547025e6c97721759ec60474afda1d34b4f92d66f3c7da0a4a365de0b4ada8ba9b84b4bfcbd82bd96143f602872f"}]}, @NFTA_IMMEDIATE_DATA={0x350, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x82, 0x1, "5d5bb01a204dd0f6dcd92645e70d82c823b7ac8e32023608dfd18b765b53c6cb9633cbba14e2efc8654efb04efd70459cfac6fe787abe33f3e72ac5bef0a2c547c5f68ba0392cc49a50cdb473de7fe3d074fafa7a13b44f0aa38fcddda9f4a435d9562d6a8220acccf85cb34b741790509cb6f91b617ec349bce2be6abfe"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xcd, 0x1, "610f745cbaf29f6120dde9bd425acd80fa964ab049d7d9482ab6e0238b3a78f5323a50cfa947659730981152fdd2ef6723064bf984c3e7384ace49dc3cc544bdd6029300c25b0d6f6f56bef7b6cf77bc04bec77295249dba9c7d73255e9a4ada6f7d4a6cdca869f746bb3a9a0ed4b34a7ea73cf4597923ef8b3e15aed0c5c64afddf037daaed74974b7ee4ec2436daaf64561cbb378baaeca9155d51ebcff1bec24160c32f68bd6311a8f55806df88bb4d41290ec2f02f22d67e0b505fc1eb6ae78e7e8c2a263a5786"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "1214dcd9cc32d96cdd672035c62de8e83cc6a5a8a097e647c864026350cb7da52afc9e6cbf2babf06a97a66262575d4cf45401cea252d45794108f33178748f91b73fa5e6e9acfb16138579e41c221dbb62dfe4c506b98f6e7d2769b08b1f3e0d82c83bc53324ca269651814a6ed8858e59f4e14ee91e4f3b1e0c3bb4a349acebbed76fe30b49ec672487a6bc4c4be5d871fe349fe5d997d15f60661c3fddf24143139efec85d7529cdd385c36054e9e77ef097ecaec7223dc80203168227ebdd5703a1fa38675cb0937b281dd1e471b01aecb5c2002137ecc49a931b3fbb61a7e24fa288a3a74db71820235ba834d0654a226b05a"}, @NFTA_DATA_VALUE={0xc8, 0x1, "8e164488b103cd0f4e75fdb367a4b811bbff18a87ab016a6a922713eb5b41b4e1e72ce7c9790dd01e9994bcfe224a2034ca7ae61df7cd31fa8398fb1762422d91f676c22ccdeab6ced023e21ff3e400f1e7d2d53ba195d869bf5b6859af0809950330a23314f13e8f1ecb18b76dfa414d16889ab892b89765a969b5c03828df0528c9c1fc2a9b449957986c27d0503dd95abb257a01ab4713ae669ff6d0f4e8540b0819ac0f087e13f576dcdef3c0cacd6d87f019dec87c65e8da72255c6c23bd2a71075"}]}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DATA={0x21c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbb, 0x1, "077748281c261e7f58b8d0b74e9262b96de00c62600d36395b85d276e38a39c36ed22778468f6617d28f6ebea1adf4d008a416d292c9da118fff7d98d33273f418d3a76aff36f83d40cce37af8a1516307261de0be6d8f825f5b8de846f7919391f167e248f0233c65495f3c02c363aedf4efba988683048e12a2fbd87e906cdebaa668f2366cef53652cdce23630211b6607d1bf25ff7f5bc8988d2f953dae208659ce62ed686caf63585418cc69a29ef53aae9e91417"}, @NFTA_DATA_VALUE={0xe2, 0x1, "568d9436f51df4ab73141413e0d4b51a61a567edc602d15d51edefd432aaef63b4c1b3a8b588cc60d9ca6f441a91da4a8bbadfd6e2c02f695a6c36f7bb43ccb6e40e2133da2a7f805c1270c9f968e15983fd5b23cb3c0685a34602c856166a356388691b30ddeb87743e7029480aaac97f67711fa4d87516bd7f70959d7be0e17d2e150270c6948f673a15313386f363dc692576f5f2ef8601e5c39961cff7f8c4eafa95ba22d3fb3d9189aaea9502c4b87a94c94c74b5e99c9349edbfd9653b7bc4273cf692845a8c353f965728e3252ba11889ebc20e09d37c759e59c3"}, @NFTA_DATA_VALUE={0x33, 0x1, "282ff9b3823df8df55d457b41ef6de2eb013fec5aaa9a6722fc537b8b1e8744957bfcdb6c7bf8398852a094c1c979c"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa70}, 0x1, 0x0, 0x0, 0x81}, 0x4004004)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001100)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}})
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

12.18062293s ago: executing program 1 (id=2424):
openat$audio1(0xffffffffffffff9c, 0x0, 0x282a2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
gettid()
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0)

12.169481161s ago: executing program 3 (id=2425):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r0 = epoll_create(0x7)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x20, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0)
io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setresuid(0xee01, 0x0, 0x0)
faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000240)=0x10000, 0x12)
r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0)
futex(&(0x7f0000000000), 0x88, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')

11.99722281s ago: executing program 1 (id=2426):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
open(0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r3)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="915f9febe000180000000000000089000000890000000800000000000000090000060400000009000000030000000a000000070000000b000000000000000d000000ffff000008000000020000000b00000001000000090000000700000000000000010000000b00000001000000070000000100000f01000000010000000300000000000000e0050000000000000a0500000007000000000000010000005f6c3030005f00"/174], &(0x7f0000000240)=""/108, 0xac, 0x6c, 0x1, 0xe}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @cgroup_skb}, 0x94)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x5, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x4d3, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

11.854088528s ago: executing program 3 (id=2428):
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_tables_targets\x00')
pread64(r0, &(0x7f00000000c0)=""/70, 0x46, 0x5)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000054, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x30, r5, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x20, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x14, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
mount$nfs(0x0, 0x0, 0x0, 0x3089469, 0x0)
mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0)

11.621932773s ago: executing program 1 (id=2430):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast1, @loopback, 0x0, 0x14}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x15, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20080000}, 0xc0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
setfsgid(r3)
setresgid(r3, r3, r3)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4)
fchown(r1, r2, r3)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000380)={'veth1\x00', 0xc})
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f00000003c0)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x10})
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000400)={<r5=>0x0, 0x3}, &(0x7f0000000440)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=r5, 0x4)
r6 = accept4$llc(r4, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000500)=0x10, 0x800)
sendmsg(r6, &(0x7f0000000780)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="e9065b80346a63c857f637dc15de3d4ac19f624336c4de67b5f57cf8bc33f6f408c17cd75e0faa7fdfcd14b10ab3c75a4c7f27048bfe20b1405da7b0dd78ac7e4d8e73665a638fc6c82486363f1ac20c7c3863465170b029fe", 0x59}, {&(0x7f0000000640)="981c379111183a225f2811058c979f77c74b0ee739d10314e43dbeecf0d366940420be1fa144700c14a983bec08b273a4fe6c63a5e18da4653cf805715e503685559ba7462ed7c4248919bf89e4d07565714c8ad069861a04abf9e6ee0aa5906f19e06b741c55385d1a6ef7f135ac2393ad0c2d84febd94e9e8ebf0c5a25b1e1658c22748d0c305984d3ce16ba82ddb18f97", 0x92}, {&(0x7f0000000700)="13f78346e69392a9eca608d53d31ca203a9fbd99f7c8af593a91dcff9ba7bf521036a78720d58b1ede076bedb6af55051ae40a18aae638ed5ac9317f2242", 0x3e}], 0x3}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000007c0), &(0x7f0000000800)=0x4)
ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000840))
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000880)=@assoc_value={r5, 0xffffff7f}, 0x8)
r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000008c0), 0x100, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000a, 0x1010, r7, 0x319db000)
syz_usb_connect(0x5, 0x220, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0xbf, 0x6, 0xad, 0x40, 0x1690, 0x764, 0xcb58, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20e, 0x1, 0x3, 0x40, 0x0, 0x4, [{{0x9, 0x4, 0xa9, 0x3, 0x7, 0x5e, 0x33, 0x1e, 0x7, [], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0x3, 0x2, 0x3}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0xc, 0x48, 0x5, [@generic={0x5b, 0xc, "1495a18dc485be212a9840ecd3d6d0211f783a217fcba49c02528c6728298e35efb785bbd74aac8fe6c888fec78c931bb6b975a396737b9c6bed4613f7650061905a6c5f639fd2e88445792c71ea00a3c11cb65ff47e34f4f9"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x7af, 0x2, 0x29, 0xf9, [@generic={0xbd, 0x7, "a2c536bca8a280d4eb92646b6f468fd32685d2f98a46e0b6d45db0fb384996444c8536f12b585082bbdae66d2128e249c4b886ce69ded68082906049090f711cac0589c48e2d0bd3820aa319cb42bbe6007b2bc27280c6d46969f71f4a34669f039bea9c991e908b5a913b3b42d37af864ed259612b2e55879dcaf5f0cbfb9584d46f887b286ab9bafaf8cfcfd20d520a321ab0740c48749caf9eb422fd5cc5c1aa7b3339bf0f3ea3fc4d112383662b6f66c32f6dd602b012bb174"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x1, 0x7, 0x6}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x6, 0xc, 0x0, [@generic={0x60, 0x5, "9c072487f1eda9519bbea72a012b78e8c6428905a1bbe980b930b12cb609b338de638aaf1c5f355ae54b048cce2912e81c4811f5b793ffbcd9e0cd39c4fa301426893f2352a4f127f200d4fdf4ae4f4226883888661c92282b878c1fb457"}, @uac_iso={0x7, 0x25, 0x1, 0x5, 0x4, 0x58c}]}}, {{0x9, 0x5, 0xf, 0x1e, 0x0, 0x87, 0x6, 0x0, [@generic={0x4, 0xc, "6b86"}, @generic={0x3a, 0x23, "602681d2e6411b3c81c946aa0b7302b9c6b170950012b090eeda1c7111e4cc9a4bd609aa6591990ae7a2e664e765f34c12620d26120747d4"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x3, 0x10, 0x8}}]}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x51, 0x2, 0xf, 0x8, 0x8, 0xb}, 0x5, &(0x7f0000000b80)={0x5, 0xf, 0x5}, 0x7, [{0x57, &(0x7f0000000bc0)=@string={0x57, 0x3, "b2c9128fabf42afebe22c535a8ff721f841fc7cf0f5f8b3af35318ef38d14248625bc5a60f15e08138815d981de076a415c4c77856519e2b7ada85915b4c7da70131a97b72c5c0af86d2fbfd449e175df46503c9e1"}}, {0x66, &(0x7f0000000c40)=@string={0x66, 0x3, "b0547f20e9539fa9ee084fcf6f2286fad4ffb6acedd49b62c4a66139802aa75f585cf0cc7c9576107d55ba6afed7e662cef8bd7f7b49d7d307cb3bb23c2b92a926296eaebe45fda43dfcde63617c7fcfff8193bc329f2a4875ff121c70e18e2c21ca1c8d"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1629}}, {0xca, &(0x7f0000000d00)=@string={0xca, 0x3, "eab2d91583723c16371907d0d9423e69da31ca6ca026672d6139f13cd465fb4251be2763ca14971edb4341a253cab761594268307b2ab1d8d235f9ccb9a8a27f665a2b28293758a5339a0fa79a28aefd3b3c5d11717444e1ee210b9715383d3778ea193a9f45d9ed029675f0d06b017891304971565073d004ab4d27cc19fa2684d1becbb47ee5902e965083bbd279cac169d24ae0fb22bf9d4bd1fe54c5c732b980db447aebd6cc7fd42c8c465ae52556076c6435e212266964670d44b79c998c10d1c7825ef94f"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x480a}}]})
ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000f40)={0xc00000, 0xf7a0fc0, 0x10001, 0x0, 0xf1, "11310a37c53c23aa84445d0be5a33469e3105c", 0x7, 0x81})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000f80)={0x1, 0x0, [{0x3fd, 0x0, 0xfffffffffffffffd}]})
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000fc0), 0x10000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000001000)={{0x1, 0x1, 0x18}, './file0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

10.632801243s ago: executing program 1 (id=2433):
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
socket$kcm(0x29, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_open_dev$dri(0x0, 0x8, 0x200000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00'])
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x8, [@enum64={0xe, 0x5, 0x0, 0x13, 0x1, 0x1, [{0x10, 0x0, 0x4}, {0xb}, {0xf, 0xb3d8, 0x6}, {0xf, 0xa6f, 0xffffffff}, {0xb, 0x0, 0x9}]}, @var={0x8, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x61, 0x61, 0x5f, 0x2e, 0x5f, 0x61]}}, &(0x7f0000000180)=""/45, 0x78, 0x2d, 0x0, 0x400}, 0x28)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, 0x0, r4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$read(0xb, 0x0, 0x0, 0x0)
mkdir(0x0, 0x12)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x803, 0x0)

9.883451593s ago: executing program 6 (id=2324):
socket(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe9e}, 0x94)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
shutdown(r0, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

7.262258144s ago: executing program 6 (id=2450):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r1 = socket(0x6, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250003000000002020c31af8ffa1000000bfa10000000000000701000000feffffb702000008000000b70300000000000085000000ca0000009500000000000000", @ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2)
write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r5 = syz_io_uring_setup(0x230, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000100)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x1, 0x0, 0x1})
io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f00000079c0)={0x2020}, 0x2020)
munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
connect$netrom(r3, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB='\x00\x00\x00', @ANYRESHEX=0x0, @ANYRESOCT])
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$alg(0x26, 0x5, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b200090584000000000000090507"], 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000020109040000000000000000021f"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

6.555758694s ago: executing program 0 (id=2452):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = add_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
syz_open_dev$radio(0x0, 0x2, 0x2)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x22000)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', '', [{}, {}, {}, {0x20, '#! '}, {0x20, '127.0.0.1\x00'}, {0x20, '[%!'}, {0x20, '127.0.0.1\x00'}, {0x20, '\'\x00\x00'}, {0x20, '[\''}], 0xa, "9799ffca66d73151faf8de69698981faca34b1c9afbfc2d3ab8c23e0fd5ed5952fe57f6e250d6d1163046bbe224154fb9951dde67a56bf5f5a310710d3b7728ad5826bff0007160b4130b7a6d88f4756d9fa025224076a36d7739818cb2f625c16eead3b03475242895a2adf731d60868f83f8ebca8779c8af6d0768e10afe1f69c070bc72b6e9613f48f65ed7d305799b8b02eac13c757ef0693c2f2b686dfcf87844f8300b2d6802a9313ead27bc33dc9980cdd722a6f5"}, 0xe4)
r5 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$reject(0x13, r5, 0x4, 0x8000000000000000, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$dri(0x0, 0x4, 0x10000)
r6 = socket$kcm(0x2b, 0x1, 0x0)
listen(r6, 0x6)
setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24)
socket$inet_mptcp(0x2, 0x1, 0x106)
close(r6)

5.636311326s ago: executing program 0 (id=2453):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000003af3850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18)
syz_pidfd_open(r0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0xa, 0x3, 0x3a)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r6=>0x0})
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r6}, 0xc)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r9=>0x0})
bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r9, 0x1, {0x1, 0xff, 0x4}}, 0x18)
syz_emit_ethernet(0x82, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa62f200ada46208004502007400650000810190780a010101ac1414bb040090780000000046010003ea6400781188000ee000000200000000008640ffffffff0112890000020100000000b753db448c258e051123f1102ca3b5164f26fba9873b17d400125264dea83ace2dd0fcaf5b3dbd950c25000532ced9000000"], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

5.191792362s ago: executing program 5 (id=2454):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x15, 0xe, 0x79, 0x0})
syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0xb3, 0x8, 0x0, 0xe26}, 0x23, [0x29c, 0x9, 0x61, 0xd, 0x40, 0x3, 0x5fc1027d, 0x1, 0x100, 0xe, 0x7, 0x9, 0xffffff00, 0xffffffff, 0x7801, 0x7, 0x6, 0x3ff, 0xffffffff, 0x9, 0x6, 0x7, 0x4, 0x681, 0x3, 0x1, 0x8, 0x1, 0x6, 0x8000, 0x89bd, 0x5, 0x3, 0x4, 0xdc, 0x6, 0x7, 0x18, 0x7, 0x4, 0x6, 0xbb, 0xfff, 0x3ff, 0x6, 0x80000001, 0x2, 0x40, 0x6, 0x2, 0x3, 0x401, 0x8, 0x1, 0x10, 0x1, 0x4, 0x8, 0x9, 0x6b30, 0x1000, 0x40, 0xe, 0x800], [0xac9c, 0x3, 0x4, 0x7, 0x2, 0x10000, 0x9, 0x5, 0x10000, 0x0, 0x9, 0x3, 0x6, 0xf4bb, 0x8001, 0x99, 0xce4a, 0xca, 0x6, 0x5, 0x4, 0x3d7, 0x8, 0x9, 0x9, 0xfe, 0x8, 0x4, 0xd, 0xb7, 0x4, 0x8, 0x6, 0x7, 0x0, 0x2, 0x10001, 0xff, 0x8, 0x800, 0xfffffff9, 0x1, 0x0, 0x7c, 0x7, 0x952, 0x9, 0xf33, 0x6, 0x4, 0x0, 0x7, 0xb4, 0x101, 0x0, 0x2, 0x3, 0x400, 0x200, 0x2, 0x2, 0x7, 0xa60], [0x6cd6, 0x2, 0x7, 0x3, 0x9, 0xc, 0xea, 0x80000001, 0xe2a2, 0x3, 0x0, 0x4, 0x42f, 0x5, 0x1, 0xb2c, 0x2, 0x8, 0x3, 0x80000001, 0x8, 0x7fffffff, 0x80000001, 0xfffffff6, 0x3, 0x7, 0x0, 0x6, 0x1, 0x0, 0x8, 0x9, 0x7fffffff, 0x3, 0x2, 0x8, 0x0, 0x6, 0x10000, 0x7fff, 0x5, 0x4, 0x5, 0x80, 0x1, 0x8, 0xa, 0xc000000, 0xffff, 0x6, 0x8, 0x175c, 0xb, 0x3, 0x8, 0xed01, 0x100, 0x3, 0x10000, 0x8, 0x7, 0x7ff, 0x5], [0x6, 0x2, 0x40, 0x4, 0x5, 0x80000001, 0x6, 0xfffffff6, 0x9, 0x2, 0x2, 0x200, 0xffffffff, 0xfffffff6, 0x8, 0x889f, 0x5, 0xfffffff8, 0x81, 0xff, 0x5, 0x0, 0x6, 0xfffffff9, 0xff, 0x7, 0xfffffffb, 0x1000, 0xf0, 0x8, 0x8, 0xfffffff3, 0x5, 0x6, 0x4, 0x3, 0xe7, 0xb121, 0xc, 0x7fffffff, 0x5, 0x1, 0x3, 0x2, 0x1ff, 0x7, 0x4, 0x4, 0x7ff, 0x7, 0x9, 0x21be, 0x4, 0x101, 0x9, 0x2, 0xfff, 0x7, 0x9, 0x9, 0x7, 0x5, 0x9, 0x8a]}, 0x45c)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
io_uring_setup(0x4f04, &(0x7f00000002c0)={0x0, 0x48c7, 0x400, 0x0, 0xffffffff})
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
fcntl$F_GET_RW_HINT(r2, 0x40b, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000340)="b64424", &(0x7f0000000240)=@udp6=r3, 0x1}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000040000900fffffffffddbdf250200040080000000000000000000000000005c9019ca377441f7cfc91c9cfafc25e90e3f6a415704ce18cef50725af3f9ec0f44f2e31ca329f004c"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x80)
r5 = socket$inet(0x2, 0x2, 0x1)
r6 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}, {0x0, 0x10}], 0x2}, 0x20040051)
sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

4.733381001s ago: executing program 0 (id=2455):
r0 = syz_usb_connect$hid(0x3, 0x9a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000105804195000080000000109022400010000300009040000ff0300b08d0100092100000001224500090581030004020200f54f46c35cffa0becaf83ccdd7df9143eff810927d54cc402f13c21e712c9af4565abea60a4047f75ab50e78adc83a5f47b3d657d273175fa8549c2a005ea20cd317948599a5a90e51ee8f924bd8b358678b78d00bd8f36c5943429a6ae67f29b883d8eb852b75d247d839b2"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
fchdir(0xffffffffffffffff)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x4, 0x53, 0x4, 0x7b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @mcast2={0xff, 0x5}, 0x8, 0x90, 0x7d, 0x6}})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xe, 0xb}, {0x3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x2c}}, 0x0)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x18)
statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2000, 0x1, &(0x7f0000000440))
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYBLOB="dabfed2c9adf72b857476854e73a5d5e11cea8511846cd4a2c08faa081b38669266bc96e09e07fcc52672792d12caef3b75fd14b09a4a03f24a5a82e86606b5979a25328f3074a1ef5a6d11f6ef9cc7e65367510d283adb1e1521737b1d1a73a71eedff4c1ba15eb158af6d6972d095ba2b3b48e1f336aa2a44f20f3dd87c36709631abd20d6d678d60a3d0e60af0b5ff852f88a784ae82c407b00f0f9949fd6d6c3f30343be7c0f537d795e848ecd27a4d2d082c6743aace532c818e55cd13188a302a2bb6c4ca73287951efa214006750b3ba58cb72a0bd3539803192ce2031d0ca5f043", @ANYRESOCT=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="177bda"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x44, r9, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x44}, 0x1, 0xffffffff00000003}, 0x0)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x894a, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x741880, 0x0)

4.441382785s ago: executing program 5 (id=2456):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_procfs$pagemap(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0x25, 0x0, 'client0\x00', 0x0, "fca77e7fbadd83c4", "fd6581ac4b8a5d32a2763732acee190e65e0f6d112d11261c517ef5eca53c5ee", 0x9, 0xfffffffa})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000200), &(0x7f00000003c0)=r3}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20)
syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0), 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.968969868s ago: executing program 6 (id=2457):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}})
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_procfs$pagemap(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20)
syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0), 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.921532222s ago: executing program 5 (id=2458):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00')
syz_emit_ethernet(0x52, &(0x7f0000000140)={@random="cf599d3baed5", @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f200", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2, 0x8}], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1000}}}}}}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe800000000000"], 0x0)

3.734753112s ago: executing program 6 (id=2459):
socket(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe9e}, 0x94)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
shutdown(r0, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

3.717276068s ago: executing program 5 (id=2460):
unshare(0x400)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)

1.948043307s ago: executing program 6 (id=2461):
unshare(0x400)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x2000000, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)

1.612567419s ago: executing program 0 (id=2462):
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = add_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
syz_open_dev$radio(0x0, 0x2, 0x2)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x22000)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', '', [{}, {}, {}, {0x20, '#! '}, {0x20, '127.0.0.1\x00'}, {0x20, '[%!'}, {0x20, '127.0.0.1\x00'}, {0x20, '\'\x00\x00'}, {0x20, '[\''}], 0xa, "9799ffca66d73151faf8de69698981faca34b1c9afbfc2d3ab8c23e0fd5ed5952fe57f6e250d6d1163046bbe224154fb9951dde67a56bf5f5a310710d3b7728ad5826bff0007160b4130b7a6d88f4756d9fa025224076a36d7739818cb2f625c16eead3b03475242895a2adf731d60868f83f8ebca8779c8af6d0768e10afe1f69c070bc72b6e9613f48f65ed7d305799b8b02eac13c757ef0693c2f2b686dfcf87844f8300b2d6802a9313ead27bc33dc9980cdd722a6f5"}, 0xe4)
r5 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$reject(0x13, r5, 0x4, 0x8000000000000000, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$dri(0x0, 0x4, 0x10000)
r6 = socket$kcm(0x2b, 0x1, 0x0)
listen(r6, 0x6)
setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24)
socket$inet_mptcp(0x2, 0x1, 0x106)
close(r6)

684.635859ms ago: executing program 0 (id=2463):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x5, 0x1, 0x7, 0xf, "a42596d582371607"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_mark(0xffffffffffffffff, 0x101, 0x10, 0xffffffffffffffff, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0)
r5 = getpid()
wait4(r5, &(0x7f0000000000), 0x40000000, &(0x7f0000000340))

380.551818ms ago: executing program 0 (id=2464):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000003af3850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18)
syz_pidfd_open(r0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0xa, 0x3, 0x3a)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r6=>0x0})
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r6}, 0xc)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r9=>0x0})
bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r9, 0x1, {0x1, 0xff, 0x4}}, 0x18)
syz_emit_ethernet(0x82, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa62f200ada46208004502007400650000810190780a010101ac1414bb040090780000000046010003ea6400781188000ee000000200000000008640ffffffff0112890000020100000000b753db448c258e051123f1102ca3b5164f26fba9873b17d400125264dea83ace2dd0fcaf5b3dbd950c25000532ced9000000"], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

214.730622ms ago: executing program 5 (id=2465):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x16c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffe}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000001)

0s ago: executing program 5 (id=2466):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x18)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}}, 0x20040880)
sendmmsg$inet6(r3, 0x0, 0x0, 0x4c040)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000fae6ff120101c0"])
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4, 0x4}}, 0x2e)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd701004e5ffff04000000000009000200000008000b0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20)

kernel console output (not intermixed with test programs):

71][ T5908] usb 3-1: Product: syz
[  485.936781][ T5908] usb 3-1: Manufacturer: syz
[  485.941453][ T5908] usb 3-1: SerialNumber: syz
[  486.270093][ T5922] usb 6-1: USB disconnect, device number 39
[  486.277021][ T5922] ftdi_sio 6-1:0.127: device disconnected
[  486.296861][ T5908] usb 3-1: 0:2 : does not exist
[  486.353108][ T5908] usb 3-1: USB disconnect, device number 57
[  486.442578][ T8494] udevd[8494]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  488.755920][T11788] xt_connbytes: Forcing CT accounting to be enabled
[  488.762748][T11788] Cannot find del_set index 1 as target
[  490.393112][T11806] loop6: detected capacity change from 0 to 7
[  490.440756][T11806] Dev loop6: unable to read RDB block 7
[  490.525286][T11811] program syz.5.1475 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  490.545657][T11806]  loop6: unable to read partition table
[  490.551719][T11806] loop6: partition table beyond EOD, truncated
[  490.585733][T11806] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[  490.604926][ T8494] udevd[8494]: symlink '../../loop6' '/dev/disk/by-diskseq/98.tmp-b7:6' failed: Read-only file system
[  490.684559][T11817] binder_alloc: 11816: binder_alloc_buf, no vma
[  490.727116][T11817] binder: 11816:11817 ioctl f501 0 returned -22
[  490.765297][ T5999] udevd[5999]: symlink '../../loop6' '/dev/disk/by-diskseq/98.tmp-b7:6' failed: Read-only file system
[  490.832786][ T8494] udevd[8494]: symlink '../../loop6' '/dev/disk/by-diskseq/98.tmp-b7:6' failed: Read-only file system
[  491.863338][T11835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1481'.
[  492.505540][ T5922] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  492.688237][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  492.758070][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  492.845179][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  492.897712][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  492.942334][ T5922] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  492.973598][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.988881][T11855] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  493.016575][ T5922] usb 6-1: config 0 descriptor??
[  493.036952][T11841] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  493.041823][T11855] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  493.724355][ T5922] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd
[  493.735182][T11841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.774887][T11841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.859928][ T5922] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  493.907462][ T5922] usb 6-1: USB disconnect, device number 40
[  494.172293][T11873] fido_id[11873]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  494.931676][T11881] netlink: 'syz.3.1494': attribute type 2 has an invalid length.
[  495.281715][T11888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1496'.
[  495.291880][T11888] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1496'.
[  495.759072][T11906] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1502'.
[  495.776041][T11906] netlink: 'syz.1.1502': attribute type 2 has an invalid length.
[  495.783976][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'.
[  495.997767][T11906] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1502'.
[  496.013738][T11906] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1502'.
[  496.028809][T11902] bridge_slave_1: left allmulticast mode
[  496.037266][T11902] bridge_slave_1: left promiscuous mode
[  496.043676][T11902] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.070939][T11902] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  496.438995][T11923] overlayfs: failed to clone upperpath
[  496.493905][ T5940] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  497.225953][ T5901] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  497.257410][ T5940] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  497.409428][ T5940] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  497.442998][ T5940] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  497.456592][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.527935][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.739753][ T5901] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  497.751838][ T5901] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  497.765662][T11918] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  497.769854][ T5901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  497.782345][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.790429][ T5901] usb 4-1: Product: syz
[  497.794610][ T5901] usb 4-1: Manufacturer: syz
[  497.800711][ T5901] usb 4-1: SerialNumber: syz
[  497.922287][ T5940] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  498.731629][ T5908] usb 3-1: USB disconnect, device number 58
[  499.244485][T11934] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  499.440112][ T5901] cdc_ncm 4-1:1.0: bind() failure
[  499.468165][ T5901] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[  499.479385][ T5901] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[  499.500070][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1515'.
[  499.500230][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'.
[  499.551362][ T5901] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[  499.611898][ T5901] usb 4-1: USB disconnect, device number 69
[  499.943004][T11961] overlay: Unknown parameter 'fsuuid'
[  501.432711][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  501.451506][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  501.549413][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'.
[  501.560195][T11981] overlayfs: failed to resolve '/.«¢$‹»…P(—ÈìÎgá3': -2
[  502.026627][T11975] sit0: entered promiscuous mode
[  502.062087][T11975] netlink: 'syz.5.1520': attribute type 1 has an invalid length.
[  502.301120][T11975] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1520'.
[  502.680035][T12018] trusted_key: encrypted_key: master key parameter 'use' is invalid
[  502.726613][T12013] fuse: Bad value for 'fd'
[  502.737003][ T5922] Process accounting resumed
[  502.745768][T12018] Process accounting resumed
[  503.853524][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  503.853542][   T30] audit: type=1326 audit(1755909505.886:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  504.181397][   T30] audit: type=1326 audit(1755909506.066:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  504.202965][    C1] vkms_vblank_simulate: vblank timer overrun
[  504.754630][   T30] audit: type=1326 audit(1755909506.066:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  504.783961][   T30] audit: type=1326 audit(1755909506.066:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  504.826383][   T30] audit: type=1326 audit(1755909506.066:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  504.886070][T12058] overlayfs: failed to clone upperpath
[  504.930223][   T30] audit: type=1326 audit(1755909506.066:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  504.951822][    C1] vkms_vblank_simulate: vblank timer overrun
[  505.729219][   T30] audit: type=1326 audit(1755909506.066:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  505.750874][    C1] vkms_vblank_simulate: vblank timer overrun
[  505.847623][ T8494] udevd[8494]: symlink '../../loop4' '/dev/disk/by-diskseq/78.tmp-b7:4' failed: Read-only file system
[  506.007245][   T30] audit: type=1326 audit(1755909506.066:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  506.597181][   T30] audit: type=1326 audit(1755909506.066:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  506.623903][   T30] audit: type=1326 audit(1755909506.066:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12026 comm="syz.0.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  506.937163][T12075] block nbd0: server does not support multiple connections per device.
[  506.943695][T12081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1548'.
[  506.996408][T12075] block nbd0: shutting down sockets
[  507.301212][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1549'.
[  507.504998][T12089] overlayfs: workdir and upperdir must reside under the same mount
[  507.564910][T12092] overlayfs: workdir and upperdir must reside under the same mount
[  508.472996][T12108] 9pnet_fd: Insufficient options for proto=fd
[  508.855371][T12118] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  508.862177][T12118] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  508.948410][T12118] vhci_hcd vhci_hcd.0: Device attached
[  508.958926][T12121] vhci_hcd vhci_hcd.0: port 0 already used
[  508.987135][T12119] vhci_hcd: connection closed
[  508.991896][ T9538] vhci_hcd: stop threads
[  509.040718][ T9538] vhci_hcd: release socket
[  509.118273][ T9538] vhci_hcd: disconnect device
[  509.860682][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1561'.
[  510.013256][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'.
[  510.023175][T12134] vlan0: entered promiscuous mode
[  510.193980][T12142] sctp: [Deprecated]: syz.0.1566 (pid 12142) Use of int in max_burst socket option.
[  510.193980][T12142] Use struct sctp_assoc_value instead
[  510.968072][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'.
[  511.035522][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'.
[  511.065222][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'.
[  511.075610][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'.
[  511.085221][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'.
[  511.096238][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'.
[  511.770552][ T5908] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  512.150552][T12172] overlayfs: overlapping lowerdir path
[  513.121701][T12172] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  513.217448][ T5908] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  513.400053][ T5908] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  513.446503][ T5908] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  513.478908][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  513.512278][ T5908] usb 6-1: SerialNumber: syz
[  513.823959][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  513.863140][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  514.343024][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  514.343043][   T30] audit: type=1326 audit(1755909516.366:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12186 comm="syz.0.1578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x0
[  514.744416][T12194] netlink: 'syz.1.1581': attribute type 39 has an invalid length.
[  515.182622][T12200] __nla_validate_parse: 166 callbacks suppressed
[  515.182650][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'.
[  515.214218][T12200] netlink: 'syz.0.1582': attribute type 1 has an invalid length.
[  515.238550][T12200] netlink: 'syz.0.1582': attribute type 2 has an invalid length.
[  515.258103][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'.
[  515.275390][ T5908] usb 6-1: 0:2 : does not exist
[  515.293152][ T5908] usb 6-1: unit 5 not found!
[  515.377671][ T5908] usb 6-1: USB disconnect, device number 41
[  515.470621][ T8494] udevd[8494]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  518.549553][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1598'.
[  520.899092][T12290] netlink: 'syz.1.1605': attribute type 29 has an invalid length.
[  520.930826][T12289] netlink: 'syz.1.1605': attribute type 29 has an invalid length.
[  521.241117][T12297] dummy0: entered allmulticast mode
[  522.205528][ T5928] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  522.386481][T12309] geneve2: entered promiscuous mode
[  522.548386][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  522.562658][ T5928] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[  522.574427][ T5928] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  522.585038][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.605923][ T5928] usb 3-1: config 0 descriptor??
[  522.997148][ T5901] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  523.010722][ T5940] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  523.605881][ T5928] Bluetooth: Can't get state to change to load ram patch err
[  523.645197][ T5928] Bluetooth: Loading patch file failed
[  523.670060][ T5928] ath3k 3-1:0.0: probe with driver ath3k failed with error -71
[  523.937081][ T5928] usb 3-1: USB disconnect, device number 59
[  524.170166][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'.
[  524.179245][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'.
[  524.234124][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'.
[  524.243109][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'.
[  524.400821][ T5901] usb 4-1: config 8 has an invalid interface number: 100 but max is 3
[  524.445648][ T5940] usb 6-1: Using ep0 maxpacket: 32
[  524.516717][ T5901] usb 4-1: config 8 contains an unexpected descriptor of type 0x2, skipping
[  524.803838][ T5901] usb 4-1: config 8 has an invalid interface number: 177 but max is 3
[  524.814910][ T5901] usb 4-1: config 8 has an invalid interface number: 254 but max is 3
[  524.815038][ T5940] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  524.832639][ T5901] usb 4-1: config 8 has an invalid interface number: 205 but max is 3
[  524.844973][ T5901] usb 4-1: config 8 contains an unexpected descriptor of type 0x2, skipping
[  524.853804][ T5940] usb 6-1: config 0 has no interface number 0
[  524.860076][ T5940] usb 6-1: config 0 interface 89 has no altsetting 0
[  524.866860][ T5901] usb 4-1: config 8 contains an unexpected descriptor of type 0x2, skipping
[  524.877042][ T5901] usb 4-1: config 8 has an invalid interface number: 29 but max is 3
[  524.891654][ T5901] usb 4-1: config 8 has an invalid descriptor of length 227, skipping remainder of the config
[  524.902416][T12326] macvlan5: entered promiscuous mode
[  524.905920][ T5940] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  524.925612][ T5901] usb 4-1: config 8 has 5 interfaces, different from the descriptor's value: 4
[  524.939121][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.954932][ T5901] usb 4-1: config 8 has no interface number 0
[  524.961173][ T5940] usb 6-1: Product: syz
[  524.965620][ T5901] usb 4-1: config 8 has no interface number 1
[  524.972445][ T5940] usb 6-1: Manufacturer: syz
[  524.977713][ T5940] usb 6-1: SerialNumber: syz
[  524.984064][ T5901] usb 4-1: config 8 has no interface number 2
[  524.996945][ T5940] usb 6-1: config 0 descriptor??
[  525.002059][ T5901] usb 4-1: config 8 has no interface number 3
[  525.012415][ T5901] usb 4-1: config 8 has no interface number 4
[  525.022055][ T5940] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  525.036022][ T5901] usb 4-1: config 8 interface 100 altsetting 214 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  525.061288][ T5940] em28xx 6-1:0.89: Video interface 89 found: bulk
[  525.074914][ T5901] usb 4-1: config 8 interface 100 altsetting 214 has a duplicate endpoint with address 0xA, skipping
[  525.091343][ T5901] usb 4-1: config 8 interface 100 altsetting 214 has an invalid descriptor for endpoint zero, skipping
[  525.103604][ T5901] usb 4-1: config 8 interface 100 altsetting 214 has an invalid descriptor for endpoint zero, skipping
[  525.108141][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'.
[  525.115615][ T5901] usb 4-1: config 8 interface 100 altsetting 214 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  525.135032][T12332] batadv_slave_1: entered promiscuous mode
[  525.141388][ T5901] usb 4-1: config 8 interface 100 altsetting 214 has a duplicate endpoint with address 0x3, skipping
[  525.152588][ T5901] usb 4-1: config 8 interface 100 altsetting 214 has a duplicate endpoint with address 0x9, skipping
[  525.163852][ T5901] usb 4-1: config 8 interface 100 altsetting 214 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  525.176369][ T5901] usb 4-1: config 8 interface 100 altsetting 214 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  525.187838][ T5901] usb 4-1: config 8 interface 177 altsetting 101 has a duplicate endpoint with address 0x3, skipping
[  525.188639][T12329] batadv_slave_1: left promiscuous mode
[  525.199524][ T5901] usb 4-1: config 8 interface 177 altsetting 101 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[  525.199555][ T5901] usb 4-1: too many endpoints for config 8 interface 254 altsetting 27: 129, using maximum allowed: 30
[  525.199598][ T5901] usb 4-1: config 8 interface 254 altsetting 27 has a duplicate endpoint with address 0x3, skipping
[  525.199644][ T5901] usb 4-1: config 8 interface 254 altsetting 27 has an invalid descriptor for endpoint zero, skipping
[  525.199667][ T5901] usb 4-1: config 8 interface 254 altsetting 27 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  525.199693][ T5901] usb 4-1: config 8 interface 254 altsetting 27 has 3 endpoint descriptors, different from the interface descriptor's value: 129
[  525.199734][ T5901] usb 4-1: config 8 interface 205 altsetting 7 has a duplicate endpoint with address 0x1, skipping
[  525.199779][ T5901] usb 4-1: config 8 interface 205 altsetting 7 has a duplicate endpoint with address 0x6, skipping
[  525.199801][ T5901] usb 4-1: config 8 interface 205 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[  525.199821][ T5901] usb 4-1: config 8 interface 205 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[  525.199842][ T5901] usb 4-1: config 8 interface 205 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  525.199864][ T5901] usb 4-1: config 8 interface 205 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  525.199890][ T5901] usb 4-1: config 8 interface 205 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  525.199934][ T5901] usb 4-1: config 8 interface 205 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[  525.199956][ T5901] usb 4-1: config 8 interface 205 altsetting 7 has a duplicate endpoint with address 0x6, skipping
[  525.199979][ T5901] usb 4-1: config 8 interface 205 altsetting 7 has a duplicate endpoint with address 0x1, skipping
[  525.200002][ T5901] usb 4-1: config 8 interface 205 altsetting 7 has a duplicate endpoint with address 0x1, skipping
[  525.200024][ T5901] usb 4-1: config 8 interface 205 altsetting 7 has a duplicate endpoint with address 0x8F, skipping
[  525.200095][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[  525.200118][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0x3, skipping
[  525.200140][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  525.200161][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0x3, skipping
[  525.200183][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  525.200225][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has an endpoint descriptor with address 0x13, changing to 0x3
[  525.200250][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0x3, skipping
[  525.200273][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0x1, skipping
[  525.200295][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[  525.200316][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0x6, skipping
[  525.200360][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0x6, skipping
[  525.200383][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[  525.200406][ T5901] usb 4-1: config 8 interface 29 altsetting 7 has a duplicate endpoint with address 0x1, skipping
[  525.200428][ T5901] usb 4-1: config 8 interface 100 has no altsetting 0
[  525.200446][ T5901] usb 4-1: config 8 interface 177 has no altsetting 0
[  525.200464][ T5901] usb 4-1: config 8 interface 254 has no altsetting 0
[  525.200503][ T5901] usb 4-1: config 8 interface 205 has no altsetting 0
[  525.200522][ T5901] usb 4-1: config 8 interface 29 has no altsetting 0
[  525.207262][ T5901] usb 4-1: New USB device found, idVendor=0df6, idProduct=0078, bcdDevice=6b.e6
[  525.207291][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.207338][ T5901] usb 4-1: Product: syz
[  525.207352][ T5901] usb 4-1: Manufacturer: syz
[  525.207368][ T5901] usb 4-1: SerialNumber: syz
[  525.376187][ T5940] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  525.627924][ T5901] usb 4-1: can't set config #8, error -71
[  525.668495][ T5901] usb 4-1: USB disconnect, device number 70
[  525.807535][ T5940] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  525.934250][ T5940] em28xx 6-1:0.89: board has no eeprom
[  526.115854][ T5940] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[  526.166498][ T5940] em28xx 6-1:0.89: analog set to bulk mode.
[  526.242541][ T5901] em28xx 6-1:0.89: Registering V4L2 extension
[  526.380208][ T5940] usb 6-1: USB disconnect, device number 42
[  526.406817][ T5940] em28xx 6-1:0.89: Disconnecting em28xx
[  527.174215][ T5901] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[  527.185215][ T5999] udevd[5999]: symlink '../../loop4' '/dev/disk/by-diskseq/78.tmp-b7:4' failed: Read-only file system
[  527.207606][ T5901] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[  527.377797][ T5901] em28xx 6-1:0.89: No AC97 audio processor
[  527.396320][ T5901] usb 6-1: Decoder not found
[  527.400956][ T5901] em28xx 6-1:0.89: failed to create media graph
[  527.407493][ T5901] em28xx 6-1:0.89: V4L2 device video103 deregistered
[  527.483739][ T5901] em28xx 6-1:0.89: Registering snapshot button...
[  527.505232][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'.
[  527.533769][ T5901] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input24
[  527.549103][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'.
[  527.558059][T12377] afs: Bad value for 'source'
[  527.576279][ T5901] em28xx 6-1:0.89: Remote control support is not available for this card.
[  527.707039][ T5940] em28xx 6-1:0.89: Closing input extension
[  527.727255][ T5940] em28xx 6-1:0.89: Deregistering snapshot button
[  527.745740][ T5928] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  527.773285][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'.
[  527.882780][ T5940] em28xx 6-1:0.89: Freeing device
[  527.896245][ T5928] usb 3-1: device descriptor read/64, error -71
[  527.959442][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1633'.
[  528.015903][ T5901] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  528.156705][ T5928] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  528.188148][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.238370][T12391] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  528.252146][T12391] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  528.262021][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  528.285130][ T5901] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  528.304487][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.315738][   T30] audit: type=1800 audit(1755909530.336:176): pid=12391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1635" name="nullb0" dev="tmpfs" ino=1088 res=0 errno=0
[  528.335967][ T5928] usb 3-1: device descriptor read/64, error -71
[  528.363577][ T5901] usb 4-1: config 0 descriptor??
[  528.466378][ T5928] usb usb3-port1: attempt power cycle
[  528.787888][ T5901] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor
[  528.825508][ T5928] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  528.836775][ T5901] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0012/input/input25
[  528.857896][ T5928] usb 3-1: device descriptor read/8, error -71
[  529.040739][T12396] ./file0: Can't lookup blockdev
[  529.748338][ T5928] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  529.790236][ T5928] usb 3-1: device descriptor read/8, error -71
[  529.825940][ T5845] Bluetooth: hci1: command 0x0406 tx timeout
[  529.927724][ T5928] usb usb3-port1: unable to enumerate USB device
[  529.961589][ T5901] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  530.062752][T12403] overlay: ./bus is not a directory
[  530.147239][ T5940] usb 4-1: reset high-speed USB device number 71 using dummy_hcd
[  530.311592][   T30] audit: type=1326 audit(1755909532.346:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12404 comm="syz.5.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a218ebe9 code=0x7ffc0000
[  530.381061][   T30] audit: type=1326 audit(1755909532.346:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12404 comm="syz.5.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a218ebe9 code=0x7ffc0000
[  530.418777][T12413] 9pnet_fd: Insufficient options for proto=fd
[  530.462644][   T30] audit: type=1326 audit(1755909532.346:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12404 comm="syz.5.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f58a218ebe9 code=0x7ffc0000
[  530.723546][   T30] audit: type=1326 audit(1755909532.566:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12404 comm="syz.5.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f58a212ade9 code=0x7ffc0000
[  531.083659][   T30] audit: type=1326 audit(1755909532.566:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12404 comm="syz.5.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a218ebe9 code=0x7ffc0000
[  531.223614][   T30] audit: type=1326 audit(1755909532.566:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12404 comm="syz.5.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a218ebe9 code=0x7ffc0000
[  531.984811][T12434] dummy0: entered allmulticast mode
[  532.863971][ T5901] usb 4-1: USB disconnect, device number 71
[  532.889510][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'.
[  533.749272][ T8494] udevd[8494]: symlink '../../loop4' '/dev/disk/by-diskseq/78.tmp-b7:4' failed: Read-only file system
[  534.282655][T12472] netlink: 'syz.5.1658': attribute type 21 has an invalid length.
[  534.292767][T12472] netlink: 'syz.5.1658': attribute type 6 has an invalid length.
[  534.300845][T12472] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1658'.
[  534.734431][T12486] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.492387][T12498] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer.
[  535.578156][T12500] dummy0: entered allmulticast mode
[  536.186608][ T8494] udevd[8494]: symlink '../../loop4' '/dev/disk/by-diskseq/78.tmp-b7:4' failed: Read-only file system
[  536.702379][T12506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1669'.
[  536.772180][T12509] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  536.962041][T12517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1673'.
[  537.029718][T12517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1673'.
[  537.065507][T12517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1673'.
[  538.170117][T12541] overlayfs: upper fs does not support tmpfile.
[  538.605097][ T8494] udevd[8494]: symlink '../../loop4' '/dev/disk/by-diskseq/78.tmp-b7:4' failed: Read-only file system
[  538.670934][T12545] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1683'.
[  539.024008][T12548] ubi: mtd0 is already attached to ubi31
[  540.245254][T12555] openvswitch: netlink: Key type 1552 is out of range max 32
[  540.754237][ T5901] libceph: connect (1)[c::]:6789 error -101
[  540.839362][ T5901] libceph: mon0 (1)[c::]:6789 connect error
[  540.869878][ T5901] libceph: connect (1)[c::]:6789 error -101
[  540.877488][ T5901] libceph: mon0 (1)[c::]:6789 connect error
[  540.887962][T12555] ceph: No mds server is up or the cluster is laggy
[  541.300912][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1687'.
[  541.575591][ T5901] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  541.620585][T12574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1690'.
[  541.856710][ T5901] usb 6-1: device descriptor read/64, error -71
[  542.115838][ T5901] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  542.335787][ T5901] usb 6-1: device descriptor read/64, error -71
[  542.402347][T12583] overlayfs: failed to resolve './file1': -2
[  542.687255][ T5901] usb usb6-port1: attempt power cycle
[  543.144366][ T5901] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  543.364565][ T5901] usb 6-1: device descriptor read/8, error -71
[  543.961395][T12601] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1697'.
[  543.970734][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1697'.
[  544.005927][ T5901] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  544.057678][ T5901] usb 6-1: device descriptor read/8, error -71
[  544.093580][T12602] xt_hashlimit: overflow, rate too high: 0
[  544.178812][ T5901] usb usb6-port1: unable to enumerate USB device
[  544.515804][ T5908] usb 4-1: new full-speed USB device number 72 using dummy_hcd
[  544.642107][T12608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1699'.
[  544.697731][ T5908] usb 4-1: config 0 has an invalid interface number: 10 but max is 0
[  544.731485][ T5908] usb 4-1: config 0 has no interface number 0
[  544.742071][ T5908] usb 4-1: config 0 interface 10 has no altsetting 0
[  544.764467][ T5908] usb 4-1: New USB device found, idVendor=0c45, idProduct=62b3, bcdDevice=a2.72
[  544.784310][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.804583][ T5908] usb 4-1: Product: syz
[  544.814722][ T5908] usb 4-1: Manufacturer: syz
[  544.829913][ T5908] usb 4-1: SerialNumber: syz
[  544.944050][ T5908] usb 4-1: config 0 descriptor??
[  545.447727][ T5908] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b3
[  545.750561][ T5908] gspca_sn9c20x: Write register 1000 failed -71
[  545.782022][ T5908] gspca_sn9c20x: Device initialization failed
[  545.808985][ T5908] gspca_sn9c20x 4-1:0.10: probe with driver gspca_sn9c20x failed with error -71
[  545.842430][ T5908] usb 4-1: USB disconnect, device number 72
[  545.854956][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'.
[  545.921636][T12626] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1704'.
[  545.999999][T12626] dummy0 (unregistering): left allmulticast mode
[  547.444447][T12649] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  547.496571][T12647] trusted_key: encrypted_key: insufficient parameters specified
[  547.553619][T12651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1711'.
[  548.261113][T12656] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.436883][T12656] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.206580][T12656] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.431278][T12656] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.700530][ T5922] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  549.886670][ T5922] usb 3-1: Using ep0 maxpacket: 32
[  549.904808][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  549.928875][T12656] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.938279][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  549.953809][ T5922] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  549.985314][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.002345][T12656] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  550.015729][ T5922] usb 3-1: config 0 descriptor??
[  550.096068][T12656] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  550.154367][T12656] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.475646][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1720'.
[  550.814021][T12682] netlink: 'syz.2.1716': attribute type 10 has an invalid length.
[  550.840817][T12682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1716'.
[  550.865942][T12682] dummy0: entered promiscuous mode
[  550.893222][T12682] bridge0: port 2(dummy0) entered blocking state
[  550.953047][T12682] bridge0: port 2(dummy0) entered disabled state
[  550.990605][T12682] bridge0: port 2(dummy0) entered blocking state
[  550.997201][T12682] bridge0: port 2(dummy0) entered forwarding state
[  551.060027][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1723'.
[  551.163030][ T5922] usbhid 3-1:0.0: can't add hid device: -32
[  551.169812][ T5922] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  551.194485][ T5922] usb 3-1: USB disconnect, device number 64
[  551.633994][T12708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1726'.
[  551.824160][T12712] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1726'.
[  552.682575][T12717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1728'.
[  552.868350][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1730'.
[  553.127305][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'.
[  553.173916][T12724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1732'.
[  553.348400][T12734] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1735'.
[  553.455911][ T5908] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  553.657208][ T5908] usb 4-1: Using ep0 maxpacket: 16
[  553.747792][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.771545][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.781926][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  553.860228][ T5908] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  553.873668][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.889847][ T5908] usb 4-1: config 0 descriptor??
[  554.366472][ T5908] input: HID 0955:7214 Haptics as /devices/virtual/input/input26
[  554.483424][ T5908] shield 0003:0955:7214.0013: Registered Thunderstrike controller
[  554.505207][ T5908] shield 0003:0955:7214.0013: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[  554.587973][ T5928] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  554.634847][ T5908] usb 4-1: USB disconnect, device number 73
[  554.645679][ T5928] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  554.683327][ T5928] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  554.741871][ T5928] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  554.926917][T12746] Set syz0 is full, maxelem 0 reached
[  554.980925][T12755] IPVS: set_ctl: invalid protocol: 44 172.30.1.2:20004
[  554.991767][T12755] openvswitch: netlink: IP tunnel TTL not specified.
[  555.249437][T12757] overlayfs: failed to clone lowerpath
[  555.938976][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1742'.
[  556.409728][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1749'.
[  560.273229][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1760'.
[  561.765680][ T5928] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  561.930982][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.944895][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  561.980527][ T5928] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  561.996343][ T5908] usb 4-1: new full-speed USB device number 74 using dummy_hcd
[  562.016275][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.042162][ T5928] usb 6-1: config 0 descriptor??
[  562.132252][T12854] 9pnet_fd: Insufficient options for proto=fd
[  562.187733][ T5908] usb 4-1: config 0 has an invalid interface number: 10 but max is 0
[  562.201545][ T5908] usb 4-1: config 0 has no interface number 0
[  562.211300][ T5908] usb 4-1: config 0 interface 10 has no altsetting 0
[  562.231382][ T5908] usb 4-1: New USB device found, idVendor=0c45, idProduct=62b3, bcdDevice=a2.72
[  562.247234][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.256141][ T5908] usb 4-1: Product: syz
[  562.260441][ T5908] usb 4-1: Manufacturer: syz
[  562.265713][ T5908] usb 4-1: SerialNumber: syz
[  562.281756][ T5908] usb 4-1: config 0 descriptor??
[  562.287234][T12856] kAFS: unable to lookup cell 'sy@0'
[  562.307101][ T5908] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b3
[  562.326768][T12835] input: syz1 as /devices/virtual/input/input27
[  562.544027][ T5908] gspca_sn9c20x: Write register 1000 failed -71
[  562.573514][ T5928] usbhid 6-1:0.0: can't add hid device: -32
[  562.581295][ T5908] gspca_sn9c20x: Device initialization failed
[  562.591674][ T5928] usbhid 6-1:0.0: probe with driver usbhid failed with error -32
[  562.600832][ T5908] gspca_sn9c20x 4-1:0.10: probe with driver gspca_sn9c20x failed with error -71
[  562.642286][ T5908] usb 4-1: USB disconnect, device number 74
[  562.875068][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  562.885182][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  563.311180][T12874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'.
[  563.402602][T12875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1775'.
[  564.014314][ T8834] usb 6-1: USB disconnect, device number 47
[  564.265664][ T5928] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  564.445574][ T5928] usb 3-1: Using ep0 maxpacket: 32
[  564.551140][ T5928] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  564.564863][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.589578][ T5928] usb 3-1: config 0 descriptor??
[  564.621436][ T5928] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state
[  564.640283][ T5928] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  564.653801][ T5928] dvb_usb_anysee 3-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  564.832869][ T8834] usb 3-1: USB disconnect, device number 65
[  564.910169][T12903] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1783'.
[  566.536297][ T8834] usb 3-1: new full-speed USB device number 66 using dummy_hcd
[  566.717730][ T8834] usb 3-1: config 0 has an invalid interface number: 10 but max is 0
[  566.731759][ T8834] usb 3-1: config 0 has no interface number 0
[  566.738198][ T8834] usb 3-1: config 0 interface 10 has no altsetting 0
[  566.751715][ T8834] usb 3-1: New USB device found, idVendor=0c45, idProduct=62b3, bcdDevice=a2.72
[  566.761080][ T8834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.770312][ T8834] usb 3-1: Product: syz
[  566.774722][ T8834] usb 3-1: Manufacturer: syz
[  566.779601][ T8834] usb 3-1: SerialNumber: syz
[  566.789368][ T8834] usb 3-1: config 0 descriptor??
[  566.809456][ T8834] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b3
[  567.007325][ T8834] gspca_sn9c20x: Write register 1000 failed -71
[  567.027604][ T8834] gspca_sn9c20x: Device initialization failed
[  567.050727][ T8834] gspca_sn9c20x 3-1:0.10: probe with driver gspca_sn9c20x failed with error -71
[  567.110812][ T8834] usb 3-1: USB disconnect, device number 66
[  567.475707][ T5940] usb 6-1: new low-speed USB device number 48 using dummy_hcd
[  567.691828][ T5940] usb 6-1: Invalid ep0 maxpacket: 32
[  567.818850][T12957] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  567.828440][ T5940] usb 6-1: new low-speed USB device number 49 using dummy_hcd
[  568.122129][ T5940] usb 6-1: Invalid ep0 maxpacket: 32
[  568.294738][ T5940] usb usb6-port1: attempt power cycle
[  568.822638][ T5940] usb 6-1: new low-speed USB device number 50 using dummy_hcd
[  568.878218][ T5940] usb 6-1: Invalid ep0 maxpacket: 32
[  569.025799][ T5940] usb 6-1: new low-speed USB device number 51 using dummy_hcd
[  569.047692][T12976] FAULT_INJECTION: forcing a failure.
[  569.047692][T12976] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  569.067712][ T5940] usb 6-1: Invalid ep0 maxpacket: 32
[  569.090920][ T5940] usb usb6-port1: unable to enumerate USB device
[  569.099221][T12976] CPU: 1 UID: 0 PID: 12976 Comm: syz.2.1804 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  569.099246][T12976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  569.099265][T12976] Call Trace:
[  569.099274][T12976]  <TASK>
[  569.099282][T12976]  dump_stack_lvl+0x189/0x250
[  569.099308][T12976]  ? __pfx____ratelimit+0x10/0x10
[  569.099328][T12976]  ? __pfx_dump_stack_lvl+0x10/0x10
[  569.099348][T12976]  ? __pfx__printk+0x10/0x10
[  569.099372][T12976]  ? __might_fault+0xb0/0x130
[  569.099399][T12976]  should_fail_ex+0x414/0x560
[  569.099422][T12976]  _copy_from_user+0x2d/0xb0
[  569.099448][T12976]  __sys_bpf+0x1ed/0x860
[  569.099478][T12976]  ? __pfx___sys_bpf+0x10/0x10
[  569.099516][T12976]  ? ksys_write+0x22a/0x250
[  569.099544][T12976]  ? __pfx_ksys_write+0x10/0x10
[  569.099569][T12976]  __x64_sys_bpf+0x7c/0x90
[  569.099594][T12976]  do_syscall_64+0xfa/0x3b0
[  569.099613][T12976]  ? lockdep_hardirqs_on+0x9c/0x150
[  569.099632][T12976]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.099652][T12976]  ? clear_bhb_loop+0x60/0xb0
[  569.099676][T12976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.099695][T12976] RIP: 0033:0x7f573bb8ebe9
[  569.099712][T12976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  569.099730][T12976] RSP: 002b:00007f573c9d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  569.099751][T12976] RAX: ffffffffffffffda RBX: 00007f573bdb6090 RCX: 00007f573bb8ebe9
[  569.099766][T12976] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a
[  569.099779][T12976] RBP: 00007f573c9d4090 R08: 0000000000000000 R09: 0000000000000000
[  569.099792][T12976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  569.099804][T12976] R13: 00007f573bdb6128 R14: 00007f573bdb6090 R15: 00007ffe3ebe5e28
[  569.099837][T12976]  </TASK>
[  569.525114][T12984] overlayfs: failed to clone lowerpath
[  570.116912][T12995] overlayfs: invalid origin (0000)
[  570.163018][ T5928] kernel write not supported for file /1158/loginuid (pid: 5928 comm: kworker/0:9)
[  570.175931][ T5908] kernel write not supported for file /1158/loginuid (pid: 5908 comm: kworker/0:6)
[  570.266653][T11447] usb 4-1: new full-speed USB device number 75 using dummy_hcd
[  570.352627][T13004] pimreg: entered allmulticast mode
[  570.805881][T11447] usb 4-1: config 0 has an invalid interface number: 10 but max is 0
[  570.813998][T11447] usb 4-1: config 0 has no interface number 0
[  570.838727][T11447] usb 4-1: config 0 interface 10 has no altsetting 0
[  570.896797][ T6003] udevd[6003]: symlink '../../loop4' '/dev/disk/by-diskseq/78.tmp-b7:4' failed: Read-only file system
[  570.946099][T11447] usb 4-1: New USB device found, idVendor=0c45, idProduct=62b3, bcdDevice=a2.72
[  570.987013][T11447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.014140][T13015] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  571.045127][T11447] usb 4-1: Product: syz
[  571.077188][T11447] usb 4-1: Manufacturer: syz
[  571.217923][T11447] usb 4-1: SerialNumber: syz
[  571.238117][T11447] usb 4-1: config 0 descriptor??
[  571.244074][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1816'.
[  571.801493][T11447] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b3
[  572.178497][T11447] gspca_sn9c20x: Write register 1000 failed -71
[  572.184766][T11447] gspca_sn9c20x: Device initialization failed
[  572.236356][T11447] gspca_sn9c20x 4-1:0.10: probe with driver gspca_sn9c20x failed with error -71
[  572.368971][T11447] usb 4-1: USB disconnect, device number 75
[  572.556658][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1821'.
[  574.032231][T13057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  574.079921][T13057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.255593][T13057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  574.270824][T13057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.383407][T13057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  574.395700][T13057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.435766][ T5908] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  574.496917][T13057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  574.507739][T13057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.585799][ T5908] usb 6-1: Using ep0 maxpacket: 16
[  574.594364][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.610175][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  574.620298][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  574.641691][T13057] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  574.650266][ T5908] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  574.652990][T13057] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  574.692176][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.704150][ T5908] usb 6-1: config 0 descriptor??
[  574.788960][T13057] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  574.800919][T13057] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  574.833237][T13057] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  574.843134][T13057] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  575.037741][T13057] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  575.057677][T13057] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  575.204882][ T5908] HID 045e:07da: Invalid code 65791 type 1
[  575.692335][ T5908] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0014/input/input92
[  575.692870][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  575.736363][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  575.747006][ T5908] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  575.856919][ T5908] usb 6-1: USB disconnect, device number 52
[  576.231760][T11447] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  576.542954][T13097] netlink: 'syz.0.1841': attribute type 61 has an invalid length.
[  576.615711][T11447] usb 3-1: Using ep0 maxpacket: 32
[  576.634246][T11447] usb 3-1: config 0 has an invalid interface number: 106 but max is 0
[  576.660345][T11447] usb 3-1: config 0 has no interface number 0
[  576.680503][T11447] usb 3-1: config 0 interface 106 has no altsetting 0
[  576.701025][T11447] usb 3-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d
[  576.725818][T11447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.750698][T11447] usb 3-1: Product: syz
[  576.769354][T11447] usb 3-1: Manufacturer: syz
[  576.920956][T11447] usb 3-1: SerialNumber: syz
[  577.047933][T11447] usb 3-1: config 0 descriptor??
[  577.055202][ T5845] Bluetooth: hci1: ACL packet for unknown connection handle 147
[  577.108682][T11447] cdc_phonet 3-1:0.106: probe with driver cdc_phonet failed with error -22
[  577.402544][T11447] usb 3-1: USB disconnect, device number 67
[  578.827368][T13144] binder: 13138:13144 ioctl 80089419 200000000040 returned -22
[  578.837589][T13144] binder: 13138:13144 ioctl 4008ae61 2000000000c0 returned -22
[  580.165964][T11447] usb 4-1: new low-speed USB device number 76 using dummy_hcd
[  580.336192][T11447] usb 4-1: device descriptor read/64, error -71
[  580.695533][T11447] usb 4-1: new low-speed USB device number 77 using dummy_hcd
[  580.885665][T11447] usb 4-1: device descriptor read/64, error -71
[  581.019057][T11447] usb usb4-port1: attempt power cycle
[  581.385527][T11447] usb 4-1: new low-speed USB device number 78 using dummy_hcd
[  581.439944][T11447] usb 4-1: device descriptor read/8, error -71
[  581.685929][T11447] usb 4-1: new low-speed USB device number 79 using dummy_hcd
[  582.278028][T11447] usb 4-1: device descriptor read/8, error -71
[  582.415349][T11447] usb usb4-port1: unable to enumerate USB device
[  583.080215][ T6003] udevd[6003]: symlink '../../loop4' '/dev/disk/by-diskseq/78.tmp-b7:4' failed: Read-only file system
[  586.035861][ T5901] usb 6-1: new full-speed USB device number 53 using dummy_hcd
[  586.687754][ T5901] usb 6-1: config 0 has an invalid interface number: 10 but max is 0
[  586.700495][ T5901] usb 6-1: config 0 has no interface number 0
[  586.715020][ T5901] usb 6-1: config 0 interface 10 has no altsetting 0
[  586.727739][ T5901] usb 6-1: New USB device found, idVendor=0c45, idProduct=62b3, bcdDevice=a2.72
[  586.863641][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.891988][ T5901] usb 6-1: Product: syz
[  587.573838][T13218] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1875'.
[  587.582964][ T5901] usb 6-1: Manufacturer: syz
[  587.595068][ T5901] usb 6-1: SerialNumber: syz
[  587.605378][ T5901] usb 6-1: config 0 descriptor??
[  587.712230][ T5901] usb 6-1: can't set config #0, error -71
[  587.722494][T13221] netlink: 'syz.2.1875': attribute type 4 has an invalid length.
[  587.736828][ T5901] usb 6-1: USB disconnect, device number 53
[  587.759923][T13221] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1875'.
[  587.794022][T13222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1876'.
[  590.339595][ T6003] udevd[6003]: symlink '../../loop4' '/dev/disk/by-diskseq/78.tmp-b7:4' failed: Read-only file system
[  593.216043][T13264] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  593.367178][T13267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1889'.
[  593.730514][T13278] tmpfs: Bad value for 'mpol'
[  595.008212][   T30] audit: type=1107 audit(1755909597.026:183): pid=13304 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  595.245866][ T5908] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  595.582286][T13313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1901'.
[  595.867110][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1902'.
[  595.916741][ T5908] usb 3-1: device descriptor read/64, error -71
[  596.347757][T13322] netlink: 'syz.2.1905': attribute type 10 has an invalid length.
[  596.433350][T13320] Invalid source name
[  596.466975][T13320] UBIFS error (pid: 13320): cannot open "usrquota", error -22
[  596.484901][T13324] tmpfs: Bad value for 'mpol'
[  596.548588][T13324] binder: BINDER_SET_CONTEXT_MGR already set
[  596.554636][T13324] binder: 13323:13324 ioctl 4018620d 200000000040 returned -16
[  597.905025][T13333] syz.5.1909: attempt to access beyond end of device
[  597.905025][T13333] nbd5: rw=6144, sector=128, nr_sectors = 8 limit=0
[  597.918648][T13333] gfs2: error -5 reading superblock
[  598.043049][T13345] overlayfs: failed to clone upperpath
[  599.041114][T13359] netlink: 'syz.3.1918': attribute type 2 has an invalid length.
[  600.706098][T11447] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  600.902731][T11447] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  600.914589][T11447] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024
[  600.928520][T11447] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  600.939572][T11447] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  600.943308][T13382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1925'.
[  600.949763][T11447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.041889][T13366] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  601.069145][T11447] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  601.137933][T13392] netlink: 'syz.5.1926': attribute type 3 has an invalid length.
[  601.294570][T13366] Cannot find del_set index 1 as target
[  601.341578][T11447] usb 3-1: USB disconnect, device number 70
[  601.422036][T13373] syz.3.1920: vmalloc error: size 283115520, failed to allocated page array size 552960, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  601.511889][T13373] CPU: 0 UID: 0 PID: 13373 Comm: syz.3.1920 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  601.511917][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  601.511930][T13373] Call Trace:
[  601.511938][T13373]  <TASK>
[  601.511947][T13373]  dump_stack_lvl+0x189/0x250
[  601.511979][T13373]  ? __pfx_dump_stack_lvl+0x10/0x10
[  601.512002][T13373]  ? __pfx__printk+0x10/0x10
[  601.512036][T13373]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  601.512062][T13373]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  601.512089][T13373]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  601.512118][T13373]  warn_alloc+0x214/0x310
[  601.512150][T13373]  ? __pfx_warn_alloc+0x10/0x10
[  601.512185][T13373]  ? __get_vm_area_node+0x28f/0x300
[  601.512207][T13373]  ? vb2_vmalloc_alloc+0xef/0x340
[  601.512241][T13373]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  601.512296][T13373]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  601.512319][T13373]  ? vb2_vmalloc_alloc+0xb2/0x340
[  601.512350][T13373]  ? __kasan_kmalloc+0x93/0xb0
[  601.512373][T13373]  vmalloc_user_noprof+0xad/0xf0
[  601.512396][T13373]  ? vb2_vmalloc_alloc+0xef/0x340
[  601.512425][T13373]  vb2_vmalloc_alloc+0xef/0x340
[  601.512454][T13373]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  601.512483][T13373]  __vb2_queue_alloc+0x9c2/0x15a0
[  601.512539][T13373]  vb2_core_reqbufs+0xc31/0x1420
[  601.512565][T13373]  ? __pfx___mutex_trylock_common+0x10/0x10
[  601.512609][T13373]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  601.512647][T13373]  ? vb2_verify_memory_type+0x1fc/0x570
[  601.512677][T13373]  vb2_ioctl_reqbufs+0x4c0/0x830
[  601.512719][T13373]  __video_do_ioctl+0xc9b/0xdb0
[  601.512760][T13373]  ? __pfx___video_do_ioctl+0x10/0x10
[  601.512805][T13373]  video_usercopy+0x871/0x14f0
[  601.512845][T13373]  ? __pfx___video_do_ioctl+0x10/0x10
[  601.512873][T13373]  ? __pfx_video_usercopy+0x10/0x10
[  601.512899][T13373]  ? smack_file_ioctl+0x2a9/0x340
[  601.512937][T13373]  ? __fget_files+0x2a/0x420
[  601.512959][T13373]  ? __fget_files+0x3a0/0x420
[  601.512985][T13373]  v4l2_ioctl+0x18a/0x1e0
[  601.513036][T13373]  ? __pfx_v4l2_ioctl+0x10/0x10
[  601.513064][T13373]  __se_sys_ioctl+0xfc/0x170
[  601.513097][T13373]  do_syscall_64+0xfa/0x3b0
[  601.513119][T13373]  ? lockdep_hardirqs_on+0x9c/0x150
[  601.513140][T13373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.513161][T13373]  ? clear_bhb_loop+0x60/0xb0
[  601.513185][T13373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.513205][T13373] RIP: 0033:0x7f3ad6d8ebe9
[  601.513223][T13373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  601.513242][T13373] RSP: 002b:00007f3ad7bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  601.513263][T13373] RAX: ffffffffffffffda RBX: 00007f3ad6fb6090 RCX: 00007f3ad6d8ebe9
[  601.513278][T13373] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000008
[  601.513291][T13373] RBP: 00007f3ad6e11e19 R08: 0000000000000000 R09: 0000000000000000
[  601.513304][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  601.513317][T13373] R13: 00007f3ad6fb6128 R14: 00007f3ad6fb6090 R15: 00007ffef0806228
[  601.513351][T13373]  </TASK>
[  601.513373][T13373] Mem-Info:
[  601.775588][T13404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1929'.
[  601.846209][T13373] active_anon:412 inactive_anon:39886 isolated_anon:0
[  601.846209][T13373]  active_file:17113 inactive_file:38223 isolated_file:0
[  601.846209][T13373]  unevictable:768 dirty:136 writeback:0
[  601.846209][T13373]  slab_reclaimable:11125 slab_unreclaimable:107819
[  601.846209][T13373]  mapped:43575 shmem:35907 pagetables:1334
[  601.846209][T13373]  sec_pagetables:0 bounce:0
[  601.846209][T13373]  kernel_misc_reclaimable:0
[  601.846209][T13373]  free:1263350 free_pcp:9143 free_cma:0
[  602.004585][T13373] Node 0 active_anon:7848kB inactive_anon:150744kB active_file:68248kB inactive_file:152892kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163300kB dirty:540kB writeback:0kB shmem:139492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12176kB pagetables:5180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  602.045750][   T30] audit: type=1800 audit(1755909604.016:184): pid=13404 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1929" name="nullb0" dev="tmpfs" ino=1088 res=0 errno=0
[  602.067100][T13373] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  602.360647][T13373] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  602.720015][T13373] lowmem_reserve[]: 0 2500 2502 2502 2502
[  602.786772][T13373] Node 0 DMA32 free:1126712kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1644kB inactive_anon:150768kB active_file:66476kB inactive_file:152832kB unevictable:1536kB writepending:556kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:30536kB local_pcp:19544kB free_cma:0kB
[  602.876089][T13373] lowmem_reserve[]: 0 0 1 1 1
[  602.880901][T13373] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1772kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  602.910719][T13373] lowmem_reserve[]: 0 0 0 0 0
[  602.915655][T13373] Node 1 Normal free:3908300kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17280kB local_pcp:2656kB free_cma:0kB
[  602.953053][T13373] lowmem_reserve[]: 0 0 0 0 0
[  602.957912][T13373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  602.994096][T13373] Node 0 DMA32: 3*4kB (UME) 1*8kB (E) 1*16kB (U) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 46*256kB (M) 65*512kB (UME) 56*1024kB (UM) 8*2048kB (UME) 246*4096kB (UM) = 1126692kB
[  603.014730][T13373] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  603.116512][T13373] Node 1 Normal: 219*4kB (UME) 58*8kB (UME) 39*16kB (UME) 211*32kB (UME) 67*64kB (UME) 14*128kB (UME) 5*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3908300kB
[  603.348338][T13373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  603.439595][T13373] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  603.508982][T13415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1934'.
[  603.528703][T13373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  603.599413][T13373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  603.640810][T13373] 89072 total pagecache pages
[  603.676584][T13373] 0 pages in swap cache
[  603.680867][T13373] Free swap  = 124996kB
[  603.684291][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1935'.
[  603.725480][T13373] Total swap = 124996kB
[  603.729685][T13373] 2097051 pages RAM
[  603.733502][T13373] 0 pages HighMem/MovableOnly
[  603.767249][T13373] 424695 pages reserved
[  603.771923][T13373] 0 pages cma reserved
[  605.371251][ T5958] usb 4-1: new full-speed USB device number 80 using dummy_hcd
[  605.547495][ T5958] usb 4-1: config 0 has an invalid interface number: 10 but max is 0
[  605.565567][ T5958] usb 4-1: config 0 has no interface number 0
[  605.571710][ T5958] usb 4-1: config 0 interface 10 has no altsetting 0
[  605.588499][ T5958] usb 4-1: New USB device found, idVendor=0c45, idProduct=62b3, bcdDevice=a2.72
[  605.597634][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.615640][ T5958] usb 4-1: Product: syz
[  605.619832][ T5958] usb 4-1: Manufacturer: syz
[  605.624437][ T5958] usb 4-1: SerialNumber: syz
[  605.636539][ T5958] usb 4-1: config 0 descriptor??
[  605.647758][ T5958] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b3
[  605.716634][T13478] loop6: detected capacity change from 0 to 524287999
[  605.854171][ T5958] gspca_sn9c20x: Write register 1000 failed -71
[  605.869715][ T5958] gspca_sn9c20x: Device initialization failed
[  605.882600][ T5958] gspca_sn9c20x 4-1:0.10: probe with driver gspca_sn9c20x failed with error -71
[  605.911875][ T5958] usb 4-1: USB disconnect, device number 80
[  605.964679][T12645] udevd[12645]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system
[  605.986977][ T5922] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  606.167191][T13485] Device name cannot be null; rc = [-22]
[  606.900176][ T5922] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  606.919229][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.931419][ T5922] usb 6-1: config 0 descriptor??
[  606.947310][ T5922] cp210x 6-1:0.0: cp210x converter detected
[  607.182598][ T5922] usb 6-1: cp210x converter now attached to ttyUSB0
[  607.260182][T13501] tipc: Invalid UDP bearer configuration
[  607.260247][T13501] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  607.432689][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1961'.
[  607.820575][T13515] xt_SECMARK: invalid mode: 2
[  608.932063][T13520] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  608.979808][T13520] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  610.590425][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system
[  610.669933][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system
[  610.693299][ T5958] usb 6-1: USB disconnect, device number 54
[  610.716762][ T5958] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  610.725104][ T5958] cp210x 6-1:0.0: device disconnected
[  610.786007][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system
[  610.975606][T11447] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  611.090380][T13564] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1978'.
[  611.168666][T11447] usb 4-1: Using ep0 maxpacket: 32
[  611.199712][T11447] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  611.230225][T13564] batadv1: entered promiscuous mode
[  611.240128][T11447] usb 4-1: config 0 has no interface number 0
[  611.269695][T13564] batadv1: entered allmulticast mode
[  611.291778][T11447] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  611.338314][T11447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.363726][T11447] usb 4-1: Product: syz
[  611.401714][T11447] usb 4-1: Manufacturer: syz
[  611.433149][T11447] usb 4-1: SerialNumber: syz
[  611.451880][T11447] usb 4-1: config 0 descriptor??
[  611.503757][T11447] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  611.521891][T11447] usb 4-1: selecting invalid altsetting 1
[  611.567953][T11447] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  611.608394][T11447] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  611.633602][T11447] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  611.643482][T11447] usb 4-1: media controller created
[  611.685171][T11447] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  611.706811][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.722381][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.792144][T11447] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  611.815147][ T5958] usb 6-1: new full-speed USB device number 55 using dummy_hcd
[  611.820935][T11447] zl10353_read_register: readreg error (reg=127, ret==-71)
[  611.879452][T11447] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  612.244676][ T5958] usb 6-1: config 255 has an invalid interface number: 91 but max is 0
[  612.396958][ T5958] usb 6-1: config 255 has no interface number 0
[  612.424783][ T5958] usb 6-1: config 255 interface 91 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  612.442092][T11447] usb 4-1: USB disconnect, device number 81
[  612.508311][ T5958] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice=a8.6a
[  612.537870][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.575578][ T5958] usb 6-1: Product: syz
[  612.585705][ T5958] usb 6-1: Manufacturer: syz
[  612.621273][ T5958] usb 6-1: SerialNumber: syz
[  612.660544][ T5958] usbtouchscreen 6-1:255.91: probe with driver usbtouchscreen failed with error -12
[  612.884414][T13571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.929439][T13571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.017958][T11447] usb 6-1: USB disconnect, device number 55
[  613.666156][T13607] loop6: detected capacity change from 0 to 524287999
[  613.966094][ T5958] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  614.047892][ T8494] udevd[8494]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system
[  614.145596][ T5958] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  614.164328][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.207700][ T5958] usb 4-1: config 0 descriptor??
[  614.222235][ T5958] cp210x 4-1:0.0: cp210x converter detected
[  614.463820][T13636] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1995'.
[  614.624901][ T5958] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  614.686547][ T5958] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -32
[  614.750696][ T5958] cp210x 4-1:0.0: GPIO initialisation failed: -32
[  614.836933][T13647] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  614.933148][T13647] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  615.153245][T13625] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  615.168980][ T5958] usb 4-1: cp210x converter now attached to ttyUSB0
[  615.515613][ T5901] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[  615.725870][ T5901] usb 3-1: device descriptor read/64, error -71
[  615.986012][ T5901] usb 3-1: new full-speed USB device number 72 using dummy_hcd
[  616.166023][ T5901] usb 3-1: device descriptor read/64, error -71
[  616.287073][ T5901] usb usb3-port1: attempt power cycle
[  616.299459][T13655] 9pnet_fd: Insufficient options for proto=fd
[  616.685923][ T5901] usb 3-1: new full-speed USB device number 73 using dummy_hcd
[  616.736775][ T5901] usb 3-1: device descriptor read/8, error -71
[  617.136622][ T5901] usb 3-1: new full-speed USB device number 74 using dummy_hcd
[  617.297791][ T5901] usb 3-1: device descriptor read/8, error -71
[  617.532075][ T5901] usb usb3-port1: unable to enumerate USB device
[  617.682468][T13663] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2001'.
[  618.031496][ T5901] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  618.289333][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system
[  618.328038][T11447] usb 4-1: USB disconnect, device number 82
[  618.904823][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/102.tmp-b7:6' failed: Read-only file system
[  618.905834][ T5901] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  618.919348][T11447] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  618.934425][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.976001][ T5901] usb 3-1: config 0 descriptor??
[  619.052646][T11447] cp210x 4-1:0.0: device disconnected
[  619.143067][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/103.tmp-b7:6' failed: Read-only file system
[  619.190127][T13685] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2009'.
[  619.235230][T13685] /dev/nullb0: Can't lookup blockdev
[  619.390957][ T5901] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f
[  619.398978][ T5901] hackrf 3-1:0.0: Could not detect board
[  619.414617][ T5901] hackrf 3-1:0.0: probe with driver hackrf failed with error -71
[  619.469424][ T5901] usb 3-1: USB disconnect, device number 75
[  620.848220][T13700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2014'.
[  621.445682][ T5901] usb 6-1: new full-speed USB device number 56 using dummy_hcd
[  621.641739][ T5901] usb 6-1: device descriptor read/64, error -71
[  621.885743][ T5901] usb 6-1: new full-speed USB device number 57 using dummy_hcd
[  622.291965][T13723] loop6: detected capacity change from 0 to 524287999
[  622.299128][ T5901] usb 6-1: device descriptor read/64, error -71
[  622.396815][T13725] overlayfs: failed to clone upperpath
[  622.424091][ T5901] usb usb6-port1: attempt power cycle
[  622.595725][T11447] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  622.604719][T13729] overlayfs: failed to clone upperpath
[  622.804458][T11447] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  622.974220][T11447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.090536][T13732] overlayfs: failed to clone lowerpath
[  623.312666][T11447] usb 3-1: config 0 descriptor??
[  623.596707][T11447] cp210x 3-1:0.0: cp210x converter detected
[  623.623012][T13727] overlayfs: failed to clone upperpath
[  623.838331][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system
[  623.855261][T11447] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  624.029822][T11447] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -32
[  624.290125][T13723] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  624.387692][T13723] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  624.416348][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  624.416914][T11447] cp210x 3-1:0.0: GPIO initialisation failed: -32
[  624.423166][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  624.475094][T13742] bridge7: entered promiscuous mode
[  624.550553][T11447] usb 3-1: cp210x converter now attached to ttyUSB0
[  624.581150][T13744] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2025'.
[  624.626201][T13742] bridge7: entered allmulticast mode
[  624.680990][T13752] netlink: 340 bytes leftover after parsing attributes in process `syz.5.2028'.
[  624.713756][T13752] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2028'.
[  625.044876][T13756] overlayfs: failed to clone upperpath
[  625.346323][ T5901] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  625.497051][ T5901] usb 6-1: device descriptor read/64, error -71
[  625.641777][T13770] overlayfs: upper fs does not support tmpfile.
[  625.765807][ T5901] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  625.949820][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system
[  625.989368][ T5901] usb 6-1: device descriptor read/64, error -71
[  625.996735][ T5908] usb 3-1: USB disconnect, device number 76
[  626.023377][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system
[  626.043007][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  626.067154][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/105.tmp-b7:6' failed: Read-only file system
[  626.083475][ T5908] cp210x 3-1:0.0: device disconnected
[  626.107603][ T5901] usb usb6-port1: attempt power cycle
[  626.255666][T11447] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  626.264738][T13783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2036'.
[  626.282299][T13783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2036'.
[  626.291713][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'.
[  626.718712][T13788] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  626.725275][T13788] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  626.733171][T13788] vhci_hcd vhci_hcd.0: Device attached
[  626.756665][T11447] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  626.829912][ T5901] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  626.939033][ T5901] usb 6-1: device descriptor read/8, error -71
[  627.062346][T13789] vhci_hcd: connection closed
[  627.064068][   T13] vhci_hcd: stop threads
[  627.064203][T11447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.085858][T11447] usb 4-1: config 0 descriptor??
[  627.088367][   T13] vhci_hcd: release socket
[  627.096156][T11447] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  627.106127][   T13] vhci_hcd: disconnect device
[  627.164941][   T30] audit: type=1326 audit(1755909629.196:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13795 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ecd8ebe9 code=0x7ffc0000
[  627.214187][   T30] audit: type=1326 audit(1755909629.226:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13795 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f05ecd8ebe9 code=0x7ffc0000
[  627.241820][   T30] audit: type=1326 audit(1755909629.226:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13795 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ecd8ebe9 code=0x7ffc0000
[  627.263401][    C0] vkms_vblank_simulate: vblank timer overrun
[  627.277104][   T30] audit: type=1326 audit(1755909629.226:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13795 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ecd8ebe9 code=0x7ffc0000
[  627.298648][    C0] vkms_vblank_simulate: vblank timer overrun
[  627.313585][   T30] audit: type=1326 audit(1755909629.226:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13795 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f05ecd8ebe9 code=0x7ffc0000
[  627.315586][ T5901] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  627.339665][   T30] audit: type=1326 audit(1755909629.226:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13795 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ecd8ebe9 code=0x7ffc0000
[  627.364251][    C0] vkms_vblank_simulate: vblank timer overrun
[  627.378778][   T30] audit: type=1326 audit(1755909629.226:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13795 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ecd8ebe9 code=0x7ffc0000
[  627.401832][ T5901] usb 6-1: device descriptor read/8, error -71
[  627.407823][   T30] audit: type=1326 audit(1755909629.226:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13795 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f05ecd8ebe9 code=0x7ffc0000
[  627.429455][    C0] vkms_vblank_simulate: vblank timer overrun
[  627.444639][T11447] gspca_stv06xx: I2C: Read error writing address: -71
[  627.467195][T13798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2041'.
[  627.513018][T11447] usb 4-1: USB disconnect, device number 83
[  627.515956][ T5901] usb usb6-port1: unable to enumerate USB device
[  627.523770][   T30] audit: type=1326 audit(1755909629.226:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13795 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ecd8ebe9 code=0x7ffc0000
[  627.546783][    C0] vkms_vblank_simulate: vblank timer overrun
[  627.642176][   T30] audit: type=1326 audit(1755909629.226:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13795 comm="syz.1.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ecd8ebe9 code=0x7ffc0000
[  627.801224][T13824] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2048'.
[  628.529457][T13832] netlink: 800 bytes leftover after parsing attributes in process `syz.3.2049'.
[  628.576120][T13832] netlink: 1301 bytes leftover after parsing attributes in process `syz.3.2049'.
[  628.613542][T13832] netlink: 'syz.3.2049': attribute type 10 has an invalid length.
[  628.635856][T13832] geneve0: entered promiscuous mode
[  628.661618][T13832] geneve0: entered allmulticast mode
[  628.677744][T13832] : (slave geneve0): Enslaving as an active interface with an up link
[  628.815564][ T5908] usb 6-1: new full-speed USB device number 63 using dummy_hcd
[  629.001373][ T5908] usb 6-1: config 0 has an invalid interface number: 176 but max is 0
[  629.254110][ T5908] usb 6-1: config 0 has no interface number 0
[  629.268847][T13855] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  629.312394][ T5908] usb 6-1: config 0 interface 176 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  629.368542][T13855] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  629.452951][ T5908] usb 6-1: config 0 interface 176 has no altsetting 0
[  629.532777][T13850] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2056'.
[  629.541846][T13850] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  629.696591][ T5908] usb 6-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76
[  629.805794][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.849317][ T5908] usb 6-1: Product: syz
[  629.854465][ T5908] usb 6-1: Manufacturer: syz
[  629.891043][ T5908] usb 6-1: SerialNumber: syz
[  629.934004][ T5908] usb 6-1: config 0 descriptor??
[  629.971833][T13837] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  630.125882][ T5928] usb 3-1: new low-speed USB device number 77 using dummy_hcd
[  630.985761][T13837] 9pnet_fd: Insufficient options for proto=fd
[  631.079318][ T5928] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  631.113384][T13885] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  631.116194][ T5928] usb 3-1: config 1 has no interface number 1
[  631.155609][ T5928] usb 3-1: too many endpoints for config 1 interface 2 altsetting 251: 232, using maximum allowed: 30
[  631.190478][ T5928] usb 3-1: config 1 interface 2 altsetting 251 endpoint 0x1 has an invalid bInterval 22, changing to 4
[  631.217989][ T5928] usb 3-1: config 1 interface 2 altsetting 251 endpoint 0x1 has invalid maxpacket 64, setting to 0
[  631.253418][ T5928] usb 3-1: config 1 interface 2 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 232
[  631.328250][ T5928] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0
[  631.354244][ T5928] usb 3-1: config 1 interface 2 has no altsetting 2
[  631.379576][ T5928] usb 3-1: string descriptor 0 read error: -22
[  631.386034][ T5928] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  631.405464][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.556868][ T5908] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  632.393747][T13910] Invalid source name
[  632.465220][ T5908] usb 6-1: USB disconnect, device number 63
[  633.021529][T12648] udevd[12648]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  634.181191][T13940] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  634.199262][T13943] binder: BINDER_SET_CONTEXT_MGR already set
[  634.219889][T13943] binder: 13939:13943 ioctl 4018620d 200000004a80 returned -16
[  634.587819][T13951] hsr0: entered promiscuous mode
[  634.742156][T13955] Invalid source name
[  634.759816][T13955] UBIFS error (pid: 13955): cannot open "ubifs", error -22
[  635.000545][ T8834] usb 3-1: USB disconnect, device number 77
[  637.418735][ T5901] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  637.727725][ T5901] usb 4-1: Using ep0 maxpacket: 32
[  637.743284][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 57353, setting to 1024
[  637.818723][ T5901] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  637.832884][ T5901] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  638.886227][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.897840][ T5901] usb 4-1: Product: syz
[  638.902041][ T5901] usb 4-1: Manufacturer: syz
[  638.907565][ T5901] usb 4-1: SerialNumber: syz
[  638.992934][ T5901] usb 4-1: config 0 descriptor??
[  639.005591][ T5901] usb 4-1: can't set config #0, error -71
[  639.101675][ T5901] usb 4-1: USB disconnect, device number 84
[  639.847955][T14012] netlink: 'syz.0.2098': attribute type 4 has an invalid length.
[  643.769338][T14062] random: crng reseeded on system resumption
[  643.952962][T14071] dummy0: entered allmulticast mode
[  644.597503][T14076] bond0: entered promiscuous mode
[  644.622975][T14076] bond_slave_0: entered promiscuous mode
[  644.631399][T14076] bond_slave_1: entered promiscuous mode
[  644.765204][T14076] bond0: left promiscuous mode
[  644.772068][T14076] bond_slave_0: left promiscuous mode
[  644.962126][T14076] bond_slave_1: left promiscuous mode
[  644.998525][T14092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  646.537509][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'.
[  646.633729][T14113] overlayfs: failed to clone upperpath
[  647.276628][T14124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2126'.
[  647.657875][T14138] bridge0: entered allmulticast mode
[  647.664855][T14138] dummy0: left allmulticast mode
[  647.678347][T14138] bridge0: left allmulticast mode
[  649.067855][T14157] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  649.076805][T14157] macsec1: entered allmulticast mode
[  649.085041][T14157] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  649.547623][T14157] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  649.555118][T14157] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  650.051701][T14174] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2138'.
[  651.065266][T14165] ALSA: mixer_oss: invalid OSS volume ''
[  652.868631][ T5908] usb 6-1: new full-speed USB device number 64 using dummy_hcd
[  653.235612][ T5908] usb 6-1: device descriptor read/64, error -71
[  653.485606][ T5908] usb 6-1: new full-speed USB device number 65 using dummy_hcd
[  654.646086][ T5908] usb 6-1: device descriptor read/64, error -71
[  655.074242][ T5908] usb usb6-port1: attempt power cycle
[  655.103212][T14225] overlayfs: upper fs does not support tmpfile.
[  655.290543][T14235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2156'.
[  658.127152][ T6003] udevd[6003]: symlink '../../loop4' '/dev/disk/by-diskseq/78.tmp-b7:4' failed: Read-only file system
[  660.403937][T14283] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2172'.
[  660.587352][T14283] pim6reg: entered allmulticast mode
[  660.679832][T14287] pim6reg: left allmulticast mode
[  661.224847][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2177'.
[  661.707568][T14316] netlink: 'syz.0.2178': attribute type 11 has an invalid length.
[  664.751859][T14345] overlayfs: upper fs does not support tmpfile.
[  667.202332][T14377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2196'.
[  669.653837][T14395] 9pnet: Found fid 0 not clunked
[  669.670082][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2205'.
[  670.231723][T14402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  670.276736][T14406] netlink: 'syz.3.2208': attribute type 10 has an invalid length.
[  670.455234][T14406] team0: Cannot enslave team device to itself
[  670.578347][T11447] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  670.716314][ T5908] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  671.183350][T14418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2212'.
[  671.216005][T14418] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  671.295190][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  671.322374][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  671.445643][ T5908] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  671.474918][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  671.508627][ T5908] usb 3-1: SerialNumber: syz
[  671.942324][ T5908] usb 3-1: 0:2 : does not exist
[  671.996879][ T5908] usb 3-1: unit 5 not found!
[  672.683950][ T5908] usb 3-1: USB disconnect, device number 78
[  673.013822][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2217'.
[  673.023522][T14444] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  673.101743][T14447] overlayfs: failed to clone upperpath
[  673.225640][ T5908] usb 6-1: new low-speed USB device number 67 using dummy_hcd
[  673.268776][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  673.268793][   T30] audit: type=1800 audit(1755909675.306:215): pid=14448 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2222" name="nullb0" dev="tmpfs" ino=1088 res=0 errno=0
[  673.395613][ T5908] usb 6-1: Invalid ep0 maxpacket: 16
[  673.527212][ T5908] usb 6-1: new low-speed USB device number 68 using dummy_hcd
[  673.755698][ T5908] usb 6-1: Invalid ep0 maxpacket: 16
[  674.327459][ T5908] usb usb6-port1: attempt power cycle
[  674.599567][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2227'.
[  674.705634][ T5908] usb 6-1: new low-speed USB device number 69 using dummy_hcd
[  674.756510][ T5908] usb 6-1: Invalid ep0 maxpacket: 16
[  675.072854][ T5908] usb 6-1: new low-speed USB device number 70 using dummy_hcd
[  675.114753][ T5908] usb 6-1: Invalid ep0 maxpacket: 16
[  675.175576][ T5908] usb usb6-port1: unable to enumerate USB device
[  675.861401][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2238'.
[  676.968982][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2244'.
[  677.499240][T14515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2249'.
[  677.565729][T14514] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[  678.151393][T14535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2254'.
[  679.061929][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2260'.
[  680.265635][T11447] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  680.339215][ T5958] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  680.384981][T14567] smc: net device bond0 applied user defined pnetid S
[  680.456170][T11447] usb 6-1: Using ep0 maxpacket: 16
[  680.621451][T11447] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  680.631300][T11447] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.631369][ T5958] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  680.639735][T11447] usb 6-1: Product: syz
[  680.639756][T11447] usb 6-1: Manufacturer: syz
[  680.639771][T11447] usb 6-1: SerialNumber: syz
[  680.644705][T11447] r8152-cfgselector 6-1: Unknown version 0x0000
[  680.692019][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.895757][ T5958] usb 4-1: Product: syz
[  680.898980][T11447] r8152-cfgselector 6-1: config 0 descriptor??
[  680.905701][ T5958] usb 4-1: Manufacturer: syz
[  680.911084][ T5958] usb 4-1: SerialNumber: syz
[  680.949416][ T5958] usb 4-1: config 0 descriptor??
[  681.078850][T14579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2267'.
[  681.249835][T14581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  681.260366][T14581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.596016][ T5958] usb 4-1: f81604_write: reg: 105 data: 8a failed: -ETIMEDOUT
[  683.603540][ T5958] f81604 4-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT
[  683.611833][ T5958] f81604 4-1:0.0: probe with driver f81604 failed with error -110
[  683.634939][T11447] r8152-cfgselector 6-1: Unknown version 0x0000
[  683.673486][ T5908] usb 4-1: USB disconnect, device number 86
[  683.687030][T11447] r8152-cfgselector 6-1: bad CDC descriptors
[  683.947053][T11447] r8152-cfgselector 6-1: USB disconnect, device number 71
[  685.623014][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2275'.
[  685.758282][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  685.764820][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  686.227121][T11447] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  686.431929][T14630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.674939][T11447] usb 6-1: Using ep0 maxpacket: 16
[  687.184085][T11447] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10
[  687.215667][T11447] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  687.264841][T11447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.306650][T11447] usb 6-1: config 0 descriptor??
[  687.515909][ T5958] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  687.828705][ T5958] usb 3-1: Using ep0 maxpacket: 16
[  687.866561][ T5958] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  687.876063][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.884069][ T5958] usb 3-1: Product: syz
[  687.889575][ T5958] usb 3-1: Manufacturer: syz
[  687.894193][ T5958] usb 3-1: SerialNumber: syz
[  687.938368][ T5958] r8152-cfgselector 3-1: Unknown version 0x0000
[  687.955908][T11447] uclogic 0003:5543:0781.0015: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.5-1/input0
[  687.975382][ T5958] r8152-cfgselector 3-1: config 0 descriptor??
[  688.180545][ T5908] usb 6-1: USB disconnect, device number 72
[  688.714095][T14646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.724366][T14646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  688.922115][T14639] fido_id[14639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  692.405566][ T5958] r8152-cfgselector 3-1: Unknown version 0x0000
[  692.412514][ T5958] r8152-cfgselector 3-1: bad CDC descriptors
[  692.436884][ T5958] r8152-cfgselector 3-1: USB disconnect, device number 79
[  693.053265][T14661] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  693.119753][ T5845] Bluetooth: hci4: SCO packet too small
[  697.962642][T14717] 9pnet_fd: Insufficient options for proto=fd
[  699.573956][T14736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2314'.
[  701.065599][ T5958] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  701.259801][ T5958] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  701.360207][ T5958] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  701.403073][ T5958] usb 6-1: config 1 interface 0 has no altsetting 0
[  701.438482][ T5958] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.40
[  701.484219][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.541132][ T5958] usb 6-1: Product: syz
[  701.556544][ T5958] usb 6-1: Manufacturer: syz
[  701.562482][ T5958] usb 6-1: SerialNumber: syz
[  701.780937][ T9549] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  701.823484][ T9549] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  701.836590][ T5958] usbhid 6-1:1.0: can't add hid device: -71
[  701.846722][ T5958] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  701.905227][ T5958] usb 6-1: USB disconnect, device number 73
[  701.934895][ T9549] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  701.962760][ T9549] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.029595][ T9549] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.095659][ T9549] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.166976][ T9549] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  702.176937][ T9549] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.458946][T14771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2325'.
[  703.316141][ T9549] bridge0: port 2(dummy0) entered disabled state
[  703.399169][ T9549] bridge_slave_0: left allmulticast mode
[  703.404861][ T9549] bridge_slave_0: left promiscuous mode
[  703.431661][ T9549] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.670673][T14786] xt_hashlimit: overflow, rate too high: 0
[  705.524719][T10446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  705.535016][T10446] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  705.543145][T10446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  705.551879][T10446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  705.560716][T10446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  706.674434][ T6003] udevd[6003]: symlink '../../loop7' '/dev/disk/by-diskseq/106.tmp-b7:7' failed: Read-only file system
[  706.689553][T14814] FAULT_INJECTION: forcing a failure.
[  706.689553][T14814] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  706.724886][T14814] CPU: 0 UID: 0 PID: 14814 Comm: syz.3.2339 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  706.724913][T14814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  706.724926][T14814] Call Trace:
[  706.724933][T14814]  <TASK>
[  706.724942][T14814]  dump_stack_lvl+0x189/0x250
[  706.724970][T14814]  ? __pfx____ratelimit+0x10/0x10
[  706.724991][T14814]  ? __pfx_dump_stack_lvl+0x10/0x10
[  706.725011][T14814]  ? __pfx__printk+0x10/0x10
[  706.725036][T14814]  ? __might_fault+0xb0/0x130
[  706.725068][T14814]  should_fail_ex+0x414/0x560
[  706.725091][T14814]  _copy_from_user+0x2d/0xb0
[  706.725118][T14814]  ___sys_sendmsg+0x158/0x2a0
[  706.725150][T14814]  ? __pfx____sys_sendmsg+0x10/0x10
[  706.725186][T14814]  ? rcu_read_lock_any_held+0xb3/0x120
[  706.725219][T14814]  ? sb_end_write+0xe9/0x1c0
[  706.725254][T14814]  ? __pfx_vfs_write+0x10/0x10
[  706.725283][T14814]  __x64_sys_sendmsg+0x19b/0x260
[  706.725314][T14814]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  706.725354][T14814]  ? __pfx_ksys_write+0x10/0x10
[  706.725369][T14814]  ? rcu_is_watching+0x15/0xb0
[  706.725393][T14814]  ? do_syscall_64+0xbe/0x3b0
[  706.725420][T14814]  do_syscall_64+0xfa/0x3b0
[  706.725439][T14814]  ? lockdep_hardirqs_on+0x9c/0x150
[  706.725462][T14814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.725481][T14814]  ? clear_bhb_loop+0x60/0xb0
[  706.725501][T14814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.725517][T14814] RIP: 0033:0x7f3ad6d8ebe9
[  706.725532][T14814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  706.725546][T14814] RSP: 002b:00007f3ad7c69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  706.725566][T14814] RAX: ffffffffffffffda RBX: 00007f3ad6fb5fa0 RCX: 00007f3ad6d8ebe9
[  706.725578][T14814] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003
[  706.725590][T14814] RBP: 00007f3ad7c69090 R08: 0000000000000000 R09: 0000000000000000
[  706.725602][T14814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  706.725612][T14814] R13: 00007f3ad6fb6038 R14: 00007f3ad6fb5fa0 R15: 00007ffef0806228
[  706.725640][T14814]  </TASK>
[  706.790628][ T6003] udevd[6003]: symlink '../../loop7' '/dev/disk/by-diskseq/106.tmp-b7:7' failed: Read-only file system
[  706.982882][ T6003] udevd[6003]: symlink '../../loop7' '/dev/disk/by-diskseq/106.tmp-b7:7' failed: Read-only file system
[  707.746647][ T5845] Bluetooth: hci2: command tx timeout
[  708.325400][T14841] xt_hashlimit: overflow, rate too high: 0
[  708.461655][ T9549] team0: Port device bridge1 removed
[  708.729720][T14858] loop2: detected capacity change from 0 to 7
[  708.857924][T14858] Dev loop2: unable to read RDB block 7
[  708.867723][T14858]  loop2: AHDI p2
[  708.875520][T14858] loop2: partition table partially beyond EOD, truncated
[  709.448378][T12645] udevd[12645]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system
[  709.507922][ T8494] udevd[8494]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system
[  709.573394][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system
[  709.762251][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2354'.
[  709.781047][ T6003] udevd[6003]: symlink '../../loop2' '/dev/disk/by-diskseq/108.tmp-b7:2' failed: Read-only file system
[  709.825834][ T5845] Bluetooth: hci2: command tx timeout
[  709.916297][ T9549] tipc: Left network mode
[  710.175994][ T5958] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  710.365728][ T5958] usb 4-1: device descriptor read/64, error -71
[  710.636539][ T5958] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  710.785468][ T5958] usb 4-1: device descriptor read/64, error -71
[  710.896551][ T5958] usb usb4-port1: attempt power cycle
[  710.915653][ T9549] hsr_slave_0: left promiscuous mode
[  710.938031][ T9549] hsr_slave_1: left promiscuous mode
[  710.944318][ T9549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  710.952945][ T9549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  710.967143][ T9549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  710.974823][ T9549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  711.045879][ T9549] veth1_macvtap: left promiscuous mode
[  711.071807][ T9549] veth0_macvtap: left promiscuous mode
[  711.082098][ T9549] veth1_vlan: left promiscuous mode
[  711.092184][ T9549] veth0_vlan: left promiscuous mode
[  711.222584][T14898] xt_hashlimit: overflow, rate too high: 0
[  711.245942][ T5958] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  711.298072][ T5958] usb 4-1: device descriptor read/8, error -71
[  711.565324][ T5958] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  711.597437][ T5958] usb 4-1: device descriptor read/8, error -71
[  711.710924][ T5958] usb usb4-port1: unable to enumerate USB device
[  711.856733][ T9549] team0 (unregistering): Port device team_slave_1 removed
[  711.906563][ T5845] Bluetooth: hci2: command tx timeout
[  711.927181][ T9549] team0 (unregistering): Port device team_slave_0 removed
[  712.442103][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'.
[  712.579673][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2371'.
[  712.783185][ T9549] dummy0 (unregistering): left allmulticast mode
[  713.260220][T14797] chnl_net:caif_netlink_parms(): no params data found
[  713.623145][T14797] bridge0: port 1(bridge_slave_0) entered blocking state
[  713.662351][T14797] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.747282][T14797] bridge_slave_0: entered allmulticast mode
[  713.816644][T14797] bridge_slave_0: entered promiscuous mode
[  713.944591][T14797] bridge0: port 2(bridge_slave_1) entered blocking state
[  713.996585][ T5845] Bluetooth: hci2: command tx timeout
[  714.086832][T14797] bridge0: port 2(bridge_slave_1) entered disabled state
[  714.094083][T14797] bridge_slave_1: entered allmulticast mode
[  714.267046][T14797] bridge_slave_1: entered promiscuous mode
[  715.000108][T14797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  715.213398][T14797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  715.370068][ T6003] udevd[6003]: symlink '../../loop4' '/dev/disk/by-diskseq/78.tmp-b7:4' failed: Read-only file system
[  715.523163][T14797] team0: Port device team_slave_0 added
[  715.532126][T14797] team0: Port device team_slave_1 added
[  716.533778][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2386'.
[  716.766932][T14797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  716.778040][T14797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  717.109716][T14797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  717.206139][T14797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  717.213384][T14797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  717.282051][T14797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  717.340491][T14993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  717.358753][T14993] batadv_slave_0: entered promiscuous mode
[  717.368643][T14993] batadv_slave_0: entered allmulticast mode
[  717.514411][T15002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2393'.
[  717.582334][T14797] hsr_slave_0: entered promiscuous mode
[  717.591245][T14797] hsr_slave_1: entered promiscuous mode
[  717.704620][ T5928] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  717.704831][T15011] netlink: 'syz.1.2396': attribute type 10 has an invalid length.
[  717.739112][T15011] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  717.877865][ T5928] usb 6-1: Using ep0 maxpacket: 16
[  718.065189][ T5928] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  718.074226][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.180908][ T5928] usb 6-1: Product: syz
[  718.293072][ T5928] usb 6-1: Manufacturer: syz
[  718.367074][ T5928] usb 6-1: SerialNumber: syz
[  718.395808][ T5928] r8152-cfgselector 6-1: Unknown version 0x0000
[  718.414985][ T5928] r8152-cfgselector 6-1: config 0 descriptor??
[  718.427501][   T30] audit: type=1326 audit(1755912296.454:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15022 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  718.479123][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2401'.
[  718.524467][   T30] audit: type=1326 audit(1755912296.454:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15022 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  718.604538][   T30] audit: type=1326 audit(1755912296.454:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15022 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  718.772991][T15032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.782871][T15032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.375377][   T30] audit: type=1326 audit(1755912296.454:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15022 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  720.397361][   T30] audit: type=1326 audit(1755912296.454:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15022 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  720.419503][   T30] audit: type=1326 audit(1755912296.534:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15022 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  720.441410][   T30] audit: type=1326 audit(1755912296.534:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15022 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  720.463889][   T30] audit: type=1326 audit(1755912296.534:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15022 comm="syz.0.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  721.690934][ T5928] r8152-cfgselector 6-1: Unknown version 0x0000
[  721.711070][ T5928] r8152-cfgselector 6-1: bad CDC descriptors
[  721.751851][ T5928] r8152-cfgselector 6-1: USB disconnect, device number 74
[  722.287446][T14797] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  722.721197][T15045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2405'.
[  723.241887][T15048] syz.3.2406: attempt to access beyond end of device
[  723.241887][T15048] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0
[  723.244727][T14797] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  723.354123][T15051] netlink: 604 bytes leftover after parsing attributes in process `syz.5.2407'.
[  723.483360][T15049] netlink: 'syz.5.2407': attribute type 29 has an invalid length.
[  723.494267][T15050] netlink: 'syz.5.2407': attribute type 29 has an invalid length.
[  723.510236][T14797] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  723.564124][T14797] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  724.198400][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2411'.
[  724.317571][ T8494] udevd[8494]: symlink '../../loop4' '/dev/disk/by-diskseq/78.tmp-b7:4' failed: Read-only file system
[  724.383039][T14797] 8021q: adding VLAN 0 to HW filter on device bond0
[  724.449805][T14797] 8021q: adding VLAN 0 to HW filter on device team0
[  724.492006][ T9549] bridge0: port 1(bridge_slave_0) entered blocking state
[  724.499211][ T9549] bridge0: port 1(bridge_slave_0) entered forwarding state
[  724.549328][ T9549] bridge0: port 2(bridge_slave_1) entered blocking state
[  724.556550][ T9549] bridge0: port 2(bridge_slave_1) entered forwarding state
[  724.687110][T14797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  724.704312][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'.
[  724.730630][T14797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  724.895100][T15082] hsr_slave_1 (unregistering): left promiscuous mode
[  725.687513][T15098] xt_hashlimit: overflow, rate too high: 0
[  726.085317][T11447] usb 6-1: new full-speed USB device number 75 using dummy_hcd
[  726.533262][T11447] usb 6-1: config 0 has an invalid interface number: 10 but max is 0
[  726.541643][T11447] usb 6-1: config 0 has no interface number 0
[  726.554501][T11447] usb 6-1: config 0 interface 10 has no altsetting 0
[  726.591098][T11447] usb 6-1: New USB device found, idVendor=0c45, idProduct=62b3, bcdDevice=a2.72
[  726.615628][T11447] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.630889][T11447] usb 6-1: Product: syz
[  726.635445][T11447] usb 6-1: Manufacturer: syz
[  726.640141][T11447] usb 6-1: SerialNumber: syz
[  726.650480][T11447] usb 6-1: config 0 descriptor??
[  726.706732][T11447] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b3
[  726.727695][T14797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  726.756848][ T8494] udevd[8494]: symlink '../../loop4' '/dev/disk/by-diskseq/78.tmp-b7:4' failed: Read-only file system
[  726.799835][T15107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2424'.
[  726.896647][T11447] gspca_sn9c20x: Write register 1000 failed -71
[  726.923282][T11447] gspca_sn9c20x: Device initialization failed
[  726.946463][T11447] gspca_sn9c20x 6-1:0.10: probe with driver gspca_sn9c20x failed with error -71
[  726.996198][T11447] usb 6-1: USB disconnect, device number 75
[  727.328085][T15125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2429'.
[  727.413791][T14797] veth0_vlan: entered promiscuous mode
[  727.427759][T14797] veth1_vlan: entered promiscuous mode
[  727.456539][T14797] veth0_macvtap: entered promiscuous mode
[  727.466749][T14797] veth1_macvtap: entered promiscuous mode
[  727.486782][T14797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  727.498715][T14797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  727.582901][T14797] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  727.597922][T14797] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  727.606785][T14797] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  727.615812][T14797] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  728.311019][T15134] 9pnet_fd: Insufficient options for proto=fd
[  728.331312][T15136] x_tables: unsorted underflow at hook 3
[  728.635465][T15141] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  728.664230][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2435'.
[  728.704048][ T9545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  728.722564][ T9545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  728.799427][T15146] input: syz0 as /devices/virtual/input/input95
[  728.830186][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  728.856182][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.037666][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/105.tmp-b7:6' failed: Read-only file system
[  729.296661][T15151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2439'.
[  730.392918][ T5845] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  730.450203][T15165] overlayfs: failed to clone upperpath
[  731.193242][T10446] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  731.204811][T10446] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  731.257311][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2447'.
[  731.278226][T10446] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  731.287212][T10446] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  731.295877][T10446] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  731.511718][ T9545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.660418][T15189] gretap0: entered promiscuous mode
[  731.668909][T15189] vlan3: entered promiscuous mode
[  731.679813][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/105.tmp-b7:6' failed: Read-only file system
[  732.257312][ T9545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.432690][T11447] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  733.000468][ T9545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.049201][T11447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  733.069558][T11447] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  733.081797][T11447] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  733.096493][T11447] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.178138][T11447] usb 7-1: config 0 descriptor??
[  733.278567][ T9545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.313413][T11447] em28xx 7-1:0.0: New device   @ 480 Mbps (2040:1605, interface 0, class 0)
[  733.326611][T15206] dummy0: entered allmulticast mode
[  733.338159][T11447] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  733.423326][T10446] Bluetooth: hci4: command tx timeout
[  734.072213][T11447] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  734.117977][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2454'.
[  734.313513][T11447] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  734.347478][T11447] em28xx 7-1:0.0: board has no eeprom
[  734.390093][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2455'.
[  734.414632][ T5958] IPVS: starting estimator thread 0...
[  734.426655][ T9545] bridge_slave_1: left allmulticast mode
[  734.433276][   T30] audit: type=1326 audit(1755912312.476:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15212 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  734.469853][ T9545] bridge_slave_1: left promiscuous mode
[  734.481837][T11447] em28xx 7-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81)
[  734.494610][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.503651][T11447] em28xx 7-1:0.0: dvb set to bulk mode.
[  734.511301][ T5849] em28xx 7-1:0.0: Binding DVB extension
[  734.517093][T15214] IPVS: using max 31 ests per chain, 74400 per kthread
[  734.545435][   T30] audit: type=1326 audit(1755912312.476:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15212 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  734.799689][ T9545] bridge_slave_0: left allmulticast mode
[  734.808110][   T30] audit: type=1326 audit(1755912312.496:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15212 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  734.811797][ T9545] bridge_slave_0: left promiscuous mode
[  734.837056][   T30] audit: type=1326 audit(1755912312.496:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15212 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  734.880259][ T5849] em28xx 7-1:0.0: writing to i2c device at 0x82 failed (error=-5)
[  734.891895][T11447] usb 7-1: USB disconnect, device number 2
[  734.901763][T11447] em28xx 7-1:0.0: Disconnecting em28xx
[  734.951167][T12648] udevd[12648]: symlink '../../loop6' '/dev/disk/by-diskseq/105.tmp-b7:6' failed: Read-only file system
[  734.952570][   T30] audit: type=1326 audit(1755912312.496:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15212 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  734.984350][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.018138][   T30] audit: type=1326 audit(1755912312.496:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15212 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  735.079376][   T30] audit: type=1326 audit(1755912312.496:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15212 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  735.147583][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/105.tmp-b7:6' failed: Read-only file system
[  735.178997][   T30] audit: type=1326 audit(1755912312.496:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15212 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  735.214216][   T30] audit: type=1326 audit(1755912312.496:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15212 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  735.238078][   T30] audit: type=1326 audit(1755912312.496:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15212 comm="syz.0.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7ff78478ebe9 code=0x7ffc0000
[  735.404998][ T5849] DVB: Unable to find symbol drxk_attach()
[  735.416615][ T5849] em28xx 7-1:0.0: Registering input extension
[  735.433156][T11447] em28xx 7-1:0.0: Closing input extension
[  735.465636][T11447] em28xx 7-1:0.0: Freeing device
[  735.510817][T10446] Bluetooth: hci4: command tx timeout
[  736.441651][ T9545] smc: removing net device bond0 with user defined pnetid S
[  736.452738][ T9545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  736.456348][ T6018] smc: removing ib device syz2
[  736.469295][ T9545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  736.481701][ T9545] bond0 (unregistering): (slave team0): Releasing backup interface
[  736.491023][ T9545] bond0 (unregistering): (slave bond1): Releasing backup interface
[  736.500733][ T9545] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  736.518486][ T9545] bond0 (unregistering): Released all slaves
[  736.647236][ T9545] bond1 (unregistering): Released all slaves
[  736.671463][T15228] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.775622][T15228] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.918117][ T6003] udevd[6003]: symlink '../../loop6' '/dev/disk/by-diskseq/105.tmp-b7:6' failed: Read-only file system
[  736.965563][T15235] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.040997][T15228] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.167470][T15235] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.218705][T15228] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.684452][T10446] Bluetooth: hci4: command tx timeout
[  737.867759][T15235] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.068591][T15235] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.287624][T15228] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  738.384927][T15228] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  738.481440][T15228] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  738.508813][T15181] chnl_net:caif_netlink_parms(): no params data found
[  738.569130][T15228] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  738.601387][T15235] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  738.881582][T15235] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  738.959719][T15235] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  739.061318][T15235] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  739.146110][ T9545] 
[  739.148483][ T9545] ======================================================
[  739.155488][ T9545] WARNING: possible circular locking dependency detected
[  739.162512][ T9545] 6.16.0-syzkaller #0 Not tainted
[  739.167535][ T9545] ------------------------------------------------------
[  739.174543][ T9545] kworker/u8:18/9545 is trying to acquire lock:
[  739.180766][ T9545] ffff88807cc08e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0
[  739.190346][ T9545] 
[  739.190346][ T9545] but task is already holding lock:
[  739.197694][ T9545] ffff888079940768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[  739.208037][ T9545] 
[  739.208037][ T9545] which lock already depends on the new lock.
[  739.208037][ T9545] 
[  739.218435][ T9545] 
[  739.218435][ T9545] the existing dependency chain (in reverse order) is:
[  739.227439][ T9545] 
[  739.227439][ T9545] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  739.235174][ T9545]        lock_acquire+0x120/0x360
[  739.240201][ T9545]        __mutex_lock+0x182/0xe80
[  739.245220][ T9545]        ieee80211_open+0xed/0x1f0
[  739.250343][ T9545]        __dev_open+0x470/0x880
[  739.255189][ T9545]        netif_open+0xaa/0x170
[  739.259951][ T9545]        dev_open+0x125/0x260
[  739.264623][ T9545]        team_add_slave+0xb36/0x2840
[  739.269904][ T9545]        do_set_master+0x530/0x6d0
[  739.275015][ T9545]        do_setlink+0xcf0/0x41c0
[  739.279952][ T9545]        rtnl_newlink+0x160b/0x1c70
[  739.285144][ T9545]        rtnetlink_rcv_msg+0x7cc/0xb70
[  739.290599][ T9545]        netlink_rcv_skb+0x205/0x470
[  739.295882][ T9545]        netlink_unicast+0x75c/0x8e0
[  739.301162][ T9545]        netlink_sendmsg+0x805/0xb30
[  739.306455][ T9545]        __sock_sendmsg+0x21c/0x270
[  739.311645][ T9545]        ____sys_sendmsg+0x505/0x830
[  739.316933][ T9545]        ___sys_sendmsg+0x21f/0x2a0
[  739.322140][ T9545]        __x64_sys_sendmsg+0x19b/0x260
[  739.327614][ T9545]        do_syscall_64+0xfa/0x3b0
[  739.332642][ T9545]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.339055][ T9545] 
[  739.339055][ T9545] -> #0 (team->team_lock_key#2){+.+.}-{4:4}:
[  739.347235][ T9545]        validate_chain+0xb9b/0x2140
[  739.352518][ T9545]        __lock_acquire+0xab9/0xd20
[  739.357705][ T9545]        lock_acquire+0x120/0x360
[  739.362719][ T9545]        __mutex_lock+0x182/0xe80
[  739.367733][ T9545]        team_del_slave+0x32/0x1c0
[  739.372840][ T9545]        team_device_event+0x285/0xa20
[  739.378293][ T9545]        notifier_call_chain+0x1b3/0x3e0
[  739.383985][ T9545]        unregister_netdevice_many_notify+0x15d8/0x2320
[  739.390932][ T9545]        unregister_netdevice_queue+0x33c/0x380
[  739.397175][ T9545]        _cfg80211_unregister_wdev+0x165/0x590
[  739.403340][ T9545]        ieee80211_remove_interfaces+0x49a/0x6d0
[  739.409670][ T9545]        ieee80211_unregister_hw+0x5d/0x2c0
[  739.415568][ T9545]        mac80211_hwsim_del_radio+0x275/0x460
[  739.421637][ T9545]        hwsim_exit_net+0x584/0x640
[  739.426833][ T9545]        ops_undo_list+0x497/0x990
[  739.431943][ T9545]        cleanup_net+0x4c5/0x800
[  739.436875][ T9545]        process_scheduled_works+0xade/0x17b0
[  739.442932][ T9545]        worker_thread+0x8a0/0xda0
[  739.448035][ T9545]        kthread+0x70e/0x8a0
[  739.452623][ T9545]        ret_from_fork+0x3fc/0x770
[  739.457726][ T9545]        ret_from_fork_asm+0x1a/0x30
[  739.463016][ T9545] 
[  739.463016][ T9545] other info that might help us debug this:
[  739.463016][ T9545] 
[  739.473230][ T9545]  Possible unsafe locking scenario:
[  739.473230][ T9545] 
[  739.480667][ T9545]        CPU0                    CPU1
[  739.486023][ T9545]        ----                    ----
[  739.491374][ T9545]   lock(&rdev->wiphy.mtx);
[  739.495876][ T9545]                                lock(team->team_lock_key#2);
[  739.503338][ T9545]                                lock(&rdev->wiphy.mtx);
[  739.510357][ T9545]   lock(team->team_lock_key#2);
[  739.515298][ T9545] 
[  739.515298][ T9545]  *** DEADLOCK ***
[  739.515298][ T9545] 
[  739.523432][ T9545] 5 locks held by kworker/u8:18/9545:
[  739.528789][ T9545]  #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  739.539674][ T9545]  #1: ffffc90003e9fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  739.550201][ T9545]  #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  739.559520][ T9545]  #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0
[  739.569361][ T9545]  #4: ffff888079940768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[  739.580154][ T9545] 
[  739.580154][ T9545] stack backtrace:
[  739.586041][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: kworker/u8:18 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  739.586065][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  739.586077][ T9545] Workqueue: netns cleanup_net
[  739.586100][ T9545] Call Trace:
[  739.586109][ T9545]  <TASK>
[  739.586118][ T9545]  dump_stack_lvl+0x189/0x250
[  739.586139][ T9545]  ? __pfx_dump_stack_lvl+0x10/0x10
[  739.586156][ T9545]  ? __pfx__printk+0x10/0x10
[  739.586177][ T9545]  ? print_lock_name+0xde/0x100
[  739.586197][ T9545]  print_circular_bug+0x2ee/0x310
[  739.586218][ T9545]  check_noncircular+0x134/0x160
[  739.586239][ T9545]  validate_chain+0xb9b/0x2140
[  739.586260][ T9545]  ? lockdep_hardirqs_on+0x9c/0x150
[  739.586282][ T9545]  __lock_acquire+0xab9/0xd20
[  739.586299][ T9545]  ? team_del_slave+0x32/0x1c0
[  739.586320][ T9545]  lock_acquire+0x120/0x360
[  739.586333][ T9545]  ? team_del_slave+0x32/0x1c0
[  739.586356][ T9545]  ? __mutex_trylock_common+0x153/0x260
[  739.586377][ T9545]  __mutex_lock+0x182/0xe80
[  739.586395][ T9545]  ? team_del_slave+0x32/0x1c0
[  739.586415][ T9545]  ? rcu_is_watching+0x15/0xb0
[  739.586435][ T9545]  ? team_del_slave+0x32/0x1c0
[  739.586456][ T9545]  ? __pfx___mutex_lock+0x10/0x10
[  739.586474][ T9545]  ? bond_netdev_event+0xd9/0xe80
[  739.586498][ T9545]  ? __pfx___mutex_lock+0x10/0x10
[  739.586515][ T9545]  ? __pfx_bond_netdev_event+0x10/0x10
[  739.586541][ T9545]  team_del_slave+0x32/0x1c0
[  739.586564][ T9545]  team_device_event+0x285/0xa20
[  739.586581][ T9545]  notifier_call_chain+0x1b3/0x3e0
[  739.586603][ T9545]  unregister_netdevice_many_notify+0x15d8/0x2320
[  739.586627][ T9545]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  739.586648][ T9545]  ? __lock_acquire+0xab9/0xd20
[  739.586671][ T9545]  unregister_netdevice_queue+0x33c/0x380
[  739.586688][ T9545]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  739.586709][ T9545]  _cfg80211_unregister_wdev+0x165/0x590
[  739.586733][ T9545]  ieee80211_remove_interfaces+0x49a/0x6d0
[  739.586753][ T9545]  ? __pfx_synchronize_rcu+0x10/0x10
[  739.586772][ T9545]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  739.586791][ T9545]  ? rcu_is_watching+0x15/0xb0
[  739.586810][ T9545]  ieee80211_unregister_hw+0x5d/0x2c0
[  739.586837][ T9545]  mac80211_hwsim_del_radio+0x275/0x460
[  739.586863][ T9545]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  739.586890][ T9545]  hwsim_exit_net+0x584/0x640
[  739.586911][ T9545]  ? __pfx_hwsim_exit_net+0x10/0x10
[  739.586932][ T9545]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  739.586956][ T9545]  ops_undo_list+0x497/0x990
[  739.586980][ T9545]  ? __pfx_ops_undo_list+0x10/0x10
[  739.587005][ T9545]  cleanup_net+0x4c5/0x800
[  739.587027][ T9545]  ? __pfx_cleanup_net+0x10/0x10
[  739.587050][ T9545]  ? _raw_spin_unlock_irq+0x23/0x50
[  739.587068][ T9545]  ? process_scheduled_works+0x9ef/0x17b0
[  739.587085][ T9545]  ? process_scheduled_works+0x9ef/0x17b0
[  739.587102][ T9545]  process_scheduled_works+0xade/0x17b0
[  739.587130][ T9545]  ? __pfx_process_scheduled_works+0x10/0x10
[  739.587153][ T9545]  worker_thread+0x8a0/0xda0
[  739.587180][ T9545]  kthread+0x70e/0x8a0
[  739.587202][ T9545]  ? __pfx_worker_thread+0x10/0x10
[  739.587218][ T9545]  ? __pfx_kthread+0x10/0x10
[  739.587239][ T9545]  ? _raw_spin_unlock_irq+0x23/0x50
[  739.587253][ T9545]  ? lockdep_hardirqs_on+0x9c/0x150
[  739.587268][ T9545]  ? __pfx_kthread+0x10/0x10
[  739.587288][ T9545]  ret_from_fork+0x3fc/0x770
[  739.587304][ T9545]  ? __pfx_ret_from_fork+0x10/0x10
[  739.587321][ T9545]  ? __switch_to_asm+0x39/0x70
[  739.587339][ T9545]  ? __switch_to_asm+0x33/0x70
[  739.587358][ T9545]  ? __pfx_kthread+0x10/0x10
[  739.587378][ T9545]  ret_from_fork_asm+0x1a/0x30
[  739.587404][ T9545]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  739.947000][T15253] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2466'.
[  739.952712][T10446] Bluetooth: hci4: command tx timeout
[  740.351677][ T9545] team0: Port device wlan1 removed
[  740.382196][T15181] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR
[  740.545180][ T9545] hsr_slave_0: left promiscuous mode
[  740.562287][ T9545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  740.661702][ T9545] batman_adv: batadv0: Removing interface: batadv_slave_0
[  740.682938][ T9545] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  740.694053][ T9545] batman_adv: batadv0: Removing interface: batadv_slave_1
[  740.719448][ T9545] veth1_macvtap: left promiscuous mode
[  740.725327][ T9545] veth0_macvtap: left promiscuous mode
[  740.730922][ T9545] veth1_vlan: left promiscuous mode
[  740.857357][ T9545] team0 (unregistering): Port device team_slave_1 removed
[  740.884587][ T9545] team0 (unregistering): Port device team_slave_0 removed
[  741.009671][ T9545] dummy0 (unregistering): left allmulticast mode
[  741.376785][ T9545] IPVS: stop unused estimator thread 0...
[  741.427011][ T9545] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.475219][ T9545] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.534107][ T9545] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.574956][ T9545] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.651325][ T9545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  741.663195][ T9545] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.734838][ T9545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  741.745571][ T9545] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.805697][ T9545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  741.816039][ T9545] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.862155][ T9545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  741.872595][ T9545] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.963343][ T9545] bridge_slave_1: left allmulticast mode
[  741.969020][ T9545] bridge_slave_1: left promiscuous mode
[  741.975623][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state
[  741.983985][ T9545] bridge_slave_0: left allmulticast mode
[  741.989632][ T9545] bridge_slave_0: left promiscuous mode
[  741.995728][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.005052][ T9545] bridge_slave_1: left allmulticast mode
[  742.010721][ T9545] bridge_slave_1: left promiscuous mode
[  742.017305][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.025567][ T9545] bridge_slave_0: left allmulticast mode
[  742.031202][ T9545] bridge_slave_0: left promiscuous mode
[  742.037948][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.118698][ T9545] bond0 (unregistering): Released all slaves
[  742.146826][ T9545] dvmrp0 (unregistering): left allmulticast mode
[  742.167395][ T9545]  (unregistering): (slave geneve0): Releasing backup interface
[  742.179692][ T9545] geneve0 (unregistering): left allmulticast mode
[  742.383348][ T9545]  (unregistering): left promiscuous mode
[  742.389191][ T9545] bond_slave_0: left promiscuous mode
[  742.395032][ T9545] bond_slave_1: left promiscuous mode
[  742.401183][ T9545]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  742.409721][ T9545] bond_slave_0: left allmulticast mode
[  742.416279][ T9545]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  742.425190][ T9545] bond_slave_1: left allmulticast mode
[  742.431309][ T9545]  (unregistering): Released all slaves
[  742.717593][ T9545]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  742.726913][ T9545]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  742.736252][ T9545]  (unregistering): Released all slaves
[  742.847632][ T9545] bond1 (unregistering): Released all slaves
[  742.957312][ T9545] bond0 (unregistering): Released all slaves
[  742.965938][ T9545] bond2 (unregistering): Released all slaves
[  743.288196][ T9545] batman_adv: batadv0: Interface deactivated: wlan0
[  743.297969][ T9545] batman_adv: batadv0: Removing interface: wlan0
[  743.356140][ T9545] batadv0: left promiscuous mode
[  743.363731][ T9545] hsr_slave_0: left promiscuous mode
[  743.369816][ T9545] hsr_slave_1: left promiscuous mode
[  743.375795][ T9545] batman_adv: batadv0: Removing interface: batadv_slave_0
[  743.383676][ T9545] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  743.391092][ T9545] batman_adv: batadv0: Removing interface: batadv_slave_1
[  743.403833][ T9545] hsr_slave_0: left promiscuous mode
[  743.409538][ T9545] hsr_slave_1: left promiscuous mode
[  743.415241][ T9545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  743.422640][ T9545] batman_adv: batadv0: Removing interface: batadv_slave_0
[  743.430134][ T9545] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  743.437588][ T9545] batman_adv: batadv0: Removing interface: batadv_slave_1
[  743.448237][ T9545] veth1_macvtap: left promiscuous mode
[  743.453789][ T9545] veth0_macvtap: left promiscuous mode
[  743.459317][ T9545] veth1_vlan: left promiscuous mode
[  743.464725][ T9545] veth0_vlan: left promiscuous mode
[  743.470519][ T9545] veth1_macvtap: left promiscuous mode
[  743.476111][ T9545] veth0_macvtap: left promiscuous mode
[  743.481785][ T9545] veth1_vlan: left promiscuous mode
[  743.692927][ T9545] team0 (unregistering): Port device team_slave_1 removed
[  743.717539][ T9545] team0 (unregistering): Port device team_slave_0 removed
[  743.756394][ T9545] dummy0 (unregistering): left allmulticast mode
[  743.885268][ T9545] pimreg (unregistering): left allmulticast mode
[  744.026532][ T9545] team0 (unregistering): Port device team_slave_1 removed
[  744.050784][ T9545] team0 (unregistering): Port device team_slave_0 removed
[  744.121130][ T9545] team0 (unregistering): Port device dummy0 removed
[  744.127888][ T9545] dummy0 (unregistering): left allmulticast mode
[  745.898197][ T9545] IPVS: stop unused estimator thread 0...
[  745.904679][ T9545] IPVS: stop unused estimator thread 0...
[  745.967436][ T9545] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.023184][ T9545] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.093501][ T9545] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.133750][ T9545] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.241878][ T9545] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.283121][ T9545] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.323644][ T9545] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.383216][ T9545] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.447703][ T9545] bridge_slave_1: left allmulticast mode
[  746.454709][ T9545] bridge_slave_1: left promiscuous mode
[  746.460576][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.469054][ T9545] bridge_slave_0: left allmulticast mode
[  746.475495][ T9545] bridge_slave_0: left promiscuous mode
[  746.481452][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.490377][ T9545] bridge_slave_1: left allmulticast mode
[  746.496202][ T9545] bridge_slave_1: left promiscuous mode
[  746.501955][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.509959][ T9545] bridge_slave_0: left allmulticast mode
[  746.515850][ T9545] bridge_slave_0: left promiscuous mode
[  746.521744][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.687571][ T9545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  746.697576][ T9545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  746.707020][ T9545] bond0 (unregistering): Released all slaves
[  746.778124][ T9545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  746.788198][ T9545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  746.797917][ T9545] bond0 (unregistering): Released all slaves
[  747.109388][ T9545] hsr_slave_0: left promiscuous mode
[  747.115067][ T9545] hsr_slave_1: left promiscuous mode
[  747.120612][ T9545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  747.128125][ T9545] batman_adv: batadv0: Removing interface: batadv_slave_0
[  747.138786][ T9545] hsr_slave_0: left promiscuous mode
[  747.144583][ T9545] hsr_slave_1: left promiscuous mode
[  747.150159][ T9545] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  747.157645][ T9545] batman_adv: batadv0: Removing interface: batadv_slave_0
[  747.165674][ T9545] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  747.173146][ T9545] batman_adv: batadv0: Removing interface: batadv_slave_1
[  747.184204][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  747.190511][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  747.201596][ T9545] veth1_macvtap: left promiscuous mode
[  747.207118][ T9545] veth0_macvtap: left promiscuous mode
[  747.213212][ T9545] veth1_vlan: left promiscuous mode
[  747.218492][ T9545] veth0_vlan: left promiscuous mode
[  747.224767][ T9545] veth1_macvtap: left promiscuous mode
[  747.230274][ T9545] veth0_macvtap: left promiscuous mode
[  747.236029][ T9545] veth1_vlan: left promiscuous mode
[  747.241429][ T9545] veth0_vlan: left promiscuous mode
[  747.405517][ T9545] team0 (unregistering): Port device team_slave_1 removed
[  747.434498][ T9545] team0 (unregistering): Port device team_slave_0 removed
[  747.626599][ T9545] team0 (unregistering): Port device team_slave_1 removed
[  747.649815][ T9545] team0 (unregistering): Port device team_slave_0 removed
[  748.277451][ T9545] IPVS: stop unused estimator thread 0...