last executing test programs:

11m20.646904527s ago: executing program 32 (id=113):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1)

9m45.284471367s ago: executing program 4 (id=357):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000880)={0x194, 0x11, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x10f, 0x0, 0x0, @uid}, @generic="e77bef1fd3d83bd72f4247750a75beafd891e81ac47308521fb3fef4a6cc58d644aa093743e2f5042e64ec55ba1eb4cf23319d4cd440746e61d6bf8ad177358bbf0e29026fb7c78db08b8f4d1a592db0f9abc1daada3221ac7375e24f4e29d06b6714f2cbb4d139291f558e8c19a7f082361c5a42eb8b2cf30cefaac2da61e3a35751ca34eedad720c99b5ef07ae56ba5a3d8e", @nested={0xe5, 0x124, 0x0, 0x1, [@generic="875b5b7bbbac75018120d98241b28822f70a4dc56f2880f60f58193e3dee0259883547a2b12d558c57731bae34b81cc58bce9865cb0ea90a0ea8fe94d56911e969963804af86a49f74e7671bb3c3817fddc01149d23f2838d846d8985136cf81d5289176b68b489ef7ea73c492deedfcfd6353c17a5b423a01f1f9f9cf3d26b95dac2b71140a93493d97c8323cdf5ee61f7a04ba568518c7e32373c4af02f373b3bf5cfde40157e547c470c4956124dd43e70534cbf752c2c6573eb7b7832da544e7fc64a326720000", @typed={0x8, 0xbf, 0x0, 0x0, @fd}, @typed={0x8, 0x78, 0x0, 0x0, @u32=0xfffffff7}, @nested={0x4, 0x46}, @nested={0x4, 0x130}]}]}, 0x194}], 0x1, 0x0, 0x0, 0x44011}, 0x0)

9m44.924121264s ago: executing program 4 (id=358):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x7, 0x1, 0x8, 0xff, 0x881})
r1 = socket$netlink(0x10, 0x3, 0x0)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@newchain={0x24, 0x64, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0x7}, {0x7, 0x10}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x81082, 0x0)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000300)={0x2})
setgroups(0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
rmdir(&(0x7f0000000140)='./cgroup/../file0\x00')
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[], 0x24}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071105200000000009500000000100000"], &(0x7f0000000480)='GPL\x00', 0x4}, 0x94)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r8, r8, &(0x7f0000000000)=0x7, 0x4)

9m36.902829118s ago: executing program 4 (id=372):
openat$dsp(0xffffffffffffff9c, 0x0, 0x1a003, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$session_to_parent(0x12)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6})

9m34.841529589s ago: executing program 4 (id=374):
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000000000020430521e6000000000001090224"], 0x0)
eventfd2(0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x2, 0x80805, 0x0)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

9m31.869068863s ago: executing program 4 (id=380):
r0 = socket$nl_route(0x10, 0x3, 0x0)
set_mempolicy(0x4005, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
r3 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, 0x0, &(0x7f00000000c0)=<r4=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

9m30.103140015s ago: executing program 4 (id=383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd4f, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

9m14.852432315s ago: executing program 33 (id=383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd4f, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

2m9.132411301s ago: executing program 2 (id=1894):
syz_usb_connect(0x0, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004e4aa92082053300578e01020301090236000200000000090400f50003ed02000905030000000000000904"], 0x0)
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)

2m5.512315473s ago: executing program 2 (id=1908):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
socket$kcm(0x2, 0x5, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_names\x00')
openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffffffffff5]}, 0x8, 0x80000)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
pipe2$9p(&(0x7f0000000080), 0x80000)
writev(r0, &(0x7f0000000000), 0x0)

2m5.218789713s ago: executing program 2 (id=1912):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="02", 0x29)

2m4.988235967s ago: executing program 2 (id=1916):
pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc2(0x0, r5)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb)
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf)
ioctl$TCFLSH(r8, 0x400455c8, 0x40000000004)

2m3.97965213s ago: executing program 2 (id=1918):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48)
close(r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1000}}, './file0\x00'})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00')
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x105400, 0x16)
read$msr(r5, &(0x7f0000000080)=""/221, 0xdd)
write(r4, &(0x7f0000000000)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

2m3.649284928s ago: executing program 2 (id=1920):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0)

1m57.924166996s ago: executing program 0 (id=1945):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
socket$kcm(0x2, 0x5, 0x0)
openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffffffffff5]}, 0x8, 0x80000)
socket(0x2, 0x80805, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
pipe2$9p(&(0x7f0000000080), 0x80000)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc94638440", 0xc01}], 0x3)

1m57.776308231s ago: executing program 0 (id=1946):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
socket$kcm(0x2, 0x5, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_names\x00')
openat$sysctl(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffffffffff5]}, 0x8, 0x80000)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
pipe2$9p(&(0x7f0000000080), 0x80000)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}], 0x2)

1m57.640203861s ago: executing program 0 (id=1949):
r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000280)={"da38c420", 0xd, 0x7, 0x7, 0x9, 0x0, "9a1515eabd04a1b76ac61817b12a83", "9a3303b4", "eb5f5ed5", "3e7297a6", ["b294994b2ca6b038aa80b420", "4894c76d7d81047ecbb53b31", "18559ba9270faf80a34463f6", "1949a8c37563f052092775c5"]})

1m57.5808432s ago: executing program 0 (id=1950):
r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = fanotify_init(0xf00, 0x0)
read(r1, &(0x7f0000000000)=""/89, 0x59)
fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0)
link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x11, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x2, 0xfffffffd)
r3 = fsopen(&(0x7f0000000100)='gfs2\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000002500)='rw\x00', &(0x7f0000002540)=':\x00', 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x1, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xfffe}, {0x8}}, [@TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2, 0x3, 0x7fffffff, 0x2, 0x2, 0x0, 0x8}}, {0x14, 0x2, [0x1, 0x4, 0x9, 0x0, 0x96, 0xd8, 0x6, 0x0]}}]}]}, 0x58}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x8, 0x80000)
fanotify_mark(r7, 0x105, 0x48000033, r6, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r8 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
read$FUSE(r8, &(0x7f0000000880)={0x2020}, 0x2020)

1m57.324355923s ago: executing program 0 (id=1953):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48)
close(r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1000}}, './file0\x00'})

1m57.231885518s ago: executing program 0 (id=1954):
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0)
read$FUSE(r0, &(0x7f0000005b80)={0x2020}, 0x2020)

1m48.610383456s ago: executing program 34 (id=1920):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0)

1m42.955826556s ago: executing program 7 (id=2000):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000540))
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x0, 0xe985e4df3848afb5, 0x20}, 0x14}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800)

1m42.041369204s ago: executing program 35 (id=1954):
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0)
read$FUSE(r0, &(0x7f0000005b80)={0x2020}, 0x2020)

1m41.92307078s ago: executing program 7 (id=2023):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$kcm(0x2, 0x3, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket(0x28, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$rds(0x15, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRESOCT=r0], 0x20)

1m41.462275717s ago: executing program 7 (id=2027):
r0 = epoll_create(0x3)
fchown(r0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000"], 0x6c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8400}, 0xc, &(0x7f00000001c0)={&(0x7f00000010c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x2c48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2b24, 0x3, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x94, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c, 0x1, "03c9fd8fefb099e1624641bd97fc855c060a6a3d4485bd2334dfc06b16dce246df1aa4f03f05710cdbcda6a41eb08f33b67284f206dc7633cbda3b20fe462e12a225145e0b797b4d"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, {0x125c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x128, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xb5, 0x1, "1b30312cc611567fc2cf235724649e6e327e844c1d6eb926bce2507f1b8aa75aa789ed894ce1aad8d6e45ceef85439c8d43bd4aabdc22f419b1a61238c5522f53bef34198fa26fadbe10799131890d0c22cc534eca845addaee24b7400ec6948486974e3e7efe703b225312d51347a0e352a27af7aa4ee51c06a876ef9e762370929c4a466c5e1ee5076eb838641a5e771adb752ebc379944c486950b79c3dd846c1067b7505bedaa38506245bcf1374e0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY_END={0x1100, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xea, 0x1, "f4613e2e86d8dda511b01159d025c92b553d1d325c05dfe93fbd3c3d0b76043060fa84d236e02d15ec28c6462e255e498e5e3f910a6f4bd92ed3b279662f9ec47171bc3c4a4c518fa59461f603a4d449ee2a8f189aeb1ecf77e129b929d1e96881eb0d350a2f4cf104d18b550dbb5b78d52a64fb5dbb99ece4817f6b7f37fb69bfb2e5f130d2957b814c130e9b0c44370fd94e3b86a1db70652ba04c2f5aaa7df65f79715f7af215729f11ae52ad8cf03dee3854cee3d38c1d7d91ecf7013da4c259fbbcccf9df7c78310970339ae8c2d69265c0937756f47ecfb09b2814030f320265fd7d7a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x88}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x65, 0x6, 0x1, 0x0, "0d2d6269456c3702400b6a89155428525d69a601a6f15d513b24a4ab8a3b8974a1109e0a998c26295f19c9f00ceb27ae875afd8388b53975289c05b692b16214da2ca3e8edda5e5c7dc79371688171ef5d12f285580f2ac0f129aa1b9988b06bfa"}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_USERDATA={0x26, 0x6, 0x1, 0x0, "41844a9b7c16c6c37aa6a3f48d5ab6a7398dc3732ad350f92ba839aa4d0932d25842"}]}, {0x14fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x11f0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "8ce97a3b6e228a9ab19649e948d8531ba4099fd6b41c9299e6e1b865006e706bf183df627be7ca3b53d900cb11b3d76110b6b1791ffaf70286b73d44359c86e7449d527d3d84fc75270d6c30dd9834e1f426a6496de4005443df08a1d68a43786d44d8ec9aec5b6de1d976b084b60ed15283c8e1ef615c5fe1305b8ec246fc4def71f2cdbf31faee823d26cd9dddc5dd8866a10c70bcf71f2f60e112ae51c9ab9d69fc7d35ea1d1ea158dd4e49607fa10740efc15cf8cc18dac2625806981305870a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x32, 0x1, "d987efde6eaa6cc20eeb515abeacd243375dc48fb2d04bead1c3038f8394fea0330faed69338bcbc40716b9201d9"}]}, @NFTA_SET_ELEM_KEY_END={0x14, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x1e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "d0b04b93d429166e704c15066f20220094cc42a00075aa4116134d512e294c0d68dc53af12e03ed051f22b8a959e97d3ffb5fa55ebc5f1f4b1878e5ef8defb096c94d15d0bdc21472333c39612622df8362dacb2d85ff41b6e1720a20cb4417ee5eda0ed8ce859955f653d0631d9642d546385dd562e55db22467fab1bc9086f068964a08571ab28856621fec70945338a0e792111e13f5a6e069237793b1fe79a311a64a13c1986786fd339269b2ab0f46f434a1a20433eb8cfe5dc51c7d69eca1f4b7d2624055395fdd99e2780422043bebea1a6fab5414697ac343fb2fa8b61b1ad2fea7ec4898f"}, @NFTA_DATA_VALUE={0xec, 0x1, "8298cfcbbcda1b8ac402afefca406815d00c22897c1933a64561cf312273d1078858f23ae6456a7300b649a031ab78c0f9b5b15fdc87e12e0f418483b943b108af8850a78f03ebe009e105ca8c9b4b4f11f2faacfcdca20336294e0d76a295317847f090468419485124bb67a48b390876661b2d00f6b76896f1f85a9810518c2e18d2480dcf655e0a1916730e59b4a1451db6c0e5bf878ae49d6842cc9a8dbcd62e38845323c29778c5622bfe862eaa52a44606995072c25209c0d03ed5e3389c1c854f3806fa1a67cfd9ef7540668aec0dec3b5c24dc839b4550e3eb635b244b93b42cec390ca8"}]}, @NFTA_SET_ELEM_USERDATA={0x9e, 0x6, 0x1, 0x0, "1142c4de54e034f89b29c1b3e9fb0c123906aeb0320bd5f49861fecb5328d318c48ea514c44fbb0950fc100f02df86d034e10370ea6180cd50ae9fcce0941673a94df99217aeaa5d7ad85202f76392bcb841e2718682621fef5b17f1ff6d4920f4e2a868e310619a78ce80bf093c266c736cad3cdb414a7a8935f502ef7f01289384656f9a87b99e39c2d6c5ad399d43a9bc2e76a1f87ea93f4a"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "f855b25ee5342d7cb24a04cfbaca67e5753354a51eaf4e3a8ad2a3fdd2d1963e2c9da8eacab98344c7d18899f6041c425c0ea9c65702088aee2d4ed7e6a1a9a51cb10828753df77da7efd5200e00d7d4324bf3f34858f5410aaf1805fc82c54469e82c61350f1123c56863"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1f, 0x1, "39d6f0eab19510788919145e560d2591968b7142f9635a4c7874f5"}]}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5e, 0x6, 0x1, 0x0, "6bcc6302010895fe4b17985e6c0a03a985c334b7e0ad9acaa891c58112aeb1630d995212c75baa7d2af961704263eef2c84b79885b20eb81415c0ce07e8df8b8db916d65b21862a79085f7c99107d02a5e44ea8da7142cdc285b"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe4, 0x3, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xd0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "5951de36709d60b6b43031356739eaf231b0076d35b8dbc7918ee085be734d84d08d7551e7722db94e772f66ed3249c72a5e91e5c9a1bc233b9450ca82d4603d2b219aacf9f9ea7cbd7eb00a8289e61284595b8dbea8ca08c95499d9e272e7bcbee753f7ab8e698603327fff953d568cb7830432a4d31043ae3eeed50c546c8efd7426072db38466d048fe08828fbd3d1f3665cb711c6b9c49f622b6db620eca35d39747c2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELRULE={0x1b8, 0x8, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x95, 0x7, 0x1, 0x0, "1eae0d5d7caee6573a0f99606aa5d3c39ea4e5163b036243ca76d0aa056edb0f3fb0762c7ca13599431d5d29580d95fcfa9eeaf800406e8a61792cf85c2e428eb03360f0b72ca413b780a03105b9ae31c1a50a9400a3c2b2d42740960795a14d84088efc820dcc056eaf0dd7a10fcb73a77a22056c6be8d0d3cf1a47f2627d7d9a03460a696e861b0b14f87c23d08a033a"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}]}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x838}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0xf8, 0x0, 0xa, 0x603, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xc2, 0x6, "a1a98504f3649ddb9121dec77e9f7033f850f2fea3b5d60653ffa8c3186232cddf934300e9796aaccb0b59b9388f17325afce709421917add92cd80b02446db82fdd4837727791196b592cad6ab884b0190287b2263ccc643b15dcc40a13bbf8821b3d108df550194d94a896dfea3c2335577325f4c2933069f47255e2f2105962313589bf9cccde9766e411e7b3b2a596d4e7000610e6b520838e36a84ac9ac8bdf77b30c0861e71cd58fb0509319d27e1b336c48f792e6e2f177d8a8b6"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELSET={0x4c0, 0xb, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x174, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_DESC_CONCAT={0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x149d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1fcf}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x82ff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x4}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeb91}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10001}]}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x15}, @NFTA_SET_DESC={0x208, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xf4, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6545}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb0d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x488}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_DESC_CONCAT={0xe0, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xde3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8be4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf844}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}]}]}]}, @NFTA_SET_USERDATA={0x101, 0xd, 0x1, 0x0, "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"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3498}, 0x1, 0x0, 0x0, 0x34044811}, 0x20000000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
membarrier(0x2, 0x0)

1m41.224510867s ago: executing program 6 (id=2029):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
r2 = socket$kcm(0x21, 0x2, 0x2)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_xt={0x2c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x60}}, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00')
pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x41e)
ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000180)=0x9)
sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @loopback}}}, @ip_retopts={{0x14, 0x110, 0xc, {[@end, @ssrr={0x89, 0x3, 0xf2}]}}}], 0x38}, 0x0)

1m41.132283186s ago: executing program 7 (id=2030):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48)
close(r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)

1m40.832345234s ago: executing program 7 (id=2031):
r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x24040000)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)

1m40.070020519s ago: executing program 6 (id=2033):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000540))
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x0, 0xe985e4df3848afb5, 0x20}, 0x14}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800)

1m38.271656374s ago: executing program 6 (id=2034):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x10)
r0 = memfd_create(&(0x7f0000000100)='\a\f\x00\x00\x00\x00\x00\x00\xf7\xe1x\x95\xdc\xaa?CZ', 0x6)
fallocate(r0, 0x0, 0x1000000, 0x5)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f00000028c0)=""/215, 0xd7}], 0x1, 0x0, 0x9c0e)
socket$xdp(0x2c, 0x3, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x1ff, 0xc1}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff7f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
syz_open_dev$dri(0x0, 0x1, 0xb0180)
mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000240)='efs\x00', 0x200000, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x2, 0x73)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)

1m37.304298093s ago: executing program 6 (id=2038):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0)

1m36.988983829s ago: executing program 6 (id=2041):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48)
close(r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)

1m36.161797909s ago: executing program 6 (id=2045):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0xa0000004}) (fail_nth: 1)

1m25.280026852s ago: executing program 36 (id=2031):
r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x24040000)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)

1m21.030656109s ago: executing program 37 (id=2045):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0xa0000004}) (fail_nth: 1)

44.343894676s ago: executing program 8 (id=2184):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd70100600010007000000080009000200000008000b00"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (fail_nth: 1)

43.758741501s ago: executing program 3 (id=2187):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r4, &(0x7f00000000c0)="80003724090000ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffc, @remote, 0x10000003}, 0x1c)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r5, 0x0)
unlink(&(0x7f0000000100)='./file1\x00')

19.91395037s ago: executing program 8 (id=2188):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0", @ANYRES8=r0, @ANYBLOB="010000000000a6f6d6d8ff507381b315ac68d8c3", @ANYRES32=0x0, @ANYRES32=r0, @ANYRESOCT=r0], 0x50)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102378, 0x18fea)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getxattr(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=@known='security.apparmor\x00', &(0x7f0000000380)=""/126, 0x7e)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000002060104000000000000000000000000040000050005000a00000005000420000000000900020073797a31000000000d000301e7c273683a6efad1ea5f8031ffff74000000008491e9b3599747119337d2cd888a5dd34225e49f9f771daf78f2a4ef657c7b9d731c6b6a80e486477171e629d91db345be1ce4b0ca891bf501a1e39d645b7ac03ad8af0f81a4f0ccaedc42754d0ad92f4daf3642206b31450e81d2ee3318f1733207a7b0b934d92f1fb320f4a3f0d19f4e4cd2d98df37577655e94caf51e1042"], 0x4c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
sendfile(r7, r4, 0x0, 0x80008)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f00000000c0)=0xfbb1, 0x4)

19.913620244s ago: executing program 5 (id=2189):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079126f000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.825215051s ago: executing program 5 (id=2193):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
socket(0x10, 0x803, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x9, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}, @TCA_U32_ACT={0x4}]}}]}, 0x88}}, 0x24040084)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd700092dbdf252000000008000300", @ANYRES32=r7, @ANYBLOB="1c002d800500040001000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x40840)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x851}, 0x20000080) (async)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000007}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x851}, 0x20000080)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002400048005000300010000000400030000000000050003000100000005000300050000000800020003"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)

5.822644678s ago: executing program 8 (id=2194):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)

5.812868566s ago: executing program 1 (id=2195):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000d66c0000000000000000ffff0000f40000000000eaffffffdd22c4b21d329e73d82bcee90e44"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff})
syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x2d5}, &(0x7f0000000040), &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x7, 0x0, 0x1})
connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010100}}, 0x24)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)=ANY=[])
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r10 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@local, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8)

5.809247747s ago: executing program 8 (id=2197):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xb95d, 0x4)
io_uring_enter(r0, 0x1540, 0x7450, 0x4, &(0x7f0000000080)={[0x27]}, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x80010, r0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0x1c}}, 0x40000)
write(r0, &(0x7f0000000200)="3d3a742f67737896f9b57589ecb92d9fb51d290dc51dbf7a356b5ed98d58c9f3ffeeb819fa94c335c7af93deec7a654bb488ffe140c4bb74000bf027ad1227bce2104439e3f3d6b250c12673d142295ccc87326f6f6a6bcfc5dc7ceeb178c86c9a90f65d05714a1564c1f3461f5954ae258b3ab3796edfbc2e969b22019e6466fbdb12ee445254c706ace8", 0x8b)
r3 = openat$cgroup(r0, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=<r4=>r3, 0x34, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0]}, 0x40)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000440)=0x40, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
bind$unix(r6, &(0x7f00000004c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000025c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002580)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x1dc, 0x16, 0xa, 0x600, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x138, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x27}]}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWSETELEM={0x193c, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1910, 0x3, 0x0, 0x1, [{0x334, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x324, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "40193da6202c4202970f32966228cfea45830098c449475b372b73b5f146c4ce467056b47abb3e36127ff3b8ba6b586cf5762cb3ecf84a49481b1ee0d326b7f068f2c2909ced0c9d7058434c429f781af376305a54373986304ca3b26bdf8209c1a82cd80ef82b9a9faf8c441301beeaebf14b44362be5bae14efd84a260ddc2affce2e4ed6fe747377a4a520227455be12459e63b80389ef5a0463645dec9c845503facf22d5ccc4a5c6a93a04abc4081fd22773dde88777fc26428b0b7a95b5bf55ac59e56ad958795a3cd95a4f5d8e55803aaab28a5c7cc8ac45c"}, @NFTA_DATA_VALUE={0x30, 0x1, "86cd778fffcaa6613e859b9f4c3231e9ecaa44d00ce868910476ea6b3b1effcbf5e61f491fc2a329585ef004"}, @NFTA_DATA_VALUE={0x88, 0x1, "ae2a554693382a97404dc8609823953c8babf5da2a562e212e94cbf7989abad45c2279335d980757023a1505b69686cb35e734c89571c48e5c55d68d018890304dc8d84a7ccb7d565ed67d7ce2158c22d0e392f094ef51dbf3e0bf360b83d2973a705eadeb700068410461a92bb99a78dd9016ad4141792469875b8f607e754b303dfcb1"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x79, 0x1, "3b8155427b57044698e01451c17e2452bbb763424a4d874a382550553d977822224f7879304e5180ced81401cd013737cf4e1b9a8a662288695771cd73aff270633f2839e9348727d9cc5ecbdc1071b45018e2f9295b7b4e195f54be95c0095afd7cced853c7b4f7f68fba38f396126b7abec5b403"}, @NFTA_DATA_VALUE={0xb6, 0x1, "a79b426cf7bb680cbeb63317118d677285b3c79ff189c3d998a25ec01f150c00fc8da6a81c6345af7e7bfeb399879216383217a73e2fb05c90ca6f59ae62df7e2dc0c2ffe2ae516b183eca1b08a54221b7ae06a761384c5379a6702cde28bad49a71571f586d877028da5fc95f224c4b2177c382220e11393ddb6d0942be9f0f1c8acd6040c062cb5e0427ac9031ed86c6592fd4ca4d497980dd1b07918aabe1d33cad6f6f97f1e348fc2b9b84ceda852d18"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x800}]}, {0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x182}, @NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, {0x1380, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xb, 0x1, 'ipcomp\x00'}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x10c0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0xdc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x94, 0x1, "2b1ba68f4b6ac45c6f98c1df278ae4a1d7d66989e3aa89c83da36deff73e10c2dc2601a9575ad20b801b3b05a8ce745af55f446c233096f051f80aa5a56ac8f55f144f71fbf9fe0331724b05931ef82deb5083fe932013b154cf5b66a674d6250a23a9d09c7bb084b27219d355a1d8f07a37b0bab7d1af8c873611f0311b926040b2f40cac613927a7312d109863cfb8"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0x154, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x19, 0x1, "5ea567129eb8bc1024ad0c8dff04d857bde91bd64f"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x180, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x120, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "9b22b3217d230a06e22360f2802b0b06"}, @NFTA_DATA_VALUE={0x2e, 0x1, "5c9b7fbf6f98b20420c491822a022fed08a5eb55e4f255ff0b666f767d2d27962186dffdd6fc939a4e5d"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x61, 0x1, "85478fb73787f7674a170d7715fa43c6d9038fdcc87cf819dfef3fffe6cf3d99a3009618c8857cb2f1f0e36f3ccccfb97bc4dc6a2b3db650d0ed6fa6ef2eef350116e8938ad5ff5396f54b08164a4661d3b2821496c4904db1d96a0bc6"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_SPNUM={0x8}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xc4, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x104, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe4, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xc0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "07c7c34ea19af78418f9b3425d994697d0afc55784c38e40a547c2e810b8a4060e9849283aa39483565db2c699d1e5bbcbef0a"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELRULE={0x188, 0x8, 0xa, 0xcd1966712cc31d1e, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x96}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x74}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xc3, 0x7, 0x1, 0x0, "61f09997d6142c9be4050d2d476d7449c2abb22326da13fd0c245fc6ed87a77bed9be86d19ad1fc5818880988fde04628213091381546c4599f8c1be0c871b4fb6dfa9710e676963249829ef65960c8efd91810c497bdc3a502426bef080384d9cf30ac0f0986fb2b5e7b200ea1c4365fd46731d697537e86fbb646692c2ed3946aa852ffa0a8fdf438618b561ba112dbd0c3c098d1cfe5d1e10155ba9ea3618cd599689fa214c8b5120bd7bb5e209c4d1009651975972eba88e0e2b88cd25"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe8, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1ff4}, 0x1, 0x0, 0x0, 0x4004c0c0}, 0x0)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000002600)={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x486}, {0xa, 0x4e23, 0x3d4e1f11, @local, 0x8}, 0x0, {[0x8, 0x9, 0x9, 0x8000, 0xd882, 0x4, 0x3, 0x6]}}, 0x5c)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000002680)={<r9=>0x0, 0x3, 0x6})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000002a80)={r9, 0x7, 0xe57e})
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002ec0), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x38, r10, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
sendmsg$802154_dgram(r5, &(0x7f0000003080)={&(0x7f0000002fc0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000003040)={&(0x7f0000003000)}, 0x1, 0x0, 0x0, 0x208bc39eb29d7afa}, 0x4008800)
r11 = memfd_secret(0x0)
sendfile(r11, r4, &(0x7f00000030c0)=0x7f, 0xa24)
r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003100)='./binderfs2/custom0\x00', 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000003400)={0x58, 0x0, &(0x7f0000003280)=[@acquire={0x40046305, 0x2}, @dead_binder_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000031c0)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x0, &(0x7f0000003140)=""/128, 0x80, 0x0, 0x1f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000003240)={0x0, 0x18, 0x40}}}], 0xd2, 0x0, &(0x7f0000003300)="ad17a7fb603e71b6bbb2634b26744909466af5d5443d23bbc3ca698167daa39204dddcc5482a74e981e37fd94e3c66f284e38a954861844f7cc5fb6a0b4897f5b5b872f3d6374363d3d8940c78db3b89d5a5726fbefdc786df19ce7f0171f1d755f5fcd770afdd72bf32420165f1eb7baff8d908cc66b6ebca8e1bbaf0b36f1ef37ce8cfb8eb683a08779c4f40b2bfd98c34e99c64a1ce6a2409817f0c7ee7027445cd55a3a47f42657a57915fae97788554040643f74bab37039af77b8894ad56e9b4d9d361c42556f4d3269f9053953850"})
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000003440)={0x7, 0x101, 0x0, {0xfffffffe, 0x80000001, 0x10000, 0x1}})
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000003480)={0x18, 0x0, {0x0, @empty, 'batadv0\x00'}})

5.808885304s ago: executing program 5 (id=2198):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340)={0x27, 0x0, 0x0, 0x7, 0x80, 0x7, "17e1a6c33a92c70f59b9e7311f8ae5e4f4b92a0793dc092189bed42b45db14e4c70481edd93761d5cbbfe9d1d91a2bbfa6a928467e38ba3cc67a3996517d70", 0x3}, 0x60)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)

5.807211344s ago: executing program 8 (id=2200):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000300"/27], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x27, 0x800, 0x80000000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000300)={0x6, r0})
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'})
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138)
r6 = socket(0x2, 0x3, 0x67)
sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x38}, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x5}, {0x0, 0x2}]}]}}, 0x0, 0x3e}, 0x28)
syz_open_dev$hiddev(&(0x7f0000000100), 0x1, 0x400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)

5.806784887s ago: executing program 5 (id=2201):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="80003724090000ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffc, @remote, 0x10000003}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r4, 0x0)
unlink(&(0x7f0000000100)='./file1\x00')

5.805770682s ago: executing program 3 (id=2203):
shutdown(0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r6, 0x0, &(0x7f0000a3c000/0x2000)=nil, 0x2000, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x7000000, 0x0, 0x4c, &(0x7f0000001cc0), &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x3b, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f8521", 0x1, 0x0, 0x13}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x442141, 0x4)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1a0, 0x208, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8)

5.802039424s ago: executing program 1 (id=2204):
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r2}, 0x18)
sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) (async)
sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0)

4.523356719s ago: executing program 3 (id=2206):
unshare(0x8000000)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = epoll_create1(0x0)
getpid()
r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006)
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/102)
r4 = syz_pidfd_open(0x0, 0x0)
setns(r4, 0x8020000)

4.389545626s ago: executing program 1 (id=2207):
pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc2(0x0, r5)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb)
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xf)
ioctl$TCFLSH(r8, 0x400455c8, 0x40000000004)

4.388704711s ago: executing program 9 (id=2208):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)

3.072269165s ago: executing program 9 (id=2209):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, 0x0, 0x0, 0x0)

2.887288871s ago: executing program 1 (id=2210):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000380)={0x0, 0x9439, 0x0, 0x3, 0xbfdffff8}, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0xb, 0x401, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x200, 0x2], 0x0, 0x200})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0xf}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000002000000000000000200", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB="671a060555c3feece35def8c300244395f11c35bb9dd3af89f821e76c84e5f978058bf5df2a7df7533be808074f2767e44f6bb0f75d26f8c42eb21e1d4970250f4db3fed208dac337faaa8ebadd98a2b6946eef474d40f092bc96875bc6aaa39fba92b8b88f60edf5ef03253ca63891303c8c3e021a19f445ec8787b7089d0f954ef58db06db071c12e7f0b62b18ad81b0185dd475d14405c341fad41bf2e3c1f628b4b838f722000000", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

2.858828769s ago: executing program 8 (id=2211):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0)

2.68409586s ago: executing program 9 (id=2212):
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)={0x0, <r3=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000004c0)={{0x1, 0x2, 0x1, 0x1, '\x00', 0x54a}, 0x1, 0x3, 0x4, r3, 0x2, 0x4, 'syz0\x00', &(0x7f0000000140)=['#\x00', 'overlay\x00'], 0xa})
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r4 = fanotify_init(0x0, 0x80000)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0076ba7d82000000002700000000f7ff6fd800"})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r6 = syz_open_pts(r5, 0xc8c41)
r7 = dup(r6)
fanotify_mark(r4, 0x1, 0x40001012, r7, 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x88000)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
setxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000001000000000010000200000000000f00"/28], 0x24, 0x3)

2.593344787s ago: executing program 5 (id=2213):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2)
r1 = dup(r0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x40d00, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
ftruncate(r0, 0x3)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140), 0xc)
r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000200)=0xf0)
ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000100)=0xd0)
syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0xff, @dev, @local, {[], @ndisc_rs}}}}}, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r3, &(0x7f0000000240)=':', 0x1, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x230, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x31e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xa, 0x4}}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000280)={"da38c420", 0xd, 0x7, 0x7, 0x9, 0x0, "9a1515eabd04a1b76ac61817b12a83", "9a3303b4", "eb5f5ed5", "3e7297a6", ["b294994b2ca6b038aa80b420", "4894c76d7d81047ecbb53b31", "18559ba9270faf80a34463f6", "1949a8c37563f052092775c5"]})

2.516558333s ago: executing program 3 (id=2214):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340)={0x27, 0x0, 0x0, 0x7, 0x80, 0x7, "17e1a6c33a92c70f59b9e7311f8ae5e4f4b92a0793dc092189bed42b45db14e4c70481edd93761d5cbbfe9d1d91a2bbfa6a928467e38ba3cc67a3996517d70", 0x3}, 0x60)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)

1.518477174s ago: executing program 9 (id=2215):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r4, 0x711, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x5, 0x6, 0x8002, {}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "4a4faa7920a000ad"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYRES64=r1])

1.226495594s ago: executing program 3 (id=2216):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48)
close(r0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1000}}, './file0\x00'})

1.171941875s ago: executing program 9 (id=2217):
shutdown(0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r6, 0x0, &(0x7f0000a3c000/0x2000)=nil, 0x2000, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x7000000, 0x0, 0x4c, &(0x7f0000001cc0), &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x3b, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f8521", 0x1, 0x0, 0x13}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x442141, 0x4)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1a0, 0x208, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8)

1.019758612s ago: executing program 1 (id=2218):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r0, 0x204)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

734.879052ms ago: executing program 1 (id=2219):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000018000000000000008e0b"], 0x6fb})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182})
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0xb6d}]})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x8, 0x3, 0xd, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

685.875718ms ago: executing program 3 (id=2220):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0191e6d595bab8c4b500006490321db49c531a00000f01d967460f35"], 0x54})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x15, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x5, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = eventfd2(0x4, 0x80000)
close(r3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9b2865eb3810f16a, 0x0)
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
write$eventfd(r3, &(0x7f0000000200)=0x5, 0xfffffeb7)

670.831577ms ago: executing program 5 (id=2221):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x82bf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x280})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, 0x0, 0x54})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xfa, '\x00', 0x3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r5, 0x2000003, 0x11, r3, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0xdc032, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

0s ago: executing program 9 (id=2222):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000000ff0300000100000001000000000400001c000000020000000000e1ffe6000008000000000a"])
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x3, 0x8032, 0xffffffffffffffff, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0191e6d595bab8c4b500006490321db49c531a00000f01d967460f"], 0x54})
openat$kvm(0x0, &(0x7f0000000040), 0x400100, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0191e6d595bab8c4b500006490321db49c531a00000f01d967460f35"], 0x54})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x9, 0xffffffffffffffff, 0x7, 0x80000000, 0x1, 0x3349c0000000, 0xfffffffffffffff7, 0xe643, 0x6, 0x8, 0x3, 0x7fff, 0x40000000004, 0xffffffff, 0x2, 0x2], 0x100000, 0x2200})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = eventfd2(0x4, 0x80000)
close(r6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9b2865eb3810f16a, 0x0)
write$eventfd(r6, &(0x7f0000000200)=0x5, 0xfffffeb7)

kernel console output (not intermixed with test programs):

_vblank_simulate: vblank timer overrun
[  653.128314][T11949] ERROR: Out of memory at tomoyo_realpath_from_path.
[  653.149510][T11949] loop4: detected capacity change from 0 to 7
[  653.176600][T11949] Dev loop4: unable to read RDB block 7
[  653.184571][T11949]  loop4: unable to read partition table
[  653.215387][T11949] loop4: partition table beyond EOD, truncated
[  653.235861][T11949] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  653.372964][ T9437] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  653.395233][ T9437] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  653.416109][ T9437] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  653.426374][ T9437] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  653.434431][ T9437] usb 7-1: SerialNumber: syz
[  653.512416][T11952] loop4: detected capacity change from 0 to 7
[  653.521101][T11952] Dev loop4: unable to read RDB block 7
[  653.527006][T11952]  loop4: unable to read partition table
[  653.534256][T11952] loop4: partition table beyond EOD, truncated
[  653.570544][T11952] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  653.584476][T11954] overlay: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa is not a directory
[  653.661165][ T9437] usb 7-1: 0:2 : does not exist
[  653.740856][ T9437] usb 7-1: USB disconnect, device number 39
[  654.195426][ T9447] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  654.435129][ T9447] usb 1-1: Using ep0 maxpacket: 8
[  654.587504][ T9447] usb 1-1: unable to get BOS descriptor or descriptor too short
[  654.608161][ T9447] usb 1-1: config 4 interface 0 has no altsetting 0
[  654.621736][ T9447] usb 1-1: string descriptor 0 read error: -22
[  654.645169][ T9447] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  654.665155][ T9447] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.878632][ T9447] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  654.928768][ T9437] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  654.937724][ T9447] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  654.994813][ T9447] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  655.023600][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  655.035409][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  655.054507][ T9447] usb 1-1: media controller created
[  655.143459][ T9437] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  655.151484][ T9447] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  655.163932][ T9437] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  655.207786][ T9437] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  655.219018][ T9437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.232968][ T9437] usb 4-1: config 0 descriptor??
[  655.242133][ T9437] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  655.251869][ T9447] zl10353_read_register: readreg error (reg=127, ret==0)
[  655.265074][ T9437] dvb-usb: bulk message failed: -22 (3/0)
[  655.327765][ T9437] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  655.383610][ T9437] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  655.418215][ T9437] usb 4-1: media controller created
[  655.464659][ T9437] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  655.488847][T11970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  655.538889][T11970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  655.547755][ T9437] dvb-usb: bulk message failed: -22 (6/0)
[  655.553853][ T9437] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  655.691673][ T9437] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13
[  655.733631][ T9447] usb 1-1: USB disconnect, device number 53
[  655.766261][ T9437] dvb-usb: schedule remote query interval to 150 msecs.
[  655.845838][ T9437] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  655.871244][ T9437] usb 4-1: USB disconnect, device number 58
[  656.059493][T11995] FAULT_INJECTION: forcing a failure.
[  656.059493][T11995] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  656.296256][T11998] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  656.365815][   T30] audit: type=1326 audit(1751210452.608:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11992 comm="syz.0.1772" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb57ef8e929 code=0x0
[  657.056670][T11995] CPU: 1 UID: 0 PID: 11995 Comm: syz.5.1771 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  657.056697][T11995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  657.056709][T11995] Call Trace:
[  657.056717][T11995]  <TASK>
[  657.056725][T11995]  dump_stack_lvl+0x189/0x250
[  657.056754][T11995]  ? __pfx____ratelimit+0x10/0x10
[  657.056777][T11995]  ? __pfx_dump_stack_lvl+0x10/0x10
[  657.056800][T11995]  ? __pfx__printk+0x10/0x10
[  657.056832][T11995]  should_fail_ex+0x414/0x560
[  657.056856][T11995]  _copy_from_user+0x2d/0xb0
[  657.056882][T11995]  copy_from_sockptr+0x5e/0xa0
[  657.056906][T11995]  packet_setsockopt+0x788/0x12c0
[  657.056930][T11995]  ? __pfx_packet_setsockopt+0x10/0x10
[  657.056949][T11995]  ? rcu_read_lock_any_held+0xb3/0x120
[  657.056973][T11995]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  657.056999][T11995]  ? vfs_write+0x8d8/0xa90
[  657.057032][T11995]  ? __lock_acquire+0xab9/0xd20
[  657.057062][T11995]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  657.057081][T11995]  ? __pfx_packet_setsockopt+0x10/0x10
[  657.057103][T11995]  do_sock_setsockopt+0x257/0x3e0
[  657.057125][T11995]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  657.057149][T11995]  ? __fget_files+0x2a/0x420
[  657.057177][T11995]  __x64_sys_setsockopt+0x18b/0x220
[  657.057200][T11995]  do_syscall_64+0xfa/0x3b0
[  657.057222][T11995]  ? lockdep_hardirqs_on+0x9c/0x150
[  657.057244][T11995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.057261][T11995]  ? clear_bhb_loop+0x60/0xb0
[  657.057283][T11995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.057299][T11995] RIP: 0033:0x7ff39a78e929
[  657.057316][T11995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  657.057330][T11995] RSP: 002b:00007ff39b5a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  657.057348][T11995] RAX: ffffffffffffffda RBX: 00007ff39a9b5fa0 RCX: 00007ff39a78e929
[  657.057361][T11995] RDX: 000000000000000a RSI: 0000000000000107 RDI: 0000000000000003
[  657.057372][T11995] RBP: 00007ff39b5a6090 R08: 0000000000000004 R09: 0000000000000000
[  657.057383][T11995] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001
[  657.057395][T11995] R13: 0000000000000000 R14: 00007ff39a9b5fa0 R15: 00007ffdd9bf0468
[  657.057420][T11995]  </TASK>
[  657.552224][ T9437] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  660.182472][ T9439] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  660.193437][T12036] FAULT_INJECTION: forcing a failure.
[  660.193437][T12036] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  660.241503][T12036] CPU: 1 UID: 0 PID: 12036 Comm: syz.0.1784 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  660.241540][T12036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  660.241550][T12036] Call Trace:
[  660.241557][T12036]  <TASK>
[  660.241565][T12036]  dump_stack_lvl+0x189/0x250
[  660.241594][T12036]  ? __pfx____ratelimit+0x10/0x10
[  660.241617][T12036]  ? __pfx_dump_stack_lvl+0x10/0x10
[  660.241640][T12036]  ? __pfx__printk+0x10/0x10
[  660.241657][T12036]  ? __might_fault+0xb0/0x130
[  660.241688][T12036]  should_fail_ex+0x414/0x560
[  660.241713][T12036]  _copy_from_user+0x2d/0xb0
[  660.241738][T12036]  ___sys_sendmsg+0x158/0x2a0
[  660.241761][T12036]  ? __pfx____sys_sendmsg+0x10/0x10
[  660.241813][T12036]  ? __fget_files+0x2a/0x420
[  660.241834][T12036]  ? __fget_files+0x3a0/0x420
[  660.241863][T12036]  __x64_sys_sendmsg+0x19b/0x260
[  660.241885][T12036]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  660.241913][T12036]  ? __pfx_ksys_write+0x10/0x10
[  660.241930][T12036]  ? rcu_is_watching+0x15/0xb0
[  660.241958][T12036]  ? do_syscall_64+0xbe/0x3b0
[  660.241984][T12036]  do_syscall_64+0xfa/0x3b0
[  660.242005][T12036]  ? lockdep_hardirqs_on+0x9c/0x150
[  660.242028][T12036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.242045][T12036]  ? clear_bhb_loop+0x60/0xb0
[  660.242067][T12036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.242084][T12036] RIP: 0033:0x7fb57ef8e929
[  660.242101][T12036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  660.242116][T12036] RSP: 002b:00007fb57fe95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  660.242136][T12036] RAX: ffffffffffffffda RBX: 00007fb57f1b5fa0 RCX: 00007fb57ef8e929
[  660.242149][T12036] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000006
[  660.242162][T12036] RBP: 00007fb57fe95090 R08: 0000000000000000 R09: 0000000000000000
[  660.242173][T12036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  660.242184][T12036] R13: 0000000000000000 R14: 00007fb57f1b5fa0 R15: 00007ffe31a06ae8
[  660.242210][T12036]  </TASK>
[  660.468682][ T9439] usb 7-1: Using ep0 maxpacket: 8
[  660.477563][ T9439] usb 7-1: unable to get BOS descriptor or descriptor too short
[  660.488863][ T9439] usb 7-1: config 4 interface 0 has no altsetting 0
[  660.502900][ T9439] usb 7-1: string descriptor 0 read error: -22
[  660.510156][ T9439] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  660.522232][ T9439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.587010][ T9439] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  660.645919][ T9439] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  660.973948][T12043] /dev/nullb0: Can't open blockdev
[  661.142332][ T9439] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  661.196083][T12030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  661.206783][ T9439] usb 7-1: media controller created
[  661.225407][T12030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  661.316836][ T9439] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  661.353313][ T9439] zl10353_read_register: readreg error (reg=127, ret==0)
[  661.421251][ T9439] usb 7-1: USB disconnect, device number 40
[  661.631112][T12050] /dev/nullb0: Can't open blockdev
[  662.081734][ T9447] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  662.386031][ T9447] usb 3-1: Using ep0 maxpacket: 32
[  662.393403][ T9447] usb 3-1: config 0 has no interfaces?
[  662.399795][ T9447] usb 3-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  662.409231][ T9447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.988629][ T9447] usb 3-1: config 0 descriptor??
[  663.224225][T12047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  663.277796][T12047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.579630][ T9447] IPVS: starting estimator thread 0...
[  663.775012][T12067] IPVS: using max 31 ests per chain, 74400 per kthread
[  663.882828][T12072] FAULT_INJECTION: forcing a failure.
[  663.882828][T12072] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  663.904935][T12072] CPU: 0 UID: 0 PID: 12072 Comm: syz.3.1795 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  663.904961][T12072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  663.904973][T12072] Call Trace:
[  663.904981][T12072]  <TASK>
[  663.904991][T12072]  dump_stack_lvl+0x189/0x250
[  663.905020][T12072]  ? __pfx____ratelimit+0x10/0x10
[  663.905044][T12072]  ? __pfx_dump_stack_lvl+0x10/0x10
[  663.905068][T12072]  ? __pfx__printk+0x10/0x10
[  663.905087][T12072]  ? __might_fault+0xb0/0x130
[  663.905119][T12072]  should_fail_ex+0x414/0x560
[  663.905145][T12072]  _copy_from_user+0x2d/0xb0
[  663.905171][T12072]  ___sys_sendmsg+0x158/0x2a0
[  663.905195][T12072]  ? __pfx____sys_sendmsg+0x10/0x10
[  663.905258][T12072]  ? __fget_files+0x2a/0x420
[  663.905279][T12072]  ? __fget_files+0x3a0/0x420
[  663.905311][T12072]  __sys_sendmmsg+0x227/0x430
[  663.905337][T12072]  ? __pfx___sys_sendmmsg+0x10/0x10
[  663.905355][T12072]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  663.905406][T12072]  ? ksys_write+0x22a/0x250
[  663.905429][T12072]  ? __pfx_ksys_write+0x10/0x10
[  663.905446][T12072]  ? rcu_is_watching+0x15/0xb0
[  663.905478][T12072]  __x64_sys_sendmmsg+0xa0/0xc0
[  663.905500][T12072]  do_syscall_64+0xfa/0x3b0
[  663.905522][T12072]  ? lockdep_hardirqs_on+0x9c/0x150
[  663.905544][T12072]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.905562][T12072]  ? clear_bhb_loop+0x60/0xb0
[  663.905584][T12072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.905601][T12072] RIP: 0033:0x7f76a138e929
[  663.905618][T12072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  663.905634][T12072] RSP: 002b:00007f76a212a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  663.905654][T12072] RAX: ffffffffffffffda RBX: 00007f76a15b5fa0 RCX: 00007f76a138e929
[  663.905669][T12072] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003
[  663.905681][T12072] RBP: 00007f76a212a090 R08: 0000000000000000 R09: 0000000000000000
[  663.905693][T12072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  663.905704][T12072] R13: 0000000000000000 R14: 00007f76a15b5fa0 R15: 00007ffc986ad238
[  663.905734][T12072]  </TASK>
[  664.994688][ T9447] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  665.195870][ T9447] usb 7-1: Using ep0 maxpacket: 8
[  665.507411][ T9447] usb 7-1: unable to get BOS descriptor or descriptor too short
[  665.718549][ T9447] usb 7-1: config 4 interface 0 has no altsetting 0
[  665.739912][ T9447] usb 7-1: string descriptor 0 read error: -22
[  665.764272][ T9447] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  665.794177][ T9447] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.867630][ T9447] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  665.919966][ T9439] usb 3-1: USB disconnect, device number 56
[  665.960046][ T9447] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  666.025426][ T9447] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  666.032645][ T9447] usb 7-1: media controller created
[  666.062262][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  666.102185][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  666.190954][ T9447] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  666.304194][ T9447] zl10353_read_register: readreg error (reg=127, ret==0)
[  666.355152][ T7961] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  666.475339][ T9447] usb 7-1: USB disconnect, device number 41
[  666.525666][ T7961] usb 1-1: Using ep0 maxpacket: 16
[  666.539881][ T7961] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  666.571930][ T7961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  666.621790][ T7961] usb 1-1: config 0 has no interface number 0
[  666.631662][ T7961] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  666.645712][ T7961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.653836][ T7961] usb 1-1: Product: syz
[  666.658355][ T9441] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  666.671628][ T7961] usb 1-1: Manufacturer: syz
[  666.856816][ T7961] usb 1-1: SerialNumber: syz
[  666.873140][ T7961] usb 1-1: config 0 descriptor??
[  666.905123][T12104] loop6: detected capacity change from 0 to 524287999
[  667.028035][ T9441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  667.110253][ T9437] usb 1-1: USB disconnect, device number 54
[  667.118613][ T9441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  667.184504][ T9441] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  667.239576][ T9441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.328034][ T9441] usb 3-1: config 0 descriptor??
[  667.800467][ T9441] uclogic 0003:5543:0522.0010: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0
[  668.008692][ T9441] usb 3-1: USB disconnect, device number 57
[  668.235719][T12126] fido_id[12126]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  668.294278][T12121] FAULT_INJECTION: forcing a failure.
[  668.294278][T12121] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  668.294312][T12121] CPU: 1 UID: 0 PID: 12121 Comm: syz.3.1813 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  668.294334][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  668.294345][T12121] Call Trace:
[  668.294353][T12121]  <TASK>
[  668.294362][T12121]  dump_stack_lvl+0x189/0x250
[  668.294390][T12121]  ? __pfx____ratelimit+0x10/0x10
[  668.294413][T12121]  ? __pfx_dump_stack_lvl+0x10/0x10
[  668.294438][T12121]  ? __pfx__printk+0x10/0x10
[  668.294465][T12121]  ? __might_fault+0xb0/0x130
[  668.294498][T12121]  should_fail_ex+0x414/0x560
[  668.294524][T12121]  copy_fpstate_to_sigframe+0xa8d/0xce0
[  668.294549][T12121]  ? copy_fpstate_to_sigframe+0x181/0xce0
[  668.294576][T12121]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  668.294594][T12121]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  668.294618][T12121]  ? read_tsc+0x9/0x20
[  668.294635][T12121]  ? ktime_get+0x1cb/0x1f0
[  668.294658][T12121]  ? __lock_acquire+0xab9/0xd20
[  668.294687][T12121]  ? fpu__alloc_mathframe+0xad/0x130
[  668.294710][T12121]  get_sigframe+0x58d/0x7d0
[  668.294736][T12121]  ? __pfx_get_sigframe+0x10/0x10
[  668.294757][T12121]  ? irqentry_exit+0x74/0x90
[  668.294780][T12121]  ? lockdep_hardirqs_on+0x9c/0x150
[  668.294810][T12121]  x64_setup_rt_frame+0x15c/0xd40
[  668.294836][T12121]  ? _raw_spin_unlock_irq+0x29/0x50
[  668.294859][T12121]  ? _raw_spin_unlock_irq+0x2e/0x50
[  668.294882][T12121]  ? get_signal+0x1122/0x1310
[  668.294911][T12121]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  668.294941][T12121]  arch_do_signal_or_restart+0x3dc/0x750
[  668.294960][T12121]  ? __fget_files+0x3a0/0x420
[  668.294985][T12121]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  668.295019][T12121]  ? exit_to_user_mode_loop+0x40/0x110
[  668.295044][T12121]  exit_to_user_mode_loop+0x75/0x110
[  668.295065][T12121]  do_syscall_64+0x2bd/0x3b0
[  668.295090][T12121]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.295107][T12121]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  668.295125][T12121]  ? clear_bhb_loop+0x60/0xb0
[  668.295147][T12121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  668.295164][T12121] RIP: 0033:0x7f76a138d3df
[  668.295180][T12121] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  668.295195][T12121] RSP: 002b:00007f76a212a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  668.295216][T12121] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00007f76a138d3df
[  668.295228][T12121] RDX: 0000000000000001 RSI: 00007f76a212a090 RDI: 0000000000000004
[  668.295239][T12121] RBP: 00007f76a212a090 R08: 0000000000000000 R09: 00007f76a2129df7
[  668.295252][T12121] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  668.295263][T12121] R13: 0000000000000000 R14: 00007f76a15b5fa0 R15: 00007ffc986ad238
[  668.295293][T12121]  </TASK>
[  668.647672][ T9437] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  668.805828][ T9437] usb 4-1: Using ep0 maxpacket: 16
[  668.812926][ T9437] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  668.812974][ T9437] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  668.812996][ T9437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.832821][ T9437] usb 4-1: config 0 descriptor??
[  669.149455][T12144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1819'.
[  669.316761][T12144] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1819'.
[  669.328191][ T7961] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  669.495105][ T7961] usb 3-1: Using ep0 maxpacket: 8
[  669.829747][ T9437] logitech 0003:046D:C24F.0011: ignoring exceeding usage max
[  669.849230][ T9437] logitech 0003:046D:C24F.0011: hidraw0: USB HID v10.00 Device [HID 046d:c24f] on usb-dummy_hcd.3-1/input0
[  669.863752][ T9437] logitech 0003:046D:C24F.0011: no inputs found
[  669.870233][ T7961] usb 3-1: unable to get BOS descriptor or descriptor too short
[  669.887006][ T7961] usb 3-1: config 4 interface 0 has no altsetting 0
[  669.922866][ T7961] usb 3-1: string descriptor 0 read error: -22
[  669.953166][ T7961] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  669.970777][ T7961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.080820][ T9437] usb 4-1: USB disconnect, device number 59
[  670.236590][ T7961] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  670.268536][ T7961] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  670.366870][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1821'.
[  670.917150][T12133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  670.969897][T12133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.019019][ T7961] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  671.026682][ T7961] usb 3-1: media controller created
[  671.080410][ T7961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  671.170550][ T7961] zl10353_read_register: readreg error (reg=127, ret==0)
[  671.298031][ T7961] usb 3-1: USB disconnect, device number 58
[  671.301941][   T30] audit: type=1804 audit(1751210467.578:489): pid=12160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1825" name="/newroot/372/file1" dev="fuse" ino=1 res=1 errno=0
[  671.424987][   T24] usb 7-1: new full-speed USB device number 42 using dummy_hcd
[  671.576178][   T24] usb 7-1: not running at top speed; connect to a high speed hub
[  671.644024][   T24] usb 7-1: config 1 interface 0 has no altsetting 0
[  671.655157][ T9433] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  671.657223][   T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  671.673828][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.683641][   T24] usb 7-1: Product: syz
[  672.291687][   T24] usb 7-1: Manufacturer: syz
[  672.296963][   T24] usb 7-1: SerialNumber: syz
[  672.328492][ T9433] usb 1-1: not running at top speed; connect to a high speed hub
[  672.349109][ T9433] usb 1-1: config 1 interface 0 has no altsetting 0
[  672.395259][ T9433] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  672.416878][ T9433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.437343][ T9433] usb 1-1: Product: syz
[  672.452356][ T9433] usb 1-1: Manufacturer: syz
[  672.462474][ T9433] usb 1-1: SerialNumber: syz
[  673.114779][   T24] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input15
[  673.133877][ T5174] bcm5974 7-1:1.0: could not read from device
[  673.160724][ T5174] bcm5974 7-1:1.0: could not read from device
[  673.178327][ T5174] bcm5974 7-1:1.0: could not read from device
[  673.219917][   T24] usb 7-1: USB disconnect, device number 42
[  673.263751][ T9433] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input16
[  673.287469][ T5174] bcm5974 1-1:1.0: could not read from device
[  673.322227][ T5174] bcm5974 1-1:1.0: could not read from device
[  673.359771][ T5174] bcm5974 1-1:1.0: could not read from device
[  673.374416][ T5174] bcm5974 1-1:1.0: could not read from device
[  673.402046][ T9433] usb 1-1: USB disconnect, device number 55
[  674.760390][T12216] Cannot find map_set index 0 as target
[  674.907240][T12218] /dev/nullb0: Can't open blockdev
[  675.355629][   T24] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  676.065024][   T24] usb 7-1: Using ep0 maxpacket: 16
[  676.071994][   T24] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  676.090056][   T24] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  676.104573][   T24] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  676.117814][   T24] usb 7-1: config 1 interface 0 has no altsetting 0
[  676.132856][   T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  676.146023][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.154175][   T24] usb 7-1: Product: syz
[  676.159985][   T24] usb 7-1: Manufacturer: syz
[  676.165035][   T24] usb 7-1: SerialNumber: syz
[  676.215128][ T9437] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[  676.355113][ T9433] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  676.416833][ T9437] usb 6-1: not running at top speed; connect to a high speed hub
[  676.589398][ T9437] usb 6-1: config 1 interface 0 has no altsetting 0
[  676.596354][ T9433] usb 4-1: Using ep0 maxpacket: 16
[  676.606024][ T9433] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  676.617305][ T9437] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  676.626628][ T9433] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  676.636959][ T9437] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.028120][ T9437] usb 6-1: Product: syz
[  677.032460][ T9433] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  677.049045][ T9437] usb 6-1: Manufacturer: syz
[  677.066521][ T9437] usb 6-1: SerialNumber: syz
[  677.075457][ T9433] usb 4-1: config 1 interface 0 has no altsetting 0
[  677.094325][ T9433] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  677.119609][ T9433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.145060][ T9433] usb 4-1: Product: syz
[  677.154728][ T9433] usb 4-1: Manufacturer: syz
[  677.165089][ T9433] usb 4-1: SerialNumber: syz
[  677.567379][ T9433] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  677.706762][   T24] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 43 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  677.782034][   T24] usb 7-1: USB disconnect, device number 43
[  677.839694][   T24] usblp1: removed
[  677.858316][ T9437] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input17
[  677.886567][ T9439] usb 4-1: USB disconnect, device number 60
[  677.902705][T12223] usblp0:failed reading printer status (-71)
[  677.960339][ T5174] bcm5974 6-1:1.0: could not read from device
[  677.988037][ T5174] bcm5974 6-1:1.0: could not read from device
[  678.040582][ T5174] bcm5974 6-1:1.0: could not read from device
[  678.079417][ T9437] usb 6-1: USB disconnect, device number 29
[  678.139987][T12222] usblp0: removed
[  678.152974][ T5174] bcm5974 6-1:1.0: could not read from device
[  678.705936][ T9439] IPVS: starting estimator thread 0...
[  678.807901][T12254] IPVS: using max 28 ests per chain, 67200 per kthread
[  678.979603][T12258] SET target dimension over the limit!
[  679.521677][T12263] FAULT_INJECTION: forcing a failure.
[  679.521677][T12263] name failslab, interval 1, probability 0, space 0, times 0
[  679.609360][T12263] CPU: 1 UID: 0 PID: 12263 Comm: syz.2.1859 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  679.609388][T12263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  679.609400][T12263] Call Trace:
[  679.609408][T12263]  <TASK>
[  679.609416][T12263]  dump_stack_lvl+0x189/0x250
[  679.609445][T12263]  ? __pfx____ratelimit+0x10/0x10
[  679.609468][T12263]  ? __pfx_dump_stack_lvl+0x10/0x10
[  679.609491][T12263]  ? __pfx__printk+0x10/0x10
[  679.609513][T12263]  ? __pfx___might_resched+0x10/0x10
[  679.609534][T12263]  ? fs_reclaim_acquire+0x7d/0x100
[  679.609560][T12263]  should_fail_ex+0x414/0x560
[  679.609582][T12263]  should_failslab+0xa8/0x100
[  679.609601][T12263]  kmem_cache_alloc_noprof+0x73/0x3c0
[  679.609619][T12263]  ? getname_flags+0xb8/0x540
[  679.609644][T12263]  getname_flags+0xb8/0x540
[  679.609669][T12263]  do_sys_openat2+0xbc/0x1c0
[  679.609694][T12263]  ? __pfx_do_sys_openat2+0x10/0x10
[  679.609717][T12263]  ? ksys_write+0x22a/0x250
[  679.609739][T12263]  ? __pfx_ksys_write+0x10/0x10
[  679.609756][T12263]  ? rcu_is_watching+0x15/0xb0
[  679.609784][T12263]  __x64_sys_openat+0x138/0x170
[  679.609814][T12263]  do_syscall_64+0xfa/0x3b0
[  679.609836][T12263]  ? lockdep_hardirqs_on+0x9c/0x150
[  679.609859][T12263]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.609877][T12263]  ? clear_bhb_loop+0x60/0xb0
[  679.609898][T12263]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.609916][T12263] RIP: 0033:0x7fd256d8d290
[  679.609933][T12263] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44
[  679.609948][T12263] RSP: 002b:00007fd257c57b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  679.609967][T12263] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd256d8d290
[  679.609980][T12263] RDX: 0000000000000000 RSI: 00007fd257c57c10 RDI: 00000000ffffff9c
[  679.609992][T12263] RBP: 00007fd257c57c10 R08: 0000000000000000 R09: 0000000000000000
[  679.610002][T12263] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  679.610013][T12263] R13: 0000000000000000 R14: 00007fd256fb5fa0 R15: 00007ffff9d5fc58
[  679.610042][T12263]  </TASK>
[  680.015907][ T9433] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  680.097898][ T9439] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[  680.306631][ T9433] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  680.318374][ T9433] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  680.330673][ T9439] usb 6-1: not running at top speed; connect to a high speed hub
[  680.344845][ T9439] usb 6-1: config 1 interface 0 has no altsetting 0
[  680.351655][ T9433] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  680.363843][ T9433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  680.372892][ T9433] usb 4-1: SerialNumber: syz
[  680.380262][ T9439] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  680.389507][ T9439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.397765][ T9437] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  680.413373][ T9439] usb 6-1: Product: syz
[  680.465362][ T9439] usb 6-1: Manufacturer: syz
[  680.474551][ T9439] usb 6-1: SerialNumber: syz
[  680.545474][ T9437] usb 7-1: device descriptor read/64, error -71
[  680.656937][ T9433] usb 4-1: 0:2 : does not exist
[  680.692108][ T9433] usb 4-1: USB disconnect, device number 61
[  680.785171][ T9437] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  680.942053][T12280] FAULT_INJECTION: forcing a failure.
[  680.942053][T12280] name failslab, interval 1, probability 0, space 0, times 0
[  680.982142][T12280] CPU: 1 UID: 0 PID: 12280 Comm: syz.0.1866 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  680.982171][T12280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  680.982183][T12280] Call Trace:
[  680.982198][T12280]  <TASK>
[  680.982207][T12280]  dump_stack_lvl+0x189/0x250
[  680.982232][T12280]  ? __pfx____ratelimit+0x10/0x10
[  680.982249][T12280]  ? __pfx_dump_stack_lvl+0x10/0x10
[  680.982273][T12280]  ? __pfx__printk+0x10/0x10
[  680.982297][T12280]  ? __pfx___might_resched+0x10/0x10
[  680.982326][T12280]  should_fail_ex+0x414/0x560
[  680.982348][T12280]  ? fuse_readdir+0x146e/0x2bb0
[  680.982358][T12280]  should_failslab+0xa8/0x100
[  680.982372][T12280]  __kvmalloc_node_noprof+0x161/0x5f0
[  680.982386][T12280]  ? fuse_readdir+0x146e/0x2bb0
[  680.982398][T12280]  fuse_readdir+0x146e/0x2bb0
[  680.982413][T12280]  ? is_bpf_text_address+0x292/0x2b0
[  680.982445][T12280]  ? __kernel_text_address+0xd/0x40
[  680.982465][T12280]  ? unwind_get_return_address+0x4d/0x90
[  680.982500][T12280]  ? stack_trace_save+0x9c/0xe0
[  680.982511][T12280]  ? __pfx_stack_trace_save+0x10/0x10
[  680.982520][T12280]  ? __pfx_hlock_conflict+0x10/0x10
[  680.982536][T12280]  ? __pfx_fuse_readdir+0x10/0x10
[  680.982546][T12280]  ? check_path+0x21/0x40
[  680.982573][T12280]  ? lockdep_unlock+0x89/0x120
[  680.982593][T12280]  ? validate_chain+0x897/0x2140
[  680.982658][T12280]  ? iterate_dir+0x49f/0x770
[  680.982669][T12280]  ? down_read_killable+0x1d1/0x350
[  680.982682][T12280]  iterate_dir+0x5ac/0x770
[  680.982696][T12280]  __se_sys_getdents64+0xe4/0x260
[  680.982716][T12280]  ? __pfx___se_sys_getdents64+0x10/0x10
[  680.982734][T12280]  ? ksys_write+0x22a/0x250
[  680.982752][T12280]  ? __pfx_filldir64+0x10/0x10
[  680.982773][T12280]  ? __pfx_ksys_write+0x10/0x10
[  680.982789][T12280]  ? rcu_is_watching+0x15/0xb0
[  680.982807][T12280]  ? do_syscall_64+0xbe/0x3b0
[  680.982823][T12280]  do_syscall_64+0xfa/0x3b0
[  680.982836][T12280]  ? lockdep_hardirqs_on+0x9c/0x150
[  680.982849][T12280]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.982866][T12280]  ? clear_bhb_loop+0x60/0xb0
[  680.982888][T12280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.982906][T12280] RIP: 0033:0x7fb57ef8e929
[  680.982923][T12280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  680.982938][T12280] RSP: 002b:00007fb57fe95038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  680.982951][T12280] RAX: ffffffffffffffda RBX: 00007fb57f1b5fa0 RCX: 00007fb57ef8e929
[  680.982958][T12280] RDX: 00000000000000c0 RSI: 0000200000000000 RDI: 0000000000000004
[  680.982965][T12280] RBP: 00007fb57fe95090 R08: 0000000000000000 R09: 0000000000000000
[  680.982971][T12280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  680.982977][T12280] R13: 0000000000000000 R14: 00007fb57f1b5fa0 R15: 00007ffe31a06ae8
[  680.982994][T12280]  </TASK>
[  680.985034][ T9437] usb 7-1: device descriptor read/64, error -71
[  681.344723][ T9439] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input18
[  681.357719][ T5174] bcm5974 6-1:1.0: could not read from device
[  681.399897][ T5174] bcm5974 6-1:1.0: could not read from device
[  681.424683][ T9439] usb 6-1: USB disconnect, device number 30
[  681.449292][ T9437] usb usb7-port1: attempt power cycle
[  682.466969][ T9437] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  682.535030][   T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  682.639803][T12294] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  682.690484][T12294] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  682.709192][T12294] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  682.724126][T12294] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  682.724383][T12294] geneve2: entered promiscuous mode
[  682.744443][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  682.757061][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  682.770458][   T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  682.784008][T12294] geneve2: entered allmulticast mode
[  682.789517][ T9437] usb 7-1: device descriptor read/8, error -71
[  682.798836][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  682.845732][   T10] usb 4-1: SerialNumber: syz
[  682.949217][T12298] FAULT_INJECTION: forcing a failure.
[  682.949217][T12298] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  682.949257][T12298] CPU: 0 UID: 0 PID: 12298 Comm: syz.6.1871 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  682.949280][T12298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  682.949291][T12298] Call Trace:
[  682.949299][T12298]  <TASK>
[  682.949307][T12298]  dump_stack_lvl+0x189/0x250
[  682.949339][T12298]  ? __pfx____ratelimit+0x10/0x10
[  682.949363][T12298]  ? __pfx_dump_stack_lvl+0x10/0x10
[  682.949386][T12298]  ? __pfx__printk+0x10/0x10
[  682.949402][T12298]  ? __might_fault+0xb0/0x130
[  682.949427][T12298]  should_fail_ex+0x414/0x560
[  682.949451][T12298]  _copy_from_user+0x2d/0xb0
[  682.949476][T12298]  __sys_sendto+0x25c/0x520
[  682.949499][T12298]  ? __pfx___sys_sendto+0x10/0x10
[  682.949514][T12298]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  682.949550][T12298]  ? __fget_files+0x3a0/0x420
[  682.949582][T12298]  ? ksys_write+0x22a/0x250
[  682.949603][T12298]  ? __pfx_ksys_write+0x10/0x10
[  682.949620][T12298]  ? rcu_is_watching+0x15/0xb0
[  682.949647][T12298]  __x64_sys_sendto+0xde/0x100
[  682.949669][T12298]  do_syscall_64+0xfa/0x3b0
[  682.949691][T12298]  ? lockdep_hardirqs_on+0x9c/0x150
[  682.949712][T12298]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.949730][T12298]  ? clear_bhb_loop+0x60/0xb0
[  682.949750][T12298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.949768][T12298] RIP: 0033:0x7fe53d98e929
[  682.949784][T12298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  682.949799][T12298] RSP: 002b:00007fe53e84d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  682.949819][T12298] RAX: ffffffffffffffda RBX: 00007fe53dbb5fa0 RCX: 00007fe53d98e929
[  682.949832][T12298] RDX: 000000000001fffc RSI: 0000200000000180 RDI: 0000000000000006
[  682.949844][T12298] RBP: 00007fe53e84d090 R08: 0000200000000140 R09: 0000000000000014
[  682.949856][T12298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  682.949867][T12298] R13: 0000000000000000 R14: 00007fe53dbb5fa0 R15: 00007fff80a8cd48
[  682.949895][T12298]  </TASK>
[  683.075050][   T10] usb 4-1: 0:2 : does not exist
[  683.131989][   T10] usb 4-1: USB disconnect, device number 62
[  683.369708][T12231] udevd[12231]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  683.469451][T12305] /dev/nullb0: Can't open blockdev
[  684.503285][T12316] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1875'.
[  684.563872][T12316] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1875'.
[  685.182346][T12317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1877'.
[  685.606251][ T9447] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  685.665592][ T9441] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  685.905899][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  686.336279][ T9447] usb 4-1: Using ep0 maxpacket: 32
[  686.426860][ T9447] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  686.436182][ T9447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.459469][ T9447] usb 4-1: config 0 descriptor??
[  686.496644][ T9441] usb 1-1: Using ep0 maxpacket: 16
[  686.516687][ T9441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  686.542300][ T9441] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  686.561700][ T9441] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  686.579233][ T9441] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  686.588548][ T9441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.625729][ T9441] usb 1-1: config 0 descriptor??
[  686.702453][ T9447] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  686.746515][ T9447] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  686.776012][ T9447] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  687.078172][ T9447] usb 4-1: media controller created
[  687.143187][ T9447] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  687.300412][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300449][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300477][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300505][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300533][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300559][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300586][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300614][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300641][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300668][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300696][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300723][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300749][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300775][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.300809][ T9441] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  687.325801][ T9447] az6027: usb out operation failed. (-71)
[  687.326990][ T9447] az6027: usb out operation failed. (-71)
[  687.327006][ T9447] stb0899_attach: Driver disabled by Kconfig
[  687.327019][ T9447] az6027: no front-end attached
[  687.327019][ T9447] 
[  687.328140][ T9447] az6027: usb out operation failed. (-71)
[  687.328158][ T9447] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  687.367466][ T9447] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20
[  687.377971][ T9447] dvb-usb: schedule remote query interval to 400 msecs.
[  687.546308][ T9441] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0012/input/input19
[  687.549766][ T9447] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  687.567763][T12322] No control pipe specified
[  687.576595][ T9441] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  687.673475][ T9447] usb 4-1: USB disconnect, device number 63
[  687.896698][ T9447] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  687.928425][   T24] usb 1-1: USB disconnect, device number 56
[  687.967491][T12351] fido_id[12351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  688.611200][T12365] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1892'.
[  688.624231][T12365] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1892'.
[  689.637008][ T9437] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  689.852180][ T9437] usb 3-1: Using ep0 maxpacket: 32
[  689.878600][ T9437] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  689.920408][ T9437] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  689.952076][ T9437] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  689.988697][ T9437] usb 3-1: config 0 interface 0 has no altsetting 1
[  690.102868][T12382] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1900'.
[  690.441190][ T9437] usb 3-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57
[  690.465542][ T9437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.531055][ T9437] usb 3-1: Product: syz
[  690.546844][T12387] 9p: Unknown uid 00000000004294967295
[  690.552555][ T9437] usb 3-1: Manufacturer: syz
[  690.560955][ T9437] usb 3-1: SerialNumber: syz
[  690.618332][ T9437] usb 3-1: config 0 descriptor??
[  690.633181][ T9437] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  690.740603][ T9437] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2
[  690.835099][   T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  690.891240][ T9437] usb 3-1: USB disconnect, device number 59
[  690.921791][T12231] udevd[12231]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  691.035298][   T10] usb 6-1: Using ep0 maxpacket: 16
[  691.093138][T12397] Cannot find map_set index 0 as target
[  691.380881][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  691.718740][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  691.839630][T12399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1905'.
[  692.181989][   T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  692.192226][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.215317][   T10] usb 6-1: config 0 descriptor??
[  692.443771][T12387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.452501][T12387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.491486][   T10] usb 6-1: USB disconnect, device number 31
[  693.007347][T12423] /dev/nullb0: Can't open blockdev
[  693.011123][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'.
[  693.180348][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'.
[  693.437830][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'.
[  694.164281][T12435] x_tables: duplicate underflow at hook 1
[  694.305384][   T10] usb 7-1: new full-speed USB device number 48 using dummy_hcd
[  694.406161][ T9437] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  694.457818][   T10] usb 7-1: config 0 has an invalid interface number: 213 but max is 0
[  694.475364][   T10] usb 7-1: config 0 has no interface number 0
[  694.493901][   T10] usb 7-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7
[  694.513833][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.521963][   T10] usb 7-1: Product: syz
[  694.526501][   T10] usb 7-1: Manufacturer: syz
[  694.531216][   T10] usb 7-1: SerialNumber: syz
[  694.548662][   T10] usb 7-1: config 0 descriptor??
[  694.565019][ T9437] usb 6-1: Using ep0 maxpacket: 32
[  694.602964][ T9437] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12408, setting to 64
[  694.624988][ T9437] usb 6-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43
[  694.651813][ T9437] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.686559][ T9437] usb 6-1: config 0 descriptor??
[  695.036476][T12455] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1927'.
[  695.053265][T12455] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1927'.
[  695.404761][T12458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  695.415262][T12458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  695.797013][ T9437] cdc_subset 6-1:0.0: probe with driver cdc_subset failed with error -22
[  695.963607][ T9437] usb 6-1: USB disconnect, device number 32
[  697.325351][ T9437] usb 7-1: USB disconnect, device number 48
[  697.394406][T12470] loop2: detected capacity change from 0 to 7
[  697.407888][T12470] Dev loop2: unable to read RDB block 7
[  697.413527][T12470]  loop2: unable to read partition table
[  697.467662][T12470] loop2: partition table beyond EOD, truncated
[  697.473898][T12470] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  698.008282][T12490] __vm_enough_memory: pid: 12490, comm: syz.5.1939, bytes: 4503599627366400 not enough memory for the allocation
[  698.034561][ T9437] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  698.139190][T12494] /dev/nullb0: Can't open blockdev
[  698.205802][ T9437] usb 7-1: Using ep0 maxpacket: 16
[  698.377033][ T9437] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  698.616722][ T9437] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00
[  698.633896][ T9437] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.647187][ T9437] usb 7-1: config 0 descriptor??
[  698.856836][ T9439] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  698.883759][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1942'.
[  699.036634][ T9439] usb 1-1: not running at top speed; connect to a high speed hub
[  699.047526][ T9439] usb 1-1: config 1 interface 0 has no altsetting 0
[  699.057886][ T9439] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  699.067778][ T9439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.070464][T12482] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1938'.
[  699.076282][ T9439] usb 1-1: Product: syz
[  699.090275][ T9439] usb 1-1: Manufacturer: syz
[  699.096686][ T9439] usb 1-1: SerialNumber: syz
[  699.171849][ T9437] corsair-psu 0003:1B1C:1C07.0013: collection stack underflow
[  699.180686][ T9437] corsair-psu 0003:1B1C:1C07.0013: item 0 4 0 12 parsing failed
[  699.191198][ T9437] corsair-psu 0003:1B1C:1C07.0013: probe with driver corsair-psu failed with error -22
[  699.472219][ T9437] usb 7-1: USB disconnect, device number 49
[  699.850455][ T9439] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input21
[  699.872900][ T5174] bcm5974 1-1:1.0: could not read from device
[  699.888485][ T5174] bcm5974 1-1:1.0: could not read from device
[  699.899535][ T5174] bcm5974 1-1:1.0: could not read from device
[  699.921832][ T9439] usb 1-1: USB disconnect, device number 57
[  699.937446][ T5174] bcm5974 1-1:1.0: could not read from device
[  700.340141][T12521] pimreg: entered allmulticast mode
[  700.389013][T12521] pimreg: left allmulticast mode
[  700.735579][T12532] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1955'.
[  702.256097][   T30] audit: type=1326 audit(1751210498.528:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12556 comm="syz.5.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39a78e929 code=0x7fc00000
[  702.280864][   T30] audit: type=1326 audit(1751210498.558:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12556 comm="syz.5.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39a78e929 code=0x7fc00000
[  702.303348][   T30] audit: type=1326 audit(1751210498.558:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12556 comm="syz.5.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39a78e929 code=0x7fc00000
[  702.737888][T12565] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1968'.
[  703.267846][   T30] audit: type=1326 audit(1751210499.538:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12556 comm="syz.5.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff39a72ab19 code=0x7fc00000
[  703.632227][T12573] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  704.731510][T12602] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1979'.
[  705.153433][T12604] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1980'.
[  705.826704][T12606] /dev/nullb0: Can't open blockdev
[  705.837709][T12609] FAULT_INJECTION: forcing a failure.
[  705.837709][T12609] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  705.889585][T12609] CPU: 1 UID: 0 PID: 12609 Comm: syz.5.1983 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  705.889612][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  705.889619][T12609] Call Trace:
[  705.889624][T12609]  <TASK>
[  705.889630][T12609]  dump_stack_lvl+0x189/0x250
[  705.889651][T12609]  ? __pfx____ratelimit+0x10/0x10
[  705.889666][T12609]  ? __pfx_dump_stack_lvl+0x10/0x10
[  705.889686][T12609]  ? __pfx__printk+0x10/0x10
[  705.889696][T12609]  ? __might_fault+0xb0/0x130
[  705.889713][T12609]  should_fail_ex+0x414/0x560
[  705.889735][T12609]  _copy_from_user+0x2d/0xb0
[  705.889750][T12609]  ___sys_sendmsg+0x158/0x2a0
[  705.889764][T12609]  ? __pfx____sys_sendmsg+0x10/0x10
[  705.889794][T12609]  ? __fget_files+0x2a/0x420
[  705.889806][T12609]  ? __fget_files+0x3a0/0x420
[  705.889823][T12609]  __x64_sys_sendmsg+0x19b/0x260
[  705.889836][T12609]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  705.889852][T12609]  ? __pfx_ksys_write+0x10/0x10
[  705.889863][T12609]  ? rcu_is_watching+0x15/0xb0
[  705.889879][T12609]  ? do_syscall_64+0xbe/0x3b0
[  705.889901][T12609]  do_syscall_64+0xfa/0x3b0
[  705.889913][T12609]  ? lockdep_hardirqs_on+0x9c/0x150
[  705.889926][T12609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.889936][T12609]  ? clear_bhb_loop+0x60/0xb0
[  705.889949][T12609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.889959][T12609] RIP: 0033:0x7ff39a78e929
[  705.889969][T12609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  705.889978][T12609] RSP: 002b:00007ff39b5a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  705.889990][T12609] RAX: ffffffffffffffda RBX: 00007ff39a9b5fa0 RCX: 00007ff39a78e929
[  705.889998][T12609] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  705.890005][T12609] RBP: 00007ff39b5a6090 R08: 0000000000000000 R09: 0000000000000000
[  705.890012][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  705.890018][T12609] R13: 0000000000000000 R14: 00007ff39a9b5fa0 R15: 00007ffdd9bf0468
[  705.890033][T12609]  </TASK>
[  706.177791][T12618] program syz.5.1986 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  706.191708][T12618] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  706.815946][T12642] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1992'.
[  708.301653][T12664] /dev/nullb0: Can't open blockdev
[  709.335121][ T9439] usb 6-1: new low-speed USB device number 33 using dummy_hcd
[  709.527903][ T9439] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  709.559386][ T9439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.586092][ T9439] usb 6-1: config 0 descriptor??
[  709.721580][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  709.742579][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  709.753181][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  709.771222][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  709.788897][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  710.157752][T12675] chnl_net:caif_netlink_parms(): no params data found
[  710.323113][T12675] bridge0: port 1(bridge_slave_0) entered blocking state
[  710.331538][T12675] bridge0: port 1(bridge_slave_0) entered disabled state
[  710.339148][T12675] bridge_slave_0: entered allmulticast mode
[  710.347840][T12675] bridge_slave_0: entered promiscuous mode
[  710.357241][T12675] bridge0: port 2(bridge_slave_1) entered blocking state
[  710.367237][T12675] bridge0: port 2(bridge_slave_1) entered disabled state
[  710.374820][T12675] bridge_slave_1: entered allmulticast mode
[  710.396385][T12675] bridge_slave_1: entered promiscuous mode
[  710.457706][T12675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  710.477731][T12675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  710.538210][T12675] team0: Port device team_slave_0 added
[  710.549139][T12675] team0: Port device team_slave_1 added
[  710.624777][T12675] batman_adv: batadv0: Adding interface: batadv_slave_0
[  710.632303][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  710.659326][T12675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  710.678153][T12675] batman_adv: batadv0: Adding interface: batadv_slave_1
[  710.688525][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  710.715465][T12675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  711.338673][ T9439] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  711.357832][T12675] hsr_slave_0: entered promiscuous mode
[  711.364450][ T9439] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  711.385910][T12675] hsr_slave_1: entered promiscuous mode
[  711.397522][ T9439] asix 6-1:0.0: probe with driver asix failed with error -71
[  711.410768][T12675] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  711.433990][T12675] Cannot create hsr debugfs directory
[  711.439911][ T9439] usb 6-1: USB disconnect, device number 33
[  711.621796][T12703] FAULT_INJECTION: forcing a failure.
[  711.621796][T12703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  711.637732][T12703] CPU: 0 UID: 0 PID: 12703 Comm: syz.6.2010 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  711.637759][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  711.637771][T12703] Call Trace:
[  711.637779][T12703]  <TASK>
[  711.637788][T12703]  dump_stack_lvl+0x189/0x250
[  711.637818][T12703]  ? __pfx____ratelimit+0x10/0x10
[  711.637842][T12703]  ? __pfx_dump_stack_lvl+0x10/0x10
[  711.637866][T12703]  ? __pfx__printk+0x10/0x10
[  711.637884][T12703]  ? __might_fault+0xb0/0x130
[  711.637916][T12703]  should_fail_ex+0x414/0x560
[  711.637941][T12703]  _copy_from_user+0x2d/0xb0
[  711.637966][T12703]  ___sys_sendmsg+0x158/0x2a0
[  711.637990][T12703]  ? __pfx____sys_sendmsg+0x10/0x10
[  711.638054][T12703]  ? __fget_files+0x2a/0x420
[  711.638075][T12703]  ? __fget_files+0x3a0/0x420
[  711.638107][T12703]  __x64_sys_sendmsg+0x19b/0x260
[  711.638129][T12703]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  711.638159][T12703]  ? __pfx_ksys_write+0x10/0x10
[  711.638177][T12703]  ? rcu_is_watching+0x15/0xb0
[  711.638205][T12703]  ? do_syscall_64+0xbe/0x3b0
[  711.638232][T12703]  do_syscall_64+0xfa/0x3b0
[  711.638254][T12703]  ? lockdep_hardirqs_on+0x9c/0x150
[  711.638276][T12703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.638293][T12703]  ? clear_bhb_loop+0x60/0xb0
[  711.638314][T12703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.638330][T12703] RIP: 0033:0x7fe53d98e929
[  711.638347][T12703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  711.638361][T12703] RSP: 002b:00007fe53e84d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  711.638382][T12703] RAX: ffffffffffffffda RBX: 00007fe53dbb5fa0 RCX: 00007fe53d98e929
[  711.638396][T12703] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  711.638407][T12703] RBP: 00007fe53e84d090 R08: 0000000000000000 R09: 0000000000000000
[  711.638419][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  711.638430][T12703] R13: 0000000000000000 R14: 00007fe53dbb5fa0 R15: 00007fff80a8cd48
[  711.638460][T12703]  </TASK>
[  711.858878][   T51] Bluetooth: hci3: command tx timeout
[  712.032755][T12675] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  712.047219][T12675] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  712.058695][T12675] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  712.072137][T12675] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  712.240455][T12675] 8021q: adding VLAN 0 to HW filter on device bond0
[  712.307362][T12675] 8021q: adding VLAN 0 to HW filter on device team0
[  712.344507][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state
[  712.351737][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state
[  712.386293][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.393492][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state
[  712.536095][ T9439] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  712.567483][ T9437] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  712.699258][ T9439] usb 7-1: Using ep0 maxpacket: 32
[  712.720801][ T9439] usb 7-1: config 0 has no interfaces?
[  712.726531][ T9437] usb 6-1: Using ep0 maxpacket: 32
[  712.734194][ T9437] usb 6-1: config 0 has no interfaces?
[  712.745900][ T9439] usb 7-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  712.755693][ T9437] usb 6-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  712.764826][ T9439] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.773875][ T9437] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.789235][ T9437] usb 6-1: config 0 descriptor??
[  712.794845][ T9439] usb 7-1: config 0 descriptor??
[  712.834585][T12675] 8021q: adding VLAN 0 to HW filter on device batadv0
[  713.018713][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.028644][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.040257][T12719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.092602][T12719] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  713.205160][ T9437] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  713.406313][ T9437] usb 4-1: Using ep0 maxpacket: 16
[  713.448910][ T9437] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  713.486151][ T9437] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  713.511711][ T9437] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  713.556886][ T9437] usb 4-1: config 1 interface 0 has no altsetting 0
[  713.592240][ T9437] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  713.592959][T12675] veth0_vlan: entered promiscuous mode
[  713.620604][ T9437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.649236][ T9437] usb 4-1: Product: syz
[  713.661479][T12675] veth1_vlan: entered promiscuous mode
[  713.671956][ T9437] usb 4-1: Manufacturer: syz
[  713.702251][ T9437] usb 4-1: SerialNumber: syz
[  713.728771][T12675] veth0_macvtap: entered promiscuous mode
[  713.749096][T12675] veth1_macvtap: entered promiscuous mode
[  713.848261][T12675] batman_adv: batadv0: Interface activated: batadv_slave_0
[  713.891586][T12675] batman_adv: batadv0: Interface activated: batadv_slave_1
[  713.940362][   T51] Bluetooth: hci3: command tx timeout
[  713.947770][T12675] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  714.137527][T12675] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  714.404974][T12675] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  714.424729][T12675] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  714.478960][ T9437] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  714.533982][ T9437] usb 4-1: USB disconnect, device number 64
[  714.592842][ T9437] usblp0: removed
[  714.707665][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.723074][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  714.771234][ T6324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.794949][ T6324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  715.732674][ T9447] usb 6-1: USB disconnect, device number 34
[  715.897093][ T5828] usb 7-1: USB disconnect, device number 50
[  716.005320][   T51] Bluetooth: hci3: command tx timeout
[  716.325525][ T9447] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  716.506475][ T9447] usb 4-1: Using ep0 maxpacket: 32
[  716.562417][ T9447] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  716.616180][ T9447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.674393][ T9447] usb 4-1: config 0 descriptor??
[  716.719473][ T9447] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state
[  716.753406][ T9447] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  716.804668][ T9447] dvb_usb_anysee 4-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  716.825949][T12780] loop2: detected capacity change from 0 to 7
[  716.855565][T12780] Dev loop2: unable to read RDB block 7
[  716.861200][T12780]  loop2: unable to read partition table
[  716.911612][T12780] loop2: partition table beyond EOD, truncated
[  716.946776][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2029'.
[  717.012767][T12780] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  717.065152][ T9447] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  717.124224][T12783] netlink: 'syz.6.2029': attribute type 10 has an invalid length.
[  717.145490][T12783] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2029'.
[  717.236336][ T9447] usb 6-1: Using ep0 maxpacket: 32
[  717.256071][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  717.264704][ T9447] usb 6-1: config 8 has an invalid interface number: 215 but max is 0
[  717.282160][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  717.293345][ T9447] usb 6-1: config 8 has no interface number 0
[  717.303005][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  717.328167][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  717.338305][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  717.408068][ T9447] usb 6-1: New USB device found, idVendor=0644, idProduct=0000, bcdDevice= 1.00
[  717.420802][ T9441] usb 4-1: USB disconnect, device number 65
[  717.460320][ T9447] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.471779][ T9447] usb 6-1: Product: syz
[  717.482589][ T9447] usb 6-1: Manufacturer: syz
[  717.491922][ T9447] usb 6-1: SerialNumber: syz
[  717.513752][T12783] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  717.537878][T12783] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  717.547527][ T9447] usb-storage 6-1:8.215: USB Mass Storage device detected
[  717.547577][T12783] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  717.594428][T12783] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  717.613760][T12783] team0: Port device geneve0 added
[  717.787029][ T6324] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.841093][ T6324] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  717.895155][ T9441] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  718.094050][   T51] Bluetooth: hci3: command tx timeout
[  718.164074][ T6324] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.175207][ T9441] usb 4-1: Using ep0 maxpacket: 32
[  718.184649][ T6324] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  718.198713][ T9441] usb 4-1: config 0 has no interfaces?
[  718.204271][ T9441] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  718.220158][ T9441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.247367][ T9441] usb 4-1: config 0 descriptor??
[  718.323727][ T6324] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.354046][ T6324] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  718.471257][T12790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.503324][T12790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.531939][ T6324] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  718.549920][ T6324] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  718.920396][ T6324] bridge_slave_1: left allmulticast mode
[  718.926908][ T6324] bridge_slave_1: left promiscuous mode
[  718.945126][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.972269][ T6324] bridge_slave_0: left allmulticast mode
[  718.996337][ T6324] bridge_slave_0: left promiscuous mode
[  719.012166][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.375081][   T51] Bluetooth: hci0: command tx timeout
[  719.655810][T12804] ./cgroup: Can't lookup blockdev
[  719.663904][ T7961] usb 6-1: USB disconnect, device number 35
[  720.196116][ T6324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  720.214341][ T6324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  720.224521][ T6324] bond0 (unregistering): Released all slaves
[  720.353285][ T6324] bond1 (unregistering): Released all slaves
[  720.383779][T12784] chnl_net:caif_netlink_parms(): no params data found
[  720.602756][ T6324] tipc: Disabling bearer <udp:syz2>
[  720.630512][ T8769] usb 4-1: USB disconnect, device number 66
[  720.657778][ T6324] tipc: Disabling bearer <eth:team0>
[  720.765130][ T6324] tipc: Left network mode
[  721.172922][T12831] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2040'.
[  721.447307][   T51] Bluetooth: hci0: command tx timeout
[  721.974131][T12784] bridge0: port 1(bridge_slave_0) entered blocking state
[  722.024466][T12784] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.052563][T12784] bridge_slave_0: entered allmulticast mode
[  722.066455][T12784] bridge_slave_0: entered promiscuous mode
[  722.094710][T12784] bridge0: port 2(bridge_slave_1) entered blocking state
[  722.130261][T12784] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.166451][T12784] bridge_slave_1: entered allmulticast mode
[  722.227697][T12784] bridge_slave_1: entered promiscuous mode
[  722.300469][T12849] FAULT_INJECTION: forcing a failure.
[  722.300469][T12849] name failslab, interval 1, probability 0, space 0, times 0
[  722.320614][T12849] CPU: 0 UID: 0 PID: 12849 Comm: syz.5.2047 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  722.320642][T12849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  722.320653][T12849] Call Trace:
[  722.320662][T12849]  <TASK>
[  722.320671][T12849]  dump_stack_lvl+0x189/0x250
[  722.320700][T12849]  ? __pfx____ratelimit+0x10/0x10
[  722.320724][T12849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  722.320748][T12849]  ? __pfx__printk+0x10/0x10
[  722.320773][T12849]  ? __pfx___might_resched+0x10/0x10
[  722.320796][T12849]  ? fs_reclaim_acquire+0x7d/0x100
[  722.320844][T12849]  should_fail_ex+0x414/0x560
[  722.320869][T12849]  should_failslab+0xa8/0x100
[  722.320893][T12849]  __kmalloc_noprof+0xcb/0x4f0
[  722.320913][T12849]  ? kfree+0x4d/0x440
[  722.320929][T12849]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  722.320958][T12849]  tomoyo_realpath_from_path+0xe3/0x5d0
[  722.320984][T12849]  ? tomoyo_domain+0xda/0x130
[  722.321014][T12849]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  722.321034][T12849]  tomoyo_path_number_perm+0x1e8/0x5a0
[  722.321058][T12849]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  722.321094][T12849]  ? __lock_acquire+0xab9/0xd20
[  722.321130][T12849]  ? __fget_files+0x2a/0x420
[  722.321149][T12849]  ? __fget_files+0x2a/0x420
[  722.321164][T12849]  ? __fget_files+0x3a0/0x420
[  722.321179][T12849]  ? __fget_files+0x2a/0x420
[  722.321199][T12849]  security_file_ioctl+0xcb/0x2d0
[  722.321218][T12849]  __se_sys_ioctl+0x47/0x170
[  722.321234][T12849]  do_syscall_64+0xfa/0x3b0
[  722.321252][T12849]  ? lockdep_hardirqs_on+0x9c/0x150
[  722.321270][T12849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.321284][T12849]  ? clear_bhb_loop+0x60/0xb0
[  722.321307][T12849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.321320][T12849] RIP: 0033:0x7ff39a78e929
[  722.321335][T12849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  722.321346][T12849] RSP: 002b:00007ff39b5a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  722.321362][T12849] RAX: ffffffffffffffda RBX: 00007ff39a9b5fa0 RCX: 00007ff39a78e929
[  722.321372][T12849] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  722.321380][T12849] RBP: 00007ff39b5a6090 R08: 0000000000000000 R09: 0000000000000000
[  722.321388][T12849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  722.321396][T12849] R13: 0000000000000000 R14: 00007ff39a9b5fa0 R15: 00007ffdd9bf0468
[  722.321418][T12849]  </TASK>
[  722.321425][T12849] ERROR: Out of memory at tomoyo_realpath_from_path.
[  722.977447][T12784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  723.023983][T12784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  723.150334][ T6324] hsr_slave_0: left promiscuous mode
[  723.163035][ T6324] hsr_slave_1: left promiscuous mode
[  723.175794][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  723.195966][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  723.204807][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  723.255293][ T6324] veth1_macvtap: left promiscuous mode
[  723.267150][ T6324] veth0_macvtap: left promiscuous mode
[  723.275864][ T6324] veth1_vlan: left promiscuous mode
[  723.283095][ T6324] veth0_vlan: left promiscuous mode
[  723.535588][   T51] Bluetooth: hci0: command tx timeout
[  723.657447][T12857] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2049'.
[  723.678141][ T9447] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  723.707321][T12857] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2049'.
[  723.974273][ T9447] usb 6-1: Using ep0 maxpacket: 32
[  724.046778][ T9447] usb 6-1: config 0 has no interfaces?
[  724.111834][ T9447] usb 6-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  724.137801][ T9447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  724.153188][ T9447] usb 6-1: config 0 descriptor??
[  724.381634][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  724.400768][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  724.432439][ T6324] team0 (unregistering): Port device team_slave_1 removed
[  724.518772][ T6324] team0 (unregistering): Port device team_slave_0 removed
[  725.330619][T12784] team0: Port device team_slave_0 added
[  725.364090][T12784] team0: Port device team_slave_1 added
[  725.444718][T12784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  725.465946][T12784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  725.492363][T12784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  725.522847][T12784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  725.549225][T12784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  725.607575][   T51] Bluetooth: hci0: command tx timeout
[  725.622287][T12784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  725.751423][T12784] hsr_slave_0: entered promiscuous mode
[  725.780932][T12784] hsr_slave_1: entered promiscuous mode
[  725.796969][T12784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  725.824533][T12784] Cannot create hsr debugfs directory
[  725.995161][ T9433] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[  726.102792][T12784] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  726.115915][T12784] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  726.131408][T12784] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  726.143883][T12784] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  726.158249][ T9433] usb 4-1: not running at top speed; connect to a high speed hub
[  726.176558][ T9433] usb 4-1: config 1 interface 0 has no altsetting 0
[  726.196583][ T9433] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  726.215445][ T9433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.235079][ T9433] usb 4-1: Product: syz
[  726.243873][ T9433] usb 4-1: Manufacturer: syz
[  726.267552][ T9433] usb 4-1: SerialNumber: syz
[  726.301813][ T7961] usb 6-1: USB disconnect, device number 36
[  726.420127][T12784] 8021q: adding VLAN 0 to HW filter on device bond0
[  726.493631][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  726.518759][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  726.559764][T12784] 8021q: adding VLAN 0 to HW filter on device team0
[  726.588378][T12889] usb usb1: usbfs: process 12889 (syz.5.2054) did not claim interface 2 before use
[  726.619791][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.627087][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  726.699913][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.707125][ T6398] bridge0: port 2(bridge_slave_1) entered forwarding state
[  727.123909][ T9433] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input22
[  727.253225][T12784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  727.255475][ T9433] usb 4-1: USB disconnect, device number 67
[  727.261627][ T5174] bcm5974 4-1:1.0: could not read from device
[  728.807167][T12784] veth0_vlan: entered promiscuous mode
[  728.831044][T12784] veth1_vlan: entered promiscuous mode
[  728.872260][T12784] veth0_macvtap: entered promiscuous mode
[  728.999880][T12784] veth1_macvtap: entered promiscuous mode
[  729.067333][T12938] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2060'.
[  729.115375][T12938] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2060'.
[  729.625287][T12784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  729.768307][T12784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  729.779137][T12784] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  729.791099][T12784] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  729.800275][T12784] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  729.809195][T12784] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  730.018404][T12947] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2062'.
[  730.177228][ T7961] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  730.407072][ T7961] usb 4-1: Using ep0 maxpacket: 32
[  730.418648][ T7961] usb 4-1: config 0 has no interfaces?
[  730.424194][ T7961] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  730.455204][ T7961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.472704][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  730.481323][ T7961] usb 4-1: config 0 descriptor??
[  730.508310][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  730.583756][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  730.603389][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  730.736156][T12946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  730.755392][T12946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.629791][ T9433] usb 4-1: USB disconnect, device number 68
[  733.075311][ T5828] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  733.356379][ T5828] usb 6-1: not running at top speed; connect to a high speed hub
[  733.405345][ T5828] usb 6-1: config 1 interface 0 has no altsetting 0
[  733.437130][ T5828] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  733.465498][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.500228][ T5828] usb 6-1: Product: syz
[  733.520619][ T5828] usb 6-1: Manufacturer: syz
[  733.538908][ T5828] usb 6-1: SerialNumber: syz
[  733.670248][T12998] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  733.783623][T12986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  733.853892][T12986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  733.973326][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  733.992338][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  734.001886][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  734.012226][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  734.029795][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  734.741094][ T5828] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input23
[  735.366507][ T5174] bcm5974 6-1:1.0: could not read from device
[  735.415939][ T5174] bcm5974 6-1:1.0: could not read from device
[  735.445823][ T5828] usb 6-1: USB disconnect, device number 37
[  735.901499][T13024] Cannot find map_set index 0 as target
[  736.146480][ T5834] Bluetooth: hci2: command tx timeout
[  736.441156][ T2914] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.652702][ T2914] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.922449][ T2914] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.106360][ T5828] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  737.120104][ T2914] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.225303][ T9437] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  737.286476][ T5828] usb 4-1: Using ep0 maxpacket: 32
[  737.312266][T13001] chnl_net:caif_netlink_parms(): no params data found
[  737.323672][ T5828] usb 4-1: config 0 has no interfaces?
[  737.349851][ T5828] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  737.378856][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.402169][ T9437] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  737.419367][ T5828] usb 4-1: config 0 descriptor??
[  737.505241][ T9437] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  737.545517][ T9437] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  737.573893][ T9437] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  737.606853][ T9437] usb 6-1: SerialNumber: syz
[  737.652426][T13038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  737.696150][T13038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  737.881110][ T9437] usb 6-1: 0:2 : does not exist
[  738.080383][ T9437] usb 6-1: USB disconnect, device number 38
[  738.107939][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  738.124264][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  738.134735][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  738.149418][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  738.171095][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  738.178229][T10786] Bluetooth: hci2: command tx timeout
[  738.292048][T12231] udevd[12231]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  738.356227][ T2914] bridge_slave_1: left allmulticast mode
[  738.390971][ T2914] bridge_slave_1: left promiscuous mode
[  738.422902][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state
[  738.523281][ T2914] bridge_slave_0: left allmulticast mode
[  738.530988][ T2914] bridge_slave_0: left promiscuous mode
[  738.540758][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state
[  739.043368][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  739.056030][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  739.115635][ T2914] bond0 (unregistering): Released all slaves
[  739.131564][T13001] bridge0: port 1(bridge_slave_0) entered blocking state
[  739.141080][T13001] bridge0: port 1(bridge_slave_0) entered disabled state
[  739.148784][T13001] bridge_slave_0: entered allmulticast mode
[  739.158690][T13001] bridge_slave_0: entered promiscuous mode
[  739.224461][T13070] /dev/nullb0: Can't open blockdev
[  739.732738][T13001] bridge0: port 2(bridge_slave_1) entered blocking state
[  739.753587][T13001] bridge0: port 2(bridge_slave_1) entered disabled state
[  739.769708][T13001] bridge_slave_1: entered allmulticast mode
[  739.780223][T13001] bridge_slave_1: entered promiscuous mode
[  739.974582][ T9437] usb 4-1: USB disconnect, device number 69
[  740.042108][T13001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  740.069461][T13001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  740.193356][T13001] team0: Port device team_slave_0 added
[  740.245600][ T5834] Bluetooth: hci1: command tx timeout
[  740.247252][   T51] Bluetooth: hci2: command tx timeout
[  740.311562][T13001] team0: Port device team_slave_1 added
[  740.542014][ T2914] hsr_slave_0: left promiscuous mode
[  740.559070][ T2914] hsr_slave_1: left promiscuous mode
[  740.594996][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  740.641519][T13081] SET target dimension over the limit!
[  740.742454][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0
[  741.063212][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  741.081506][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1
[  741.116808][ T2914] veth1_macvtap: left promiscuous mode
[  741.122589][ T2914] veth0_macvtap: left promiscuous mode
[  741.129989][ T2914] veth1_vlan: left promiscuous mode
[  741.136536][ T2914] veth0_vlan: left promiscuous mode
[  742.348570][ T5834] Bluetooth: hci1: command tx timeout
[  742.354298][   T51] Bluetooth: hci2: command tx timeout
[  742.705411][ T9447] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  742.875881][ T2914] team0 (unregistering): Port device team_slave_1 removed
[  742.885258][ T9447] usb 4-1: Using ep0 maxpacket: 32
[  742.895664][ T9447] usb 4-1: config 0 has no interfaces?
[  742.901863][ T9447] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  742.913248][ T9447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.933578][ T9447] usb 4-1: config 0 descriptor??
[  742.949431][ T2914] team0 (unregistering): Port device team_slave_0 removed
[  743.162849][T13096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  743.185680][T13096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  743.597429][T13101] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2094'.
[  744.215951][T13106] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2096'.
[  744.416662][   T51] Bluetooth: hci1: command tx timeout
[  744.748896][T13001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  744.807886][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  745.018353][T13001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  745.152846][T13001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  745.195022][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  745.319794][T13001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  745.620892][T13137] /dev/nullb0: Can't open blockdev
[  746.250354][ T9433] usb 4-1: USB disconnect, device number 70
[  746.254495][T13001] hsr_slave_0: entered promiscuous mode
[  746.311933][T13001] hsr_slave_1: entered promiscuous mode
[  746.342760][T13001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  746.359292][T13001] Cannot create hsr debugfs directory
[  746.505532][   T51] Bluetooth: hci1: command tx timeout
[  746.775069][ T9447] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  746.864605][T13054] chnl_net:caif_netlink_parms(): no params data found
[  746.945376][ T9447] usb 9-1: Using ep0 maxpacket: 8
[  746.954660][ T9447] usb 9-1: unable to get BOS descriptor or descriptor too short
[  746.964011][ T9447] usb 9-1: config 4 interface 0 has no altsetting 0
[  746.974397][ T9447] usb 9-1: string descriptor 0 read error: -22
[  746.982207][ T9447] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  746.991823][ T9447] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.015283][ T9447] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  747.040703][ T9447] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  747.057224][ T9447] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  747.064424][ T9447] usb 9-1: media controller created
[  747.101381][ T9447] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  747.162384][T13054] bridge0: port 1(bridge_slave_0) entered blocking state
[  747.171396][T13054] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.178943][T13054] bridge_slave_0: entered allmulticast mode
[  747.197256][T13054] bridge_slave_0: entered promiscuous mode
[  747.206618][T13054] bridge0: port 2(bridge_slave_1) entered blocking state
[  747.213963][T13054] bridge0: port 2(bridge_slave_1) entered disabled state
[  747.232337][T13054] bridge_slave_1: entered allmulticast mode
[  747.240881][ T9447] zl10353_read_register: readreg error (reg=127, ret==0)
[  747.242177][T13054] bridge_slave_1: entered promiscuous mode
[  747.292762][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  747.365268][T13001] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  747.384016][ T9447] usb 9-1: USB disconnect, device number 2
[  747.398690][T13054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  747.425338][T13001] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  747.464585][T13001] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  747.492992][T13054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  747.506606][T13001] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  747.594285][T13054] team0: Port device team_slave_0 added
[  747.619607][T13054] team0: Port device team_slave_1 added
[  747.669426][T13054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  747.677143][T13054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  747.707202][T13054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  747.720323][T13054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  747.729200][T13054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  747.758474][T13054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  747.835783][ T9433] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  747.923655][T13054] hsr_slave_0: entered promiscuous mode
[  747.951830][T13054] hsr_slave_1: entered promiscuous mode
[  747.959855][T13054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  747.971451][T13054] Cannot create hsr debugfs directory
[  748.011760][ T9433] usb 4-1: Using ep0 maxpacket: 8
[  748.019536][ T9433] usb 4-1: unable to get BOS descriptor or descriptor too short
[  748.045251][ T9433] usb 4-1: config 4 interface 0 has no altsetting 0
[  748.069599][ T9433] usb 4-1: string descriptor 0 read error: -22
[  748.081825][ T9433] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  748.108758][ T9433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.155258][ T9433] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  748.186174][ T9433] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  748.280549][ T9433] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  748.414225][ T9433] usb 4-1: media controller created
[  748.674131][ T9433] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  748.918415][ T9433] zl10353_read_register: readreg error (reg=127, ret==0)
[  749.106626][ T9433] usb 4-1: USB disconnect, device number 71
[  750.079427][T13201] /dev/nullb0: Can't open blockdev
[  750.149603][T13001] 8021q: adding VLAN 0 to HW filter on device bond0
[  750.215752][ T5891] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  750.328534][T13001] 8021q: adding VLAN 0 to HW filter on device team0
[  750.389660][ T5891] usb 4-1: Using ep0 maxpacket: 32
[  750.402222][ T5891] usb 4-1: config 0 has no interfaces?
[  750.414119][ T5891] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  750.434798][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.459438][ T5891] usb 4-1: config 0 descriptor??
[  750.522215][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state
[  750.529630][ T6771] bridge0: port 1(bridge_slave_0) entered forwarding state
[  750.572492][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  750.579640][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  750.689156][T13196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  750.718060][T13196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  750.908176][T13054] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  750.964582][T13054] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  751.021934][T13054] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  751.084053][T13054] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  751.612450][T13054] 8021q: adding VLAN 0 to HW filter on device bond0
[  751.702253][T13054] 8021q: adding VLAN 0 to HW filter on device team0
[  751.712756][T13236] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input24
[  751.771028][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state
[  751.778190][ T6771] bridge0: port 1(bridge_slave_0) entered forwarding state
[  751.876134][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.883340][ T6771] bridge0: port 2(bridge_slave_1) entered forwarding state
[  752.440483][T13001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  752.834715][T13238] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2115'.
[  753.145060][ T5828] usb 4-1: USB disconnect, device number 72
[  753.234152][T13262] netlink: 'syz.8.2116': attribute type 10 has an invalid length.
[  753.266310][T13262] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2116'.
[  753.290561][T13001] veth0_vlan: entered promiscuous mode
[  753.354438][T13262] batman_adv: batadv0: Adding interface: vlan1
[  753.377759][T13262] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  753.404409][T13270] FAULT_INJECTION: forcing a failure.
[  753.404409][T13270] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  753.427981][T13262] batman_adv: batadv0: Interface activated: vlan1
[  753.434734][T13270] CPU: 1 UID: 0 PID: 13270 Comm: syz.3.2119 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  753.434759][T13270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  753.434772][T13270] Call Trace:
[  753.434780][T13270]  <TASK>
[  753.434788][T13270]  dump_stack_lvl+0x189/0x250
[  753.434820][T13270]  ? __pfx____ratelimit+0x10/0x10
[  753.434843][T13270]  ? __pfx_dump_stack_lvl+0x10/0x10
[  753.434869][T13270]  ? __pfx__printk+0x10/0x10
[  753.434886][T13270]  ? __might_fault+0xb0/0x130
[  753.434914][T13270]  should_fail_ex+0x414/0x560
[  753.434938][T13270]  _copy_from_user+0x2d/0xb0
[  753.434961][T13270]  ___sys_sendmsg+0x158/0x2a0
[  753.434984][T13270]  ? __pfx____sys_sendmsg+0x10/0x10
[  753.435035][T13270]  ? __fget_files+0x2a/0x420
[  753.435056][T13270]  ? __fget_files+0x3a0/0x420
[  753.435087][T13270]  __x64_sys_sendmsg+0x19b/0x260
[  753.435117][T13270]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  753.435143][T13270]  ? __pfx_ksys_write+0x10/0x10
[  753.435160][T13270]  ? rcu_is_watching+0x15/0xb0
[  753.435187][T13270]  ? do_syscall_64+0xbe/0x3b0
[  753.435215][T13270]  do_syscall_64+0xfa/0x3b0
[  753.435236][T13270]  ? lockdep_hardirqs_on+0x9c/0x150
[  753.435258][T13270]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.435277][T13270]  ? clear_bhb_loop+0x60/0xb0
[  753.435299][T13270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.435315][T13270] RIP: 0033:0x7f76a138e929
[  753.435332][T13270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  753.435348][T13270] RSP: 002b:00007f76a212a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  753.435367][T13270] RAX: ffffffffffffffda RBX: 00007f76a15b5fa0 RCX: 00007f76a138e929
[  753.435382][T13270] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  753.435394][T13270] RBP: 00007f76a212a090 R08: 0000000000000000 R09: 0000000000000000
[  753.435406][T13270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  753.435417][T13270] R13: 0000000000000000 R14: 00007f76a15b5fa0 R15: 00007ffc986ad238
[  753.435446][T13270]  </TASK>
[  753.779122][T13001] veth1_vlan: entered promiscuous mode
[  753.810552][T13001] veth0_macvtap: entered promiscuous mode
[  753.822291][T13001] veth1_macvtap: entered promiscuous mode
[  753.847315][T13001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  753.859307][T13001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  753.876062][T13001] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  753.892749][T13001] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  753.902242][T13001] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  753.930280][T13001] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  754.032738][T13054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  754.350178][T13295] /dev/nullb0: Can't open blockdev
[  754.403822][ T6771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  754.422339][ T6771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  754.782440][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  754.814193][T13054] veth0_vlan: entered promiscuous mode
[  754.855560][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  754.909715][T13054] veth1_vlan: entered promiscuous mode
[  755.078477][T13054] veth0_macvtap: entered promiscuous mode
[  755.134621][T13054] veth1_macvtap: entered promiscuous mode
[  755.227785][T13054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  755.266443][ T9437] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  755.280512][T13054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  755.381023][T13054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  755.425982][T13054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  755.451322][T13054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  755.461960][ T9437] usb 4-1: Using ep0 maxpacket: 32
[  755.482638][ T9437] usb 4-1: config 0 has no interfaces?
[  755.493850][T13054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  755.507706][ T9437] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  755.574177][ T9437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.641977][ T9437] usb 4-1: config 0 descriptor??
[  755.904180][T13299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.938498][T13299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.004619][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  756.057409][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  756.231983][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  756.262618][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  757.168418][T13329] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2129'.
[  757.189714][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2129'.
[  757.395150][ T5828] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  757.633495][ T5828] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  757.635105][ T9433] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  757.671997][ T5828] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  757.737443][ T5828] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  757.807362][ T5828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.847942][ T9433] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  757.868681][T13332] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  757.892361][ T9433] usb 2-1: config 0 has no interface number 0
[  757.913532][ T9433] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  757.927495][ T5828] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  757.969516][ T9433] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  758.016311][ T9433] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  758.095307][ T9433] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  758.154503][ T9433] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  758.191559][ T5828] usb 9-1: USB disconnect, device number 3
[  758.220879][ T9433] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  758.292138][ T7961] usb 4-1: USB disconnect, device number 73
[  758.311948][ T9433] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  758.318783][T13331] FAULT_INJECTION: forcing a failure.
[  758.318783][T13331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  758.379712][ T9433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.399595][T13331] CPU: 1 UID: 0 PID: 13331 Comm: syz.8.2130 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  758.399629][T13331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  758.399641][T13331] Call Trace:
[  758.399650][T13331]  <TASK>
[  758.399659][T13331]  dump_stack_lvl+0x189/0x250
[  758.399688][T13331]  ? __pfx____ratelimit+0x10/0x10
[  758.399712][T13331]  ? __pfx_dump_stack_lvl+0x10/0x10
[  758.399737][T13331]  ? __pfx__printk+0x10/0x10
[  758.399768][T13331]  should_fail_ex+0x414/0x560
[  758.399793][T13331]  _copy_to_user+0x31/0xb0
[  758.399819][T13331]  simple_read_from_buffer+0xe1/0x170
[  758.399846][T13331]  proc_fail_nth_read+0x1df/0x250
[  758.399873][T13331]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  758.399899][T13331]  ? rw_verify_area+0x258/0x650
[  758.399917][T13331]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  758.399942][T13331]  vfs_read+0x200/0x980
[  758.399967][T13331]  ? __pfx___mutex_lock+0x10/0x10
[  758.399991][T13331]  ? __pfx_vfs_read+0x10/0x10
[  758.400012][T13331]  ? __fget_files+0x2a/0x420
[  758.400039][T13331]  ? __fget_files+0x3a0/0x420
[  758.400059][T13331]  ? __fget_files+0x2a/0x420
[  758.400090][T13331]  ksys_read+0x145/0x250
[  758.400111][T13331]  ? __pfx_ksys_read+0x10/0x10
[  758.400128][T13331]  ? rcu_is_watching+0x15/0xb0
[  758.400156][T13331]  ? do_syscall_64+0xbe/0x3b0
[  758.400185][T13331]  do_syscall_64+0xfa/0x3b0
[  758.400206][T13331]  ? lockdep_hardirqs_on+0x9c/0x150
[  758.400228][T13331]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.400246][T13331]  ? clear_bhb_loop+0x60/0xb0
[  758.400267][T13331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.400284][T13331] RIP: 0033:0x7f942498d33c
[  758.400301][T13331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  758.400316][T13331] RSP: 002b:00007f942572f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  758.400337][T13331] RAX: ffffffffffffffda RBX: 00007f9424bb5fa0 RCX: 00007f942498d33c
[  758.400351][T13331] RDX: 000000000000000f RSI: 00007f942572f0a0 RDI: 0000000000000003
[  758.400363][T13331] RBP: 00007f942572f090 R08: 0000000000000000 R09: 0000000000000000
[  758.400375][T13331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  758.400387][T13331] R13: 0000000000000000 R14: 00007f9424bb5fa0 R15: 00007fff46db41b8
[  758.400418][T13331]  </TASK>
[  758.649145][ T9433] usb 2-1: config 0 descriptor??
[  758.725802][T13335] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  758.733160][T13335] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  759.023008][ T9433] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  759.143259][T13365] /dev/nullb0: Can't open blockdev
[  759.588804][T13358] FAULT_INJECTION: forcing a failure.
[  759.588804][T13358] name failslab, interval 1, probability 0, space 0, times 0
[  759.619350][T13335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  759.636929][T13358] CPU: 0 UID: 0 PID: 13358 Comm: syz.9.2137 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  759.636956][T13358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  759.636967][T13358] Call Trace:
[  759.636976][T13358]  <TASK>
[  759.636984][T13358]  dump_stack_lvl+0x189/0x250
[  759.637012][T13358]  ? __pfx____ratelimit+0x10/0x10
[  759.637056][T13358]  ? __pfx_dump_stack_lvl+0x10/0x10
[  759.637079][T13358]  ? __pfx__printk+0x10/0x10
[  759.637103][T13358]  ? __pfx___might_resched+0x10/0x10
[  759.637125][T13358]  ? fs_reclaim_acquire+0x7d/0x100
[  759.637152][T13358]  should_fail_ex+0x414/0x560
[  759.637178][T13358]  should_failslab+0xa8/0x100
[  759.637201][T13358]  __kmalloc_noprof+0xcb/0x4f0
[  759.637219][T13358]  ? kfree+0x4d/0x440
[  759.637235][T13358]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  759.637260][T13358]  tomoyo_realpath_from_path+0xe3/0x5d0
[  759.637280][T13358]  ? tomoyo_domain+0xda/0x130
[  759.637304][T13358]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  759.637320][T13358]  tomoyo_path_number_perm+0x1e8/0x5a0
[  759.637339][T13358]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  759.637369][T13358]  ? __lock_acquire+0xab9/0xd20
[  759.637403][T13358]  ? __fget_files+0x2a/0x420
[  759.637423][T13358]  ? __fget_files+0x2a/0x420
[  759.637446][T13358]  ? __fget_files+0x3a0/0x420
[  759.637463][T13358]  ? __fget_files+0x2a/0x420
[  759.637483][T13358]  security_file_ioctl+0xcb/0x2d0
[  759.637503][T13358]  __se_sys_ioctl+0x47/0x170
[  759.637520][T13358]  do_syscall_64+0xfa/0x3b0
[  759.637539][T13358]  ? lockdep_hardirqs_on+0x9c/0x150
[  759.637558][T13358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.637572][T13358]  ? clear_bhb_loop+0x60/0xb0
[  759.637589][T13358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.637602][T13358] RIP: 0033:0x7f30acf8e929
[  759.637616][T13358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  759.637629][T13358] RSP: 002b:00007f30add8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  759.637645][T13358] RAX: ffffffffffffffda RBX: 00007f30ad1b5fa0 RCX: 00007f30acf8e929
[  759.637656][T13358] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  759.637666][T13358] RBP: 00007f30add8f090 R08: 0000000000000000 R09: 0000000000000000
[  759.637675][T13358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  759.637684][T13358] R13: 0000000000000000 R14: 00007f30ad1b5fa0 R15: 00007fff2b66f288
[  759.637707][T13358]  </TASK>
[  759.637719][T13358] ERROR: Out of memory at tomoyo_realpath_from_path.
[  759.677990][T13335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  759.973003][T13335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  760.288730][T13335] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  760.431140][T13335] sg_write: data in/out 32733/98 bytes for SCSI command 0x0-- guessing data in;
[  760.431140][T13335]    program syz.1.2131 not setting count and/or reply_len properly
[  761.409732][ T7961] usb 2-1: USB disconnect, device number 4
[  761.444609][ T7961] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  761.542089][T13386] loop2: detected capacity change from 0 to 7
[  761.552904][T13386] Dev loop2: unable to read RDB block 7
[  761.572421][T13386]  loop2: unable to read partition table
[  761.595265][T13386] loop2: partition table beyond EOD, truncated
[  761.624616][T13386] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  761.660856][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2142'.
[  761.985463][ T7961] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  761.996158][T13387] netlink: 'syz.8.2142': attribute type 10 has an invalid length.
[  762.004013][T13387] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2142'.
[  762.363260][T13394] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2145'.
[  762.552130][T13387] team0: Port device geneve0 added
[  762.635143][ T7961] usb 2-1: Using ep0 maxpacket: 32
[  762.645882][ T7961] usb 2-1: config 0 has no interfaces?
[  762.651483][ T7961] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00
[  762.660689][ T7961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.796427][ T7961] usb 2-1: config 0 descriptor??
[  762.821033][T13409] /dev/nullb0: Can't open blockdev
[  763.019602][T13384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  763.035506][T13384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  764.522140][T13432] netlink: 'syz.9.2153': attribute type 3 has an invalid length.
[  764.931947][ T8769] usb 2-1: USB disconnect, device number 5
[  765.126834][T13448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2158'.
[  765.338467][T13452] /dev/nullb0: Can't open blockdev
[  766.335037][ T7961] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  766.921498][T13471] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  767.359961][T13472] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  767.484951][ T7961] usb 2-1: Using ep0 maxpacket: 16
[  767.496690][ T7961] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  767.525294][ T7961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  767.554995][ T7961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  767.564690][ T7961] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  767.596091][ T7961] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  767.655584][ T7961] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  767.664676][ T7961] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  767.708508][ T7961] usb 2-1: Manufacturer: syz
[  767.739590][ T7961] usb 2-1: config 0 descriptor??
[  767.888157][T13483] FAULT_INJECTION: forcing a failure.
[  767.888157][T13483] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  767.995063][T13483] CPU: 0 UID: 0 PID: 13483 Comm: syz.8.2167 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  767.995092][T13483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  767.995104][T13483] Call Trace:
[  767.995113][T13483]  <TASK>
[  767.995124][T13483]  dump_stack_lvl+0x189/0x250
[  767.995154][T13483]  ? __pfx____ratelimit+0x10/0x10
[  767.995179][T13483]  ? __pfx_dump_stack_lvl+0x10/0x10
[  767.995202][T13483]  ? __pfx__printk+0x10/0x10
[  767.995222][T13483]  ? __might_fault+0xb0/0x130
[  767.995254][T13483]  should_fail_ex+0x414/0x560
[  767.995280][T13483]  _copy_from_user+0x2d/0xb0
[  767.995305][T13483]  do_ipv6_setsockopt+0x32d/0x2fb0
[  767.995337][T13483]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  767.995375][T13483]  ? get_pid_task+0x20/0x1f0
[  767.995409][T13483]  ? rcu_read_lock_any_held+0xb3/0x120
[  767.995434][T13483]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  767.995461][T13483]  ? vfs_write+0x8d8/0xa90
[  767.995494][T13483]  ? __lock_acquire+0xab9/0xd20
[  767.995526][T13483]  ipv6_setsockopt+0x59/0x170
[  767.995546][T13483]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  767.995574][T13483]  do_sock_setsockopt+0x257/0x3e0
[  767.995596][T13483]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  767.995620][T13483]  ? __fget_files+0x2a/0x420
[  767.995650][T13483]  __x64_sys_setsockopt+0x18b/0x220
[  767.995675][T13483]  do_syscall_64+0xfa/0x3b0
[  767.995697][T13483]  ? lockdep_hardirqs_on+0x9c/0x150
[  767.995720][T13483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.995738][T13483]  ? clear_bhb_loop+0x60/0xb0
[  767.995759][T13483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.995777][T13483] RIP: 0033:0x7f942498e929
[  767.995793][T13483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  767.995809][T13483] RSP: 002b:00007f942572f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  767.995829][T13483] RAX: ffffffffffffffda RBX: 00007f9424bb5fa0 RCX: 00007f942498e929
[  767.995842][T13483] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  767.995854][T13483] RBP: 00007f942572f090 R08: 00000000000004f0 R09: 0000000000000000
[  767.995865][T13483] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001
[  767.995877][T13483] R13: 0000000000000000 R14: 00007f9424bb5fa0 R15: 00007fff46db41b8
[  767.995905][T13483]  </TASK>
[  768.285144][T13458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.364734][T13487] netlink: 'syz.5.2168': attribute type 1 has an invalid length.
[  768.418120][T13458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.426422][T13487] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2168'.
[  768.865020][ T9441] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  769.495013][ T7961] rc_core: IR keymap rc-hauppauge not found
[  769.519186][ T7961] Registered IR keymap rc-empty
[  769.538336][ T9441] usb 10-1: Using ep0 maxpacket: 16
[  769.544340][ T7961] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  769.568779][ T9441] usb 10-1: config index 0 descriptor too short (expected 59154, got 18)
[  769.602285][ T9441] usb 10-1: config 0 has no interfaces?
[  769.608238][ T7961] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  769.637651][ T9441] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  769.659950][ T7961] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  769.683191][ T9441] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.721557][ T9441] usb 10-1: Product: syz
[  769.758793][ T7961] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input25
[  769.900950][ T9441] usb 10-1: Manufacturer: syz
[  769.942421][T13516] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2175'.
[  769.945025][ T9441] usb 10-1: SerialNumber: syz
[  770.223913][ T7961] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  770.283884][ T9441] usb 10-1: config 0 descriptor??
[  770.306200][ T7961] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  770.397883][ T7961] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  770.455121][ T7961] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  770.505733][ T7961] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  770.585479][ T7961] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  770.722649][ T7961] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  771.268235][ T7961] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  771.305284][ T7961] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  771.375176][ T9441] usb 10-1: USB disconnect, device number 2
[  771.395544][ T7961] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  771.642787][ T7961] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  772.113277][ T7961] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  772.222553][ T7961] usb 2-1: USB disconnect, device number 6
[  772.301663][T13553] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2183'.
[  772.922047][T13560] /dev/nullb0: Can't open blockdev
[  773.641174][T13562] FAULT_INJECTION: forcing a failure.
[  773.641174][T13562] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  773.727661][T13562] CPU: 1 UID: 0 PID: 13562 Comm: syz.8.2184 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  773.727681][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  773.727689][T13562] Call Trace:
[  773.727694][T13562]  <TASK>
[  773.727699][T13562]  dump_stack_lvl+0x189/0x250
[  773.727719][T13562]  ? __pfx____ratelimit+0x10/0x10
[  773.727734][T13562]  ? __pfx_dump_stack_lvl+0x10/0x10
[  773.727748][T13562]  ? __pfx__printk+0x10/0x10
[  773.727759][T13562]  ? __might_fault+0xb0/0x130
[  773.727777][T13562]  should_fail_ex+0x414/0x560
[  773.727792][T13562]  _copy_from_user+0x2d/0xb0
[  773.727807][T13562]  ___sys_sendmsg+0x158/0x2a0
[  773.727821][T13562]  ? __pfx____sys_sendmsg+0x10/0x10
[  773.727856][T13562]  ? __fget_files+0x2a/0x420
[  773.727868][T13562]  ? __fget_files+0x3a0/0x420
[  773.727886][T13562]  __x64_sys_sendmsg+0x19b/0x260
[  773.727899][T13562]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  773.727915][T13562]  ? __pfx_ksys_write+0x10/0x10
[  773.727926][T13562]  ? rcu_is_watching+0x15/0xb0
[  773.727943][T13562]  ? do_syscall_64+0xbe/0x3b0
[  773.727959][T13562]  do_syscall_64+0xfa/0x3b0
[  773.727972][T13562]  ? lockdep_hardirqs_on+0x9c/0x150
[  773.727993][T13562]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.728010][T13562]  ? clear_bhb_loop+0x60/0xb0
[  773.728032][T13562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  773.728049][T13562] RIP: 0033:0x7f942498e929
[  773.728064][T13562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  773.728077][T13562] RSP: 002b:00007f942572f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  773.728091][T13562] RAX: ffffffffffffffda RBX: 00007f9424bb5fa0 RCX: 00007f942498e929
[  773.728099][T13562] RDX: 0000000000000030 RSI: 0000200000000140 RDI: 0000000000000005
[  773.728106][T13562] RBP: 00007f942572f090 R08: 0000000000000000 R09: 0000000000000000
[  773.728112][T13562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  773.728119][T13562] R13: 0000000000000000 R14: 00007f9424bb5fa0 R15: 00007fff46db41b8
[  773.728134][T13562]  </TASK>
[  774.406038][T13578] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2188'.
[  774.838571][T13582] /dev/nullb0: Can't open blockdev
[  776.105603][T13596] netlink: 'syz.5.2193': attribute type 3 has an invalid length.
[  797.954125][T14074] FAULT_INJECTION: forcing a failure.
[  797.954125][T14074] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  797.974702][T14074] CPU: 0 UID: 0 PID: 14074 Comm: syz.9.2199 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  797.974731][T14074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  797.974743][T14074] Call Trace:
[  797.974751][T14074]  <TASK>
[  797.974760][T14074]  dump_stack_lvl+0x189/0x250
[  797.974789][T14074]  ? __pfx____ratelimit+0x10/0x10
[  797.974812][T14074]  ? __pfx_dump_stack_lvl+0x10/0x10
[  797.974835][T14074]  ? __pfx__printk+0x10/0x10
[  797.974853][T14074]  ? __might_fault+0xb0/0x130
[  797.974890][T14074]  should_fail_ex+0x414/0x560
[  797.974913][T14074]  _copy_from_user+0x2d/0xb0
[  797.974937][T14074]  __sys_sendto+0x25c/0x520
[  797.974958][T14074]  ? __pfx___sys_sendto+0x10/0x10
[  797.974973][T14074]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  797.975007][T14074]  ? __fget_files+0x3a0/0x420
[  797.975040][T14074]  ? ksys_write+0x22a/0x250
[  797.975062][T14074]  ? __pfx_ksys_write+0x10/0x10
[  797.975079][T14074]  ? rcu_is_watching+0x15/0xb0
[  797.975108][T14074]  __x64_sys_sendto+0xde/0x100
[  797.975129][T14074]  do_syscall_64+0xfa/0x3b0
[  797.975152][T14074]  ? lockdep_hardirqs_on+0x9c/0x150
[  797.975173][T14074]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.975190][T14074]  ? clear_bhb_loop+0x60/0xb0
[  797.975209][T14074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.975225][T14074] RIP: 0033:0x7f30acf8e929
[  797.975241][T14074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  797.975255][T14074] RSP: 002b:00007f30add8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  797.975274][T14074] RAX: ffffffffffffffda RBX: 00007f30ad1b5fa0 RCX: 00007f30acf8e929
[  797.975288][T14074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  797.975298][T14074] RBP: 00007f30add8f090 R08: 0000200000000100 R09: 000000000000001c
[  797.975311][T14074] R10: 0000000004040800 R11: 0000000000000246 R12: 0000000000000001
[  797.975323][T14074] R13: 0000000000000000 R14: 00007f30ad1b5fa0 R15: 00007fff2b66f288
[  797.975351][T14074]  </TASK>
[  808.728679][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  812.633856][T14232] SET target dimension over the limit!
[  812.845570][T14238] /dev/nullb0: Can't open blockdev
[  814.727708][T14250] tty tty23: ldisc open failed (-12), clearing slot 22
[  815.672397][   T24] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  815.822581][T14275] /dev/nullb0: Can't open blockdev
[  815.999306][   T24] usb 6-1: not running at top speed; connect to a high speed hub
[  816.032286][   T24] usb 6-1: config 1 interface 0 has no altsetting 0
[  816.081139][   T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  816.110052][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.143488][   T24] usb 6-1: Product: syz
[  816.160337][   T24] usb 6-1: Manufacturer: syz
[  816.173765][   T24] usb 6-1: SerialNumber: syz
[  816.286679][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2210'.
[  817.079149][   T24] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input26
[  817.202014][T14296] Cannot find map_set index 0 as target
[  817.664762][ T5174] bcm5974 6-1:1.0: could not read from device
[  817.791709][ T5174] bcm5974 6-1:1.0: could not read from device
[  817.803101][   T24] usb 6-1: USB disconnect, device number 39
[  817.903424][T14299] ------------[ cut here ]------------
[  817.910310][T14299] WARNING: CPU: 1 PID: 14299 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310
[  817.920346][T14299] Modules linked in:
[  817.924700][T14299] CPU: 1 UID: 0 PID: 14299 Comm: syz.5.2221 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  817.938824][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  817.949502][T14299] RIP: 0010:folio_memcg+0x1a8/0x310
[  817.954777][T14299] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cc 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ff d8 5c 09 cc e8 09 74 ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[  817.974816][T14299] RSP: 0018:ffffc9000c9f7250 EFLAGS: 00010283
[  817.980987][T14299] RAX: ffffffff8205d967 RBX: 0000000000000000 RCX: 0000000000080000
[  817.990215][T14299] RDX: ffffc9001ac56000 RSI: 000000000000775c RDI: 000000000000775d
[  817.999423][T14299] RBP: 0000000000000000 R08: ffffea0001bcfe47 R09: 1ffffd4000379fc8
[  818.007833][T14299] R10: dffffc0000000000 R11: fffff94000379fc9 R12: ffffea0001bcfe70
[  818.015900][T14299] R13: dffffc0000000000 R14: ffff88805b920f00 R15: 0000000000000002
[  818.023908][T14299] FS:  00007ff39b5a66c0(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000
[  818.032941][T14299] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  818.039679][T14299] CR2: 0000000000000000 CR3: 000000002481c000 CR4: 00000000003526f0
[  818.047714][T14299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  818.055787][T14299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  818.063785][T14299] Call Trace:
[  818.067140][T14299]  <TASK>
[  818.070096][T14299]  workingset_activation+0x5f/0x4a0
[  818.075435][T14299]  ? folio_mark_accessed+0x2e1/0x4a0
[  818.080764][T14299]  folio_mark_accessed+0x3b5/0x4a0
[  818.087068][T14299]  kvm_release_page_dirty+0xa2/0xf0
[  818.092325][T14299]  kvm_tdp_page_fault+0x2dd/0x370
[  818.098409][T14299]  kvm_mmu_do_page_fault+0x2c5/0x640
[  818.103740][T14299]  ? vmx_vcpu_run+0xd8b/0x25d0
[  818.108596][T14299]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  818.114458][T14299]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[  818.120114][T14299]  ? __pfx_current_save_fsgs+0x10/0x10
[  818.125663][T14299]  kvm_mmu_page_fault+0x22f/0xb70
[  818.130734][T14299]  ? __pfx_handle_ept_violation+0x10/0x10
[  818.136535][T14299]  vmx_handle_exit+0x1093/0x18a0
[  818.141515][T14299]  ? vcpu_run+0x361c/0x6f70
[  818.146104][T14299]  vcpu_run+0x432e/0x6f70
[  818.150475][T14299]  ? vcpu_run+0x361c/0x6f70
[  818.155114][T14299]  ? __pfx_vcpu_run+0x10/0x10
[  818.159827][T14299]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  818.165672][T14299]  ? rcu_is_watching+0x15/0xb0
[  818.170472][T14299]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  818.176626][T14299]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  818.182472][T14299]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  818.190110][T14299]  ? rcu_is_watching+0x15/0xb0
[  818.196407][T14299]  ? look_up_lock_class+0x74/0x170
[  818.201573][T14299]  ? register_lock_class+0x51/0x320
[  818.206887][T14299]  ? __lock_acquire+0xab9/0xd20
[  818.211804][T14299]  kvm_vcpu_ioctl+0x95c/0xe90
[  818.216559][T14299]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  818.221792][T14299]  ? __lock_acquire+0xab9/0xd20
[  818.226749][T14299]  ? __asan_memset+0x22/0x50
[  818.231364][T14299]  ? smack_file_ioctl+0x302/0x340
[  818.236483][T14299]  ? __pfx_smack_file_ioctl+0x10/0x10
[  818.241901][T14299]  ? __fget_files+0x2a/0x420
[  818.246569][T14299]  ? __fget_files+0x3a0/0x420
[  818.251276][T14299]  ? __fget_files+0x2a/0x420
[  818.255960][T14299]  ? bpf_lsm_file_ioctl+0x9/0x20
[  818.260930][T14299]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  818.266232][T14299]  __se_sys_ioctl+0xf9/0x170
[  818.270888][T14299]  do_syscall_64+0xfa/0x3b0
[  818.275491][T14299]  ? lockdep_hardirqs_on+0x9c/0x150
[  818.280726][T14299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.286885][T14299]  ? clear_bhb_loop+0x60/0xb0
[  818.292374][T14299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.298936][T14299] RIP: 0033:0x7ff39a78e929
[  818.303352][T14299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  818.323211][T14299] RSP: 002b:00007ff39b5a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  818.332151][T14299] RAX: ffffffffffffffda RBX: 00007ff39a9b5fa0 RCX: 00007ff39a78e929
[  818.340175][T14299] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  818.348161][T14299] RBP: 00007ff39a810b39 R08: 0000000000000000 R09: 0000000000000000
[  818.356170][T14299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  818.364130][T14299] R13: 0000000000000000 R14: 00007ff39a9b5fa0 R15: 00007ffdd9bf0468
[  818.372139][T14299]  </TASK>
[  818.375185][T14299] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  818.382465][T14299] CPU: 1 UID: 0 PID: 14299 Comm: syz.5.2221 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) 
[  818.394519][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  818.404573][T14299] Call Trace:
[  818.407847][T14299]  <TASK>
[  818.410774][T14299]  dump_stack_lvl+0x99/0x250
[  818.415363][T14299]  ? __asan_memcpy+0x40/0x70
[  818.419944][T14299]  ? __pfx_dump_stack_lvl+0x10/0x10
[  818.425138][T14299]  ? __pfx__printk+0x10/0x10
[  818.429738][T14299]  panic+0x2db/0x790
[  818.433632][T14299]  ? __pfx_panic+0x10/0x10
[  818.438054][T14299]  __warn+0x31b/0x4b0
[  818.442030][T14299]  ? folio_memcg+0x1a8/0x310
[  818.446618][T14299]  ? folio_memcg+0x1a8/0x310
[  818.451202][T14299]  report_bug+0x2be/0x4f0
[  818.455615][T14299]  ? folio_memcg+0x1a8/0x310
[  818.460199][T14299]  ? folio_memcg+0x1a8/0x310
[  818.464782][T14299]  ? folio_memcg+0x1aa/0x310
[  818.469372][T14299]  handle_bug+0x84/0x160
[  818.473606][T14299]  exc_invalid_op+0x1a/0x50
[  818.478100][T14299]  asm_exc_invalid_op+0x1a/0x20
[  818.482940][T14299] RIP: 0010:folio_memcg+0x1a8/0x310
[  818.488392][T14299] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cc 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ff d8 5c 09 cc e8 09 74 ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[  818.508012][T14299] RSP: 0018:ffffc9000c9f7250 EFLAGS: 00010283
[  818.514080][T14299] RAX: ffffffff8205d967 RBX: 0000000000000000 RCX: 0000000000080000
[  818.522044][T14299] RDX: ffffc9001ac56000 RSI: 000000000000775c RDI: 000000000000775d
[  818.530005][T14299] RBP: 0000000000000000 R08: ffffea0001bcfe47 R09: 1ffffd4000379fc8
[  818.537968][T14299] R10: dffffc0000000000 R11: fffff94000379fc9 R12: ffffea0001bcfe70
[  818.545928][T14299] R13: dffffc0000000000 R14: ffff88805b920f00 R15: 0000000000000002
[  818.553894][T14299]  ? folio_memcg+0x1a7/0x310
[  818.558497][T14299]  workingset_activation+0x5f/0x4a0
[  818.563691][T14299]  ? folio_mark_accessed+0x2e1/0x4a0
[  818.569059][T14299]  folio_mark_accessed+0x3b5/0x4a0
[  818.574163][T14299]  kvm_release_page_dirty+0xa2/0xf0
[  818.579368][T14299]  kvm_tdp_page_fault+0x2dd/0x370
[  818.584390][T14299]  kvm_mmu_do_page_fault+0x2c5/0x640
[  818.589668][T14299]  ? vmx_vcpu_run+0xd8b/0x25d0
[  818.594432][T14299]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  818.600335][T14299]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[  818.605890][T14299]  ? __pfx_current_save_fsgs+0x10/0x10
[  818.611355][T14299]  kvm_mmu_page_fault+0x22f/0xb70
[  818.616413][T14299]  ? __pfx_handle_ept_violation+0x10/0x10
[  818.622129][T14299]  vmx_handle_exit+0x1093/0x18a0
[  818.627065][T14299]  ? vcpu_run+0x361c/0x6f70
[  818.631567][T14299]  vcpu_run+0x432e/0x6f70
[  818.635991][T14299]  ? vcpu_run+0x361c/0x6f70
[  818.640526][T14299]  ? __pfx_vcpu_run+0x10/0x10
[  818.645197][T14299]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  818.650908][T14299]  ? rcu_is_watching+0x15/0xb0
[  818.655668][T14299]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  818.661212][T14299]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  818.666919][T14299]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  818.672890][T14299]  ? rcu_is_watching+0x15/0xb0
[  818.677651][T14299]  ? look_up_lock_class+0x74/0x170
[  818.682758][T14299]  ? register_lock_class+0x51/0x320
[  818.687956][T14299]  ? __lock_acquire+0xab9/0xd20
[  818.692820][T14299]  kvm_vcpu_ioctl+0x95c/0xe90
[  818.697493][T14299]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  818.702686][T14299]  ? __lock_acquire+0xab9/0xd20
[  818.707537][T14299]  ? __asan_memset+0x22/0x50
[  818.712118][T14299]  ? smack_file_ioctl+0x302/0x340
[  818.717137][T14299]  ? __pfx_smack_file_ioctl+0x10/0x10
[  818.722527][T14299]  ? __fget_files+0x2a/0x420
[  818.727109][T14299]  ? __fget_files+0x3a0/0x420
[  818.731778][T14299]  ? __fget_files+0x2a/0x420
[  818.736362][T14299]  ? bpf_lsm_file_ioctl+0x9/0x20
[  818.741290][T14299]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  818.746488][T14299]  __se_sys_ioctl+0xf9/0x170
[  818.751070][T14299]  do_syscall_64+0xfa/0x3b0
[  818.755569][T14299]  ? lockdep_hardirqs_on+0x9c/0x150
[  818.760872][T14299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.766948][T14299]  ? clear_bhb_loop+0x60/0xb0
[  818.771645][T14299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  818.777533][T14299] RIP: 0033:0x7ff39a78e929
[  818.781942][T14299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  818.801546][T14299] RSP: 002b:00007ff39b5a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  818.809974][T14299] RAX: ffffffffffffffda RBX: 00007ff39a9b5fa0 RCX: 00007ff39a78e929
[  818.817940][T14299] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  818.825901][T14299] RBP: 00007ff39a810b39 R08: 0000000000000000 R09: 0000000000000000
[  818.833856][T14299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  818.841818][T14299] R13: 0000000000000000 R14: 00007ff39a9b5fa0 R15: 00007ffdd9bf0468
[  818.849793][T14299]  </TASK>
[  818.852959][T14299] Kernel Offset: disabled
[  818.857289][T14299] Rebooting in 86400 seconds..