last executing test programs:

3m45.287757268s ago: executing program 3 (id=514):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getpriority(0x2, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[], 0x20)
r1 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
preadv(r1, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote}, 0x1c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988a8", 0xe}, {&(0x7f00000001c0)="9ca4079115ec5a", 0x7}], 0x2)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000900)="514fe1f7b2658ec24c1e511fc4ccdbe46cb754e6fd3690b43ea6414b720634e1a6ea77c9ff205fc6adfdbcc1a70144302f3c578465871886505fbab540184e34d84ec5b990872c436de1043cb6b947f7f69ff749665486c3862b0853cf8c44e956a3fef1de735067a0c389b49ffe3d6562caa24ff91e34d489f1945c865b142307ee48ede05f65630e37602440e90bf5e297f2d7a9f76d8fe11e5c0ec03b0b7ae8d92c041738cfc25a1e61aadceb8ac413d4d5089d832dee86d98a647c99e7fa992f90c115f12ab8fab3b820ebb6", 0xce, 0x10048091, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @mcast2, 0xff}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r5, 0x0, 0xfffffffffffffff9}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00'}, 0x10)
socket(0x2000000000000021, 0x2, 0x10000000000002)

3m36.233999361s ago: executing program 3 (id=528):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000003c0), 0x4)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
setxattr$trusted_overlay_origin(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xeeee8000, 0x0, 0x0, 0x8, 0xb, 0x0, 0x2, 0x0, 0x9, 0x9, 0x10}, {0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x5, 0xff}, {0x3000, 0x5000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0x4, 0x0, 0x0, 0x0, 0xf7, 0xaa, 0x8, 0x0, 0x4}, {0xdddd0000, 0xdddd0000, 0x8, 0x6, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0x5}, {0x0, 0x0, 0xd, 0x80, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x80, 0x40}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0xe8, 0x8}, {0x0, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x26, 0x3, 0x10, 0xfc}, {0x10000}, {0xeeef0000}, 0xddfcffd9, 0x0, 0x0, 0x22c, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)

3m35.079632637s ago: executing program 2 (id=531):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000d80)={0x3dc, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x40}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "becd977d98eac07034ca57763acc7c613303ffcc0d39c78b5ae97b4079216e8ada84ff1e4988ef8b0fcb0b225b697d8447dac6126395777d7a26aeb9cc3d51373b95840729bd013b9a44d8d2c519cf230a829556bae0aed70f14179d4e628c52a5117b7891453a9a2a2f5d0e108dd65a5da7e6685f2595e5f423f94044482f5cfda7970430b848ddc722d897c47e2f135259ad5497ee253ab6e476c00699f5d7f6fcbbb5ac0cbc83a136c7e09b608971e505ce0de1b3d441909e68fe1674724606a4e2fce752764d61a47bea293832d28e32ee1543c75cfdcad70e772d4ec1dec3f7ed1e35bfde4f6e1bf7eada6f6dc9940f324e3e3f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x3a, 0x5, "c47123a856aeddc8ca00ce11ab03b393b6ca8804f07be08ecd116b70c706fd7c75067fa1238caaf6176eb533330266ebba3a29cb3693"}, @ETHTOOL_A_BITSET_VALUE={0x21, 0x4, "fdf2a78a54d078e31d709a95b2f471d1c3d9bbccca2f4d03daae3c23f8"}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "a06451cb64b69449ef0d58839af96e068ca736e9f83eb2b04d80913f620da5636820d35d185848f03c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa4, 0x5, "47d1b794aa64079e61613a3377ca318821cd8252fe1ebf9ac234c2be407b822b5105f4b26503f470de5c44a7c709441e0669b10763b10e7430e2fcc6a481fbbe52acba0b63ebd7845be4f4be3430fd9f356bbc1248798bdd78196253b7ca4f83fe7ed46c9445a47e30c81704f7083b409970ea18db881af7100f530eb6727444b166c0b29e1b65cf66623fea3b32cad75e51faff0cf2c2713f7d8b45b24b5d17"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2e}, @ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "49d2ccd9109a0e90c586"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}*]@]:\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'clsact\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@\xac]),\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'clsact\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'flower\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7800000}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'clsact\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff4bc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{((%,{\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'clsact\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-#[-*-[\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x1}, 0x8881)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

3m33.539667309s ago: executing program 2 (id=538):
socket(0x10, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
socket(0x1d, 0x6, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20)
close_range(r6, r6, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
dup(r1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000800)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x3c4, 0x64, 0xf31, 0xfffffff8, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xb, 0xffff}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x56}, @TCA_RATE={0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x370, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xffff}}, @TCA_BPF_ACT={0x358, 0x1, [@m_mirred={0x1c8, 0x13, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x20000000, 0x91f, 0x10}, 0x0, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x80000000, 0x1504f8488feace7, 0x1, 0x3}, 0x9d8eaa97624cadee, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x0, 0x9, 0x7}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x81, 0x1, 0x7fffffff, 0x8}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4, 0x1000, 0xc}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa6, 0x7, 0x20000000, 0x9, 0x31}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xf, 0x3, 0x0, 0x80}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8000, 0x3, 0x6, 0x7}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x7, 0xe, 0x101, 0xfffffffa}, 0x3}}]}, {0x79, 0x6, "740465f7694b1c4ee4b80b82cad36fdc2a5ae78a6bf2e360f4539bcd7b8509d541c6fc7cc98fee417f05e88ebdf2e0537b4be8dff71676d8deff67d420df7986f7e5641de351e51cb45a3e8eebe4b41674b983c4fd4e0d4b223dc88d79f94753ccb21f50457fde45e41467e23eb3eb63db78bee765"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0xc8, 0x5, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x169}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc19}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb84}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x7fff, 0x1, 0x6, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfae}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8b7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x48, 0x6, "c8edf11c48e2ae6fe20569913dd7bea0adc9158b88fbc436736f26bbb0d41c0e1ddac5c24974944912cba1bc34f8e8a0a4e629f190d1b140c5d56bc4a80bba8fb7ea025d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0xc4, 0x11, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x11, 0x862, 0x3, 0x9, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x232a, 0x7}}]}, {0x72, 0x6, "e584160f883b90ca7a3f1399d5a43a84fcf4aab052a0b61f043cda2c4184be0b9c5dfe9e8077f2b6e78109f2c8427bda4d048aa8630c3ed9fb3d7add20e8e7a25ade0929d37c69c5a2993d82fbe23ac1324a37fea4c18c63b480416e456165780fac7bbce5ed5a608c7800e98e14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x9}}, @TCA_RATE={0x6, 0x5, {0x30, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0xd2b}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4000840}, 0x48800)

3m32.814676351s ago: executing program 3 (id=539):
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000002c0))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0)
mq_timedreceive(r3, &(0x7f0000001840)=""/62, 0x3e, 0x20000900, &(0x7f0000000100)={0x77359400})
syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904000000cafb1a0021c1bd9f91ccface5db79edcea52577c67020cc532e9148b8fe755489afda87994b24582614d00f54f0f3c74586c137181d45eeaff18d27f7d299c93564bb7cfaf521f"], 0x0) (async)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904000000cafb1a0021c1bd9f91ccface5db79edcea52577c67020cc532e9148b8fe755489afda87994b24582614d00f54f0f3c74586c137181d45eeaff18d27f7d299c93564bb7cfaf521f"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="202901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e)
sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000300)={0x38, 0x80081b, 0xa, 0x1c, 0xa, 0x832a2, 0x13, 0x60, 0x1}) (async)
ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000300)={0x38, 0x80081b, 0xa, 0x1c, 0xa, 0x832a2, 0x13, 0x60, 0x1})
recvmsg$unix(r8, &(0x7f00000004c0)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f0000000600)=""/228, 0xe4}, {&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000740)=""/223, 0xdf}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x6, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20}, 0xde63c2b9b5607f84)
read(r5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)

3m31.931807027s ago: executing program 2 (id=541):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x880)
connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
r5 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4)
r6 = dup2(r5, r5)
write$tun(r6, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46)
recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x54}], 0x1, 0x2000, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0)
syz_io_uring_setup(0x466, &(0x7f0000000440)={0x0, 0x86ed, 0x80, 0x2, 0x804}, &(0x7f0000000280), &(0x7f0000000040))

3m30.203936274s ago: executing program 2 (id=542):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40)
r1 = semget$private(0x0, 0x6, 0x0)
semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r1, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2)
semtimedop(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}, {0x4, 0x7f9c}], 0x2, 0x0)

3m29.154050243s ago: executing program 2 (id=545):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='dummy0\x00', 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="140001001400010300000000000000001e000000"], 0x14}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="98a591c63a6efdecc4194d99634ff4eb90c266e83fff7dfbd3568c030612b423a36dbc", 0x23}, {&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b7932af43ba88cd499a6c421696d57ff38d5231dc712a114aaeae76812b1375a1b59f2b669bcf1f5a39f4241eef5d48ba4a16fb354031b55dd47512d0b1c6d02dce620d1cd5bad3ff8d69fe0a9e54a633953fea9e23fdf840a0b9270dfa4799e36a059f53656b65191a14e19c6330c4df5e04ca466ea0b14f3c3a7f72f0f93653f165bd687201ae5aef", 0xd5}, {&(0x7f0000000100)="8d25ca2a98879e57578c3d652f5cf57f904b471f18c14b4d786c4ae155bee597b14455173e5580fb", 0x28}, {&(0x7f0000000300)="f111f39463acbac94f37eaaa931da78c8c414a4edadbcac605b6a5089e71e9b125f3a628ad2cbfd97cb9ad0e6eec571532e87f653961867d41d742ded2a2b2ae459f67d701f481c880e26696407b17b691", 0x51}], 0x4, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000740)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x5, 0x8, "dfd968a2cbc3ab81b62b8972f86e3ccdbddc4cdd0b2b40a6e5de3c9e4781e0e1ee236c736b8402fffed1909bf55135108947062cc005658128e0af2959a321", 0x35}, 0x60, &(0x7f0000000880)=[{&(0x7f00000007c0)="fd509685c5db69548f0871e0910401e9810cb9f20ff5edc9014d51247a9fb3a2dd3c789834fbd05f35b6c71bba04f2e9756a751f6063e6e482d259dd129492c398576c0a5d7e694b12f16160349a0132db6423f1f61b752c0711ca567274855b64e1e0f3f51b21e171a13876664fb43cba17fe431663ece5158423b70e15dc7da9a3d4e6a6a1", 0x86}, {&(0x7f0000000900)="31201b71e7e5a5d8385082ec35e66960a0a2143de56a4e46b07c445bcea39bc3494c19b1ba18a3de073f59a708dff50516f44108ef6b5b54b0bc9133ee2813542ca23009f813c1d682e0a14864486d684196da5d366d68723e721ae785fb7450b3623aef7d5642", 0x67}], 0x2, 0x0, 0x0, 0x10}, 0x44880)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x40800)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0)
fcntl$lock(r5, 0x5, &(0x7f0000000200)={0x1})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000a40)={0x1ec, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x37}}}}, [@NL80211_ATTR_FRAME={0x1ba, 0x33, @probe_request={{{}, {}, @broadcast, @broadcast, @initial, {0x8, 0xcb2}}, @val, @val={0x1, 0x4, [{0x3, 0x1}, {0x6c, 0x1}, {0x1}, {0x18}]}, @val={0x3, 0x1, 0x1}, @val={0x2d, 0x1a, {0x800, 0x2, 0x5, 0x0, {0x5, 0x1ab9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x8018, 0x84}}, @void, [{0xdd, 0x1c, "1c553800e6b98f4f0b254e01f0a777f8f182737b05a8aec405809b3b"}, {0xdd, 0x14, "e4b55cfa2703c1ecc0a88658dfbd3333a53879c1"}, {0xdd, 0x5f, "fe462d600a2f798e0fcf327e2f6801332c3456e6163f3ebb7bb2ec3cbbd6559c2620ad4c3fe23375b61fda2998cfcc744a62e3fdc3edeb101dcbd0308885e5a5201714031c314531313d58f4ed8a8f3c478386e04f433f71208506a245f51b"}, {0xdd, 0x82, "9a3a8967c911f25639a8ea4c484d69639fc4eccca24167a4b67a6cd1c20c31144c7fb774a67b69094820e167eba61fb33388b35c3af6399c206a7524987417da587691d345e33bd156ea4e88f75225f6806d3379c165d16df07dea3db604af142ebc962d63d93ff727888c72f80c5f2686de1fef604dfe24be74e7b3674f18952c4d"}, {0xdd, 0x5c, "c78edc0f10d34a0ef5c7825217866198786c62ea0d7a7b25a7a30aa025c80f2f737d789958e5531e3aca6e6cf998abb81d4df8d38726d93685c704a56e2e894802c341dedb04b84c416d2beb86d8248c4998274d967dccda24a8d5cf"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x47c}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40051}, 0x850)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x7ff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

3m29.072001475s ago: executing program 3 (id=547):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000240)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c000700200000000200000008"], 0xc4}}, 0x4008800)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1280, 0x3}, 0x18, 0x0)
r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x5140, 0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r4, 0x0)
socket$unix(0x1, 0x2, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
socket$inet(0x2, 0x0, 0x9)
bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e)
r7 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0)
landlock_restrict_self(r7, 0x0)
r8 = landlock_create_ruleset(&(0x7f0000000200)={0x44e8}, 0x18, 0x2)
landlock_restrict_self(r8, 0x0)
landlock_restrict_self(r8, 0x0)

3m28.949326689s ago: executing program 2 (id=548):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={r1, 0x2007}, 0x8)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
close(r3)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsetxattr$security_evm(r4, &(0x7f0000000580), 0x0, 0x0, 0x1)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f0000000340)={0x5, @raw_data="ae70a8513a7205eb840502bd7697379e0bb0e78aa8ea12eec3c7d13ff11637a010e6608052712026443e09d835c96007672348ba2c5de37380fdc923cc2309f7cfc8b3f0720027b27ee9874255a0d760e0b804efbfad56e0387459df01d34a0f8335220f6ccfdc60e337e168509b30f21c6eb825f0674d800909aff93a9375b25d5242cce786d32cb7625e06e07cd50ca762f64f73863d5f6e7d4689cf63a44b5c1e1cf2aceb866f4812e64fead48b6469ffad6b61b1ee1e6db232cb0fd8d53fad80745cf7df1c06"})
execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000300)={[&(0x7f0000000000)='memory.stat\x00']}, 0x0, 0x0)

3m27.743045625s ago: executing program 32 (id=548):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={r1, 0x2007}, 0x8)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
close(r3)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsetxattr$security_evm(r4, &(0x7f0000000580), 0x0, 0x0, 0x1)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f0000000340)={0x5, @raw_data="ae70a8513a7205eb840502bd7697379e0bb0e78aa8ea12eec3c7d13ff11637a010e6608052712026443e09d835c96007672348ba2c5de37380fdc923cc2309f7cfc8b3f0720027b27ee9874255a0d760e0b804efbfad56e0387459df01d34a0f8335220f6ccfdc60e337e168509b30f21c6eb825f0674d800909aff93a9375b25d5242cce786d32cb7625e06e07cd50ca762f64f73863d5f6e7d4689cf63a44b5c1e1cf2aceb866f4812e64fead48b6469ffad6b61b1ee1e6db232cb0fd8d53fad80745cf7df1c06"})
execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000300)={[&(0x7f0000000000)='memory.stat\x00']}, 0x0, 0x0)

3m27.715294556s ago: executing program 3 (id=551):
socket(0x10, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
socket(0x1d, 0x6, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20)
close_range(r6, r6, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
dup(r1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000800)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x3c4, 0x64, 0xf31, 0xfffffff8, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xb, 0xffff}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x56}, @TCA_RATE={0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x370, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xffff}}, @TCA_BPF_ACT={0x358, 0x1, [@m_mirred={0x1c8, 0x13, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x20000000, 0x91f, 0x10}, 0x0, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x80000000, 0x1504f8488feace7, 0x1, 0x3}, 0x9d8eaa97624cadee, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x0, 0x9, 0x7}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x81, 0x1, 0x7fffffff, 0x8}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4, 0x1000, 0xc}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa6, 0x7, 0x20000000, 0x9, 0x31}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xf, 0x3, 0x0, 0x80}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8000, 0x3, 0x6, 0x7}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x7, 0xe, 0x101, 0xfffffffa}, 0x3}}]}, {0x79, 0x6, "740465f7694b1c4ee4b80b82cad36fdc2a5ae78a6bf2e360f4539bcd7b8509d541c6fc7cc98fee417f05e88ebdf2e0537b4be8dff71676d8deff67d420df7986f7e5641de351e51cb45a3e8eebe4b41674b983c4fd4e0d4b223dc88d79f94753ccb21f50457fde45e41467e23eb3eb63db78bee765"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0xc8, 0x5, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x169}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc19}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb84}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x7fff, 0x1, 0x6, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfae}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8b7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x48, 0x6, "c8edf11c48e2ae6fe20569913dd7bea0adc9158b88fbc436736f26bbb0d41c0e1ddac5c24974944912cba1bc34f8e8a0a4e629f190d1b140c5d56bc4a80bba8fb7ea025d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0xc4, 0x11, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x11, 0x862, 0x3, 0x9, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x232a, 0x7}}]}, {0x72, 0x6, "e584160f883b90ca7a3f1399d5a43a84fcf4aab052a0b61f043cda2c4184be0b9c5dfe9e8077f2b6e78109f2c8427bda4d048aa8630c3ed9fb3d7add20e8e7a25ade0929d37c69c5a2993d82fbe23ac1324a37fea4c18c63b480416e456165780fac7bbce5ed5a608c7800e98e14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x9}}, @TCA_RATE={0x6, 0x5, {0x30, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0xd2b}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4000840}, 0x48800)

3m26.851916012s ago: executing program 3 (id=554):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c, 0x0}}], 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x1000000})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040))
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fchown(r7, 0x0, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r8, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)

3m25.688006681s ago: executing program 33 (id=554):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c, 0x0}}], 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x1000000})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040))
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fchown(r7, 0x0, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r8, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)

14.827086865s ago: executing program 6 (id=1024):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe)
ioctl$TCSBRK(r0, 0x5409, 0x10)
ioctl$TCFLSH(r0, 0x540b, 0x1)
close(0x3)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)={0x8000203d})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa4a2128a322cdca0b2345f81"], 0x0}, 0x0)

12.038380926s ago: executing program 1 (id=1032):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x13, 0xffffffffffffffff, 0x2000)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=<r2=>0x0, &(0x7f0000000a40)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="30200000000804001c001a8018000a8014000700fe8800000000000000000000000001011400350062617461647630000000000000000000"], 0x50}}, 0x20004400)
mount(&(0x7f0000000200)=@filename='./file0/../file0/../file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

11.110517272s ago: executing program 6 (id=1034):
r0 = syz_usb_connect(0x0, 0x3d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000da4fd210d219beff6f2c01020301097b0202ffffff0009050f02100000fa0007250102250d00090582024000"/61], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setscheduler(0x0, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x9, 0x2, 0xff, 0x1, 0x0, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b32, &(0x7f0000000040))
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(0x0, 0x80)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x2)
userfaultfd(0x80001)
r4 = gettid()
read$FUSE(r3, &(0x7f0000002580)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
userfaultfd(0x801)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCGARP(r5, 0x89a3, &(0x7f0000000340)={{0x3a, 0x4e20, @private}, {0x0, @local}, 0x0, {0x2, 0x0, @remote}, 'veth0_virt_wifi\x00'})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="201606000000fb87f71118d092602e3d77050061bca95418ec6331902e016c3280a0dd2796e641c235d2e2be951e990e7fa0a1eccc879ca714888cb8a1cb9e69936561bc2658999e47aae6cfd3025198170c989ac6f3e89d064cfb76edc59806b85c9145a08ea65ffe784476d96d6ae89f738862f5d22293a82592e6448c6753"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.899130758s ago: executing program 1 (id=1036):
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000200)=@phonet={0x23, 0x1, 0x8, 0xb}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="f041a993dd14d8d242be14e4b2d5a8a374e368234b190e4ca9a5e86a95aac27d7e7defe8ad3bd78e353666592bc546c40728b177d06334e10b5d218eda8d4707a2f5afabbdc8fc12066eab7bf5259d9a59d52e292e70011984c9b7c5353d99cfef66796b3674c2da38bd04c47739195b8dc7faac0c8dc340e3720754fffc", 0x7e}, {&(0x7f0000000300)="900590d79255de03dc4d82edcbe76237ec61f495cc815d", 0x17}, {&(0x7f0000000340)="f35eb063a7671714fb68f3d46bfe44370135fb379ef082dccadf52d25b7cfcf56dca7dbf029fb1249c7b4705f6e5c2d68b2fce973e5dfb339aeca0a87a3c8118fbf7fad99023f1293ef516389d8b98fbf6eb156e2c1df6de2b7d6018f867b731e58b28bb4abb", 0x66}, {&(0x7f00000003c0)="c7e2ec6305122d", 0x7}, {&(0x7f0000000400)="055c58106019dfd6f65b70d6121949d9a5f6fcec2dc8499de872198220002d4c270b62f678fd30f1dee746c3ddd0a7034e7dcc7a655cc457a1fc256daef1204ffed20411e7ed45f382eafcb309e9631df8017127241f320868f0390607486b002a502c9f6f6af93b31b52d9347ba43e66b272b03c66d876de6409bb371ffe7", 0x7f}, {&(0x7f0000000480)="c3191f3c421cda23529eb678db0f8ebf9022a3e11000ac25732b459e54ed592398bb25bf8559765db47faefffe366949c8e17098999e9951f565372b5cdcacf2e06c164985f178aaecad2f569a09fb6de2071ef5423b313ccace8f94ecbef4c55fe8f22e7e61a8f7954b49f44bc867c20ff145cac580", 0x76}], 0x6, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7e6}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0xd8}, 0x8054) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xf0ffff}, 0x8, 0x5, &(0x7f00000000c0)={0x0, 0xd}, 0x10}, 0xc8)
ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000040)={0x4, 0x80000001}) (async)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0x160000000000000, r1, &(0x7f0000000100)=0x2, 0xfffffffffffffff7, 0x0) (async)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x8)
ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0)

10.059944332s ago: executing program 1 (id=1039):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048001}, 0x80c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570"], 0xc8}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002840)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48)
r2 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={0x0, @null, @netrom={'nr', 0x0}, 0xfffffe4c, 'syz1\x00', @bcast, 0x5, 0x1, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x10, 0x800000000004}, 0x0)
r3 = syz_io_uring_setup(0x20131, &(0x7f0000000340)={0x0, 0x40005cb1, 0x2, 0x3, 0x250}, &(0x7f0000000140), 0x0)
io_uring_enter(r3, 0x1e76, 0xf728, 0x5, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x1fffffffffffff7e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[])
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = socket(0x840000000002, 0x3, 0xff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0)

9.006460112s ago: executing program 1 (id=1041):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'wg2\x00', 0x8000})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_int(r2, &(0x7f0000000240)=0x2, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000010feffffff000000000400000085000000070000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002b000b00000000000400000003e7ff0013d8711caa15d4c13591c9276a7fa03807a2990b886b7fa9d705aa0000000000000007aac0f77a06210e87e258b4bfd0b711a3c1ac9efa4d31ba1a6dc2193771250bf91cbef6b60ab20887ce6ef70a7aee5b7377975d84d1ac4bf165f3b0ce12f4a03943ad68363c11ca8941ff852b1bea51145d9c7afc5b02bfc3fd65c92ef90adb9f993c5b19b6a9d278ee037832d0d1ac7589513a3819208a2de37a6de9ec4057b47f71f67e9a44b4f4ce4ef46d145188759833b790db4d6332d1a756eea996ec5686612bb1792e30b82b9fed2133bb34b3c67d759d178e"], 0x14}}, 0x0)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x2c, 0x80, 0x1, 0x5a, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback={0x12}, 0x40, 0x7, 0x0, 0x5}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x80eb, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x6c}, 0x1b314843cb6afbc4, @in=@empty, 0x0, 0x5, 0x3, 0xb7}}, 0xe8)
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

8.683812159s ago: executing program 5 (id=1043):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) (async)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) (async)
add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) (async)
add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x3, 0x8001, 0x0, 0x15, 0x1, 0x5}, 0x9c) (async)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) (async)
socket$inet(0x2, 0xa, 0x6)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)

8.663672139s ago: executing program 0 (id=1044):
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402)
pwrite64(r3, &(0x7f00000004c0)="2ad0", 0x2, 0x9)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})

8.259378944s ago: executing program 4 (id=1045):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000003c0)={0xe11, [[0x80000000, 0x9, 0x3, 0x40, 0xf, 0x1, 0x7, 0x2], [0x6, 0x552, 0x1, 0x0, 0x1, 0xfffe, 0xdd99, 0x5], [0x4, 0x4, 0x8, 0xc0000000, 0x7, 0xb, 0xffff, 0xff]], '\x00', [{0xfffffff8, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x80000001, 0xd2, 0x0, 0x1}, {0x10000, 0x2a2, 0x0, 0x1, 0x1}, {0xffffffff, 0x10001}, {0xfffffff8, 0x80000000, 0x0, 0x1}, {0x418a8052, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x10, 0x0, 0x0, 0x1}, {0xff, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x8000, 0xfffffff9, 0x1, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7e4a, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xfffffffc, 0x3, 0x0, 0x1}], '\x00', 0x3})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) (async)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) (async)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000003c0)={0xe11, [[0x80000000, 0x9, 0x3, 0x40, 0xf, 0x1, 0x7, 0x2], [0x6, 0x552, 0x1, 0x0, 0x1, 0xfffe, 0xdd99, 0x5], [0x4, 0x4, 0x8, 0xc0000000, 0x7, 0xb, 0xffff, 0xff]], '\x00', [{0xfffffff8, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x80000001, 0xd2, 0x0, 0x1}, {0x10000, 0x2a2, 0x0, 0x1, 0x1}, {0xffffffff, 0x10001}, {0xfffffff8, 0x80000000, 0x0, 0x1}, {0x418a8052, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x10, 0x0, 0x0, 0x1}, {0xff, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x8000, 0xfffffff9, 0x1, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7e4a, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xfffffffc, 0x3, 0x0, 0x1}], '\x00', 0x3}) (async)

7.959958429s ago: executing program 5 (id=1046):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x13, 0xffffffffffffffff, 0x2000)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000"], 0x48)
r0 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=<r1=>0x0, &(0x7f0000000a40)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="30200000000804001c001a8018000a8014000700fe8800000000000000000000000001011400350062617461647630000000000000000000"], 0x50}}, 0x20004400)
mount(&(0x7f0000000200)=@filename='./file0/../file0/../file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

7.958851301s ago: executing program 6 (id=1047):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='cachefiles_vol_coherency\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team0\x00', <r2=>0x0}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400042, 0x0)
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000200)={0x9, 0x5}) (async)
connect(r4, &(0x7f0000000240)=@generic={0xf, "5be9c0c656ea990d9715798d48dbb54a4a3178238f214475b754827bfd3cb20c6ef93664f42198a4283fc15c29f22cca4b2713c0dcccd860a11cd9f3e8a5b0505d142b5f3ca5d914450928da6d81887d25ce4357cb5b05bb97d83d1c7c38f3ca8cc41d110e9aebe667a65245878867b27a3c97f288a4bae8c4d7a5838b0b"}, 0x80) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x10b}) (async)
ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000340)={@mcast2, 0x25, r2}) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2800300}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@newae={0x64, 0x1e, 0x10, 0x70bd28, 0x25dfdbfd, {{@in=@broadcast, 0x4d6, 0x2, 0xff}, @in=@private=0xa010100, 0x504d, 0x3503}, [@extra_flags={0x8}, @encap={0x1c, 0x4, {0x3, 0x4e23, 0x4e21, @in=@remote}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x44800) (async)
getsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f00000004c0), &(0x7f0000000500)=0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r8, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5580}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x4c}}, 0x80) (async)
r9 = getpgid(0xffffffffffffffff)
sched_setscheduler(r9, 0x2, &(0x7f00000006c0)=0x6) (async)
syz_io_uring_setup(0x108a, &(0x7f0000000700)={0x0, 0x2af8, 0x800, 0x3, 0x130}, &(0x7f0000000780)=<r10=>0x0, &(0x7f00000007c0)) (async)
r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x40a0010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r10, r11, &(0x7f0000000880)=@IORING_OP_SYMLINKAT={0x26, 0x20, 0x0, 0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x1}) (async)
ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000008c0)={0x5, 0x9}) (async)
r12 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000900), 0x202a01, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000980)={0x0, 0x0, <r13=>0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r12, 0xc06864a1, &(0x7f00000009c0)={&(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, r13}) (async)
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000002ac0)={0x28, 0x0, 0x0, {{0xe, 0x3, 0x1, r9}}}, 0x28)

7.082018373s ago: executing program 5 (id=1048):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xf8, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xc0, 0x6, "3f5b95af7c2acbd2d686dc55cfccc9072b6ff2aac5102bca874ec5dd9dc933534b0fd36fa7954fafa8e852104a39b0cea1d7657dbf1478beca4840b2f35c36ba619f6eb8d35fb43512cb61341ebd0c971cd67f09d699c919684810021208e656d3093dfc426467d2fb373e326c91d06bc0ee3a887a886e9d19d71ffc518674e6920dcdd7536649453b28b9c10b631786666078481c582c0d6b8b92f85a442c4664074a464a4a63f5ce48bcc9fcf3aad1f7d84430a01db78a15f4f55c"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x114, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xf1, 0x8, "9fea9c8c3821ea812156d2d94e8c395af7c78affe1a1b59a0c8bc17456a66d45ffb5b911002e4e7a98d205ae2f614e9089d1e469f4b94dbd0829853668c6e8d54c3ad5131900c8b4d2674b43a55787f80e2bc81292c36f3c2a0648a21086b71901869a68a4270f793b1c3458ebe77699d257165b5e246d5a0afbf5ac4a525a4b3e0c7846bce9fb1d7a7a5de6da50ea0f5a5e647a93eb8e9a3d3b6e4d416c94f44151b38309ebe3d1fa8b3a87cf73dca7814d6afdaf47a4c70b0255e1196c7bb2474d60add356da5139ba43814fd7ade7d47c1bb1d220f98acd77565b6cfb43cacf8d4f541e1edbe578268aa400"}]}, @NFT_MSG_NEWCHAIN={0xcc, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x8f, 0xc, "047c585efbc9767b19c5f08606778ea8456e3a053423e7ac19653827f4605eff860062d1a9aa5d327c0e49dff1631666e7562534ff914af6bb9623a9b71667a7b07f8981c18f720b8e9c64ed9ff4dadfb2f8d4eb009c0a81a5cfd7d7bf65b97342e523bc55777a77ca076812426ca9ddf3b12df03661356ae8560f628515c55a3e2359b32e71c58a315581"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x485006199c9e79b6, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELSETELEM={0xbb8, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5d0, 0x3, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xe0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x27, 0x1, "1dbabc8c30ddcbdfe1a1bc7c553e8bc45fbef1684e778fda0e8e58ec353fc4ce85f8bc"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x208, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xb}, @NFTA_OSF_TTL={0x5, 0x2, 0x88}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_ELEM_DATA={0x164, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x49, 0x1, "163d2a328acb500aab8319ac0dda749ec5374820b6a16099b9d4d6276ab043cd1938a5a87e878dd19d0fa26ba24ecdfb06aed2a79de9d872ef0c49e449d93aa5e212bd47fb"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "e2030b49df37207bddad3a647d9762a7c47afae8f7108886e8843a30966854c57758de6cc3f6ae66b8c1be1c4c9d349ea3abc3c9c8bcbea39f8c279b47dd28b24904648fa803986b191977e7230e68ec730ba198af"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xbde}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa93}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x1d4, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x14c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x13c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x48, 0x3, "d253426b48df1e635e46c45cd4f08632cb8e739f0c1d8c13b4e044601250f2d63b1c82b4588c137c4d8b36a109784a21bf3fb5cdfa13bc4e9f37c56a433e236b9f3e0283"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}, @NFTA_MATCH_INFO={0xb5, 0x3, "97283731020ad7dfc3d5094cb520fdadd5ae6b851ce49fb770f2f26596b6edde6cbfa14730e9d2bcbe212e97170ffea765bcd20f5e92a7bbe7f1051ee0e546a308b5c5509140fcd99bd7a8cdaf2f4809fe876d74f816b44a7b6aece183f2fceec121b8e88939a89d1a0cca8a45e434224acf7684578d21bad8ed6303d85672e4af41cd9ee4c34ec3a319aac2a5bbfadbf42c615cda895dfaeae772e06a078fbc4616a84b28eb7df31f9ee5a8ea872f2cf5"}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY={0x94, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8d, 0x1, "f42e45a599b7f6084f84b80c4ffd5a0d2cacf555dd6d71988a26ea0d72f2ed50542406726d94862eaeee2a50fa331ee51dbbedbeea7239aeadca143750c8edb0031d6cdb00be1b4666e4a6c22286119808328a4620db81029f5ef602da1a367471bf58d2fab17944c931ba304157d3f42e77443ffbcf575623cde5ba7aa1c17b5d589727682a7f4dfe"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c4, 0x3, 0x0, 0x1, [{0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x97, 0x1, "98148ee50ee0fca9655f756f57ddff5ccc15904929d5b7e2230161d6d42656e81f6b5e79ab1251941a0950159eaa0c09eee40d4e2719f4ae98870f659caacf96dce80f15bcc0bcb945a5d4821b0465fc6c624d4ce468c9770a35fa8514d8b220ae7c6a38721363bb3f68a7427c4e26f0bb3d724251bcfaf042b9966cc71a67f4b9df5a84620827499b975cb612091d6a91f5d0"}, @NFTA_DATA_VALUE={0x49, 0x1, "87beb12c88363eea43bfc82b12ea336432122bdcf268eb334c2eb2b8048191f41bcc052cd1396ad75e4079eb4f4bfcbd1f185ebabee954f2214ddd43710ddf0dfdd87bedce"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7, 0x1, "355aa5"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3e8, 0x3, 0x0, 0x1, [{0x24c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6738}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xca, 0x6, 0x1, 0x0, "657f4360810cda04b9560fceb72dba8eff78dae4d13a0f5d4cc6d38868a4249579b2696d0c0f68f8aaffe0ef0bffab043e2ec680e71f30ede690d140c59a0d7a88a78d3f4083903e570c0a460f9861c4d3a6269fef99320ba3dbef7652875c50249b4f46aa69ca5cf3ae7d2cc275d62973aa6324fe60e812a6754d3886d4816e10745fd746eb2e4dad74e332040bc4193b2ddf7877f86572af4d7e3c0b88f0bf5b62f2ebdfc0fd10ae209edbb5aac91eaa173eab776b5acb2b47d1d76a82c130ee8f8cc33077"}, @NFTA_SET_ELEM_USERDATA={0x27, 0x6, 0x1, 0x0, "f266d514bbb0a0c783ceb538e7651538b867cd3c3422893844259a10062750ecc4c06f"}, @NFTA_SET_ELEM_EXPRESSIONS={0x110, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xaf}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x10001}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xf2}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}, {0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfff}]}}}]}]}, {0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x68, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x64, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x10001}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x97}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_TYPE={0x8}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPRESSIONS={0x94, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x3e3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x27cc, 0x3, 0x0, 0x1, [{0x6a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x1f4, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xad}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x60, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_USERDATA={0xbe, 0x6, 0x1, 0x0, "e4ede68b3276cfcfa7562475d8d802a28226c1093c68600b74a79b8d466742bc406bcf1f7525250dd432c9b47df4a46c98e76845ce330a3879692cd6a38b2071ed1dc39d79167379b4ddda535116bd3c59bd5b4064322bfb3d6b9d81efbf2c54dfbb249a2c657e7ad2ec4cdf0dd1c80c0e8c85c6a4b050cd3b5c8e2e30b5669f0cda0a374c4c63d7a5277df0272b6105af58f6e708e854cfe382cfdb9a79cf2125e72e9091f5190eea631cd41ddb6e871e20aea28744e219be99"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x86, 0x1, "54c3671c6720f855a88d6fd3f819e606f24c3892c2b8496891e434ffe7e328e6c721eda28dda4842be2942381a71139242338e229b7d99f875d22772a7d7bba917e19c0caa5fe87b391e7ba8217dc424aa84facbd5904c2e66730e7503322a8cd750d5955931c4c12fcf974b0573e593fbab5966ecbc90184e5f4340b3a057c5aa70"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY={0x2e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "f2e58c406f7c658f45d967ddb1e2d39ef3c7b0ac324080c3efd5217df95af3dea3bcb4161d48a6308d6c1134c1d08d24f6fead730b11276bba15e06b591de845c9de111dcaa6f942d7d14f5b3b3a930d48ad536276163e16d216dec407347e47b239cd388c84c12f6a9b44f71789d4d3249663d81d4cd73548f76bf730c345c8eda409bb26f46175daf706e2f66f54bc66638ef67f92b50d5c05ef46cadf"}, @NFTA_DATA_VALUE={0xf9, 0x1, "7a4ad9a31b4ac42e12e70ac5cd9d8272f79e2de07f9014f71a85585c661155ff4cea1c1c15825efac66f17191b1dc0a1d41ecbe7ed5deddb5ad851dbd9b80d419521a6a02ef1543aaf19eb92f1e0e8b77516d87ebe8826174e4d82f4a39cc197809a84e401ceccef808c6c0c7d00b6554c7e09eb55e989b8aaed3e62cc237c164c3f1b8bfa3b2284549f8170cfcae7151ccda19c1796556603a4535d0091787c9531f955fc4c0afa7943810419e6ba7fa5e8c6a8e55f153275fad380920de91fac5e7778491383cdf74ba8f90e21d116278c610fd616a9b8b1f7845628e8fe803f3e442cddd6663ff049a94cbb3add9b7edf3eca06"}, @NFTA_DATA_VALUE={0x9b, 0x1, "3a838851308359dbf8cb864827613cf37fd6fdb72b90f7e3d118ed7236d5eaa3b4ddaf3a8f1d5687a91a9d0cbc19974a7c06ea0c21d4dc364a828891d3fdf99aa4f06bf356fb05e38c17bcf539e0cebee5d78411732d52b2beef8d3594ed5071b03c623404bf948c2d2a559737c80f264ee2602c6c48cd8f911dd68767d4d0f30dd77b683d38cc2697a5250be8a059ef53e4ed47b09f29"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x43, 0x1, "4ac68f03e9647d59c600606bbc334554989bbd6d51c47a39e273eaa62629fc0a770c824c3cc7144899c64842b91c602d21664e6b907c27ea294cb5c238ee5e"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_DATA={0x4}]}, {0x3d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x64, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1c}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x42, 0x6, 0x1, 0x0, "e07a8bbe06f5cd09b4bc487bf8153e4ebfd42ba3ed750bbd3e4cb1bd216b8c5f385f785664e9a4137cd14dd7ece90e2a981d3c5b04b314f5920066c1f235"}, @NFTA_SET_ELEM_USERDATA={0x61, 0x6, 0x1, 0x0, "c9fe851dfb20a07e9e2ff02a8178bb09bd084fb61b38b1004e699c22023dcdc9389a69895dd250e6456073a1fb73a805f6cdf60c04e7b453ab66eac459055c7bb91ca270f0e51ba95bf9169dd754bb006ad485d14e4e0fdb9d1c0ccd52"}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbc, 0x1, "bb04dedda859e44dfd9009200775b1888f6113de7aedd2f69825be3ab9c19177429b05d992c78aba5ccf1261fd65171597804500e6b049c1c69620216aa607c5868529aa1c72ffab2411540158ce6e8f3462db8c398959afe5cbc4a9dfc6db2e64fb0c4c3985c50c0b82a2d80eba7beb92321facf2ee884ef2822b968fa9c9fa6549079d72776c5a34558daf6c2ca550cf467190da7a1dee18423e91cbd1eacbe1357fd70c4d1d655c2f8403b98cbbb1e970122fda91242f"}, @NFTA_DATA_VALUE={0x62, 0x1, "e6ede447d74e30cac88e4a0a5d5a5670f0f132a244f31ddbdbde343fcf9d9bf201f5a541a4a690543275f82e2c0f82de13f783f059b99dc31942089306c6fad86f35cca8d6dbfd88c9019845d32679139d1032f5e651c74f800e49080815"}]}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_USERDATA={0x77, 0x6, 0x1, 0x0, "55bc0c53532d41206228e8c7225f159cd4e9cba6ed9c336a9caee8d5d0924abb74107421f5a73b72b88a112b8b447fb105ddba08bd5ea9f0456ba004ab3cf1e7f73275e02be70efa37153f057ac3aa3fbf811e9e706aa69ef1f6972d9321fc739859dc90d7ca557e23d1d4a9e4ae9807e5edc8"}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x78, 0x6, 0x1, 0x0, "98ab05b264ae692941e4aff4016ed2413ec81e8b521eb6f9183938f2e3922df368b697766cb282830f483df82b95a0d93498018e88a9c84492fe12510f15b0f3a7e7ccf64078208a06cf627e6e9003707061193b46c5684af4b64ffed50baf58992def8360c4ea16ac4bd27f64c7f915372a4887"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x64, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x16e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1288, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb6, 0x1, "be2d42b0c56cff6c6086cc906ead35fcf108c15c9c733544fe0039a5f0fbd18caaf9d32cc63b340c8858db364c8e783e06e858d2fec412fdbd200fe1b3a325dc1ac35d96725f612e132211843aae66cd3ca4125a78cabeb47cf8d49d356f82bad0e7df3fcd41b1b75051c3a5aa30691acef8859f4548396dfc9ed7eebf1b270a41aed5102cbdd4de81f4a312a50d5922a1477f3385ec99c80da4fddad19613b4f7600fdb77e10242dbf0992883012582816f"}, @NFTA_DATA_VALUE={0x3c, 0x1, "f6e4ffa7685572429525a743620563fb0abf1499b252040d77c780d13f0c5f8e91c6d24f32be96814f365dd28ed96a1a8758a17f8be1ac66"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x43, 0x1, "eeb21733d00f892fdfa6324f1512cd35a5ba26f428a253ebe80470026322110a92071120af74e07ed07d5844ab101873433e90a52992a46983f56fecd07834"}, @NFTA_DATA_VALUE={0x56, 0x1, "fafc881b21048cd52fff1d8837d72d26bde6e504b1b0f6f624f2debcc92b6e12b283eeaff146922321b95d0d06d08f3739582204bf178bbf669948edc5674ef816b21bf15dc5a7ffe3080aad166fbe133f01"}, @NFTA_DATA_VALUE={0xde, 0x1, "fd2602af663b29a28aa8e6671693e34e4f0fe056792d4f7e662653e3fe09f3f41df05a700dcf57f8d0499901c7121845d3c22fb0a612b5ba7d0f4f08a63210c1a27c58abe0262a579cb87180e8026c6a170ade3fbee5e8a9f5d33310ad828313ad0f85f0baa6edffaa46fb87411ef99288f60d18e4044fdf5c8db345b0bc9bdf64a0fac4da0d257949b8af936fd7cc64895c3f8d25c13a3afe6390fa33483d2b6a222d5d138a99d5297d1fdd3712ad589d0d1075c8b91bffe3dad5b1194a1a87a0b20effc9db24b6b058dce6a16f54fe4bd8a3bc59a29b1a8921"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x1a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x100, 0x1, "a63ba675a8ff72e697911e330117a56d4e57aabfce244e9b6129521aedf7ada84fc72daa3a75e1cf7218f8adace2d5b2acbe8c7b7a82bcf19a3c80e3dc404e769562790359a03c528357c2cf632db5a1c095f649511f86866d1addd298cb28299ca69c59d35c5676a86591d7622e2b493cffb2dc253ca2bef47679bcc2a55d2e6d3b7265863cf5b61a544fb81615fe157b00f4296f611d7d9826720c644dd505b633fd09fcb8669da88d5108ab85c99238a29cc1fb14d3a037eaf8e630bdb1f13de36a5abe80c14c9e190b5d2e95da0ba89ddcfbc28cfc8a2b8912ba7be469602d54d558c925be03c6099b40e056a3d37610556baace7a520ffa07f1"}, @NFTA_DATA_VALUE={0x9d, 0x1, "006e290a62ff8f02a324e132535675daf97c89a269c5e193193a5405a47a9d4e7532f6a6517459470e56cc9deda4cc41a6ea7465e4f482f506a79ef375f9d4661c9a814a12f32af25e84a3f4cc0ddd2eaa66c9c0ee34683573b32c29d4b484c8a0a460c1de99c66e7a64dfb9990227c2a84bbf0f85f900514bf8edf51179994be00955538c21251ac95cbacb98524c5e95e3725593ee8764ed"}]}, @NFTA_SET_ELEM_KEY_END={0x180, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "16d8fba7767ab2975e96a8328ca8ea23e3be3960ffd2f1adf133a94280db80e0fd7c950a1d0994b340c59e4c695b14646ec0f7e514939f4d8e6c949faaf4dfc7dcdbe6b93c576a387f49c4cd4e9932d64b374c7eb82eafb723085cd350e2906c08b450728b02248fdb01c841c65e81b4a337290c21815bf4e0acf482ea6f4442be"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x88, 0x1, "a352663ba786c6876974cbd296230c2e876fc8ae5d3fc31889675b8d61e8ca556de2c1a1def811f8fff7dbc2a8bd3826c65a8b1145265da5fea69d08422eb4c561ef83afa816464933517e35cbeddadf8781c4560783f2d87a0e46dac1fa3c448c5f0540998b23cb3862001cf72e335c1ea618239ff1f20ec7dfaef1e1ae0011b2ef970a"}, @NFTA_DATA_VALUE={0x2f, 0x1, "a99d620a6d88c81a56fd45740259c5a1a5403d367cc2d74b529873f3c59e8764b3794a5babf9944bf7640c"}]}, @NFTA_SET_ELEM_KEY_END={0xd4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "9b85de43004150356a501636008949d07dadfb41cce9f1bb76e4afbdff4d80efa8259ab9d49011c0f2044b9c1068fc45108e31"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x31, 0x1, "f5cf01881ae0c2bd79704c347182617d151a22b687d26f560548312e2a703fe148a59561ed17a09deb50bb7c23"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf, 0x1, "bb6b82ab46432d0d95f424"}]}, @NFTA_SET_ELEM_USERDATA={0x1d, 0x6, 0x1, 0x0, "e14b489e2d989b6cd5401c78d3783804d6e569096bc16e3557"}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}]}, {0x300, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "0fcaeea2bc6ea46c3b4c28a1fb3a72ba838488b997c40f796356e5ee2f44f080e3"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x48, 0x1, "83ab165c989c6684cef75d4fdf234768abc76793f73421d30fd383f949a41304ad63d9f0ed46427b75ec179fed0e333af8de15ca8bdc5ea300b1926657f8aa98b52dc932"}, @NFTA_DATA_VALUE={0xed, 0x1, "4d969fe2b3e67cd497e62ac8a73e2bc850ec4d834b92dc679fe800d0ceb6406ef1853fcba26a0a61088aee74f8f36f8578d4ed413fec1f55155220c5bc2bd020f2efa3f0c71896871952faff1329f569700207c07a778d26719409d3e050bdd1ee38cbe5d2b1129c01de50b09b32173d26ba05d4193dc49171a7ffaf111df10e1b5aba4b1f0d68cfb8205a668386f21bdb736fdab6c0972fa21b06ca4f66d0971f05077a1004dc40488f19ddf4adffdbc4312f8640b54ee46981b5be344466e6ac863c9d2965ba685bd35be61c562df39217246f34075baf1203a3603167e39e0541625a9e9a9ab44c"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "d2dae01858f2187e0d10f682af7063327a52efa47df4247788138f8aaee45f94abfc71a00ed1571f9a34ebb7fe8ef9e97fd0683c6f7b36b0b86395df71e23454f050f830e4bcf9b940d8fb3ca19eea3bb37e842a99"}, @NFTA_DATA_VALUE={0x96, 0x1, "7d8ff18e1c944748227ebd31273c8250b3a7c11dd4e1e649894bf8af4a8aaa882ffa6898e0e008bcf740cf8df1b48a10ca1b2e7b310f4148c9fb697b3be6c314e5aac5cc57c9b04a2b3942423cafc5103527ada67e57810e2549e7290ac35b84a3f04057789b858bda1f01ece008ef7908457efff6fd6c81a8109c7d8f84993fb31ddd2322534b11f71b712bafd71fd1c077"}, @NFTA_DATA_VALUE={0x6b, 0x1, "3fbedb6252e99d5a991124963570cf3fd6e5cbb6713d0add8b00bf154dbd65d1153a2c01ec02065a9a96b31dc70c6a3f35e7f969108e28009dbee9dc3ea976884dffb2d209b1018be462964426b3b2e1df33eeb920fd4f037793575e09ecd77ac1d822e7c10a2d"}]}]}, {0x354, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfc}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xd}]}}}, @NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "9d5f1fc41ec2139570fdc07a77a156ffb013696bf7ecf0"}, @NFTA_SET_ELEM_DATA={0x264, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "ca7fb7f8939602b21e71a76c39541d3987cdb7e6b163e2af4d10385cde8a2eedb321c1eb97a791cc467a823a38256fe0e26db573b253d8c36f4b7f90798414b50f9f312f0420cc843e7606a7ab4c7bcf1b6c0c9d0e05a38413cb381bee7a851d1e4b26de1d009a7d5d74ccbffd1731e16919cec430953931f686925b53a11e25eb27c03761ba796f1f976b331a8702d83d7f55daf3409d0aad7a908e2260860d"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xca, 0x1, "ebb33c0961c52d32f5da7b67ea81a90ba07cc933f701aa10231abd18e8389d8be65de6f0e4af33a77245110588df23882347cc4481b6eedd30284423377cd7be31a9be8b86e1f85e239e8b0e3edcdccab9fc8db9dcc0db7266be28a757f9d22c15b0d50b8baf668a96698edb78de9b4bfc8e51d3e5d53423b954d6c9e1421f37660f7bf11ae5d97cf9d01c7be2ee9631a32d618f3bd9df1fdaebbaa94cc0be858313d8ef313ed5c3c9c820c4612ddb7d26fdb2829722f3af780270f16f8db3a4b232b553eb28"}, @NFTA_DATA_VALUE={0x13, 0x1, "32bcc72ca0e728cb0f55cfe664e1d3"}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4b41738}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x161c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, {0x15fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x184, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x26, 0x1, "b119a90810fa14cdfcd5d3c946388548b7e371c98d32a76c710dea87d16689c277a5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "c2fd599470ebc29fbf2316700d4aeda995b9b5edfba48e01ddeb732fc979fcec5393f2423a94863cd4f6a725dd3db607725e4536558cfe3802ad73f43955a3ede05b3f776d4138b87ae2a8236d3083cc04dfbe1c0a4f51c4c82855d51b413f087274957716504eeeb5537f7afcddad9a190c204cd6c375122e9ae4ca12b2fd46a89cff15e591d51f0a24073ea3e0ecd87e5e228488ddbfa630cebef83c86b89d8064d05d2c6645fcb2cd9d92a7be4f90d1dd844c7dd3ca245fbb0d99d93856201ca00ec7ee7426e70cb5edc4af7f2aa2b7"}]}, @NFTA_SET_ELEM_KEY_END={0x240, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "c17fcc9a0d1cce002179e03eef747a4968bb70db9ef95fa47b91d7f649f0c6dbc369ed9794c0ef88ff7f002b83238010574f05f4bb0852b8bbdc0525e1dd58483c763b739ee282ecfa552095ae2a9f8fa3e7022bf2dbe0355c23b32cabcd72d935b5a69b9f2cb3e2a9ab3b7d4d6e83e305ae2aa817352e2b128c8a756d6dad0318a7f594b1d9e7f2cf4192a2ec33cda11bafaf362acc2abb02a297e58bcdda200ba172f9368cd761f9043b454bcb6ca44898d90f0b4322cdf39bbbbd3706f918923a04c5b9"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "ff7fcd95bebd537a2a1f16612e620a199cff25cddef1dd6919a67201da13a019ca68a6b0cefc3e2dbf88030a20d9a5d2cef573e43385eacfacc2faac3b1a556889ea2e8ae0af9dd119597506599692585a98fdad8706825502951c2be5d3cac7ce51ce176a6b79d0bd621bbb93fdec598a0820cf670c"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_EXPRESSIONS={0xc0, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5962125e}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7ff}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xf7}, @NFTA_OSF_TTL={0x5, 0x2, 0x39}]}}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xfe, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_DATA={0x1054, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4dbc}, 0x1, 0x0, 0x0, 0x800}, 0x80)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

6.213842267s ago: executing program 4 (id=1049):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syslog(0x3, &(0x7f0000000780)=""/220, 0xdc) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000010)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) (async)
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) (async)
syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109028a0003018040080904000000010100000a240107005002010257240803ff00fab008240403cd82ab090c2402030002018102000c81090401000001021000090401010101020300090501090800037c090725018208addc09040200000102000009040201010102000008240201030640080524010412021009058209ff"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})

4.43957102s ago: executing program 0 (id=1050):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0xf7c9, 0x0, 0x1, 0x193}, &(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r4}, &(0x7f00000001c0), &(0x7f0000000180)='%pK    \x00'}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f00000005c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000280)={0x0, 0x1, 0x10000})
recvmmsg(r6, &(0x7f0000009400)=[{{&(0x7f00000003c0)=@ax25={{0x3, @rose}, [@rose, @default, @bcast, @netrom, @bcast, @bcast, @bcast, @default]}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000004c0)=""/223, 0xdf}, {&(0x7f0000000600)=""/164, 0xa4}, {&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f00000006c0)=""/189, 0xbd}, {&(0x7f0000000780)=""/229, 0xe5}, {&(0x7f0000000880)=""/189, 0xbd}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000940)=""/26, 0x1a}], 0x8, &(0x7f0000000980)=""/63, 0x3f}, 0xf15}, {{&(0x7f0000001a80)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001b00)=""/143, 0x8f}, {&(0x7f0000001bc0)=""/191, 0xbf}, {&(0x7f0000001c80)=""/203, 0xcb}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x4, &(0x7f0000002dc0)=""/53, 0x35}, 0x8}, {{&(0x7f0000002e00)=@sco={0x1f, @none}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002e80)=""/67, 0x43}, {&(0x7f0000002f00)=""/33, 0x21}, {&(0x7f0000002f40)=""/35, 0x23}, {&(0x7f0000002f80)=""/218, 0xda}, {&(0x7f0000003080)=""/132, 0x84}, {&(0x7f0000003140)=""/122, 0x7a}, {&(0x7f00000031c0)=""/65, 0x41}], 0x7, &(0x7f00000032c0)=""/204, 0xcc}, 0x5}, {{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/126, 0x7e}, {&(0x7f0000004440)=""/136, 0x88}, {&(0x7f0000004500)=""/33, 0x21}, {&(0x7f0000004540)=""/165, 0xa5}, {&(0x7f0000004600)=""/70, 0x46}], 0x6, &(0x7f0000004700)=""/53, 0x35}, 0x3}, {{&(0x7f0000004740)=@alg, 0x80, &(0x7f00000058c0)=[{&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f00000057c0)=""/54, 0x36}, {&(0x7f0000005800)=""/177, 0xb1}], 0x3, &(0x7f0000005900)=""/91, 0x5b}, 0x1}, {{0x0, 0x0, &(0x7f00000069c0)=[{&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)}], 0x2, &(0x7f0000006a00)=""/41, 0x29}, 0x1}, {{&(0x7f0000006a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000007cc0)=[{&(0x7f0000006ac0)=""/4096, 0x1000}, {&(0x7f0000007ac0)=""/132, 0x84}, {&(0x7f0000007b80)=""/151, 0x97}, {&(0x7f0000007c40)=""/80, 0x50}], 0x4, &(0x7f0000007d00)=""/4096, 0x1000}, 0x81}, {{0x0, 0x0, &(0x7f0000009340)=[{&(0x7f0000008d00)=""/193, 0xc1}, {&(0x7f0000008e00)=""/233, 0xe9}, {&(0x7f0000008f00)=""/244, 0xf4}, {&(0x7f0000009000)=""/174, 0xae}, {&(0x7f00000090c0)=""/220, 0xdc}, {&(0x7f00000091c0)=""/138, 0x8a}, {&(0x7f0000009280)=""/136, 0x88}], 0x7, &(0x7f00000093c0)}, 0x6}], 0x8, 0x2, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r3, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

4.439051993s ago: executing program 4 (id=1051):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048001}, 0x80c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570"], 0xc8}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002840)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48)
r2 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={0x0, @null, @netrom={'nr', 0x0}, 0xfffffe4c, 'syz1\x00', @bcast, 0x5, 0x1, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x10, 0x800000000004}, 0x0)
r3 = syz_io_uring_setup(0x20131, &(0x7f0000000340)={0x0, 0x40005cb1, 0x2, 0x3, 0x250}, &(0x7f0000000140), 0x0)
io_uring_enter(r3, 0x1e76, 0xf728, 0x5, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x1fffffffffffff7e, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[])
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = socket(0x840000000002, 0x3, 0xff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0)

4.438711118s ago: executing program 6 (id=1052):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)

4.175774598s ago: executing program 6 (id=1053):
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x9) (async)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x9)
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x3d, 0xb7, 0x4c, 0x20, 0x1199, 0x6802, 0x3c48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4, 0x10, 0x0, 0x4c, 0x70, 0xf, 0x3}}]}}]}}, 0x0)
r1 = socket$kcm(0x29, 0x0, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r2})

3.957316412s ago: executing program 5 (id=1054):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
pipe(&(0x7f0000000740))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x8010)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x800000, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a00010028bd70000000800002202000000000070010000008000300", @ANYRES32=r6, @ANYBLOB="0800190040e92277e2ae58fa8da06da8a3480b6171c9a3c038064f7762eb60cf28c5f1f1ae5bafec33c3a7873aa056502597195f1a56d34d6290dd61a7e16f0aa7c930758350225e2b8f0bf424578eaa7571bb1c57cb54b5ed465e0b679d5549540d68e7f4845100c3870b95731eb7208d0615db45260be81dbc651abe4ef97dc6260efd6ffedb6cd5d527cf2c08b6", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0xea5bc50b6199d77e)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff}, 0x6)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000080))
ioctl$sock_bt_hci(r2, 0x400448ca, 0x0)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
getpid()
setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4)
vmsplice(r1, &(0x7f0000000180)=[{&(0x7f00000003c0)}], 0x1, 0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff95000000000000004ad8ce828a0223b2e5192c6dac7abefdb6c210ee02051c1db395ac04f35696d7c0a851cdb52731c147ae9e5640b594a1851e16f2c6aeb1b6025063a4ea16dbcefaf66db70bfc574e46bccb8497ce3b734ff1fbe68eb79f586c660d4df3467fd2ffde1ab7671290890831ecfba5859b85cceb9ed171b5bbaf66fe3298354adf5b3dde0851d2490737dcce02bff4166f428ca8e7deb4f0a6d4ae33e1eb056dfffca8e6f9fc"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94)

3.712004409s ago: executing program 1 (id=1055):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f00000000c0))
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_setup(0x231, 0x0, 0x0, 0x0)
r2 = syz_open_dev$usbfs(0x0, 0x76, 0x109301)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000027c0)=ANY=[@ANYBLOB="7e0dc0042c687bdd33c423d362144d91ca490c4fc8b89dfe19d29fc4efc33509e8374f162255cd78529e1f3a6944cf59ab8f621702ba2c238be7f4d5591e647c494652f1c242426ccf46283eda9b9b2df770c7cc6dde29f689fd3c81ca76c9f5270f4b90994191feac7f9f367c4974d36cc45675fd0f52bf6da6420a171f9dde69fd8063169ce491e81640198e528c49b18baf440154181ce9e8d1fb35ee046b65c76c2f473b45f9091008bfdd30eae12d5350b87a99f6612e607c78d3c6476eb026b3dc40052a77cb86745256559757a23c5830804c297242a1a3d1dedc8b0ee9935da7e6b79cec5c6821b1549f8a6481d66fd8ce8fdfa8e421734cc9a6e43a5e28c6ff61c5ad7bdfe55bb060f1cae6d2c84ff50776b2ebc65c177990287fdf6a3c5c320aec4352caab2aa0d925a63706b6c981db90eeb1a1bae69f3928982c0e29a873105a6a6e2e98bcd253c7bec5781569be1dea2b6f064404cb89b09f2e6bf3f2ce3d06b5521d6029ced33a595f15f03d4b54215278d4e642f4a3e0df65034aa83b1387c41298c08f7b307a0c2d58c79594bf6d2a013e023d99d72e2c3c1a95fef3fd6182b298b60010e74cc003e98aab54b27a41b215ef39b22b785c857402a35993c126ae2503af8a5713b68a1600a3749e2af0dbcceff3bc1a8e28d0ae1af164d89f9c13e16ab81604cd70e5892d22daa521dd558304af163f72ec8d43e617d0f295abdb36300a46776a9d85b96155e1ac24e18883376c0d5f045a0d9ab22758ce3c5a5ac951ce6b9842093546e2aa15e7d0eb24bfb082523d1e1bf9a7d95fa24d45ac29a87774b96ae3c759b471cace3cbb82d48f466d79c4a7633cd33819962798c85e342a1866e0d7416a777743bb86db04ce24bc2419920943429665065fa12299a417f421ab3972398bf56561abf540ab50fa8d96e89a95f75673abb857d602d9f94766401735725c23ace1626bd127580bb0d537ca86b141e813341b45954479ed32b426b6fca04cc949ca78a168e6819355670dc7a9f5f120889663ba1083bbd8f20d08820fa7d7da5b5d5ff2b9f0bb86fbb265ee050938d5acf65d6915eb1be6658bc48d46295419e1939f9169e8f6da3cb2a9dd0dbfd84dab6c3e95e7d79bac0ef78ac262f65bfc49f3e2a7a4f8af9dfc6c22ac472451f3c9a38991cd83bc488de161d6f1c8829ccf17b22d322ded914a1bc43d5f4f1d26827a712b94ea3661baebf7ce6a8e8d3604232e200cda848ebb4ba4a88f60b6aca7d4aa4da8ca2dcf794f5dfe3e38414af860e6e2ef8fd33b5ffd935ad4d19e48b49ed9710660afd9e9b65feab0585b706bdd69d6420172df3e4c32c9c8d5a1c7179fafa0728779756bd9a30b04e01157d850807066e8bd4dd475a8c996dc065013f2068c282df91954e5e33e42b6224ae71d2a23273a84fadb2fa7dfb03be3f27059515c543ba3543cfbc24d3ac50c2260584a10e4569e30d69f3eef06a3afc81c84ec32538f971cddeb3d00f0c349ee4d4fe0dcc0d8b2689c02b4a5518bc70a173b57ba46400b9008b483277ab709da21eb7d2eb2aad93f4d3cf7a049dd55c583e7e7a4c3dd0824c154613ba7fcd4d687d85c1e507572b99926f856d2c59b28e82c7bfd5d67344de089b63deb9996fc8f51e9911d93eeed7ffba19b1c5a31e924580234279cb97bb3d3b7fe3d9b2b52b97e6c162d88343e205730249213952fa88573916e0a60a60956b212a00a3f183f5a5a367c77559d3190f236154823a8bcdfaf2192008cd441f521e23bcf67fcb5759dfbccd47df3a7eacd7dd4390d95f6a07501250033cc601b47dd520d5f8fd4d2c52284ac47532974c649fe7bad1f567b9de0555d44d0e4fc553b90526cf89395265419d423ed84ebb3e7f5e2e4d284b109f0607bb1a575a484c34c28652268762e11ab02c606426ea38830b28db6d17f559319ce903ecb11ca3eca9df736582279508dbab745d76a326efa804a8043c56d43f5eb2281b123e95a4d2ec2e51bcbd41ff50c0431ba0236fe613c8c5fa018e3b615d9dc7bcee1d292639ff60100d6863461152e04977711164d5bc1aecd2baa000163e9ef2917259bb21f4a9952d7a5806bf2991bf2adff427257b7e6ece9a80200a946ceec8f8e316e57921c08a3c29fb1663becd2d54ff5b3da171b9a8fe6a35b7bad67aa07d57ed630a979735f76b70397e0711893e50fb2f3d5772f847337a9fd21b32ccd7fca290fd38670d6eb04c812ab18468dc5ec1797a280eb99214f8213ee77d2672af59d182dcbf0afd4312be5768cd41d8435ff2f1bd67cb9d3824c4e57030205bbdd4d3dd5ee0f1b8f39eab8fe66de0a01d0e1796613bb4555cce025d69530146b2332446e98cf23a22d1ca853be8365c83ae61438da2072851b60019d0ce53d2ab0b66a17ad4a1e479660ee1929b8c6811c70b96579e9e87b4a126a39ef58f8b2b91322324986294afa76731d8315226ef7604e4832c6cdd402e7a0407aa4a8ebeadb09534638d67bc596ee97c6ca8e2aab8ba040b7740ad7e93c6ae2eec089d38d91df2dd19a06a6142c90bacdbeda2b67926b5f52fee7f1e5c2643eeac8cba58619f10c14d189baefaeff9b53431f0495134cb78f6620f87e0455e7ed0e677001bc7e9358f58895ed23ff069562a0e5ff2fabad236c65b1fa315fb1d7a71bfad7425ebfefa941dc582f94a18177c84eb959fb5d2c6aadfce5972e88e363334591234e71f9a8e29a6ea003135a81e4fb61051616f349d91402a9cd4dc963072914634c37a0514e83311e2708e07a89c65a634421e82d9fb16164f12ce53a82054bb967f0be9b62380904caaf105a8b66ac395ea3750ff46d3fe699f5cea7fe7dbb26223363fd9aedca0fecd1fb7ddba74c276768f35e1b8d909f726a66a79d208e4a82a2408dfb3f39ff6a6e7965d1a021e9538efbfd4407a777167fe4e5e375de87dc04b12aa4675cd85c7f3098c70d18ddd1d7f9fe7a8cba99f5ce88e3d25172eca668c03328c0a9e44041b9c25d5c23dcd39a2de8dc2cf069d066b19c381fbb2fd9242083e21db59212d1ca6a8d2baccb17d6ee731c7986555147ce4ff79377c92c81cd0356b1c4f74247cf7128205c29c6ce5d93ca311c818f7be5c2abd9997933e206a31e0a3fe81f5922e6e83d28447e22b35a25d1d080752a0ae53667149738323004bdd99b1962580bef3c52e6c41f7bac03f12e182eda5fe025c5ae99f1a8f67399b12289e7395879346f3963d05efd54d683b54dcbacf8b738a78b5eb73f15b311a6b1ee7eb89c222c29b99147affc8b28084551a3395ac771188bb4441b9c1424473f7d1b9599950653dbd52ccf0fcb7ffea74efc18d624d983b2e821311710cf793f22a830bc98160d7ddd122c5dddcb0a11fc13c62f014296ebed0309a534348ef05881239e258bc89fb1278e2c220774c7e01ad0fc99960f13459dd72ca7782d0b2885f1a58aee538ca7c481bce7edfbd4b61adf2f5536e12adcdbbc1fc3e528b7541c8824de86a8aa094426564e6c55183c9e9af7013ee0bf7f87046dcbf5367d016522f6a2d333f0c00ff4649ddd01a270c9a245bb3f35cd76343619248e9d5fcf1c4135e1c42126b3af079c404daeb4cb573502bb815e849daf07ff4ea25ab5d375d48d7340ff01eea2d8274353c30715dfab9dd7a4317573f9386d98ed61114a1b534ab452d8c5c412e791ab089187251610644093830f01f85f320d656cc9b63ace1353ff81cfda508a25752b5d0ade9512966436379bc85fb46dead90a441167823f95d3e3b7d4409104a2793b35676e0108840800a6268e2b4056c66fd19f3d9a019461a428f01675d02b2204e7a41d5379885d3fc5784d2d41ef10ada4b9f75c98f2b3920506b075e9079f121921258339c116a564dae26947da308a0bab4e7064618e698c8a975df3e1e76ebcd252acf0469967abb9ed91c267f38fc69ab21071b6e35f92f73c0393aceebfbae15e9827f88d9ebaa0e7910e405e57ee9cebb057e9a3be86c91bd1bb5a73742b35499fdf72a9a7139927d5092c002c5e207737b68d13f7183a9375e471891b7a40257b336f7a0071b66d095b2a5d2a1b6e5f6f8998b0cde6df60f5b308901bba946333854cfb8bdf8719663d361bdd4b88973135c28ef0c8e3785c4096f31f5ce84ac249b1ad5e97fbf0dda629eab8b950fd08960ed8e3d6d2f59df6bf556dbecdb813bedb18138c49222d85a0a5612790d4daec9095da1cd8a5aa0b0dfa22aab87f265edb889e80081055a91e958f6b9a44c3a8c58ab6568b680f8c4f4ef86a257c4b09fb70a1af2a62c4056b0ef39741c4f737de99250e703baa79af63c746e079e265a7970e3b6db35bc679d5a614d66a8377ada037a8ffc73de07b9577948d36e2b295c9633d0ecd899db090f07690574041b2a69968238e8b73e72da29c28c3bdf3f5c2e16d4d71ac99720fe9eb97825a5df890a1b421be094aa8d911f672a4622a0af7346a96e76044566346ef2f69f0a7c64bfd79825f40a990fa23f22b343508daf40363c21be6f42df70469783b94779c8a7323a9e38188aebb71ddd06161492a92e7e4cf3128aa5c2c1e24f99ccc67be5ce7edddd347a3b1feaf40bca36b3e22c831a37b8d1395e4173e33123bbfbc31be3f73c09a15f82259cbf7da9b4d48b0c530dce5b7a86553bf1f98a7bf7de06a9f9992c59f33f02770f697b5943d7f941e5f9e5b9d7c99895d07813d3c11d419399d14ebe29d62658ceec7395aa4458e5204118b690f171005a122e3fd9b4340ff56eed56cc06a841f4cc3c83c4886db1a515356b451f36676f33c4f393474d75455d8aa5005598832c9ca492fa952ea974b419bb3cc49a900c7aee223fb4bcec97efe8668a2bab7cb8e7b38ce4863516e5f96a058696da9bc58446a63ebc21bd10d3ef637ff577d4972458ef46f04f19dfb2a91b33face5d9d7e03c3febfaf9f779c744c5e5313b77e6b3882d2118624a3b6e0644117ebf8e4a38d7edd92ecc1291151cd8cda9880374267dd485716a90553b639d403fe2da121bf4e2325c20949c03d282ad68bac07ded50bb7e58f87e2ce3b5f325d4958997876c8f80ce156e3a374406a88a93ab07c000649bec5cb7baa525418cbbf8f5f7890cfd0269cf44a98f7a9af55e66096fc69f2e0697b4e2ae805099712c7977b68d87c073271f0128c18e002e00562ebcd3b5319fdb0ce590c28b05167f2e2f46a035cda757f3223f4b08d99348df219454e5c5d5911532068ccb0f05534aa7411ed37810fa09ebd682252ccb509a4c5981072856e085fc3f5aafa2d07267673409c7e951689492511de89afde785f7d049849f6af6f12e620faea4093b948167151c78d4e8645fc4bdce47eea178e280756d0cf6b322d076533002ccfba18d6cec62124b21fbddb4ff1fe426eefa", @ANYBLOB="163dbef70745b35e900bc8d134f5216850255301000000000000007a8d6da3ab358587f04f724ec87b56651c7ea04203069ab6275c2e8e9201259016f95def80318a5d00d88d18807a1c8928dfe1b457b66647cb02f311f48bba099b73f1d2047507ef62312b6746581f2234f67cfba393567680b6e38b07952e63651eaf5eabb3636fcf4f1fbd31e4607202a6037dfd42e17a5387ae64aa7657adbc47e2a65718bdf93fec71766ab9f4022924f2cace431ded3d1ccd2d6577765f83613dda5917a913c69d60efc1332a88ebd1674be0c8e0743f505a7c93b1124fdd6c5f0d69b05e", @ANYBLOB="1d000000062000", @ANYRES32, @ANYBLOB="fcd734c134a83248dbc53030a04b3687edebd7e31c95c0692817ad07059728013e8be3e60405d3faf487a9919abae639eb2045a3937ed1c18463ba1273d0b64a0ee6b9dae959f030dd0c0ec8204c52bd10e37407402ecb7fc5cec88cf3acf2543a813ad11d5a21845316e0260a826ea730d100d78fcc8bd1c2e99ef9871bead9a075e7dcf5350790f10e3f7f2af231df4a498efd1f55907684386f1058df5b834d1e96622b79fc8615d046ec260c202ab604e2d4fe3e51a008"], 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x40000, 0x19)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2810, 0x8, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @loopback, @multicast1}}}})

3.472342659s ago: executing program 0 (id=1056):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000ff, 0x0, 0x9}]})
r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x88, 0x3, [0x4000007, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x9]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x58, &(0x7f0000000340)={0x0, <r8=>0x0}}, 0x10)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r8}, 0xc)
close(r9)
r10 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
write$binfmt_elf32(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69)
close(r10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r11=>0xffffffffffffffff})
fcntl$setsig(r11, 0xa, 0x100004)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl0\x00', <r12=>0x0, 0x29, 0x4, 0x8, 0xf, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7, 0x700, 0xffffff3b, 0x200}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xfffffff9, @remote, 0x8}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="5340ab0df0e2403d14f2410b102d0698ef6c5f709c46a29bc7bd0bcc79e3e7b1a7d5ae6ee6c5832a5373ef8cf6c6f9f05f920574f6b406a3ab6ca7cdb690370d47791ce9527556397a6e518ae5e0bc1373fff7e2d92a35eeb0cbfdc24f597df50f73af71ad2ab86e61e10cf2b55985dff4b138b3d2e1751d5f7b96b5ca60da298e816a2db81e50245b5a572ae9782f3204218877bfe418bf34821b17cb58fb6c16f2a87f4ef20e7bad731ee8", 0xac}, {&(0x7f0000000340)="722818e6cfca252b549bceb840aba996750d1a6289a9e6e122eb65ca66f0a41435dac22f155c19617d74b9014a9c9b470078fa81311c77b18f2c46bff2520f41e4a5fcff4506c559a5f04b7ad18d08394f87a1", 0x53}, {&(0x7f00000003c0)="18d563bf5e34002578c07cf22964", 0xe}, {&(0x7f0000000440)="04728f683c4616a95872eb9c7236292af68ae9af346f7e3851f62fdcfdfd6b6dad64d98cd437f930c9236367a23c8b372b387668ee1309597698ce7fa57ce7c5cda7932d6064a53d3fe627c63a99077c2056a7cfa6e10be6afb3164b61f146ff670d15d63741e26a4d3c3baaf41617ae8bc77054b8fd8b9b2c", 0x79}], 0x4, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @loopback}, r12}}}, @hoplimit={{0x14, 0x29, 0x34, 0x10001}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x5c, 0x7, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x28, {0x3, 0x8, 0x41, 0x5, [0x3, 0x9, 0xffff, 0x7]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x1, 0xe, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0xd8}}, {{&(0x7f00000006c0)={0xa, 0x4e24, 0xee, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000000700)="91abd62f528636d7e0aa17e813b29c1fc5f3985689c5ba47b6c929ba8104632d07db5badce401eeacb1d51373317216f8ec3a9742fa4b0832c0e3e93486da47eee76746816d1e029a4febd0ff2b627bbbed2dc047f2a4607f09e8b1328cc1835b4db10793e3731aa3a25c44dfe8ea649", 0x70}, {&(0x7f0000000780)="f429d5d1e0c1ead039ac62a72a311c5dc06ee9897065abb28c40e9", 0x1b}, {&(0x7f0000000900)="01b156917e7a7699ebd687249c99b0c5902a0d3523d8f0e9ef49b2c464a7e23aadf31226eed37c8cf67a0494315e2eb263be2477ab2dddb7b0f22ef4ebcf7350a0002e34dcc9899606f1575cb79ee89266a02d63", 0x54}, {&(0x7f0000000980)="16ed2ae93858e317a9355ce4b3e8de9ea52b2f1a070dc1fa21fe83f8f33d1fe00f639a924bd61c501aea1ec1cbc5bd5f01d634019747221a5816eac73386c225b5632e0246563b5c5ed1ffbe15717daa21f656c89f222b2bc8045b77f4d5209849f9b6d2c1a8d249bb2e5d9c2e506ae7a5c45564de999833a16d85f350e01b8d0658aba0ea5f0dfaa001184c23324e4958c5ed35a2b78c32e5baf8a2bb5a8c8ae5dac4ed5344", 0xa6}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f00000007c0)}, {&(0x7f0000001a40)="487261c1d2622fb1dcd1a68739d36023189b1105d719d349831344d8954d7456ef54d9063e1cff7ee68543d0a2178c8e4c3dd4d3ac01420acd75e1e5d95ad41f4ce37dd7e079303302569cbc10e7d6ddbc0f782b7553e2d989536f1ded09bdbd543a9328d1fb2a4e382af3861de3e8942c0a55100568aadcda06abd883618490d675dbe094698389", 0x88}, {&(0x7f0000001b00)="a628f7d3be11c6679bb6f5cc94b736fb96c48657ae3a506c23d14f7d40421e700686f0b8ca5760b104a9961e87a23e8a6d968b3256f1b001444d6d24376bc9cc26c261987f1c8606700e7b3dca17701d8a40470649bfd7a97e33ab16585f5d3c826381f2a605896f8dba36b021fefd268e1c90c1753b564ff1fa8942add844fbddfe7990d57e186fcfc163bdfb92133e5e298641ac36404be460d828b8b4f3ad59427c06488992e1dceee8f23587b80122b6312ac90319e1a27018ce637eed67b07309c614d4c0fc110dff91444d341412b4f3e919c9e5", 0xd7}, {&(0x7f0000001c00)="354323584e4e38d6fae161583652bed74801e425fce5e8afe7c2b77f922d860a0266667b2cf28d03e2b46423cf0d23332456c2bd86eff05a83aabeaf1d0a121c7276730a1e7f2f08660bcfa1fa08dfdc2d58578c902a1767f39d061d0f72a613f31d33c0e933f97b76772f1711cdd8787bd4cd11f6262758fe866179df181a1b9881549bfeb228f2de0bfb2160d3b17a0e109f3d9d763e5618ab7f49100134", 0x9f}], 0x9}}, {{&(0x7f0000001d80)={0xa, 0x4e20, 0x8, @remote, 0x81}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001dc0)="1eff5b2c9bf0045b4dff14d4adc29d9047b45be81044a4", 0x17}, {&(0x7f0000001e00)="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", 0xfd}], 0x2, &(0x7f0000001f40)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffff9}}], 0x18}}], 0x3, 0x20044094)

3.382145508s ago: executing program 4 (id=1057):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]})
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41050}, 0x20000090)
close(0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@float={0xf, 0x0, 0x0, 0x10, 0xc}, @volatile, @float={0x9, 0x0, 0x0, 0x10, 0x2}, @restrict={0x2, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30]}}, &(0x7f0000000580)=""/200, 0x4b, 0xc8, 0x1, 0x1}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000008000000080000000600000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000000000000000000050000000000000000000200"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x18)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000340)={0x7ff, 0xfff, 0x2, 0x4, 0x3, 0x272d})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x400c0c4)
r7 = openat$rtc(0xffffffffffffff9c, 0x0, 0x100, 0x0)
ioctl$RTC_AIE_OFF(r7, 0x7002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6c)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$sg(0x0, 0x0, 0x9840)

2.223905216s ago: executing program 4 (id=1058):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x13, 0xffffffffffffffff, 0x2000)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000"], 0x48)
r0 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=<r1=>0x0, &(0x7f0000000a40)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="30200000000804001c001a8018000a8014000700fe8800000000000000000000000001011400350062617461647630000000000000000000"], 0x50}}, 0x20004400)
mount(&(0x7f0000000200)=@filename='./file0/../file0/../file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.223251516s ago: executing program 5 (id=1059):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) (async)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000240)="3e11c2e1e6cf8b6fd990c35952a4853597e37298", 0x14) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x6, 0x6, 0x7abec691, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) (async, rerun: 32)
setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) (async)
copy_file_range(r2, &(0x7f0000000180), r3, &(0x7f00000001c0)=0xb, 0x2, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000, 0x0) (async)
r4 = openat$cgroup_pressure(r2, &(0x7f0000000300)='memory.pressure\x00', 0x2, 0x0)
dup2(r0, r4) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48) (async)
ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f0000000080)={0x2, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000000), &(0x7f0000001200), 0x0})
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x44002, 0x0) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32)
sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x478c}}, 0x40c0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="8500000019000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94)
mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout}]}})

2.175903799s ago: executing program 0 (id=1060):
socket(0x10, 0x3, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
socket(0x1d, 0x6, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20)
close_range(r6, r6, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r7 = dup(r1)
read$FUSE(r7, &(0x7f0000003c40)={0x2020}, 0xffffff0a)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000800)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x3c4, 0x64, 0xf31, 0xfffffff8, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {}, {0xb, 0xffff}, {0x0, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x56}, @TCA_RATE={0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x370, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0xffff}}, @TCA_BPF_ACT={0x358, 0x1, [@m_mirred={0x1c8, 0x13, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x20000000, 0x91f, 0x10}, 0x0, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x80000000, 0x1504f8488feace7, 0x1, 0x3}, 0x9d8eaa97624cadee, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x0, 0x9, 0x7}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x81, 0x1, 0x7fffffff, 0x8}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4, 0x1000, 0xc}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa6, 0x7, 0x20000000, 0x9, 0x31}, 0x1, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xf, 0x3, 0x0, 0x80}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8000, 0x3, 0x6, 0x7}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x7, 0xe, 0x101, 0xfffffffa}, 0x3}}]}, {0x79, 0x6, "740465f7694b1c4ee4b80b82cad36fdc2a5ae78a6bf2e360f4539bcd7b8509d541c6fc7cc98fee417f05e88ebdf2e0537b4be8dff71676d8deff67d420df7986f7e5641de351e51cb45a3e8eebe4b41674b983c4fd4e0d4b223dc88d79f94753ccb21f50457fde45e41467e23eb3eb63db78bee765"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0xc8, 0x5, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x169}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc19}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb84}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x7fff, 0x1, 0x6, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfae}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8b7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x48, 0x6, "c8edf11c48e2ae6fe20569913dd7bea0adc9158b88fbc436736f26bbb0d41c0e1ddac5c24974944912cba1bc34f8e8a0a4e629f190d1b140c5d56bc4a80bba8fb7ea025d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0xc4, 0x11, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x11, 0x862, 0x3, 0x9, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x232a, 0x7}}]}, {0x72, 0x6, "e584160f883b90ca7a3f1399d5a43a84fcf4aab052a0b61f043cda2c4184be0b9c5dfe9e8077f2b6e78109f2c8427bda4d048aa8630c3ed9fb3d7add20e8e7a25ade0929d37c69c5a2993d82fbe23ac1324a37fea4c18c63b480416e456165780fac7bbce5ed5a608c7800e98e14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x9}}, @TCA_RATE={0x6, 0x5, {0x30, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0xd2b}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4000840}, 0x48800)

664.279671ms ago: executing program 0 (id=1061):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000024000180060005004e2300000600010002000000080003"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
mq_notify(0xffffffffffffffff, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents(r10, &(0x7f0000000400)=""/132, 0x84)

592.025511ms ago: executing program 5 (id=1062):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) (rerun: 64)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x13)
ioctl$TCFLSH(r2, 0x400455c8, 0x4) (async)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x32) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 64)
syz_open_procfs(0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)

231.276175ms ago: executing program 0 (id=1063):
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x12, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}}, 0x14}}, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) (async)
unshare(0x2c020400) (async, rerun: 32)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000040a03000000000000090000020000050900010073797a3000000000de1923d4d2d79434f7a81620c49788abc538ecab7472a71a2171f98a4d7f341e27f4847fe1a68e2f1af448e0b29ebfb41a2941535750676f7547d2ea7c2185f4a9594da7b9a27bf0"], 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x4008000)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x5, 0x3abc50, 0x2c8240}) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async)
mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2)
mbind(&(0x7f0000978000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000000000000, 0x2) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'gretap0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000003480)={@multicast2, @remote}, &(0x7f00000034c0)=0xc)
prlimit64(0x0, 0x6, 0x0, 0xfffffffffffffffd) (async)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0xf11, 0x70bd2b, 0x25dfdbdf, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_PHYS_PORT_ID={0x24, 0x22, "396d170747c5b940c638639182bc5c6ca6bb39300a2defba41e8700fdb8c538b"}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0)

217.327273ms ago: executing program 1 (id=1064):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd700002dcdf2501000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00020001000000010001000c"], 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x0)
syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1, &(0x7f0000000380)=""/3, 0x3}, 0x5}, {{&(0x7f0000000600)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000680)=""/119, 0x77}, {&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/133, 0x85}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/131, 0x83}, {&(0x7f0000001900)=""/89, 0x59}], 0x6}, 0x2}], 0x2, 0x20c2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000"/196], 0x119)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$cgroup_int(r6, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.state\x00', 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x14)
sendfile(r8, r7, 0x0, 0x2000017)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

89.746296ms ago: executing program 4 (id=1065):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b1b378bcbf5a202"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe)
r1 = creat(&(0x7f0000000340)='./file0\x00', 0x80)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x20042, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r4, &(0x7f0000004280)={0x2020}, 0x2020)
writev(r4, &(0x7f0000002140)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000001c0)=<r7=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, r7, 0x0, &(0x7f0000000240))
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

0s ago: executing program 6 (id=1066):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x11dbc08, 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
chdir(&(0x7f00000001c0)='./bus\x00') (async)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2)
unshare(0x0) (async)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

7295 uid=0 gid=0 ses=4294967295 subj=_ pid=7640 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a6d8ebe9 code=0x7ffc0000
[  254.448521][ T7667] tipc: Disabling bearer <eth:syzkaller0>
[  254.507607][   T30] audit: type=1326 audit(1755459845.078:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7640 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a6d8ebe9 code=0x7ffc0000
[  254.598546][   T30] audit: type=1326 audit(1755459845.078:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7640 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1a6d8ebe9 code=0x7ffc0000
[  255.780527][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  255.904652][ T7699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.042513][ T7699] tipc: Resetting bearer <eth:syzkaller0>
[  256.075882][ T5902] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  256.130114][ T7702] syzkaller0: entered promiscuous mode
[  256.152977][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'.
[  256.282947][ T7709] siw: device registration error -23
[  257.058597][ T5902] usb 2-1: device descriptor read/64, error -71
[  257.145302][ T7698] tipc: Resetting bearer <eth:syzkaller0>
[  257.204262][ T7698] tipc: Disabling bearer <eth:syzkaller0>
[  257.342206][ T7719] siw: device registration error -23
[  257.941171][ T5902] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  258.312663][ T7718] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  258.312663][ T7718]    program syz.3.440 not setting count and/or reply_len properly
[  258.497095][ T7731] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.444'.
[  258.615811][ T7735] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  258.615811][ T7735]    program syz.3.445 not setting count and/or reply_len properly
[  258.616961][ T5938] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  258.696875][ T5834] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  259.060231][ T5938] usb 1-1: Using ep0 maxpacket: 16
[  259.133035][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  259.255315][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  259.266603][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  259.276647][ T5938] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  259.700930][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  259.815517][ T5938] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  259.824690][ T5938] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  259.856073][ T5834] usb 5-1: unable to get BOS descriptor or descriptor too short
[  259.873291][ T5938] usb 1-1: Manufacturer: syz
[  259.881285][ T5834] usb 5-1: not running at top speed; connect to a high speed hub
[  259.890978][ T5834] usb 5-1: config 9 has an invalid interface number: 73 but max is 0
[  259.905360][ T5834] usb 5-1: config 9 has no interface number 0
[  259.912855][ T5938] usb 1-1: config 0 descriptor??
[  259.918644][ T5834] usb 5-1: config 9 interface 73 has no altsetting 0
[  259.940302][ T5834] usb 5-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=6b.f1
[  259.980851][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.016548][ T5834] usb 5-1: Product: syz
[  260.020815][ T5834] usb 5-1: Manufacturer: syz
[  260.076902][ T5834] usb 5-1: SerialNumber: syz
[  260.779970][ T5834] gspca_main: t613-2.14.0 probing 17a1:0128
[  260.805654][ T5834] gspca_t613: unknown sensor 0000
[  260.810839][ T5834] t613 5-1:9.73: probe with driver t613 failed with error -22
[  261.005016][ T5834] usb 5-1: USB disconnect, device number 14
[  261.235360][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  261.235404][   T30] audit: type=1326 audit(1755459854.098:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7744 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00578ebe9 code=0x7ffc0000
[  261.782613][   T30] audit: type=1326 audit(1755459854.098:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7744 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00578ebe9 code=0x7ffc0000
[  261.900355][ T5938] rc_core: IR keymap rc-hauppauge not found
[  261.918157][ T5938] Registered IR keymap rc-empty
[  261.923500][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  261.944928][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  261.997138][ T5938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  262.009850][   T30] audit: type=1326 audit(1755459854.108:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7744 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fa00578ebe9 code=0x7ffc0000
[  262.105357][ T5938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6
[  262.131726][   T30] audit: type=1326 audit(1755459854.108:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7744 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00578ebe9 code=0x7ffc0000
[  263.433770][   T30] audit: type=1326 audit(1755459854.108:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7744 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00578ebe9 code=0x7ffc0000
[  264.229957][   T30] audit: type=1326 audit(1755459854.108:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7744 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fa00578ebe9 code=0x7ffc0000
[  264.242075][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  264.293990][   T30] audit: type=1326 audit(1755459854.108:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7744 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00578ebe9 code=0x7ffc0000
[  264.349771][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  264.380927][ T7771] siw: device registration error -23
[  264.895060][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  265.059364][   T30] audit: type=1326 audit(1755459854.108:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7744 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00578ebe9 code=0x7ffc0000
[  265.299419][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  265.314863][   T30] audit: type=1326 audit(1755459854.108:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7744 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fa00578ebe9 code=0x7ffc0000
[  265.339901][   T30] audit: type=1326 audit(1755459854.108:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7744 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00578ebe9 code=0x7ffc0000
[  265.355672][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  265.403041][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  265.434987][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  265.469064][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  265.525119][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  265.575548][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  265.597928][ T7780] tmpfs: Unknown parameter 'subj_user'
[  265.657417][ T5938] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  265.709852][ T5938] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  265.745912][   T43] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  265.780521][ T5938] usb 1-1: USB disconnect, device number 18
[  265.805013][ T3418] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  265.821092][ T7790] x_tables: duplicate underflow at hook 1
[  265.976432][   T43] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  265.989857][   T43] usb 5-1: config 0 has no interface number 0
[  266.012606][   T43] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  266.023828][ T3418] usb 4-1: Using ep0 maxpacket: 16
[  266.044193][   T43] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  266.085898][ T3418] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  266.094133][ T3418] usb 4-1: config 0 has no interface number 0
[  266.112235][   T43] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  266.144853][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.152918][   T43] usb 5-1: Product: syz
[  266.157270][ T3418] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.195033][   T43] usb 5-1: Manufacturer: syz
[  266.199706][   T43] usb 5-1: SerialNumber: syz
[  266.227954][ T3418] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  266.240771][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'.
[  266.266000][   T43] usb 5-1: config 0 descriptor??
[  266.288988][ T3418] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  266.318150][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.456'.
[  266.325242][ T7776] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  266.334506][ T7776] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  266.364879][ T3418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.388304][   T43] smsc95xx v2.0.0
[  266.453394][ T3418] usb 4-1: config 0 descriptor??
[  266.538911][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'.
[  266.586095][ T7776] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  266.605652][ T7776] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  266.687180][ T5844] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  266.841457][   T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  266.859744][ T5844] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  266.869234][   T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  266.884435][ T5844] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  266.889980][ T5938] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  266.909490][ T5844] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  266.942006][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'.
[  266.943856][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  266.991962][ T5844] usb 3-1: SerialNumber: syz
[  267.089097][ T5938] usb 2-1: Using ep0 maxpacket: 32
[  267.131723][   T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  267.185714][   T43] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61
[  267.246501][ T5844] usb 3-1: bad CDC descriptors
[  267.494557][ T5938] usb 2-1: unable to get BOS descriptor or descriptor too short
[  267.504949][ T3418] uclogic 0003:28BD:0071.0008: pen parameters not found
[  267.516474][ T3418] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring
[  267.537821][ T5938] usb 2-1: unable to read config index 0 descriptor/start: -71
[  267.550106][ T5938] usb 2-1: can't read configurations, error -71
[  268.075241][ T7829] tap0: tun_chr_ioctl cmd 1074025681
[  268.511106][   T10] usb 5-1: USB disconnect, device number 15
[  268.812685][ T5844] usb 4-1: USB disconnect, device number 21
[  269.528652][ T3418] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  269.878788][ T7843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.912000][ T7843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.521199][ T3418] usb 5-1: unable to get BOS descriptor or descriptor too short
[  271.740327][ T3418] usb 5-1: unable to read config index 0 descriptor/start: -71
[  271.753779][ T3418] usb 5-1: can't read configurations, error -71
[  271.801867][   T43] usb 3-1: USB disconnect, device number 11
[  272.180006][ T7864] siw: device registration error -23
[  273.078545][   T43] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  273.425071][   T43] usb 3-1: config 0 has an invalid interface number: 175 but max is 0
[  273.498483][ T7871] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  273.498483][ T7871]    program syz.3.469 not setting count and/or reply_len properly
[  273.515427][   T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.570434][   T43] usb 3-1: config 0 has no interface number 0
[  273.581487][   T43] usb 3-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[  273.844413][   T43] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[  274.365083][   T43] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  274.375971][   T43] usb 3-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  274.394547][   T43] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b
[  274.594860][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.633346][   T43] usb 3-1: Product: syz
[  274.653538][   T43] usb 3-1: Manufacturer: syz
[  274.666115][   T43] usb 3-1: SerialNumber: syz
[  274.685838][ T7883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.472'.
[  274.704077][   T43] usb 3-1: config 0 descriptor??
[  274.729006][   T43] symbolserial 3-1:0.175: symbol converter detected
[  274.782119][   T43] usb 3-1: symbol converter now attached to ttyUSB0
[  274.943324][   T10] usb 3-1: USB disconnect, device number 12
[  275.018582][   T10] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  275.028528][   T10] symbolserial 3-1:0.175: device disconnected
[  275.460011][   T43] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  275.593096][ T7910] siw: device registration error -23
[  275.693476][   T43] usb 4-1: config 0 has an invalid interface number: 76 but max is 0
[  275.913284][   T43] usb 4-1: config 0 has no interface number 0
[  276.061735][   T43] usb 4-1: config 0 interface 76 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  276.474815][   T43] usb 4-1: config 0 interface 76 has no altsetting 0
[  276.504613][   T43] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=e6.39
[  276.524821][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.532984][   T43] usb 4-1: Product: syz
[  276.558878][   T43] usb 4-1: Manufacturer: syz
[  276.585830][   T43] usb 4-1: SerialNumber: syz
[  276.647002][ T7919] loop6: detected capacity change from 0 to 524287999
[  277.445309][ T7923] netlink: 36 bytes leftover after parsing attributes in process `syz.0.483'.
[  277.494494][   T43] usb 4-1: config 0 descriptor??
[  277.563362][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'.
[  277.965281][ T5853] Bluetooth: unknown link type 48
[  277.970701][ T5853] Bluetooth: hci1: connection err: -111
[  278.217397][ T7895] overlayfs: missing 'lowerdir'
[  278.237342][ T7925] netlink: 36 bytes leftover after parsing attributes in process `syz.0.483'.
[  278.401497][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'.
[  278.572822][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'.
[  278.919617][ T7927] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  278.928709][ T7927] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  278.937525][ T7927] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  278.946277][ T7927] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  279.078689][ T7927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'.
[  279.144994][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  279.212040][   T43] kvaser_usb 4-1:0.76: error -ENODEV: Cannot get usb endpoint(s)
[  279.285193][   T43] usb 4-1: USB disconnect, device number 22
[  279.362587][   T10] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  279.394125][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.430704][   T10] usb 2-1: config 0 descriptor??
[  281.105167][ T5895] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  281.286500][ T5895] usb 4-1: Using ep0 maxpacket: 32
[  281.309951][ T5895] usb 4-1: config 0 has an invalid interface number: 126 but max is 0
[  281.323996][ T5895] usb 4-1: config 0 has no interface number 0
[  281.344096][ T5895] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  281.377586][   T10] pegasus 2-1:0.0: probe with driver pegasus failed with error -32
[  281.400906][ T5895] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  281.421692][ T5895] usb 4-1: config 0 interface 126 has no altsetting 0
[  281.434276][ T5895] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  281.454459][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.462969][ T5895] usb 4-1: Product: syz
[  281.477748][ T5895] usb 4-1: Manufacturer: syz
[  281.482406][ T5895] usb 4-1: SerialNumber: syz
[  281.495396][ T5902] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  281.519520][ T5895] usb 4-1: config 0 descriptor??
[  281.536465][ T7948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  281.554149][ T7948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  281.676067][ T5902] usb 5-1: Using ep0 maxpacket: 8
[  281.694563][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.715067][ T5902] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  281.750468][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  281.774015][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  281.800370][ T5902] usb 5-1: SerialNumber: syz
[  281.929577][ T5902] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  281.947944][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout
[  281.980591][ T5902] cdc_acm 5-1:1.0: This needs exactly 3 endpoints
[  281.999986][ T5895] ir_usb 4-1:0.126: IR Dongle converter detected
[  282.017153][ T5902] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22
[  282.203020][ T5895] usb 4-1: IRDA class descriptor not found, device not bound
[  282.295085][ T7959] loop6: detected capacity change from 0 to 524287999
[  282.364325][ T7961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.491'.
[  282.389629][ T7962] siw: device registration error -23
[  282.470649][ T5938] usb 2-1: USB disconnect, device number 15
[  283.096413][ T7948] 9pnet_fd: Insufficient options for proto=fd
[  283.126346][ T5895] usb 4-1: USB disconnect, device number 23
[  284.422072][ T5956] usb 5-1: USB disconnect, device number 18
[  284.674973][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  284.683625][ T7978] batadv_slave_1: entered promiscuous mode
[  284.698316][ T7981] netlink: 'syz.0.497': attribute type 1 has an invalid length.
[  284.706183][ T7981] netlink: 'syz.0.497': attribute type 2 has an invalid length.
[  284.716432][ T7981] netlink: 'syz.0.497': attribute type 1 has an invalid length.
[  284.724278][ T7981] netlink: 'syz.0.497': attribute type 2 has an invalid length.
[  284.727378][ T7980] i2c i2c-0: Invalid block write size 34
[  284.740106][ T7978] netlink: 'syz.2.499': attribute type 1 has an invalid length.
[  284.811962][ T7978] 8021q: adding VLAN 0 to HW filter on device bond1
[  284.866364][   T10] usb 2-1: Using ep0 maxpacket: 32
[  284.884972][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.914856][ T5956] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  284.929106][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.014366][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  285.034893][   T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  285.056276][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.064867][ T5956] usb 5-1: Using ep0 maxpacket: 32
[  285.076241][   T10] usb 2-1: config 0 descriptor??
[  285.103748][   T10] usbhid 2-1:0.0: can't add hid device: -22
[  285.116950][ T5956] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  285.119577][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  285.217231][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.266555][ T5956] usb 5-1: config 0 descriptor??
[  285.341125][ T5956] gspca_main: nw80x-2.14.0 probing 055f:d001
[  285.349934][   T10] usb 2-1: USB disconnect, device number 16
[  285.502083][ T7985] batadv_slave_1: left promiscuous mode
[  285.522643][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.541578][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.573937][ T5956] gspca_nw80x: reg_w err -71
[  285.605063][ T5956] nw80x 5-1:0.0: probe with driver nw80x failed with error -71
[  285.773341][ T5956] usb 5-1: USB disconnect, device number 19
[  287.171885][ T8008] siw: device registration error -23
[  287.235830][ T8007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.504'.
[  287.294955][ T8007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.504'.
[  289.100606][ T8015] netlink: 'syz.4.509': attribute type 1 has an invalid length.
[  289.244351][ T8019] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  289.774013][ T8015] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  290.315321][ T8033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.512'.
[  290.801166][ T8046] siw: device registration error -23
[  293.800936][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.521'.
[  293.810570][ T8065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.521'.
[  294.041308][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  294.464991][   T10] usb 2-1: Using ep0 maxpacket: 32
[  294.480664][   T10] usb 2-1: config 0 has an invalid descriptor of length 47, skipping remainder of the config
[  294.491226][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  294.498118][   T10] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00
[  295.368334][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.394469][   T10] usb 2-1: config 0 descriptor??
[  295.438937][   T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  296.526043][ T8082] loop6: detected capacity change from 0 to 524287999
[  296.544237][ T8082] netlink: 40 bytes leftover after parsing attributes in process `syz.2.524'.
[  298.887763][ T8087] loop7: detected capacity change from 0 to 7
[  298.937205][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  298.948724][   T43] usb 2-1: USB disconnect, device number 17
[  298.982982][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  298.992366][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  299.004769][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  299.013992][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  299.026470][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  299.035768][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  299.055021][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  299.064215][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  299.081285][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  299.090598][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  299.312735][ T8098] siw: device registration error -23
[  300.182624][ T8102] overlay: Unknown parameter 'aŠFWy3'
[  300.231577][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.531'.
[  300.409839][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'.
[  301.072164][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'.
[  301.352223][ T8126] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  301.352223][ T8126]    program syz.1.534 not setting count and/or reply_len properly
[  302.731112][ T8140] loop6: detected capacity change from 0 to 524287999
[  302.748813][ T8140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.538'.
[  303.411673][ T8138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.537'.
[  303.956458][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.967831][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.226516][ T8149] siw: device registration error -23
[  304.272129][ T5895] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  305.256348][ T5844] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  305.369588][ T8158] FAULT_INJECTION: forcing a failure.
[  305.369588][ T8158] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  305.383175][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.4.543 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  305.383203][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  305.383215][ T8158] Call Trace:
[  305.383223][ T8158]  <TASK>
[  305.383232][ T8158]  dump_stack_lvl+0x189/0x250
[  305.383263][ T8158]  ? __pfx____ratelimit+0x10/0x10
[  305.383287][ T8158]  ? __pfx_dump_stack_lvl+0x10/0x10
[  305.383317][ T8158]  ? __pfx__printk+0x10/0x10
[  305.383344][ T8158]  ? __might_fault+0xb0/0x130
[  305.383380][ T8158]  should_fail_ex+0x414/0x560
[  305.383407][ T8158]  _copy_from_user+0x2d/0xb0
[  305.383437][ T8158]  __sys_bpf+0x1ed/0x860
[  305.383469][ T8158]  ? __pfx___sys_bpf+0x10/0x10
[  305.383514][ T8158]  ? ksys_write+0x22a/0x250
[  305.383537][ T8158]  ? __pfx_ksys_write+0x10/0x10
[  305.383566][ T8158]  __x64_sys_bpf+0x7c/0x90
[  305.383593][ T8158]  do_syscall_64+0xfa/0x3b0
[  305.383617][ T8158]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.383636][ T8158]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  305.383655][ T8158]  ? clear_bhb_loop+0x60/0xb0
[  305.383680][ T8158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.383699][ T8158] RIP: 0033:0x7fbaf198ebe9
[  305.383718][ T8158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.383736][ T8158] RSP: 002b:00007fbaefbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  305.383757][ T8158] RAX: ffffffffffffffda RBX: 00007fbaf1bb6180 RCX: 00007fbaf198ebe9
[  305.383772][ T8158] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005
[  305.383785][ T8158] RBP: 00007fbaefbd5090 R08: 0000000000000000 R09: 0000000000000000
[  305.383798][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.383809][ T8158] R13: 00007fbaf1bb6218 R14: 00007fbaf1bb6180 R15: 00007ffcbda30f28
[  305.383851][ T8158]  </TASK>
[  305.715872][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.727757][ T5844] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  305.737223][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.750643][ T5844] usb 1-1: config 0 descriptor??
[  306.832940][ T5943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.478529][ T5943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.948102][ T5943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.608260][ T5943] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.784902][ T8188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.555'.
[  309.117387][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  309.129906][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  309.138453][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  309.150269][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  309.158384][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  309.336532][ T5943] bridge_slave_1: left allmulticast mode
[  309.368203][ T5943] bridge_slave_1: left promiscuous mode
[  309.375825][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.488481][ T5943] bridge_slave_0: left allmulticast mode
[  309.494211][ T5943] bridge_slave_0: left promiscuous mode
[  309.564651][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.014262][ T8211] FAULT_INJECTION: forcing a failure.
[  310.014262][ T8211] name failslab, interval 1, probability 0, space 0, times 1
[  310.027422][ T8211] CPU: 1 UID: 0 PID: 8211 Comm: syz.0.557 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  310.027449][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  310.027460][ T8211] Call Trace:
[  310.027468][ T8211]  <TASK>
[  310.027476][ T8211]  dump_stack_lvl+0x189/0x250
[  310.027505][ T8211]  ? __pfx____ratelimit+0x10/0x10
[  310.027528][ T8211]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.027560][ T8211]  ? __pfx__printk+0x10/0x10
[  310.027593][ T8211]  ? __pfx___might_resched+0x10/0x10
[  310.027621][ T8211]  should_fail_ex+0x414/0x560
[  310.027649][ T8211]  should_failslab+0xa8/0x100
[  310.027674][ T8211]  __kmalloc_cache_node_noprof+0x73/0x3d0
[  310.027696][ T8211]  ? __get_vm_area_node+0x13f/0x300
[  310.027723][ T8211]  __get_vm_area_node+0x13f/0x300
[  310.027748][ T8211]  __vmalloc_node_range_noprof+0x301/0x12f0
[  310.027771][ T8211]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  310.027804][ T8211]  ? is_bpf_text_address+0x26/0x2b0
[  310.027845][ T8211]  ? __lock_acquire+0xab9/0xd20
[  310.027871][ T8211]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  310.027891][ T8211]  ? finish_task_switch+0x18b/0x950
[  310.027932][ T8211]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  310.027958][ T8211]  __vmalloc_noprof+0xb1/0xf0
[  310.027981][ T8211]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  310.028015][ T8211]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  310.028049][ T8211]  bpf_prog_alloc+0x3c/0x1a0
[  310.028083][ T8211]  bpf_prog_load+0x735/0x1930
[  310.028128][ T8211]  ? __pfx_bpf_prog_load+0x10/0x10
[  310.028183][ T8211]  ? bpf_lsm_bpf+0x9/0x20
[  310.028206][ T8211]  ? security_bpf+0x7e/0x300
[  310.028233][ T8211]  __sys_bpf+0x5f1/0x860
[  310.028264][ T8211]  ? __pfx___sys_bpf+0x10/0x10
[  310.028336][ T8211]  __x64_sys_bpf+0x7c/0x90
[  310.028365][ T8211]  do_syscall_64+0xfa/0x3b0
[  310.028386][ T8211]  ? lockdep_hardirqs_on+0x9c/0x150
[  310.028407][ T8211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.028427][ T8211]  ? clear_bhb_loop+0x60/0xb0
[  310.028452][ T8211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.028470][ T8211] RIP: 0033:0x7f584358ebe9
[  310.028489][ T8211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.028506][ T8211] RSP: 002b:00007f58443b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  310.028529][ T8211] RAX: ffffffffffffffda RBX: 00007f58437b6180 RCX: 00007f584358ebe9
[  310.028551][ T8211] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005
[  310.028564][ T8211] RBP: 00007f58443b5090 R08: 0000000000000000 R09: 0000000000000000
[  310.028577][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.028590][ T8211] R13: 00007f58437b6218 R14: 00007f58437b6180 R15: 00007ffc5233fec8
[  310.028622][ T8211]  </TASK>
[  310.028843][ T8211] syz.0.557: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  310.320946][ T8211] CPU: 1 UID: 0 PID: 8211 Comm: syz.0.557 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  310.320973][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  310.320985][ T8211] Call Trace:
[  310.320994][ T8211]  <TASK>
[  310.321003][ T8211]  dump_stack_lvl+0x189/0x250
[  310.321033][ T8211]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  310.321064][ T8211]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.321085][ T8211]  ? __pfx__printk+0x10/0x10
[  310.321111][ T8211]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  310.321137][ T8211]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  310.321171][ T8211]  warn_alloc+0x214/0x310
[  310.321203][ T8211]  ? __pfx_warn_alloc+0x10/0x10
[  310.321228][ T8211]  ? __get_vm_area_node+0x13f/0x300
[  310.321254][ T8211]  ? __get_vm_area_node+0x2b5/0x300
[  310.321284][ T8211]  __vmalloc_node_range_noprof+0x326/0x12f0
[  310.321310][ T8211]  ? is_bpf_text_address+0x26/0x2b0
[  310.321351][ T8211]  ? __lock_acquire+0xab9/0xd20
[  310.321376][ T8211]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  310.321413][ T8211]  ? finish_task_switch+0x18b/0x950
[  310.321455][ T8211]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  310.321484][ T8211]  __vmalloc_noprof+0xb1/0xf0
[  310.321512][ T8211]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  310.321546][ T8211]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  310.321583][ T8211]  bpf_prog_alloc+0x3c/0x1a0
[  310.321617][ T8211]  bpf_prog_load+0x735/0x1930
[  310.321660][ T8211]  ? __pfx_bpf_prog_load+0x10/0x10
[  310.321726][ T8211]  ? bpf_lsm_bpf+0x9/0x20
[  310.321749][ T8211]  ? security_bpf+0x7e/0x300
[  310.321775][ T8211]  __sys_bpf+0x5f1/0x860
[  310.321805][ T8211]  ? __pfx___sys_bpf+0x10/0x10
[  310.321869][ T8211]  __x64_sys_bpf+0x7c/0x90
[  310.321897][ T8211]  do_syscall_64+0xfa/0x3b0
[  310.321918][ T8211]  ? lockdep_hardirqs_on+0x9c/0x150
[  310.321939][ T8211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.321957][ T8211]  ? clear_bhb_loop+0x60/0xb0
[  310.321981][ T8211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.322001][ T8211] RIP: 0033:0x7f584358ebe9
[  310.322019][ T8211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.322037][ T8211] RSP: 002b:00007f58443b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  310.322058][ T8211] RAX: ffffffffffffffda RBX: 00007f58437b6180 RCX: 00007f584358ebe9
[  310.322073][ T8211] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005
[  310.322085][ T8211] RBP: 00007f58443b5090 R08: 0000000000000000 R09: 0000000000000000
[  310.322097][ T8211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.322110][ T8211] R13: 00007f58437b6218 R14: 00007f58437b6180 R15: 00007ffc5233fec8
[  310.322143][ T8211]  </TASK>
[  310.322177][ T8211] Mem-Info:
[  310.598784][ T8211] active_anon:3132 inactive_anon:11773 isolated_anon:0
[  310.598784][ T8211]  active_file:13438 inactive_file:38882 isolated_file:0
[  310.598784][ T8211]  unevictable:768 dirty:60 writeback:0
[  310.598784][ T8211]  slab_reclaimable:10216 slab_unreclaimable:115173
[  310.598784][ T8211]  mapped:35236 shmem:9975 pagetables:1328
[  310.598784][ T8211]  sec_pagetables:0 bounce:0
[  310.598784][ T8211]  kernel_misc_reclaimable:0
[  310.598784][ T8211]  free:1294031 free_pcp:19705 free_cma:0
[  310.644598][ T8211] Node 0 active_anon:12528kB inactive_anon:47092kB active_file:53552kB inactive_file:155528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140944kB dirty:240kB writeback:0kB shmem:38364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12364kB pagetables:5176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  310.679552][ T8211] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  310.711926][ T8211] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  310.741191][ T8211] lowmem_reserve[]: 0 2500 2502 2502 2502
[  310.747129][ T8211] Node 0 DMA32 free:1256980kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12524kB inactive_anon:47148kB active_file:51776kB inactive_file:155468kB unevictable:1536kB writepending:240kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:61024kB local_pcp:21928kB free_cma:0kB
[  310.747195][ T8211] lowmem_reserve[]: 0 0 1 1 1
[  310.747240][ T8211] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1776kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB
[  310.747298][ T8211] lowmem_reserve[]: 0 0 0 0 0
[  310.747344][ T8211] Node 1 Normal free:3903776kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17160kB local_pcp:7776kB free_cma:0kB
[  310.747401][ T8211] lowmem_reserve[]: 0 0 0 0 0
[  310.747447][ T8211] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  310.747595][ T8211] Node 0 DMA32: 409*4kB (UE) 44*8kB (UME) 47*16kB (UME) 42*32kB (UME) 40*64kB (UME) 44*128kB (UE) 68*256kB (UME) 43*512kB (UME) 19*1024kB (UM) 3*2048kB (U) 288*4096kB (UM) = 1256948kB
[  310.747797][ T8211] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  310.747924][ T8211] Node 1 Normal: 182*4kB (U) 55*8kB (UME) 41*16kB (UME) 108*32kB (UME) 32*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UM) 1*1024kB (M) 0*2048kB 950*4096kB (M) = 3903776kB
[  310.748121][ T8211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  310.748138][ T8211] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  310.748155][ T8211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  310.748173][ T8211] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  310.748191][ T8211] 62291 total pagecache pages
[  310.748201][ T8211] 0 pages in swap cache
[  310.748209][ T8211] Free swap  = 124996kB
[  310.748218][ T8211] Total swap = 124996kB
[  310.748228][ T8211] 2097051 pages RAM
[  310.748236][ T8211] 0 pages HighMem/MovableOnly
[  310.748245][ T8211] 424695 pages reserved
[  310.748255][ T8211] 0 pages cma reserved
[  311.225444][ T5848] Bluetooth: hci1: command tx timeout
[  311.319834][ T5844] usbhid 1-1:0.0: can't add hid device: -32
[  311.326373][ T5844] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  311.606585][ T8226] fuse: Bad value for 'user_id'
[  311.611601][ T8226] fuse: Bad value for 'user_id'
[  311.796749][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.853137][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.868801][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.879982][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.889387][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  312.623024][ T8242] loop6: detected capacity change from 0 to 524287999
[  312.637945][ T8242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.563'.
[  313.317487][ T5853] Bluetooth: hci1: command tx timeout
[  313.506543][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.605938][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.621439][ T5943] bond0 (unregistering): Released all slaves
[  313.755474][ T5943] bond1 (unregistering): Released all slaves
[  313.770405][ T8189] lo speed is unknown, defaulting to 1000
[  313.791845][ T8191] siw: device registration error -23
[  313.944906][ T5853] Bluetooth: hci3: command tx timeout
[  313.989580][ T8228] lo speed is unknown, defaulting to 1000
[  314.277955][ T5943] tipc: Disabling bearer <udp:s>
[  314.298782][ T5943] tipc: Left network mode
[  315.382487][ T5853] Bluetooth: hci1: command tx timeout
[  315.409844][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.468381][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.314338][ T5853] Bluetooth: hci3: command tx timeout
[  316.645082][ T8253] lo speed is unknown, defaulting to 1000
[  317.106149][   T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  317.220540][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.293001][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.319375][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  317.329336][ T5943] hsr_slave_0: left promiscuous mode
[  317.334815][   T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  317.334846][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.345825][   T10] usb 2-1: config 0 descriptor??
[  317.400821][ T5943] hsr_slave_1: left promiscuous mode
[  317.418701][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  317.439781][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.455306][ T5853] Bluetooth: hci1: command tx timeout
[  317.463757][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.472019][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  317.521947][ T5943] veth1_macvtap: left promiscuous mode
[  317.537787][ T5943] veth0_macvtap: left promiscuous mode
[  317.553563][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  317.553583][   T30] audit: type=1326 audit(1755459910.478:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584358ebe9 code=0x7ffc0000
[  317.585416][ T5943] veth1_vlan: left promiscuous mode
[  317.607420][ T5943] veth0_vlan: left promiscuous mode
[  317.633919][   T30] audit: type=1326 audit(1755459910.478:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f584358ebe9 code=0x7ffc0000
[  317.658255][   T30] audit: type=1326 audit(1755459910.508:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584358ebe9 code=0x7ffc0000
[  317.680486][   T30] audit: type=1326 audit(1755459910.508:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584358ebe9 code=0x7ffc0000
[  317.702442][   T30] audit: type=1326 audit(1755459910.518:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f584358ebe9 code=0x7ffc0000
[  317.725159][   T30] audit: type=1326 audit(1755459910.518:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584358ebe9 code=0x7ffc0000
[  317.772716][   T30] audit: type=1326 audit(1755459910.518:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584358ebe9 code=0x7ffc0000
[  317.796281][   T30] audit: type=1326 audit(1755459910.538:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f584358ebe9 code=0x7ffc0000
[  317.818223][   T30] audit: type=1326 audit(1755459910.538:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584358ebe9 code=0x7ffc0000
[  317.839712][   T10] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x3
[  317.839756][   T10] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x2
[  317.843906][   T10] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[  317.886636][   T30] audit: type=1326 audit(1755459910.538:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f584358ebe9 code=0x7ffc0000
[  318.037849][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  318.055283][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  318.071519][   T10] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device
[  318.150495][ T8304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'.
[  318.161103][ T8304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'.
[  318.170790][   T10] pyra 0003:1E7D:2CF6.0009: couldn't install mouse
[  318.210849][   T10] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71
[  318.223726][   T10] usb 2-1: USB disconnect, device number 18
[  318.356716][ T5853] Bluetooth: hci3: command tx timeout
[  319.092453][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  319.168593][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  319.281713][ T8308] siw: device registration error -23
[  320.428138][ T5853] Bluetooth: hci3: command tx timeout
[  320.434124][ T8228] chnl_net:caif_netlink_parms(): no params data found
[  321.759836][ T8326] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  321.759836][ T8326]    program syz.1.576 not setting count and/or reply_len properly
[  321.954624][ T8189] chnl_net:caif_netlink_parms(): no params data found
[  321.976436][ T8333] netlink: 40 bytes leftover after parsing attributes in process `syz.0.579'.
[  322.844280][ T8343] vivid-004: disconnect
[  322.850050][ T8343] vivid-004: reconnect
[  323.247975][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.256682][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.264054][ T8228] bridge_slave_0: entered allmulticast mode
[  323.273297][ T8228] bridge_slave_0: entered promiscuous mode
[  323.286518][ T5902] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  323.952617][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  323.952636][   T30] audit: type=1326 audit(1755459916.368:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8346 comm="syz.0.582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f584358ebe9 code=0x0
[  323.964890][ T8350] orangefs_mount: mount request failed with -4
[  324.020553][ T8359] usb 1-1: USB disconnect, device number 19
[  324.096542][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.103798][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.131537][ T8228] bridge_slave_1: entered allmulticast mode
[  324.151838][ T8228] bridge_slave_1: entered promiscuous mode
[  324.194808][ T5902] usb 5-1: Using ep0 maxpacket: 32
[  324.210817][ T5902] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  324.256206][ T5902] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  324.305987][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0
[  324.474381][ T5902] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e
[  324.492133][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.510710][ T5902] usb 5-1: Product: syz
[  324.564945][ T8372] siw: device registration error -23
[  325.249412][ T5902] usb 5-1: Manufacturer: syz
[  325.254075][ T5902] usb 5-1: SerialNumber: syz
[  325.256637][ T8228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.268890][ T5902] usb 5-1: config 0 descriptor??
[  325.518366][ T5902] gs_usb 5-1:0.0: Couldn't send data format (err=-71)
[  325.529656][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.553598][ T5902] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  325.563927][ T8189] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.582404][ T8189] bridge_slave_0: entered allmulticast mode
[  325.589505][ T5902] usb 5-1: USB disconnect, device number 20
[  325.599308][ T8189] bridge_slave_0: entered promiscuous mode
[  326.295683][ T8228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  326.500297][ T8189] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.509786][ T8189] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.522643][ T8189] bridge_slave_1: entered allmulticast mode
[  327.350616][ T8189] bridge_slave_1: entered promiscuous mode
[  327.607138][ T8391] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  327.607138][ T8391]    program syz.1.588 not setting count and/or reply_len properly
[  328.039727][ T8400] netlink: 'syz.4.592': attribute type 1 has an invalid length.
[  328.047743][ T8400] netlink: 224 bytes leftover after parsing attributes in process `syz.4.592'.
[  328.231459][ T8189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.438885][ T8228] team0: Port device team_slave_0 added
[  328.761595][ T5943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  328.774881][ T5943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.826233][ T8189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.817247][ T8228] team0: Port device team_slave_1 added
[  329.949792][ T5943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  329.979879][ T5943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.218445][ T8422] siw: device registration error -23
[  330.966818][ T8189] team0: Port device team_slave_0 added
[  330.997926][ T8189] team0: Port device team_slave_1 added
[  331.175547][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'.
[  331.184385][ T8430] netlink: 32 bytes leftover after parsing attributes in process `syz.1.598'.
[  331.262015][ T8432] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  331.268776][ T8432] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  331.278018][ T8432] vhci_hcd vhci_hcd.0: Device attached
[  331.488487][ T3418] vhci_hcd: vhci_device speed not set
[  331.635955][ T3418] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  331.680638][ T5943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.883132][ T5943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.006833][ T8442] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  332.006833][ T8442]    program syz.4.600 not setting count and/or reply_len properly
[  332.497305][ T8433] vhci_hcd: connection reset by peer
[  332.524894][   T13] vhci_hcd: stop threads
[  332.552599][   T13] vhci_hcd: release socket
[  332.584073][   T13] vhci_hcd: disconnect device
[  332.726900][ T5943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.792238][ T5943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.259936][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.274881][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.365265][ T8228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.506920][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.514019][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.591146][ T8189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.634614][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.641842][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.676524][ T8228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.695997][ T8189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.709856][ T8189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.764407][ T8189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.478348][ T8469] netlink: 'syz.0.604': attribute type 16 has an invalid length.
[  335.486302][ T8469] netlink: 'syz.0.604': attribute type 17 has an invalid length.
[  335.913269][ T8228] hsr_slave_0: entered promiscuous mode
[  335.942193][ T8228] hsr_slave_1: entered promiscuous mode
[  335.983259][ T8228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  336.044900][ T8228] Cannot create hsr debugfs directory
[  336.118041][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.126977][ T8469] 8021q: adding VLAN 0 to HW filter on device team0
[  336.143154][ T8469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  336.347975][ T8189] hsr_slave_0: entered promiscuous mode
[  336.365916][ T8189] hsr_slave_1: entered promiscuous mode
[  336.372961][ T8189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  336.383757][ T8189] Cannot create hsr debugfs directory
[  336.564145][   T10] lo speed is unknown, defaulting to 1000
[  336.587303][   T10] syz0: Port: 1 Link ACTIVE
[  336.591678][ T5956] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  336.642883][ T8481] siw: device registration error -23
[  336.805028][ T5956] usb 2-1: Using ep0 maxpacket: 16
[  336.989823][ T5956] usb 2-1: config 8 has an invalid interface number: 206 but max is 0
[  337.026312][ T3418] vhci_hcd: vhci_device speed not set
[  337.085879][ T5956] usb 2-1: config 8 has no interface number 0
[  337.145578][ T5956] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  337.317379][ T5956] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  337.353978][ T5956] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0
[  337.510854][ T5956] usb 2-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0
[  337.521103][ T5956] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  337.535405][ T5956] usb 2-1: config 8 interface 206 has no altsetting 0
[  337.552441][ T5956] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  337.566454][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.574516][ T5956] usb 2-1: Product: syz
[  337.586020][ T5956] usb 2-1: Manufacturer: syz
[  337.590865][ T5956] usb 2-1: SerialNumber: syz
[  337.673454][ T5943] bridge_slave_1: left allmulticast mode
[  337.686004][ T5943] bridge_slave_1: left promiscuous mode
[  337.716041][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.766877][ T5943] bridge_slave_0: left allmulticast mode
[  337.772632][ T5943] bridge_slave_0: left promiscuous mode
[  337.816154][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.832651][ T8478] netlink: 132 bytes leftover after parsing attributes in process `syz.1.607'.
[  337.928777][ T8496] netlink: 44 bytes leftover after parsing attributes in process `syz.0.610'.
[  339.141094][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  339.157970][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  339.178084][ T5943] bond0 (unregistering): Released all slaves
[  339.347248][ T5943] bond1 (unregistering): Released all slaves
[  339.418098][ T8498] @: renamed from dummy0 (while UP)
[  339.418362][ T5956] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected
[  339.453844][ T5956] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90
[  339.468126][ T8501] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  339.485409][ T5943] tipc: Disabling bearer <udp:s>
[  339.503180][ T5943] tipc: Left network mode
[  339.521662][ T8501] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  339.532291][ T5956] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90
[  339.561070][ T5956] usb 2-1: USB disconnect, device number 19
[  339.573867][ T5956] garmin_gps 2-1:8.206: device disconnected
[  341.124072][ T8228] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  342.728159][ T8228] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  342.920920][ T8544] sg_write: data in/out 209152/4 bytes for SCSI command 0x89-- guessing data in;
[  342.920920][ T8544]    program syz.1.618 not setting count and/or reply_len properly
[  343.073986][ T8549] siw: device registration error -23
[  343.730500][ T8228] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  343.752700][ T8228] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  344.155142][ T5943] hsr_slave_0: left promiscuous mode
[  344.176839][ T5943] hsr_slave_1: left promiscuous mode
[  344.183091][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.205821][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  344.258832][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  344.271318][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  344.272856][ T8575] netlink: 'syz.1.624': attribute type 11 has an invalid length.
[  344.593760][ T5943] veth1_macvtap: left promiscuous mode
[  344.629163][ T5943] veth0_macvtap: left promiscuous mode
[  344.666950][ T5943] veth1_vlan: left promiscuous mode
[  344.702777][ T5943] veth0_vlan: left promiscuous mode
[  348.056477][ T5902] kernel write not supported for file /uinput (pid: 5902 comm: kworker/0:5)
[  348.159367][ T8607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.170546][ T8607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.252554][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  348.302637][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  349.013169][ T8189] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  349.095830][ T8189] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  349.174858][ T8189] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  349.267322][ T8189] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  349.469198][ T8619] siw: device registration error -23
[  351.594394][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.859963][ T8228] 8021q: adding VLAN 0 to HW filter on device team0
[  351.933992][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.941261][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.441344][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.448626][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.475320][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  353.521051][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  353.656431][ T8189] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.960959][ T8189] 8021q: adding VLAN 0 to HW filter on device team0
[  353.990627][ T8674] netlink: 248 bytes leftover after parsing attributes in process `syz.4.642'.
[  354.011657][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.018910][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.099235][ T8679] siw: device registration error -23
[  354.847819][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.855075][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.019797][ T8189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  355.030493][ T8189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  355.439950][ T8228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.656650][ T8702] siw: device registration error -23
[  356.500285][ T8711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.696342][ T8711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.588330][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'.
[  359.664384][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.672724][ T8189] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.716160][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.984202][ T8745] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  360.052546][ T8228] veth0_vlan: entered promiscuous mode
[  360.099495][ T8228] veth1_vlan: entered promiscuous mode
[  360.220653][ T8228] veth0_macvtap: entered promiscuous mode
[  360.240353][ T8228] veth1_macvtap: entered promiscuous mode
[  360.319781][ T8228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.394277][ T8228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.651553][ T8228] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.677812][ T8228] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.700489][ T8228] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.722676][ T8228] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.772532][ T8753] lo speed is unknown, defaulting to 1000
[  360.827368][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.834743][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.954491][ T8761] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.964012][ T8761] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.974801][ T8761] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  360.983691][ T8761] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  361.443040][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.479821][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.767463][ T8189] veth0_vlan: entered promiscuous mode
[  362.017219][ T8769] netlink: 68 bytes leftover after parsing attributes in process `syz.0.655'.
[  362.039397][ T5943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.049675][ T5943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.109920][ T8189] veth1_vlan: entered promiscuous mode
[  362.724845][ T5956] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  363.130769][ T5956] usb 2-1: Using ep0 maxpacket: 16
[  363.151198][ T8189] veth0_macvtap: entered promiscuous mode
[  363.152735][ T5956] usb 2-1: config 0 has an invalid interface number: 80 but max is 0
[  363.177360][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  363.189192][ T5956] usb 2-1: config 0 has no interface number 0
[  363.195457][ T5956] usb 2-1: config 0 interface 80 altsetting 254 has an invalid descriptor for endpoint zero, skipping
[  363.223898][ T8189] veth1_macvtap: entered promiscuous mode
[  363.226993][ T5956] usb 2-1: config 0 interface 80 altsetting 254 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  363.309025][ T5956] usb 2-1: config 0 interface 80 altsetting 254 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  363.338259][ T8189] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.348887][ T5956] usb 2-1: config 0 interface 80 altsetting 254 has 4 endpoint descriptors, different from the interface descriptor's value: 11
[  363.391729][ T5956] usb 2-1: config 0 interface 80 has no altsetting 0
[  363.404103][ T8189] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.438987][ T8189] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.447379][ T5956] usb 2-1: New USB device found, idVendor=1199, idProduct=6804, bcdDevice=e8.f8
[  363.479276][ T8189] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.500584][ T8189] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.504842][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.527768][ T5956] usb 2-1: Product: syz
[  363.532613][ T5956] usb 2-1: Manufacturer: syz
[  363.548229][ T8189] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.606048][ T5956] usb 2-1: SerialNumber: syz
[  363.614486][ T5956] usb 2-1: config 0 descriptor??
[  363.648554][ T5956] sierra 2-1:0.80: Sierra USB modem converter detected
[  363.964825][ T8779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.973728][ T8779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.346079][ T6328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.512347][ T6328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.739481][ T5956] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  365.848874][ T5956] usb 2-1: USB disconnect, device number 20
[  365.945589][ T6326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.977808][ T5956] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  365.989607][ T6326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.039980][ T5956] sierra 2-1:0.80: device disconnected
[  367.243697][ T8830] loop6: detected capacity change from 0 to 524287999
[  367.346538][ T8831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.666'.
[  369.722108][ T8866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.672'.
[  369.754974][ T8866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.672'.
[  372.518827][ T8887] program syz.1.678 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  373.474746][ T8908] loop6: detected capacity change from 0 to 524287999
[  373.579816][ T8909] netlink: 40 bytes leftover after parsing attributes in process `syz.0.679'.
[  376.378432][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.688'.
[  376.387791][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.688'.
[  377.364867][ T5956] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  377.504988][ T5956] usb 2-1: device descriptor read/64, error -71
[  377.946137][ T5956] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  378.078639][ T8967] loop6: detected capacity change from 0 to 524287999
[  378.112563][ T5956] usb 2-1: device descriptor read/64, error -71
[  378.186438][ T8968] netlink: 40 bytes leftover after parsing attributes in process `syz.4.693'.
[  378.240695][ T5956] usb usb2-port1: attempt power cycle
[  378.664291][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  378.729079][ T8971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.795481][ T8971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.884803][ T5956] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  378.928114][ T5956] usb 2-1: device descriptor read/8, error -71
[  379.174808][ T5956] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  379.254231][ T5956] usb 2-1: device descriptor read/8, error -71
[  379.374926][ T8994] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  379.374926][ T8994]    program syz.5.698 not setting count and/or reply_len properly
[  379.375177][ T5956] usb usb2-port1: unable to enumerate USB device
[  379.828568][ T8998] futex_wake_op: syz.4.699 tries to shift op by -33; fix this program
[  380.063895][ T9005] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[  380.226104][ T9010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.702'.
[  380.236676][ T9010] netlink: 28 bytes leftover after parsing attributes in process `syz.5.702'.
[  383.476296][ T5902] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  383.599752][ T9070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.610019][ T9070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  383.644752][ T5902] usb 6-1: Using ep0 maxpacket: 8
[  383.658496][ T5902] usb 6-1: unable to get BOS descriptor or descriptor too short
[  383.683638][ T5902] usb 6-1: config 7 has an invalid interface number: 6 but max is 0
[  383.692491][ T5895] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  383.713060][ T5902] usb 6-1: config 7 has no interface number 0
[  383.731406][ T5902] usb 6-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254
[  383.784547][ T5902] usb 6-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  383.889860][ T9076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.718'.
[  383.912542][ T9076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.718'.
[  384.273622][ T5902] usb 6-1: config 7 interface 6 has no altsetting 0
[  384.301639][ T5902] usb 6-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e
[  384.338456][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.349945][ T5895] usb 2-1: config 8 has an invalid interface number: 177 but max is 0
[  384.364626][ T5895] usb 2-1: config 8 has no interface number 0
[  384.390165][ T5902] usb 6-1: Product: syz
[  384.412766][ T5902] usb 6-1: Manufacturer: syz
[  384.422052][ T5895] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  384.534449][ T5902] usb 6-1: SerialNumber: syz
[  384.593904][ T5895] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0
[  384.630469][ T5895] usb 2-1: config 8 interface 177 has no altsetting 0
[  384.671971][ T5895] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  384.706332][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.762099][ T9065] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  384.828637][ T5902] option 6-1:7.6: GSM modem (1-port) converter detected
[  384.880497][ T5902] usb 6-1: USB disconnect, device number 2
[  384.918785][ T5902] option 6-1:7.6: device disconnected
[  385.337829][  T926] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  385.984802][  T926] usb 5-1: Using ep0 maxpacket: 8
[  386.421208][  T926] usb 5-1: config 31 has an invalid interface number: 134 but max is 0
[  386.460612][  T926] usb 5-1: config 31 contains an unexpected descriptor of type 0x2, skipping
[  386.509193][  T926] usb 5-1: config 31 contains an unexpected descriptor of type 0x1, skipping
[  386.616069][  T926] usb 5-1: config 31 has an invalid descriptor of length 6, skipping remainder of the config
[  386.636790][  T926] usb 5-1: config 31 has no interface number 0
[  386.647216][  T926] usb 5-1: config 31 interface 134 altsetting 41 has an invalid endpoint descriptor of length 5, skipping
[  386.724784][  T926] usb 5-1: config 31 interface 134 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  386.763412][  T926] usb 5-1: config 31 interface 134 has no altsetting 0
[  386.961726][  T926] usb 5-1: string descriptor 0 read error: -22
[  386.968841][  T926] usb 5-1: New USB device found, idVendor=0499, idProduct=1052, bcdDevice=a4.d0
[  386.998668][  T926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.695027][  T926] usb 5-1: can't set config #31, error -71
[  388.761217][  T926] usb 5-1: USB disconnect, device number 21
[  388.964776][ T3418] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  389.200704][ T3418] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  389.254228][ T3418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.426072][ T3418] usb 6-1: config 0 descriptor??
[  390.003276][ T5895] usb 2-1: string descriptor 0 read error: -32
[  390.045136][ T5895] ir_toy 2-1:8.177: required endpoints not found
[  391.174818][   T30] audit: type=1326 audit(1755459984.098:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9157 comm="syz.4.732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbaf198ebe9 code=0x0
[  394.098696][ T9192] siw: device registration error -23
[  395.948022][ T9200] GUP no longer grows the stack in syz.0.741 (9200): 200000005000-200000008000 (200000004000)
[  395.961931][ T9200] CPU: 0 UID: 0 PID: 9200 Comm: syz.0.741 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  395.961961][ T9200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  395.961974][ T9200] Call Trace:
[  395.961982][ T9200]  <TASK>
[  395.961990][ T9200]  dump_stack_lvl+0x189/0x250
[  395.962013][ T9200]  ? __pfx_dump_stack_lvl+0x10/0x10
[  395.962027][ T9200]  ? __pfx__printk+0x10/0x10
[  395.962041][ T9200]  ? find_vma+0xe7/0x160
[  395.962063][ T9200]  fixup_user_fault+0x661/0x720
[  395.962086][ T9200]  fault_in_user_writeable+0x72/0xe0
[  395.962103][ T9200]  futex_lock_pi+0x283/0xa60
[  395.962118][ T9200]  ? sched_clock+0x3f/0x60
[  395.962141][ T9200]  ? __pfx_futex_lock_pi+0x10/0x10
[  395.962156][ T9200]  ? get_futex_key+0x880/0x1640
[  395.962190][ T9200]  ? __pfx_futex_wake_mark+0x10/0x10
[  395.962225][ T9200]  do_futex+0x292/0x420
[  395.962243][ T9200]  ? __pfx_do_futex+0x10/0x10
[  395.962258][ T9200]  ? preempt_schedule_irq+0xde/0x150
[  395.962276][ T9200]  __se_sys_futex+0x36f/0x400
[  395.962295][ T9200]  ? __pfx___se_sys_futex+0x10/0x10
[  395.962311][ T9200]  ? rcu_is_watching+0x15/0xb0
[  395.962328][ T9200]  ? __x64_sys_futex+0x21/0xf0
[  395.962345][ T9200]  do_syscall_64+0xfa/0x3b0
[  395.962359][ T9200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.962370][ T9200]  ? asm_sysvec_call_function_single+0x1a/0x20
[  395.962382][ T9200]  ? clear_bhb_loop+0x60/0xb0
[  395.962397][ T9200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.962408][ T9200] RIP: 0033:0x7f584358ebe9
[  395.962421][ T9200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  395.962432][ T9200] RSP: 002b:00007f58443d6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  395.962446][ T9200] RAX: ffffffffffffffda RBX: 00007f58437b6090 RCX: 00007f584358ebe9
[  395.962455][ T9200] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[  395.962463][ T9200] RBP: 00007f5843611e19 R08: 0000000000000000 R09: 0000000000000000
[  395.962471][ T9200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  395.962478][ T9200] R13: 00007f58437b6128 R14: 00007f58437b6090 R15: 00007ffc5233fec8
[  395.962498][ T9200]  </TASK>
[  396.210960][ T9200] Invalid source name
[  396.215173][ T9200] UBIFS error (pid: 9200): cannot open "usrquota", error -22
[  397.021800][   T43] usb 2-1: USB disconnect, device number 25
[  397.764970][   T30] audit: type=1326 audit(1755459990.628:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9216 comm="syz.1.747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1a6d8ebe9 code=0x0
[  398.854789][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'.
[  399.384868][ T9249] siw: device registration error -23
[  400.586802][ T9261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  400.631636][ T9263] QAT: Device 244 not found
[  400.645498][ T9261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.470061][ T9268] netlink: 'syz.4.758': attribute type 4 has an invalid length.
[  402.292996][ T9278] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  402.302241][ T9278] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  402.980606][ T9289] loop7: detected capacity change from 0 to 16384
[  403.459120][ T5853] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  403.617972][ T9281] delete_channel: no stack
[  403.828909][ T9287] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  403.858746][ T9295] loop7: detected capacity change from 16384 to 0
[  403.906284][    C0] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0
[  403.950244][ T9287] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  403.990251][ T9287] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  404.044950][ T9312] sp0: Synchronizing with TNC
[  404.290324][ T9287] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  404.706613][ T9287] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  405.240099][ T9287] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  405.392746][ T9287] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  405.433759][ T9287] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  405.509609][ T9330] syz_tun: entered allmulticast mode
[  405.613347][ T9287] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  405.649619][ T9328] syz_tun: left allmulticast mode
[  405.704958][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  405.944886][   T43] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  406.024722][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout
[  406.024899][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout
[  406.146918][   T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  406.174700][   T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  406.205679][   T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  406.234965][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  406.243115][   T43] usb 2-1: SerialNumber: syz
[  406.325041][  T926] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  406.335634][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout
[  406.523039][  T926] usb 5-1: unable to read config index 0 descriptor/start: -61
[  406.543431][  T926] usb 5-1: can't read configurations, error -61
[  406.715505][  T926] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  406.898777][  T926] usb 5-1: unable to read config index 0 descriptor/start: -61
[  406.931165][  T926] usb 5-1: can't read configurations, error -61
[  406.954445][  T926] usb usb5-port1: attempt power cycle
[  407.314914][  T926] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  407.333713][ T3418] ath6kl: Failed to submit usb control message: -71
[  407.360638][  T926] usb 5-1: unable to read config index 0 descriptor/start: -61
[  407.364741][ T3418] ath6kl: unable to send the bmi data to the device: -71
[  407.371839][  T926] usb 5-1: can't read configurations, error -61
[  407.391982][ T3418] ath6kl: Unable to send get target info: -71
[  407.402645][ T3418] ath6kl: Failed to init ath6kl core: -71
[  407.421350][ T3418] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71
[  407.455571][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout
[  407.473830][ T3418] usb 6-1: USB disconnect, device number 3
[  407.534842][  T926] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  407.569367][  T926] usb 5-1: unable to read config index 0 descriptor/start: -61
[  407.578875][  T926] usb 5-1: can't read configurations, error -61
[  407.614353][  T926] usb usb5-port1: unable to enumerate USB device
[  407.672702][   T43] usb 2-1: 0:2 : does not exist
[  407.785135][   T43] usb 2-1: USB disconnect, device number 26
[  408.012643][ T9367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.775'.
[  408.021801][ T6148] udevd[6148]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  408.043273][ T9367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.775'.
[  408.415521][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout
[  409.535089][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout
[  410.501102][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout
[  410.675030][ T9404] loop6: detected capacity change from 0 to 524287999
[  410.771820][ T9405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.780'.
[  411.237024][ T9402] netlink: 14200 bytes leftover after parsing attributes in process `syz.6.783'.
[  411.417007][ T5895] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  411.616195][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout
[  411.631068][ T9413] netlink: 'syz.0.784': attribute type 1 has an invalid length.
[  411.666806][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  411.683131][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  411.704161][ T5895] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  411.724243][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.771891][ T5895] usb 2-1: config 0 descriptor??
[  412.855108][ T5895] ath6kl: Failed to submit usb control message: -110
[  412.861901][ T5895] ath6kl: unable to send the bmi data to the device: -110
[  412.866747][ T9398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.869752][ T5895] ath6kl: Unable to send get target info: -110
[  412.887252][ T5895] ath6kl: Failed to init ath6kl core: -110
[  412.903071][ T5895] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110
[  413.542306][  T926] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  413.579190][ T9398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.888573][  T926] usb 6-1: device descriptor read/64, error -71
[  413.911605][ T5895] usb 2-1: USB disconnect, device number 27
[  413.924993][ T9436] binder: 9435:9436 ioctl c0306201 200000000a00 returned -14
[  414.003989][ T9439] netlink: 136 bytes leftover after parsing attributes in process `syz.6.789'.
[  414.059388][ T9439] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  414.146552][  T926] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  414.335294][  T926] usb 6-1: device descriptor read/64, error -71
[  414.472630][  T926] usb usb6-port1: attempt power cycle
[  415.596788][  T926] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  415.736238][  T926] usb 6-1: device descriptor read/8, error -71
[  416.138385][   T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  416.217669][ T9472] netlink: 'syz.5.799': attribute type 7 has an invalid length.
[  416.225624][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.799'.
[  416.245067][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.799'.
[  416.337226][   T10] usb 2-1: config 0 has no interfaces?
[  416.345151][ T5902] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  416.366255][   T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  416.400504][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.447450][   T10] usb 2-1: config 0 descriptor??
[  416.546254][ T5902] usb 5-1: Using ep0 maxpacket: 8
[  416.569619][ T5902] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  416.593756][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.639948][ T5902] usb 5-1: Product: syz
[  416.644195][ T5902] usb 5-1: Manufacturer: syz
[  416.912389][ T9459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.132029][ T9459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.334499][ T9459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.382711][ T9459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.474996][ T5902] usb 5-1: SerialNumber: syz
[  417.482584][ T3418] usb 2-1: USB disconnect, device number 28
[  417.484216][ T5902] usb 5-1: config 0 descriptor??
[  417.532547][ T5902] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  417.539504][  T926] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  417.631557][  T926] usb 6-1: Using ep0 maxpacket: 16
[  417.681168][  T926] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  417.717201][  T926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.728542][ T5902] gspca_sonixj: reg_r err -71
[  417.760772][ T5902] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  417.782649][  T926] usb 6-1: Product: syz
[  417.802564][  T926] usb 6-1: Manufacturer: syz
[  417.814771][ T9502] netlink: 550 bytes leftover after parsing attributes in process `syz.6.802'.
[  417.833577][ T5902] usb 5-1: USB disconnect, device number 27
[  417.846339][  T926] usb 6-1: SerialNumber: syz
[  417.891034][  T926] usb 6-1: config 0 descriptor??
[  417.922119][  T926] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  417.984906][ T3418] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  418.245640][ T3418] usb 2-1: device descriptor read/64, error -71
[  418.378707][  T926] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110
[  418.605342][ T3418] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  418.706839][ T9515] veth0: entered promiscuous mode
[  418.729607][ T9512] veth0: left promiscuous mode
[  418.764011][ T9517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.805'.
[  418.765662][ T3418] usb 2-1: device descriptor read/64, error -71
[  418.976746][ T3418] usb usb2-port1: attempt power cycle
[  419.152225][ T9525] input: syz0 as /devices/virtual/input/input8
[  419.752708][   T30] audit: type=1326 audit(1755460012.598:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9531 comm="syz.0.809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f584358ebe9 code=0x0
[  420.404213][ T5902] usb 6-1: USB disconnect, device number 7
[  421.065734][ T9558] input: syz1 as /devices/virtual/input/input9
[  422.485685][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.495463][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.854320][ T9573] netlink: 68 bytes leftover after parsing attributes in process `syz.1.818'.
[  422.869708][ T9573] netlink: 156 bytes leftover after parsing attributes in process `syz.1.818'.
[  423.142226][ T9580] tmpfs: Bad value for 'mpol'
[  423.444547][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.491913][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.666348][ T9590] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  423.700582][ T9599] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  423.700582][ T9599]    program syz.1.824 not setting count and/or reply_len properly
[  424.165333][ T9590] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  424.551477][ T9605] random: crng reseeded on system resumption
[  425.755559][ T9624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.776643][ T9624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  426.034958][ T3418] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  426.220992][ T3418] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  426.236376][ T3418] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  426.257481][ T3418] usb 7-1: config 0 interface 0 has no altsetting 0
[  426.279878][ T3418] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  426.301842][ T3418] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.327066][ T3418] usb 7-1: config 0 descriptor??
[  426.991990][   T30] audit: type=1326 audit(1755460019.918:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9648 comm="syz.4.835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbaf198ebe9 code=0x0
[  427.752828][ T3418] usb 7-1: string descriptor 0 read error: -22
[  427.905364][ T9658] sctp: [Deprecated]: syz.6.830 (pid 9658) Use of int in maxseg socket option.
[  427.905364][ T9658] Use struct sctp_assoc_value instead
[  429.334781][   T30] audit: type=1326 audit(1755460021.528:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9660 comm="syz.4.836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbaf198ebe9 code=0x0
[  429.668855][ T9651] random: crng reseeded on system resumption
[  429.713148][ T3418] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71
[  429.732214][ T3418] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71
[  429.751606][ T3418] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71
[  429.771955][ T3418] uclogic 0003:256C:006D.000A: failed probing parameters: -71
[  429.792314][ T3418] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71
[  429.938501][ T3418] usb 7-1: USB disconnect, device number 2
[  430.554843][ T3418] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  430.624906][ T5956] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  431.089214][ T3418] usb 7-1: device descriptor read/64, error -71
[  432.395048][ T5956] usb 5-1: Using ep0 maxpacket: 8
[  432.445152][ T3418] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  432.486391][ T5956] usb 5-1: config 0 has an invalid interface number: 218 but max is 0
[  432.856417][ T5956] usb 5-1: config 0 has no interface number 0
[  432.889060][ T3418] usb 7-1: device descriptor read/64, error -71
[  432.909470][ T5956] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e0.df
[  432.955017][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.963282][ T5956] usb 5-1: Product: syz
[  433.000779][ T5956] usb 5-1: Manufacturer: syz
[  433.006277][ T3418] usb usb7-port1: attempt power cycle
[  433.039609][ T5956] usb 5-1: SerialNumber: syz
[  433.069843][ T5956] usb 5-1: config 0 descriptor??
[  433.129095][ T5956] usb 5-1: selecting invalid altsetting 1
[  433.150458][ T5956] usb 5-1: Can not set alternate setting to 1, error: -22
[  433.168225][ T5956] synaptics_usb 5-1:0.218: probe with driver synaptics_usb failed with error -22
[  433.499003][ T5895] usb 5-1: USB disconnect, device number 28
[  433.651862][   T30] audit: type=1326 audit(1755460026.578:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9694 comm="syz.6.846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe46818ebe9 code=0x0
[  434.514863][ T9692] lo speed is unknown, defaulting to 1000
[  435.301573][ T9725] overlayfs: missing 'lowerdir'
[  436.625100][ T9751] comedi comedi2: aio_aio12_8: I/O port conflict (0x3,32)
[  437.049041][ T5902] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  437.137716][ T3418] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96
[  437.385896][ T5902] usb 7-1: Using ep0 maxpacket: 32
[  437.436502][ T5902] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  437.460357][ T9756] overlay: ./file0 is not a directory
[  437.465974][ T5902] usb 7-1: config 0 has no interface number 0
[  437.466035][ T5902] usb 7-1: config 0 interface 184 has no altsetting 0
[  437.485196][ T5902] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  437.504575][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.562886][ T5902] usb 7-1: Product: syz
[  437.570922][ T5902] usb 7-1: Manufacturer: syz
[  437.583307][ T5902] usb 7-1: SerialNumber: syz
[  437.599530][ T5902] usb 7-1: config 0 descriptor??
[  437.642665][ T5902] smsc75xx v1.0.0
[  438.015613][  T926] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  438.103169][ T9770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.857'.
[  438.139781][ T9770] Cannot find del_set index 0 as target
[  438.177224][  T926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.191510][  T926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  438.212936][  T926] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  438.233874][  T926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.261763][ T5902] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  438.276544][  T926] usb 2-1: config 0 descriptor??
[  438.292245][ T5902] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  438.924335][ T9779] netlink: 'syz.6.850': attribute type 2 has an invalid length.
[  439.000706][ T9779] netlink: 'syz.6.850': attribute type 1 has an invalid length.
[  439.306577][  T926] koneplus 0003:1E7D:2D51.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0
[  439.501784][   T43] usb 2-1: USB disconnect, device number 32
[  439.753483][ T9791] fido_id[9791]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  440.109196][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  440.312753][ T9803] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  440.326008][ T5844] IPVS: starting estimator thread 0...
[  440.375872][ T9803] netlink: 6 bytes leftover after parsing attributes in process `syz.5.861'.
[  440.476098][ T9808] IPVS: using max 24 ests per chain, 57600 per kthread
[  440.578099][ T5902] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  440.603056][ T5902] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  440.643930][ T5902] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  440.683063][ T5902] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  440.862480][ T5902] usb 7-1: USB disconnect, device number 6
[  441.045220][ T9826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  441.586307][ T9831] netlink: 44 bytes leftover after parsing attributes in process `syz.5.866'.
[  442.605988][ T9835] loop7: detected capacity change from 0 to 16383
[  443.228963][ T9847] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  443.792073][ T9858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.871'.
[  445.898751][   T43] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  446.076524][   T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  446.146749][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  446.234153][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  446.257020][   T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  446.338989][   T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  446.353705][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.376328][   T43] usb 2-1: config 0 descriptor??
[  446.406602][ T9895] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  446.638403][ T9913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.656726][ T9913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.887106][   T43] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd
[  446.970199][   T43] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  448.344972][   T30] audit: type=1326 audit(1755460041.168:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9932 comm="syz.6.883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe46818ebe9 code=0x0
[  449.074801][   T43] usb 2-1: USB disconnect, device number 33
[  449.091391][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.885'.
[  449.903777][ T9971] netlink: 'syz.4.889': attribute type 16 has an invalid length.
[  449.911840][ T9971] netlink: 'syz.4.889': attribute type 17 has an invalid length.
[  450.108672][ T9971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  450.856236][ T9977] netlink: 28 bytes leftover after parsing attributes in process `syz.5.891'.
[  450.865683][ T9977] netlink: 28 bytes leftover after parsing attributes in process `syz.5.891'.
[  453.584506][T10002] lo speed is unknown, defaulting to 1000
[  454.085528][ T3418] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  454.107525][T10011] netlink: 236 bytes leftover after parsing attributes in process `syz.0.900'.
[  454.351586][T10021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.367491][ T3418] usb 6-1: unable to get BOS descriptor or descriptor too short
[  454.382546][ T3418] usb 6-1: not running at top speed; connect to a high speed hub
[  454.396378][T10021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  454.414202][ T3418] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  454.463854][ T3418] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  454.493776][ T3418] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  454.514243][ T3418] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  454.542160][ T3418] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  454.567628][ T3418] usb 6-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90
[  454.581661][ T3418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.590403][ T3418] usb 6-1: Product: syz
[  454.599544][ T3418] usb 6-1: Manufacturer: syz
[  454.604366][ T3418] usb 6-1: SerialNumber: syz
[  454.655098][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'.
[  454.674260][ T3418] ipaq 6-1:1.0: PocketPC PDA converter detected
[  454.852764][T10004] lo speed is unknown, defaulting to 1000
[  454.885564][ T3418] ipaq 6-1:1.0: probe with driver ipaq failed with error -71
[  454.940159][ T3418] usb 6-1: USB disconnect, device number 8
[  455.353616][T10039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.904'.
[  455.363175][T10039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.904'.
[  456.274021][T10033] comedi comedi2: reset error (fatal)
[  456.900024][T10064] random: crng reseeded on system resumption
[  457.314452][T10079] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  457.314452][T10079]    program syz.5.911 not setting count and/or reply_len properly
[  457.644855][ T5902] usb 5-1: new low-speed USB device number 29 using dummy_hcd
[  457.845340][T10086] netlink: 24 bytes leftover after parsing attributes in process `syz.6.913'.
[  457.886428][T10086] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  458.764774][ T5902] usb 5-1: device descriptor read/64, error -71
[  459.264861][ T5902] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  459.464771][ T5902] usb 5-1: device descriptor read/64, error -71
[  459.598422][ T5902] usb usb5-port1: attempt power cycle
[  459.714478][T10103] netlink: 28 bytes leftover after parsing attributes in process `syz.5.917'.
[  459.724296][T10103] netlink: 28 bytes leftover after parsing attributes in process `syz.5.917'.
[  459.755164][   T43] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  460.335237][   T43] usb 2-1: Using ep0 maxpacket: 16
[  460.379597][   T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  460.424718][   T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  460.446219][ T5902] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[  460.450469][   T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  460.519028][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.552452][   T43] usb 2-1: Product: syz
[  460.558903][   T43] usb 2-1: Manufacturer: syz
[  460.563676][   T43] usb 2-1: SerialNumber: syz
[  460.685999][ T5902] usb 5-1: device not accepting address 31, error -71
[  460.744973][ T5895] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  461.564986][ T5902] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  461.593590][ T5895] usb 6-1: Using ep0 maxpacket: 16
[  461.603222][ T5895] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.676352][ T5902] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  461.705239][ T5895] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.722210][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.763638][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.785271][ T5895] usb 6-1: config 0 interface 0 has no altsetting 0
[  461.801281][   T43] usb 2-1: 0:2 : does not exist
[  461.880962][ T5895] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  461.896271][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  461.958310][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.990895][ T5902] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  462.018907][ T5902] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  462.029068][ T5895] usb 6-1: config 0 descriptor??
[  462.041028][ T5902] usb 5-1: Manufacturer: syz
[  462.069958][ T5902] usb 5-1: config 0 descriptor??
[  462.213479][   T43] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  462.333413][   T43] usb 2-1: USB disconnect, device number 34
[  462.401184][ T5902] usbhid 5-1:0.0: can't add hid device: -71
[  462.456312][ T5902] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  462.470655][ T6148] udevd[6148]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  462.475572][ T5895] apple 0003:05AC:0247.000D: fixing up Magic Keyboard JIS report descriptor
[  462.537678][ T5902] usb 5-1: USB disconnect, device number 32
[  462.597162][ T5895] apple 0003:05AC:0247.000D: unexpected long global item
[  462.649306][ T5895] apple 0003:05AC:0247.000D: parse failed
[  463.158446][ T5895] apple 0003:05AC:0247.000D: probe with driver apple failed with error -22
[  463.533360][ T5902] usb 6-1: USB disconnect, device number 9
[  464.818833][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'.
[  464.839553][T10152] xt_CT: No such helper "snmp_trap"
[  464.861076][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'.
[  464.879318][T10164] netlink: 'syz.4.929': attribute type 14 has an invalid length.
[  464.964779][T10164] netlink: 'syz.4.929': attribute type 13 has an invalid length.
[  465.961482][T10190] netlink: 159784 bytes leftover after parsing attributes in process `syz.5.934'.
[  466.680525][T10191] overlayfs: failed to resolve './file1': -2
[  466.992963][T10190] new mount options do not match the existing superblock, will be ignored
[  467.098821][T10190] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  467.153050][T10190] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  467.231377][T10190] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  467.746884][T10218] vivid-003: disconnect
[  467.992496][ T3418] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  468.750600][T10219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  468.777027][ T3418] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  468.804779][ T3418] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  468.864749][ T3418] usb 2-1: config 0 has no interface number 0
[  468.912308][T10230] mmap: syz.0.940 (10230): VmData 37605376 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data.
[  468.925636][ T3418] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  469.080261][ T3418] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  469.144338][ T3418] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  469.178776][ T3418] usb 2-1: config 0 interface 52 has no altsetting 0
[  469.187878][T10211] vivid-003: reconnect
[  469.200314][ T3418] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  469.234937][ T3418] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  469.268422][ T3418] usb 2-1: Product: syz
[  469.288929][ T3418] usb 2-1: SerialNumber: syz
[  469.340314][ T3418] usb 2-1: config 0 descriptor??
[  470.052861][ T3418] usb 2-1: Can not set alternate setting to 1, error: -71
[  470.084781][ T3418] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71
[  470.119106][ T3418] usb 2-1: USB disconnect, device number 35
[  471.407043][T10248] netlink: 156 bytes leftover after parsing attributes in process `syz.0.944'.
[  474.214517][T10282] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  474.510120][T10297] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  474.510120][T10297]    program syz.0.950 not setting count and/or reply_len properly
[  476.539185][   T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  479.469089][ T3418] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  479.674880][ T3418] usb 6-1: Using ep0 maxpacket: 16
[  479.686772][ T3418] usb 6-1: too many endpoints for config 0 interface 0 altsetting 61: 48, using maximum allowed: 30
[  479.776912][ T3418] usb 6-1: config 0 interface 0 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  479.822895][ T3418] usb 6-1: config 0 interface 0 has no altsetting 0
[  479.853841][ T3418] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[  479.873959][ T3418] usb 6-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[  479.910212][T10330] netlink: 36 bytes leftover after parsing attributes in process `syz.4.960'.
[  479.922581][T10330] netlink: 'syz.4.960': attribute type 1 has an invalid length.
[  479.942328][ T3418] usb 6-1: Product: syz
[  480.002358][ T3418] usb 6-1: Manufacturer: syz
[  480.038976][ T3418] usb 6-1: SerialNumber: syz
[  480.051576][ T3418] usb 6-1: config 0 descriptor??
[  480.084936][   T43] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  480.105518][ T3418] usb 6-1: selecting invalid altsetting 1
[  480.202836][ T3418] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  480.275040][   T43] usb 7-1: unable to get BOS descriptor or descriptor too short
[  480.299408][ T6435] tipc: Subscription rejected, illegal request
[  480.335009][   T43] usb 7-1: config 1 has an invalid interface number: 88 but max is 1
[  480.349621][T10344] random: crng reseeded on system resumption
[  480.361660][   T43] usb 7-1: config 1 has no interface number 1
[  480.363458][ T6148] udevd[6148]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  480.379508][   T43] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  480.431720][   T43] usb 7-1: config 1 interface 0 has no altsetting 0
[  480.489097][   T43] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  480.498842][ T5956] usb 2-1: new low-speed USB device number 36 using dummy_hcd
[  480.525404][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.544098][   T43] usb 7-1: Product: syz
[  480.579723][   T43] usb 7-1: Manufacturer: syz
[  480.584508][   T43] usb 7-1: SerialNumber: syz
[  480.705786][ T5956] usb 2-1: unable to get BOS descriptor or descriptor too short
[  480.720304][T10355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.965'.
[  480.748652][ T5956] usb 2-1: config 7 has an invalid interface number: 83 but max is 0
[  480.761009][ T5902] usb 6-1: USB disconnect, device number 10
[  480.784649][ T5956] usb 2-1: config 7 has no interface number 0
[  480.800659][ T5956] usb 2-1: config 7 interface 83 altsetting 254 endpoint 0x7 has invalid maxpacket 16, setting to 0
[  480.812676][T10355] netlink: 'syz.0.965': attribute type 1 has an invalid length.
[  480.859457][ T5956] usb 2-1: No eUSB2 isoc ep 7 companion for config 7 interface 83 altsetting 254
[  480.887877][T10331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.944684][ T5956] usb 2-1: config 7 interface 83 has no altsetting 0
[  480.987765][T10355] 8021q: adding VLAN 0 to HW filter on device bond1
[  480.995352][T10331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.030617][   T43] smsusb:smsusb_probe: board id=8, interface number 0
[  481.046402][ T5956] usb 2-1: string descriptor 0 read error: -22
[  481.053834][ T5956] usb 2-1: New USB device found, idVendor=19d2, idProduct=0145, bcdDevice=44.f5
[  481.165587][T10361] vlan2: entered promiscuous mode
[  481.182657][T10361] bond1: entered promiscuous mode
[  481.189748][T10361] vlan2: entered allmulticast mode
[  481.192812][   T43] smsusb:smsusb_probe: board id=8, interface number 88
[  481.204503][T10361] bond1: entered allmulticast mode
[  481.212686][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.272986][   T43] usb 7-1: USB disconnect, device number 8
[  481.306990][ T5956] option 2-1:7.83: GSM modem (1-port) converter detected
[  481.378122][T10363] bond1: (slave gretap1): making interface the new active one
[  481.407605][T10363] gretap1: entered promiscuous mode
[  481.427217][T10363] gretap1: entered allmulticast mode
[  481.474950][T10363] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  481.488679][   T10] usb 2-1: USB disconnect, device number 36
[  481.521509][   T10] option 2-1:7.83: device disconnected
[  482.154909][   T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  482.324924][   T43] usb 6-1: Using ep0 maxpacket: 16
[  482.340313][   T43] usb 6-1: config 0 has an invalid interface number: 80 but max is 0
[  482.578319][   T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  482.625276][   T43] usb 6-1: config 0 has no interface number 0
[  482.644735][   T43] usb 6-1: config 0 interface 80 altsetting 254 has an invalid descriptor for endpoint zero, skipping
[  482.757944][T10376] trusted_key: encrypted_key: insufficient parameters specified
[  482.910566][   T43] usb 6-1: config 0 interface 80 altsetting 254 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  483.216240][   T43] usb 6-1: config 0 interface 80 altsetting 254 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  483.432224][   T43] usb 6-1: config 0 interface 80 altsetting 254 has 4 endpoint descriptors, different from the interface descriptor's value: 11
[  483.503101][   T43] usb 6-1: config 0 interface 80 has no altsetting 0
[  483.552978][   T43] usb 6-1: New USB device found, idVendor=1199, idProduct=6804, bcdDevice=e8.f8
[  483.591727][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.862459][   T43] usb 6-1: Product: syz
[  483.879998][   T43] usb 6-1: Manufacturer: syz
[  483.917583][   T43] usb 6-1: SerialNumber: syz
[  483.950799][   T43] usb 6-1: config 0 descriptor??
[  483.991468][   T43] sierra 6-1:0.80: Sierra USB modem converter detected
[  484.233901][T10368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.242939][T10368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.409601][   T30] audit: type=1800 audit(1755462637.332:152): pid=10393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.972" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  485.507978][   T43] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[  485.570754][   T43] usb 6-1: USB disconnect, device number 11
[  485.706355][   T43] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  485.764451][   T43] sierra 6-1:0.80: device disconnected
[  486.144756][ T5902] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  486.353355][ T5902] usb 2-1: Using ep0 maxpacket: 32
[  486.385562][ T5902] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  486.430302][ T5902] usb 2-1: config 0 has no interface number 0
[  486.454784][ T5902] usb 2-1: config 0 interface 184 has no altsetting 0
[  486.487637][ T5902] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  487.073460][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.073942][ T5902] usb 2-1: Product: syz
[  487.447248][T10424] overlayfs: failed to resolve './file1': -2
[  487.538689][ T5902] usb 2-1: Manufacturer: syz
[  487.543362][ T5902] usb 2-1: SerialNumber: syz
[  487.599636][ T5902] usb 2-1: config 0 descriptor??
[  487.630696][ T5902] smsc75xx v1.0.0
[  487.706176][T10428] netlink: 40 bytes leftover after parsing attributes in process `syz.5.979'.
[  488.043730][T10434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.066997][T10434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.325873][ T5902] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  488.361993][ T5902] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  488.482854][T10445] xt_hashlimit: max too large, truncated to 1048576
[  489.123789][T10456] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  489.180748][ T5902] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  489.198204][ T5902] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  489.210686][ T5902] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  489.221703][ T5902] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  489.260802][ T5902] usb 2-1: USB disconnect, device number 37
[  490.524166][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.534855][T10477] Invalid source name
[  490.539079][T10477] UBIFS error (pid: 10477): cannot open "/dev/sg0", error -22
[  490.575204][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.834744][T10501] lo speed is unknown, defaulting to 1000
[  493.932456][   T43] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  494.624807][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.649393][   T43] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  494.690349][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.751606][   T43] usb 2-1: config 0 descriptor??
[  494.951862][T10556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  495.133227][   T43] usbhid 2-1:0.0: can't add hid device: -71
[  495.310469][   T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  495.419567][   T43] usb 2-1: USB disconnect, device number 38
[  495.934974][   T43] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  495.966034][T10571] binder: 10570:10571 ioctl 641e 0 returned -22
[  496.138175][   T43] usb 2-1: Using ep0 maxpacket: 32
[  496.174580][   T43] usb 2-1: config index 0 descriptor too short (expected 36, got 27)
[  496.196778][   T43] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  496.215740][   T43] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  496.227730][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.351853][   T43] usb 2-1: config 0 descriptor??
[  496.361174][   T43] ldusb 2-1:0.0: Interrupt in endpoint not found
[  496.375028][   T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  496.659214][   T10] usb 2-1: USB disconnect, device number 39
[  496.696094][ T5902] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  496.875029][ T5902] usb 5-1: Using ep0 maxpacket: 32
[  496.895730][ T5902] usb 5-1: config 0 has an invalid interface number: 108 but max is 0
[  496.967721][ T5902] usb 5-1: config 0 has no interface number 0
[  497.090007][ T5902] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=68.96
[  497.218367][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.382272][ T5902] usb 5-1: Product: syz
[  497.471134][ T5902] usb 5-1: Manufacturer: syz
[  497.491115][ T5902] usb 5-1: SerialNumber: syz
[  497.533540][ T5902] usb 5-1: config 0 descriptor??
[  497.595051][ T5902] powermate 5-1:0.108: probe with driver powermate failed with error -5
[  498.938902][   T43] usb 5-1: USB disconnect, device number 33
[  499.191027][T10622] netlink: 'syz.6.1020': attribute type 11 has an invalid length.
[  501.005769][ T5956] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  501.230273][ T5956] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  501.303001][ T5956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  501.371526][ T5956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  501.432404][ T5956] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  501.481555][ T5956] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  501.492077][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.539754][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  501.542594][ T5902] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  501.590300][T10658] 9pnet_fd: Insufficient options for proto=fd
[  501.769538][ T5956] usb 7-1: config 0 descriptor??
[  501.812400][T10660] loop6: detected capacity change from 0 to 64
[  501.905791][ T6148] Buffer I/O error on dev loop6, logical block 4, async page read
[  502.279613][ T5956] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x3
[  502.288997][ T5956] plantronics 0003:047F:FFFF.000E: unbalanced collection at end of report description
[  503.155593][ T5956] plantronics 0003:047F:FFFF.000E: parse failed
[  503.162029][ T5956] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22
[  503.237880][ T5956] usb 7-1: USB disconnect, device number 9
[  504.379460][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'.
[  504.438513][T10689] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1033'.
[  504.454822][ T5902] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  504.524194][T10689] netlink: 'syz.4.1033': attribute type 1 has an invalid length.
[  504.620472][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1038'.
[  504.691640][ T5902] usb 7-1: Using ep0 maxpacket: 16
[  504.733030][T10699] netlink: 'syz.5.1038': attribute type 20 has an invalid length.
[  504.877984][ T5902] usb 7-1: unable to read config index 0 descriptor/start: -61
[  505.085700][ T5902] usb 7-1: can't read configurations, error -61
[  505.252589][T10699] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  505.261834][T10699] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  505.271355][T10699] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  505.280827][T10699] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  505.335255][ T5902] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  505.641450][T10713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1039'.
[  506.054672][ T5902] usb 7-1: Using ep0 maxpacket: 16
[  506.091691][ T5902] usb 7-1: unable to read config index 0 descriptor/start: -61
[  506.121662][T10715] pim6reg: entered allmulticast mode
[  506.132638][ T5902] usb 7-1: can't read configurations, error -61
[  506.257827][ T5902] usb usb7-port1: attempt power cycle
[  506.624788][ T5902] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  506.676142][ T5902] usb 7-1: Using ep0 maxpacket: 16
[  506.693093][ T5902] usb 7-1: unable to read config index 0 descriptor/start: -61
[  506.702161][ T5902] usb 7-1: can't read configurations, error -61
[  506.822304][T10735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.841277][ T5902] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  506.875552][ T5902] usb 7-1: Using ep0 maxpacket: 16
[  506.893703][T10735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.922411][ T5902] usb 7-1: unable to read config index 0 descriptor/start: -61
[  506.933755][T10731] netlink: 'syz.0.1044': attribute type 12 has an invalid length.
[  506.947004][ T5902] usb 7-1: can't read configurations, error -61
[  506.965190][ T5902] usb usb7-port1: unable to enumerate USB device
[  507.365295][ T5956] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  507.562210][ T5956] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  508.033958][ T5956] usb 5-1: config 0 interface 0 has no altsetting 0
[  508.078582][ T5956] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  508.093942][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.109898][ T5956] usb 5-1: Product: syz
[  508.114198][ T5956] usb 5-1: Manufacturer: syz
[  508.132691][ T5956] usb 5-1: SerialNumber: syz
[  508.155191][ T5956] usb 5-1: config 0 descriptor??
[  508.204185][ T5956] usb 5-1: selecting invalid altsetting 0
[  508.394833][T10742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.403808][T10742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.554419][ T5956] usb 5-1: USB disconnect, device number 35
[  511.132417][T10792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1051'.
[  511.143839][T10792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1051'.
[  511.946700][ T5902] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  511.980592][T10799] pimreg: entered allmulticast mode
[  512.000769][T10799] pimreg: left allmulticast mode
[  512.125010][ T5902] usb 7-1: Using ep0 maxpacket: 32
[  512.137494][ T5902] usb 7-1: config 0 has an invalid interface number: 4 but max is 0
[  512.151108][ T5902] usb 7-1: config 0 has no interface number 0
[  512.165358][ T5902] usb 7-1: config 0 interface 4 has no altsetting 0
[  512.204462][ T5902] usb 7-1: New USB device found, idVendor=1199, idProduct=6802, bcdDevice=3c.48
[  512.223191][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.233582][ T5902] usb 7-1: Product: syz
[  512.238725][ T5902] usb 7-1: Manufacturer: syz
[  512.979806][ T5902] usb 7-1: SerialNumber: syz
[  512.989209][ T5902] usb 7-1: config 0 descriptor??
[  514.038803][T10823] loop6: detected capacity change from 0 to 524287999
[  514.051889][ T5902] sierra 7-1:0.4: Sierra USB modem converter detected
[  514.153274][T10824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1060'.
[  514.566524][ T5902] usb 7-1: Sierra USB modem converter now attached to ttyUSB0
[  514.625657][ T5902] usb 7-1: USB disconnect, device number 14
[  514.707749][ T5902] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  515.026590][ T5902] sierra 7-1:0.4: device disconnected
[  515.307103][T10840] Cannot find map_set index 0 as target
[  515.330293][T10838] 
[  515.332681][T10838] ======================================================
[  515.339845][T10838] WARNING: possible circular locking dependency detected
[  515.346873][T10838] 6.16.0-syzkaller #0 Not tainted
[  515.351899][T10838] ------------------------------------------------------
[  515.358921][T10838] syz.1.1064/10838 is trying to acquire lock:
[  515.365075][T10838] ffff88802587a188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  515.376064][T10838] 
[  515.376064][T10838] but task is already holding lock:
[  515.383432][T10838] ffff88802587a230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  515.393017][T10838] 
[  515.393017][T10838] which lock already depends on the new lock.
[  515.393017][T10838] 
[  515.403429][T10838] 
[  515.403429][T10838] the existing dependency chain (in reverse order) is:
[  515.412442][T10838] 
[  515.412442][T10838] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  515.420273][T10838]        lock_acquire+0x120/0x360
[  515.425304][T10838]        __mutex_lock+0x182/0xe80
[  515.430336][T10838]        refcount_dec_and_mutex_lock+0x30/0xa0
[  515.436506][T10838]        nbd_config_put+0x2c/0x790
[  515.441635][T10838]        nbd_release+0xfe/0x140
[  515.446493][T10838]        bdev_release+0x533/0x650
[  515.451628][T10838]        blkdev_release+0x15/0x20
[  515.456667][T10838]        __fput+0x449/0xa70
[  515.461268][T10838]        fput_close_sync+0x119/0x200
[  515.466590][T10838]        __x64_sys_close+0x7f/0x110
[  515.471810][T10838]        do_syscall_64+0xfa/0x3b0
[  515.476934][T10838]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.483352][T10838] 
[  515.483352][T10838] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  515.491185][T10838]        lock_acquire+0x120/0x360
[  515.496216][T10838]        __mutex_lock+0x182/0xe80
[  515.501248][T10838]        __del_gendisk+0x129/0x9e0
[  515.506481][T10838]        del_gendisk+0xe8/0x160
[  515.511372][T10838]        nbd_dev_remove_work+0x47/0xe0
[  515.516855][T10838]        process_scheduled_works+0xade/0x17b0
[  515.523028][T10838]        worker_thread+0x8a0/0xda0
[  515.528247][T10838]        kthread+0x70e/0x8a0
[  515.532863][T10838]        ret_from_fork+0x3fc/0x770
[  515.537982][T10838]        ret_from_fork_asm+0x1a/0x30
[  515.543277][T10838] 
[  515.543277][T10838] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  515.551727][T10838]        validate_chain+0xb9b/0x2140
[  515.557026][T10838]        __lock_acquire+0xab9/0xd20
[  515.562228][T10838]        lock_acquire+0x120/0x360
[  515.567261][T10838]        down_write+0x96/0x1f0
[  515.572057][T10838]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  515.578422][T10838]        nbd_start_device+0x16c/0xac0
[  515.583811][T10838]        nbd_genl_connect+0x135b/0x18f0
[  515.589372][T10838]        genl_family_rcv_msg_doit+0x215/0x300
[  515.595457][T10838]        genl_rcv_msg+0x60e/0x790
[  515.600841][T10838]        netlink_rcv_skb+0x205/0x470
[  515.606228][T10838]        genl_rcv+0x28/0x40
[  515.610734][T10838]        netlink_unicast+0x75c/0x8e0
[  515.616029][T10838]        netlink_sendmsg+0x805/0xb30
[  515.621321][T10838]        __sock_sendmsg+0x21c/0x270
[  515.626532][T10838]        ____sys_sendmsg+0x505/0x830
[  515.631838][T10838]        ___sys_sendmsg+0x21f/0x2a0
[  515.637047][T10838]        __x64_sys_sendmsg+0x19b/0x260
[  515.642520][T10838]        do_syscall_64+0xfa/0x3b0
[  515.647558][T10838]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.653992][T10838] 
[  515.653992][T10838] other info that might help us debug this:
[  515.653992][T10838] 
[  515.664225][T10838] Chain exists of:
[  515.664225][T10838]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  515.664225][T10838] 
[  515.678420][T10838]  Possible unsafe locking scenario:
[  515.678420][T10838] 
[  515.685880][T10838]        CPU0                    CPU1
[  515.691248][T10838]        ----                    ----
[  515.696621][T10838]   lock(&nbd->config_lock);
[  515.701224][T10838]                                lock(&disk->open_mutex);
[  515.708437][T10838]                                lock(&nbd->config_lock);
[  515.715558][T10838]   lock(&set->update_nr_hwq_lock);
[  515.720797][T10838] 
[  515.720797][T10838]  *** DEADLOCK ***
[  515.720797][T10838] 
[  515.728961][T10838] 3 locks held by syz.1.1064/10838:
[  515.734171][T10838]  #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  515.742393][T10838]  #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  515.751549][T10838]  #2: ffff88802587a230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  515.761594][T10838] 
[  515.761594][T10838] stack backtrace:
[  515.767488][T10838] CPU: 1 UID: 0 PID: 10838 Comm: syz.1.1064 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  515.767509][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  515.767519][T10838] Call Trace:
[  515.767526][T10838]  <TASK>
[  515.767532][T10838]  dump_stack_lvl+0x189/0x250
[  515.767561][T10838]  ? __pfx_dump_stack_lvl+0x10/0x10
[  515.767586][T10838]  ? __pfx__printk+0x10/0x10
[  515.767606][T10838]  ? print_lock_name+0xde/0x100
[  515.767626][T10838]  print_circular_bug+0x2ee/0x310
[  515.767647][T10838]  check_noncircular+0x134/0x160
[  515.767667][T10838]  validate_chain+0xb9b/0x2140
[  515.767693][T10838]  __lock_acquire+0xab9/0xd20
[  515.767710][T10838]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  515.767730][T10838]  lock_acquire+0x120/0x360
[  515.767743][T10838]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  515.767766][T10838]  ? kernfs_add_one+0xf0/0x520
[  515.767787][T10838]  down_write+0x96/0x1f0
[  515.767805][T10838]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  515.767830][T10838]  ? __pfx_down_write+0x10/0x10
[  515.767849][T10838]  ? kernfs_add_one+0xf0/0x520
[  515.767869][T10838]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  515.767891][T10838]  ? sysfs_add_file_mode_ns+0x238/0x300
[  515.767906][T10838]  ? sysfs_add_file_mode_ns+0x259/0x300
[  515.767924][T10838]  nbd_start_device+0x16c/0xac0
[  515.767945][T10838]  ? __nla_parse+0x40/0x60
[  515.767962][T10838]  ? device_create_file+0xf4/0x1c0
[  515.767984][T10838]  nbd_genl_connect+0x135b/0x18f0
[  515.768007][T10838]  ? __pfx_nbd_genl_connect+0x10/0x10
[  515.768029][T10838]  ? __nla_parse+0x40/0x60
[  515.768048][T10838]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  515.768069][T10838]  genl_family_rcv_msg_doit+0x215/0x300
[  515.768088][T10838]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  515.768113][T10838]  genl_rcv_msg+0x60e/0x790
[  515.768130][T10838]  ? __pfx_genl_rcv_msg+0x10/0x10
[  515.768145][T10838]  ? __pfx_nbd_genl_connect+0x10/0x10
[  515.768167][T10838]  netlink_rcv_skb+0x205/0x470
[  515.768189][T10838]  ? __pfx_genl_rcv_msg+0x10/0x10
[  515.768205][T10838]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  515.768230][T10838]  ? down_read+0x1ad/0x2e0
[  515.768249][T10838]  genl_rcv+0x28/0x40
[  515.768262][T10838]  netlink_unicast+0x75c/0x8e0
[  515.768297][T10838]  netlink_sendmsg+0x805/0xb30
[  515.768324][T10838]  ? __pfx_netlink_sendmsg+0x10/0x10
[  515.768348][T10838]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  515.768363][T10838]  ? __pfx_netlink_sendmsg+0x10/0x10
[  515.768384][T10838]  __sock_sendmsg+0x21c/0x270
[  515.768403][T10838]  ____sys_sendmsg+0x505/0x830
[  515.768428][T10838]  ? __pfx_____sys_sendmsg+0x10/0x10
[  515.768454][T10838]  ? import_iovec+0x74/0xa0
[  515.768476][T10838]  ___sys_sendmsg+0x21f/0x2a0
[  515.768499][T10838]  ? __pfx____sys_sendmsg+0x10/0x10
[  515.768534][T10838]  ? __fget_files+0x2a/0x420
[  515.768562][T10838]  ? __fget_files+0x3a0/0x420
[  515.768589][T10838]  __x64_sys_sendmsg+0x19b/0x260
[  515.768620][T10838]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  515.768651][T10838]  ? rcu_is_watching+0x15/0xb0
[  515.768670][T10838]  ? do_syscall_64+0xbe/0x3b0
[  515.768689][T10838]  do_syscall_64+0xfa/0x3b0
[  515.768704][T10838]  ? lockdep_hardirqs_on+0x9c/0x150
[  515.768719][T10838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.768734][T10838]  ? clear_bhb_loop+0x60/0xb0
[  515.768752][T10838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.768766][T10838] RIP: 0033:0x7fa1a6d8ebe9
[  515.768781][T10838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  515.768795][T10838] RSP: 002b:00007fa1a7b50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  515.768812][T10838] RAX: ffffffffffffffda RBX: 00007fa1a6fb5fa0 RCX: 00007fa1a6d8ebe9
[  515.768824][T10838] RDX: 0000000000000000 RSI: 0000200000002800 RDI: 0000000000000004
[  515.768835][T10838] RBP: 00007fa1a6e11e19 R08: 0000000000000000 R09: 0000000000000000
[  515.768845][T10838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  515.768854][T10838] R13: 00007fa1a6fb6038 R14: 00007fa1a6fb5fa0 R15: 00007ffc88e52eb8
[  515.768871][T10838]  </TASK>
[  516.424661][T10838] nbd1: detected capacity change from 0 to 549764202496
[  516.651018][ T5848] block nbd1: Receive control failed (result -104)