last executing test programs:

11m40.007858001s ago: executing program 1 (id=530):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x2}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r4, &(0x7f0000000800)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2}}}], 0x20}}], 0x1, 0x48040)
r5 = dup2(r3, r0)
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x24000004)
sched_setaffinity(r6, 0x0, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, 0x0, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0)
pread64(r9, &(0x7f00000000c0)=""/83, 0x4da, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, 0x0, 0x0}, 0x94)

11m39.679919591s ago: executing program 1 (id=531):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r7, 0x0, 0x1}, 0x18)
ioctl$sock_proto_private(r5, 0x89ee, &(0x7f0000000300)="e50ead1a7761933bd8e333f9d5e6f51191")
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

11m33.394843745s ago: executing program 1 (id=537):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(0x0, 0x1, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x5}, 0x1, [0x2, 0x84, 0x1c00000000000000, 0x7fffffffffffffff, 0x3, 0x3896, 0x5, 0x1, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7ff, 0x80, 0x2fc2f8ae, 0x2, 0x101, 0x8001, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x2, 0x10, 0xd, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x8, 0xffff, 0x144be44d, 0xc3b, 0x400000000003, 0x0, 0x12, 0x2, 0x8, 0x100bb9, 0x2, 0x6, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0xb9b, 0x5, 0x1, 0x6, 0x80, 0x4, 0xc4, 0x8001, 0x5, 0xffff, 0x8, 0x1, 0x100000001, 0x81, 0x3, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x2, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0xd05, 0xf, 0xab7c, 0x4, 0x4, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x9, 0x1ff]})
r3 = userfaultfd(0x801)
r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x800)
ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000240)={0x3, 0x8})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x4c}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

11m32.616779364s ago: executing program 1 (id=540):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f0000000100))
openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'rose0\x00', @broadcast})
bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@local, <r5=>0x0}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r6=>0x0, 0x2b, 0xf9, 0xff, 0x5, 0x20, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x35aedd66}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'sit0\x00', <r9=>0x0, 0x10, 0x80, 0x7, 0xca3, {{0x23, 0x4, 0x3, 0x38, 0x8c, 0x67, 0x0, 0xa1, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, {[@cipso={0x86, 0x2e, 0x1, [{0x0, 0x9, "afdfd8d58a0d6d"}, {0x7, 0x10, "cb314f594a0d2592695a59718986"}, {0x7, 0x6, "1db5a644"}, {0x1, 0x9, "06eaf63a129959"}]}, @cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x3, 0xb, "283ff9de7f42785459"}, {0x2, 0x4, "8fed"}, {0x1, 0x10, "4e4bdcf4b57aa137f1cc252577e4"}, {0x6, 0xd, "be8239f53d158f760c05d2"}, {0x7, 0x9, "3b2c2365d9d770"}]}, @generic={0x88, 0xe, "b216db40fd457b8107a0dc96"}]}}}}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1b8, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20004000}, 0x480c0)
getsockopt$inet_buf(r4, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14)

11m31.135585402s ago: executing program 1 (id=542):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
socketpair(0x18, 0x3, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0xce, 0x0, 0x1, 0x1, 0x4000, 0x1}, 0x20)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x10)
landlock_restrict_self(r7, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'vlan1\x00', 0x20})
ioctl$TUNGETFILTER(r6, 0x801054db, 0x0)
syz_usb_connect(0x4, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0)

11m27.990184826s ago: executing program 1 (id=551):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), 0x0)

11m12.594790058s ago: executing program 32 (id=551):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), 0x0)

2m45.457831038s ago: executing program 0 (id=2194):
syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00')
syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
inotify_init()
r4 = open(&(0x7f0000000140)='./file0\x00', 0x60842, 0xe7)
fcntl$setlease(r4, 0x400, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r8}, &(0x7f00000008c0), &(0x7f0000000980)='%pB    \x00'}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000090000000500000000000038f3bbe583ae8686e6439cd014369961dc08165add4be6879b4586ceb1baac1e20e3d1db42524f87c1812091e5ce74e77ce98c27c0d5cf1b8b4b8a2578bc82ef2a675335b251fa27f482"], 0x0, 0x26, 0x0, 0xfffffffd}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0x2020)

2m42.665837326s ago: executing program 0 (id=2204):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x0, 0xf0ffff}}, @TCA_CT_ACTION={0x6, 0x3, 0x9}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}})

2m40.52336528s ago: executing program 0 (id=2206):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) (async)
r2 = eventfd2(0x180, 0x0)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"])
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1})
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x0) (async)
write$eventfd(r3, &(0x7f00000000c0)=0x8, 0x0)

2m39.363766027s ago: executing program 0 (id=2210):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x20, 0x67, 0x9e, 0x8, 0xc72, 0x14, 0xc776, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x1, 0x28, 0xff}}]}}]}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x63, 0x9, 0x3, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0xb, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x240, 0x3, 0xe, 0x4000000, 0x80008071, 0x7, 0x17, 0x2, 0x7, 0x4005, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x10000, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x9, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x0, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x9, 0x3], [0x7, 0x408, 0x4, 0x20005, 0xfffffffe, 0x100, 0x3, 0x9, 0x5, 0x9, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x8, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x7, 0x3, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x1000a2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x1, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343f, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000038001eb7d162a10ca2d90000090000000000000b010000000000000000000004000000000200000000000012020000000d00000002000000040000000000000003000000040000000f000000040000000400000001000000020000000000000e0300000000000000002e5f00"], 0x0, 0xffffffffffffff2b}, 0x20)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
connect$unix(r3, &(0x7f0000000880)=@file={0x1, './cgroup/../file0\x00'}, 0x6e)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60)
pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000280)='./file0\x00')
syz_open_dev$MSR(&(0x7f0000000100), 0x41e1, 0x0)
r4 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x29)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000280)={0x0, 0x6, 0x2d, "08767c2e2340f473d2b5d903f5141956d254f6eabdddfac32a5fea76807311c75af6aa97885238fa9d184a327a"}, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

2m35.772216621s ago: executing program 0 (id=2218):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r7, 0x0, 0x1}, 0x18)
ioctl$sock_proto_private(r5, 0x89ee, &(0x7f0000000300)="e50ead1a7761933bd8e333f9d5e6f51191")
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2m35.42797048s ago: executing program 0 (id=2221):
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0])

2m34.206986505s ago: executing program 33 (id=2221):
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0])

2m32.914630321s ago: executing program 5 (id=2228):
socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, &(0x7f0000003480)={0x2, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000), 0x1)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {<r1=>r0}}, './file0\x00'})
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, 0x0, 0x4004815)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000021c0)='/sys/kernel/vmcoreinfo', 0x84000, 0x13c)
unshare(0x40400)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xffffffffffffff9c, &(0x7f0000002100)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000080)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
unshare(0x4c060d00)
mkdirat(0xffffffffffffffff, &(0x7f0000002180)='./file0\x00', 0x8)
bind$802154_dgram(r5, &(0x7f00000001c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14)

2m30.987985688s ago: executing program 5 (id=2234):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000010c0), 0x9e5, 0x8501)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)

2m29.7438998s ago: executing program 5 (id=2237):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f0000000100))
openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'rose0\x00', @broadcast})
bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@local, <r5=>0x0}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r6=>0x0, 0x2b, 0xf9, 0xff, 0x5, 0x20, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x35aedd66}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', <r9=>0x0, 0x2f, 0x9, 0x2, 0x1, 0x54, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x8, 0x40, 0xb5, 0x1ff}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'sit0\x00', <r10=>0x0, 0x10, 0x80, 0x7, 0xca3, {{0x23, 0x4, 0x3, 0x38, 0x8c, 0x67, 0x0, 0xa1, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, {[@cipso={0x86, 0x2e, 0x1, [{0x0, 0x9, "afdfd8d58a0d6d"}, {0x7, 0x10, "cb314f594a0d2592695a59718986"}, {0x7, 0x6, "1db5a644"}, {0x1, 0x9, "06eaf63a129959"}]}, @cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x3, 0xb, "283ff9de7f42785459"}, {0x2, 0x4, "8fed"}, {0x1, 0x10, "4e4bdcf4b57aa137f1cc252577e4"}, {0x6, 0xd, "be8239f53d158f760c05d2"}, {0x7, 0x9, "3b2c2365d9d770"}]}, @generic={0x88, 0xe, "b216db40fd457b8107a0dc96"}]}}}}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1b8, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20004000}, 0x480c0)
getsockopt$inet_buf(r4, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14)

2m26.817899097s ago: executing program 5 (id=2246):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000081180002800400010010000380"], 0x44}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000029c0)=ANY=[@ANYBLOB="14b1546aebb561", @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf254a000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001080)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x8004)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002600), 0xffffffffffffffff)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002640)=<r8=>0x0, &(0x7f0000002680)=0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000002980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002800)={0x154, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x154}}, 0x40000)
write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0010005f95eae06a597f17a7fdba0cecde35172e5354ce830c09cd87e22954a53927377c0ea699d90000000000000002dc7b146ef18f"], 0x15)
r9 = dup(r5)
write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18)
rename(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='./file0\x00')
recvmsg$kcm(r9, &(0x7f0000000200)={&(0x7f0000000140)=@x25, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/188, 0xbc}, {&(0x7f0000002440)=""/212, 0xd4}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000002700)=""/210, 0xd2}], 0x4, &(0x7f0000002540)=""/96, 0x60}, 0x2020)
write$FUSE_DIRENT(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020)
ioctl$TCFLSH(0xffffffffffffffff, 0x4b63, 0x3)
syz_usb_connect(0x2, 0xa1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a40008090501010002"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0})
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)

2m25.023934852s ago: executing program 5 (id=2254):
creat(&(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
pwritev2(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001540)="c6ebca011ec908dc787e32e90a69dff54c3bd708ad19d73996bff71807df0705b4cbfc9760f1ca44a42dde44fa4d911d5d8f5f661cfdc6288db34060dfd35c9378446068facdea484f49fedaba869839879dc3974ac1edc078e980174cacbcdef8839faf45924704ae7f104effb0fa30df14a128ae5b62aab99bcb5ade57be983f53301256151c", 0x87}], 0x2, 0xa, 0x80000007, 0x2) (fail_nth: 2)

2m24.405539779s ago: executing program 5 (id=2257):
r0 = socket$inet(0x2, 0x3, 0xd)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000100))
r1 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000040012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d0000000000010902240001000000220904000001030002000921000000012204000905810300"], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8100, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
bind$llc(r4, &(0x7f0000000280)={0x1a, 0x322, 0xbf, 0x1, 0xa, 0xdf, @broadcast}, 0x10)
ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000830000/0x3000)=nil, 0x3000})
syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0021ac"], 0x0, 0x0, 0x0, 0x0}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="2505e885b5ebb2755b35dae02200001de1d9b2bc001609efb953643e8a0a0e5a45332703fba058acb7e4cd7c6d7aa34520b38fd1046ccdd89a6a3c83fe9897c4de4c491307cb59c770fe86dfae457c0355b9ec1d022426993d71dd95eb6d9cd9aa7f", 0x62)

2m9.287942337s ago: executing program 34 (id=2257):
r0 = socket$inet(0x2, 0x3, 0xd)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000100))
r1 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000040012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d0000000000010902240001000000220904000001030002000921000000012204000905810300"], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8100, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
bind$llc(r4, &(0x7f0000000280)={0x1a, 0x322, 0xbf, 0x1, 0xa, 0xdf, @broadcast}, 0x10)
ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000830000/0x3000)=nil, 0x3000})
syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0021ac"], 0x0, 0x0, 0x0, 0x0}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="2505e885b5ebb2755b35dae02200001de1d9b2bc001609efb953643e8a0a0e5a45332703fba058acb7e4cd7c6d7aa34520b38fd1046ccdd89a6a3c83fe9897c4de4c491307cb59c770fe86dfae457c0355b9ec1d022426993d71dd95eb6d9cd9aa7f", 0x62)

2m2.138490568s ago: executing program 4 (id=2317):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r6, 0x4, 0x42000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r7 = signalfd(r4, &(0x7f0000000040)={[0x4064]}, 0x8)
ioctl$RTC_UIE_OFF(r7, 0x7004)
ppoll(&(0x7f00000000c0)=[{r6, 0x200}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000100)={0x0, 0x7f676614, 0x3, 0x800, 0x3, @stepwise={{0x3, 0x4}, {0x8, 0x725e}, {0x5, 0x7}}})
connect$unix(r5, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)

2m1.01690917s ago: executing program 4 (id=2318):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r7, 0x0, 0x1}, 0x18)
ioctl$sock_proto_private(r5, 0x89ee, &(0x7f0000000300)="e50ead1a7761933bd8e333f9d5e6f51191")
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1m59.265867843s ago: executing program 4 (id=2323):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007"], 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0x9, &(0x7f0000000180)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async)
r5 = getpid()
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r5, 0x0, 0x4004) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x0}, 0x94) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003340), 0x0, 0x40000) (async, rerun: 32)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/freeze_filesystems', 0x101a02, 0xc8) (rerun: 32)
sendfile(r6, r6, 0x0, 0x101) (async)
prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) (async, rerun: 64)
r7 = shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) (rerun: 64)
shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0}) (async)
r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001400)=0x14)
getsockopt$packet_buf(r9, 0x107, 0xd, &(0x7f0000000400)=""/4096, &(0x7f00000000c0)=0x1000)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001440)=ANY=[@ANYBLOB="0800000000772ba6ea6e340535a65179096ce30fb6a9c896508224da7826e1c9", @ANYRES32=r8, @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x24000811) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 64)
socket$inet6(0x10, 0x3, 0x0)

1m59.108024323s ago: executing program 4 (id=2324):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x24000000, 0x0, 0x0)
setgroups(0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000080)=0x203714e722813fa8)
connect$inet(r0, 0x0, 0x0)

1m59.038609825s ago: executing program 4 (id=2325):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4000, 0x0)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
listen(r6, 0x1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810)
connect$unix(r8, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

1m56.125683056s ago: executing program 4 (id=2332):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111, 0x4}}, 0x20)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sync()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x20004004)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
gettid()
sync()
syz_init_net_socket$x25(0x9, 0x5, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r3 = socket(0x14, 0x2, 0x4)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003)
r4 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2)
read$msr(r4, &(0x7f00000002c0)=""/4096, 0x1000)
socket(0x2b, 0x80000, 0x1000)
ioctl$HIDIOCGDEVINFO(r4, 0x801c4803, &(0x7f0000000080)=""/29)
shutdown(r3, 0x1)

1m40.768470887s ago: executing program 35 (id=2332):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111, 0x4}}, 0x20)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sync()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x20004004)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
gettid()
sync()
syz_init_net_socket$x25(0x9, 0x5, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r3 = socket(0x14, 0x2, 0x4)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003)
r4 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2)
read$msr(r4, &(0x7f00000002c0)=""/4096, 0x1000)
socket(0x2b, 0x80000, 0x1000)
ioctl$HIDIOCGDEVINFO(r4, 0x801c4803, &(0x7f0000000080)=""/29)
shutdown(r3, 0x1)

22.058024864s ago: executing program 7 (id=2566):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9e, &(0x7f0000000080)=[{&(0x7f00000006c0)="1400000030000b07005a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) (fail_nth: 2)

21.38815079s ago: executing program 7 (id=2568):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) (fail_nth: 2)

21.156457116s ago: executing program 7 (id=2570):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', 0x0)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
listen(r6, 0x1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810)
connect$unix(r8, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

18.989125396s ago: executing program 7 (id=2576):
syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00')
syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = inotify_init()
r6 = open(&(0x7f0000000140)='./file0\x00', 0x60842, 0xe7)
fcntl$setlease(r6, 0x400, 0x0)
fcntl$setown(r6, 0x8, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=r8], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r10}, &(0x7f00000008c0), &(0x7f0000000980)='%pB    \x00'}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000090000000500000000000038f3bbe583ae8686e6439cd014369961dc08165add4be6879b4586ceb1baac1e20e3d1db42524f87c1812091e5ce74e77ce98c27c0d5cf1b8b4b8a2578bc82ef2a675335b251fa27f482"], 0x0, 0x26, 0x0, 0xfffffffd}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

17.779017691s ago: executing program 7 (id=2578):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'rose0\x00', @broadcast})
bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240)={@local, <r5=>0x0}, &(0x7f0000000280)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r6=>0x0, 0x2b, 0xf9, 0xff, 0x5, 0x20, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x700, 0x0, 0x35aedd66}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', <r9=>0x0, 0x2f, 0x9, 0x2, 0x1, 0x54, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x8, 0x40, 0xb5, 0x1ff}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'sit0\x00', <r10=>0x0, 0x10, 0x80, 0x7, 0xca3, {{0x23, 0x4, 0x3, 0x38, 0x8c, 0x67, 0x0, 0xa1, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, {[@cipso={0x86, 0x2e, 0x1, [{0x0, 0x9, "afdfd8d58a0d6d"}, {0x7, 0x10, "cb314f594a0d2592695a59718986"}, {0x7, 0x6, "1db5a644"}, {0x1, 0x9, "06eaf63a129959"}]}, @cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x3, 0xb, "283ff9de7f42785459"}, {0x2, 0x4, "8fed"}, {0x1, 0x10, "4e4bdcf4b57aa137f1cc252577e4"}, {0x6, 0xd, "be8239f53d158f760c05d2"}, {0x7, 0x9, "3b2c2365d9d770"}]}, @generic={0x88, 0xe, "b216db40fd457b8107a0dc96"}]}}}}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1b8, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20004000}, 0x480c0)
getsockopt$inet_buf(r4, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14)

14.603394797s ago: executing program 7 (id=2587):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r7, 0x0, 0x1}, 0x18)
ioctl$sock_proto_private(r5, 0x89ee, &(0x7f0000000300)="e50ead1a7761933bd8e333f9d5e6f51191")
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

11.309729001s ago: executing program 2 (id=2597):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x8a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0)
syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0x40001c8}, &(0x7f0000001300), &(0x7f0000001180))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x15, 0x6, 0x1, 0x1, 0x400, 0x1, 0x135, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8)
fcntl$getownex(r4, 0x10, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

10.250456643s ago: executing program 8 (id=2599):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
ptrace$poke(0x4, r1, &(0x7f0000000000), 0xe)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x4000)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
read$nci(r0, &(0x7f0000001400)=""/122, 0x2)

8.958526118s ago: executing program 2 (id=2600):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/wireless\x00')
preadv(r0, &(0x7f0000001580)=[{&(0x7f0000001500)=""/27, 0x1b}], 0x1, 0xb537, 0x9c)

8.703979984s ago: executing program 3 (id=2601):
syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00')
syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = inotify_init()
r6 = open(&(0x7f0000000140)='./file0\x00', 0x60842, 0xe7)
fcntl$setlease(r6, 0x400, 0x0)
fcntl$setown(r6, 0x8, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=r8], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r10}, &(0x7f00000008c0), &(0x7f0000000980)='%pB    \x00'}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000090000000500000000000038f3bbe583ae8686e6439cd014369961dc08165add4be6879b4586ceb1baac1e20e3d1db42524f87c1812091e5ce74e77ce98c27c0d5cf1b8b4b8a2578bc82ef2a675335b251fa27f482"], 0x0, 0x26, 0x0, 0xfffffffd}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

8.576995174s ago: executing program 2 (id=2602):
mkdirat(0xffffffffffffff9c, 0x0, 0x40)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640))
io_setup(0x2, 0x0)
syz_emit_ethernet(0x68, &(0x7f0000000040)=ANY=[], 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x388, 0x0, 0x1c4, 0x1c4, 0x2a8, 0x2a8, 0x2a8, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @loopback, 0xff000000, 0xff, 0xe, 0x9, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x101, 0x10, 0x7, 0x3, 0x101, 'ipvlan0\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0xa}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1c4}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x12ed}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3d4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(r0, 0x0, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
socket$inet6(0xa, 0x3, 0x7ff)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r3, 0x5, 0x3, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)

7.266932666s ago: executing program 6 (id=2603):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r0, 0x400, 0x1)

7.266358212s ago: executing program 3 (id=2604):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x7, 0xe, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x42}}]}, 0x70}, 0x1, 0x7}, 0x0)
close(r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r11=>0x0}) (async)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r12, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x28}}, 0x4004) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@deltclass={0x74, 0x29, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xa, 0xe}, {0x1, 0xd}, {0xf, 0xfff2}}, [@tclass_kind_options=@c_cbs, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0xf9, 0x1}}, @TCA_RATE={0x6, 0x5, {0x18, 0x4}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x2, 0xb4}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x0, 0x5, {0x21, 0x11}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000)
syz_emit_ethernet(0x63e, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x608, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x5, 0xe, "7db4000005d4a3b4364be7baa2d73b4ac24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d980110420fa979a3"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x1f, 0x4, "d429145c793e823829b4376332b2c98aee2dae3e1cb11adb2b381eb30650ac6c45f9"}, {0x0, 0xa2, "130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e720fdb20af8ab0a6a09dfcdacf69923d60a0efeacf81e1e7e17db9547a4962bdec794c013af7210e54d43f3fe7da2f88c674f4cfd818f6a7461368bf62f1d5f98fd9394eb74bf0559f1c6b1ebec57dba007f143108ca4be3fa330cc21a411b0b7af23ebd9282be17fb702a5ca61650b283eec78e0280e4f2713b42bd4e3615c48c55c1abe5827601038109736f9c6b7242e7c9c917309397b864eedf5ca71db1debb609b6381b54955706017731319e0cc41083f99bd11da748b47d8715080899eb15caf19df36632b73bb22596b8e16186a2e51e277f8c78df609ca44a83914e8f7a8b053210573941b560ff8b114326678c6851c74596300b1c2a1ddc0af5b4cb5f15fa61e42214341368152275070973f3063f35fded9eeb535a0837783921dc2b705e0a0ceacca1882ff23813bc9199a9be39559c9f82a7452ce6113780cd7d26f532b72603afbfe994f5baf7257c9a33b9ac1ecd0b69da263daa9ac7e6a8d4400341926ed1f0c0e9086009c7945c0b255716f5b0dac45a9af480dc1f17beba2a2cddeafed29ecc91ce704895e28d0c46e639591c667a7f34500ea98ef557801dccf733fa61f3cf6740e40418745a42a738440ba9fc2ec415ba0fbf34800e6987b902302d552cf869eb350a9a862cd946f8285b03f03067dc9bae653dc701d97c7e6f7c1f0767624ac9e48b041c51697968b1e1733921270e569ac0b1ac7c25d00936ad05f14d67d3225d6a8cecd9fb63205ab14131e2e742977860e4a38ec056cda185aa357a059d0180056816a7902bdc0951253005099039bd945a6a4e525123cd4fcb8c5b335626464707fc21e92039b9190020eb9ef84c61cddede466a4c3ea2572927153997c33433ce9de0a7d2ed0b5fb0dce9cc6630bd0635a66be0cb490689169618184e896233d49b8f0e0717ae5d557333d54887ed8d983ee01091326af86e76583131104c66753efd58c32e499be23a05249b98e505c4c0237e2e70506fed29a33169d02b74ba5cbefad267e1107f4468e1144ece9656d35b88e405405fbb1438510f0395752c61e57e760de178a58a8da65040946656220817732fa0cd36189027287597cc5ebe709ca9d9a507babd39f1e56a37657326c7ffb654ce5e2773e92e99783e3152562a21a574f521022314da92315c13a6a696122b211e29a85e81ba7a8fb4dee770d1cacaa2fb02d5fb97676d6402513cccc770ff1a9b9d3b1454ff071d6ed6c4e84249607b64a034b8127893a00aac7ce06a0c2820f7084a8d8e61fc6868c0c2c74005af049ea328a94d5d4534aa99c49208a5f339dec460f5231d6a3e42e4b314c913da4d4127f3d8407e7edbbb044d2e034d6c14c0b86de30afe2d0b92bcaa10cb48c54576114ab1844e25eabc3a8c7906e917b052dfe31e110aaf94876488e3ef926f2d6e6cb635836cb11dbd146a83e2034b7d41ebdaa959f4f74444aceab064af4fb73b5ac964eca5e12834cc5c6d280855bc19c25ce7a5a3dd1a64c1fba0001ee7eebfd25e67ebb5ca47dd6c08543f96a01"}]}}}}}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r13, 0x6, 0x1f, 0x0, &(0x7f0000001e00))
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

7.191791089s ago: executing program 2 (id=2605):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace(0x10, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000a400)={0x2020, 0x0, <r4=>0x0, 0x0, <r5=>0x0}, 0x2020)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x46140, 0x100)
write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x8000, 0x209, 0x1, 0x354, 0x3, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000006400)="9bbd22b09fbd2fb35c4f7fd619bd3f7c64ac7b8ebe80ae3d5dcd944f2b79b2842d41aae592aa845deef381a80aa7000f8ec7ad6835a2b2bd7ed495fe7708123c7ca939e44487767828a5540224c52f7759c76928a175cde8c466344c4e61cb1357369d39eeec5c10cc9ed903b5bf5e851caa15dc6cfbaf077b10bc33c50dfcdd1568e5dd22687fa5d27245c36f46720886a604aa7bcee412c6f4c81c00494b5edb406b12962be767a244f1111281ac50796ce046e8817563d60f095fd6b33e9f5214180cd24101b202df4a4e62cea9ef6a9592eabca774407b89cd6c9caf17d68c847a7782be6c9d327267cc1e16b22f1a4f6c695dfa15a7e996f51070c66dd9cb7ac18432239b8dc180a80c13af3b912c12a38e581584906aa2bcad8f8280e0ee33a77b5c62e13fe5914b67f181b0814c91ef360fbcfb5359a4f8864640d0aa1daf6c1c3fb42ad066d3b4e875caf74d7305cda51c9f7b1a8daf737cf88815b148363445e1f096cea009b4b402a8eed7ad3d2e1f304f3b4658bf6aa1d0ab381de53bad621f9c9bd0e173845ae01d70ab29ba41130e64b872da5bd8f3d5451d3ac83219ede2870aca306595b25794d1bbe211822f35ef5fe723dcb4c6d93eaafc6ab33cfca9a706e297fb74a384548499a80ec36d2e84ec14bd8aefad4fa4e907c464331c93d196be202117d5a5a32df60b632650153aa698577e61dbf40c1f5e6547eafaaef0884826af5451f2b36bfa5f4bf19694bd78c9c788a6cc534ee2860ec20bc107b38c3a779ceb468e0a1260d22950ffab2ec9e2a5a255b62fa3373ccfe6ea4e08bfbfcffb9a83e3d2d2b43604362778f7c13f25e3771168af6383930b95b66c624b52d8690d868d3a38057a5ec3c5f2c58f2df49c3459e02db42c1c195723c0c9b5ad2a3ada677548d0bac7e492a3e304d1591aa57671fb62f35aec55639f869a84dce1172e5dfdb905bc7601325abb63b070ce3164b1e41422a728f17f4a711c92ff2b86fddf698637c4c6a68090a8f858af81f3542f3ab180329a018debe6d6ae2abe87024e5ef4c2ad70aec80fafea78e45db2e83e171ef10108377675117cfca148dc488f735da15d99cb458ed37b23535f572f0f2b053053bd0e7758c3d7956f7ba812d6099bfc3d4c1ca1adc8687bf308c4450987f6a5e19ee44da0d2be18ccfb540c6e73cce2d2518c3b5047491e67a965f0aaf3aa40ac80b1c5ba599b934f00a58c832417ebf5b0a6ae240e82e7dcbd7a26ba1510ba18f3ae053f2154a6ce1285e89c4a61de3678ad098e327dc50907ce3360adb5197bd87651aee3982fa2bfee595fe7c65a41cef22308bb25169f69918aab5686cfb604ad36773babfa7f10d8e519b38c03fa5566209f7bc157d957eaf19eb015be54a90254e2af44942990f577ae1057212c5c5443a1f94a8f2004195ff623a411fc75a3c8b6f236f44215c2479b95abf0ace41ab9a6abaddbe4c524910e69b2079dc84d0742377b8106eb5accd294808acafbccd1e58748c3aa2c0598bf26ad850402b150bd409aff39142adb1aaf2a239cec020b9db50c64b0237ab6e8637fec4038997635fe37d1668d59ba429da7153a0bcca25b4f17145c17894c58d773fa710472b16f2bc10f22535a656d4920221beb1cfe05ea501e8973b5da9fcbed991a055f975896f23d9404a2521733806a507f0f9ec9a6a4d7558536ffc20e4b4aee4c64a8906b0678ee08771717e58e8b4914c873283dcbd9ee1c4531c54768b91f13ac89e068306f8213325267e780d085393ca537e7809eaece0766731103b20e82bff4c93b7d26703733775daf296088fea8fd8319a2a7c3737a732cafb852189d64642bc23dac076bc204fa94a077ce4448ddb03b902a03f93f89068415b224cb88b7b8bb357282312f53f6b4e85af6b3cac0ffa8b97e5cecfd68f239a02c2cd46378c81ab2aead8d6c0a294504dd850c7e274ab1228b31bebc69e547cefad34883256633e4868f05295f55f3d4b1478ea51f7ad8a6b417e69963ed63ef01c1ff38bcd1c4021c1ade7f244e6cadc0eba641b0dea1b459e6f9f44d46c1732cea0144caf86439f4d7fb12ba24dafa40fa94fb88b61252e336692f322c27a0a77ef81a08947de399ec7304e27b27259e32cd1d3abb5d2e3a76514792001d00fba8fc8beb88cf17235d9c28664e3a6c458000a5c7afef521c9001c2dfcde37edf6536341f392f1321b79b599327b8b2b2a77ebd03e0ec1a1604f25d61b41053f520d1982a8cf5cfb9bbf870ee995ea5420e790e2ab0034b55779b9125779bc5e5d0997b80b3369cfc931e3498fd9e294c10468e0a2375f69774d21e7b73dc4da2a5d314c05ec53228768b8a8ffd65d198f5a01a69acaff78fb3949de9860279d8b3f8de626014d7e0c941c2b31218878ceec30ad572de29b34095946788cd58eef8841d76af16731be640b437eaedd7ad38b7a4a0190f79950b60476a9197d56b456d466bb37822753790ce9d7b4c4abb929bf71ff2e49c6d0ca24ea4ae69c140a4926475d1ae9ac23e19a35ec68087507ab89b54912da66ca9949ceb7599845b91e4a93533b66841250818d9c45c6ec8f42ea95d5c0408023dfdcc1fdb9072d1c654089e6b115b9c2a3644c44834e0d92f5d77d0120d937e87c25fe4009d10b3c4cd6dd8662e29bb8cab13eed5a0fc4ee37896fe9a55dd60700d926047b6f041ea74abb9cc6022fd0236d6190f14531ce6edb0c4fbeef03621b61591131318f5637e57d325e12279c0e2e8949d6f5d6f8c7eb9dd0a199333cdc6a9b5edb245b360513cd3f0258dd641ad9fbead8cabdefb76ab6727d1a2a4d9a3a9997eb9e8abf6bcdc0ad4fd96089a35c09c5e65491cfaea8dc0435a2c395cd0f4bc016b4d0bbaca58c8e3f501b64b8cc69c105c29ace6e5424316850781bc3366e92039ad7252bf8293b9ca227e67bb4ec0c56fda7fef8d6c604886999eaa553a44016503edc00e363ddb409ef57642df4847012ea49ee38fc3fc9a4bd2ed71c944e1483089d6ba48009f2931f11ab029ad1e6ce390b469951cc8b84bbabc4f8ae1d1538061841898d02eae7795fbc9a1b919fa6898c0a8788ca5e77727ef60978b29630a74ed7f183dbacba8ab2f92a4aff0b955266f72a908d6703699155108602f63542e0807fe6c13a7152652015ea75316ff56faee5b5f49e6bc01a85f28139afa2e50b10f370a2d5afa19306433a7ff5051de4b112588b9cb8c499c381e469fd83efc15d84dedd41a3bf57b1e8406d588f73ccfc5a0caa70ca9424be0f44f6a694b2230045cf15a8aa0eec1706a51d7f8e7e629f65f9ba232602edfae26df589adb1fec36f81fd86afbd02f79f3b5914c209588b82d292277adaa97c4e68eb20841d33603596072975c8aec91d090c56898aa41710fda2d4696da86b79b9f47a2c875755e9fc9d230f971c2d5284f3e401c748f2e75f5d537b0b593c8e97c498bcb2fedc846e49d0183a15e3424dfc0093c39d1644f2b4b4e49306e8e77a44d006c19f4dc4b0f36ff2bc3452840dd012bb238a79f0699c2f1078634e462a65d4458e9cba6a728bf6be3bf377f793828ee16153e62d432f91d911ccf45f546ba1746b55ca3e44a69dc444d2c85ccbcb5fd47ca7acfb55707674e08bc24d471b91a3c578d0b9890f034e3eaefeb9ea1db15474698dc6b84c3fc2e7a916b0ae90abfa3dea205013398393afa639f4b8545a1b7d50979f73b7a05a457a02335f420df57db60e081111f242df9375e61f7eadcb427b9794770e6791919bd527af1c972dbeb6ac304c9a450c4fd95d478610e2121b802e1bee84f6ccea3c7fc1a2ab4412ddd82c66b5036732c27f77311307d78306a137d8c437ee9d4711328780528f09313f41a64ee547c3f64e0973c9511309121838af913c782bae812cf0a1131818d3650406f34473986034fd69e7ba0c6dd199243324d103693d31fcf0ba29b3262049456a08efea1c8c0ae73f5e5ff0f3eb52805abbabba0755a9e34e5fc1f0a2c4fd1793cc9ff1d8ea10a1acc2788b9703746e96be176ac358c4a18fe399c0a65f955cfe799dfbd155edec413093a5c9defefc88dbbff2582d73282e6eb5d839eccad5667cb56b5fa1f76252a0b7d181b27a000ab281ec86678d92badcb6035fee52c166aa1fa8767db8928a451e9b15804e1c95ea7fb047ea3acbbb4d0fcea400eeefa0196524b3cfe1dbab2ab76d5d7b595b0ef8ec7e31ec4ebde01c438bf4c676e6cddfedadb73c002e3b83d6ec09bd48404f49235ea56c51b7b378338d9a5067f2353cc43c1f37dbd3b1f48514df51d64c536456cf8ee1acc3953e8076cf6cae2d827cf4f94d8f20744aeccacd86c3368e381ebdc47d1364f251842e66c2932927314e2bae663bb83df11e627d142d4eed812febb06a3c3856cc12a6ce1a33bddee122a4d5a6c6c0cc3502627b31fa45c2902e0b670d9e5a4d30bcd208011fa92d313f7974372ae5dff3f9ce8a44d189c63ae6e33a5beb6444a96e425ba70a83339909b5c01b3566378cc89e1a77b97c1989a2e9e2901f9469311af108d8ffb09e2fdf7e036ffe243f741f972b3bf4987e5357b9bf6a2dd2152afd38aceb0379616c20eb2f5dd55224dd6eba0ede705e0b5ddc478f3f430137dd482b049ab059889cd99e2f9e8ec9a93dc46a45a91a7e83e0ba3381265bb7ad865d38a7f2a78e3d0166cb8991fe68ddd69d16037d709486e1ca6b82305eb1b8049d6bd3feb614dcdd2d6681cabb1ce8cbb2973788eacbd8b86dc6474cf758a8df04368b50892145e0c5a38420af39a24e861f149fa357e103c2261e12e8c3c1765ec5989b7b3fafcb701817f3188589ab90bdd5e3639ff3e8dce970d9e11e342fb5fa615f31f92d82dad8bc246c8d110721f9d95f2b6929a1b0748928dfd6e62b2689347a1d067a8317aebb488dfbe599d4c0bae7d7fc4979dfc1d630e32652ae39e7d10806da0eeb18c30961619024c5d2deca5f65138423fe0d7196db681d01936209fd2131b4b57d74be0cf7e59b7cfbe33094e8dcff731c89d619d94a84f63d930e46880a2e9d45eee741082752c83dca96135bf29d35fdd4fd75d0bc58ea1a290ad9f4576256df7812ce408cfd3beb89758137065425f07c1bfe2c62d050ff303197f0ed01057ca9d58f18db1aad542905dd26d584aa47953275cd62ced0cefcee714dc0ea6e08bb639d436d0ebe312c5c5bd20977ce7944853b681ae71dda0780691c8ad142047b5fbc821f0f5292330e8e9e2f7a4d7e8b42e85cc35923bde0041d1d0a5a5c96962b4ff99c1bf88d91bb3ebfdf96a89e8ebc4992cb3ca27bdcc1ca80f52d78f344090126b32a4c6cb42ca281cd14e5de431ef4d5a64993083e85c4e2a8bc9dd9ce18a70d12f4d59fade9c3794abb679f6014dda15126b66e04bc3055870cdef12ff9d43e18ce948d58cf02ef065d8647054905232d525000dab5999cbd6ebe212d32d2c80599b79428f77b27ffb53eae6eb755cf786a4566e02435eacf932db4201aaab7d5a0a4cb44e95c1674cdbb48fdd02136b65177e5fc1bbd6b63e6eb65c12730ee9b495be6d27a5f05c4b2a4c99afbc25efb61ac1a051b1260bed695350b1f305850d699b501806b34e5334f184bc847153aee13892d8397bfd4104ff0f2abe211ff01df42c28fa7650e0e1c72a4b91403bb127abe163d367e6f9b16b0b671c4cf2c76dd5041c0256a84de0a52641dea1f5ae2d036de136eabaf5fefce8a678b71f6ad6b8ce19da13e1c9a6d0262e6f88de33e1b6ed427f6c9e3ddc3065aa892d986fafb7718ec842c9f00dca0c750dcfa80b6f87c6e60d5dcfde176495066aaa547f3353edb3a1abd10d15cbb92b40e4ad5072d29ae1628acecb532b36c6baf4b5af55628a7850d12ea32bfb79a39f3f54ccbde37c99b61563502039a204ee848998e8f327c1f67bff899d4c06346f7fd47755374e1ac6eb6682b922cdc594c4f4c274d259f965218b4d4d71140f93ba328a1d5d9e6a9714835faafe8eddad1222fd8423c9f0aba7d348e57d533686954e0dfd0dc2133cd685f6c06d7e641fc71126943971a721f3fe62e145a40d4e0baeca04bc6e285a220aff92ebd8513456ca19e15fcce7b0172c44edb1a6b5b80feaaab986921033da2d09499ebcbbd2a02d7d6609c7c51b2944b6e062966d838e36d895a07f420a9c8879024dd23bca910e292f1e3bfb968454c50eedafb63b4901cc369aebb1ad439c1213fbaa6db03618f7358445492c83a0cf06211635ae4d7da841fc923dfa16e681cb3d1593706cc8a67b3cb5908e33562159af99f69f805bc251ea6bb01f3360efd86ff198c7c6cd46e6ba6c9f0d43228b4a9919e3d59d58111bbd299073bfbb10143dd6d1ab332bff605e133adc91f01977397be4e584c662e541ff428fc6446f49e3cc6a3567049922b043591d3a890e7d2be8358a22cd2ce168b631f6a863a3ab64fff52654befd1e38adf2e5df935dae73236a2a6dd1c85ae55fdb126f394c340aa6d2ddb2863a8b9b4ebd5bc41b69ba704a9e1ea60814771774d22d3876377d4e389b8a86e5de267646a684e93e7e273050401c007bc91f2e1a24a20e3c732fe5a67ecf155de295dd6b12e01ccc7b46f5b298af30a2b73512b5aaf3b5b0393fb5d888c3779047984ec69fb308e68f8c3bc5db797dca978592a14a97f9ddaba08d0286aa412b2cd067b625db60180e404a428b7929509b1239e6a266c737d83ba0fba35c256e86b446b8a23312fe0fdcd220536b62488f4f8198b63eca167ab1602da2a6dcffc6eb838e0576fe4518e79f1b1a84fc526b1bdbd2111fb1ff7ed1f2fe422eef43597a2fdacb418a62962ec9c29d5fbe69425dc9373cd093f1b55a3297ec5ad515a5103f62b21299048759321868e51a890c314b08cc227b8b2d8f4fa9bb46409a0676585d29304bd6719b215b86a63851e99b949ea1c88ee9d06900818496e6195c29eb16cb3bcf522924d69a5e8eb9c0166928ed9eec0e26151903b08539ddae09c0fcd8d1d4386b919cd6235b17f95025e71791d03b3b82e8dc5f778f6c88a7fab5c18e37cfebbeeb9950433dd0ab0d62c7bc19636977722b0aebb7f3c2922086205783132607973df951d5aaf0daceb0824683b3b81a93ca4df16691c03308c4cb041126e995ec70294b57cd23019e50b05733ad39d7ee1d88d837e2e152433925877bdf54413d4a17ead6d3df87005e17a4bf4d8afc9a77d3059a6dd18bbdcaa1710313cec1ac69efd5177c702138fae70f81f27857094e6a269c4dd0eab3acbc74a52607ab890958778534dd136c7c6f2c8a54d194ee82d69a1781db65356f21498783815beb97438c6aabf268ae734288c7283a741b8734caa8771114f44bb1b7e649630877e18663a2cf2b41f1252035ce05094a6fe9dfd571ade2fcd7769b2ebe15ba79b9a9182da09390e752c628cfe531460b5eeed03fce13532d8ea33f33cef98035f3b921bd83672365495599d50177c9d641d7f3d1d99821802167ff48e636bc9faa200512cde00e8bca8d566c4fa91fc7408cfd2cd1010e4e2e6eb8677c0f0d51e52f68cb64b10b31ed55730c2ae2a78c1978ea138d33f84e0db4a4d046f260880c7749f45805cf1a1b0d4b392742dee43b5ec91d78bd586fe70e7e7515f7f0be70f0ed8641214a2355ce888f85c4d8072a5bfc57bab423206de7ab49f8cbde332a1d4b9837773f44a8923858855716721146cada79c581070dbfb3a53bd9c13ffc75b94c338e929a202597ba8408c4ef360630301ee80fc648687d7d5eff51e0bc0a0b3b5b18e633e6730b3acf86a3a34a22aa9ab1367aaa447bb23e9b2100993583c46b9d5ccc1443f8cc2dd2bb07a64a0cbcd142bc44d26e0a5271a6d5af3568ddad172df09272a6097f901921723e8786807da23968b585804fe5a41e94deb3d9dc4069a1ad1cb0f52bd1cae687807df01a1fbe26442cb80dacf61f50e93fca12c9bfbd7e0dc7fe90fb2783ff0df4525969af851839d8dee7115d6010d7ca5565a921ea9bbef7c0987bb1224ecedfdbf9c9256822738d5c7b56036fda0615514146d32a9a3b247f848b6b9782c879aafe22e6060902fd0f49033b6c5419c3dc001ce257e9e6b902f4ce3497b331ca8e669b569a03784547dd9a3ce08bb44ef98e7eb564fbfb7c42b79508d12f93406392a422bd377e1ca208bc93be50e18f3b8daf1545a49f291e86047967d5961c20694e6ce3af71c15ff5afb27635c47e88d16f5ea16efe35f78e402077b0201e1e48b21fc40fed6ae942373da5d49b2be8a0b320113221bb7cad503516ea2af3cc8418aa53bdcf3cbff028f9cb4b1b7a3a9ead9e86e28b8e8252e3ad6de8272a16bee4a358dfff2e2efdd9e25e409eb715586b369093a303663554610680d7175652917a22f9eaec6678fff8c030a0b40e43c42dd6745460e2d08780e516661f8d3c54d30723e849d92355d25ef70ad4f1f4f27aecd5231e0a5a832b7d4a395421a61e949fb059cddd8069e32c8872a1bb7beddc78e426cd14cf6c2001b992dfaaf6e53869881c6963ed018dd3b063be5dae2bdc99fc7c26afdb6142ebd5c3f2d5056828dac7acace9d12c3f5228159292dab681fb754a92e7f7af33bb3b25fa85b8018e46b034469e750c9e20c891dc2929830e37ab43d4ddf57d06c34977e54e923a65578bdc66362eeceb5617835f7690efb60720d113348b1dfab4d2f26686f670f05bcbb4f998d4c4ffff1d1d8f08c3d51193ea51a538ad8ef303d07e263e96d50d70f9492984b51af87f9b5e8af13393fb1cd0159be29149cade47b11ea4296383531aa00c6e8ec7a6d1cf55303257fb125214eae7d9d54bd8d26bec5d2d5aa4779325ae01051cb7e33c54148ebacbc7092f5ea7196559328c32fb674d9a84a055ffeb7283496ad3dbfa07cee420f0ca10d2a4ac9beeef58980f9b2a0ebc7f9531e59cfa8b6fb216cd9604989ff3f1e7bf11c081afa1b806c3f383f3a3f92e31508574ba916f813490bf70891e88046e658a422c76fd337ddeceb409f46fce4b4046b5c7e6dc99883b57a4d9b273fda7800af6b5fbed3aa753c1ec33a4c8c5fdd26578e23108e43e933078517a37f655115e5901ac88d8f53b3aa23b3bd8bbe29a2181543be86fea34c79ffc66c6f1b6e64092b4c6d6d4ea30e3a98e2b0f09dee7b8eb0cd48b0a8a1415f9c2ebbd52c7ea65dfa9235e513b348ef8fa6cef16fa54f2514318e5b3b7aa18712202b59991340b37291436597dbe64146c6be04b46e9021a4a0d926552f2bdd3af76915fb177c9534c5453d0ebb9f261275c2075c4d133bbee85bf43c2b6901a701b02affa810609ba04e5f2de9418cf59ba451186876f6b8e5f2f0b9c324b6525ae1fe60ba935ab42ce60dba23549515034156e3dd8eda6ac9064ffc0518e317266a39aabe53dc2db76c13edb74111b97aeb8db268248b7a39fcc197afa7cd77fc67f7e46f848b00ac928b818facf5572d73338849cc2939f9f2194771604cb7f65645cc91a45645531306576ad7d3f854bf901570e721df8ebf4c3c04147660905bbfec0e50889ff4060a8053ee7085f48e12d4222b51ad841f822dcbe52ab88032fc4288e3e44f77bc673a7ba7b979760988aa7022d5460adca5151fd59c39f5d9e744662b917b52c9fdc2f313a6ef1549ff5e205926a60bbe31a76bc88489259b41c8816e61da3c75a0a1c94227d779d75a7268ea7b50abf219dd61ae92d5e13850d1ab5e51784f4b96298ce2eb3b3bf33c03c0a95a72e8b3933b79c3d18357124df7e0f7d99429a80bd97d0edb83f2fe638cb9081384d4b29d80b7178aaba8aa0a09b3743ca664557d3dc6d7e6f7a78f4b1cfcc6c0341794b5c49d76b5974fbdba19d0fdfee0a9dd39e7245ca0dc0ef33b09d0fcf0c4b31cab9a0cd5257f2f849a08162052818e5269c16812e7b0bd2cab8d1265deaba07259f3c36b73982973f373fa17bb7c6601aed5e16618ee760be125e4a0f927fdfebb0a76e5a78fd5e524f71e794e21b3782b48234a6e7eeae677c5bff4ec6eb403729f1452bfd59aea767df48e43b8dbf0c1e4f05b483b48170ae707a672a36887b11b53505457f2d3607db31c6d0c941199e5b3b2e55983e5ecbf71cd0302517590b5455a1de29441fe537055de1fc825b24eca9fe647556e6e8b1b2cb6b1f01dd437328eb5dd442dee1bad29a3c3d333e076c2441d164009c26280ba3d1299651f30628d2a31e9a5fff5a0577aed2a255ed919329bc8d8969187a8bb58b7f6e9c94ef01773d74638ade95dbd2ab820c6fa62db1e9e906abd46f22c919a8c7e5ffa0979258ad418b5111b119d668b3e3bf3d9a0b8b2910b5cfc4d301341b56e7f5920362e2e0f34cbd882ca3af65c4af44615e25aedfc3f660aa5de3058dcd0ffa42f6ca9bb0eca9ac276263894d074ce93d68d84d8b453adce98a9562bc7d85e2e9dda1b13c86e345983daebe5ea6fcfc22cc30cc9da517b8dd090986267e93936b9bb5fecdb337b3a52eb134855dc4f3883c8fc39332c93901eaca70be9cdf9cd2e075f190be29726ffe97d06f337a0cf9d796a562fa4ae905706188a5fc5ed1152156519fe5ea0eb7dc0d2327c5e3f8e9c134db8563525a9b0aefada63a0bd50d8acfab5f2db169e828f725f825ff2b3464dcbab76d5b9b556f171320f7abe47b18a65ba474a64b6fa766937fee1eb8dc0d1602d326363c20dd1e1d17e2ff3f081406640025eb576cd3b3f03eb82a8667d7ce70a3d026fc5a98fbaffa978f68e52fb07da0d70d97e10c620b1d73f3ac11c32446a782b7627d4ebf4d44552cec25741f11cf2285721c8b054c291d987340ff3e2f989d45f5a3e34d413e3e91ada49127a8cafcf86629c59eeca15e004815a0429dec7b1ab30ea57d7720c695eee4cd678c1c41da30194ace06fe7da9feecd795f9a5122ed7e2ea66c106f8ae8cc12edddb24903151c536363151e615fc2d504fabe9de44b605d4ac3d483e1fee4d3e631204ca833792a168d1a9289530c2b7883320b5149a1a9bf36344f903429f5c4f3a8efa4b3c55280954505435b251a05978c0a511cd737b4a37bd163f12be04dfb9216d8535962654cdefba38ecd19c3ec2f18a8f03d1f8893e6fad55be75694f0be4065a0592356aa7310606359696189a834bac7cbaab260bd303729343a31cd28732d3c8149724280127156a8631ff492285f149451dc021a310122a77a3e21f22e45acd214792b205ee82f30bca3f066cc05ca3c40dca2bb9b158423ee03bf28996284215722ecb7e6cb0d256bc1bf2d2571ec3baaeac8b84845f92dc8d88d27f8957c71590a9c56703f4d158f2fa7b813c480f5bcfbd5db0e47a8097e24f1d5f2091eae4b608329b0c31a82bdd02f645ce0484215c11266d89c5671138a819f249278399b16b6396bf06fc1a3501b235d8e450acb6b0ae50ae254ad4a7f1f95daab3c9a9819e72fda00e28d3f3df651d73c7204086d3fb07fb8f4577a0479defa3f3772cc91d81646ed88923522406793fa1b074aa498a9eddeb824d3cf2bc0f2a971c24203fa6f9f2bb4ea059a6ef00", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x104, {0x0, 0x3, 0x7, 0x2, 0x8005, 0x4, {0x2, 0x200, 0xfffffffffffffff6, 0x3, 0x7, 0x9, 0x800, 0x1, 0xfffffffe, 0x1000, 0x44, 0x0, r5, 0x10000, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})

7.162151094s ago: executing program 6 (id=2606):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', 0x0)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
listen(r6, 0x1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810)
connect$unix(r8, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

6.93168403s ago: executing program 3 (id=2607):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054)
sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r6, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/232, 0xe8}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000480)=""/21, 0x15}], 0x4}, 0x1}], 0x2, 0x2023, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x2, 0x0, "de2170420b42866d263a524b8f533db671e3fb462f6e152472578c7e9359d81409d1a02b9c2248e87414c4cfec9913387fd71cf21f357c8ca38ffddab5d147e98ea2b1cdfaf4e9530630c66996c4905b"}, 0xd8)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, &(0x7f00000002c0)="17e9479ef013fdc7c6652631ffffffffffffffe6f64f441045aa7b7142d35eaf0a5bacb0117d6acd78505400818770e31e5047f238b13e6eaa50f4591b3b95233115000954a3800597243bb2307400", 0xfffffffffffffd41, 0x800, 0x0, 0xfffffffffffffe75)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0)

6.928021444s ago: executing program 8 (id=2608):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4000, 0x0)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
listen(r6, 0x1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810)
connect$unix(r8, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

5.775095279s ago: executing program 3 (id=2609):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x2a, 0x2, 0x2, "0b69e8e1f41910b2eafa4496ba216bc11e00", 0x3132564e})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x40402, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x501, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
io_setup(0x8, &(0x7f00000003c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)='GPL\x00'}, 0x30)
r5 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000040), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004a80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x594, @remote, 0x5}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e21, 0x7fff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c, 0x0}}], 0x2, 0xc0c0)

4.184583889s ago: executing program 3 (id=2610):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_usb_connect$hid(0x4, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12011003000000acc75e3168b50f279e0109022400010102900809040002020301030d00000200060122d40d09058103ef0308010700"/68], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4b, &(0x7f00000003c0)=@string={0x4b, 0x3, "629736aa92e17b087a5379a97e0a4c7cd1ad9df4535e9b8e7e4acc3d7167027261e33bf3a4d67f7b9c2fc5b2e17e61884409000000a018c6be16ce919aa98fbfa23844ba6434f93471"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x801}}]})
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
r3 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={<r8=>0x0}, &(0x7f0000000180)=0xc)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
chmod(&(0x7f0000000140)='./file0\x00', 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x2, 0x5, 0x7, 0x74, 0xffd, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r9, r10, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r9, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)={0x2cc, 0x2e, 0x400, 0x70bd26, 0x25dfdbfe, {0x5}, [@generic="30d9628c78d5f014d96c9735b7453ed5f1c62554bbb1070d256fff85f515d709415efa32990a7e1862e886dc54a38bdbd360a62808f9779ea8519413e25474ce64334392f49636b47d7f09160057aaa858af2adba94bb18a1f6a29699cad4ade587c86fdd9280c922ecf0a", @nested={0x7f, 0x7, 0x0, 0x1, [@typed={0x5, 0x29, 0x0, 0x0, @str='\x00'}, @generic="bd429aace509175f0640176309bc92635e0fea9ccbfd83df359cfabbddea437bd01f800a55f0bbf68f50ce2df616ec5f45d063fec4339796edcb2c86c1728281a7e78cfb87d1ceab00b4b250aec808681eeef1d4d953786d15cbb3c17416d188655e5055e09269813a7149db6e861afb74fe67"]}, @nested={0x100, 0xaf, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @u32=0x5}, @generic="a126f431c07742cfde52d3ba7d4035f82012bfb6cf180480c0b038a1c46d1fb15440609ce07591311d4fa790c901c889b864bea9fef44f3964a733453edb755120427e8db92f8b8b097d0c8ab9377eba8d28fcdf75d6e1afc113e8015c2e29edb9f6914737ca26251afe9a5d846cfb9fc8c5edc9d254bf37c5903daf8d2616a88d63e2560c499d7ee9ed3e371fec1939962278f5c08c1588f758a7dea3d76b9e911c2b28407f47a96445cb2d4822b007ecefbf8eed8429d9a545f4fd3817635f3ee017657f1063bef6cf8b2da5871c76beffc812501cc7d6779533d5b5a42a92d16502b2d7bd2cde10fb8936d131b3a7", @nested={0x4, 0xc6}]}, @typed={0x8, 0x92, 0x0, 0x0, @u32=0x5}, @generic="b92b7b60cec26a86c5d948fdf27deae5582b818d239428dea32045868c5a73981565680eb58a3db72204c9be345288a590dd6b798d1257bfd73126efe7d4b9ba9b329813207fd09ac9a8397fc1cf89df8627fb6fb1282e49a5aece338844a95b02596d2a5c4ac9ec7f964b586f740b35eee1ba6425bd8144d4ff092751d9edb3a72e2b184de07136e7651fad8a1cf3", @nested={0x10, 0xe1, 0x0, 0x1, [@typed={0x8, 0x112, 0x0, 0x0, @u32=0x2}, @generic="52630f01"]}, @typed={0x8, 0x75, 0x0, 0x0, @pid=r8}, @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@local}, @nested={0x8, 0x29, 0x0, 0x1, [@nested={0x4, 0x3a}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r14 = getpid()
ioprio_set$pid(0x2, r14, 0x6000)
tkill(r8, 0x1b)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'nicvf0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r15, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@getchain={0x0, 0x66, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xfff1, 0xfff2}, {0xfff1, 0xe}}, [{0x0, 0xb, 0xfff}, {0x0, 0xb, 0x8}, {0x0, 0xb, 0x5}, {}, {0x0, 0xb, 0x1}, {0x0, 0xb, 0xdd7}, {0x0, 0xb, 0x1}, {0x0, 0xb, 0x13d}]}, 0x58}, 0x1, 0x0, 0x0, 0x20001091}, 0x0)

4.164063108s ago: executing program 2 (id=2611):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4000, 0x0)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
listen(r6, 0x1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810)
connect$unix(r8, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

4.006024011s ago: executing program 8 (id=2612):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20001091}, 0x0) (fail_nth: 2)

3.38117775s ago: executing program 6 (id=2613):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000900)={0x3c, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x77d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004010)

3.345690676s ago: executing program 6 (id=2614):
syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00')
syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = inotify_init()
r6 = open(&(0x7f0000000140)='./file0\x00', 0x60842, 0xe7)
fcntl$setlease(r6, 0x400, 0x0)
fcntl$setown(r6, 0x8, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=r8], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000140)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r10}, &(0x7f00000008c0), &(0x7f0000000980)='%pB    \x00'}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000090000000500000000000038f3bbe583ae8686e6439cd014369961dc08165add4be6879b4586ceb1baac1e20e3d1db42524f87c1812091e5ce74e77ce98c27c0d5cf1b8b4b8a2578bc82ef2a675335b251fa27f482"], 0x0, 0x26, 0x0, 0xfffffffd}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

3.184049354s ago: executing program 8 (id=2615):
mkdirat(0xffffffffffffff9c, 0x0, 0x40)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640))
io_setup(0x2, 0x0)
syz_emit_ethernet(0x68, &(0x7f0000000040)=ANY=[], 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x388, 0x0, 0x1c4, 0x1c4, 0x2a8, 0x2a8, 0x2a8, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @loopback, 0xff000000, 0xff, 0xe, 0x9, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x101, 0x10, 0x7, 0x3, 0x101, 'ipvlan0\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0xa}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1c4}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x12ed}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3d4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(r0, 0x0, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
socket$inet6(0xa, 0x3, 0x7ff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)

2.988678646s ago: executing program 3 (id=2616):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setgid(0xee00)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000421b6011e3f85415e8aaa00010003704000000000000007ea6a49d00", @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028014000300ff01000000000000000000000000000105000900040000000800080017000000"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r9 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x0)
r10 = dup(r9)
syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xfffffffd}, &(0x7f00000003c0)=<r11=>0x0, &(0x7f0000000200)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r10, 0x0, 0x0, 0x0, 0x80000})
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)

2.923386983s ago: executing program 6 (id=2617):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r7)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x1c4, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x1c4}}, 0x2000c050)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f0000002140)=ANY=[])
read$FUSE(r9, &(0x7f0000006300)={0x2020}, 0x2020)
syz_fuse_handle_req(r9, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup2(0xffffffffffffffff, r9)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.963355424s ago: executing program 8 (id=2618):
socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$EVIOCGRAB(r0, 0x40044590, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
unshare(0x28040680)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x2b, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0x6}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xe, 0x6, 0x1, 0x3fa}, 0x1ff, 0x0, 0xffff5b6b, 0x7ff, 0x17e2, 0x1a, 0x1b, 0xe, 0x6, 0x9, {0x3, 0x8, 0x8, 0xfffffff7, 0x7ff, 0x1c0}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x6}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="00000004c486fc025c6302b8000000", @ANYRES32=0x0, @ANYBLOB], 0x50)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f0000000040))
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000280)=0x1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000500)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r7, 0x0)
ioctl$TCSETS(r5, 0x89f0, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"})

958.645434ms ago: executing program 6 (id=2619):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "30693241a6f04035", "e0e6d476803da0686d23e136c58671e3", '\x00', "c962b0c0b5d958c9"}, 0x28)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
r3 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x1000})
close(r3)
listen(r2, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
recvmmsg(r4, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'ipvlan0\x00', 0x0})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080)={r6, 0x8}, &(0x7f00000000c0)=0x8)
recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0)

954.777091ms ago: executing program 2 (id=2620):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mkdir(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', 0x0)
pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
listen(r6, 0x1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810)
connect$unix(r8, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

0s ago: executing program 8 (id=2621):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global'])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
io_uring_enter(0xffffffffffffffff, 0x6e2, 0x600, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
io_submit(0x0, 0x0, &(0x7f00000000c0))
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000002240)='./bus\x00', 0x94)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}]})
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010600000000000000000a0000010900010073797a3100000000300004802c0001800900010068617368000000001c0002800800024000000014080004400000000008000740000000010900020073797a3200000000140000001100010000000000000000000100000a3b50489b54f0072eab76aec651202d7e2686ea97d68a7d9d36a33d9eb192176807dd4d72786286107f662db3d6e08e4275a07b6fe94f5618f90d47fb0134b448065dadbe10f209fc2f263381614c866ad8616d"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]})
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

nd EOD, truncated
[  811.787972][T15728] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  812.119889][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout
[  812.206657][T15731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  812.215932][T15731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  812.228604][T15731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  812.240180][T15731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  813.820480][T15748] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13)
[  813.827104][T15748] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  813.866358][T15750] vhci_hcd: connection closed
[  813.866808][T15748] vhci_hcd vhci_hcd.0: Device attached
[  814.110829][ T5914] usb 41-1: new high-speed USB device number 6 using vhci_hcd
[  814.142500][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout
[  814.151071][ T7140] vhci_hcd: stop threads
[  814.156046][ T7140] vhci_hcd: release socket
[  814.179018][ T7140] vhci_hcd: disconnect device
[  814.344326][ T5928] usb 3-1: USB disconnect, device number 95
[  814.633215][T15763] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  815.126090][ T5928] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  815.196193][T15785] FAULT_INJECTION: forcing a failure.
[  815.196193][T15785] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  815.211718][T15785] CPU: 0 UID: 0 PID: 15785 Comm: syz.4.2294 Not tainted syzkaller #0 PREEMPT(full) 
[  815.211744][T15785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  815.211755][T15785] Call Trace:
[  815.211761][T15785]  <TASK>
[  815.211769][T15785]  dump_stack_lvl+0x16c/0x1f0
[  815.211796][T15785]  should_fail_ex+0x512/0x640
[  815.211821][T15785]  _copy_from_user+0x2e/0xd0
[  815.211848][T15785]  ____sys_sendmsg+0x607/0xc70
[  815.211877][T15785]  ? __pfx_____sys_sendmsg+0x10/0x10
[  815.211907][T15785]  ? __pfx__kstrtoull+0x10/0x10
[  815.211932][T15785]  ___sys_sendmsg+0x134/0x1d0
[  815.211963][T15785]  ? __pfx____sys_sendmsg+0x10/0x10
[  815.211997][T15785]  ? find_held_lock+0x2b/0x80
[  815.212036][T15785]  __sys_sendmmsg+0x200/0x420
[  815.212061][T15785]  ? __pfx___sys_sendmmsg+0x10/0x10
[  815.212092][T15785]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  815.212126][T15785]  ? fput+0x9b/0xd0
[  815.212150][T15785]  ? ksys_write+0x1ac/0x250
[  815.212166][T15785]  ? __pfx_ksys_write+0x10/0x10
[  815.212189][T15785]  __x64_sys_sendmmsg+0x9c/0x100
[  815.212209][T15785]  ? lockdep_hardirqs_on+0x7c/0x110
[  815.212231][T15785]  do_syscall_64+0xcd/0x4e0
[  815.212256][T15785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.212273][T15785] RIP: 0033:0x7f516038eec9
[  815.212288][T15785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  815.212305][T15785] RSP: 002b:00007f5161182038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  815.212323][T15785] RAX: ffffffffffffffda RBX: 00007f51605e5fa0 RCX: 00007f516038eec9
[  815.212334][T15785] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003
[  815.212345][T15785] RBP: 00007f5161182090 R08: 0000000000000000 R09: 0000000000000000
[  815.212355][T15785] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  815.212366][T15785] R13: 00007f51605e6038 R14: 00007f51605e5fa0 R15: 00007ffccf47bfe8
[  815.212390][T15785]  </TASK>
[  815.442642][T15789] netlink: 'syz.4.2295': attribute type 8 has an invalid length.
[  815.481367][ T5928] usb 7-1: device descriptor read/64, error -71
[  815.482645][T15791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2293'.
[  815.654155][T15799] FAULT_INJECTION: forcing a failure.
[  815.654155][T15799] name failslab, interval 1, probability 0, space 0, times 0
[  815.667276][T15799] CPU: 0 UID: 0 PID: 15799 Comm: syz.2.2297 Not tainted syzkaller #0 PREEMPT(full) 
[  815.667300][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  815.667311][T15799] Call Trace:
[  815.667316][T15799]  <TASK>
[  815.667323][T15799]  dump_stack_lvl+0x16c/0x1f0
[  815.667351][T15799]  should_fail_ex+0x512/0x640
[  815.667373][T15799]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  815.667394][T15799]  should_failslab+0xc2/0x120
[  815.667415][T15799]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  815.667433][T15799]  ? __alloc_skb+0x2b2/0x380
[  815.667459][T15799]  __alloc_skb+0x2b2/0x380
[  815.667478][T15799]  ? __pfx___alloc_skb+0x10/0x10
[  815.667501][T15799]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  815.667528][T15799]  netlink_alloc_large_skb+0x69/0x130
[  815.667552][T15799]  netlink_sendmsg+0x6a1/0xdd0
[  815.667580][T15799]  ? __pfx_netlink_sendmsg+0x10/0x10
[  815.667613][T15799]  ____sys_sendmsg+0xa95/0xc70
[  815.667647][T15799]  ? copy_msghdr_from_user+0x10a/0x160
[  815.667669][T15799]  ? __pfx_____sys_sendmsg+0x10/0x10
[  815.667705][T15799]  ___sys_sendmsg+0x134/0x1d0
[  815.667728][T15799]  ? __pfx____sys_sendmsg+0x10/0x10
[  815.667776][T15799]  __sys_sendmsg+0x16d/0x220
[  815.667797][T15799]  ? __pfx___sys_sendmsg+0x10/0x10
[  815.667831][T15799]  do_syscall_64+0xcd/0x4e0
[  815.667857][T15799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  815.667876][T15799] RIP: 0033:0x7f98d958eec9
[  815.667889][T15799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  815.667906][T15799] RSP: 002b:00007f98da372038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  815.667922][T15799] RAX: ffffffffffffffda RBX: 00007f98d97e5fa0 RCX: 00007f98d958eec9
[  815.667933][T15799] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  815.667945][T15799] RBP: 00007f98da372090 R08: 0000000000000000 R09: 0000000000000000
[  815.667956][T15799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  815.667967][T15799] R13: 00007f98d97e6038 R14: 00007f98d97e5fa0 R15: 00007ffd87d862c8
[  815.667993][T15799]  </TASK>
[  815.930830][  T910] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  815.966151][T15805] loop2: detected capacity change from 0 to 7
[  815.973586][T15805] Dev loop2: unable to read RDB block 7
[  815.979165][T15805]  loop2: unable to read partition table
[  815.985093][T15805] loop2: partition table beyond EOD, truncated
[  815.991312][T15805] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  816.042424][ T5928] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  816.085575][  T910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  816.128543][  T910] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  816.177669][  T910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.193086][ T5928] usb 7-1: device descriptor read/64, error -71
[  816.210713][  T910] usb 4-1: config 0 descriptor??
[  816.311605][ T5928] usb usb7-port1: attempt power cycle
[  816.753656][  T910] steelseries 0003:1038:12B6.004D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0
[  816.820855][ T5928] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  816.949532][ T5928] usb 7-1: device descriptor read/8, error -71
[  817.213207][ T5928] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  817.275702][ T5928] usb 7-1: device descriptor read/8, error -71
[  817.291513][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  817.306092][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  817.314910][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  817.323177][   T10] usb 4-1: USB disconnect, device number 86
[  817.339574][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  817.348057][ T5862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  817.391132][ T5928] usb usb7-port1: unable to enumerate USB device
[  817.443245][T15829] lo speed is unknown, defaulting to 1000
[  818.905535][T15829] chnl_net:caif_netlink_parms(): no params data found
[  819.092560][T10619] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  819.136065][T15856] netlink: 'syz.4.2303': attribute type 10 has an invalid length.
[  819.240876][ T5914] vhci_hcd: vhci_device speed not set
[  819.392688][T15856] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  819.764543][T10619] usb 7-1: Using ep0 maxpacket: 16
[  819.795800][ T5862] Bluetooth: hci5: command tx timeout
[  819.890801][T10619] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  819.906592][T10619] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  820.016137][T10619] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  820.180881][T10619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.228311][T15867] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[15867]
[  820.239210][T10619] usb 7-1: Product: syz
[  820.586900][T10619] usb 7-1: Manufacturer: syz
[  820.613078][T10619] usb 7-1: SerialNumber: syz
[  820.642516][T15829] bridge0: port 1(bridge_slave_0) entered blocking state
[  820.653015][T15829] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.675042][T15829] bridge_slave_0: entered allmulticast mode
[  820.708499][T15829] bridge_slave_0: entered promiscuous mode
[  820.739272][T15829] bridge0: port 2(bridge_slave_1) entered blocking state
[  820.750062][T15829] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.767037][T15829] bridge_slave_1: entered allmulticast mode
[  820.784613][T15829] bridge_slave_1: entered promiscuous mode
[  821.118609][   T30] audit: type=1400 audit(1758556287.416:2093): avc:  denied  { ioctl } for  pid=15864 comm="syz.4.2307" path="socket:[48489]" dev="sockfs" ino=48489 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  821.187826][   T30] audit: type=1400 audit(1758556287.516:2094): avc:  denied  { firmware_load } for  pid=6101 comm="kworker/u8:8" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  821.275692][T10619] usb 7-1: cannot find UAC_HEADER
[  821.317349][T15829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  821.325074][T10619] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  821.587272][T15891] mkiss: ax0: crc mode is auto.
[  821.638809][T15829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  821.704861][T15829] team0: Port device team_slave_0 added
[  821.705633][T10619] usb 7-1: USB disconnect, device number 6
[  821.713275][T15829] team0: Port device team_slave_1 added
[  821.729375][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  821.811312][ T5862] Bluetooth: hci5: command tx timeout
[  821.840956][T15878] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  821.847978][T15878] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  821.856642][T15878] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  821.993664][T15829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  822.000615][T15829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  822.034621][T15878] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  822.052333][T15878] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  822.523304][T15878] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  822.546709][T15829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  822.633498][T15829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  822.700906][T15829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  822.752882][T15829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  822.825288][  T910] usb 3-1: new low-speed USB device number 96 using dummy_hcd
[  822.964222][  T910] usb 3-1: device descriptor read/64, error -71
[  823.030092][T15829] hsr_slave_0: entered promiscuous mode
[  823.054869][T15829] hsr_slave_1: entered promiscuous mode
[  823.068517][T15829] debugfs: 'hsr0' already exists in 'hsr'
[  823.087376][T15829] Cannot create hsr debugfs directory
[  823.240807][  T910] usb 3-1: new low-speed USB device number 97 using dummy_hcd
[  823.533554][  T910] usb 3-1: device descriptor read/64, error -71
[  824.010865][ T5862] Bluetooth: hci2: command 0x0c1a tx timeout
[  824.017275][ T5862] Bluetooth: hci4: command 0x0405 tx timeout
[  824.023552][ T5862] Bluetooth: hci1: command 0x0c1a tx timeout
[  824.053296][ T5858] Bluetooth: hci5: command 0x0419 tx timeout
[  824.121219][  T910] usb usb3-port1: attempt power cycle
[  824.342485][T15921] fuse: Unknown parameter 'group_i00000000000000000000'
[  825.721109][   T30] audit: type=1400 audit(1758556292.166:2095): avc:  denied  { map } for  pid=15931 comm="syz.2.2320" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  825.815387][T15829] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  825.818680][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2322'.
[  825.934132][T15829] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  825.949663][T15829] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  826.116137][T15829] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  826.130919][ T5858] Bluetooth: hci5: command 0x0419 tx timeout
[  826.552383][  T910] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  826.746078][  T910] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  826.758668][T15829] 8021q: adding VLAN 0 to HW filter on device bond0
[  826.774249][  T910] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  826.796104][T15829] 8021q: adding VLAN 0 to HW filter on device team0
[  826.863768][  T910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.866517][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state
[  826.878898][ T7149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  826.907134][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state
[  826.914226][ T7149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  826.979321][  T910] usb 7-1: config 0 descriptor??
[  827.027709][T15964] FAULT_INJECTION: forcing a failure.
[  827.027709][T15964] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  827.045822][T15964] CPU: 1 UID: 0 PID: 15964 Comm: syz.3.2327 Not tainted syzkaller #0 PREEMPT(full) 
[  827.045840][T15964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  827.045847][T15964] Call Trace:
[  827.045851][T15964]  <TASK>
[  827.045855][T15964]  dump_stack_lvl+0x16c/0x1f0
[  827.045876][T15964]  should_fail_ex+0x512/0x640
[  827.045901][T15964]  _copy_to_user+0x32/0xd0
[  827.045919][T15964]  simple_read_from_buffer+0xcb/0x170
[  827.045934][T15964]  proc_fail_nth_read+0x197/0x240
[  827.045948][T15964]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  827.045962][T15964]  ? rw_verify_area+0xcf/0x6c0
[  827.045980][T15964]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  827.045993][T15964]  vfs_read+0x1e1/0xcf0
[  827.046006][T15964]  ? __pfx___mutex_lock+0x10/0x10
[  827.046022][T15964]  ? __pfx_vfs_read+0x10/0x10
[  827.046037][T15964]  ? __fget_files+0x20e/0x3c0
[  827.046054][T15964]  ksys_read+0x12a/0x250
[  827.046065][T15964]  ? __pfx_ksys_read+0x10/0x10
[  827.046080][T15964]  do_syscall_64+0xcd/0x4e0
[  827.046097][T15964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  827.046108][T15964] RIP: 0033:0x7fdda438d8dc
[  827.046118][T15964] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  827.046129][T15964] RSP: 002b:00007fdda514e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  827.046140][T15964] RAX: ffffffffffffffda RBX: 00007fdda45e5fa0 RCX: 00007fdda438d8dc
[  827.046147][T15964] RDX: 000000000000000f RSI: 00007fdda514e0a0 RDI: 0000000000000004
[  827.046154][T15964] RBP: 00007fdda514e090 R08: 0000000000000000 R09: 0000000000000000
[  827.046160][T15964] R10: 0000200000000f00 R11: 0000000000000246 R12: 0000000000000001
[  827.046167][T15964] R13: 00007fdda45e6038 R14: 00007fdda45e5fa0 R15: 00007ffed1785378
[  827.046181][T15964]  </TASK>
[  827.627052][  T910] steelseries 0003:1038:12B6.004E: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.6-1/input0
[  828.211435][ T5858] Bluetooth: hci5: command 0x0419 tx timeout
[  828.552336][T15829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  828.628572][  T910] usb 7-1: USB disconnect, device number 7
[  829.364220][   T30] audit: type=1400 audit(1758556295.826:2096): avc:  denied  { create } for  pid=15985 comm="syz.4.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  829.761513][  T910] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  829.817386][T15829] veth0_vlan: entered promiscuous mode
[  829.881840][T15829] veth1_vlan: entered promiscuous mode
[  829.996507][  T910] usb 3-1: Using ep0 maxpacket: 32
[  830.042258][  T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  830.076115][T16006] loop2: detected capacity change from 0 to 7
[  830.088968][T16006] Dev loop2: unable to read RDB block 7
[  830.095113][T16006]  loop2: unable to read partition table
[  830.103329][T16006] loop2: partition table beyond EOD, truncated
[  830.109733][T16006] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  830.109753][  T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  830.192948][  T910] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00
[  830.291361][ T5858] Bluetooth: hci5: command 0x0419 tx timeout
[  830.313962][T15829] veth0_macvtap: entered promiscuous mode
[  830.323021][T15829] veth1_macvtap: entered promiscuous mode
[  830.352284][T15829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  830.360370][  T910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  830.368194][T15829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  830.403045][  T910] usb 3-1: config 0 descriptor??
[  830.411830][ T7149] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  830.434542][ T7149] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  830.473461][ T7157] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  830.546735][ T7157] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  830.645618][ T7151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  830.667296][ T7151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  830.728908][ T7147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  830.736983][ T7147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  830.754800][T16014] fuse: Unknown parameter 'group_i00000000000000000000'
[  830.827673][   T30] audit: type=1400 audit(1758556297.286:2097): avc:  denied  { map } for  pid=15995 comm="syz.2.2334" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  830.856534][   T30] audit: type=1400 audit(1758556297.286:2098): avc:  denied  { write execute } for  pid=15995 comm="syz.2.2334" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  830.893366][T16017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  830.929533][T16017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  831.008382][T16017] batman_adv: batadv0: Adding interface: gretap1
[  831.016124][T16017] batman_adv: batadv0: Interface activated: gretap1
[  831.834794][  T910] usbhid 3-1:0.0: can't add hid device: -71
[  831.840905][  T910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  831.850150][  T910] usb 3-1: USB disconnect, device number 99
[  834.653017][   T30] audit: type=1400 audit(1758556301.116:2099): avc:  denied  { read } for  pid=16030 comm="syz.2.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  834.921621][   T30] audit: type=1400 audit(1758556301.376:2100): avc:  denied  { mount } for  pid=16032 comm="syz.2.2339" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  834.998735][   T30] audit: type=1400 audit(1758556301.376:2101): avc:  denied  { watch watch_reads } for  pid=16032 comm="syz.2.2339" path="/496/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  835.864831][T16057] loop2: detected capacity change from 0 to 7
[  836.061057][T16057] Dev loop2: unable to read RDB block 7
[  836.082362][T16057]  loop2: unable to read partition table
[  836.088998][T16057] loop2: partition table beyond EOD, truncated
[  836.097032][T16057] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  836.222464][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2345'.
[  836.510817][  T910] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  836.727417][  T910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  836.740356][  T910] usb 8-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  836.789859][T16067] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2346'.
[  836.937830][  T910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.949905][  T910] usb 8-1: config 0 descriptor??
[  837.223605][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2349'.
[  837.556320][  T910] steelseries 0003:1038:12B6.004F: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.7-1/input0
[  837.831601][T16080] syzkaller1: entered promiscuous mode
[  837.837101][T16080] syzkaller1: entered allmulticast mode
[  837.871781][T16081] fuse: Unknown parameter 'group_i00000000000000000000'
[  837.900120][T16080] FAULT_INJECTION: forcing a failure.
[  837.900120][T16080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  837.928990][  T910] usb 8-1: USB disconnect, device number 2
[  837.950835][T16080] CPU: 0 UID: 0 PID: 16080 Comm: syz.6.2350 Not tainted syzkaller #0 PREEMPT(full) 
[  837.950862][T16080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  837.950872][T16080] Call Trace:
[  837.950878][T16080]  <TASK>
[  837.950892][T16080]  dump_stack_lvl+0x16c/0x1f0
[  837.950920][T16080]  should_fail_ex+0x512/0x640
[  837.950946][T16080]  _copy_from_iter+0x29f/0x1720
[  837.950976][T16080]  ? __pfx__copy_from_iter+0x10/0x10
[  837.951000][T16080]  ? __lock_acquire+0xb97/0x1ce0
[  837.951025][T16080]  ? _parse_integer_limit+0x17f/0x1d0
[  837.951048][T16080]  ? _kstrtoull+0x145/0x200
[  837.951065][T16080]  ? __pfx__kstrtoull+0x10/0x10
[  837.951087][T16080]  tun_get_user+0x3d3/0x3ce0
[  837.951125][T16080]  ? __pfx_tun_get_user+0x10/0x10
[  837.951152][T16080]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  837.951184][T16080]  ? find_held_lock+0x2b/0x80
[  837.951205][T16080]  ? tun_get+0x191/0x370
[  837.951235][T16080]  tun_chr_write_iter+0xdc/0x210
[  837.951263][T16080]  vfs_write+0x7d3/0x11d0
[  837.951282][T16080]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  837.951311][T16080]  ? __pfx_vfs_write+0x10/0x10
[  837.951327][T16080]  ? find_held_lock+0x2b/0x80
[  837.951367][T16080]  ksys_write+0x12a/0x250
[  837.951384][T16080]  ? __pfx_ksys_write+0x10/0x10
[  837.951409][T16080]  do_syscall_64+0xcd/0x4e0
[  837.951434][T16080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.951454][T16080] RIP: 0033:0x7f09ebd8eec9
[  837.951469][T16080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  837.951486][T16080] RSP: 002b:00007f09ecbd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  837.951504][T16080] RAX: ffffffffffffffda RBX: 00007f09ebfe5fa0 RCX: 00007f09ebd8eec9
[  837.951515][T16080] RDX: 0000000000000036 RSI: 0000200000000100 RDI: 0000000000000004
[  837.951526][T16080] RBP: 00007f09ecbd7090 R08: 0000000000000000 R09: 0000000000000000
[  837.951536][T16080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  837.951546][T16080] R13: 00007f09ebfe6038 R14: 00007f09ebfe5fa0 R15: 00007ffff0eb0848
[  837.951570][T16080]  </TASK>
[  838.172595][    C0] vkms_vblank_simulate: vblank timer overrun
[  838.347972][T16084] netlink: 'syz.2.2351': attribute type 3 has an invalid length.
[  838.355860][T16084] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2351'.
[  838.365018][T16084] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  838.810405][   T30] audit: type=1400 audit(1758556305.266:2102): avc:  denied  { ioctl } for  pid=16097 comm="syz.3.2356" path="socket:[50022]" dev="sockfs" ino=50022 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  838.973748][  T910] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  839.147720][  T910] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  839.157136][  T910] usb 3-1: config 0 has no interface number 0
[  839.259489][  T910] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  839.292838][  T910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.305096][  T910] usb 3-1: Product: syz
[  839.309474][  T910] usb 3-1: Manufacturer: syz
[  839.321366][  T910] usb 3-1: SerialNumber: syz
[  839.346367][  T910] usb 3-1: config 0 descriptor??
[  839.563600][  T910] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  839.656881][   T30] audit: type=1400 audit(1758556306.106:2103): avc:  denied  { read } for  pid=16110 comm="syz.6.2360" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  839.687144][T10619] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  839.702134][  T910] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  839.717542][  T910] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  839.725919][   T30] audit: type=1400 audit(1758556306.106:2104): avc:  denied  { open } for  pid=16110 comm="syz.6.2360" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  839.754516][  T910] usb 3-1: media controller created
[  839.777538][  T910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  840.062689][T16115] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002
[  840.080082][ T7157] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  840.097818][ T7157] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  840.194493][T10619] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  840.205650][T10619] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[  840.216828][T10619] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  840.228236][T10619] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.239522][ T7157] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  840.254187][T10619] usb 8-1: config 0 descriptor??
[  840.279555][  T910] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[  840.325265][T10619] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  840.371654][ T7157] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  840.383966][T10619] dvb-usb: bulk message failed: -22 (3/0)
[  840.396863][T10619] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  840.490046][T10619] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  840.497661][T10619] usb 8-1: media controller created
[  840.503958][T10619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  840.514689][T10619] dvb-usb: bulk message failed: -22 (6/0)
[  840.525238][T10619] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  841.909800][  T910] usb 3-1: USB disconnect, device number 100
[  841.927944][T10619] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input155
[  842.049212][T10619] dvb-usb: schedule remote query interval to 150 msecs.
[  842.096275][T10619] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  842.251234][T16135] loop2: detected capacity change from 0 to 7
[  842.268023][T16132] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  842.281657][ T5928] dvb-usb: bulk message failed: -22 (1/0)
[  842.289599][T16135] Dev loop2: unable to read RDB block 7
[  842.295753][T16135]  loop2: unable to read partition table
[  842.302784][T16135] loop2: partition table beyond EOD, truncated
[  842.309031][T16135] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  842.354462][ T5928] dvb-usb: error while querying for an remote control event.
[  842.424816][T10619] usb 8-1: USB disconnect, device number 3
[  843.050692][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2366'.
[  843.339031][T16132] netlink: 'syz.3.2364': attribute type 1 has an invalid length.
[  843.478061][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2364'.
[  844.222496][T10619] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  844.249589][T16132] 8021q: adding VLAN 0 to HW filter on device bond1
[  844.323231][T16146] bond1: (slave veth3): Enslaving as an active interface with a down link
[  844.480985][  T910] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  844.580852][T10619] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  844.784476][T16156] mkiss: ax0: crc mode is auto.
[  844.863909][  T910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  844.914446][T12989] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  844.928281][  T910] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  844.939612][  T910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.940693][ T5862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  844.973866][ T5862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  844.982906][ T5862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  845.022987][ T5862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  845.030562][ T5862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  845.144584][  T910] usb 3-1: config 0 descriptor??
[  845.162869][T16158] lo speed is unknown, defaulting to 1000
[  845.180908][T10619] usb 8-1: device not accepting address 4, error -71
[  845.189897][T12989] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  845.198482][T12989] usb 7-1: config 0 has no interface number 0
[  845.243363][T12989] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  845.253128][T12989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.272468][T12989] usb 7-1: Product: syz
[  845.285278][T12989] usb 7-1: Manufacturer: syz
[  845.420792][T12989] usb 7-1: SerialNumber: syz
[  845.433909][T12989] usb 7-1: config 0 descriptor??
[  845.582254][T16158] chnl_net:caif_netlink_parms(): no params data found
[  845.624275][  T910] steelseries 0003:1038:12B6.0050: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0
[  845.645314][T12989] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  845.669083][T12989] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  845.693040][T12989] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  845.706860][T12989] usb 7-1: media controller created
[  845.928184][T16176] loop2: detected capacity change from 0 to 7
[  845.939041][T16176] Dev loop2: unable to read RDB block 7
[  845.945030][T16176]  loop2: unable to read partition table
[  845.955962][T16176] loop2: partition table beyond EOD, truncated
[  845.964070][T16176] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  846.314277][T12989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  846.494086][T16158] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.555896][T16182] trusted_key: syz.7.2373 sent an empty control message without MSG_MORE.
[  846.872390][T16158] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.879649][T16158] bridge_slave_0: entered allmulticast mode
[  846.886962][T16158] bridge_slave_0: entered promiscuous mode
[  846.894995][T16158] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.902273][T16158] bridge0: port 2(bridge_slave_1) entered disabled state
[  846.917166][T16158] bridge_slave_1: entered allmulticast mode
[  846.927754][T16158] bridge_slave_1: entered promiscuous mode
[  846.952089][T10619] usb 3-1: USB disconnect, device number 101
[  847.047479][T16158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  847.063521][T16158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  847.171130][ T5858] Bluetooth: hci6: command tx timeout
[  847.188798][T16187] FAULT_INJECTION: forcing a failure.
[  847.188798][T16187] name failslab, interval 1, probability 0, space 0, times 0
[  847.207455][T16187] CPU: 0 UID: 0 PID: 16187 Comm: syz.7.2375 Not tainted syzkaller #0 PREEMPT(full) 
[  847.207481][T16187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  847.207492][T16187] Call Trace:
[  847.207498][T16187]  <TASK>
[  847.207505][T16187]  dump_stack_lvl+0x16c/0x1f0
[  847.207532][T16187]  should_fail_ex+0x512/0x640
[  847.207553][T16187]  ? __kmalloc_noprof+0xbf/0x510
[  847.207574][T16187]  ? bpf_test_init.isra.0+0x9e/0x140
[  847.207592][T16187]  should_failslab+0xc2/0x120
[  847.207613][T16187]  __kmalloc_noprof+0xd2/0x510
[  847.207636][T16187]  bpf_test_init.isra.0+0x9e/0x140
[  847.207663][T16187]  bpf_prog_test_run_skb+0x245/0x2280
[  847.207686][T16187]  ? __fget_files+0x204/0x3c0
[  847.207710][T16187]  ? __fget_files+0x20e/0x3c0
[  847.207727][T16187]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  847.207750][T16187]  ? fput+0x9b/0xd0
[  847.207773][T16187]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  847.207795][T16187]  __sys_bpf+0x1050/0x4de0
[  847.207821][T16187]  ? __pfx___sys_bpf+0x10/0x10
[  847.207844][T16187]  ? ksys_write+0x190/0x250
[  847.207866][T16187]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  847.207903][T16187]  ? fput+0x9b/0xd0
[  847.207925][T16187]  ? ksys_write+0x1ac/0x250
[  847.207942][T16187]  ? __pfx_ksys_write+0x10/0x10
[  847.207963][T16187]  __x64_sys_bpf+0x78/0xc0
[  847.207987][T16187]  ? lockdep_hardirqs_on+0x7c/0x110
[  847.208009][T16187]  do_syscall_64+0xcd/0x4e0
[  847.208033][T16187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.208051][T16187] RIP: 0033:0x7f766898eec9
[  847.208066][T16187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  847.208083][T16187] RSP: 002b:00007f76697d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  847.208101][T16187] RAX: ffffffffffffffda RBX: 00007f7668be5fa0 RCX: 00007f766898eec9
[  847.208112][T16187] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a
[  847.208123][T16187] RBP: 00007f76697d7090 R08: 0000000000000000 R09: 0000000000000000
[  847.208134][T16187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  847.208143][T16187] R13: 00007f7668be6038 R14: 00007f7668be5fa0 R15: 00007ffea12e4568
[  847.208165][T16187]  </TASK>
[  847.208544][T16158] team0: Port device team_slave_0 added
[  847.440693][T16158] team0: Port device team_slave_1 added
[  847.502546][T16158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  847.524162][T16189] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2376'.
[  847.557086][T12989] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  847.570234][T16158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  847.647450][T16158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  847.686064][T16158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  847.727791][T16158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  847.753842][    C0] vkms_vblank_simulate: vblank timer overrun
[  847.792744][T12989] usb 7-1: USB disconnect, device number 8
[  847.934374][T16158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  848.290844][T12989] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  848.420961][T12989] usb 7-1: device descriptor read/64, error -71
[  848.428816][T16203] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  848.443203][T16158] hsr_slave_0: entered promiscuous mode
[  848.449239][T16158] hsr_slave_1: entered promiscuous mode
[  848.518648][T16158] debugfs: 'hsr0' already exists in 'hsr'
[  848.526169][T16158] Cannot create hsr debugfs directory
[  848.670583][T12989] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  848.812748][T12989] usb 7-1: device descriptor read/64, error -71
[  848.872291][   T30] audit: type=1326 audit(1758556315.336:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.2.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  848.921266][   T30] audit: type=1326 audit(1758556315.336:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.2.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  848.921279][T12989] usb usb7-port1: attempt power cycle
[  848.978129][T16158] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  848.990380][T16158] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  848.997262][   T30] audit: type=1326 audit(1758556315.356:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.2.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  849.020706][    C0] vkms_vblank_simulate: vblank timer overrun
[  849.048741][   T30] audit: type=1326 audit(1758556315.356:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.2.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  849.049395][T16158] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  849.073355][   T30] audit: type=1326 audit(1758556315.356:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.2.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  849.103718][    C0] vkms_vblank_simulate: vblank timer overrun
[  849.118558][   T30] audit: type=1326 audit(1758556315.356:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.2.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  849.229777][T16158] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  849.236644][   T30] audit: type=1326 audit(1758556315.356:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.2.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  849.260375][ T5858] Bluetooth: hci6: command tx timeout
[  849.260389][   T30] audit: type=1326 audit(1758556315.356:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.2.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  849.289475][T12989] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  849.681430][T12989] usb 7-1: device descriptor read/8, error -71
[  849.688854][   T30] audit: type=1326 audit(1758556315.356:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.2.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  849.740814][   T30] audit: type=1326 audit(1758556315.356:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16205 comm="syz.2.2381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  849.864774][T16158] 8021q: adding VLAN 0 to HW filter on device bond0
[  849.882850][T16158] 8021q: adding VLAN 0 to HW filter on device team0
[  849.947882][T16158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  850.076773][T12989] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  850.485930][T16158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  850.519006][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state
[  850.526210][ T7157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  850.547147][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state
[  850.554378][ T7157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  851.218693][T16225] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  851.397655][ T5858] Bluetooth: hci6: command tx timeout
[  851.502107][T12989] usb 7-1: device descriptor read/8, error -71
[  851.721668][T12989] usb usb7-port1: unable to enumerate USB device
[  852.100887][T12989] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  852.111383][T16158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  852.252360][T12989] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  852.287305][T12989] usb 7-1: config 0 has no interface number 0
[  852.304986][  T976] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  852.336027][T12989] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  852.397022][T12989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.425671][T12989] usb 7-1: Product: syz
[  852.433845][T12989] usb 7-1: Manufacturer: syz
[  852.443895][T12989] usb 7-1: SerialNumber: syz
[  852.458403][T12989] usb 7-1: config 0 descriptor??
[  852.573583][  T976] usb 4-1: Using ep0 maxpacket: 32
[  852.586836][  T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  852.638415][  T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  852.677418][T16158] veth0_vlan: entered promiscuous mode
[  852.683122][  T976] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  852.697035][T12989] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  852.699900][  T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.720700][T16158] veth1_vlan: entered promiscuous mode
[  852.728280][T12989] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  852.744618][  T976] usb 4-1: config 0 descriptor??
[  852.745256][T12989] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  852.759879][T12989] usb 7-1: media controller created
[  852.793980][T12989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  852.803460][ T5914] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  852.809446][T16158] veth0_macvtap: entered promiscuous mode
[  852.881570][T16158] veth1_macvtap: entered promiscuous mode
[  852.941055][ T5914] usb 3-1: device descriptor read/64, error -71
[  852.946952][T16158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  852.967664][T12989] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[  852.989893][T16158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  853.039912][ T7149] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  853.070922][ T7149] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  853.137556][ T7149] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  853.176185][ T7149] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  853.190953][ T5914] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  853.204621][  T976] ft260 0003:0403:6030.0051: unknown main item tag 0x7
[  853.246382][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  853.262992][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  853.320496][ T8186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  853.342026][ T8186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  853.351296][ T5914] usb 3-1: device descriptor read/64, error -71
[  853.402002][  T976] ft260 0003:0403:6030.0051: chip code: 6424 8183
[  853.411123][ T5858] Bluetooth: hci6: command tx timeout
[  853.461184][ T5914] usb usb3-port1: attempt power cycle
[  853.642890][  T976] ft260 0003:0403:6030.0051: failed to retrieve system status
[  853.651405][  T976] ft260 0003:0403:6030.0051: probe with driver ft260 failed with error -5
[  854.021107][ T5914] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  854.088075][ T5914] usb 3-1: device descriptor read/8, error -71
[  854.240640][T16290] sp0: Synchronizing with TNC
[  854.442876][ T5914] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  854.474630][ T5914] usb 3-1: device descriptor read/8, error -71
[  854.592874][ T5914] usb usb3-port1: unable to enumerate USB device
[  854.825973][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  854.825990][   T30] audit: type=1326 audit(1758556321.176:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16298 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  854.908510][   T30] audit: type=1326 audit(1758556321.176:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16298 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  855.000091][   T30] audit: type=1326 audit(1758556321.176:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16298 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  855.051400][ T5898] usb 4-1: USB disconnect, device number 87
[  855.080366][   T30] audit: type=1326 audit(1758556321.176:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16298 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  855.836575][   T30] audit: type=1326 audit(1758556321.176:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16298 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  855.886204][T12989] usb 7-1: USB disconnect, device number 13
[  855.918274][ T5852] udevd[5852]: setting owner of /dev/bus/usb/007/013 to uid=0, gid=0 failed: No such file or directory
[  855.969363][   T30] audit: type=1326 audit(1758556321.176:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16298 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  856.352355][   T30] audit: type=1326 audit(1758556321.176:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16298 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  856.582168][  T976] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  856.628317][   T30] audit: type=1326 audit(1758556321.176:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16298 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  856.824390][   T30] audit: type=1326 audit(1758556321.176:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16298 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  856.852345][  T976] usb 9-1: device descriptor read/64, error -71
[  856.882781][T16342] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2401'.
[  857.297457][  T976] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  857.473256][T16345] mkiss: ax0: crc mode is auto.
[  857.726950][   T30] audit: type=1326 audit(1758556321.176:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16298 comm="syz.7.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  857.811009][  T976] usb 9-1: device descriptor read/64, error -71
[  857.852974][T16348] FAULT_INJECTION: forcing a failure.
[  857.852974][T16348] name failslab, interval 1, probability 0, space 0, times 0
[  857.931085][  T976] usb usb9-port1: attempt power cycle
[  858.012634][T16348] CPU: 1 UID: 0 PID: 16348 Comm: syz.6.2403 Not tainted syzkaller #0 PREEMPT(full) 
[  858.012661][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  858.012671][T16348] Call Trace:
[  858.012678][T16348]  <TASK>
[  858.012686][T16348]  dump_stack_lvl+0x16c/0x1f0
[  858.012713][T16348]  should_fail_ex+0x512/0x640
[  858.012737][T16348]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  858.012760][T16348]  should_failslab+0xc2/0x120
[  858.012782][T16348]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  858.012802][T16348]  ? __alloc_skb+0x2b2/0x380
[  858.012827][T16348]  __alloc_skb+0x2b2/0x380
[  858.012846][T16348]  ? __pfx___alloc_skb+0x10/0x10
[  858.012869][T16348]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  858.012899][T16348]  netlink_alloc_large_skb+0x69/0x130
[  858.012925][T16348]  netlink_sendmsg+0x6a1/0xdd0
[  858.012953][T16348]  ? __pfx_netlink_sendmsg+0x10/0x10
[  858.012987][T16348]  ____sys_sendmsg+0xa95/0xc70
[  858.013014][T16348]  ? copy_msghdr_from_user+0x10a/0x160
[  858.013035][T16348]  ? __pfx_____sys_sendmsg+0x10/0x10
[  858.013068][T16348]  ___sys_sendmsg+0x134/0x1d0
[  858.013090][T16348]  ? __pfx____sys_sendmsg+0x10/0x10
[  858.013126][T16348]  __sys_sendmsg+0x16d/0x220
[  858.013141][T16348]  ? __pfx___sys_sendmsg+0x10/0x10
[  858.013163][T16348]  do_syscall_64+0xcd/0x4e0
[  858.013180][T16348]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  858.013191][T16348] RIP: 0033:0x7f09ebd8eec9
[  858.013201][T16348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  858.013211][T16348] RSP: 002b:00007f09ecbd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  858.013222][T16348] RAX: ffffffffffffffda RBX: 00007f09ebfe5fa0 RCX: 00007f09ebd8eec9
[  858.013230][T16348] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000005
[  858.013237][T16348] RBP: 00007f09ecbd7090 R08: 0000000000000000 R09: 0000000000000000
[  858.013243][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  858.013250][T16348] R13: 00007f09ebfe6038 R14: 00007f09ebfe5fa0 R15: 00007ffff0eb0848
[  858.013263][T16348]  </TASK>
[  858.301367][  T976] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  858.341034][  T976] usb 9-1: device descriptor read/8, error -71
[  858.600807][ T5898] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  859.587322][  T976] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  859.753557][ T5898] usb 8-1: Using ep0 maxpacket: 32
[  859.773533][  T976] usb 9-1: device descriptor read/8, error -71
[  859.777073][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  859.810438][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  859.894026][ T5898] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  859.908308][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.921155][  T976] usb usb9-port1: unable to enumerate USB device
[  859.936115][ T5898] usb 8-1: config 0 descriptor??
[  860.723924][  T976] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  860.767325][ T5898] ft260 0003:0403:6030.0052: unknown main item tag 0x7
[  860.962535][ T5898] ft260 0003:0403:6030.0052: chip code: 6424 8183
[  861.015899][  T976] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  861.029450][  T976] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  861.042568][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.089003][  T976] usb 3-1: Product: syz
[  861.104280][  T976] usb 3-1: Manufacturer: syz
[  861.108884][  T976] usb 3-1: SerialNumber: syz
[  861.163138][ T5898] ft260 0003:0403:6030.0052: failed to retrieve system status
[  861.203986][ T5898] ft260 0003:0403:6030.0052: probe with driver ft260 failed with error -5
[  863.181107][T12989] usb 8-1: USB disconnect, device number 6
[  863.518622][T16394] FAULT_INJECTION: forcing a failure.
[  863.518622][T16394] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  863.531840][T16394] CPU: 0 UID: 0 PID: 16394 Comm: syz.7.2416 Not tainted syzkaller #0 PREEMPT(full) 
[  863.531865][T16394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  863.531875][T16394] Call Trace:
[  863.531880][T16394]  <TASK>
[  863.531885][T16394]  dump_stack_lvl+0x16c/0x1f0
[  863.531909][T16394]  should_fail_ex+0x512/0x640
[  863.531926][T16394]  _copy_from_user+0x2e/0xd0
[  863.531943][T16394]  copy_msghdr_from_user+0x98/0x160
[  863.531958][T16394]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  863.531979][T16394]  ___sys_sendmsg+0xfe/0x1d0
[  863.531994][T16394]  ? __pfx____sys_sendmsg+0x10/0x10
[  863.532019][T16394]  ? lockdep_hardirqs_on+0x50/0x110
[  863.532037][T16394]  __sys_sendmsg+0x16d/0x220
[  863.532051][T16394]  ? __pfx___sys_sendmsg+0x10/0x10
[  863.532064][T16394]  ? rcu_is_watching+0x12/0xc0
[  863.532084][T16394]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  863.532101][T16394]  do_syscall_64+0xcd/0x4e0
[  863.532117][T16394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  863.532128][T16394] RIP: 0033:0x7f766898eec9
[  863.532138][T16394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  863.532149][T16394] RSP: 002b:00007f76697b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  863.532160][T16394] RAX: ffffffffffffffda RBX: 00007f7668be6090 RCX: 00007f766898eec9
[  863.532167][T16394] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[  863.532174][T16394] RBP: 00007f76697b6090 R08: 0000000000000000 R09: 0000000000000000
[  863.532181][T16394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  863.532187][T16394] R13: 00007f7668be6128 R14: 00007f7668be6090 R15: 00007ffea12e4568
[  863.532201][T16394]  </TASK>
[  864.325423][  T976] cdc_ncm 3-1:1.0: failed to get mac address
[  864.337344][  T976] cdc_ncm 3-1:1.0: bind() failure
[  864.578515][  T976] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  864.638962][  T976] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  864.715758][  T976] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  864.769168][  T976] usb 3-1: USB disconnect, device number 106
[  864.818490][T16405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=16405 comm=syz.8.2419
[  865.024874][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  865.024910][   T30] audit: type=1326 audit(1758556331.426:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  865.114956][T16401] bridge0: port 2(bridge_slave_1) entered disabled state
[  865.122425][T16401] bridge0: port 1(bridge_slave_0) entered disabled state
[  865.140152][   T30] audit: type=1326 audit(1758556331.426:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  865.280968][   T30] audit: type=1326 audit(1758556331.436:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  865.459496][   T30] audit: type=1326 audit(1758556331.436:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  865.487654][   T30] audit: type=1326 audit(1758556331.436:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  865.511178][    C0] vkms_vblank_simulate: vblank timer overrun
[  865.649896][   T30] audit: type=1326 audit(1758556331.436:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  865.673381][    C0] vkms_vblank_simulate: vblank timer overrun
[  865.740897][T16426] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2421'.
[  865.934589][T16427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2415'.
[  866.023052][   T30] audit: type=1326 audit(1758556331.436:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  866.059438][T16401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  866.100005][   T30] audit: type=1326 audit(1758556331.436:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  866.123475][    C0] vkms_vblank_simulate: vblank timer overrun
[  866.131143][T16431] netlink: 'syz.6.2421': attribute type 10 has an invalid length.
[  866.181893][   T30] audit: type=1326 audit(1758556331.436:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  866.210212][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2421'.
[  866.553832][T16401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  866.761067][   T30] audit: type=1326 audit(1758556331.436:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16407 comm="syz.2.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  867.887051][T16431] 8021q: adding VLAN 0 to HW filter on device bond0
[  867.933193][T16431] team0: Port device bond0 added
[  868.873334][T16443] fuse: Bad value for 'user_id'
[  868.879561][T16443] fuse: Bad value for 'user_id'
[  868.962265][T16432] team0 (unregistering): Port device C removed
[  868.972735][T16432] team0 (unregistering): Port device team_slave_1 removed
[  868.986933][T16432] team0 (unregistering): Port device bond0 removed
[  869.049551][ T7157] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  869.060193][ T7157] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  869.106258][ T7157] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  869.160880][   T59] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  869.653634][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  869.659976][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  870.121986][ T1300] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  870.479174][T16468] netlink: 'syz.8.2430': attribute type 10 has an invalid length.
[  870.944659][T16468] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  871.840919][  T976] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  872.006312][T16482] loop2: detected capacity change from 0 to 7
[  872.261434][  T976] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[  872.271297][  T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  872.290636][  T976] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  872.308037][  T976] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  872.692141][  T976] usb 9-1: Manufacturer: syz
[  872.710744][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  872.710761][   T30] audit: type=1400 audit(1758556339.116:2161): avc:  denied  { ioctl } for  pid=16483 comm="syz.2.2426" path="socket:[52671]" dev="sockfs" ino=52671 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  872.742925][  T976] usb 9-1: config 0 descriptor??
[  872.867502][T16482] Dev loop2: unable to read RDB block 7
[  872.873409][T16482]  loop2: unable to read partition table
[  872.892415][T16482] loop2: partition table beyond EOD, truncated
[  872.966821][T16482] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  873.421102][  T976] rc_core: IR keymap rc-hauppauge not found
[  873.448768][  T976] Registered IR keymap rc-empty
[  873.486930][  T976] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  873.540247][  T976] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input159
[  873.570905][ T5914] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  873.577229][  T976] usb 9-1: USB disconnect, device number 6
[  873.610904][T10619] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  873.777499][T10619] usb 8-1: Using ep0 maxpacket: 8
[  873.896327][T10619] usb 8-1: no configurations
[  873.905437][T10619] usb 8-1: can't read configurations, error -22
[  874.024439][ T5914] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  874.039823][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  874.651328][ T5914] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  874.660413][ T5914] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  874.857328][ T5914] usb 3-1: Manufacturer: syz
[  874.873795][ T5914] usb 3-1: config 0 descriptor??
[  874.931133][T10619] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  875.042422][T16512] sp0: Synchronizing with TNC
[  875.130874][ T5914] rc_core: IR keymap rc-hauppauge not found
[  875.146859][ T5914] Registered IR keymap rc-empty
[  875.183463][ T5914] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  875.300460][ T5914] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input160
[  875.324146][T10619] usb 8-1: Using ep0 maxpacket: 8
[  875.340909][T10619] usb 8-1: no configurations
[  875.360928][T10619] usb 8-1: can't read configurations, error -22
[  875.364346][ T5914] usb 3-1: USB disconnect, device number 107
[  875.448044][T16524] comedi comedi0: Minor 3 specified more than once!
[  875.821655][T10619] usb usb8-port1: attempt power cycle
[  875.844654][T16526] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2439'.
[  876.324426][T16534] loop2: detected capacity change from 0 to 7
[  876.419775][T16534] Dev loop2: unable to read RDB block 7
[  876.448614][T16534]  loop2: unable to read partition table
[  876.458060][T16534] loop2: partition table beyond EOD, truncated
[  876.464931][T10619] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  876.474458][T16534] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  876.499618][T10619] usb 8-1: device descriptor read/8, error -71
[  876.640411][ T5928] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  876.690247][ T5219] Dev loop2: unable to read RDB block 7
[  876.705768][ T5219]  loop2: unable to read partition table
[  876.713534][ T5219] loop2: partition table beyond EOD, truncated
[  877.142095][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  877.166210][ T5928] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  877.176410][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.186698][ T5928] usb 7-1: config 0 descriptor??
[  877.572672][T16551] fuse: Bad value for 'user_id'
[  877.577613][T16551] fuse: Bad value for 'user_id'
[  877.630337][ T5928] steelseries 0003:1038:12B6.0053: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.6-1/input0
[  877.700273][T16555] input: syz0 as /devices/virtual/input/input161
[  877.980059][T16559] FAULT_INJECTION: forcing a failure.
[  877.980059][T16559] name failslab, interval 1, probability 0, space 0, times 0
[  878.016594][T16559] CPU: 1 UID: 0 PID: 16559 Comm: syz.7.2447 Not tainted syzkaller #0 PREEMPT(full) 
[  878.016619][T16559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  878.016630][T16559] Call Trace:
[  878.016636][T16559]  <TASK>
[  878.016643][T16559]  dump_stack_lvl+0x16c/0x1f0
[  878.016670][T16559]  should_fail_ex+0x512/0x640
[  878.016691][T16559]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  878.016712][T16559]  should_failslab+0xc2/0x120
[  878.016735][T16559]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  878.016754][T16559]  ? __alloc_skb+0x2b2/0x380
[  878.016780][T16559]  __alloc_skb+0x2b2/0x380
[  878.016800][T16559]  ? __pfx___alloc_skb+0x10/0x10
[  878.016822][T16559]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  878.016850][T16559]  netlink_alloc_large_skb+0x69/0x130
[  878.016875][T16559]  netlink_sendmsg+0x6a1/0xdd0
[  878.016903][T16559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  878.016935][T16559]  ____sys_sendmsg+0xa95/0xc70
[  878.016961][T16559]  ? copy_msghdr_from_user+0x10a/0x160
[  878.016983][T16559]  ? __pfx_____sys_sendmsg+0x10/0x10
[  878.017021][T16559]  ___sys_sendmsg+0x134/0x1d0
[  878.017044][T16559]  ? __pfx____sys_sendmsg+0x10/0x10
[  878.017095][T16559]  __sys_sendmsg+0x16d/0x220
[  878.017116][T16559]  ? __pfx___sys_sendmsg+0x10/0x10
[  878.017155][T16559]  do_syscall_64+0xcd/0x4e0
[  878.017180][T16559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  878.017198][T16559] RIP: 0033:0x7f766898eec9
[  878.017213][T16559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  878.017229][T16559] RSP: 002b:00007f76697d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  878.017247][T16559] RAX: ffffffffffffffda RBX: 00007f7668be5fa0 RCX: 00007f766898eec9
[  878.017259][T16559] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  878.017270][T16559] RBP: 00007f76697d7090 R08: 0000000000000000 R09: 0000000000000000
[  878.017280][T16559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  878.017290][T16559] R13: 00007f7668be6038 R14: 00007f7668be5fa0 R15: 00007ffea12e4568
[  878.017314][T16559]  </TASK>
[  878.227734][    C1] vkms_vblank_simulate: vblank timer overrun
[  878.529711][T10619] usb 7-1: USB disconnect, device number 14
[  879.266132][ T5898] usb 4-1: new full-speed USB device number 88 using dummy_hcd
[  879.284474][   T30] audit: type=1400 audit(1758556345.746:2162): avc:  denied  { read } for  pid=16568 comm="syz.2.2451" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  879.446336][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  879.550427][ T5898] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  879.599525][   T30] audit: type=1400 audit(1758556345.746:2163): avc:  denied  { open } for  pid=16568 comm="syz.2.2451" path="/515/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  879.632843][ T5898] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  879.675395][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.866756][T12989] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  880.015939][ T5898] usb 4-1: config 0 descriptor??
[  880.117501][   T30] audit: type=1400 audit(1758556345.766:2164): avc:  denied  { ioctl } for  pid=16568 comm="syz.2.2451" path="/515/file0/file0" dev="fuse" ino=64 ioctlcmd=0x2202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  880.126142][ T5898] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  880.179317][T12989] usb 7-1: config 0 has an invalid interface number: 194 but max is 0
[  880.191009][T12989] usb 7-1: config 0 has no interface number 0
[  880.228209][T12989] usb 7-1: too many endpoints for config 0 interface 194 altsetting 233: 59, using maximum allowed: 30
[  880.247788][ T5898] dvb-usb: bulk message failed: -22 (3/0)
[  880.348696][ T5898] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  880.367692][T12989] usb 7-1: config 0 interface 194 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 59
[  880.405435][ T5898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  880.435104][ T5898] usb 4-1: media controller created
[  880.436571][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  880.437402][T12989] usb 7-1: config 0 interface 194 has no altsetting 0
[  880.450840][T12989] usb 7-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  880.450868][T12989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.450887][T12989] usb 7-1: Product: syz
[  880.450902][T12989] usb 7-1: Manufacturer: syz
[  880.450915][T12989] usb 7-1: SerialNumber: syz
[  880.464487][T12989] usb 7-1: config 0 descriptor??
[  880.487510][ T5898] dvb-usb: bulk message failed: -22 (6/0)
[  880.487576][ T5898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  880.493210][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input162
[  880.510292][ T5898] dvb-usb: schedule remote query interval to 150 msecs.
[  880.510332][ T5898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  880.697258][ T5898] dvb-usb: bulk message failed: -22 (1/0)
[  880.700122][ T5898] dvb-usb: error while querying for an remote control event.
[  880.746652][   T30] audit: type=1326 audit(1758556347.186:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  880.746748][   T30] audit: type=1326 audit(1758556347.186:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  880.746806][   T30] audit: type=1326 audit(1758556347.186:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  880.746871][   T30] audit: type=1326 audit(1758556347.186:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  880.746930][   T30] audit: type=1326 audit(1758556347.186:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  880.746988][   T30] audit: type=1326 audit(1758556347.186:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  880.747049][   T30] audit: type=1326 audit(1758556347.186:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16593 comm="syz.2.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d958d710 code=0x7ffc0000
[  880.763779][T16600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  880.764114][T16600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  880.768611][T12989] peak_usb 7-1:0.194: probe with driver peak_usb failed with error 194
[  880.774977][T12989] usb 7-1: USB disconnect, device number 15
[  880.855442][ T5898] dvb-usb: bulk message failed: -22 (1/0)
[  880.855466][ T5898] dvb-usb: error while querying for an remote control event.
[  881.290807][ T5898] dvb-usb: bulk message failed: -22 (1/0)
[  881.290839][ T5898] dvb-usb: error while querying for an remote control event.
[  881.454969][T12989] dvb-usb: bulk message failed: -22 (1/0)
[  881.455001][T12989] dvb-usb: error while querying for an remote control event.
[  881.525961][T12989] usb 4-1: USB disconnect, device number 88
[  881.662126][T12989] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  881.694441][    C1] vkms_vblank_simulate: vblank timer overrun
[  881.814254][    C1] vkms_vblank_simulate: vblank timer overrun
[  881.976176][    C1] vkms_vblank_simulate: vblank timer overrun
[  882.858288][    C1] vkms_vblank_simulate: vblank timer overrun
[  884.011289][T16625] FAULT_INJECTION: forcing a failure.
[  884.011289][T16625] name failslab, interval 1, probability 0, space 0, times 0
[  884.011356][T16625] CPU: 0 UID: 0 PID: 16625 Comm: syz.8.2463 Not tainted syzkaller #0 PREEMPT(full) 
[  884.011378][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  884.011389][T16625] Call Trace:
[  884.011395][T16625]  <TASK>
[  884.011402][T16625]  dump_stack_lvl+0x16c/0x1f0
[  884.011432][T16625]  should_fail_ex+0x512/0x640
[  884.011455][T16625]  ? kmem_cache_alloc_noprof+0x5a/0x3b0
[  884.011488][T16625]  should_failslab+0xc2/0x120
[  884.011510][T16625]  kmem_cache_alloc_noprof+0x6d/0x3b0
[  884.011534][T16625]  ? fuse_request_alloc+0x22/0x200
[  884.011562][T16625]  fuse_request_alloc+0x22/0x200
[  884.011585][T16625]  fuse_get_req+0x748/0xfd0
[  884.011614][T16625]  ? __pfx_fuse_get_req+0x10/0x10
[  884.011645][T16625]  ? rcu_is_watching+0x12/0xc0
[  884.011669][T16625]  ? trace_kmalloc+0x2b/0xd0
[  884.011696][T16625]  __fuse_simple_request+0xb8/0xcb0
[  884.011726][T16625]  fuse_readdir_uncached+0x431/0x1be0
[  884.011765][T16625]  ? __pfx_fuse_readdir_uncached+0x10/0x10
[  884.011789][T16625]  ? lock_acquire+0x179/0x350
[  884.011807][T16625]  ? find_held_lock+0x2b/0x80
[  884.011833][T16625]  ? mark_held_locks+0x49/0x80
[  884.011861][T16625]  ? finish_task_switch.isra.0+0x221/0xc10
[  884.011884][T16625]  ? lockdep_hardirqs_on+0x7c/0x110
[  884.011906][T16625]  ? finish_task_switch.isra.0+0x221/0xc10
[  884.011929][T16625]  ? rcu_is_watching+0x12/0xc0
[  884.011950][T16625]  ? trace_sched_exit_tp+0xd1/0x120
[  884.011970][T16625]  ? __schedule+0x11a3/0x5de0
[  884.011989][T16625]  ? stack_trace_save+0x8e/0xc0
[  884.012014][T16625]  ? __pfx_stack_trace_save+0x10/0x10
[  884.012064][T16625]  ? preempt_schedule_common+0x44/0xc0
[  884.012084][T16625]  ? preempt_schedule_thunk+0x16/0x30
[  884.012114][T16625]  fuse_readdir+0x9f5/0x1d90
[  884.012134][T16625]  ? down_read_killable+0x220/0x4b0
[  884.012160][T16625]  ? __pfx_down_read_killable+0x10/0x10
[  884.012188][T16625]  ? iterate_dir+0x178/0xaf0
[  884.012207][T16625]  iterate_dir+0x293/0xaf0
[  884.012226][T16625]  __x64_sys_getdents64+0x13c/0x2c0
[  884.012242][T16625]  ? irqentry_exit+0x3b/0x90
[  884.012263][T16625]  ? __pfx___x64_sys_getdents64+0x10/0x10
[  884.012279][T16625]  ? __pfx_filldir64+0x10/0x10
[  884.012307][T16625]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  884.012332][T16625]  do_syscall_64+0xcd/0x4e0
[  884.012357][T16625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  884.012373][T16625] RIP: 0033:0x7f813f98eec9
[  884.012388][T16625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  884.012405][T16625] RSP: 002b:00007f813dbd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  884.012422][T16625] RAX: ffffffffffffffda RBX: 00007f813fbe6090 RCX: 00007f813f98eec9
[  884.012434][T16625] RDX: 0000000000001000 RSI: 00002000000083c0 RDI: 0000000000000004
[  884.012445][T16625] RBP: 00007f813dbd5090 R08: 0000000000000000 R09: 0000000000000000
[  884.012456][T16625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  884.012474][T16625] R13: 00007f813fbe6128 R14: 00007f813fbe6090 R15: 00007fff2bccf188
[  884.012498][T16625]  </TASK>
[  884.106552][T16621] loop2: detected capacity change from 0 to 7
[  884.109310][T16563] Dev loop2: unable to read RDB block 7
[  884.509901][T16563]  loop2: unable to read partition table
[  884.518977][T16563] loop2: partition table beyond EOD, truncated
[  884.541432][T16621] Dev loop2: unable to read RDB block 7
[  884.569639][T16632] fuse: Bad value for 'fd'
[  884.575518][T16621]  loop2: unable to read partition table
[  884.770982][T16621] loop2: partition table beyond EOD, truncated
[  884.777318][T16621] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  885.038820][T16631] sp0: Synchronizing with TNC
[  885.423476][ T5914] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  885.654576][T16652] netlink: 5072 bytes leftover after parsing attributes in process `syz.6.2468'.
[  885.722447][ T5914] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  885.732336][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  885.778566][ T5914] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  885.790977][ T5914] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  885.808540][ T5914] usb 3-1: Manufacturer: syz
[  885.810198][T16654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  885.854956][ T5914] usb 3-1: config 0 descriptor??
[  885.943003][T16654] netlink: 'syz.7.2469': attribute type 1 has an invalid length.
[  886.040814][ T5914] rc_core: IR keymap rc-hauppauge not found
[  886.046741][ T5914] Registered IR keymap rc-empty
[  886.070167][ T5914] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  886.121098][   T10] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  886.555050][ T5914] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input164
[  886.578852][ T5914] usb 3-1: USB disconnect, device number 108
[  886.803632][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  886.845892][   T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[  886.858241][   T10] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  886.867427][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.892887][   T10] usb 9-1: config 0 descriptor??
[  886.905565][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  886.935373][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  886.945263][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  886.955629][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  886.963312][   T10] usb 9-1: media controller created
[  886.969986][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  886.996957][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  887.019457][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  887.066920][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input165
[  887.098604][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  887.100168][T16659] dvb-usb: bulk message failed: -22 (2/0)
[  887.191923][ T5914] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  887.550616][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  887.657404][T16677] ip6gre1: entered promiscuous mode
[  887.666374][T16677] FAULT_INJECTION: forcing a failure.
[  887.666374][T16677] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  887.680350][T16677] CPU: 0 UID: 0 PID: 16677 Comm: syz.2.2476 Not tainted syzkaller #0 PREEMPT(full) 
[  887.680375][T16677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  887.680386][T16677] Call Trace:
[  887.680393][T16677]  <TASK>
[  887.680400][T16677]  dump_stack_lvl+0x16c/0x1f0
[  887.680430][T16677]  should_fail_ex+0x512/0x640
[  887.680457][T16677]  _copy_from_user+0x2e/0xd0
[  887.680484][T16677]  move_addr_to_kernel+0x65/0x170
[  887.680514][T16677]  __copy_msghdr+0x386/0x470
[  887.680537][T16677]  copy_msghdr_from_user+0xc1/0x160
[  887.680558][T16677]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  887.680585][T16677]  ? __pfx__kstrtoull+0x10/0x10
[  887.680610][T16677]  ___sys_sendmsg+0xfe/0x1d0
[  887.680635][T16677]  ? __pfx____sys_sendmsg+0x10/0x10
[  887.680669][T16677]  ? find_held_lock+0x2b/0x80
[  887.680708][T16677]  __sys_sendmmsg+0x200/0x420
[  887.680734][T16677]  ? __pfx___sys_sendmmsg+0x10/0x10
[  887.680763][T16677]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  887.680797][T16677]  ? fput+0x9b/0xd0
[  887.680826][T16677]  ? ksys_write+0x1ac/0x250
[  887.680845][T16677]  ? __pfx_ksys_write+0x10/0x10
[  887.680867][T16677]  __x64_sys_sendmmsg+0x9c/0x100
[  887.680887][T16677]  ? lockdep_hardirqs_on+0x7c/0x110
[  887.680909][T16677]  do_syscall_64+0xcd/0x4e0
[  887.680934][T16677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  887.680953][T16677] RIP: 0033:0x7f98d958eec9
[  887.680967][T16677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  887.680985][T16677] RSP: 002b:00007f98da372038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  887.681003][T16677] RAX: ffffffffffffffda RBX: 00007f98d97e5fa0 RCX: 00007f98d958eec9
[  887.681016][T16677] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000003
[  887.681027][T16677] RBP: 00007f98da372090 R08: 0000000000000000 R09: 0000000000000000
[  887.681038][T16677] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[  887.681048][T16677] R13: 00007f98d97e6038 R14: 00007f98d97e5fa0 R15: 00007ffd87d862c8
[  887.681072][T16677]  </TASK>
[  887.720792][ T5914] usb 4-1: Using ep0 maxpacket: 32
[  887.729347][T10619] dvb-usb: bulk message failed: -22 (1/0)
[  887.990257][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  888.014762][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  888.075235][ T5914] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  888.120353][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.239867][ T5898] usb 9-1: USB disconnect, device number 7
[  888.296909][ T5914] usb 4-1: config 0 descriptor??
[  888.760289][T10619] dvb-usb: error while querying for an remote control event.
[  888.889103][ T5898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  889.141984][ T5914] ft260 0003:0403:6030.0054: unknown main item tag 0x7
[  889.346078][ T5914] ft260 0003:0403:6030.0054: chip code: 6424 8183
[  889.555263][ T5914] ft260 0003:0403:6030.0054: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0
[  889.663120][T16682] fuse: Bad value for 'fd'
[  889.755662][ T5914] ft260 0003:0403:6030.0054: failed to retrieve status: -32, no wakeup
[  889.775680][ T5914] ft260 0003:0403:6030.0054: failed to retrieve status: -32
[  889.851258][ T5914] ft260 0003:0403:6030.0054: failed to reset I2C controller: -71
[  889.882510][ T5914] usb 4-1: USB disconnect, device number 89
[  889.985634][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  889.985651][   T30] audit: type=1326 audit(1758556356.446:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16692 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  890.015713][   T30] audit: type=1326 audit(1758556356.446:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16692 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  890.056597][   T30] audit: type=1326 audit(1758556356.446:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16692 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  890.056649][   T30] audit: type=1326 audit(1758556356.456:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16692 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  890.056688][   T30] audit: type=1326 audit(1758556356.456:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16692 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  890.056726][   T30] audit: type=1326 audit(1758556356.456:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16692 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  890.056769][   T30] audit: type=1326 audit(1758556356.456:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16692 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  890.056807][   T30] audit: type=1326 audit(1758556356.466:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16692 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  890.056846][   T30] audit: type=1326 audit(1758556356.466:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16692 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  890.056884][   T30] audit: type=1326 audit(1758556356.476:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16692 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d958eec9 code=0x7ffc0000
[  890.113390][    C1] vkms_vblank_simulate: vblank timer overrun
[  890.120884][T10619] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  890.330997][T10619] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  890.331032][T10619] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  890.331045][T10619] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.333928][T10619] usb 9-1: config 0 descriptor??
[  890.434436][    C1] vkms_vblank_simulate: vblank timer overrun
[  890.545146][T10619] usbhid 9-1:0.0: can't add hid device: -71
[  890.545232][T10619] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  890.547668][T10619] usb 9-1: USB disconnect, device number 8
[  891.072426][T10619] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  891.211563][    C1] vkms_vblank_simulate: vblank timer overrun
[  891.245656][T10619] usb 9-1: Using ep0 maxpacket: 32
[  891.253676][T10619] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  891.253712][T10619] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  891.253730][T10619] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.261691][T10619] usb 9-1: config 0 descriptor??
[  891.523028][T10619] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  891.550656][T10619] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  891.869948][T10619] usb 9-1: USB disconnect, device number 9
[  891.888880][T10619] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  892.146949][T16736] comedi comedi0: Minor 3 specified more than once!
[  892.553373][T16738] FAULT_INJECTION: forcing a failure.
[  892.553373][T16738] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  892.594461][T16738] CPU: 1 UID: 0 PID: 16738 Comm: syz.6.2488 Not tainted syzkaller #0 PREEMPT(full) 
[  892.594488][T16738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  892.594498][T16738] Call Trace:
[  892.594505][T16738]  <TASK>
[  892.594512][T16738]  dump_stack_lvl+0x16c/0x1f0
[  892.594540][T16738]  should_fail_ex+0x512/0x640
[  892.594564][T16738]  _copy_from_user+0x2e/0xd0
[  892.594590][T16738]  core_sys_select+0x35b/0xc10
[  892.594617][T16738]  ? __pfx_core_sys_select+0x10/0x10
[  892.594664][T16738]  ? set_user_sigmask+0x21b/0x2b0
[  892.594685][T16738]  ? __pfx_set_user_sigmask+0x10/0x10
[  892.594709][T16738]  do_pselect.constprop.0+0x19f/0x1e0
[  892.594728][T16738]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  892.594758][T16738]  __x64_sys_pselect6+0x182/0x240
[  892.594779][T16738]  ? __pfx___x64_sys_pselect6+0x10/0x10
[  892.594805][T16738]  do_syscall_64+0xcd/0x4e0
[  892.594831][T16738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  892.594848][T16738] RIP: 0033:0x7f09ebd8eec9
[  892.594862][T16738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  892.594879][T16738] RSP: 002b:00007f09ecbd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  892.594896][T16738] RAX: ffffffffffffffda RBX: 00007f09ebfe5fa0 RCX: 00007f09ebd8eec9
[  892.594907][T16738] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040
[  892.594917][T16738] RBP: 00007f09ecbd7090 R08: 0000000000000000 R09: 0000000000000000
[  892.594928][T16738] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  892.594939][T16738] R13: 00007f09ebfe6038 R14: 00007f09ebfe5fa0 R15: 00007ffff0eb0848
[  892.594964][T16738]  </TASK>
[  892.767849][    C1] vkms_vblank_simulate: vblank timer overrun
[  893.016004][T16746] loop2: detected capacity change from 0 to 7
[  893.129807][T16748] mkiss: ax0: crc mode is auto.
[  893.240550][T16746] Dev loop2: unable to read RDB block 7
[  893.246784][T16746]  loop2: unable to read partition table
[  893.255822][T16746] loop2: partition table beyond EOD, truncated
[  893.262371][T16746] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  894.888644][T16781] FAULT_INJECTION: forcing a failure.
[  894.888644][T16781] name failslab, interval 1, probability 0, space 0, times 0
[  894.914783][T16781] CPU: 1 UID: 0 PID: 16781 Comm: syz.8.2497 Not tainted syzkaller #0 PREEMPT(full) 
[  894.914801][T16781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  894.914807][T16781] Call Trace:
[  894.914811][T16781]  <TASK>
[  894.914816][T16781]  dump_stack_lvl+0x16c/0x1f0
[  894.914836][T16781]  should_fail_ex+0x512/0x640
[  894.914850][T16781]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  894.914865][T16781]  should_failslab+0xc2/0x120
[  894.914878][T16781]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  894.914890][T16781]  ? __alloc_skb+0x2b2/0x380
[  894.914905][T16781]  __alloc_skb+0x2b2/0x380
[  894.914918][T16781]  ? __pfx___alloc_skb+0x10/0x10
[  894.914932][T16781]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  894.914949][T16781]  netlink_alloc_large_skb+0x69/0x130
[  894.914966][T16781]  netlink_sendmsg+0x6a1/0xdd0
[  894.914984][T16781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  894.915004][T16781]  ____sys_sendmsg+0xa95/0xc70
[  894.915021][T16781]  ? copy_msghdr_from_user+0x10a/0x160
[  894.915035][T16781]  ? __pfx_____sys_sendmsg+0x10/0x10
[  894.915058][T16781]  ___sys_sendmsg+0x134/0x1d0
[  894.915074][T16781]  ? __pfx____sys_sendmsg+0x10/0x10
[  894.915103][T16781]  __sys_sendmsg+0x16d/0x220
[  894.915117][T16781]  ? __pfx___sys_sendmsg+0x10/0x10
[  894.915139][T16781]  do_syscall_64+0xcd/0x4e0
[  894.915156][T16781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  894.915167][T16781] RIP: 0033:0x7f813f98eec9
[  894.915177][T16781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  894.915189][T16781] RSP: 002b:00007f813dbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  894.915200][T16781] RAX: ffffffffffffffda RBX: 00007f813fbe5fa0 RCX: 00007f813f98eec9
[  894.915207][T16781] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  894.915214][T16781] RBP: 00007f813dbf6090 R08: 0000000000000000 R09: 0000000000000000
[  894.915221][T16781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  894.915227][T16781] R13: 00007f813fbe6038 R14: 00007f813fbe5fa0 R15: 00007fff2bccf188
[  894.915241][T16781]  </TASK>
[  895.127399][    C1] vkms_vblank_simulate: vblank timer overrun
[  895.519342][   T30] kauditd_printk_skb: 151 callbacks suppressed
[  895.519353][   T30] audit: type=1400 audit(1758556361.976:2359): avc:  denied  { mounton } for  pid=16786 comm="syz.7.2499" path="/39/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  895.547883][    C1] vkms_vblank_simulate: vblank timer overrun
[  895.677532][T16783] comedi comedi0: Minor 3 specified more than once!
[  895.769754][   T30] audit: type=1400 audit(1758556362.216:2360): avc:  denied  { read write } for  pid=16786 comm="syz.7.2499" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  895.806604][   T30] audit: type=1400 audit(1758556362.216:2361): avc:  denied  { open } for  pid=16786 comm="syz.7.2499" path="/39/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  895.828793][    C1] vkms_vblank_simulate: vblank timer overrun
[  895.889965][   T30] audit: type=1800 audit(1758556362.216:2362): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2499" name="/" dev="9p" ino=2 res=0 errno=0
[  896.679029][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2503'.
[  896.688434][T16801] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2503'.
[  896.776611][T16806] overlayfs: missing 'lowerdir'
[  897.191801][   T30] audit: type=1400 audit(1758556363.526:2363): avc:  denied  { create } for  pid=16789 comm="syz.6.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  900.248684][T16842] mkiss: ax0: crc mode is auto.
[  901.268388][T16854] comedi comedi0: Minor 3 specified more than once!
[  901.680141][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2516'.
[  902.557848][ T5914] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  902.913672][ T5914] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  902.984783][ T5914] usb 8-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  903.022624][T10619] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  903.188510][ T5914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.230067][ T5914] usb 8-1: config 0 descriptor??
[  903.285231][   T30] audit: type=1326 audit(1758556369.746:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.8.2520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f813f98eec9 code=0x0
[  903.372531][T10619] usb 3-1: Using ep0 maxpacket: 32
[  903.447426][T10619] usb 3-1: unable to get BOS descriptor or descriptor too short
[  903.463350][T10619] usb 3-1: config 135 has an invalid interface number: 152 but max is 0
[  903.475823][T10619] usb 3-1: config 135 has no interface number 0
[  903.482793][T10619] usb 3-1: config 135 interface 152 has no altsetting 0
[  903.518245][T10619] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=11.3b
[  903.898404][T10619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.906565][T10619] usb 3-1: Product: syz
[  903.910827][T10619] usb 3-1: Manufacturer: syz
[  903.915500][T10619] usb 3-1: SerialNumber: syz
[  903.986229][ T5914] steelseries 0003:1038:12B6.0055: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.7-1/input0
[  904.308204][T10619] gspca_main: touptek-2.14.0 probing 0547:6801
[  904.531462][T10619] usb 3-1: USB disconnect, device number 109
[  904.702756][ T5898] usb 8-1: USB disconnect, device number 11
[  905.199033][   T30] audit: type=1326 audit(1758556371.446:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.6.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ebd8eec9 code=0x7ffc0000
[  905.340156][   T30] audit: type=1326 audit(1758556371.456:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.6.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ebd8eec9 code=0x7ffc0000
[  905.363713][    C1] vkms_vblank_simulate: vblank timer overrun
[  905.514199][   T30] audit: type=1326 audit(1758556371.456:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.6.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f09ebd8eec9 code=0x7ffc0000
[  905.618523][   T30] audit: type=1326 audit(1758556371.456:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.6.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ebd8eec9 code=0x7ffc0000
[  905.759478][   T30] audit: type=1326 audit(1758556371.456:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.6.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ebd8eec9 code=0x7ffc0000
[  905.783021][    C1] vkms_vblank_simulate: vblank timer overrun
[  906.344981][   T30] audit: type=1326 audit(1758556371.456:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.6.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f09ebd8eec9 code=0x7ffc0000
[  906.368466][    C1] vkms_vblank_simulate: vblank timer overrun
[  906.376876][   T30] audit: type=1326 audit(1758556371.456:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.6.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ebd8eec9 code=0x7ffc0000
[  906.401203][   T30] audit: type=1326 audit(1758556371.456:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.6.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ebd8eec9 code=0x7ffc0000
[  906.426196][   T30] audit: type=1326 audit(1758556371.456:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.6.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09ebd8eec9 code=0x7ffc0000
[  906.734716][T16917] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2530'.
[  906.802556][T16922] netlink: 'syz.6.2530': attribute type 10 has an invalid length.
[  906.829660][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2530'.
[  906.940893][T12989] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  907.112131][T12989] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  907.120147][T12989] usb 3-1: config 0 has no interface number 0
[  907.128626][T12989] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  907.138101][T12989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.146669][T12989] usb 3-1: Product: syz
[  907.153112][T12989] usb 3-1: Manufacturer: syz
[  907.157757][T12989] usb 3-1: SerialNumber: syz
[  907.176565][T12989] usb 3-1: config 0 descriptor??
[  907.389857][T12989] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  907.400086][T12989] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  907.410428][T12989] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  907.419003][T12989] usb 3-1: media controller created
[  907.905191][T12989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  909.040303][T16933] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2533'.
[  909.091615][T12989] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  909.363311][T16946] FAULT_INJECTION: forcing a failure.
[  909.363311][T16946] name failslab, interval 1, probability 0, space 0, times 0
[  909.377168][T16944] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2535'.
[  909.386845][T16944] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2535'.
[  909.396216][T16946] CPU: 1 UID: 0 PID: 16946 Comm: syz.6.2536 Not tainted syzkaller #0 PREEMPT(full) 
[  909.396243][T16946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  909.396254][T16946] Call Trace:
[  909.396261][T16946]  <TASK>
[  909.396266][T16946]  dump_stack_lvl+0x16c/0x1f0
[  909.396292][T16946]  should_fail_ex+0x512/0x640
[  909.396313][T16946]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  909.396334][T16946]  should_failslab+0xc2/0x120
[  909.396355][T16946]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  909.396375][T16946]  ? __alloc_skb+0x2b2/0x380
[  909.396401][T16946]  __alloc_skb+0x2b2/0x380
[  909.396421][T16946]  ? __pfx___alloc_skb+0x10/0x10
[  909.396439][T16946]  ? lockdep_hardirqs_on+0x7c/0x110
[  909.396472][T16946]  tcp_stream_alloc_skb+0x34/0x570
[  909.396510][T16946]  tcp_sendmsg_locked+0x12d0/0x42a0
[  909.396536][T16946]  ? __lock_acquire+0xb97/0x1ce0
[  909.396572][T16946]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  909.396602][T16946]  ? do_raw_spin_lock+0x12c/0x2b0
[  909.396622][T16946]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  909.396648][T16946]  ? __local_bh_enable_ip+0xa4/0x120
[  909.396675][T16946]  tcp_sendmsg+0x2e/0x50
[  909.396693][T16946]  ? __pfx_tcp_sendmsg+0x10/0x10
[  909.396709][T16946]  inet_sendmsg+0xb9/0x140
[  909.396729][T16946]  ____sys_sendmsg+0x973/0xc70
[  909.396755][T16946]  ? copy_msghdr_from_user+0x10a/0x160
[  909.396778][T16946]  ? __pfx_____sys_sendmsg+0x10/0x10
[  909.396806][T16946]  ? __pfx__kstrtoull+0x10/0x10
[  909.396822][T16946]  ___sys_sendmsg+0x134/0x1d0
[  909.396837][T16946]  ? __pfx____sys_sendmsg+0x10/0x10
[  909.396857][T16946]  ? find_held_lock+0x2b/0x80
[  909.396880][T16946]  __sys_sendmmsg+0x200/0x420
[  909.396896][T16946]  ? __pfx___sys_sendmmsg+0x10/0x10
[  909.396914][T16946]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  909.396936][T16946]  ? fput+0x9b/0xd0
[  909.396951][T16946]  ? xfd_validate_state+0x61/0x180
[  909.396968][T16946]  ? __pfx_ksys_write+0x10/0x10
[  909.396983][T16946]  __x64_sys_sendmmsg+0x9c/0x100
[  909.396997][T16946]  ? lockdep_hardirqs_on+0x7c/0x110
[  909.397010][T16946]  do_syscall_64+0xcd/0x4e0
[  909.397026][T16946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  909.397038][T16946] RIP: 0033:0x7f09ebd8eec9
[  909.397048][T16946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  909.397059][T16946] RSP: 002b:00007f09ecbd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  909.397071][T16946] RAX: ffffffffffffffda RBX: 00007f09ebfe5fa0 RCX: 00007f09ebd8eec9
[  909.397078][T16946] RDX: 0000000000000003 RSI: 00002000000039c0 RDI: 0000000000000003
[  909.397085][T16946] RBP: 00007f09ecbd7090 R08: 0000000000000000 R09: 0000000000000000
[  909.397091][T16946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  909.397098][T16946] R13: 00007f09ebfe6038 R14: 00007f09ebfe5fa0 R15: 00007ffff0eb0848
[  909.397115][T16946]  </TASK>
[  909.397448][T16944] tipc: MTU too low for tipc bearer
[  909.761821][T16949] Bluetooth: MGMT ver 1.23
[  910.051718][T16958] mkiss: ax0: crc mode is auto.
[  910.778604][T12989] usb 3-1: USB disconnect, device number 110
[  911.332112][T16965] sp0: Synchronizing with TNC
[  911.665791][T16971] loop2: detected capacity change from 0 to 7
[  911.678881][T16971] Dev loop2: unable to read RDB block 7
[  911.684839][T16971]  loop2: unable to read partition table
[  911.692257][T16971] loop2: partition table beyond EOD, truncated
[  911.698699][T16971] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  911.946976][T16976] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2543'.
[  911.994964][T16976] team0: No ports can be present during mode change
[  912.007821][T16976] netlink: 'syz.8.2543': attribute type 10 has an invalid length.
[  912.272669][T16976] 8021q: adding VLAN 0 to HW filter on device bond0
[  912.280149][T16976] team0: Port device bond0 added
[  912.293278][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2543'.
[  913.438187][T16975] 9pnet_fd: Insufficient options for proto=fd
[  914.605194][T16985] team0 (unregistering): Port device team_slave_0 removed
[  914.618354][T16985] team0 (unregistering): Port device team_slave_1 removed
[  914.631243][T16985] team0 (unregistering): Port device bond0 removed
[  914.884378][T17001] netlink: 'syz.3.2549': attribute type 10 has an invalid length.
[  914.902869][T17001] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  917.500769][T17025] comedi comedi0: Minor 3 specified more than once!
[  918.136471][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2556'.
[  920.463062][T17049] loop2: detected capacity change from 0 to 7
[  920.840415][T17049] Dev loop2: unable to read RDB block 7
[  920.846067][T17049]  loop2: AHDI p1 p2 p3
[  920.850215][T17049] loop2: partition table partially beyond EOD, truncated
[  920.858074][T17049] loop2: p1 start 1601398130 is beyond EOD, truncated
[  920.864872][T17049] loop2: p2 start 1702059890 is beyond EOD, truncated
[  921.481110][  T976] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  921.670770][ T5914] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  921.839636][  T976] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  921.870829][ T5914] usb 9-1: Using ep0 maxpacket: 32
[  921.876110][  T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  921.932967][  T976] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  921.950019][ T5914] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  921.963988][ T5914] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  921.977077][ T5914] usb 9-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00
[  921.987049][ T5914] usb 9-1: New USB device strings: Mfr=27, Product=0, SerialNumber=0
[  921.995468][  T910] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  922.004060][ T5914] usb 9-1: Manufacturer: syz
[  922.035825][  T976] usb 3-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[  922.040161][ T5914] usb 9-1: config 0 descriptor??
[  922.112070][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.160826][  T910] usb 7-1: Using ep0 maxpacket: 32
[  922.193707][  T910] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  922.219667][  T976] usb 3-1: config 0 descriptor??
[  922.282190][  T910] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  922.309383][  T910] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  922.323631][ T5914] usbhid 9-1:0.0: can't add hid device: -71
[  922.339596][ T5914] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  922.351775][  T910] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  922.371133][ T5914] usb 9-1: USB disconnect, device number 10
[  922.590994][  T910] usb 7-1: config 0 interface 0 has no altsetting 0
[  922.654938][  T910] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  922.664251][  T910] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  922.664542][  T976] sony 0003:054C:042F.0056: hidraw0: USB HID v10.01 Device [HID 054c:042f] on usb-dummy_hcd.2-1/input0
[  922.755728][  T910] usb 7-1: Product: syz
[  922.760018][  T910] usb 7-1: Manufacturer: syz
[  922.820400][  T910] usb 7-1: SerialNumber: syz
[  923.040866][  T910] usb 7-1: config 0 descriptor??
[  923.049598][  T976] sony 0003:054C:042F.0056: failed to claim input
[  923.058203][  T910] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  923.105692][  T910] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  923.177025][  T976] usb 3-1: USB disconnect, device number 111
[  923.255367][T17078] loop2: detected capacity change from 0 to 7
[  923.338540][    C1] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  923.345057][  T910] usb 7-1: USB disconnect, device number 16
[  923.351031][T17084] fido_id[17084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  923.368406][T17086] FAULT_INJECTION: forcing a failure.
[  923.368406][T17086] name failslab, interval 1, probability 0, space 0, times 0
[  923.390879][T17086] CPU: 0 UID: 0 PID: 17086 Comm: syz.7.2566 Not tainted syzkaller #0 PREEMPT(full) 
[  923.390906][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  923.390916][T17086] Call Trace:
[  923.390923][T17086]  <TASK>
[  923.390930][T17086]  dump_stack_lvl+0x16c/0x1f0
[  923.390956][T17086]  should_fail_ex+0x512/0x640
[  923.390978][T17086]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  923.391001][T17086]  should_failslab+0xc2/0x120
[  923.391022][T17086]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  923.391042][T17086]  ? __alloc_skb+0x2b2/0x380
[  923.391070][T17086]  __alloc_skb+0x2b2/0x380
[  923.391089][T17086]  ? __pfx___alloc_skb+0x10/0x10
[  923.391111][T17086]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  923.391140][T17086]  netlink_alloc_large_skb+0x69/0x130
[  923.391165][T17086]  netlink_sendmsg+0x6a1/0xdd0
[  923.391193][T17086]  ? __pfx_netlink_sendmsg+0x10/0x10
[  923.391225][T17086]  ____sys_sendmsg+0xa95/0xc70
[  923.391254][T17086]  ? copy_msghdr_from_user+0x10a/0x160
[  923.391276][T17086]  ? __pfx_____sys_sendmsg+0x10/0x10
[  923.391313][T17086]  ___sys_sendmsg+0x134/0x1d0
[  923.391336][T17086]  ? __pfx____sys_sendmsg+0x10/0x10
[  923.391386][T17086]  __sys_sendmsg+0x16d/0x220
[  923.391407][T17086]  ? __pfx___sys_sendmsg+0x10/0x10
[  923.391443][T17086]  do_syscall_64+0xcd/0x4e0
[  923.391469][T17086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  923.391487][T17086] RIP: 0033:0x7f766898eec9
[  923.391501][T17086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  923.391518][T17086] RSP: 002b:00007f76697d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  923.391535][T17086] RAX: ffffffffffffffda RBX: 00007f7668be5fa0 RCX: 00007f766898eec9
[  923.391547][T17086] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  923.391559][T17086] RBP: 00007f76697d7090 R08: 0000000000000000 R09: 0000000000000000
[  923.391570][T17086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  923.391580][T17086] R13: 00007f7668be6038 R14: 00007f7668be5fa0 R15: 00007ffea12e4568
[  923.391602][T17086]  </TASK>
[  923.619765][T17078] Dev loop2: unable to read RDB block 7
[  923.625477][T17078]  loop2: unable to read partition table
[  923.631294][T17078] loop2: partition table beyond EOD, truncated
[  923.637424][T17078] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  923.782461][  T910] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  923.794361][T17093] FAULT_INJECTION: forcing a failure.
[  923.794361][T17093] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  923.807557][T17093] CPU: 0 UID: 0 PID: 17093 Comm: syz.7.2568 Not tainted syzkaller #0 PREEMPT(full) 
[  923.807581][T17093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  923.807591][T17093] Call Trace:
[  923.807597][T17093]  <TASK>
[  923.807603][T17093]  dump_stack_lvl+0x16c/0x1f0
[  923.807630][T17093]  should_fail_ex+0x512/0x640
[  923.807662][T17093]  strncpy_from_user+0x3b/0x2e0
[  923.807685][T17093]  getname_flags.part.0+0x8f/0x550
[  923.807714][T17093]  getname_flags+0x93/0xf0
[  923.807734][T17093]  do_sys_openat2+0xb8/0x1d0
[  923.807759][T17093]  ? __pfx_do_sys_openat2+0x10/0x10
[  923.807786][T17093]  ? __fget_files+0x20e/0x3c0
[  923.807811][T17093]  __x64_sys_open+0x153/0x1e0
[  923.807836][T17093]  ? __pfx___x64_sys_open+0x10/0x10
[  923.807866][T17093]  ? rcu_is_watching+0x12/0xc0
[  923.807888][T17093]  do_syscall_64+0xcd/0x4e0
[  923.807912][T17093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  923.807929][T17093] RIP: 0033:0x7f766898eec9
[  923.807943][T17093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  923.807959][T17093] RSP: 002b:00007f76697d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  923.807975][T17093] RAX: ffffffffffffffda RBX: 00007f7668be5fa0 RCX: 00007f766898eec9
[  923.807987][T17093] RDX: 1df2a23c5997fa7b RSI: 0000000000080242 RDI: 0000200000000040
[  923.807997][T17093] RBP: 00007f76697d7090 R08: 0000000000000000 R09: 0000000000000000
[  923.808008][T17093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  923.808018][T17093] R13: 00007f7668be6038 R14: 00007f7668be5fa0 R15: 00007ffea12e4568
[  923.808040][T17093]  </TASK>
[  924.138215][T17099] loop2: detected capacity change from 0 to 7
[  924.200265][T17099] Dev loop2: unable to read RDB block 7
[  924.206093][T17099]  loop2: unable to read partition table
[  924.215034][T17099] loop2: partition table beyond EOD, truncated
[  924.221294][T17099] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  925.092033][T17090] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  927.812632][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  927.812643][   T30] audit: type=1326 audit(1758556394.266:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  927.967559][   T30] audit: type=1326 audit(1758556394.266:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  927.993227][   T30] audit: type=1326 audit(1758556394.266:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  928.017879][   T30] audit: type=1326 audit(1758556394.266:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  928.210067][   T30] audit: type=1326 audit(1758556394.266:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  928.241648][T17155] FAULT_INJECTION: forcing a failure.
[  928.241648][T17155] name failslab, interval 1, probability 0, space 0, times 0
[  928.267632][T17155] CPU: 1 UID: 0 PID: 17155 Comm: syz.2.2580 Not tainted syzkaller #0 PREEMPT(full) 
[  928.267659][T17155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  928.267669][T17155] Call Trace:
[  928.267675][T17155]  <TASK>
[  928.267682][T17155]  dump_stack_lvl+0x16c/0x1f0
[  928.267709][T17155]  should_fail_ex+0x512/0x640
[  928.267730][T17155]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  928.267758][T17155]  should_failslab+0xc2/0x120
[  928.267778][T17155]  __kmalloc_cache_noprof+0x6a/0x3e0
[  928.267802][T17155]  ? resv_map_alloc+0x7e/0x400
[  928.267824][T17155]  resv_map_alloc+0x7e/0x400
[  928.267843][T17155]  hugetlbfs_get_inode+0x33f/0x730
[  928.267862][T17155]  ? __fget_files+0x20e/0x3c0
[  928.267884][T17155]  hugetlb_file_setup+0x15b/0x620
[  928.267905][T17155]  ksys_mmap_pgoff+0x189/0x5c0
[  928.267931][T17155]  __x64_sys_mmap+0x125/0x190
[  928.267952][T17155]  do_syscall_64+0xcd/0x4e0
[  928.267975][T17155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  928.267992][T17155] RIP: 0033:0x7f98d958eec9
[  928.268006][T17155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  928.268021][T17155] RSP: 002b:00007f98da372038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  928.268038][T17155] RAX: ffffffffffffffda RBX: 00007f98d97e5fa0 RCX: 00007f98d958eec9
[  928.268050][T17155] RDX: 0000000000000004 RSI: 0000000000ff5000 RDI: 0000200000000000
[  928.268061][T17155] RBP: 00007f98da372090 R08: ffffffffffffffff R09: 0000000000000000
[  928.268071][T17155] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001
[  928.268082][T17155] R13: 00007f98d97e6038 R14: 00007f98d97e5fa0 R15: 00007ffd87d862c8
[  928.268105][T17155]  </TASK>
[  928.579557][   T30] audit: type=1326 audit(1758556394.266:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  928.603441][   T30] audit: type=1326 audit(1758556394.266:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  928.632310][   T30] audit: type=1326 audit(1758556394.266:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  928.706701][   T30] audit: type=1326 audit(1758556394.266:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  928.927318][T17170] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  929.019309][   T30] audit: type=1326 audit(1758556394.266:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.7.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766898eec9 code=0x7ffc0000
[  930.261509][T17182] overlayfs: missing 'lowerdir'
[  930.622680][T17191] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0
[  931.295963][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  931.302754][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  931.312955][ T1300] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[  932.058278][T17214] comedi comedi0: Minor 3 specified more than once!
[  932.734000][T17219] comedi comedi0: Minor 3 specified more than once!
[  933.550313][T17232] loop2: detected capacity change from 0 to 7
[  933.733469][T17232] Dev loop2: unable to read RDB block 7
[  933.740277][T17232]  loop2: unable to read partition table
[  933.746507][T17232] loop2: partition table beyond EOD, truncated
[  933.756584][T17232] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  935.305728][T17249] fuse: Bad value for 'rootmode'
[  935.460951][T17250] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.592391][T17250] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.705115][T17250] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  936.748390][T17250] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  937.156411][T17261] netlink: 'syz.2.2602': attribute type 10 has an invalid length.
[  937.181020][T17261] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  938.005110][T17267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  938.023216][T17266] tipc: Resetting bearer <eth:syzkaller0>
[  938.072159][T17265] tipc: Disabling bearer <eth:syzkaller0>
[  938.107771][ T7136] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  938.127030][ T7136] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  938.145841][ T7140] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  938.167714][ T7140] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  941.244243][T17304] FAULT_INJECTION: forcing a failure.
[  941.244243][T17304] name failslab, interval 1, probability 0, space 0, times 0
[  941.271007][T17304] CPU: 0 UID: 0 PID: 17304 Comm: syz.8.2612 Not tainted syzkaller #0 PREEMPT(full) 
[  941.271034][T17304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  941.271045][T17304] Call Trace:
[  941.271052][T17304]  <TASK>
[  941.271058][T17304]  dump_stack_lvl+0x16c/0x1f0
[  941.271084][T17304]  should_fail_ex+0x512/0x640
[  941.271105][T17304]  ? kmem_cache_alloc_node_noprof+0x5e/0x3b0
[  941.271128][T17304]  should_failslab+0xc2/0x120
[  941.271148][T17304]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  941.271167][T17304]  ? __alloc_skb+0x2b2/0x380
[  941.271188][T17304]  ? avc_has_perm+0x144/0x1f0
[  941.271209][T17304]  __alloc_skb+0x2b2/0x380
[  941.271229][T17304]  ? __pfx___alloc_skb+0x10/0x10
[  941.271248][T17304]  ? selinux_socket_getpeersec_dgram+0x1a4/0x370
[  941.271272][T17304]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  941.271302][T17304]  netlink_alloc_large_skb+0x69/0x130
[  941.271336][T17304]  netlink_sendmsg+0x6a1/0xdd0
[  941.271363][T17304]  ? __pfx_netlink_sendmsg+0x10/0x10
[  941.271393][T17304]  ____sys_sendmsg+0xa95/0xc70
[  941.271421][T17304]  ? copy_msghdr_from_user+0x10a/0x160
[  941.271442][T17304]  ? __pfx_____sys_sendmsg+0x10/0x10
[  941.271480][T17304]  ___sys_sendmsg+0x134/0x1d0
[  941.271503][T17304]  ? __pfx____sys_sendmsg+0x10/0x10
[  941.271554][T17304]  __sys_sendmsg+0x16d/0x220
[  941.271575][T17304]  ? __pfx___sys_sendmsg+0x10/0x10
[  941.271612][T17304]  do_syscall_64+0xcd/0x4e0
[  941.271639][T17304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  941.271658][T17304] RIP: 0033:0x7f813f98eec9
[  941.271674][T17304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  941.271691][T17304] RSP: 002b:00007f813dbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  941.271708][T17304] RAX: ffffffffffffffda RBX: 00007f813fbe5fa0 RCX: 00007f813f98eec9
[  941.271720][T17304] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  941.271731][T17304] RBP: 00007f813dbf6090 R08: 0000000000000000 R09: 0000000000000000
[  941.271742][T17304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  941.271752][T17304] R13: 00007f813fbe6038 R14: 00007f813fbe5fa0 R15: 00007fff2bccf188
[  941.271776][T17304]  </TASK>
[  942.372565][T17317] netlink: 'syz.8.2615': attribute type 10 has an invalid length.
[  943.498728][T17326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17326 comm=syz.6.2617
[  943.811006][ T5898] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  944.380450][ T5898] usb 4-1: Using ep0 maxpacket: 16
[  944.389772][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  944.402809][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  944.415967][ T5898] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  944.544086][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.564061][ T5898] usb 4-1: config 0 descriptor??
[  945.172458][   T31] INFO: task syz-executor:8357 blocked for more than 143 seconds.
[  945.180463][   T31]       Not tainted syzkaller #0
[  945.196545][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  945.302109][T17350] overlayfs: missing 'lowerdir'
[  945.524337][   T31] task:syz-executor    state:D stack:23208 pid:8357  tgid:8357  ppid:1      task_flags:0x400140 flags:0x00004004
[  945.601395][   T31] Call Trace:
[  945.610004][   T31]  <TASK>
[  945.624562][   T31]  __schedule+0x1190/0x5de0
[  945.629276][   T31]  ? __lock_acquire+0x62e/0x1ce0
[  945.638173][   T31]  ? __pfx___schedule+0x10/0x10
[  945.645926][   T31]  ? find_held_lock+0x2b/0x80
[  945.656604][   T31]  ? schedule+0x2d7/0x3a0
[  945.662186][   T31]  schedule+0xe7/0x3a0
[  945.666491][   T31]  v9fs_evict_inode+0x26f/0x300
[  945.675102][   T31]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  945.681537][   T31]  ? __pfx_var_wake_function+0x10/0x10
[  945.687086][   T31]  ? evict+0x3a2/0x920
[  945.697416][   T31]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  945.718096][   T31]  evict+0x3e3/0x920
[  945.732301][   T31]  ? __pfx_evict+0x10/0x10
[  945.745454][   T31]  ? iput+0x519/0x880
[  945.755379][   T31]  iput+0x521/0x880
[  945.773478][   T31]  ? __pfx_v9fs_drop_inode+0x10/0x10
[  945.796645][ T5898] usbhid 4-1:0.0: can't add hid device: -71
[  945.801927][   T31]  dentry_unlink_inode+0x29c/0x480
[  945.803744][ T5898] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  945.815403][   T31]  __dentry_kill+0x1d0/0x600
[  945.815443][   T31]  dput.part.0+0x4b1/0x9b0
[  945.815471][   T31]  shrink_dcache_for_umount+0x159/0x3e0
[  945.844897][ T5898] usb 4-1: USB disconnect, device number 90
[  945.873058][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  945.889680][   T31]  generic_shutdown_super+0x6c/0x390
[  945.905462][   T31]  kill_anon_super+0x3a/0x60
[  945.911895][   T31]  v9fs_kill_super+0x3d/0xa0
[  945.916597][   T31]  deactivate_locked_super+0xc1/0x1a0
[  945.922259][   T31]  deactivate_super+0xde/0x100
[  945.927129][   T31]  cleanup_mnt+0x225/0x450
[  945.931795][   T31]  task_work_run+0x150/0x240
[  945.936481][   T31]  ? __pfx_task_work_run+0x10/0x10
[  945.942035][   T31]  ? __pfx___x64_sys_umount+0x10/0x10
[  945.947468][   T31]  exit_to_user_mode_loop+0xeb/0x110
[  945.955311][   T31]  do_syscall_64+0x41c/0x4e0
[  945.960037][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  945.966734][   T31] RIP: 0033:0x7f2f979901f7
[  945.972365][   T31] RSP: 002b:00007ffc23513758 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  945.982898][   T31] RAX: 0000000000000000 RBX: 00007f2f97a11d7d RCX: 00007f2f979901f7
[  945.991259][   T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc23513810
[  945.999503][   T31] RBP: 00007ffc23513810 R08: 0000000000000000 R09: 0000000000000000
[  946.007684][   T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc235148a0
[  946.016003][   T31] R13: 00007f2f97a11d7d R14: 00000000000c37c4 R15: 00007ffc235148e0
[  946.026152][   T31]  </TASK>
[  946.031008][   T31] 
[  946.031008][   T31] Showing all locks held in the system:
[  946.050802][   T31] 1 lock held by khungtaskd/31:
[  946.055754][   T31]  #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[  946.065820][   T31] 2 locks held by kworker/u8:4/59:
[  946.072701][   T31]  #0: ffff888146ec0948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  946.087220][   T31]  #1: ffffc9000210fd10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  946.099069][   T31] 2 locks held by getty/5610:
[  946.105550][   T31]  #0: ffff88814d0c50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  946.117996][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[  946.128379][   T31] 3 locks held by kworker/u8:10/7136:
[  946.134014][   T31]  #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[  946.145280][   T31]  #1: ffffc9001d627d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[  946.156064][   T31]  #2: ffffffff90385588 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[  946.165277][   T31] 1 lock held by syz-executor/8357:
[  946.170766][   T31]  #0: ffff888050fde0e0 (&type->s_umount_key#67){++++}-{4:4}, at: deactivate_super+0xd6/0x100
[  946.181318][   T31] 1 lock held by syz.4.2332/15989:
[  946.186490][   T31]  #0: ffff888050fde0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x31c/0x3f0
[  946.196513][   T31] 1 lock held by syz.4.2332/15990:
[  946.204592][   T31]  #0: ffff888050fde0e0 (&type->s_umount_key#67){++++}-{4:4}, at: super_lock+0x31c/0x3f0
[  946.215508][   T31] 1 lock held by syz-executor/16158:
[  946.222427][   T31]  #0: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0
[  946.233374][   T31] 2 locks held by syz.7.2587/17201:
[  946.238640][   T31]  #0: ffffffff90428a50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  946.246995][   T31]  #1: ffffffff8e9daea8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10
[  946.260835][   T31] 2 locks held by syz.3.2616/17318:
[  946.266613][   T31]  #0: ffffffff90385588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230
[  946.278759][   T31]  #1: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0
[  946.289741][   T31] 3 locks held by dhcpcd-run-hook/17357:
[  946.298806][   T31]  #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[  946.309512][   T31]  #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0
[  946.318617][   T31]  #2: ffff88804f642498 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x10f/0x310
[  946.330488][   T31] 
[  946.344995][   T31] =============================================
[  946.344995][   T31] 
[  946.353710][   T31] NMI backtrace for cpu 1
[  946.353728][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  946.353749][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  946.353759][   T31] Call Trace:
[  946.353765][   T31]  <TASK>
[  946.353772][   T31]  dump_stack_lvl+0x116/0x1f0
[  946.353799][   T31]  nmi_cpu_backtrace+0x27b/0x390
[  946.353817][   T31]  ? _raw_spin_unlock_irqrestore+0x61/0x80
[  946.353839][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  946.353866][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  946.353886][   T31]  watchdog+0xf0e/0x1260
[  946.353911][   T31]  ? __pfx_watchdog+0x10/0x10
[  946.353928][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  946.353957][   T31]  ? __kthread_parkme+0x19e/0x250
[  946.353984][   T31]  ? __pfx_watchdog+0x10/0x10
[  946.354004][   T31]  kthread+0x3c2/0x780
[  946.354021][   T31]  ? __pfx_kthread+0x10/0x10
[  946.354041][   T31]  ? rcu_is_watching+0x12/0xc0
[  946.354064][   T31]  ? __pfx_kthread+0x10/0x10
[  946.354083][   T31]  ret_from_fork+0x56a/0x730
[  946.354099][   T31]  ? __pfx_kthread+0x10/0x10
[  946.354117][   T31]  ret_from_fork_asm+0x1a/0x30
[  946.354150][   T31]  </TASK>
[  946.354171][   T31] Sending NMI from CPU 1 to CPUs 0:
[  946.477185][    C0] NMI backtrace for cpu 0
[  946.477199][    C0] CPU: 0 UID: 0 PID: 17357 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) 
[  946.477216][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  946.477224][    C0] RIP: 0010:its_return_thunk+0x0/0x10
[  946.477249][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 5b 4f 94 f5 cc
[  946.477262][    C0] RSP: 0018:ffffc9001cf87750 EFLAGS: 00000293
[  946.477274][    C0] RAX: 0000000000000000 RBX: ffffc9001cf87f10 RCX: ffffc9001cf8771c
[  946.477283][    C0] RDX: 0000000000000000 RSI: ffffffff8de2d740 RDI: ffff888028faa884
[  946.477292][    C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  946.477299][    C0] R10: 0000000000000001 R11: 0000000000007bdd R12: ffffc9001cf87818
[  946.477307][    C0] R13: ffffc9001cf877c8 R14: ffffc9001cf87f10 R15: ffffc9001cf877fc
[  946.477316][    C0] FS:  0000000000000000(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000
[  946.477330][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  946.477339][    C0] CR2: 00005568fd00dda8 CR3: 000000003e1a6000 CR4: 00000000003526f0
[  946.477347][    C0] Call Trace:
[  946.477352][    C0]  <TASK>
[  946.477357][    C0]  unwind_next_frame+0x3fe/0x20a0
[  946.477373][    C0]  ? do_group_exit+0xd3/0x2a0
[  946.477393][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  946.477411][    C0]  arch_stack_walk+0x94/0x100
[  946.477427][    C0]  ? __x64_sys_exit_group+0x3e/0x50
[  946.477447][    C0]  stack_trace_save+0x8e/0xc0
[  946.477462][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  946.477479][    C0]  ? __lock_acquire+0xb97/0x1ce0
[  946.477499][    C0]  kasan_save_stack+0x33/0x60
[  946.477511][    C0]  ? kasan_save_stack+0x33/0x60
[  946.477522][    C0]  ? kasan_record_aux_stack+0xa7/0xc0
[  946.477538][    C0]  ? __call_rcu_common.constprop.0+0xa5/0xa10
[  946.477557][    C0]  ? kmem_cache_free+0x16d/0x4d0
[  946.477569][    C0]  ? exit_mmap+0x511/0xb90
[  946.477585][    C0]  ? __mmput+0x12a/0x410
[  946.477599][    C0]  ? mmput+0x62/0x70
[  946.477613][    C0]  ? do_exit+0x7c7/0x2bf0
[  946.477629][    C0]  ? do_group_exit+0xd3/0x2a0
[  946.477659][    C0]  kasan_record_aux_stack+0xa7/0xc0
[  946.477675][    C0]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  946.477687][    C0]  __call_rcu_common.constprop.0+0xa5/0xa10
[  946.477702][    C0]  kmem_cache_free+0x16d/0x4d0
[  946.477714][    C0]  ? exit_mmap+0x511/0xb90
[  946.477731][    C0]  exit_mmap+0x511/0xb90
[  946.477748][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  946.477766][    C0]  ? __lock_acquire+0xb97/0x1ce0
[  946.477790][    C0]  __mmput+0x12a/0x410
[  946.477805][    C0]  mmput+0x62/0x70
[  946.477820][    C0]  do_exit+0x7c7/0x2bf0
[  946.477838][    C0]  ? do_raw_spin_lock+0x12c/0x2b0
[  946.477852][    C0]  ? __pfx_do_exit+0x10/0x10
[  946.477870][    C0]  ? rcu_is_watching+0x12/0xc0
[  946.477889][    C0]  do_group_exit+0xd3/0x2a0
[  946.477907][    C0]  __x64_sys_exit_group+0x3e/0x50
[  946.477924][    C0]  x64_sys_call+0x14fa/0x1720
[  946.477939][    C0]  do_syscall_64+0xcd/0x4e0
[  946.477955][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  946.477968][    C0] RIP: 0033:0x7f06d2f966c5
[  946.477977][    C0] Code: Unable to access opcode bytes at 0x7f06d2f9669b.
[  946.477983][    C0] RSP: 002b:00007ffcad95bdf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  946.477994][    C0] RAX: ffffffffffffffda RBX: 00005568fcff72c0 RCX: 00007f06d2f966c5
[  946.478003][    C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000
[  946.478010][    C0] RBP: 00007ffcad95c128 R08: 0000000000000000 R09: 0000000000000000
[  946.478018][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcad95c120
[  946.478026][    C0] R13: 00007ffcad95c130 R14: 00007f06d31a6000 R15: 00005568bd230d98
[  946.478039][    C0]  </TASK>
[  946.482105][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  946.482120][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  946.482138][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  946.482147][   T31] Call Trace:
[  946.482154][   T31]  <TASK>
[  946.482161][   T31]  dump_stack_lvl+0x3d/0x1f0
[  946.482185][   T31]  vpanic+0x6e8/0x7a0
[  946.482210][   T31]  ? __pfx_vpanic+0x10/0x10
[  946.482235][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  946.482263][   T31]  panic+0xca/0xd0
[  946.482276][   T31]  ? __pfx_panic+0x10/0x10
[  946.482309][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  946.482333][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[  946.482351][   T31]  ? watchdog+0xd78/0x1260
[  946.482368][   T31]  ? watchdog+0xd6b/0x1260
[  946.482386][   T31]  watchdog+0xd89/0x1260
[  946.482407][   T31]  ? __pfx_watchdog+0x10/0x10
[  946.482423][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[  946.482444][   T31]  ? __kthread_parkme+0x19e/0x250
[  946.482468][   T31]  ? __pfx_watchdog+0x10/0x10
[  946.482485][   T31]  kthread+0x3c2/0x780
[  946.482501][   T31]  ? __pfx_kthread+0x10/0x10
[  946.482518][   T31]  ? rcu_is_watching+0x12/0xc0
[  946.482538][   T31]  ? __pfx_kthread+0x10/0x10
[  946.482555][   T31]  ret_from_fork+0x56a/0x730
[  946.482570][   T31]  ? __pfx_kthread+0x10/0x10
[  946.482586][   T31]  ret_from_fork_asm+0x1a/0x30
[  946.482614][   T31]  </TASK>
[  946.985217][   T31] Kernel Offset: disabled
[  946.989533][   T31] Rebooting in 86400 seconds..