last executing test programs:

3m8.135947033s ago: executing program 4 (id=308):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40203, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
dup(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
socket$key(0xf, 0x3, 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)

3m5.757241393s ago: executing program 4 (id=315):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x2, 0x1ff, 0xe, 0x202000, 0x20000})
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x280000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1411000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010)

3m5.604442623s ago: executing program 4 (id=316):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7374, 0x0, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0xd0, 0x80c40, 0x23456})
io_uring_enter(r4, 0x47f4, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004004)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e6574"], 0x64}}, 0x0)

3m3.556310097s ago: executing program 4 (id=321):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0xc024}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
dup2(r4, r2)

2m58.037322183s ago: executing program 4 (id=333):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0, 0xffffffff, 0x2c1}, &(0x7f0000000100), &(0x7f0000000140))
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
ppoll(&(0x7f00000003c0)=[{r2, 0x1600}], 0x1, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0xc0c0}, 0x40000c8)
r5 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fcntl$getflags(0xffffffffffffffff, 0xb)
pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0)
pipe2$watch_queue(&(0x7f00000000c0)={<r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0xffffffffffffffff)
r10 = fanotify_init(0x202, 0x400)
fanotify_mark(r10, 0x21, 0x2, r6, 0x0)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
r12 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5400000006bd4e0400000000000000000200000028000480240001800a020100726564697200000014000280080001400000000f08000340000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x7c}}, 0x0)
recvmmsg(r11, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4093, 0xffd}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000b40)=""/206, 0xce}], 0x3}, 0x6}], 0x1, 0x2202, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{0x0, 0x18}], 0x1}, 0x2000080)

2m57.492372795s ago: executing program 4 (id=338):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff})
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x24040850)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
unshare(0x28020480)
timer_create(0x0, 0x0, 0x0)
r7 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000140)={0x10, 0x1})
write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000faff01000000030000000800000001000000f7c8e021625a09a97869916e8b0666e954ad522bf608b0013dba3550e0478d8058b2a7fc4998ff6866bdb8bc70cb2c3d35b020d040bf04a090436f97441c176e1b9052ccd7dcf45ecb718715a0a282e317e018bccc8824cc30d21246daa5c46c"], 0x178)
r8 = socket$rds(0x15, 0x5, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000001c0)={@my=0x1, 0x2})
setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x7, 0x0, 0xa0)

2m56.461097571s ago: executing program 32 (id=338):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff})
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x24040850)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
unshare(0x28020480)
timer_create(0x0, 0x0, 0x0)
r7 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000140)={0x10, 0x1})
write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000faff01000000030000000800000001000000f7c8e021625a09a97869916e8b0666e954ad522bf608b0013dba3550e0478d8058b2a7fc4998ff6866bdb8bc70cb2c3d35b020d040bf04a090436f97441c176e1b9052ccd7dcf45ecb718715a0a282e317e018bccc8824cc30d21246daa5c46c"], 0x178)
r8 = socket$rds(0x15, 0x5, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000001c0)={@my=0x1, 0x2})
setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x7, 0x0, 0xa0)

2m48.707449006s ago: executing program 3 (id=354):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40203, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
dup(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
socket$key(0xf, 0x3, 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

2m46.759674409s ago: executing program 3 (id=363):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r1, 0x5707b563827c8365, 0x3000000, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0)

2m46.355973224s ago: executing program 3 (id=364):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x48}}, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
lseek(r0, 0x4, 0x0)

2m46.080358494s ago: executing program 3 (id=365):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x85)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d", 0x2}], 0x2)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x3, @local, 'wg0\x00'}})
r3 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, 0x0, 0x10001)
sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x1)
recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x1a024)
r6 = socket(0x1, 0x803, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xee28, 0x10, 0x3, 0xa7}, &(0x7f00000006c0)=<r8=>0x0, &(0x7f0000000400)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)={0x1fc, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xed, 0x8, "a2fce6b9d495380bb4773bb28206de5418c74309dc678ee7b9cf0eb2dd61bcf4307601b9e09e9b4535376b0d48cd4c617aca114c77c427ce13f88c07a91478b21624b4cadf837c74690e19fb63d0d3895048532037f46f22b29f7589923a7518800c8a1c92ac5a39af7bc7e305a6cf508a20b2f1dd314776d9db4d30df125d8c18c6fdfb050c627c5df53367b2a604abb43b69ddd05a1bc5d8c3f77b120f05f19220329c9c4ce8a1236aee8a52d761c8c91fd84d608490c7f624d1406adf496ae6e64934ae2327bc4b8486a9944071698e3e6c94dae7dd4c6997b94060f41c2249a24d980167aef37e"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xad, 0x8, "94a78006fa5e142df091a7664cc1b9fa5b89dc238e3aead1919a9c44ffb28103bc9f26ea103989961dc420d342e9c835311683adcaba41c1cbe3ac0e830c061600fcc03da0ed8837e508797f079b780330550cea4b850f3b7b091372af77a0e1c0e09124d82b5549fdafabf1b0e2db84f260881060478c5931594fcb29a7e0125940de52f0e39b252835904a3d288d25f798d4a6a32336c2e9874460499030a39c3d48c5a51ba7a67d"}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r11, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x24044080)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1, 0x0, 0x1})
io_uring_enter(r7, 0x20af, 0x6d82, 0x0, 0x0, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r6)
sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x40, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_TID={0xc}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000010)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)

2m42.936135931s ago: executing program 3 (id=373):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r3 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000002})
write$P9_RSTATu(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
gettid()
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x1040}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
timer_create(0x2, 0x0, 0x0)
sendfile(r6, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x21c)

2m42.50448493s ago: executing program 3 (id=374):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40080, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001380)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0xf2ff, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

2m41.768395521s ago: executing program 33 (id=374):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40080, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001380)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0xf2ff, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

1m34.390146173s ago: executing program 2 (id=603):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffe, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000200))

1m34.188689222s ago: executing program 2 (id=605):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0)
r2 = dup(r1)
syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000040)=0x4083, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000})
write$UHID_INPUT(r0, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006)
read$FUSE(r2, &(0x7f0000003a00)={0x2020}, 0x2020)

1m33.84127593s ago: executing program 2 (id=611):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004082, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
mlock(&(0x7f00002f7000/0x4000)=nil, 0x4000)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x3, 0x2)

1m33.424506511s ago: executing program 2 (id=615):
prctl$PR_MCE_KILL(0x48, 0x1, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x1, 0x0, 0x1000000, 0x7})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x603c43, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000080)={0x80200000, 0x8, 0x1, 'queue1\x00', 0x7})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2})
ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000002c0)={'pimreg1\x00'})
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f0000000000)=0x8000)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
move_mount(r3, 0x0, r1, 0x0, 0x46)

1m33.205754993s ago: executing program 2 (id=617):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x1)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r5 = fcntl$dupfd(r4, 0x406, r4)
write$cgroup_pid(r5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000004, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)

1m32.648444998s ago: executing program 2 (id=619):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4093, 0xffd}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000700)=""/47, 0x2f}, {0x0}, {&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000000b40)=""/206, 0xce}], 0x6}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2202, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
sendmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4de6, 0x3}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000a00)="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", 0xfc}], 0x1}, 0x44001)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000080), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000340), &(0x7f0000048000)=0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001e80)=ANY=[@ANYBLOB="400000001000390425bd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="030000000040050020001280080001007369740014000280060012004e220000060011004e200000754999395eaf50ec6908a1548f00a395de158c1bc22e633e8a16faca740dea68f98360fd318c31e0365272d6ffd50138c37fd5228ae310fdad80c70047"], 0x40}, 0x1, 0x0, 0x0, 0x20008001}, 0x4008040)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1}, 0x2000080)
sendmmsg(r0, &(0x7f0000003400)=[{{&(0x7f0000000280)=@caif=@rfm={0x25, 0x24a, "329f14175e18eace6bfa46d59dce172f"}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000300)="cc5a8ddf4a4d071a2a9acf483506142b03c816152c5de047d35e39c523a2d88bd7b873b2c056b8e72a308690768015318051e892accb8ae1a31781897314f3c14bf6be8831be7b2d6f805b730ebcd24e2b8191a75761e315fc497be11e079a4f893906e53d3ca795df7f7df590879e625bf128a2c38430f8acf01590dd5080639301961cc445a5ded1c9586a14c8d3b15bc85d304afefee5b7ec05", 0x9b}, {&(0x7f00000003c0)="9c216ac8195ee6308db21376200bbf2cd1a1b8f0baa1c212a3a7fc9fac3d22e8c64a5e008aa83773fad6c2cedd9e79fc2abf7df5cfaec178ce5423e1a873702e6e4e41cb96c0e058e36a48130c7b431ac00755d0b92e3461d1af373fc530151f9a396019ff62d608292a59eeec38b10ce2c8b399fce97c6dd0a6f22ed42b65ef7b19dea4941f6d86cad67f12930c8b6121061e1496ba206db3e76354f8b7", 0x9e}, {&(0x7f0000000180)="7923e2", 0x3}, {&(0x7f0000000540)="c4b84df45ab182341be853f556d32702810771f6033142ae9d7d464a807668005bb4d565fe80e2ac2da2aed6bc5fdc79d820615e6cd111a06162a279264044a410be18037ecd399d6d00d2403c357b70c64b58ccd19f3774019d163e0c4974c00c7da8e1d56a586aa8b1202e7e345be95c840b1bf1ba48e94517d8334c51ec011feadc7948a3d965dffe98b0299d473fe08697cb47e826f6292e8df89d636cc3e9573cbab53bd5b2d76d1d259aac08e2a9dd1d4a09c55d1492cc7950da6d771c1416a39a3734e6541089", 0xca}, {&(0x7f0000000780)="4a6b58670ac84a77c0522fe5ff6bb212c9f6816f19a2216ffabb685fc461ffde7af57780ead18e51e70c8a44855f5c2e46c61d130a2404c2603a59dcf840b6cb77aaae47ba48d593bd0c735cbeabd7264f7f181711e5c17666c54344ba428bef5e473258c6c99d38b0dbab095dedadd4a217c97f0b3f24fb8e3cd9babf48d306d954bbc41c7d45d4208629580ec3e5e4e3311b1c046d40921cfd37fea9d48a38e30c429dabf7a40b94e84e39577298fdd3", 0xb1}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000000640)="2cf25e2d073bd5aff08945b6504134949b2394521c14471d1a3a5d7bf08b63ec8865d7429ab460ceb990c4a4147e15f3ef246b1348864f05cdeee8436dc8f9f93535", 0x42}, {&(0x7f0000000840)="19253dc2", 0x4}], 0x8, &(0x7f0000001c40)=[{0x70, 0x103, 0xfffffc00, "87ec1209c47450b8f28cce880972c80edb9d683f1a8bea45bf2fbbc84ecb78bb711ebb2d14196d51fbaa7ceb788a4c043ecdbf97436c46ba3d35957d3281e0b62593839cdc04802c6cbd6a5fe53b83ca561d5020463e9184c86c11a6"}, {0xa8, 0x10b, 0x23, "ab91d37b60689508814d5a39cfe85fdef7da0df1270ea8616bc417812b76a51e86eedac819eb5776713245c338a6d3e83e50a2ad219520590917e720aeacb461fb5b0545dc302da0da4e50dba049ed0dfb1ae20b9aef9a81f510ee3841a1b38512862576222fbcd50b49bc0ff5a390ebd1226a726abd122e81d9ed9ba1852081578c8e3d009cafe946899cdf9eb883ef047ac16733"}, {0x10, 0x10a, 0x5c8d}, {0x58, 0x29, 0x4, "cdb919766e3d7869c580deb4d02d19f50ec30ab1b269fc05c23249a5fd82bcb2f33cc83a351d409aa95532a7e744492fcc55025cba3a3eefeabfa1ccd699ac8b0b9984b2df"}, {0x88, 0x10f, 0x2, "5d89e5fbd2692fd7b5e949b200e07405d7fee79bc800cf50c6f3535e4019325921d6398cc19ff21c64036303d75a4ed1c387093dd4b78b2b769975f2e1a8697be4c79a61f1c47dd1b53c5a0927d5ea6ad55dcbf15d076420d3c43c8069156f143eb1d2034bd86272d66441e859e83e8e293b950d4305"}], 0x208}}, {{&(0x7f0000000880)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002f80)}, {0x0}, {&(0x7f00000030c0)="b94a605544f0c3ca6a350362cdf25e4dafc546b3c6f9a05b279a9f736876d834e57b2ae0193b0c0d7f79d404e00e48f5d96f674f2d73a87228328dfe9f89293d36c177f07bfd", 0x46}, {0x0}], 0x4, &(0x7f00000032c0)}}, {{&(0x7f0000003300)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010101}, 0x1, 0x3, 0x4}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003380)="177833f1c42ec24ceab21d30186af7f5bab7cc9c405d6126e631", 0x1a}], 0x1, &(0x7f00000037c0)}}], 0x4, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)

1m31.700985393s ago: executing program 34 (id=619):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4093, 0xffd}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000700)=""/47, 0x2f}, {0x0}, {&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000000b40)=""/206, 0xce}], 0x6}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2202, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
sendmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4de6, 0x3}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000a00)="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", 0xfc}], 0x1}, 0x44001)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000080), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000340), &(0x7f0000048000)=0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001e80)=ANY=[@ANYBLOB="400000001000390425bd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="030000000040050020001280080001007369740014000280060012004e220000060011004e200000754999395eaf50ec6908a1548f00a395de158c1bc22e633e8a16faca740dea68f98360fd318c31e0365272d6ffd50138c37fd5228ae310fdad80c70047"], 0x40}, 0x1, 0x0, 0x0, 0x20008001}, 0x4008040)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1}, 0x2000080)
sendmmsg(r0, &(0x7f0000003400)=[{{&(0x7f0000000280)=@caif=@rfm={0x25, 0x24a, "329f14175e18eace6bfa46d59dce172f"}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000300)="cc5a8ddf4a4d071a2a9acf483506142b03c816152c5de047d35e39c523a2d88bd7b873b2c056b8e72a308690768015318051e892accb8ae1a31781897314f3c14bf6be8831be7b2d6f805b730ebcd24e2b8191a75761e315fc497be11e079a4f893906e53d3ca795df7f7df590879e625bf128a2c38430f8acf01590dd5080639301961cc445a5ded1c9586a14c8d3b15bc85d304afefee5b7ec05", 0x9b}, {&(0x7f00000003c0)="9c216ac8195ee6308db21376200bbf2cd1a1b8f0baa1c212a3a7fc9fac3d22e8c64a5e008aa83773fad6c2cedd9e79fc2abf7df5cfaec178ce5423e1a873702e6e4e41cb96c0e058e36a48130c7b431ac00755d0b92e3461d1af373fc530151f9a396019ff62d608292a59eeec38b10ce2c8b399fce97c6dd0a6f22ed42b65ef7b19dea4941f6d86cad67f12930c8b6121061e1496ba206db3e76354f8b7", 0x9e}, {&(0x7f0000000180)="7923e2", 0x3}, {&(0x7f0000000540)="c4b84df45ab182341be853f556d32702810771f6033142ae9d7d464a807668005bb4d565fe80e2ac2da2aed6bc5fdc79d820615e6cd111a06162a279264044a410be18037ecd399d6d00d2403c357b70c64b58ccd19f3774019d163e0c4974c00c7da8e1d56a586aa8b1202e7e345be95c840b1bf1ba48e94517d8334c51ec011feadc7948a3d965dffe98b0299d473fe08697cb47e826f6292e8df89d636cc3e9573cbab53bd5b2d76d1d259aac08e2a9dd1d4a09c55d1492cc7950da6d771c1416a39a3734e6541089", 0xca}, {&(0x7f0000000780)="4a6b58670ac84a77c0522fe5ff6bb212c9f6816f19a2216ffabb685fc461ffde7af57780ead18e51e70c8a44855f5c2e46c61d130a2404c2603a59dcf840b6cb77aaae47ba48d593bd0c735cbeabd7264f7f181711e5c17666c54344ba428bef5e473258c6c99d38b0dbab095dedadd4a217c97f0b3f24fb8e3cd9babf48d306d954bbc41c7d45d4208629580ec3e5e4e3311b1c046d40921cfd37fea9d48a38e30c429dabf7a40b94e84e39577298fdd3", 0xb1}, {&(0x7f0000000c40)="d0f5398940fc137f06f73017b79aff0d9a2df6394ff9aa1f0e32fa82d9d48605119bb666804940f58c049622c8bd5aaf2209489c7def6faec0e98bf5409e37b6d5430dc622a401a9b139ff1ab1ec8ab021a205bb3e52faeacaa9101e98adc0501f3a5258831c14c298c63150bf832398c8134229c745493b3757f3dd2554895fc5df6ce79e63c3d737808500ec21179d0b69cd125efc113bf0f1a4f7f3592400121cd7a771b979314346932a903d0e47248e1d31e8080174851d8e11e683bef52a44627e4163b9b204a81e77a83a40cf7b3450d41b634fdc33e32b9d36a419731210d8f65654a111ab0419b80be6b2238dfa7072d5ca9bb445f45400a1e368f77211f624ed4015f0e72e2ff8d94d305df32f620a9ae15e75227f1d715b5baabd269eacc372ed66abf24e6e2ffe499bd15ddd6d569df54add0ccb11df9788c9d85803deb3f5e79820ceef68bf5129fbbcc1f035c80e0be91882e5865107b20c748c9aeaa895a331f8837bd3ad65d88e46e8ea823b7f7a45424f916494bc826d7ad483c97efe791cb6595df1a0e507fe677d0fe83244b2f58f50875bf37809362e41a5a101f9b20d9add5ca2ee634cc12fc95d9498f9a19f789df5595c2112ad28e945fd18ed5167c5d684fb08065d04a9c7b996498acca83f1160d6653ec54e4af37ff6b10e743f471de9aea348e4ebd3bce7a49502cab15fbd822a683824fec4084e71d738190f55f6d0e3b348d33b2ec00f4aa7ff984a73de9503d10fa2cc3c9c172af047739b1dbef586f7c51720c63b6b72cc499c46756ed732516019659f3f9d708953d5f4f3b19603f4ecd92574d0fc0e739c4421ef9267ec3b188dbbccb1fb7975c4218bef0fb2fc3deb06c0a7a183d439a23fc33f2b7dfdac82ecdd9fe29f510384bf6fd247e5b32c5117328f841d20466e6d28dda0e553313f1dbdd3ab8ad50bd6465ca7c850a20cdf02b958d14661df54f39dd744ee7a3b9c239de06a1cb617b40e63373fce4618df44ab763c2c6ec55d378d9f1cca62205d90bdc98933a134ac4ea4dfbf9761c386566259b4c19255ae1faf3038c1e1a2fd6de5fef0948e154f7cfcf5a551adbba6476b225226805adf398e957285e2ca3707c96672228d8b0ab94b4e1bfc0dab0c50724770edec45549650ce01ea93bc9bde8a33d71362c921ebaef17987903e38133cf29ab0104654ef8a39e70697a5d854d09885c621fcb3b135091ec160c68949eaaefc130614562397ae6f2d24589996c4e6454e47462709eab58e99adfcf61dbd3a7d50f5eff8ce9c7b9d59c54ab41bf08a9362d0162e068df7cd08a4a45b3bd97ec4e052e417bf5ede8c4ea2a9bfec7646f3bbeff68386ec2053179bdf132a6a85cbed583591fa51b3c8a362029a4dbf7ff905ab6d3f7aeee7fd0d6a48275bf73ad97265e6e7a2ddf4661a8ad9ccbd85a3fe55c28b08bbba8c8cdab044eebe9caf5c842c88b7eef599eafeadcfce536f5567503e6eab47ff65196e8ee8273cb1901f086c1858b2f85daff1614b715a9b66c7679efbb993dd6db8b08edba187b2461a7ba96493d34a6c74a4f0c86236d745410c8749606445810acbbadf78138291a7d06d2195fd25139e21936f68568587c626044d87f24155a4f525e96fba5dff52b71a91e36d7e588dc0eb0d155bbdfdd8eeda49c4edc24e12a14eb124d990c087a2d66c5a4ff6205fba44bd3117078a7a3d561705a3af6e91898c8eaf7f9318cac7f5913546c6179e50c41dccf1ca4d241cf0dcf401cd98997ccfb41acddc439c1a4c19db68578ecc503faa65e52fa2c4af7d3b2c4349a64509266adb861656ea5f35167ea593fe7a07164c688b9e07cc129ce1961b25346731168d1479c9ab81d5159ca539e71b2f7b8eeb78e4053ac3c13d1966fc92b7f410b5e8a2d3b34f2759bc4c1b68c4152f99528b498786a3daa991f8e18fc8f0bd2260960fce582a6cc2666682eef9b806ec95f2e7427af5b4355c78dbe04c400fabcd9fc0da9df674b26c58e3d7c0424037b1c0c7f9ed3513b4813c7c915ff8e01dff2321524e57ade9352e384e26aa54a9462605f5721686a99f891e8f5914e2bf80ce061cc6039e8051ad3a9d511f9cb5e126247366d866110e1c9a20fb54b14b4dbb3b8a2b479d190be9ab907d6af25ec784cf0a5870a66d317a1f6960249771f49be53e63f383179395fb8b21d6f4e8b2e65651cd0912d956b89c6bc6e61616e72a76d21169f424482edbe7ceeed8ca33b1dad3f9c3b02d4355169320e4299ac3b646701fdfad29a724bb44f1f8d17ee981a52777b2a5e9e4c407d5f550f0dfde4149e636e227073148e6d628b2ef6bf12ee97f23c07aab3012ae8153132694d4bd2e98d29afe204eb42bd33efb3271f73efa5b40645e12ad26ebc04579f2ce135348794008b1bc19140fc6fed49dd0e6625af9979063343295937ed031760f89bf3a888719e6f4cb348743a3f736752fe9248ca48c2aa2cdd99f7bf3f514c29e50e08273b89080a2f28a197888159d596217f88704367763d0d66ede8f0c400fec5e5fcae0127cda8bca1589bfdedb2e26b2edc9de31d92e9938abfab35f81766165ea6997d1076b8cfe62836537db33b31b401f3586e4013c2fa880676ba87e4e7fb71796defc461ebd6e22ed356944289b7513e38e2b65d36704ea3601f8e9c508bc7d6212da00626a9ad37057062b46cde8ed02f5c4e8c7640c0a90e405f805a8b32aa5969047d54b959d838eb57f4da234d3965b3b39b5b0bd8b320ce7599911aeaa67bd1b5fc88fb0d57412455a5ddace1c1bb242b5faa4d7b7bbf6fd66f630b2230452c99bb5848c36d61d0b017001b47d3b4f426da615d484b2a20315efc4c283183f97fab1b160be332dc682664acdb7876c11bd1e83e91158a614c17ab5654f34ed6ba59b1ffd183339526615e1d0765189b106f81b232a6b7f5faa344379f1675e828669368aca966840a79bd5ccc3cfa9e02405acfab734b084966f3d4788bd4f91ceaccdad1372c6332c4e59d727be030f7765871d93b95e29042967ff6996fb21c0615e89dadf1fb4de4017d5c5903c68929dce3181ea863e30a219de51e1273df2c4af32fbe35a18b7d3d9a177dbd2d9e55d696c7ac61d526bc6bec11381bf025ff5f9a2b65db1f669ffc089605051a2e0679e8400c654f187a34311b04423e38b9bd0cd8aa626e82c4f7554729daf83dc4936d89f5d6bf2c92f09d34e7b5c9ef6987953d0b7239a410f4a0526e12bedbde671f7d9b1024119cae08bd668448626cce581beae288d761b744df6b3681f01381aef2f8e43c212a19d69ea5c4654e68e3cbf1b60e0af48cec1e7051b0a2c5c25e52980df580791881d498454504bd2af1e2583ccd20ae7ad67c44bbe34b362a51bac3d1fb3d61f8aae24b73a3bdd9b427b10dd72958c50b71730dd9a6f2abaf90c583c3a619516442a806c9797a7f491005196b8c5baf24ce23914d8c6287a226c2f9a668bd966368af13755d819f7a2cc8b59af2f627b063cd1a5a1ac24d6c7f9e4d8b8559abb71bb3eec732b52044b0272f558cc7f37548c3013a6090babefa8db5d6eac1feed503a0fa082ef65828dfd45b2e12eb406c63dd6aaab69653a7560485dc9e7d3353bdf56de4fd8bb54c96476becf65c9ef398fda788abf980caa39c3db4ac8f83a7ce9751487d04d486c550c64c9a443313551aa4399eb3fafb63c171be63f59e0c90440044b305dd0e85a35dada5db6ddc56d4d0f1660d6a5699307e29e093849c13b7f8382ad94f81a334e0767219eb015a247541eb42d6b766a57c5dd13fc1943008983b1df593f083d7efa57a0830eb10ee501677bcada18cb785463c5c292f936bf6646995d547d080a16199b728bf0eb1b03b644f7e7ec05f44b7d9348ce205a567a0c36d853550d4c4f86c34dad24681ce28dbbeefd37c835c7c97fd225132de123be3fccf5a22a3beb88663f2c7767a7bcce21354c294599b79807db1fe2d775e29ad168b4d490d6237d2077cf4dc1e46be86ddf254d1970dc0dd7d00e1054942ca6c369450982e43649dd8dff9fb403500cb594d0b5e64ae313f64743de7a49601d7954c744e33789558a405e912b7252c3170ec4f055e545fefbfa64d672c3d14778cda50d757dfa7b656aef9e9096a61582b126971d2c2233984bb886a4480bc96d2d1137681055d0c1a0d827b3624a268791b781a04b748ac0c914e359542a1614a6bccc60f835751230991f3de292a17cc3af0f30d9f5437b942d6e3c5ecec190092fa8f9ed1da4429eca313e240d7ca7d66928e8d0e258d82790553b31966d0d04fef24123b22368949058a47b6d9635d1e3c8abd0a4991ec9a7db9aed053e6d9b6204dee08cbdbfc83eecfd3180b4e83dd853222c6b8d18d793833c89171108b28f4c6c6f0da4014d28c1219ef4bd617263d2bf59cef838bade29af54963f624812ddfba92c01c7fd0d81b514f4d982b3ca379d40f16138bf7c3df7f9c23b7e7bd8397714a4bbb8db33f4a0eb4e80ef8577ded150b8b363afd7c903a52e7652cb1d8ba371f5d676d9811a30f7e1f6f91cd34d4e83f6952ab279dc67b7ad7a84688a01c77b25c2319e8e7230587a8afcca004fd453863ebd6c01d48ec175304664ddd24d383116e23ba9dfb5907d82eefb7f89f0bfba21905bd1dabab1e5dcd5e6eea6a7e33892ebe6e89f3a4c990237e72dba6aa59787f60b9dd7081ab206e38a4efbc2c1ea301baaca82f69e934a36458777f92a6e2ff67de89943773db78d4b92e5af61a32ecac60bfba01f16d2f005ea477234288d86266046a2454d347a67249e0e9ad23537653245c15c22c774be716867b33133dcd7dfe4f797bfc63237885b0db0be11e9080d4e1263e2300a93c8e1ba43127c9bb6fb8888cd9201fa348efab3079a9631534f9bdc53a1e41b338103c68685ec2dcaa80b5391156b4bc051c674c7e980d58953955eca7ac4894958dff71d6a11cca675013601afe35891d785bdcecefba99cfa926b34e6f7f17cfbfafe7f6bd9629ab25e17c159daaff022d7aa56807bc27873953d04e87d7e8d789ee21c6df95bf0ca31e36452bdb8e4b39ea2901aa9c88f1adbc99acc3eca82998fc5c80565d4390906e1b550235365fe815516dea0bec0af26cd40e3e59de6647bc691ba7b565b1b373d368c13e7fef83b7b34679122267f04c20fdb73066e2fd06ea333f0fedf30dd22c69a8062e6b35048f460f0fc1bc4cd16785c98041a9aaa87693dd6f97c9b39d73974faf289d02550b7f713c9b4781d178d8af3845e074e5481ffd3411f7ceee07293143c3e118cacf2884dd92b4c5d20586a981f15f7ff077639124051b74b8f10f5f9405172cfe49bc922fcf09b25fc74928f68d070a8d6767232ab8155fe4799bb49c31ef89f6ce455e2a2f3a4f34609b852e7734d716ba0fbbb2e4c44db5cea8f7cd5f89f300a17eeaf87ea62fa9a5def4f87b93487e238dec805ca63a99d3edb1293a864d6b806eef7917e08ce976f384f2ec2ffef310f486efc909b69e8a32dc9dc7c9d1c5eff24a6524efa5573c648b40b05a952d102bc5d9cbffd772f8406cf0d5559f29258e34fabc962277bc610d0d5ea5ebc8aa714676ee4a51844543fd9e396f03a1c2a98089d05783b58ee1c74f0dcd1526979457d4a2a0b2a6254b1f55ab8ec05e936b7274883654e4b133a07c2ad96793fee266525b90033f4d01eaccfa76105afc588222a4d9fd9af6141008d09332d13071864d9e88913f38e868cb3f7cb33b0711cb385eb1d3251e97dc", 0x1000}, {&(0x7f0000000640)="2cf25e2d073bd5aff08945b6504134949b2394521c14471d1a3a5d7bf08b63ec8865d7429ab460ceb990c4a4147e15f3ef246b1348864f05cdeee8436dc8f9f93535", 0x42}, {&(0x7f0000000840)="19253dc2", 0x4}], 0x8, &(0x7f0000001c40)=[{0x70, 0x103, 0xfffffc00, "87ec1209c47450b8f28cce880972c80edb9d683f1a8bea45bf2fbbc84ecb78bb711ebb2d14196d51fbaa7ceb788a4c043ecdbf97436c46ba3d35957d3281e0b62593839cdc04802c6cbd6a5fe53b83ca561d5020463e9184c86c11a6"}, {0xa8, 0x10b, 0x23, "ab91d37b60689508814d5a39cfe85fdef7da0df1270ea8616bc417812b76a51e86eedac819eb5776713245c338a6d3e83e50a2ad219520590917e720aeacb461fb5b0545dc302da0da4e50dba049ed0dfb1ae20b9aef9a81f510ee3841a1b38512862576222fbcd50b49bc0ff5a390ebd1226a726abd122e81d9ed9ba1852081578c8e3d009cafe946899cdf9eb883ef047ac16733"}, {0x10, 0x10a, 0x5c8d}, {0x58, 0x29, 0x4, "cdb919766e3d7869c580deb4d02d19f50ec30ab1b269fc05c23249a5fd82bcb2f33cc83a351d409aa95532a7e744492fcc55025cba3a3eefeabfa1ccd699ac8b0b9984b2df"}, {0x88, 0x10f, 0x2, "5d89e5fbd2692fd7b5e949b200e07405d7fee79bc800cf50c6f3535e4019325921d6398cc19ff21c64036303d75a4ed1c387093dd4b78b2b769975f2e1a8697be4c79a61f1c47dd1b53c5a0927d5ea6ad55dcbf15d076420d3c43c8069156f143eb1d2034bd86272d66441e859e83e8e293b950d4305"}], 0x208}}, {{&(0x7f0000000880)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002f80)}, {0x0}, {&(0x7f00000030c0)="b94a605544f0c3ca6a350362cdf25e4dafc546b3c6f9a05b279a9f736876d834e57b2ae0193b0c0d7f79d404e00e48f5d96f674f2d73a87228328dfe9f89293d36c177f07bfd", 0x46}, {0x0}], 0x4, &(0x7f00000032c0)}}, {{&(0x7f0000003300)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010101}, 0x1, 0x3, 0x4}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003380)="177833f1c42ec24ceab21d30186af7f5bab7cc9c405d6126e631", 0x1a}], 0x1, &(0x7f00000037c0)}}], 0x4, 0x0)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)

10.145151326s ago: executing program 0 (id=991):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a267a0000010203010902120001000000000904000000fe054900"], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="4017110000000a"], 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000003c0)={{0x2, 0x0, 0x5, 0x0, 0x913}, 0x5, 0xe17b, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x4, 0x5, 0x5})
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000200)=[{r3, 0x1086}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r6, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket(0x400000000010, 0x3, 0x0)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0xa, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xa, 0xe}, {0x0, 0xfff3}, {0xc, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2c04c090}, 0x200008c2)

9.530108717s ago: executing program 5 (id=994):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000580)=0x6)
write(r2, &(0x7f0000000700)="f5", 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, 0x0, 0x20000000}, 0x20)
splice(r2, &(0x7f0000000040), r1, 0x0, 0x6, 0x0)

9.41439104s ago: executing program 5 (id=995):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x3}, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r7=>0x0], &(0x7f0000000280), 0x1, r6})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000580)})
r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r9, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r9, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f0000000180)='./file1\x00', 0x4)
renameat2(r8, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})

9.023449467s ago: executing program 7 (id=997):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0xe000, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

8.848863439s ago: executing program 7 (id=998):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0)

8.674865674s ago: executing program 7 (id=1000):
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000004c0)=0xfffffffffffffff4, 0x200, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5409, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1400"], 0x12000)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5b, 0x1000, 0x1, 0x89}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140), 0x1, 0x40})
io_uring_enter(r3, 0x47f9, 0x8000000, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0)
r6 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe)
r7 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYRES64=r7], 0x18, 0x68000000}, 0x80fe)
syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0)
syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100fdffffffffffffff0102010102030109022b0001000000440904bd00023467c3000905000000000000000705e37e1b82e609050b020000000000"], 0x0)

8.032589949s ago: executing program 1 (id=1002):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0xf5ff, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4008000)

7.458589389s ago: executing program 1 (id=1004):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010027bd7000210000000a00204000000007000000001400110076657468305f746f5f6272696467651514000200fe800000000000000000000000000017"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"], 0x0, 0xc}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x208000, 0x40, 0x28}, 0x18)
landlock_restrict_self(r2, 0x7)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000240)={0x0, 0x2f, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000440)={r6, 0x487d60c11958e33, 0x4, 0x0, &(0x7f0000000040)})
r7 = socket(0x23, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r7, &(0x7f0000001080)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000010c0)=0xfffffffffffffe3d)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x98, 0x24, 0x5820a61ca228751, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0x5}, {0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @qdisc_kind_options=@q_cake={{0x9}, {0x40, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x87}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xc334}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x8000}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}, @qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xa53d}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0x98}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r10}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xb8, 0xc0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x34, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x60}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$vsock_stream(0x28, 0x1, 0x0)
shutdown(r8, 0x0)

6.968464646s ago: executing program 1 (id=1006):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

6.721589027s ago: executing program 5 (id=1008):
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x41982)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r4, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="04002abd7000fcdbdf2506000000050005000000000008000200020000001c0006800800060008000000060001000200000008000300ffffffff54000180080003007f0000010400fe80000000000000000000000000000000000000000000001206000100020000000800030064010102080006001f00000008001300e00000010000"], 0x94}, 0x1, 0x0, 0x0, 0x404c010}, 0x24040013)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r5 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0x47f6, 0x0, 0x4, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000240)={0x6})
socket$inet6_mptcp(0xa, 0x1, 0x106)

6.076417538s ago: executing program 1 (id=1011):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={r7}, 0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0)={r7, 0x1000, "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"}, &(0x7f00000001c0)=0x1008)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe0, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3ff}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfffffffc}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5.537157902s ago: executing program 6 (id=1014):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x228043, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2d)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400470000000000fc5f1bd80000000000000001140003006970766c616e31000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)

5.43227909s ago: executing program 7 (id=1015):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66089e0510660548010203010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000280))
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
r5 = semget$private(0x0, 0x1, 0x201)
semtimedop(r5, &(0x7f0000000040)=[{0x0, 0xfffd}], 0x1, 0x0)
semop(r5, &(0x7f0000000000)=[{0x0, 0xfffd}, {0x0, 0xe2a, 0x800}], 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x400, @private0, 0x9}, 0x1c)
r6 = syz_io_uring_setup(0x70ee, &(0x7f0000000800)={0x0, 0xfffffffc, 0x10000, 0x800, 0x2000}, &(0x7f0000000240), &(0x7f00000002c0))
io_uring_register$IORING_REGISTER_PROBE(r6, 0x16, &(0x7f0000000000), 0x1)
semctl$IPC_RMID(r5, 0x0, 0x0)
semop(r5, &(0x7f0000000100)=[{0x2, 0xfffb, 0x1000}, {0x0, 0x4, 0x1800}, {0x5, 0xfff8, 0x1000}, {0x1, 0x9, 0x1000}, {0x4, 0x8ca, 0x3000}, {0x4, 0x2, 0x1000}], 0x6)
r7 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0)
close(r7)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x1000)
execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000000c0)={[&(0x7f0000000140)='\xd3\x05\xdb\"H\xd0\xb3e\xf5\x8f\x89\x1a\x92.\f\x88\\o\xa30\xf3\x00\x06x\xd0\xea3P\xc8\v\xc3\xd5mQ\xcf\xda\x9b^\xc1\x14\x9a\xed&}\xf4Y\xa8\x96u:\x008\xd6Y\x1b\xf3\xb7\'\x90|v\\\x8e4\x11\xf3\xd0\x1e\xe5\xdd\xf5Z\x1b\xe5\xd0mH\x9cSuLV\xcf\x8cG\xff\xe9U\xcb9\xef\x99\xa6\xcbQ1=\x93Q\xe0\xd4\xb1nJ\xcf\xff\x8fW\a,2\xd2\xcf9RA{\xd5\x9d\x99\x88g\xcd\x94\xc3O5}\x16D\x13\xd1g\xa5y\xcc\f,\xcbdd7t\xb2<\x9d\x97\xe6EW\xf9\x89\xaa\x8f\xc3\x9d\xe2Y\xc8']}, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082)
io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d})
pwrite64(0xffffffffffffffff, &(0x7f0000000300)="fec96b1890e924f0e68a5720c990384ffbdf05ecba334fb8", 0x18, 0x8)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="1c007a800c000300631f17af01aa24ee0c00030058422dbbcfcb238f"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x840)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5044}, 0x0)

5.336960791s ago: executing program 0 (id=1016):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x400100)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0xb, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@private0, 0xc5cb, 0x0, 0x0, 0xa, 0x0, 0xac74}, 0x20)
r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000080))
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f00000000c0)=0xfff, 0x6, 0x4)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000140)={0x3b, 0x8, 0x155b2bf3b847e03b, 0xff, 0x0, [@mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, @private2={0xfc, 0x2, '\x00', 0x1}]}, 0x48)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x480800, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000200)={<r6=>0x0, 0xf6, "44130cd47e98b58df0a9ad982bbc904e2b9f83438a2d8324f2aa5bb4ea769f3cbd1d2f22ec7560d1d1ebc4fd7e7b17a84010b6cec78d7c0dcd0e2410d8abe3ae8e38f17727d068ae096b5af70cc4a22f305c747f5abedc29cabaf6c676213838431f879c1836b8ba14dbfe386c44a54c80c58eb39365efd5c5ee11e3c30c1ac7e3c1a7d262c8c3a06686f66a128987e0f672cd776b3bc8a0e4414f3554494c651d25ba56830c11e4be610b5c9bb19ba87703ff456f8c54fbcb8cd91f57cff6f17657b249b87209003211af018ca60db652f97cc42df1907638c0ac2b22a9cbaf8e99b1317b37f6e172442b8034cf80d78b1b5e7b5c48"}, &(0x7f0000000300)=0xfe)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000340)={r6}, 0x8)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r4, 0xffffffffffffffff, 0x2f, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c)
io_setup(0x7, &(0x7f00000003c0)=<r7=>0x0)
io_cancel(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x7f, r1, &(0x7f0000000400)="91d726c3b3b76f0570fdbccb1155e0a4b37ffc42aeb08c6b6187f4ca9ec908949ad47a23bc52a30f9d2ed3d1abc4fa9ba495d78b7ec79095ea3d5e6c275f897a7dceb9bc5ceb06a54f221a68539545d217e2f5d9b57161bbca60333cb682662ff4ddc0257bee65657a3e1c9ed01e5d915bbb37bd435e3192a04c2530a7001ef030b283eead51291169a696f5b65fea8dbf37f0ea7ea6b4c02bb354a445fd8a859ad8cdc147b09669e08dd7b0c30ecec60d8899972ad1cf0cd4", 0xb9, 0x2, 0x0, 0x3}, &(0x7f0000000500))
ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000540)=0xc)
getxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'security.', '\xdd*.\x00'}, &(0x7f0000000600)=""/250, 0xfa)
socket$inet6(0xa, 0x6, 0xf)
sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
fstatfs(r1, &(0x7f0000000800)=""/14)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000880)={'bond_slave_1\x00', &(0x7f0000000840)=@ethtool_channels={0x3c, 0xd, 0xb1e7, 0xc, 0x3, 0x1, 0x8, 0x7, 0x3}})
pwritev2(r4, &(0x7f00000009c0)=[{&(0x7f00000008c0)="c07122e1f841c8165eba2f9db73926ee1b2a4649b9c441e0750e143fa5e024c9889892db8a4ea78bbdeeacece787411de9a745f43deb8087207071e1487e9219dfe18825d467bcd2414735e507ff2d668a046bc9f41a1659652fffe93de2301569279d9426072f7050d87dd7db39bdf390c5961236475593c7c6105c6c93cd7d2162a26c2addc563511aa1f429408889321b30cecc01761193ae8cd69150c807cbf6aab4e0b969e000c859f166ae08d7cfc6efc4a0ce0bbb", 0xb8}, {&(0x7f0000000980)="f891659a9f22e9", 0x7}], 0x2, 0x6, 0x80000000, 0x2)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r4)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x11c, r8, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x6}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x100}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x22, 0x13, [{0x18}, {0x16, 0x1}, {0x36, 0x1}, {0x60}, {0x30}, {0x5, 0x1}, {0x36, 0x1}, {0x2, 0x1}, {0x60}, {0x36}, {0x2, 0x1}, {0x6a}, {0xf}, {0x5}, {}, {0x6, 0x1}, {0x69, 0x1}, {0x30}, {0xb}, {0x2, 0x1}, {0x6c}, {0x31, 0x1}, {0x12}, {0x24, 0x1}, {0xc, 0x1}, {0x18, 0x1}, {0x48}, {0x36}, {0x9, 0x1}, {0x6c, 0x1}]}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x96, 0xac, "6d2ddc63daaab5cd8d91b50ae08718ac755290078b492d5f65120f58c1ca1e0d622e02589188973c7c9b3da6dfcbad6c657d938788ce62f7de4b3e3f0d091a79b17ff758bc6caf9eed10858ddb6f90f109043fcc998d0d1ac6869316743db5b4f6e732315b9262aece424323377960a9c558246bd14c946c59f003aaa39f511bc5c6fb8ecef3dec878dd80a96a69f18538de"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4816)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x15)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000c40), &(0x7f0000000c80)=0x4)

5.297499943s ago: executing program 6 (id=1017):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0xc}, 0x1c)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000040)={0x0, 0x38ac}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x68}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={<r5=>0x0, 0xfff7, 0x6, [0xfff, 0xfff8, 0x9, 0x4, 0x9, 0x4]}, &(0x7f00000005c0)=0x14)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000600)={r5, @in6={{0xa, 0xdcb1, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x82a}}, 0x400, 0x2}, &(0x7f00000006c0)=0x90)
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b00)={0x418, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x404, 0x8, 0x0, 0x1, [{0x31c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x40, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010101}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c2995bccd5c9f56381dc60c85e7e2eddf0537ae5471e634852d0106c360785ed"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3f1f, @mcast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7385307552cbc0d9dd6621dc17fa1d591cc0ed2a7f4e9d5636f296a4b113fc22"}, @WGPEER_A_ALLOWEDIPS={0x258, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xfffffd96, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}]}]}]}, 0x418}, 0x1, 0x0, 0x0, 0x20048010}, 0x400c040)
pipe(&(0x7f0000000000))
getsockopt$sock_buf(r0, 0x1, 0x19, 0xfffffffffffffffd, &(0x7f0000003080)=0x7a)

5.047219145s ago: executing program 6 (id=1018):
r0 = socket(0x10, 0x80002, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008011"], 0x26}}, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (rerun: 32)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) (async, rerun: 64)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) (async, rerun: 64)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) (async)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254) (async)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000000c0)={0xfe8, 0xff})
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000380)={&(0x7f0000000200), 0x0, 0xb701, 0x1}) (async, rerun: 32)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x18, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}}, 0x84) (async, rerun: 32)
r7 = msgget$private(0x0, 0x40)
msgsnd(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000d4998204c8be3a1ea0fc7b3a06d189298d951a4bdc79cd5d691ed71674ecf277e3b72f2b7cca204485352181d4f09ff887dad08fab2ad6a24ae8fd8f2afaf746d15265777f1505f837"], 0x51, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (rerun: 64)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB='fdP', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00'], 0x0, 0x0, 0x0) (async)
io_setup(0x9, &(0x7f0000000100)) (async)
write(r0, &(0x7f0000000400)="dacaf98ea212a2ab6b4a12775ae0c389cf331655ef950c7ecdc5e1467a9f28312cb816ed2d1297d6e765317a1807402625fb", 0x32)

4.934292033s ago: executing program 0 (id=1019):
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0xb80, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "75587ba42f58777c5457b426fee6056656be4cdd"}}]}, @TIPC_NLA_NODE={0xadc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xad5, 0x3, "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"}]}]}, 0xb80}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000)
recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e, 0x38190}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x5e, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0x1, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @mcast2, [{0x5, 0x2, "e37e0792b0d8dafa413a1437382e"}]}}}}}}, 0x0)
unshare(0x2a020600)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000500)=<r4=>0x0)
io_getevents(r4, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

4.7244455s ago: executing program 1 (id=1020):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c61d607c6d94c11, 0x0)
socket(0x2, 0x80805, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000003dd60000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x1f, 0xcd, 0x1b, 0x8, 0x10cf, 0x5503, 0x75af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x18, 0x2, 0x1, 0xb4, 0x1d, 0x3f, 0x1, [], [{{0x9, 0x5, 0x85, 0x3, 0x20, 0xff, 0xa, 0x40}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x40000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000040)=0x101, 0x4)
dup(r0)

4.563233512s ago: executing program 5 (id=1021):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000c00)={0x2, 0x0, [{0x1, 0x2, 0x3, 0x9}, {0x80000008, 0x401, 0x7a91, 0x6efedaf3, 0x5}]})
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000069c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="8f76025fc68481d0", 0x8}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in6=@remote, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0xb2a, 0x0, 0x2, 0x4000000000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0x29, @in6=@remote}]}, 0x104}}, 0x0)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x100}})
r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001b00)={'veth0_macvtap\x00', &(0x7f00000003c0)=@ethtool_gstrings={0x1b, 0x8}})
r9 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000180)=0x1)
ioctl$VIDIOC_S_CROP(r9, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x6f70, 0xb}})
ftruncate(0xffffffffffffffff, 0x2000008)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x1)
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r8, &(0x7f0000000240)={0xfef1, &(0x7f0000000300)={0x40, 0xb, 0x74, {0x74, 0x7, "5b8b6097e4c4a8c54efc2b0e1563c038c900a12fb70d6b72b3d8a0c047193b7120d574a30c9aad5b52fe9e682bce76b713b108f8eeac5bced94dee5ef827d98f6698305555d777f53c32c872a90a137fbd37971a497e590aef738054f6f2ab42b95345185c65391da1d3103e75718296ffc4"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000400)={0x20, 0x8, 0x100, "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"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xd5}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x879, 0x800, 0x9, 0x641, 0x3, 0x4, 0x5, 0x3, 0x75, 0x7e4, 0x10, 0x7}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0xe}, &(0x7f0000000640)={0x20, 0x83, 0x2}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000006c0)={0x20, 0x89, 0x2}})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)

2.664689708s ago: executing program 0 (id=1022):
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0xf, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x9, 0xff7, &(0x7f0000001840)=""/4087, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

2.528895674s ago: executing program 0 (id=1023):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000fc0), 0x20000, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000001000))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd6e0cb005b1abd4d879a097dd9d3e6e12f85505cd45c840f9503b2fff6c33e6a675512ab99729da82acc41b65a398d515700ba76224267cdabfb9576027eb82a82c337e379c488d47691d7fe2c55bbe29a7a37633648559a31b90f145d0f5a2d8d9499f100ba95da30ce9df964d2af22e6551f8a35878071d2b5477c0f1c0ab067a8bd9368c04ed9b6e1547f04d022d726bb32daf66bded05624baa409848f50d96df5d0a86c6ce2b9b0767e85c5233c1e30aaad953301d7294b375db43804290971c857070e9d2c8b6397ab8d56358476fc0359ee79b7956f0ef1ce2edefc6bd340037706a57aa98105019c21be58ce8c868c90db57bfe8304416b3e7e02837ea3ce01ce463321f2ea429ee0c42b27d28c2b6063eb5cd746e26ade0c9ae3049ebb8c5038b01281f26c9777fb1263a5ba1262fa783e07ef5ded966eb85a4a811f5aab0d9575551239e9b0f76e5217744b0a8edcb1504774e36818033e3ab03ca6164df64fdf4352b9c88bfa91add131e13bee44e7eb4e38e613f3bab3c6c8a5038e446d57c9058b975f05f36e0e49171b426b99aa82a0656d7ffc46169ee20456aab06ee429bff9408fb1961e3976e288bee69e9ec6dc72862e1cfcc6c4804457285efcb056b0d834666748129994a3fc172c4c9c622a0c4ddd84bce972d56c70f3687222e5857f9a24b0e138a8359409f5b4ba3206c1a7f35c9e90f3ad903715ab7283e700f9ec2c641f38e998122266a8b1731ce1f03d12a643f281b3ace22f1e403dfe05052fdca3da258f8f1bd7c88949d2a14510b4116c5e403b6cee434d4969113ff8eebc1052e6a1dfa710cadfa0dbd96afa3dd1ab32b10e97d4c015e357bb938d5c2420ed83fff6a17ca9c334fc1b1a3b171f3ca2f4f88a66c59477a73265a8dc10c6d0e5ab2f595e4b9bdd160f35a7917d46df4a50b7651a5991f2444fc0a235f210e8ce8afede0b725d0cabfa20e4d36a836314d180f66614db4fbbd15ef7a947247f7f6f0eb34af0b7aeaaa9210154285dcd0389de273ad3459a1d87f062d9a050c57b6325750aeb9f47d7242117d8e0d38ae1e6cef179809d422ae852bf41f8d5ec42fac487ed46e0511a1f554cd6181e6c81dfdafa7c69daa2ba822e22e305b4b8f34c20fcc8e50cf451f053df249a7f5b20cbc0bc127f55d80bc9c0ba3cf9f0a9c56286215c20f9d60cb61276c6bbf772c151be2520e22b8f6daea2aa1f9e1b30bbeed092d3c2fb92a10fb71e7fea336a0258620c918581487ec04c54ca4e9811a83a6bf39dca6a4e89092cdee6e40024bd7c1ae7b3a8cdbb38c21ccb1de68f7fc9fa4726b832cedcfdd22b71f37d66f350e78e3c19bcae0322f8f070c316bc3c2ba0cb12a43746bd8aaa1645e3f8800b93722ac1791396bb3def1678cb5ab3f42c097c4c3684ea61dc89209ae57906bd4577a93b14eceff6f18893064198d9141a927ced2af06226011187f1851d6a5c1b5ff78a4c6d8b387a781c06a286f052d2e828ed94110cd7b9e6cfcb840e12019678080a6e9e517ce8ba6276c5a919197fd0adf86547135fcec083f2c1fea0e40564f279ceec580e827e39fa77bfa823d6e08aa7bd320491381f21be8b10dc2ed7fee1524680a52bb1e14cb6248519100edd7df29bac5c4ad1c893ee99db03aa7e077ba6608b0db797f31a6cd6d5a01077a41df98fc373ac5c149b87c55bb73bb17b09dffa7847b134b866b9ce179d547750dd2fb9c280e2003d132c87e2535f31232a32d738aeedeff052f256a9c866b6c2cb880d15f1acca7396a8f6113afe45e46e96a6c7762eb09d2c568df561d5484356b4ae71f89bf0126c6670c4fbeee59a89e20206401ef85f083039aa9ceacc2912427b031c35e29c7a702e0054f4dbb01062c0daab2a5faa49a86cd5d48d64bbee12f60ee529a00ad13a579934faff4ec12778038a3e48217fc4eb97ebe3dec9ecdfc0af3e722ed7ca0f12952c2902b0db061098d4bf14664104c440c9d07af7fbaa375274f61b04c17050a3e139dcce999071f18468139182cfe78a84c90c0428d7c75a621a6eaa69e028ce47626235ca3edbbb53e15afebebb25e18c732a820edca2f60be8c0ecd7e5a30282a0add95c6eb43b0afea34d91de7b20f4fb999d17c7fc418738f61cce38d656ce86e2d0a97f31dad0296ee63fb48e859003f88d0a27c874a47301dc0f1fd4f4e9b1bcd7806f715c751b94e182307d2d01278eb0ad2e1a48c3cac80ea5ec28b9b52f5cf6ea8b5611be5a24f91545cae2f581fd58fd47e6aa3b88b380442f21739319050ef702ffe604d7b1341013d330ad4e8d7c3cec17da298b4fcf1205e156f30642d654384d4be8b9eb4add6d9603e8fe122b9d70171d6f8ea5", 0xfffffdef}], 0x1}}], 0x1, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x34}}, 0x8044)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001100)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x22040841}, 0x4)

2.208462275s ago: executing program 7 (id=1024):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x3, 0x0, &(0x7f00000009c0)=[{}, {<r2=>0x80000000}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000e80)={{r2, 0x0, 0x2, [0x2]}})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)

1.9284106s ago: executing program 5 (id=1025):
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x80)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 8)

1.91169035s ago: executing program 7 (id=1026):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r0=>0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1d, 0x2, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
set_mempolicy(0x4000, 0x0, 0x672)

1.768677714s ago: executing program 6 (id=1027):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x20}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x9, 0x0, 0x1, [{0x8, 0x11, 0x0, 0x0, 0x19}]}}]}]}, 0x34}}, 0x0) (fail_nth: 6)

832.4603ms ago: executing program 0 (id=1028):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x60)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x2, 0x80805, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x149)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0xa3000319)
readv(r1, 0x0, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c6b2222efd9ebda9d00000000000000000000000000000041866468bf886c187b53da047c6ddf46ee34cbe55b4ee362b1f07ca75650aa8a85e61c136dad45bfe066fd83f6c7d192c0c2749b262298102de5f0420be86b9cb1b607a3", @ANYRES32=0x0], 0x30}], 0x1, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, 0x0, 0x20040890)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000000c0)='veth1_virt_wifi\x00')
sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x7, 0x801}, 0x14}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r8, {0xc}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0)
ioctl$RNDZAPENTCNT(r9, 0x5204, &(0x7f0000000080)=0x6)

784.497916ms ago: executing program 5 (id=1029):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0)
recvmsg(r2, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvfrom$unix(r0, &(0x7f0000000100)=""/21, 0x15, 0x40000120, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x6, 0x4602)
ioctl$int_in(r3, 0x5452, &(0x7f0000000580)=0x5d4)
write$sndseq(r3, &(0x7f0000001a80)=[{0x9, 0xc8, 0xd, 0xd2, @time={0x7, 0x1}, {0x9, 0xe}, {0x10, 0x8}, @note={0x7f, 0x2, 0x1, 0x6, 0x335cdaf3}}], 0x1c)
faccessat(r3, &(0x7f00000001c0)='./file0\x00', 0x43)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000000c0), 0xffffff86}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000700)=""/228, 0xe4}], 0x3}, 0x0)

725.668426ms ago: executing program 6 (id=1030):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]})
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)

344.331648ms ago: executing program 6 (id=1031):
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x41982)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r4, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="04002abd7000fcdbdf2506000000050005000000000008000200020000001c0006800800060008000000060001000200000008000300ffffffff54000180080003007f0000010400fe80000000000000000000000000000000000000000000001206000100020000000800030064010102080006001f00000008001300e00000010000"], 0x94}, 0x1, 0x0, 0x0, 0x404c010}, 0x24040013)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r5 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0x47f6, 0x0, 0x4, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000240)={0x6})
socket$inet6_mptcp(0xa, 0x1, 0x106)

0s ago: executing program 1 (id=1032):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000cdf605efe7b5ece9accfbb00006d1b742936000000dbc2b11b49c374e5bef5373d3d78cdf1cfee8387ba6e71ab28ee523c95dec40351897161e06a574a52f71847ed54eea733c3323f8fabf12f45a970d46c1474553d681bcee88656dd9bf14a6db9120bab3e6a3fee8fe19d3e1a"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x4, 0xfffe, 0x200, 0x2}, {0x10000, 0x65ad, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0xfffffffffffffff7}, {0x2, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@loopback, 0x40000, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4891a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
unshare(0x2c020400)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bind$vsock_stream(r6, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x30, 0x18, 0x1, 0x70bd26, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000)
sendmsg$nl_route(r0, 0x0, 0x80)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x8, 0x96, 0x77, 0x2984, {{0x21, 0x4, 0x1, 0x0, 0x84, 0x64, 0x200, 0x7, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x25, 0x3, 0x1, [{@rand_addr=0x64010100, 0x8000}, {@multicast2, 0x4}]}, @generic={0x44, 0xf, "e1dc2294779eece324373a55e9"}, @rr={0x7, 0x1b, 0x98, [@private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x2b, 0x5b, [@multicast2, @broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @local, @local, @local, @multicast2, @empty]}, @ssrr={0x89, 0x3, 0x5a}, @ra={0x94, 0x4}]}}}}})

kernel console output (not intermixed with test programs):

DI: 000000000000000a
[  247.057851][ T8214] RBP: 00007f7801a11e19 R08: 0000000000000000 R09: 0000000000000000
[  247.057860][ T8214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.057869][ T8214] R13: 00007f7801bc6128 R14: 00007f7801bc6090 R15: 00007f7801cefa28
[  247.057891][ T8214]  </TASK>
[  247.057917][ T8214] Mem-Info:
[  247.311049][    C0] vkms_vblank_simulate: vblank timer overrun
[  247.583536][ T8214] active_anon:8575 inactive_anon:0 isolated_anon:0
[  247.583536][ T8214]  active_file:13043 inactive_file:39959 isolated_file:0
[  247.583536][ T8214]  unevictable:768 dirty:188 writeback:0
[  247.583536][ T8214]  slab_reclaimable:6563 slab_unreclaimable:102411
[  247.583536][ T8214]  mapped:37916 shmem:1360 pagetables:1493
[  247.583536][ T8214]  sec_pagetables:0 bounce:0
[  247.583536][ T8214]  kernel_misc_reclaimable:0
[  247.583536][ T8214]  free:1304399 free_pcp:16807 free_cma:0
[  247.772525][   T10] vmk80xx 2-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  247.850155][ T8214] Node 0 active_anon:33104kB inactive_anon:0kB active_file:52172kB inactive_file:159632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143464kB dirty:760kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12636kB pagetables:5740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  247.881986][    C0] vkms_vblank_simulate: vblank timer overrun
[  247.908070][   T10] usb 2-1: USB disconnect, device number 44
[  248.153099][ T8214] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  248.183017][    C0] vkms_vblank_simulate: vblank timer overrun
[  248.364141][ T8214] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  248.393033][    C0] vkms_vblank_simulate: vblank timer overrun
[  248.663543][ T8214] lowmem_reserve[]: 0 2497 2499 2499 2499
[  248.702281][ T8214] Node 0 DMA32 free:1328244kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23820kB inactive_anon:0kB active_file:52172kB inactive_file:158060kB unevictable:1536kB writepending:764kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:54896kB local_pcp:27164kB free_cma:0kB
[  248.769714][ T8214] lowmem_reserve[]: 0 0 1 1 1
[  248.774618][ T8214] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  248.803665][    C0] vkms_vblank_simulate: vblank timer overrun
[  248.810277][ T8214] lowmem_reserve[]: 0 0 0 0 0
[  248.815202][ T8214] Node 1 Normal free:3890864kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19664kB local_pcp:9392kB free_cma:0kB
[  248.846367][    C0] vkms_vblank_simulate: vblank timer overrun
[  248.917461][ T8214] lowmem_reserve[]: 0 0 0 0 0
[  248.928508][ T8214] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  248.951757][ T8214] Node 0 DMA32: 2231*4kB (UME) 953*8kB (UME) 523*16kB (UME) 448*32kB (UME) 165*64kB (UME) 77*128kB (UME) 58*256kB (UME) 18*512kB (UME) 9*1024kB (UM) 4*2048kB (M) 301*4096kB (M) = 1334036kB
[  248.975948][ T8214] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  249.003755][ T5993] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  249.048007][ T8214] Node 1 Normal: 179*4kB (UME) 56*8kB (UME) 34*16kB (UME) 78*32kB (UME) 33*64kB (UME) 14*128kB (UME) 2*256kB (M) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (ME) 946*4096kB (M) = 3891116kB
[  249.111126][ T8214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  249.123204][ T8214] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  249.144671][ T8214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  249.159998][ T8214] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  249.226956][ T5993] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  249.236345][ T5993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.250463][ T8214] 54358 total pagecache pages
[  249.258174][ T5993] usb 3-1: config 0 has no interface number 0
[  249.275979][ T8214] 0 pages in swap cache
[  249.281280][ T5993] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  249.295177][ T8214] Free swap  = 124996kB
[  249.299350][ T8214] Total swap = 124996kB
[  249.305371][ T5993] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  249.321104][ T8214] 2097051 pages RAM
[  249.860438][ T8214] 0 pages HighMem/MovableOnly
[  249.875245][ T8214] 425662 pages reserved
[  249.921245][ T8214] 0 pages cma reserved
[  249.934139][ T5993] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  250.076657][ T5993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.142369][ T5993] usb 3-1: Product: syz
[  250.157444][ T5993] usb 3-1: Manufacturer: syz
[  250.182054][ T5993] usb 3-1: SerialNumber: syz
[  250.259350][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'.
[  250.279564][ T8242] bond0: entered promiscuous mode
[  250.284805][ T8242] bond_slave_0: entered promiscuous mode
[  250.290775][ T8242] bond_slave_1: entered promiscuous mode
[  250.328286][ T5993] usb 3-1: config 0 descriptor??
[  250.378856][ T8242] bond0: left promiscuous mode
[  250.386907][ T8242] bond_slave_0: left promiscuous mode
[  250.412287][ T8242] bond_slave_1: left promiscuous mode
[  251.153687][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.190474][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.6.549'.
[  251.199715][ T8254] netlink: 'syz.6.549': attribute type 7 has an invalid length.
[  251.209073][ T8254] netlink: 'syz.6.549': attribute type 8 has an invalid length.
[  251.216984][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.549'.
[  251.272748][ T8254] syz_tun: entered promiscuous mode
[  251.287008][ T8254] batadv_slave_1: entered promiscuous mode
[  251.299909][ T8254] erspan0: entered promiscuous mode
[  251.314273][ T8254] debugfs: 'hsr1' already exists in 'hsr'
[  251.321272][ T8254] Cannot create hsr debugfs directory
[  251.378255][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.506640][ T8258] ip6gretap1: entered promiscuous mode
[  251.512130][ T8258] ip6gretap1: entered allmulticast mode
[  251.803922][ T5974] usb 3-1: USB disconnect, device number 20
[  252.173532][ T5945] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  252.369802][ T8270] 8021q: adding VLAN 0 to HW filter on device bond1
[  252.383554][ T5872] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  252.391743][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.5.551'.
[  252.435739][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.456992][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.499021][ T5945] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  252.531134][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.650984][ T8278] syz.6.553 (8278): drop_caches: 2
[  252.657495][ T8278] syz.6.553 (8278): drop_caches: 2
[  252.720385][ T5872] usb 1-1: config 0 has no interfaces?
[  252.737050][ T5872] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  252.755953][ T5945] usb 2-1: config 0 descriptor??
[  252.768897][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.846479][ T5872] usb 1-1: Product: syz
[  252.850802][ T5872] usb 1-1: Manufacturer: syz
[  252.912624][ T8280] syz.2.554 (8280): drop_caches: 2
[  252.921559][ T5872] usb 1-1: SerialNumber: syz
[  252.957676][ T8280] syz.2.554 (8280): drop_caches: 2
[  252.964313][ T5872] usb 1-1: config 0 descriptor??
[  253.263591][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'.
[  253.276293][ T8268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.552'.
[  253.314435][ T5945] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  253.327778][ T5945] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  253.389580][ T5945] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  253.399764][ T5945] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  253.480463][ T5945] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  253.528637][ T5945] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[  253.630878][ T5945] playstation 0003:054C:0DF2.000B: Invalid reportID received, expected 9 got 169
[  253.806691][ T5945] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -22
[  253.834349][ T8260] input: syz0 as /devices/virtual/input/input18
[  253.843911][ T8260] =======================================================
[  253.843911][ T8260] WARNING: The mand mount option has been deprecated and
[  253.843911][ T8260]          and is ignored by this kernel. Remove the mand
[  253.843911][ T8260]          option from the mount to silence this warning.
[  253.843911][ T8260] =======================================================
[  253.878850][    C1] vkms_vblank_simulate: vblank timer overrun
[  253.914902][ T5945] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense
[  253.953489][ T5945] playstation 0003:054C:0DF2.000B: Failed to create dualsense.
[  253.962940][ T8260] fuse: blksize only supported for fuseblk
[  254.021315][ T5945] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -22
[  254.654069][ T5945] usb 2-1: USB disconnect, device number 45
[  255.144523][ T5993] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  255.350594][ T5993] usb 6-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  255.411565][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.472945][ T5993] usb 6-1: config 0 descriptor??
[  255.582973][ T8305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.563'.
[  255.606877][ T5945] usb 1-1: USB disconnect, device number 33
[  255.669380][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  255.682001][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  255.709552][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.741551][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.763971][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.772845][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.031519][ T5993] usbhid 6-1:0.0: can't add hid device: -71
[  256.057884][ T5993] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  256.186500][ T5993] usb 6-1: USB disconnect, device number 9
[  256.389599][ T8327] syz.1.570 (8327): drop_caches: 2
[  256.411692][ T8327] syz.1.570 (8327): drop_caches: 2
[  256.817354][ T8331] misc userio: Invalid payload size
[  257.694925][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'.
[  257.704013][ T8351] netlink: 'syz.0.574': attribute type 7 has an invalid length.
[  257.711705][ T8351] netlink: 'syz.0.574': attribute type 8 has an invalid length.
[  257.719564][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'.
[  257.766923][ T8352] netlink: 'syz.1.577': attribute type 1 has an invalid length.
[  258.010905][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.018415][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.202667][ T8344] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.272205][ T8344] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.733278][ T8351] syz_tun: entered promiscuous mode
[  258.746536][ T8351] syz_tun: left promiscuous mode
[  258.771119][ T8352] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  258.782385][ T6328] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.837794][ T6328] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.858587][ T6328] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.111467][ T6328] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.154203][ T8367] netlink: 76 bytes leftover after parsing attributes in process `syz.6.581'.
[  259.482583][   T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  259.643691][ T5974] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  259.666561][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  259.700612][   T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  259.721268][   T10] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  259.731659][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  259.749968][   T10] usb 7-1: SerialNumber: syz
[  259.843935][ T5974] usb 3-1: Using ep0 maxpacket: 16
[  259.856625][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.876685][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.904581][ T8393] netlink: 'syz.5.590': attribute type 10 has an invalid length.
[  259.907721][ T5974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  259.931148][ T5974] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  259.936906][ T8393] team0: Port device netdevsim0 added
[  259.942301][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.024920][ T5974] usb 3-1: config 0 descriptor??
[  260.043956][ T5993] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  260.096068][   T10] usb 7-1: 0:2 : does not exist
[  260.101110][   T10] usb 7-1: unit 5 not found!
[  260.182344][   T10] usb 7-1: USB disconnect, device number 7
[  260.223755][ T5993] usb 1-1: Using ep0 maxpacket: 8
[  260.235326][ T5924] udevd[5924]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  260.243596][ T5993] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  260.278387][ T8381] tipc: Started in network mode
[  260.283613][ T8381] tipc: Node identity 66986db88b7c, cluster identity 4711
[  260.290970][ T8381] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.323718][ T5993] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  260.335113][ T8381] syzkaller0: entered promiscuous mode
[  260.343554][ T5993] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  260.354535][ T8381] syzkaller0: entered allmulticast mode
[  260.360311][ T5993] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  260.400357][ T5993] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  260.446432][ T5993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.452089][ T8381] tipc: Resetting bearer <eth:syzkaller0>
[  260.680564][ T5993] usb 1-1: GET_CAPABILITIES returned 0
[  260.699916][ T5993] usbtmc 1-1:16.0: can't read capabilities
[  260.760258][ T5993] usb 1-1: USB disconnect, device number 34
[  260.780424][ T5974] hid-u2fzero 0003:10C4:8ACF.000C: unknown main item tag 0x3
[  260.823038][ T5974] hid-u2fzero 0003:10C4:8ACF.000C: unknown main item tag 0x0
[  260.855526][ T5974] hid-u2fzero 0003:10C4:8ACF.000C: item fetching failed at offset 2/5
[  260.904749][ T5974] hid-u2fzero 0003:10C4:8ACF.000C: probe with driver hid-u2fzero failed with error -22
[  260.939469][ T8381] macsec0: entered promiscuous mode
[  260.945353][ T8381] macsec0: entered allmulticast mode
[  260.954943][ T8381] veth1_macvtap: entered allmulticast mode
[  261.039978][ T8377] tipc: Resetting bearer <eth:syzkaller0>
[  261.103279][ T8377] tipc: Disabling bearer <eth:syzkaller0>
[  261.238551][ T5868] usb 3-1: USB disconnect, device number 21
[  262.464116][ T8449] capability: warning: `syz.1.609' uses 32-bit capabilities (legacy support in use)
[  263.301495][ T5868] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  263.473495][ T5868] usb 1-1: Using ep0 maxpacket: 8
[  263.510529][ T5868] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  263.530256][ T5868] usb 1-1: config 179 has no interface number 0
[  263.538190][ T5868] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  263.549683][ T5868] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  263.563550][ T5868] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  263.623510][ T5868] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  263.647503][ T5868] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  263.706228][ T5868] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  263.773282][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.810602][ T8473] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  264.034084][ T5868] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input20
[  264.043786][ T5993] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  264.219002][ T5993] usb 2-1: Using ep0 maxpacket: 16
[  264.246631][ T5993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.278478][ T5993] usb 2-1: config 0 has no interfaces?
[  264.286772][ T5993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.300981][ T5993] usb 2-1: config 0 has no interfaces?
[  264.412518][ T5993] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.446701][ T5993] usb 2-1: config 0 has no interfaces?
[  264.521623][ T5993] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  264.537939][ T5993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  264.553547][ T5993] usb 2-1: Product: syz
[  264.564788][ T5993] usb 2-1: Manufacturer: syz
[  264.622437][ T5993] usb 2-1: config 0 descriptor??
[  264.871484][ T5868] usb 2-1: USB disconnect, device number 46
[  265.490452][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  265.506651][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  265.515830][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  265.525829][ T5184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  265.535809][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  266.338908][ T5993] usb 1-1: USB disconnect, device number 35
[  266.338975][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  266.353390][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  266.553696][ T5974] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  266.733558][ T5974] usb 2-1: Using ep0 maxpacket: 16
[  266.751176][ T5974] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  266.800874][ T5974] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  266.859536][ T5974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  266.893940][ T5974] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  266.903780][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.911812][ T5974] usb 2-1: Product: syz
[  266.938145][ T5974] usb 2-1: Manufacturer: syz
[  266.959154][ T5974] usb 2-1: SerialNumber: syz
[  267.201441][ T8499] chnl_net:caif_netlink_parms(): no params data found
[  267.419785][ T5974] usb 2-1: 0:2 : does not exist
[  267.552294][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.561421][ T8499] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.583825][ T5184] Bluetooth: hci1: command tx timeout
[  267.594740][ T8499] bridge_slave_0: entered allmulticast mode
[  267.602680][ T8499] bridge_slave_0: entered promiscuous mode
[  267.614610][ T8499] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.632391][ T8499] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.647477][ T8499] bridge_slave_1: entered allmulticast mode
[  267.661711][ T8499] bridge_slave_1: entered promiscuous mode
[  267.693653][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  267.762676][ T8499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.823451][ T8499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.843519][   T10] usb 6-1: Using ep0 maxpacket: 8
[  267.851328][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  267.861029][   T10] usb 6-1: config 4 interface 0 has no altsetting 0
[  267.871723][   T10] usb 6-1: string descriptor 0 read error: -22
[  267.878202][   T10] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  267.887584][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.940318][   T10] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  267.990885][   T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  268.008479][   T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  268.018105][   T10] usb 6-1: media controller created
[  268.021808][ T8499] team0: Port device team_slave_0 added
[  268.068847][ T8499] team0: Port device team_slave_1 added
[  268.097013][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  268.277441][ T5974] usb 2-1: USB disconnect, device number 47
[  268.300640][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.321765][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.363338][ T8499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.391127][ T8521] syzkaller1: entered promiscuous mode
[  268.393035][   T10] usb 6-1: USB disconnect, device number 10
[  268.407536][ T8521] syzkaller1: entered allmulticast mode
[  268.449186][ T8499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.460414][ T8499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.498428][ T8499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.751142][ T8499] hsr_slave_0: entered promiscuous mode
[  268.810713][ T8499] hsr_slave_1: entered promiscuous mode
[  268.856062][ T8499] debugfs: 'hsr0' already exists in 'hsr'
[  268.861922][ T8499] Cannot create hsr debugfs directory
[  269.540342][ T8540] xt_time: invalid argument - start or stop time greater than 23:59:59
[  269.560985][ T8542] xt_time: invalid argument - start or stop time greater than 23:59:59
[  269.589431][ T8541] input: syz1 as /devices/virtual/input/input21
[  269.707076][ T5184] Bluetooth: hci1: command tx timeout
[  269.769735][ T8544] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  269.818239][ T8499] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  269.852820][ T8499] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  269.914625][ T8499] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  270.006977][ T8499] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  270.321204][ T8499] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.383139][ T8499] 8021q: adding VLAN 0 to HW filter on device team0
[  270.454647][  T147] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.461888][  T147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.500088][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.507279][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.546662][ T8563] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request
[  270.579244][ T8563] nvme_fabrics: unknown parameter or missing value '
œ	«
' in ctrl creation request
[  270.887937][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.154840][ T8499] veth0_vlan: entered promiscuous mode
[  271.207844][ T8499] veth1_vlan: entered promiscuous mode
[  271.481529][ T8499] veth0_macvtap: entered promiscuous mode
[  271.544598][ T8499] veth1_macvtap: entered promiscuous mode
[  271.640026][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.725293][ T8499] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.746362][ T5184] Bluetooth: hci1: command tx timeout
[  271.778325][ T3478] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.778449][ T3478] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.778503][ T3478] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.778538][ T3478] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.156591][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.191619][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.226352][   T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  272.317352][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.334497][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.373633][   T10] usb 2-1: Using ep0 maxpacket: 32
[  272.398079][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.430718][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.442300][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  272.452714][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.494672][   T10] usb 2-1: config 0 descriptor??
[  272.576903][   T10] hub 2-1:0.0: USB hub found
[  272.680182][ T8596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.697437][ T8596] syzkaller0: entered promiscuous mode
[  272.709505][ T8596] syzkaller0: entered allmulticast mode
[  272.816888][ T8599] tipc: Resetting bearer <eth:syzkaller0>
[  272.981785][ T8605] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  273.266215][ T8584] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615)
[  273.307551][ T8584] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  273.364612][ T8608] netlink: 20 bytes leftover after parsing attributes in process `syz.7.654'.
[  273.490038][ T8595] tipc: Resetting bearer <eth:syzkaller0>
[  273.568955][ T8595] tipc: Disabling bearer <eth:syzkaller0>
[  273.575514][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.656'.
[  273.824156][ T5184] Bluetooth: hci1: command tx timeout
[  274.378348][ T8631] syz.5.661 (8631): drop_caches: 2
[  274.403014][ T8631] syz.5.661 (8631): drop_caches: 2
[  274.589764][ T8635] netlink: 48 bytes leftover after parsing attributes in process `syz.6.663'.
[  274.933616][ T5974] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  275.098990][ T5974] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  275.158597][ T5974] usb 7-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[  275.200801][ T5974] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  275.232045][ T5974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.269351][ T5974] usb 7-1: Product: syz
[  275.297323][ T5974] usb 7-1: Manufacturer: syz
[  275.312911][ T5974] usb 7-1: SerialNumber: syz
[  275.347044][ T5974] usb 7-1: config 0 descriptor??
[  275.680224][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.689360][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.057597][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'.
[  276.067758][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'.
[  276.098992][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'.
[  276.222251][   T10] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  276.331231][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  276.405805][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  276.460348][ T8658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.672'.
[  276.485699][   T10] usb 2-1: USB disconnect, device number 48
[  276.923649][ T5993] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  277.085757][ T5993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.098864][ T5993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.110941][ T5993] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  277.154811][ T5993] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  277.171133][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.224866][ T5993] usb 6-1: config 0 descriptor??
[  277.633610][ T5974] usb 7-1: USB disconnect, device number 8
[  277.656210][ T5993] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  277.849046][ T8661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.879992][ T8661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.910565][ T8675] netlink: 372 bytes leftover after parsing attributes in process `syz.1.678'.
[  277.956884][ T8675] syz.1.678 (8675): attempted to duplicate a private mapping with mremap.  This is not supported.
[  279.098638][ T8696] IPv6: NLM_F_CREATE should be specified when creating new route
[  279.784846][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.7.689'.
[  279.937831][ T5974] usb 6-1: USB disconnect, device number 11
[  280.339695][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'.
[  280.463532][  T919] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  280.627427][ T8718] bridge0: port 3(vlan2) entered blocking state
[  280.650794][  T919] usb 7-1: Using ep0 maxpacket: 16
[  280.673789][ T8717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.682777][ T8717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.702840][ T8718] bridge0: port 3(vlan2) entered disabled state
[  280.718971][ T8718] vlan2: entered allmulticast mode
[  280.728680][ T8718] bridge0: entered allmulticast mode
[  280.747307][ T8718] vlan2: left allmulticast mode
[  280.752426][ T8718] bridge0: left allmulticast mode
[  283.160669][  T919] usb 7-1: unable to get BOS descriptor or descriptor too short
[  283.191250][  T919] usb 7-1: unable to read config index 0 descriptor/start: -71
[  283.246625][  T919] usb 7-1: can't read configurations, error -71
[  283.402474][ T8747] geneve2: entered promiscuous mode
[  283.473750][ T5945] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  283.625157][ T5945] usb 6-1: Using ep0 maxpacket: 16
[  283.635117][ T5945] usb 6-1: too many configurations: 33, using maximum allowed: 8
[  283.646834][ T5945] usb 6-1: unable to read config index 0 descriptor/start: -61
[  283.654663][ T5945] usb 6-1: can't read configurations, error -61
[  283.817706][ T8756] netlink: 104 bytes leftover after parsing attributes in process `syz.7.704'.
[  283.836090][ T5945] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  284.003686][ T5945] usb 6-1: Using ep0 maxpacket: 16
[  284.011930][ T5945] usb 6-1: too many configurations: 33, using maximum allowed: 8
[  284.023523][ T5945] usb 6-1: unable to read config index 0 descriptor/start: -61
[  284.031595][ T5945] usb 6-1: can't read configurations, error -61
[  284.039319][ T5945] usb usb6-port1: attempt power cycle
[  284.241992][ T8763] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  284.390383][ T5945] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  284.434519][ T5945] usb 6-1: Using ep0 maxpacket: 16
[  284.451518][ T5945] usb 6-1: too many configurations: 33, using maximum allowed: 8
[  284.618081][ T5945] usb 6-1: unable to read config index 0 descriptor/start: -61
[  284.647771][ T5945] usb 6-1: can't read configurations, error -61
[  284.816591][ T5945] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  284.860160][ T5945] usb 6-1: Using ep0 maxpacket: 16
[  284.867098][ T5945] usb 6-1: too many configurations: 33, using maximum allowed: 8
[  284.885697][ T5945] usb 6-1: unable to read config index 0 descriptor/start: -61
[  284.894703][ T5945] usb 6-1: can't read configurations, error -61
[  284.905704][ T5945] usb usb6-port1: unable to enumerate USB device
[  285.033619][ T5993] usb 7-1: new low-speed USB device number 11 using dummy_hcd
[  285.174243][  T919] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  285.195671][ T5993] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  285.204257][ T5993] usb 7-1: config 0 has no interface number 0
[  285.210612][ T5993] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  285.223313][ T5993] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  285.235244][ T5993] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  285.244983][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.257412][ T5993] usb 7-1: config 0 descriptor??
[  285.270400][ T5993] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  285.333536][  T919] usb 1-1: Using ep0 maxpacket: 32
[  285.341562][  T919] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  285.351265][  T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.363344][  T919] usb 1-1: config 0 descriptor??
[  285.469040][ T8771] iowarrior 7-1:0.1: Error -90 while submitting URB
[  285.631897][  T919] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  285.653938][  T919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  285.674750][  T919] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  285.682363][  T919] usb 1-1: media controller created
[  285.711596][  T919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  285.934764][  T919] az6027: usb out operation failed. (-71)
[  285.951919][  T919] az6027: usb out operation failed. (-71)
[  285.959528][  T919] stb0899_attach: Driver disabled by Kconfig
[  285.970884][  T919] az6027: no front-end attached
[  285.970884][  T919] 
[  285.985363][  T919] az6027: usb out operation failed. (-71)
[  285.991170][  T919] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  286.008896][  T919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22
[  286.022778][ T5872] usb 7-1: USB disconnect, device number 11
[  286.043131][  T919] dvb-usb: schedule remote query interval to 400 msecs.
[  286.058369][  T919] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  286.080072][  T919] usb 1-1: USB disconnect, device number 36
[  286.138267][  T919] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  286.413146][ T8789] netlink: 104 bytes leftover after parsing attributes in process `syz.5.719'.
[  286.425472][ T8792] fuse: Unknown parameter '0x0000000000000006'
[  287.297282][ T8804] syz.6.722 (8804): drop_caches: 2
[  287.331449][ T8804] syz.6.722 (8804): drop_caches: 2
[  287.557387][ T8809] FAULT_INJECTION: forcing a failure.
[  287.557387][ T8809] name failslab, interval 1, probability 0, space 0, times 0
[  287.583082][ T8809] CPU: 0 UID: 0 PID: 8809 Comm: syz.5.724 Not tainted syzkaller #0 PREEMPT(full) 
[  287.583115][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  287.583127][ T8809] Call Trace:
[  287.583135][ T8809]  <TASK>
[  287.583144][ T8809]  dump_stack_lvl+0x189/0x250
[  287.583171][ T8809]  ? __pfx____ratelimit+0x10/0x10
[  287.583199][ T8809]  ? __pfx_dump_stack_lvl+0x10/0x10
[  287.583222][ T8809]  ? __pfx__printk+0x10/0x10
[  287.583253][ T8809]  ? __pfx___might_resched+0x10/0x10
[  287.583271][ T8809]  ? fs_reclaim_acquire+0x7d/0x100
[  287.583305][ T8809]  should_fail_ex+0x414/0x560
[  287.583335][ T8809]  should_failslab+0xa8/0x100
[  287.583363][ T8809]  __kmalloc_noprof+0xcb/0x4f0
[  287.583387][ T8809]  ? iter_file_splice_write+0x1c6/0x10e0
[  287.583421][ T8809]  iter_file_splice_write+0x1c6/0x10e0
[  287.583447][ T8809]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.583498][ T8809]  ? __pfx_iter_file_splice_write+0x10/0x10
[  287.583529][ T8809]  ? rcu_read_lock_any_held+0xb3/0x120
[  287.583550][ T8809]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  287.583581][ T8809]  ? __pfx_iter_file_splice_write+0x10/0x10
[  287.583609][ T8809]  direct_splice_actor+0xfe/0x160
[  287.583640][ T8809]  splice_direct_to_actor+0x5a8/0xcc0
[  287.583687][ T8809]  ? __pfx_direct_splice_actor+0x10/0x10
[  287.583713][ T8809]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  287.583750][ T8809]  do_splice_direct+0x181/0x270
[  287.583780][ T8809]  ? __pfx_do_splice_direct+0x10/0x10
[  287.583807][ T8809]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  287.583843][ T8809]  ? rw_verify_area+0x255/0x4d0
[  287.583871][ T8809]  do_sendfile+0x4da/0x7e0
[  287.583889][ T8809]  ? __pfx_vfs_write+0x10/0x10
[  287.583939][ T8809]  ? __pfx_do_sendfile+0x10/0x10
[  287.583958][ T8809]  ? __fget_files+0x3a0/0x420
[  287.583999][ T8809]  __se_sys_sendfile64+0x13e/0x190
[  287.584032][ T8809]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  287.584061][ T8809]  ? rcu_is_watching+0x15/0xb0
[  287.584087][ T8809]  ? do_syscall_64+0xbe/0x3b0
[  287.584115][ T8809]  do_syscall_64+0xfa/0x3b0
[  287.584132][ T8809]  ? lockdep_hardirqs_on+0x9c/0x150
[  287.584160][ T8809]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.584180][ T8809]  ? clear_bhb_loop+0x60/0xb0
[  287.584205][ T8809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.584225][ T8809] RIP: 0033:0x7f1e4798ebe9
[  287.584243][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.584260][ T8809] RSP: 002b:00007f1e487a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  287.584280][ T8809] RAX: ffffffffffffffda RBX: 00007f1e47bc6090 RCX: 00007f1e4798ebe9
[  287.584295][ T8809] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
[  287.584306][ T8809] RBP: 00007f1e487a9090 R08: 0000000000000000 R09: 0000000000000000
[  287.584317][ T8809] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  287.584328][ T8809] R13: 00007f1e47bc6128 R14: 00007f1e47bc6090 R15: 00007f1e47cefa28
[  287.584360][ T8809]  </TASK>
[  288.463594][ T5945] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  288.504456][ T8818] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request
[  288.525144][ T8818] nvme_fabrics: unknown parameter or missing value '
œ	«
' in ctrl creation request
[  288.635924][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61
[  288.653890][ T5945] usb 2-1: can't read configurations, error -61
[  288.803514][ T5945] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  288.963880][ T8833] syz.7.733 (8833): drop_caches: 2
[  289.052574][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61
[  289.060690][ T5945] usb 2-1: can't read configurations, error -61
[  289.164807][ T8833] syz.7.733 (8833): drop_caches: 2
[  289.182263][ T5945] usb usb2-port1: attempt power cycle
[  289.553684][ T5945] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  289.697723][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61
[  289.796722][ T5945] usb 2-1: can't read configurations, error -61
[  289.933694][ T5945] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  290.051405][ T8849] syz.6.739 (8849): drop_caches: 2
[  290.094123][ T8849] syz.6.739 (8849): drop_caches: 2
[  290.100243][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -61
[  290.137402][ T5945] usb 2-1: can't read configurations, error -61
[  290.149122][ T5945] usb usb2-port1: unable to enumerate USB device
[  290.176412][ T8851] macvlan2: entered promiscuous mode
[  290.181763][ T8851] macvlan2: entered allmulticast mode
[  290.187588][ T8851] syz_tun: entered allmulticast mode
[  290.193279][ T8851] syz_tun: entered promiscuous mode
[  290.288737][ T8851] team0: Port device macvlan2 added
[  290.498943][ T8853] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request
[  290.509022][ T8853] nvme_fabrics: unknown parameter or missing value '
œ	«
' in ctrl creation request
[  291.103709][  T919] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  291.686111][  T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.719050][  T919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.806183][  T919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  291.937267][  T919] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  291.968631][  T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.015531][  T919] usb 1-1: config 0 descriptor??
[  292.364325][ T8882] openvswitch: netlink: Message has 4 unknown bytes.
[  292.404475][ T8882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.523694][  T919] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  292.950057][ T8888] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request
[  292.999416][ T8888] nvme_fabrics: unknown parameter or missing value '
œ	«
' in ctrl creation request
[  293.343266][ T8898] FAULT_INJECTION: forcing a failure.
[  293.343266][ T8898] name failslab, interval 1, probability 0, space 0, times 0
[  293.375322][ T8898] CPU: 1 UID: 0 PID: 8898 Comm: syz.6.756 Not tainted syzkaller #0 PREEMPT(full) 
[  293.375351][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  293.375364][ T8898] Call Trace:
[  293.375372][ T8898]  <TASK>
[  293.375381][ T8898]  dump_stack_lvl+0x189/0x250
[  293.375412][ T8898]  ? __pfx____ratelimit+0x10/0x10
[  293.375443][ T8898]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.375468][ T8898]  ? __pfx__printk+0x10/0x10
[  293.375496][ T8898]  ? __lock_acquire+0xab9/0xd20
[  293.375540][ T8898]  should_fail_ex+0x414/0x560
[  293.375574][ T8898]  should_failslab+0xa8/0x100
[  293.375607][ T8898]  __kmalloc_cache_noprof+0x70/0x3d0
[  293.375634][ T8898]  ? __tipc_nl_bearer_enable+0xab3/0x13f0
[  293.375661][ T8898]  __tipc_nl_bearer_enable+0xab3/0x13f0
[  293.375693][ T8898]  ? __pfx___tipc_nl_bearer_enable+0x10/0x10
[  293.375711][ T8898]  ? __mutex_lock+0x335/0x1350
[  293.375745][ T8898]  ? tipc_nl_bearer_enable+0x17/0x40
[  293.375768][ T8898]  ? __pfx___mutex_lock+0x10/0x10
[  293.375794][ T8898]  ? __nla_parse+0x40/0x60
[  293.375830][ T8898]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  293.375857][ T8898]  ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0
[  293.375889][ T8898]  tipc_nl_bearer_enable+0x22/0x40
[  293.375910][ T8898]  genl_family_rcv_msg_doit+0x215/0x300
[  293.375943][ T8898]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  293.375996][ T8898]  genl_rcv_msg+0x60e/0x790
[  293.376029][ T8898]  ? __pfx_genl_rcv_msg+0x10/0x10
[  293.376052][ T8898]  ? __pfx_tipc_nl_bearer_enable+0x10/0x10
[  293.376074][ T8898]  ? __asan_memcpy+0x40/0x70
[  293.376096][ T8898]  ? __pfx_ref_tracker_free+0x10/0x10
[  293.376134][ T8898]  netlink_rcv_skb+0x205/0x470
[  293.376164][ T8898]  ? __lock_acquire+0xab9/0xd20
[  293.376193][ T8898]  ? __pfx_genl_rcv_msg+0x10/0x10
[  293.376230][ T8898]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  293.376313][ T8898]  ? down_read+0x1ad/0x2e0
[  293.376336][ T8898]  genl_rcv+0x28/0x40
[  293.376357][ T8898]  netlink_unicast+0x82c/0x9e0
[  293.376394][ T8898]  ? __pfx_netlink_unicast+0x10/0x10
[  293.376442][ T8898]  ? netlink_sendmsg+0x642/0xb30
[  293.376464][ T8898]  ? skb_put+0x11b/0x210
[  293.376491][ T8898]  netlink_sendmsg+0x805/0xb30
[  293.376523][ T8898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.376545][ T8898]  ? aa_sock_msg_perm+0xf1/0x1d0
[  293.376568][ T8898]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  293.376591][ T8898]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.376613][ T8898]  __sock_sendmsg+0x219/0x270
[  293.376644][ T8898]  ____sys_sendmsg+0x505/0x830
[  293.376674][ T8898]  ? __pfx_____sys_sendmsg+0x10/0x10
[  293.376708][ T8898]  ? import_iovec+0x74/0xa0
[  293.376737][ T8898]  ___sys_sendmsg+0x21f/0x2a0
[  293.376763][ T8898]  ? __pfx____sys_sendmsg+0x10/0x10
[  293.376830][ T8898]  ? __fget_files+0x2a/0x420
[  293.376859][ T8898]  ? __fget_files+0x3a0/0x420
[  293.376903][ T8898]  __x64_sys_sendmsg+0x19b/0x260
[  293.376931][ T8898]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  293.376966][ T8898]  ? __pfx_ksys_write+0x10/0x10
[  293.376991][ T8898]  ? rcu_is_watching+0x15/0xb0
[  293.377016][ T8898]  ? do_syscall_64+0xbe/0x3b0
[  293.377041][ T8898]  do_syscall_64+0xfa/0x3b0
[  293.377059][ T8898]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.377088][ T8898]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.377107][ T8898]  ? clear_bhb_loop+0x60/0xb0
[  293.377131][ T8898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.377151][ T8898] RIP: 0033:0x7f780198ebe9
[  293.377171][ T8898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.377190][ T8898] RSP: 002b:00007f78028c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.377213][ T8898] RAX: ffffffffffffffda RBX: 00007f7801bc5fa0 RCX: 00007f780198ebe9
[  293.377229][ T8898] RDX: 0000000000004800 RSI: 0000200000000100 RDI: 0000000000000003
[  293.377243][ T8898] RBP: 00007f78028c8090 R08: 0000000000000000 R09: 0000000000000000
[  293.377256][ T8898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.377268][ T8898] R13: 00007f7801bc6038 R14: 00007f7801bc5fa0 R15: 00007f7801cefa28
[  293.377312][ T8898]  </TASK>
[  293.890484][    C0] plantronics 0003:047F:FFFF.000E: usb_submit_urb(ctrl) failed: -1
[  294.053528][ T5945] usb 1-1: reset high-speed USB device number 37 using dummy_hcd
[  294.193568][ T5945] usb 1-1: device descriptor read/64, error -32
[  294.263863][ T5872] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  294.353517][ T5868] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  294.374054][   T44] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  294.421507][ T5872] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  294.430844][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.440078][ T5945] usb 1-1: reset high-speed USB device number 37 using dummy_hcd
[  294.452364][ T5872] usb 7-1: Product: syz
[  294.457246][ T5872] usb 7-1: Manufacturer: syz
[  294.461858][ T5872] usb 7-1: SerialNumber: syz
[  294.469581][ T5872] usb 7-1: config 0 descriptor??
[  294.527102][   T44] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[  294.535727][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  294.546326][   T44] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  294.558061][   T44] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  294.573523][   T44] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  294.582752][ T5868] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  294.592101][ T5945] usb 1-1: device descriptor read/64, error -32
[  294.598424][   T44] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  294.606486][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.614609][   T44] usb 8-1: Manufacturer: syz
[  294.619268][ T5868] usb 6-1: Product: syz
[  294.623677][ T5868] usb 6-1: Manufacturer: syz
[  294.629814][ T5868] usb 6-1: SerialNumber: syz
[  294.635838][   T44] usb 8-1: config 0 descriptor??
[  294.644790][   T44] igorplugusb 8-1:0.0: incorrect number of endpoints
[  294.660832][ T5868] usb 6-1: config 0 descriptor??
[  294.685967][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.758'.
[  294.696700][ T5868] powermate 6-1:0.0: probe with driver powermate failed with error -22
[  294.722636][ T8900] veth0: entered promiscuous mode
[  294.730974][ T8900] macvtap1: entered promiscuous mode
[  294.737932][ T8909] FAULT_INJECTION: forcing a failure.
[  294.737932][ T8909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  294.751379][ T8900] macvtap1: entered allmulticast mode
[  294.751401][ T8900] veth0: entered allmulticast mode
[  294.762844][ T8909] CPU: 1 UID: 0 PID: 8909 Comm: syz.6.758 Not tainted syzkaller #0 PREEMPT(full) 
[  294.762869][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  294.762884][ T8909] Call Trace:
[  294.762892][ T8909]  <TASK>
[  294.762900][ T8909]  dump_stack_lvl+0x189/0x250
[  294.762929][ T8909]  ? __pfx____ratelimit+0x10/0x10
[  294.762957][ T8909]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.762974][ T8909]  ? __pfx__printk+0x10/0x10
[  294.762994][ T8909]  ? __might_fault+0xb0/0x130
[  294.763021][ T8909]  should_fail_ex+0x414/0x560
[  294.763044][ T8909]  _copy_from_user+0x2d/0xb0
[  294.763061][ T8909]  ___sys_sendmsg+0x158/0x2a0
[  294.763079][ T8909]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.763119][ T8909]  ? __fget_files+0x2a/0x420
[  294.763140][ T8909]  ? __fget_files+0x3a0/0x420
[  294.763168][ T8909]  __x64_sys_sendmsg+0x19b/0x260
[  294.763186][ T8909]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.763208][ T8909]  ? __pfx_ksys_write+0x10/0x10
[  294.763230][ T8909]  ? do_syscall_64+0xbe/0x3b0
[  294.763251][ T8909]  do_syscall_64+0xfa/0x3b0
[  294.763264][ T8909]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.763284][ T8909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.763298][ T8909]  ? clear_bhb_loop+0x60/0xb0
[  294.763315][ T8909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.763329][ T8909] RIP: 0033:0x7f780198ebe9
[  294.763342][ T8909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.763354][ T8909] RSP: 002b:00007f7802882038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.763370][ T8909] RAX: ffffffffffffffda RBX: 00007f7801bc6090 RCX: 00007f780198ebe9
[  294.763380][ T8909] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000011
[  294.763390][ T8909] RBP: 00007f7802882090 R08: 0000000000000000 R09: 0000000000000000
[  294.763403][ T8909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.763413][ T8909] R13: 00007f7801bc6128 R14: 00007f7801bc6090 R15: 00007f7801cefa28
[  294.763444][ T8909]  </TASK>
[  295.131790][ T5958] usb 6-1: USB disconnect, device number 16
[  295.281304][ T5974] usb 8-1: USB disconnect, device number 2
[  295.293772][  T919] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  295.308354][ T5872] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22
[  295.320673][ T5872] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19!
[  295.330529][ T5872] usb 7-1: USB disconnect, device number 12
[  295.433783][  T919] usb 2-1: device descriptor read/64, error -71
[  295.639565][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.765'.
[  295.663671][ T5945] usb 1-1: reset high-speed USB device number 37 using dummy_hcd
[  295.683572][  T919] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  295.696069][ T5945] usb 1-1: device reset changed ep0 maxpacket size!
[  295.706343][   T24] usb 1-1: USB disconnect, device number 37
[  295.816173][  T919] usb 2-1: device descriptor read/64, error -71
[  295.871573][ T8922] netlink: 'syz.5.766': attribute type 1 has an invalid length.
[  295.928196][   T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  295.938096][ T8922] bond2: entered promiscuous mode
[  295.943239][ T8922] bond2: entered allmulticast mode
[  295.944007][  T919] usb usb2-port1: attempt power cycle
[  295.990079][ T8926] bond2: (slave geneve2): making interface the new active one
[  295.998428][ T8924] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request
[  296.021703][ T8924] nvme_fabrics: unknown parameter or missing value '
œ	«
' in ctrl creation request
[  296.032417][ T8926] geneve2: entered promiscuous mode
[  296.038398][ T8926] geneve2: entered allmulticast mode
[  296.049827][ T8926] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  296.059774][   T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.078967][   T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.096888][   T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.106767][   T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.153724][   T24] usb 1-1: Using ep0 maxpacket: 32
[  296.167205][   T24] usb 1-1: config 0 has an invalid interface number: 206 but max is 1
[  296.183269][   T24] usb 1-1: config 0 has no interface number 1
[  296.199141][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  296.210645][   T24] usb 1-1: config 0 interface 206 has no altsetting 0
[  296.220792][   T24] usb 1-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed
[  296.230381][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.250064][   T24] usb 1-1: Product: syz
[  296.254788][   T24] usb 1-1: Manufacturer: syz
[  296.259493][   T24] usb 1-1: SerialNumber: syz
[  296.270768][   T24] usb 1-1: config 0 descriptor??
[  296.304021][  T919] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  296.334953][  T919] usb 2-1: device descriptor read/8, error -71
[  296.493761][ T8917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.509844][ T8917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.583813][  T919] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  296.617955][  T919] usb 2-1: device descriptor read/8, error -71
[  296.650494][ T5872] usb 1-1: USB disconnect, device number 38
[  296.985203][  T919] usb usb2-port1: unable to enumerate USB device
[  297.223632][   T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  297.469438][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.776'.
[  297.568141][   T24] usb 8-1: Using ep0 maxpacket: 16
[  297.568923][ T8950] netlink: 31 bytes leftover after parsing attributes in process `syz.5.776'.
[  297.608875][ T8950] netlink: 'syz.5.776': attribute type 3 has an invalid length.
[  297.624096][ T8950] netlink: 'syz.5.776': attribute type 2 has an invalid length.
[  297.631904][ T8950] netlink: 31 bytes leftover after parsing attributes in process `syz.5.776'.
[  297.902750][ T8944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.913295][ T8944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.513973][ T8961] syz.6.778 (8961): drop_caches: 2
[  298.536676][ T8961] syz.6.778 (8961): drop_caches: 2
[  298.727180][ T8963] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request
[  298.749703][ T8960] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002
[  298.776493][ T8965] nvme_fabrics: unknown parameter or missing value '
œ	«
' in ctrl creation request
[  299.215677][ T8972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.782'.
[  299.289508][ T8976] input: syz1 as /devices/virtual/input/input23
[  299.753819][ T5872] usb 2-1: new full-speed USB device number 57 using dummy_hcd
[  299.906071][ T5872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  299.919573][ T5872] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  299.982859][ T5872] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  300.020704][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.277266][ T5872] usb 2-1: usb_control_msg returned -32
[  300.292263][ T5872] usbtmc 2-1:16.0: can't read capabilities
[  300.487310][ T5945] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  300.653342][ T8976] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -32
[  300.671847][  T919] usb 2-1: USB disconnect, device number 57
[  300.725509][ T5945] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  300.736077][ T5945] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  300.847384][ T5945] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  300.867179][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.875867][ T5872] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  300.913611][ T5945] usb 1-1: Product: syz
[  300.920928][ T5945] usb 1-1: Manufacturer: syz
[  300.926218][ T5945] usb 1-1: SerialNumber: syz
[  300.957711][   T24] usb 8-1: unable to get BOS descriptor or descriptor too short
[  300.969257][   T24] usb 8-1: unable to read config index 0 descriptor/start: -71
[  300.983509][   T24] usb 8-1: can't read configurations, error -71
[  301.056327][ T5872] usb 7-1: Using ep0 maxpacket: 8
[  301.095215][ T5872] usb 7-1: unable to get BOS descriptor or descriptor too short
[  301.118566][ T5872] usb 7-1: config 8 has an invalid interface number: 24 but max is 0
[  301.126996][ T5872] usb 7-1: config 8 has no interface number 0
[  301.148264][ T8984] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  301.160235][ T5872] usb 7-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  301.174467][ T5945] usb 1-1: 0:2 : does not exist
[  301.187827][ T5872] usb 7-1: config 8 interface 24 has no altsetting 0
[  301.226787][ T5872] usb 7-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  301.239787][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.254126][ T5872] usb 7-1: Product: syz
[  301.258148][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.789'.
[  301.260423][ T5872] usb 7-1: Manufacturer: syz
[  301.274644][ T5872] usb 7-1: SerialNumber: syz
[  301.281203][ T5945] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  301.389959][ T5945] usb 1-1: USB disconnect, device number 39
[  301.433884][   T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  301.511825][ T5868] IPVS: starting estimator thread 0...
[  301.955908][ T5924] udevd[5924]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  301.988437][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.999120][   T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  302.020762][   T24] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  302.031386][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.053880][ T9002] IPVS: using max 28 ests per chain, 67200 per kthread
[  302.067254][   T24] usb 8-1: config 0 descriptor??
[  302.743537][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.876690][ T9006] fuse: Bad value for 'fd'
[  302.908771][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  302.993618][   T24] usbhid 8-1:0.0: can't add hid device: -71
[  302.999871][   T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  303.017089][   T24] usb 8-1: USB disconnect, device number 4
[  303.296984][ T9019] netlink: 348 bytes leftover after parsing attributes in process `syz.0.795'.
[  303.348104][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.795'.
[  303.371607][ T9014] ip6erspan0: left promiscuous mode
[  303.390178][ T9014] macvtap1: left promiscuous mode
[  303.398522][ T9014] macvtap1: left allmulticast mode
[  303.421670][ T9014] geneve2: left promiscuous mode
[  303.441211][ T9014] veth0: left allmulticast mode
[  303.447714][ T9014] veth0: left promiscuous mode
[  303.483999][ T9014] macvtap2: left promiscuous mode
[  303.489262][ T9014] macvtap2: left allmulticast mode
[  303.511597][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.626746][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.676384][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.752592][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.973776][  T919] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  303.983545][ T5869] Bluetooth: hci0: command 0x0406 tx timeout
[  304.012695][ T5872] vmk80xx 7-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  304.060095][ T5872] usb 7-1: USB disconnect, device number 13
[  304.143581][  T919] usb 1-1: device descriptor read/64, error -71
[  304.239040][ T9040] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  304.445131][  T919] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  304.663544][  T919] usb 1-1: device descriptor read/64, error -71
[  304.775963][ T9054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.802'.
[  304.793534][ T9054] netlink: 'syz.1.802': attribute type 7 has an invalid length.
[  304.801569][  T919] usb usb1-port1: attempt power cycle
[  304.829982][ T9054] netlink: 'syz.1.802': attribute type 8 has an invalid length.
[  304.850471][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'.
[  305.159153][ T9054] syz_tun: entered promiscuous mode
[  305.174082][ T9054] batadv_slave_1: entered promiscuous mode
[  305.185125][ T9054] erspan0: entered promiscuous mode
[  305.198800][ T9054] debugfs: 'hsr1' already exists in 'hsr'
[  305.205290][ T9054] Cannot create hsr debugfs directory
[  305.213320][ T9054] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  305.244383][ T9054] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  305.273670][ T9054] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[  305.493636][  T919] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  305.532452][  T919] usb 1-1: device descriptor read/8, error -71
[  305.798166][ T5872] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  305.823664][  T919] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  305.885179][  T919] usb 1-1: device descriptor read/8, error -71
[  306.043552][ T5872] usb 7-1: Using ep0 maxpacket: 32
[  306.281779][ T5872] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  306.282229][  T919] usb usb1-port1: unable to enumerate USB device
[  306.347826][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.467161][ T5872] usb 7-1: config 0 descriptor??
[  306.496689][ T5872] gspca_main: sq930x-2.14.0 probing 041e:403c
[  306.913220][ T5872] gspca_sq930x: ucbus_write failed -71
[  306.945709][ T5872] sq930x 7-1:0.0: probe with driver sq930x failed with error -71
[  307.000114][ T5872] usb 7-1: USB disconnect, device number 14
[  307.386029][ T9083] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer.
[  307.547794][ T9091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.817'.
[  307.709118][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.820'.
[  307.733570][ T5974] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  307.903773][ T5945] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  307.924145][ T5974] usb 2-1: Using ep0 maxpacket: 16
[  307.932232][ T5974] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.955887][ T5974] usb 2-1: config 0 interface 0 has no altsetting 0
[  307.962574][ T5974] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  307.992431][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.033325][ T5974] usb 2-1: config 0 descriptor??
[  308.092500][ T9108] netlink: 52 bytes leftover after parsing attributes in process `syz.7.823'.
[  308.112446][ T5945] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  308.125425][ T5945] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  308.161864][ T5945] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  308.211486][ T5945] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  308.233563][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.276302][ T5945] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  308.312795][ T5945] usb 1-1: invalid MIDI out EP 0
[  308.536406][ T5974] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  308.581527][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  308.611565][ T5945] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  308.741587][ T5945] usb 1-1: USB disconnect, device number 44
[  308.848544][ T9120] vlan2: entered promiscuous mode
[  308.891997][ T9120] batadv0: entered promiscuous mode
[  308.993974][ T5974] usb 2-1: USB disconnect, device number 58
[  309.123645][ T5872] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  309.306165][ T5872] usb 8-1: Using ep0 maxpacket: 32
[  309.344381][ T5872] usb 8-1: config 0 has an invalid interface number: 85 but max is 0
[  309.359043][ T5872] usb 8-1: config 0 has no interface number 0
[  309.380786][ T5872] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  309.425746][ T5872] usb 8-1: config 0 interface 85 has no altsetting 0
[  309.438242][ T5872] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  309.448217][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.560440][ T9149] syz.1.832 (9149): drop_caches: 2
[  309.568384][ T9149] syz.1.832 (9149): drop_caches: 2
[  309.602302][ T5872] usb 8-1: Product: syz
[  309.612659][ T5872] usb 8-1: Manufacturer: syz
[  309.645830][ T5872] usb 8-1: SerialNumber: syz
[  309.818144][ T5872] usb 8-1: config 0 descriptor??
[  310.394765][ T5872] appletouch 8-1:0.85: Failed to read mode from device.
[  310.413772][ T5872] appletouch 8-1:0.85: probe with driver appletouch failed with error -5
[  310.440719][ T5872] usb 8-1: USB disconnect, device number 5
[  311.118707][ T9163] dummy0: mtu less than device minimum
[  311.236959][ T9165] netlink: 6 bytes leftover after parsing attributes in process `syz.7.839'.
[  311.654344][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.842'.
[  311.692085][ T9170] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  311.698957][ T9170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  311.792325][ T9170] vhci_hcd vhci_hcd.0: Device attached
[  311.862792][ T9174] vhci_hcd: connection closed
[  311.888703][ T6328] vhci_hcd: stop threads
[  311.934656][ T6328] vhci_hcd: release socket
[  311.964797][ T6328] vhci_hcd: disconnect device
[  311.975307][ T5872] vhci_hcd: vhci_device speed not set
[  312.151156][ T9190] usb usb7: usbfs: process 9190 (syz.0.847) did not claim interface 2 before use
[  313.141316][ T5868] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  313.179517][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'.
[  313.396441][ T5868] usb 7-1: config index 0 descriptor too short (expected 126, got 72)
[  313.450824][ T5868] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  313.479400][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.529984][ T5868] usb 7-1: Product: syz
[  313.539091][ T5868] usb 7-1: Manufacturer: syz
[  313.563629][ T5868] usb 7-1: SerialNumber: syz
[  313.644252][ T5868] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  313.669561][ T5945] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  314.076798][ T5974] usb 7-1: USB disconnect, device number 15
[  314.273715][  T919] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  314.422099][ T9227] tipc: Started in network mode
[  314.428597][ T9227] tipc: Node identity ae7a0a7de7cc, cluster identity 4711
[  314.437262][  T919] usb 2-1: Using ep0 maxpacket: 8
[  314.447021][  T919] usb 2-1: unable to get BOS descriptor or descriptor too short
[  314.455520][ T9227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.465721][  T919] usb 2-1: config 4 interface 0 has no altsetting 0
[  314.475668][  T919] usb 2-1: string descriptor 0 read error: -22
[  314.483238][ T9232] syzkaller0: entered promiscuous mode
[  314.489292][  T919] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  314.500731][ T9232] syzkaller0: entered allmulticast mode
[  314.506490][  T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.544459][  T919] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  314.573087][  T919] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  314.587743][ T9232] tipc: Resetting bearer <eth:syzkaller0>
[  314.613010][  T919] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  314.632993][  T919] usb 2-1: media controller created
[  314.730184][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.867'.
[  314.738324][  T919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  314.783796][ T5945] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  314.800186][ T5945] ath9k_htc: Failed to initialize the device
[  314.858126][ T5974] usb 7-1: ath9k_htc: USB layer deinitialized
[  314.865360][  T919] zl10353_read_register: readreg error (reg=127, ret==0)
[  314.954571][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'.
[  314.972521][ T9244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.866'.
[  315.001648][ T9244] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  315.127028][  T919] usb 2-1: USB disconnect, device number 59
[  315.257576][ T9226] tipc: Resetting bearer <eth:syzkaller0>
[  315.282299][ T9226] tipc: Disabling bearer <eth:syzkaller0>
[  315.453964][ T5872] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  315.613556][ T5872] usb 6-1: Using ep0 maxpacket: 8
[  315.632731][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short
[  315.647338][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.7.871'.
[  315.655366][ T5872] usb 6-1: unable to read config index 0 descriptor/start: -61
[  315.671786][ T5872] usb 6-1: can't read configurations, error -61
[  315.683215][ T9254] netlink: 28 bytes leftover after parsing attributes in process `syz.7.871'.
[  315.826841][ T5872] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  315.860266][ T9262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.873'.
[  315.869712][ T9262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.873'.
[  316.004884][ T5872] usb 6-1: Using ep0 maxpacket: 8
[  316.035483][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short
[  316.065329][ T5872] usb 6-1: unable to read config index 0 descriptor/start: -61
[  316.072947][ T5872] usb 6-1: can't read configurations, error -61
[  316.101989][ T5872] usb usb6-port1: attempt power cycle
[  316.214905][ T9267] misc userio: Invalid payload size
[  316.485409][ T5872] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  317.112569][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  317.119017][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  317.239526][ T5872] usb 6-1: Using ep0 maxpacket: 8
[  317.383772][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short
[  317.474216][ T5872] usb 6-1: unable to read config index 0 descriptor/start: -61
[  317.494614][ T5872] usb 6-1: can't read configurations, error -61
[  317.631124][ T5974] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  317.683742][ T5872] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  317.704338][ T5872] usb 6-1: Using ep0 maxpacket: 8
[  317.713237][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short
[  317.736859][ T5872] usb 6-1: unable to read config index 0 descriptor/start: -61
[  317.752012][ T5872] usb 6-1: can't read configurations, error -61
[  317.760452][ T5872] usb usb6-port1: unable to enumerate USB device
[  317.793930][ T5974] usb 7-1: Using ep0 maxpacket: 8
[  317.801113][ T5974] usb 7-1: unable to get BOS descriptor or descriptor too short
[  317.810778][ T5974] usb 7-1: config 4 interface 0 has no altsetting 0
[  317.829441][ T5974] usb 7-1: string descriptor 0 read error: -22
[  317.837230][ T5974] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  317.854656][ T5974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.910866][ T5974] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  317.964202][ T5974] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  317.991537][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.882'.
[  317.993923][ T5974] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  318.013978][ T5974] usb 7-1: media controller created
[  318.032977][ T9290] syz.0.882 (9290) used greatest stack depth: 16936 bytes left
[  318.052381][ T5974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  318.321560][ T5974] usb 7-1: USB disconnect, device number 16
[  318.715502][ T9306] syz.1.886 (9306): drop_caches: 2
[  318.730827][ T9306] syz.1.886 (9306): drop_caches: 2
[  318.893957][ T5974] usb 1-1: new low-speed USB device number 45 using dummy_hcd
[  319.167486][ T5974] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  319.183522][ T5869] Bluetooth: hci4: command 0x0406 tx timeout
[  319.212554][ T5974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  319.291986][ T5974] usb 1-1: config 0 has no interface number 0
[  319.335925][ T5974] usb 1-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  319.442263][ T5974] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x8C has invalid maxpacket 18432, setting to 8
[  319.471441][ T5974] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  319.530652][ T5974] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  319.559786][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.891'.
[  319.668540][ T5974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.749558][ T5974] usb 1-1: config 0 descriptor??
[  319.833535][ T5974] hso 1-1:0.1: Failed to find BULK IN ep
[  320.029628][ T9331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.050039][ T9331] syzkaller0: entered promiscuous mode
[  320.173785][ T9331] syzkaller0: entered allmulticast mode
[  320.806767][ T9342] tipc: Resetting bearer <eth:syzkaller0>
[  320.900030][ T9342] tipc: Disabling bearer <eth:syzkaller0>
[  321.593628][ T5872] usb 2-1: new low-speed USB device number 60 using dummy_hcd
[  321.757757][ T5872] usb 2-1: Invalid ep0 maxpacket: 32
[  321.816446][ T5945] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  321.895394][ T5872] usb 2-1: new low-speed USB device number 61 using dummy_hcd
[  322.053650][ T5872] usb 2-1: Invalid ep0 maxpacket: 32
[  322.059111][ T5945] usb 7-1: Using ep0 maxpacket: 8
[  322.069038][ T5872] usb usb2-port1: attempt power cycle
[  322.126799][ T9359] program syz.7.902 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  322.210514][ T9362] netlink: 'syz.7.902': attribute type 1 has an invalid length.
[  322.220069][ T5945] usb 7-1: unable to get BOS descriptor or descriptor too short
[  322.250124][ T5945] usb 7-1: config 8 has an invalid interface number: 24 but max is 0
[  322.293319][ T5945] usb 7-1: config 8 has no interface number 0
[  322.304542][ T9362] 8021q: adding VLAN 0 to HW filter on device bond1
[  322.340312][ T9359] bond1: (slave geneve2): making interface the new active one
[  322.349139][ T5945] usb 7-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  322.364063][ T9359] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  322.440868][ T5872] usb 2-1: new low-speed USB device number 62 using dummy_hcd
[  322.503825][ T9365] pim6reg: entered allmulticast mode
[  322.532173][ T5945] usb 7-1: config 8 interface 24 has no altsetting 0
[  322.575223][ T5872] usb 2-1: Invalid ep0 maxpacket: 32
[  322.633342][ T5945] usb 7-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  322.633714][  T919] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  322.665402][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.679735][ T5945] usb 7-1: Product: syz
[  322.686654][ T5945] usb 7-1: Manufacturer: syz
[  322.699063][ T5945] usb 7-1: SerialNumber: syz
[  322.713517][ T5872] usb 2-1: new low-speed USB device number 63 using dummy_hcd
[  322.745149][ T5872] usb 2-1: Invalid ep0 maxpacket: 32
[  322.751635][ T5872] usb usb2-port1: unable to enumerate USB device
[  322.783649][  T919] usb 8-1: Using ep0 maxpacket: 16
[  322.791284][  T919] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  322.803064][  T919] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.844980][ T5974] usb 1-1: USB disconnect, device number 45
[  323.121774][  T919] usb 8-1: config 0 has no interface number 0
[  323.152852][  T919] usb 8-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  323.162424][  T919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.172837][  T919] usb 8-1: Product: syz
[  323.178757][  T919] usb 8-1: Manufacturer: syz
[  323.204050][  T919] usb 8-1: SerialNumber: syz
[  323.240421][  T919] usb 8-1: config 0 descriptor??
[  323.270567][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'.
[  323.287868][  T919] uvcvideo 8-1:0.105: probe with driver uvcvideo failed with error -22
[  323.312781][ T9360] pim6reg: left allmulticast mode
[  323.515409][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.530592][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.584937][  T919] usb 8-1: USB disconnect, device number 6
[  323.653496][   T10] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  323.806470][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  323.818808][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  323.862161][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64
[  323.879483][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20
[  323.896323][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  323.918398][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  323.931580][   T10] usb 1-1: SerialNumber: syz
[  323.946667][ T9372] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  323.958114][ T9372] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  323.969605][   T10] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  324.219506][   T10] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  324.243054][   T10] usb 1-1: USB disconnect, device number 46
[  325.257490][ T9387] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  325.352149][ T5945] vmk80xx 7-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  325.416839][ T5945] usb 7-1: USB disconnect, device number 17
[  325.497676][ T5924] udevd[5924]: setting mode of /dev/bus/usb/007/017 to 020664 failed: No such file or directory
[  325.559551][ T5924] udevd[5924]: setting owner of /dev/bus/usb/007/017 to uid=0, gid=0 failed: No such file or directory
[  327.131213][ T9420] netlink: 'syz.6.919': attribute type 33 has an invalid length.
[  327.170416][ T5974] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  327.195646][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.6.919'.
[  327.265770][ T9420] netlink: 152 bytes leftover after parsing attributes in process `syz.6.919'.
[  327.333674][ T5974] usb 1-1: device descriptor read/64, error -71
[  327.583812][ T5974] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  327.723641][ T5974] usb 1-1: device descriptor read/64, error -71
[  327.864177][ T5974] usb usb1-port1: attempt power cycle
[  328.233953][ T5974] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  328.314024][ T5974] usb 1-1: device descriptor read/8, error -71
[  328.341019][ T9438] pimreg: entered allmulticast mode
[  328.388097][ T9442] FAULT_INJECTION: forcing a failure.
[  328.388097][ T9442] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  328.433637][ T9442] CPU: 1 UID: 0 PID: 9442 Comm: syz.7.925 Not tainted syzkaller #0 PREEMPT(full) 
[  328.433663][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  328.433675][ T9442] Call Trace:
[  328.433682][ T9442]  <TASK>
[  328.433691][ T9442]  dump_stack_lvl+0x189/0x250
[  328.433720][ T9442]  ? __pfx____ratelimit+0x10/0x10
[  328.433749][ T9442]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.433773][ T9442]  ? __pfx__printk+0x10/0x10
[  328.433801][ T9442]  ? __might_fault+0xb0/0x130
[  328.433840][ T9442]  should_fail_ex+0x414/0x560
[  328.433873][ T9442]  _copy_from_user+0x2d/0xb0
[  328.433896][ T9442]  ___sys_recvmsg+0x12e/0x510
[  328.433925][ T9442]  ? __pfx____sys_recvmsg+0x10/0x10
[  328.433981][ T9442]  ? __might_fault+0xb0/0x130
[  328.434027][ T9442]  do_recvmmsg+0x307/0x770
[  328.434058][ T9442]  ? __pfx_do_recvmmsg+0x10/0x10
[  328.434091][ T9442]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  328.434149][ T9442]  __x64_sys_recvmmsg+0x190/0x240
[  328.434176][ T9442]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  328.434196][ T9442]  ? rcu_is_watching+0x15/0xb0
[  328.434220][ T9442]  ? do_syscall_64+0xbe/0x3b0
[  328.434241][ T9442]  do_syscall_64+0xfa/0x3b0
[  328.434257][ T9442]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.434284][ T9442]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.434302][ T9442]  ? clear_bhb_loop+0x60/0xb0
[  328.434324][ T9442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.434342][ T9442] RIP: 0033:0x7f18e0b8ebe9
[  328.434359][ T9442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.434376][ T9442] RSP: 002b:00007f18e1a29038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  328.434396][ T9442] RAX: ffffffffffffffda RBX: 00007f18e0dc5fa0 RCX: 00007f18e0b8ebe9
[  328.434410][ T9442] RDX: 040000000000002d RSI: 0000200000000740 RDI: 0000000000000003
[  328.434424][ T9442] RBP: 00007f18e1a29090 R08: 0000000000000000 R09: 0000000000000000
[  328.434436][ T9442] R10: 0000000000002022 R11: 0000000000000246 R12: 0000000000000001
[  328.434447][ T9442] R13: 00007f18e0dc6038 R14: 00007f18e0dc5fa0 R15: 00007f18e0eefa28
[  328.434475][ T9442]  </TASK>
[  328.653709][    C1] vkms_vblank_simulate: vblank timer overrun
[  328.713989][ T5974] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  328.754414][ T5974] usb 1-1: device descriptor read/8, error -71
[  328.963989][ T5868] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  328.990254][ T5974] usb usb1-port1: unable to enumerate USB device
[  329.137304][ T5868] usb 6-1: Using ep0 maxpacket: 32
[  329.168299][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.185137][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.216585][ T5868] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  329.233597][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.292490][ T5868] usb 6-1: config 0 descriptor??
[  329.324405][ T5868] hub 6-1:0.0: USB hub found
[  329.333541][ T5872] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  329.514506][ T5868] hub 6-1:0.0: config failed, can't read hub descriptor (err -90)
[  329.526358][ T5872] usb 7-1: Using ep0 maxpacket: 32
[  329.556103][ T5872] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  329.587195][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.810669][ T5872] usb 7-1: config 0 descriptor??
[  330.036659][ T5868] hid-generic 0003:046D:C31C.0010: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0
[  330.274025][ T5993] usb 6-1: USB disconnect, device number 21
[  330.376382][ T9469] IPv6: addrconf: prefix option has invalid lifetime
[  330.444139][ T9457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  330.500848][ T9460] fido_id[9460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  330.623773][ T5872] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  330.640124][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  330.684079][ T5872] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  330.699971][ T5872] usb 7-1: media controller created
[  330.757795][ T9473] vivid-001: disconnect
[  330.786658][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  330.926424][ T9472] vivid-001: reconnect
[  331.022604][ T5872] az6027: usb out operation failed. (-71)
[  331.041987][ T5872] az6027: usb out operation failed. (-71)
[  331.063106][ T5872] stb0899_attach: Driver disabled by Kconfig
[  331.084544][ T5872] az6027: no front-end attached
[  331.084544][ T5872] 
[  331.092115][ T5872] az6027: usb out operation failed. (-71)
[  331.107335][ T5872] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  331.132243][ T5872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26
[  331.228694][ T5872] dvb-usb: schedule remote query interval to 400 msecs.
[  331.407742][ T9480] netlink: 28 bytes leftover after parsing attributes in process `syz.5.935'.
[  331.426280][ T9480] netlink: 'syz.5.935': attribute type 7 has an invalid length.
[  331.434549][ T5872] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  331.457782][ T9480] netlink: 'syz.5.935': attribute type 8 has an invalid length.
[  331.484061][ T5872] usb 7-1: USB disconnect, device number 18
[  331.488898][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.935'.
[  331.508021][ T9481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.516068][ T9481] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  331.554782][ T9481] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  332.036615][ T5872] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  332.083899][ T5868] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  332.104843][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'.
[  332.266196][ T5868] usb 1-1: config 0 has an invalid interface number: 29 but max is 0
[  332.283454][ T5868] usb 1-1: config 0 has no interface number 0
[  332.304526][ T5868] usb 1-1: config 0 interface 29 has no altsetting 0
[  332.344711][ T5868] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  332.390051][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.433013][ T5868] usb 1-1: Product: syz
[  332.437506][ T5872] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  332.483313][ T5868] usb 1-1: Manufacturer: syz
[  332.505330][ T5993] tipc: Node number set to 3810554223
[  332.513724][ T5868] usb 1-1: SerialNumber: syz
[  332.522113][ T5868] usb 1-1: config 0 descriptor??
[  332.677754][ T5872] usb 7-1: Using ep0 maxpacket: 8
[  332.702405][ T5872] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  332.752403][ T5872] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  332.809377][ T5872] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  332.849281][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.939'.
[  332.853514][ T5872] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  332.929640][ T5872] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  332.968660][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.053938][ T5868] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[  333.104603][ T5868] peak_usb 1-1:0.29 can0: sending command failure: -22
[  333.150851][ T5868] peak_usb 1-1:0.29 can0: sending command failure: -22
[  333.200890][ T5868] peak_usb 1-1:0.29 can0: sending command failure: -22
[  333.248060][ T5872] usb 7-1: GET_CAPABILITIES returned 0
[  333.293598][ T5872] usbtmc 7-1:16.0: can't read capabilities
[  333.368793][ T9481] tipc: Resetting bearer <eth:syzkaller0>
[  333.430270][ T9500] netlink: 'syz.5.943': attribute type 24 has an invalid length.
[  333.449533][ T5868] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -22
[  333.552594][ T5868] usb 1-1: USB disconnect, device number 51
[  333.777225][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.942'.
[  334.272698][ T9512] hub 9-0:1.0: USB hub found
[  334.286970][ T9512] hub 9-0:1.0: 1 port detected
[  334.563646][   T44] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  334.823043][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.836330][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.846898][   T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  335.076049][   T44] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  335.105292][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.126904][   T44] usb 1-1: config 0 descriptor??
[  335.284173][ T5872] usb 7-1: USB disconnect, device number 19
[  335.573621][ T5868] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  335.870803][   T44] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  336.063829][ T5868] usb 6-1: Using ep0 maxpacket: 32
[  336.075911][ T5868] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  336.101728][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.171989][ T5868] usb 6-1: config 0 descriptor??
[  336.500855][ T5868] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  336.614958][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  336.707737][ T5868] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  336.727674][ T5868] usb 6-1: media controller created
[  336.817139][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  336.935760][ T5868] az6027: usb out operation failed. (-71)
[  336.963359][ T5868] az6027: usb out operation failed. (-71)
[  336.979262][ T5868] stb0899_attach: Driver disabled by Kconfig
[  336.986882][ T5868] az6027: no front-end attached
[  336.986882][ T5868] 
[  336.999451][ T5868] az6027: usb out operation failed. (-71)
[  337.010431][ T5868] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  337.030604][ T5868] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27
[  337.091693][ T5868] dvb-usb: schedule remote query interval to 400 msecs.
[  337.107933][ T5868] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  337.149112][ T5868] usb 6-1: USB disconnect, device number 22
[  337.159357][    C1] plantronics 0003:047F:FFFF.0011: usb_submit_urb(ctrl) failed: -1
[  337.303944][ T5993] usb 1-1: reset high-speed USB device number 52 using dummy_hcd
[  337.406272][ T5868] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  337.409629][ T9546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.453852][ T5993] usb 1-1: device descriptor read/64, error -32
[  337.477918][ T9546] syzkaller0: entered promiscuous mode
[  337.494650][ T9546] syzkaller0: entered allmulticast mode
[  337.580929][ T9546] tipc: Resetting bearer <eth:syzkaller0>
[  337.754008][ T5993] usb 1-1: reset high-speed USB device number 52 using dummy_hcd
[  337.884206][ T5993] usb 1-1: device descriptor read/64, error -32
[  338.153624][ T5993] usb 1-1: reset high-speed USB device number 52 using dummy_hcd
[  338.194118][ T5993] usb 1-1: device descriptor read/8, error -32
[  338.229997][ T9546] tipc: Resetting bearer <eth:syzkaller0>
[  338.377440][ T9546] tipc: Disabling bearer <eth:syzkaller0>
[  338.413541][   T10] tipc: Node number set to 1236667005
[  338.587732][ T9567] netlink: 'syz.1.959': attribute type 10 has an invalid length.
[  338.620162][ T9567] netlink: 40 bytes leftover after parsing attributes in process `syz.1.959'.
[  338.680568][ T9567] dummy0: entered promiscuous mode
[  338.725221][ T9567] bridge0: port 3(dummy0) entered blocking state
[  338.774730][ T9567] bridge0: port 3(dummy0) entered disabled state
[  338.800555][ T9567] dummy0: entered allmulticast mode
[  339.106669][ T5974] usb 1-1: USB disconnect, device number 52
[  339.141573][ T9556] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  339.286512][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.7.963'.
[  339.334254][   T44] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  339.354842][ T9583] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4066323325 (32530586600 ns) > initial count (16050519696 ns). Using initial count to start timer.
[  339.553643][ T5993] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  339.574941][   T44] usb 6-1: Using ep0 maxpacket: 8
[  339.884252][   T44] usb 6-1: unable to get BOS descriptor or descriptor too short
[  339.943472][ T5993] usb 2-1: Using ep0 maxpacket: 32
[  339.989583][ T5993] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  340.024137][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.079884][   T44] usb 6-1: config 8 has an invalid interface number: 24 but max is 0
[  340.095476][   T44] usb 6-1: config 8 has no interface number 0
[  340.134951][ T5993] usb 2-1: config 0 descriptor??
[  340.188417][   T44] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  340.228392][ T9593] syz_tun: entered promiscuous mode
[  340.251548][   T44] usb 6-1: config 8 interface 24 has no altsetting 0
[  340.293043][   T44] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  340.302667][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.321014][   T44] usb 6-1: Product: syz
[  340.327712][   T44] usb 6-1: Manufacturer: syz
[  340.332370][   T44] usb 6-1: SerialNumber: syz
[  340.344344][ T9593] syz_tun: left promiscuous mode
[  340.520650][ T5993] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  340.570701][ T5993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  340.696657][ T5993] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  340.751122][ T5993] usb 2-1: media controller created
[  340.758519][ T9594] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  341.080781][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  341.207010][ T5993] az6027: usb out operation failed. (-71)
[  341.225379][ T5993] az6027: usb out operation failed. (-71)
[  341.261497][ T5993] stb0899_attach: Driver disabled by Kconfig
[  341.294890][ T5993] az6027: no front-end attached
[  341.294890][ T5993] 
[  341.353981][ T5993] az6027: usb out operation failed. (-71)
[  341.367099][ T5993] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  341.437462][ T5993] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28
[  341.497381][ T5993] dvb-usb: schedule remote query interval to 400 msecs.
[  341.608553][ T5993] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  341.692249][ T5993] usb 2-1: USB disconnect, device number 64
[  342.372969][ T5993] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  342.614097][  T919] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  342.798193][  T919] usb 7-1: Using ep0 maxpacket: 8
[  342.820488][  T919] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  342.830936][  T919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.850785][ T9633] FAULT_INJECTION: forcing a failure.
[  342.850785][ T9633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  342.878233][  T919] usb 7-1: Product: syz
[  342.878242][ T9633] CPU: 1 UID: 0 PID: 9633 Comm: syz.7.976 Not tainted syzkaller #0 PREEMPT(full) 
[  342.878277][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  342.878288][ T9633] Call Trace:
[  342.878299][ T9633]  <TASK>
[  342.878310][ T9633]  dump_stack_lvl+0x189/0x250
[  342.878343][ T9633]  ? __pfx____ratelimit+0x10/0x10
[  342.878380][ T9633]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.878410][ T9633]  ? __pfx__printk+0x10/0x10
[  342.878456][ T9633]  should_fail_ex+0x414/0x560
[  342.878495][ T9633]  _copy_to_user+0x31/0xb0
[  342.878525][ T9633]  simple_read_from_buffer+0xe1/0x170
[  342.878567][ T9633]  proc_fail_nth_read+0x1b3/0x220
[  342.878597][ T9633]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  342.878626][ T9633]  ? rw_verify_area+0x2a6/0x4d0
[  342.878653][ T9633]  ? __lock_acquire+0xab9/0xd20
[  342.878686][ T9633]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  342.878714][ T9633]  vfs_read+0x1fd/0xa30
[  342.878750][ T9633]  ? fdget_pos+0x247/0x320
[  342.878776][ T9633]  ? __pfx___mutex_lock+0x10/0x10
[  342.878798][ T9633]  ? __pfx_vfs_read+0x10/0x10
[  342.878831][ T9633]  ? __fget_files+0x2a/0x420
[  342.878870][ T9633]  ? __fget_files+0x3a0/0x420
[  342.878903][ T9633]  ? __fget_files+0x2a/0x420
[  342.878948][ T9633]  ksys_read+0x145/0x250
[  342.878982][ T9633]  ? __pfx_ksys_read+0x10/0x10
[  342.879008][ T9633]  ? rcu_is_watching+0x15/0xb0
[  342.879037][ T9633]  ? do_syscall_64+0xbe/0x3b0
[  342.879064][ T9633]  do_syscall_64+0xfa/0x3b0
[  342.879083][ T9633]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.879117][ T9633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.879139][ T9633]  ? clear_bhb_loop+0x60/0xb0
[  342.879167][ T9633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.879191][ T9633] RIP: 0033:0x7f18e0b8d5fc
[  342.879211][ T9633] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  342.879233][ T9633] RSP: 002b:00007f18e1a29030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  342.879259][ T9633] RAX: ffffffffffffffda RBX: 00007f18e0dc5fa0 RCX: 00007f18e0b8d5fc
[  342.879276][ T9633] RDX: 000000000000000f RSI: 00007f18e1a290a0 RDI: 0000000000000006
[  342.879291][ T9633] RBP: 00007f18e1a29090 R08: 0000000000000000 R09: 0000000000000000
[  342.879307][ T9633] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001
[  342.879320][ T9633] R13: 00007f18e0dc6038 R14: 00007f18e0dc5fa0 R15: 00007f18e0eefa28
[  342.879357][ T9633]  </TASK>
[  343.713892][  T919] usb 7-1: Manufacturer: syz
[  343.718651][  T919] usb 7-1: SerialNumber: syz
[  343.726716][  T919] usb 7-1: config 0 descriptor??
[  343.880320][   T44] vmk80xx 6-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  343.918880][   T44] usb 6-1: USB disconnect, device number 23
[  343.939193][  T919] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  344.030209][ T9635] bridge_slave_0: mtu less than device minimum
[  344.048605][ T9641] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0
[  344.144359][ T9642] kernel profiling enabled (shift: 9)
[  344.555579][ T5993] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  344.713703][ T5993] usb 1-1: Using ep0 maxpacket: 16
[  344.751091][ T5993] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  344.786152][ T5993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.796568][ T5993] usb 1-1: Product: syz
[  344.800938][ T5993] usb 1-1: Manufacturer: syz
[  344.805881][ T5993] usb 1-1: SerialNumber: syz
[  344.817193][ T5993] usb 1-1: config 0 descriptor??
[  345.192694][  T919] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  345.202885][ T5863] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  345.230998][ T5993] usb 1-1: ignoring: not an USB2CAN converter
[  345.373867][ T5863] usb 8-1: Using ep0 maxpacket: 32
[  345.388686][ T5863] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  345.411619][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.480556][ T5863] usb 8-1: config 0 descriptor??
[  345.491878][   T44] usb 7-1: USB disconnect, device number 20
[  345.539388][ T5868] usb 1-1: USB disconnect, device number 53
[  345.814744][ T9665] FAULT_INJECTION: forcing a failure.
[  345.814744][ T9665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  345.840366][ T9665] CPU: 0 UID: 0 PID: 9665 Comm: syz.1.987 Not tainted syzkaller #0 PREEMPT(full) 
[  345.840397][ T9665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  345.840410][ T9665] Call Trace:
[  345.840417][ T9665]  <TASK>
[  345.840427][ T9665]  dump_stack_lvl+0x189/0x250
[  345.840457][ T9665]  ? __pfx____ratelimit+0x10/0x10
[  345.840487][ T9665]  ? __pfx_dump_stack_lvl+0x10/0x10
[  345.840510][ T9665]  ? __pfx__printk+0x10/0x10
[  345.840538][ T9665]  ? __might_fault+0xb0/0x130
[  345.840578][ T9665]  should_fail_ex+0x414/0x560
[  345.840609][ T9665]  _copy_from_user+0x2d/0xb0
[  345.840632][ T9665]  kstrtouint_from_user+0xc4/0x170
[  345.840666][ T9665]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  345.840714][ T9665]  proc_fail_nth_write+0x88/0x200
[  345.840738][ T9665]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  345.840768][ T9665]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  345.840794][ T9665]  vfs_write+0x27e/0xb30
[  345.840830][ T9665]  ? __pfx_vfs_write+0x10/0x10
[  345.840859][ T9665]  ? __fget_files+0x2a/0x420
[  345.840895][ T9665]  ? __fget_files+0x3a0/0x420
[  345.840924][ T9665]  ? __fget_files+0x2a/0x420
[  345.840964][ T9665]  ksys_write+0x145/0x250
[  345.840994][ T9665]  ? __pfx_ksys_write+0x10/0x10
[  345.841026][ T9665]  ? do_syscall_64+0xbe/0x3b0
[  345.841050][ T9665]  do_syscall_64+0xfa/0x3b0
[  345.841070][ T9665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.841090][ T9665]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  345.841110][ T9665]  ? clear_bhb_loop+0x60/0xb0
[  345.841150][ T9665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.841171][ T9665] RIP: 0033:0x7f3d6e38d69f
[  345.841189][ T9665] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  345.841207][ T9665] RSP: 002b:00007f3d6f232030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  345.841229][ T9665] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3d6e38d69f
[  345.841243][ T9665] RDX: 0000000000000001 RSI: 00007f3d6f2320a0 RDI: 0000000000000004
[  345.841256][ T9665] RBP: 00007f3d6f232090 R08: 0000000000000000 R09: 0000000000000000
[  345.841269][ T9665] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  345.841280][ T9665] R13: 00007f3d6e5c6038 R14: 00007f3d6e5c5fa0 R15: 00007f3d6e6efa28
[  345.841313][ T9665]  </TASK>
[  345.841615][ T5863] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  346.164642][ T5863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  346.175891][ T9671] FAULT_INJECTION: forcing a failure.
[  346.175891][ T9671] name failslab, interval 1, probability 0, space 0, times 0
[  346.193619][ T9671] CPU: 0 UID: 0 PID: 9671 Comm: syz.6.989 Not tainted syzkaller #0 PREEMPT(full) 
[  346.193648][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  346.193661][ T9671] Call Trace:
[  346.193669][ T9671]  <TASK>
[  346.193677][ T9671]  dump_stack_lvl+0x189/0x250
[  346.193708][ T9671]  ? __pfx____ratelimit+0x10/0x10
[  346.193738][ T9671]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.193764][ T9671]  ? __pfx__printk+0x10/0x10
[  346.193798][ T9671]  ? __pfx___might_resched+0x10/0x10
[  346.193821][ T9671]  should_fail_ex+0x414/0x560
[  346.193853][ T9671]  should_failslab+0xa8/0x100
[  346.193885][ T9671]  __kmalloc_noprof+0xcb/0x4f0
[  346.193911][ T9671]  ? __kasan_kmalloc+0x93/0xb0
[  346.193936][ T9671]  ? nla_strdup+0x9d/0x140
[  346.193959][ T9671]  nla_strdup+0x9d/0x140
[  346.193980][ T9671]  nf_tables_newtable+0x491/0x1890
[  346.194026][ T9671]  nfnetlink_rcv+0x1132/0x2520
[  346.194089][ T9671]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  346.194134][ T9671]  ? ref_tracker_free+0x63a/0x7d0
[  346.194196][ T9671]  ? __netlink_deliver_tap+0x807/0x850
[  346.194227][ T9671]  ? netlink_deliver_tap+0x2e/0x1b0
[  346.194279][ T9671]  netlink_unicast+0x82c/0x9e0
[  346.194318][ T9671]  ? __pfx_netlink_unicast+0x10/0x10
[  346.194348][ T9671]  ? netlink_sendmsg+0x642/0xb30
[  346.194372][ T9671]  ? skb_put+0x11b/0x210
[  346.194397][ T9671]  netlink_sendmsg+0x805/0xb30
[  346.194427][ T9671]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.194450][ T9671]  ? aa_sock_msg_perm+0xf1/0x1d0
[  346.194472][ T9671]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  346.194494][ T9671]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.194514][ T9671]  __sock_sendmsg+0x219/0x270
[  346.194544][ T9671]  ____sys_sendmsg+0x505/0x830
[  346.194572][ T9671]  ? __pfx_____sys_sendmsg+0x10/0x10
[  346.194606][ T9671]  ? import_iovec+0x74/0xa0
[  346.194634][ T9671]  ___sys_sendmsg+0x21f/0x2a0
[  346.194660][ T9671]  ? __pfx____sys_sendmsg+0x10/0x10
[  346.194722][ T9671]  ? __fget_files+0x2a/0x420
[  346.194753][ T9671]  ? __fget_files+0x3a0/0x420
[  346.194795][ T9671]  __x64_sys_sendmsg+0x19b/0x260
[  346.194821][ T9671]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  346.194855][ T9671]  ? __pfx_ksys_write+0x10/0x10
[  346.194879][ T9671]  ? rcu_is_watching+0x15/0xb0
[  346.194906][ T9671]  ? do_syscall_64+0xbe/0x3b0
[  346.194930][ T9671]  do_syscall_64+0xfa/0x3b0
[  346.194947][ T9671]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.194976][ T9671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.194998][ T9671]  ? clear_bhb_loop+0x60/0xb0
[  346.195023][ T9671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.195043][ T9671] RIP: 0033:0x7f780198ebe9
[  346.195061][ T9671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  346.195079][ T9671] RSP: 002b:00007f78028c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  346.195100][ T9671] RAX: ffffffffffffffda RBX: 00007f7801bc5fa0 RCX: 00007f780198ebe9
[  346.195115][ T9671] RDX: 0000000004008000 RSI: 0000200000000100 RDI: 0000000000000003
[  346.195129][ T9671] RBP: 00007f78028c8090 R08: 0000000000000000 R09: 0000000000000000
[  346.195141][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  346.195153][ T9671] R13: 00007f7801bc6038 R14: 00007f7801bc5fa0 R15: 00007f7801cefa28
[  346.195186][ T9671]  </TASK>
[  346.196048][ T5863] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  346.553910][ T5863] usb 8-1: media controller created
[  346.580538][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  346.764405][ T5863] az6027: usb out operation failed. (-71)
[  346.781009][ T5863] az6027: usb out operation failed. (-71)
[  346.800675][ T5863] stb0899_attach: Driver disabled by Kconfig
[  346.823592][ T5863] az6027: no front-end attached
[  346.823592][ T5863] 
[  346.846215][ T5863] az6027: usb out operation failed. (-71)
[  346.852000][ T5863] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  346.873920][ T5868] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  346.890260][ T5863] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input29
[  346.924949][ T5863] dvb-usb: schedule remote query interval to 400 msecs.
[  346.932093][ T5863] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  346.988979][ T5863] usb 8-1: USB disconnect, device number 7
[  347.047760][ T5868] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a26, bcdDevice= 0.00
[  347.069683][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.118992][ T5863] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  347.180334][ T5868] usb 1-1: Product: syz
[  347.231211][ T5868] usb 1-1: Manufacturer: syz
[  347.236263][ T5868] usb 1-1: SerialNumber: syz
[  347.284019][ T5868] usb 1-1: config 0 descriptor??
[  347.738674][ T9704] netlink: 'syz.7.1000': attribute type 21 has an invalid length.
[  347.747472][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1000'.
[  348.325970][  T919] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  348.503726][  T919] usb 8-1: device descriptor read/64, error -71
[  348.773494][  T919] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  348.964973][  T919] usb 8-1: device descriptor read/64, error -71
[  348.967657][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'.
[  349.019646][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'.
[  349.093958][  T919] usb usb8-port1: attempt power cycle
[  349.563609][  T919] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  349.642955][  T919] usb 8-1: device descriptor read/8, error -71
[  349.660699][ T9731] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1007'.
[  349.963529][  T919] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  349.988331][  T919] usb 8-1: device descriptor read/8, error -71
[  350.115998][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1008'.
[  350.125238][ T9740] netlink: 'syz.5.1008': attribute type 7 has an invalid length.
[  350.132999][ T9740] netlink: 'syz.5.1008': attribute type 8 has an invalid length.
[  350.148227][  T919] usb usb8-port1: unable to enumerate USB device
[  350.167870][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'.
[  350.351077][ T9740] ip6gretap0: entered promiscuous mode
[  350.406726][ T9740] batadv_slave_1: entered promiscuous mode
[  350.434160][ T9740] erspan0: entered promiscuous mode
[  350.502067][ T9740] debugfs: 'hsr1' already exists in 'hsr'
[  350.511810][ T9740] Cannot create hsr debugfs directory
[  350.518718][ T9740] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  350.540481][ T9740] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  350.562132][ T9740] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[  350.658866][ T9746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.670828][ T9749] syzkaller0: entered promiscuous mode
[  350.689601][ T9749] syzkaller0: entered allmulticast mode
[  350.717105][ T9744] tipc: Resetting bearer <eth:syzkaller0>
[  350.919831][  T919] usb 1-1: USB disconnect, device number 54
[  351.209780][ T9743] tipc: Resetting bearer <eth:syzkaller0>
[  351.213695][   T44] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  351.274003][ T9743] tipc: Disabling bearer <eth:syzkaller0>
[  351.383470][   T44] usb 8-1: Using ep0 maxpacket: 8
[  351.391986][   T44] usb 8-1: unable to get BOS descriptor or descriptor too short
[  351.426306][   T44] usb 8-1: config 4 interface 0 has no altsetting 0
[  351.436759][   T44] usb 8-1: string descriptor 0 read error: -22
[  351.445498][   T44] usb 8-1: New USB device found, idVendor=059e, idProduct=6610, bcdDevice=48.05
[  351.493486][   T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.193566][  T919] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  352.294233][ T5993] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  352.403507][  T919] usb 2-1: Using ep0 maxpacket: 8
[  352.424257][  T919] usb 2-1: unable to get BOS descriptor or descriptor too short
[  352.446732][  T919] usb 2-1: config 8 has an invalid interface number: 24 but max is 0
[  352.460683][  T919] usb 2-1: config 8 has no interface number 0
[  352.472950][  T919] usb 2-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  352.484406][ T5993] usb 6-1: Using ep0 maxpacket: 8
[  352.495159][  T919] usb 2-1: config 8 interface 24 has no altsetting 0
[  352.505304][ T5993] usb 6-1: unable to get BOS descriptor or descriptor too short
[  352.517954][ T5993] usb 6-1: config 4 interface 0 has no altsetting 0
[  352.546420][  T919] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  352.556126][  T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.564365][  T919] usb 2-1: Product: syz
[  352.568667][  T919] usb 2-1: Manufacturer: syz
[  352.573466][  T919] usb 2-1: SerialNumber: syz
[  352.584536][ T5993] usb 6-1: string descriptor 0 read error: -22
[  352.591135][ T5993] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  352.628044][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.665574][ T5993] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  352.752985][ T5993] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  352.781566][ T5993] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  352.801038][ T5993] usb 6-1: media controller created
[  353.372474][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  353.660390][ T5868] usb 6-1: USB disconnect, device number 24
[  353.994612][ T5974] usb 8-1: USB disconnect, device number 12
[  354.568094][ T9794] FAULT_INJECTION: forcing a failure.
[  354.568094][ T9794] name failslab, interval 1, probability 0, space 0, times 0
[  354.588558][ T9794] CPU: 1 UID: 0 PID: 9794 Comm: syz.5.1025 Not tainted syzkaller #0 PREEMPT(full) 
[  354.588586][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  354.588599][ T9794] Call Trace:
[  354.588607][ T9794]  <TASK>
[  354.588616][ T9794]  dump_stack_lvl+0x189/0x250
[  354.588647][ T9794]  ? __pfx____ratelimit+0x10/0x10
[  354.588678][ T9794]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.588703][ T9794]  ? __pfx__printk+0x10/0x10
[  354.588735][ T9794]  ? __pfx___might_resched+0x10/0x10
[  354.588755][ T9794]  ? fs_reclaim_acquire+0x7d/0x100
[  354.588791][ T9794]  should_fail_ex+0x414/0x560
[  354.588825][ T9794]  should_failslab+0xa8/0x100
[  354.588858][ T9794]  __kmalloc_cache_noprof+0x70/0x3d0
[  354.588885][ T9794]  ? tcf_exts_init_ex+0x110/0x750
[  354.588914][ T9794]  ? mall_change+0x312/0x8f0
[  354.588946][ T9794]  tcf_exts_init_ex+0x110/0x750
[  354.588987][ T9794]  mall_change+0x338/0x8f0
[  354.589027][ T9794]  ? __pfx_mall_change+0x10/0x10
[  354.589075][ T9794]  tc_new_tfilter+0xdca/0x15b0
[  354.589128][ T9794]  ? __pfx_tc_new_tfilter+0x10/0x10
[  354.589187][ T9794]  ? __pfx_tc_new_tfilter+0x10/0x10
[  354.589208][ T9794]  rtnetlink_rcv_msg+0x7cc/0xb70
[  354.589239][ T9794]  ? __lock_acquire+0xab9/0xd20
[  354.589272][ T9794]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  354.589310][ T9794]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  354.589360][ T9794]  netlink_rcv_skb+0x205/0x470
[  354.589390][ T9794]  ? __lock_acquire+0xab9/0xd20
[  354.589425][ T9794]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  354.589458][ T9794]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.589502][ T9794]  ? netlink_deliver_tap+0x2e/0x1b0
[  354.589543][ T9794]  netlink_unicast+0x82c/0x9e0
[  354.589583][ T9794]  ? __pfx_netlink_unicast+0x10/0x10
[  354.589614][ T9794]  ? netlink_sendmsg+0x642/0xb30
[  354.589631][ T9794]  ? skb_put+0x11b/0x210
[  354.589655][ T9794]  netlink_sendmsg+0x805/0xb30
[  354.589685][ T9794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.589709][ T9794]  ? aa_sock_msg_perm+0xf1/0x1d0
[  354.589731][ T9794]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  354.589753][ T9794]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.589774][ T9794]  __sock_sendmsg+0x219/0x270
[  354.589805][ T9794]  ____sys_sendmsg+0x505/0x830
[  354.589835][ T9794]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.589869][ T9794]  ? import_iovec+0x74/0xa0
[  354.589897][ T9794]  ___sys_sendmsg+0x21f/0x2a0
[  354.589922][ T9794]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.589985][ T9794]  ? __fget_files+0x2a/0x420
[  354.590015][ T9794]  ? __fget_files+0x3a0/0x420
[  354.590057][ T9794]  __x64_sys_sendmsg+0x19b/0x260
[  354.590083][ T9794]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  354.590117][ T9794]  ? __pfx_ksys_write+0x10/0x10
[  354.590141][ T9794]  ? rcu_is_watching+0x15/0xb0
[  354.590166][ T9794]  ? do_syscall_64+0xbe/0x3b0
[  354.590190][ T9794]  do_syscall_64+0xfa/0x3b0
[  354.590207][ T9794]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.590236][ T9794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.590257][ T9794]  ? clear_bhb_loop+0x60/0xb0
[  354.590307][ T9794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.590327][ T9794] RIP: 0033:0x7f1e4798ebe9
[  354.590345][ T9794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.590363][ T9794] RSP: 002b:00007f1e487ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.590385][ T9794] RAX: ffffffffffffffda RBX: 00007f1e47bc5fa0 RCX: 00007f1e4798ebe9
[  354.590401][ T9794] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006
[  354.590413][ T9794] RBP: 00007f1e487ca090 R08: 0000000000000000 R09: 0000000000000000
[  354.590426][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.590438][ T9794] R13: 00007f1e47bc6038 R14: 00007f1e47bc5fa0 R15: 00007f1e47cefa28
[  354.590470][ T9794]  </TASK>
[  354.590793][ T9796] FAULT_INJECTION: forcing a failure.
[  354.590793][ T9796] name failslab, interval 1, probability 0, space 0, times 0
[  355.021585][ T9796] CPU: 1 UID: 0 PID: 9796 Comm: syz.6.1027 Not tainted syzkaller #0 PREEMPT(full) 
[  355.021621][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  355.021634][ T9796] Call Trace:
[  355.021643][ T9796]  <TASK>
[  355.021653][ T9796]  dump_stack_lvl+0x189/0x250
[  355.021684][ T9796]  ? __pfx____ratelimit+0x10/0x10
[  355.021715][ T9796]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.021741][ T9796]  ? __pfx__printk+0x10/0x10
[  355.021776][ T9796]  ? __pfx___might_resched+0x10/0x10
[  355.021795][ T9796]  ? fs_reclaim_acquire+0x7d/0x100
[  355.021833][ T9796]  should_fail_ex+0x414/0x560
[  355.021866][ T9796]  should_failslab+0xa8/0x100
[  355.021899][ T9796]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  355.021929][ T9796]  ? __alloc_skb+0x112/0x2d0
[  355.021954][ T9796]  __alloc_skb+0x112/0x2d0
[  355.021978][ T9796]  netlink_ack+0x146/0xa50
[  355.022006][ T9796]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  355.022037][ T9796]  ? ref_tracker_free+0x63a/0x7d0
[  355.022067][ T9796]  ? __asan_memcpy+0x40/0x70
[  355.022090][ T9796]  ? __pfx_ref_tracker_free+0x10/0x10
[  355.022130][ T9796]  netlink_rcv_skb+0x28c/0x470
[  355.022162][ T9796]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  355.022196][ T9796]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  355.022241][ T9796]  ? netlink_deliver_tap+0x2e/0x1b0
[  355.022280][ T9796]  netlink_unicast+0x82c/0x9e0
[  355.022319][ T9796]  ? __pfx_netlink_unicast+0x10/0x10
[  355.022356][ T9796]  ? netlink_sendmsg+0x642/0xb30
[  355.022372][ T9796]  ? skb_put+0x11b/0x210
[  355.022397][ T9796]  netlink_sendmsg+0x805/0xb30
[  355.022426][ T9796]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.022450][ T9796]  ? aa_sock_msg_perm+0xf1/0x1d0
[  355.022471][ T9796]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  355.022494][ T9796]  ? __pfx_netlink_sendmsg+0x10/0x10
[  355.022514][ T9796]  __sock_sendmsg+0x219/0x270
[  355.022545][ T9796]  ____sys_sendmsg+0x505/0x830
[  355.022574][ T9796]  ? __pfx_____sys_sendmsg+0x10/0x10
[  355.022607][ T9796]  ? import_iovec+0x74/0xa0
[  355.022635][ T9796]  ___sys_sendmsg+0x21f/0x2a0
[  355.022661][ T9796]  ? __pfx____sys_sendmsg+0x10/0x10
[  355.022722][ T9796]  ? __fget_files+0x2a/0x420
[  355.022755][ T9796]  ? __fget_files+0x3a0/0x420
[  355.022796][ T9796]  __x64_sys_sendmsg+0x19b/0x260
[  355.022822][ T9796]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  355.022856][ T9796]  ? __pfx_ksys_write+0x10/0x10
[  355.022880][ T9796]  ? rcu_is_watching+0x15/0xb0
[  355.022907][ T9796]  ? do_syscall_64+0xbe/0x3b0
[  355.022930][ T9796]  do_syscall_64+0xfa/0x3b0
[  355.022947][ T9796]  ? lockdep_hardirqs_on+0x9c/0x150
[  355.022975][ T9796]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.022996][ T9796]  ? clear_bhb_loop+0x60/0xb0
[  355.023021][ T9796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.023041][ T9796] RIP: 0033:0x7f780198ebe9
[  355.023059][ T9796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.023076][ T9796] RSP: 002b:00007f78028c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.023097][ T9796] RAX: ffffffffffffffda RBX: 00007f7801bc5fa0 RCX: 00007f780198ebe9
[  355.023113][ T9796] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  355.023125][ T9796] RBP: 00007f78028c8090 R08: 0000000000000000 R09: 0000000000000000
[  355.023138][ T9796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.023150][ T9796] R13: 00007f7801bc6038 R14: 00007f7801bc5fa0 R15: 00007f7801cefa28
[  355.023183][ T9796]  </TASK>
[  355.358346][    C1] vkms_vblank_simulate: vblank timer overrun
[  355.572260][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  355.572278][   T30] audit: type=1326 audit(1756576455.669:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780198ebe9 code=0x7ffc0000
[  355.605759][   T30] audit: type=1326 audit(1756576455.699:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780198ebe9 code=0x7ffc0000
[  355.663764][   T30] audit: type=1326 audit(1756576455.709:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f780198ebe9 code=0x7ffc0000
[  355.686864][   T30] audit: type=1326 audit(1756576455.759:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780198ebe9 code=0x7ffc0000
[  355.709835][    C1] vkms_vblank_simulate: vblank timer overrun
[  355.728869][   T30] audit: type=1326 audit(1756576455.759:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.6.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780198ebe9 code=0x7ffc0000
[  355.731795][ T9800] netlink: 'syz.0.1028': attribute type 1 has an invalid length.
[  355.845707][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1028'.
[  355.996235][ T9800] 8021q: adding VLAN 0 to HW filter on device bond2
[  356.129381][  T919] vmk80xx 2-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  356.194580][  T919] usb 2-1: USB disconnect, device number 65
[  356.505872][ T9816] ==================================================================
[  356.514046][ T9816] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  356.521979][ T9816] Read of size 1 at addr ffff88806908a970 by task syz.1.1032/9816
[  356.529847][ T9816] 
[  356.532205][ T9816] CPU: 0 UID: 0 PID: 9816 Comm: syz.1.1032 Not tainted syzkaller #0 PREEMPT(full) 
[  356.532231][ T9816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  356.532245][ T9816] Call Trace:
[  356.532255][ T9816]  <TASK>
[  356.532264][ T9816]  dump_stack_lvl+0x189/0x250
[  356.532293][ T9816]  ? __kasan_check_byte+0x12/0x40
[  356.532323][ T9816]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.532345][ T9816]  ? lock_release+0x4b/0x3e0
[  356.532378][ T9816]  ? __virt_addr_valid+0x4a5/0x5c0
[  356.532406][ T9816]  print_report+0xca/0x240
[  356.532425][ T9816]  ? xfrm_state_find+0x2cf2/0x5400
[  356.532452][ T9816]  kasan_report+0x118/0x150
[  356.532482][ T9816]  ? xfrm_state_find+0x2cf2/0x5400
[  356.532505][ T9816]  xfrm_state_find+0x2cf2/0x5400
[  356.532524][ T9816]  ? __lock_acquire+0xab9/0xd20
[  356.532564][ T9816]  ? xfrm_state_find+0x1da/0x5400
[  356.532586][ T9816]  ? __pfx_xfrm_state_find+0x10/0x10
[  356.532609][ T9816]  ? __lock_acquire+0xab9/0xd20
[  356.532641][ T9816]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  356.532680][ T9816]  ? stack_depot_save_flags+0x40/0x860
[  356.532711][ T9816]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  356.532738][ T9816]  ? __lock_acquire+0xab9/0xd20
[  356.532778][ T9816]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  356.532807][ T9816]  ? rt_set_nexthop+0x693/0xa80
[  356.532837][ T9816]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  356.532865][ T9816]  ? xfrm_expand_policies+0x41f/0x6a0
[  356.532893][ T9816]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  356.532923][ T9816]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  356.532956][ T9816]  xfrm_lookup_route+0x3c/0x1c0
[  356.532983][ T9816]  udp_sendmsg+0x142e/0x2170
[  356.533017][ T9816]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  356.533042][ T9816]  ? __pfx_udp_sendmsg+0x10/0x10
[  356.533072][ T9816]  ? count_memcg_event_mm+0x21/0x260
[  356.533101][ T9816]  ? count_memcg_event_mm+0x21/0x260
[  356.533132][ T9816]  ? __pfx_aa_sk_perm+0x10/0x10
[  356.533160][ T9816]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  356.533184][ T9816]  ? sock_rps_record_flow+0x19/0x410
[  356.533213][ T9816]  ? inet_sendmsg+0x29c/0x370
[  356.533238][ T9816]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  356.533262][ T9816]  __sock_sendmsg+0x19c/0x270
[  356.533291][ T9816]  ____sys_sendmsg+0x52d/0x830
[  356.533315][ T9816]  ? __pfx_____sys_sendmsg+0x10/0x10
[  356.533342][ T9816]  ? import_iovec+0x74/0xa0
[  356.533367][ T9816]  ___sys_sendmsg+0x21f/0x2a0
[  356.533387][ T9816]  ? __pfx____sys_sendmsg+0x10/0x10
[  356.533425][ T9816]  ? __fget_files+0x2a/0x420
[  356.533463][ T9816]  ? __fget_files+0x3a0/0x420
[  356.533499][ T9816]  __sys_sendmmsg+0x227/0x430
[  356.533524][ T9816]  ? __pfx___sys_sendmmsg+0x10/0x10
[  356.533544][ T9816]  ? do_futex+0x333/0x420
[  356.533586][ T9816]  ? rcu_is_watching+0x15/0xb0
[  356.533609][ T9816]  __x64_sys_sendmmsg+0xa0/0xc0
[  356.533632][ T9816]  do_syscall_64+0xfa/0x3b0
[  356.533651][ T9816]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.533680][ T9816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.533701][ T9816]  ? clear_bhb_loop+0x60/0xb0
[  356.533725][ T9816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.533745][ T9816] RIP: 0033:0x7f3d6e38ebe9
[  356.533763][ T9816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.533781][ T9816] RSP: 002b:00007f3d6f232038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  356.533803][ T9816] RAX: ffffffffffffffda RBX: 00007f3d6e5c5fa0 RCX: 00007f3d6e38ebe9
[  356.533819][ T9816] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000008
[  356.533833][ T9816] RBP: 00007f3d6e411e19 R08: 0000000000000000 R09: 0000000000000000
[  356.533845][ T9816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.533857][ T9816] R13: 00007f3d6e5c6038 R14: 00007f3d6e5c5fa0 R15: 00007f3d6e6efa28
[  356.533878][ T9816]  </TASK>
[  356.533885][ T9816] 
[  356.906498][ T9816] Allocated by task 8675:
[  356.910849][ T9816]  kasan_save_track+0x3e/0x80
[  356.915550][ T9816]  __kasan_slab_alloc+0x6c/0x80
[  356.920425][ T9816]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  356.925905][ T9816]  xfrm_state_alloc+0x24/0x2f0
[  356.930776][ T9816]  __find_acq_core+0x8a7/0x1c00
[  356.935640][ T9816]  xfrm_find_acq+0x78/0xa0
[  356.940068][ T9816]  xfrm_alloc_userspi+0x6b3/0xc90
[  356.945104][ T9816]  xfrm_user_rcv_msg+0x7a0/0xab0
[  356.950058][ T9816]  netlink_rcv_skb+0x205/0x470
[  356.954842][ T9816]  xfrm_netlink_rcv+0x79/0x90
[  356.959524][ T9816]  netlink_unicast+0x82c/0x9e0
[  356.964296][ T9816]  netlink_sendmsg+0x805/0xb30
[  356.969064][ T9816]  __sock_sendmsg+0x219/0x270
[  356.973758][ T9816]  ____sys_sendmsg+0x505/0x830
[  356.978528][ T9816]  ___sys_sendmsg+0x21f/0x2a0
[  356.983210][ T9816]  __x64_sys_sendmsg+0x19b/0x260
[  356.988166][ T9816]  do_syscall_64+0xfa/0x3b0
[  356.992699][ T9816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.998594][ T9816] 
[  357.000919][ T9816] Freed by task 919:
[  357.004811][ T9816]  kasan_save_track+0x3e/0x80
[  357.009499][ T9816]  kasan_save_free_info+0x46/0x50
[  357.014529][ T9816]  __kasan_slab_free+0x5b/0x80
[  357.019307][ T9816]  kmem_cache_free+0x18f/0x400
[  357.024114][ T9816]  xfrm_state_gc_task+0x52d/0x6b0
[  357.029153][ T9816]  process_scheduled_works+0xae1/0x17b0
[  357.034699][ T9816]  worker_thread+0x8a0/0xda0
[  357.039291][ T9816]  kthread+0x70e/0x8a0
[  357.043371][ T9816]  ret_from_fork+0x3fc/0x770
[  357.047991][ T9816]  ret_from_fork_asm+0x1a/0x30
[  357.052765][ T9816] 
[  357.055091][ T9816] The buggy address belongs to the object at ffff88806908a640
[  357.055091][ T9816]  which belongs to the cache xfrm_state of size 928
[  357.069057][ T9816] The buggy address is located 816 bytes inside of
[  357.069057][ T9816]  freed 928-byte region [ffff88806908a640, ffff88806908a9e0)
[  357.082862][ T9816] 
[  357.085187][ T9816] The buggy address belongs to the physical page:
[  357.091598][ T9816] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806908aec0 pfn:0x69088
[  357.101673][ T9816] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  357.110190][ T9816] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  357.117759][ T9816] page_type: f5(slab)
[  357.121756][ T9816] raw: 00fff00000000040 ffff88801afe33c0 dead000000000122 0000000000000000
[  357.130348][ T9816] raw: ffff88806908aec0 00000000800f0004 00000000f5000000 0000000000000000
[  357.138941][ T9816] head: 00fff00000000040 ffff88801afe33c0 dead000000000122 0000000000000000
[  357.147616][ T9816] head: ffff88806908aec0 00000000800f0004 00000000f5000000 0000000000000000
[  357.156292][ T9816] head: 00fff00000000002 ffffea0001a42201 00000000ffffffff 00000000ffffffff
[  357.164965][ T9816] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  357.173637][ T9816] page dumped because: kasan: bad access detected
[  357.180055][ T9816] page_owner tracks the page as allocated
[  357.185777][ T9816] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8486, tgid 8485 (syz.6.622), ts 267178637622, free_ts 264124184565
[  357.204987][ T9816]  post_alloc_hook+0x240/0x2a0
[  357.209786][ T9816]  get_page_from_freelist+0x21e4/0x22c0
[  357.215348][ T9816]  __alloc_frozen_pages_noprof+0x181/0x370
[  357.221180][ T9816]  alloc_pages_mpol+0x232/0x4a0
[  357.226044][ T9816]  allocate_slab+0x8a/0x370
[  357.230550][ T9816]  ___slab_alloc+0xbeb/0x1410
[  357.235240][ T9816]  kmem_cache_alloc_noprof+0x283/0x3c0
[  357.240712][ T9816]  xfrm_state_alloc+0x24/0x2f0
[  357.245500][ T9816]  xfrm_state_find+0x37d4/0x5400
[  357.250441][ T9816]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  357.256618][ T9816]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  357.262015][ T9816]  xfrm_lookup_route+0x3c/0x1c0
[  357.266870][ T9816]  udp_sendmsg+0x142e/0x2170
[  357.271469][ T9816]  __sock_sendmsg+0x19c/0x270
[  357.276152][ T9816]  ____sys_sendmsg+0x52d/0x830
[  357.280937][ T9816]  ___sys_sendmsg+0x21f/0x2a0
[  357.285619][ T9816] page last free pid 5859 tgid 5859 stack trace:
[  357.291944][ T9816]  __free_frozen_pages+0xbc4/0xd30
[  357.297065][ T9816]  vfree+0x25a/0x400
[  357.300995][ T9816]  kcov_close+0x28/0x50
[  357.305163][ T9816]  __fput+0x44c/0xa70
[  357.309148][ T9816]  task_work_run+0x1d4/0x260
[  357.313772][ T9816]  do_exit+0x6b5/0x2300
[  357.317941][ T9816]  do_group_exit+0x21c/0x2d0
[  357.322540][ T9816]  __x64_sys_exit_group+0x3f/0x40
[  357.327576][ T9816]  x64_sys_call+0x21f7/0x2200
[  357.332266][ T9816]  do_syscall_64+0xfa/0x3b0
[  357.336776][ T9816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.342786][ T9816] 
[  357.345112][ T9816] Memory state around the buggy address:
[  357.350762][ T9816]  ffff88806908a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  357.359172][ T9816]  ffff88806908a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  357.367322][ T9816] >ffff88806908a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  357.375576][ T9816]                                                              ^
[  357.383636][ T9816]  ffff88806908a980: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  357.391785][ T9816]  ffff88806908aa00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  357.399846][ T9816] ==================================================================
[  357.427125][ T9816] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  357.434548][ T9816] CPU: 1 UID: 0 PID: 9816 Comm: syz.1.1032 Not tainted syzkaller #0 PREEMPT(full) 
[  357.443929][ T9816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  357.453993][ T9816] Call Trace:
[  357.457291][ T9816]  <TASK>
[  357.460229][ T9816]  dump_stack_lvl+0x99/0x250
[  357.464835][ T9816]  ? __asan_memcpy+0x40/0x70
[  357.469518][ T9816]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.474727][ T9816]  ? __pfx__printk+0x10/0x10
[  357.479335][ T9816]  vpanic+0x281/0x750
[  357.483325][ T9816]  ? preempt_schedule+0xae/0xc0
[  357.488193][ T9816]  ? __pfx_vpanic+0x10/0x10
[  357.492711][ T9816]  ? preempt_schedule_common+0x83/0xd0
[  357.498183][ T9816]  ? preempt_schedule+0xae/0xc0
[  357.503044][ T9816]  ? __pfx_preempt_schedule+0x10/0x10
[  357.508606][ T9816]  panic+0xb9/0xc0
[  357.512337][ T9816]  ? __pfx_panic+0x10/0x10
[  357.516936][ T9816]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  357.522934][ T9816]  ? xfrm_state_find+0x2cf2/0x5400
[  357.528060][ T9816]  check_panic_on_warn+0x89/0xb0
[  357.533025][ T9816]  ? xfrm_state_find+0x2cf2/0x5400
[  357.538144][ T9816]  end_report+0x78/0x160
[  357.542398][ T9816]  kasan_report+0x129/0x150
[  357.546915][ T9816]  ? xfrm_state_find+0x2cf2/0x5400
[  357.552040][ T9816]  xfrm_state_find+0x2cf2/0x5400
[  357.557010][ T9816]  ? __lock_acquire+0xab9/0xd20
[  357.561884][ T9816]  ? xfrm_state_find+0x1da/0x5400
[  357.566935][ T9816]  ? __pfx_xfrm_state_find+0x10/0x10
[  357.572229][ T9816]  ? __lock_acquire+0xab9/0xd20
[  357.577097][ T9816]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  357.583274][ T9816]  ? stack_depot_save_flags+0x40/0x860
[  357.589016][ T9816]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  357.595639][ T9816]  ? __lock_acquire+0xab9/0xd20
[  357.600513][ T9816]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  357.605893][ T9816]  ? rt_set_nexthop+0x693/0xa80
[  357.610759][ T9816]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  357.616493][ T9816]  ? xfrm_expand_policies+0x41f/0x6a0
[  357.621878][ T9816]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  357.627269][ T9816]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  357.633184][ T9816]  xfrm_lookup_route+0x3c/0x1c0
[  357.638485][ T9816]  udp_sendmsg+0x142e/0x2170
[  357.643181][ T9816]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  357.648734][ T9816]  ? __pfx_udp_sendmsg+0x10/0x10
[  357.653688][ T9816]  ? count_memcg_event_mm+0x21/0x260
[  357.659082][ T9816]  ? count_memcg_event_mm+0x21/0x260
[  357.664383][ T9816]  ? __pfx_aa_sk_perm+0x10/0x10
[  357.669246][ T9816]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  357.675664][ T9816]  ? sock_rps_record_flow+0x19/0x410
[  357.680962][ T9816]  ? inet_sendmsg+0x29c/0x370
[  357.685661][ T9816]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  357.690956][ T9816]  __sock_sendmsg+0x19c/0x270
[  357.695649][ T9816]  ____sys_sendmsg+0x52d/0x830
[  357.700423][ T9816]  ? __pfx_____sys_sendmsg+0x10/0x10
[  357.705719][ T9816]  ? import_iovec+0x74/0xa0
[  357.710241][ T9816]  ___sys_sendmsg+0x21f/0x2a0
[  357.714927][ T9816]  ? __pfx____sys_sendmsg+0x10/0x10
[  357.720150][ T9816]  ? __fget_files+0x2a/0x420
[  357.724756][ T9816]  ? __fget_files+0x3a0/0x420
[  357.729454][ T9816]  __sys_sendmmsg+0x227/0x430
[  357.734141][ T9816]  ? __pfx___sys_sendmmsg+0x10/0x10
[  357.739349][ T9816]  ? do_futex+0x333/0x420
[  357.743714][ T9816]  ? rcu_is_watching+0x15/0xb0
[  357.748488][ T9816]  __x64_sys_sendmmsg+0xa0/0xc0
[  357.753345][ T9816]  do_syscall_64+0xfa/0x3b0
[  357.757855][ T9816]  ? lockdep_hardirqs_on+0x9c/0x150
[  357.763105][ T9816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.769181][ T9816]  ? clear_bhb_loop+0x60/0xb0
[  357.773869][ T9816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.779773][ T9816] RIP: 0033:0x7f3d6e38ebe9
[  357.784198][ T9816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  357.803813][ T9816] RSP: 002b:00007f3d6f232038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  357.812240][ T9816] RAX: ffffffffffffffda RBX: 00007f3d6e5c5fa0 RCX: 00007f3d6e38ebe9
[  357.820219][ T9816] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000008
[  357.828200][ T9816] RBP: 00007f3d6e411e19 R08: 0000000000000000 R09: 0000000000000000
[  357.836618][ T9816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  357.844592][ T9816] R13: 00007f3d6e5c6038 R14: 00007f3d6e5c5fa0 R15: 00007f3d6e6efa28
[  357.852588][ T9816]  </TASK>
[  357.855897][ T9816] Kernel Offset: disabled
[  357.860223][ T9816] Rebooting in 86400 seconds..