last executing test programs:

5m51.769520616s ago: executing program 4 (id=177):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)
msgsnd(0x0, 0x0, 0x8, 0x800)

5m51.600202778s ago: executing program 4 (id=178):
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340))
r1 = dup(r0)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r1})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0)

5m51.571137089s ago: executing program 4 (id=180):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0)
write$nci(r1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}, 0x151}, {{0x0, 0x0, 0x0}, 0xcd}], 0x2, 0x1, 0x0)

5m50.40166992s ago: executing program 4 (id=186):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000)
umount2(&(0x7f0000000540)='.\x00', 0x2)

5m50.05193096s ago: executing program 4 (id=188):
syz_pidfd_open(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x78, 0xd, 0x66, 0x0, 0x3}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000300)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000, 0x80})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c)
socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200}}, 0x10)

5m46.299807662s ago: executing program 4 (id=201):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000040)='./bus\x00', 0x34)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0xe3)
timer_delete(0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xcb58c9f2fa78421b}, 0x40c0080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x70, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xa, 0x0, 0xe2}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x5, 0xf9}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0xd, 0x9, 0x0, 0x10, 0xff}, 0xf, &(0x7f0000000280)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x81, 0x9, 0x1}]}, 0x2, [{0xb5, &(0x7f00000003c0)=@string={0xb5, 0x3, "b252f9028d892ef67fc4be784a6adf700bbc7819d460844c86dff3a984ddda118848d1962705770fca0b96a946218b634cd9d075aa83dc1e6a3cd05d4b28eee4ec1c4a740a18981c4eba9f2bfcd9914dacac4c9c63d265630e50d1fdf12542a373e89d4038811fa2f3a20f77b1d1d4ba2c0ca104f206ba95714710158ad95d62bdc5df9b9a739beca84df70c1094e247fb4365c9b1d66658ba7b550e6e1f25eb198f918433d8c2d2748ae21952df20e7bdfb04"}}, {0xc3, &(0x7f00000004c0)=@string={0xc3, 0x3, "cfd3438ee2e061660c168875a26fb918bb03356a61075a1642afcf9ad997d246a3ddedfd62e4c3208f1daf89c4bf7301afc3088917291a4716d23384af6b1c02c8a0613e94448380c25063037e0eb16162b82d5b76b58d737182b7341e55eb924909103ea1e1fb5cf954b7e6670fcba68c188eb023e073032ac15ebd1f8b4c5b33caaeb4040b75a1f28f889f576ca8f96dde84b809e38e4450c54e8988ff213bf0c7c77c9bf1c8f302fa6b18e46115311423cb4a23a93a13f412cc8396fa26d9a2"}}]})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6f, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x19, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "ea"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x4, 0x6}, {0x6, 0x24, 0x1a, 0x7ff, 0x18}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0xb, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x9, 0x7}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x10, 0xd, 0x3, 0x7, 0x8, 0x2}, 0xaf, &(0x7f00000007c0)={0x5, 0xf, 0xaf, 0x3, [@generic={0x3, 0x10, 0x1}, @generic={0xa4, 0x10, 0x1, "dadc7bb7fbbe47a34fae5c9770afc5e1c2e76a31d3c7dbf6550b7d986a0425e87ef5b062d1a2717a6e7214b35602e5ef881a31864f8acfefe5b399324f5419e01e7a5336e91cc4cc712beac03b08cedbc3025023f4303a02415587b38edf0f434f272fbf8996eb64bb313c7068ff0e87e14476bc5190f6ce06c8c47621d9b180bb4aeabb1456f7f92780372572eb2a87e4085a73579611d818de7f5957580a6a23"}, @generic={0x3, 0x10, 0x9}]}})
syz_usb_disconnect(r4)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat(0xffffffffffffff9c, 0x0, 0x1214c2, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

5m30.64985131s ago: executing program 32 (id=201):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000040)='./bus\x00', 0x34)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0xe3)
timer_delete(0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xcb58c9f2fa78421b}, 0x40c0080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x70, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xa, 0x0, 0xe2}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x5, 0xf9}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0xd, 0x9, 0x0, 0x10, 0xff}, 0xf, &(0x7f0000000280)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x81, 0x9, 0x1}]}, 0x2, [{0xb5, &(0x7f00000003c0)=@string={0xb5, 0x3, "b252f9028d892ef67fc4be784a6adf700bbc7819d460844c86dff3a984ddda118848d1962705770fca0b96a946218b634cd9d075aa83dc1e6a3cd05d4b28eee4ec1c4a740a18981c4eba9f2bfcd9914dacac4c9c63d265630e50d1fdf12542a373e89d4038811fa2f3a20f77b1d1d4ba2c0ca104f206ba95714710158ad95d62bdc5df9b9a739beca84df70c1094e247fb4365c9b1d66658ba7b550e6e1f25eb198f918433d8c2d2748ae21952df20e7bdfb04"}}, {0xc3, &(0x7f00000004c0)=@string={0xc3, 0x3, "cfd3438ee2e061660c168875a26fb918bb03356a61075a1642afcf9ad997d246a3ddedfd62e4c3208f1daf89c4bf7301afc3088917291a4716d23384af6b1c02c8a0613e94448380c25063037e0eb16162b82d5b76b58d737182b7341e55eb924909103ea1e1fb5cf954b7e6670fcba68c188eb023e073032ac15ebd1f8b4c5b33caaeb4040b75a1f28f889f576ca8f96dde84b809e38e4450c54e8988ff213bf0c7c77c9bf1c8f302fa6b18e46115311423cb4a23a93a13f412cc8396fa26d9a2"}}]})
r4 = syz_usb_connect$cdc_ncm(0x2, 0x6f, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x19, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "ea"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x4, 0x6}, {0x6, 0x24, 0x1a, 0x7ff, 0x18}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0xb, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x9, 0x7}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x10, 0xd, 0x3, 0x7, 0x8, 0x2}, 0xaf, &(0x7f00000007c0)={0x5, 0xf, 0xaf, 0x3, [@generic={0x3, 0x10, 0x1}, @generic={0xa4, 0x10, 0x1, "dadc7bb7fbbe47a34fae5c9770afc5e1c2e76a31d3c7dbf6550b7d986a0425e87ef5b062d1a2717a6e7214b35602e5ef881a31864f8acfefe5b399324f5419e01e7a5336e91cc4cc712beac03b08cedbc3025023f4303a02415587b38edf0f434f272fbf8996eb64bb313c7068ff0e87e14476bc5190f6ce06c8c47621d9b180bb4aeabb1456f7f92780372572eb2a87e4085a73579611d818de7f5957580a6a23"}, @generic={0x3, 0x10, 0x9}]}})
syz_usb_disconnect(r4)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat(0xffffffffffffff9c, 0x0, 0x1214c2, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

15.81436672s ago: executing program 0 (id=1273):
fsopen(&(0x7f0000000940)='hugetlbfs\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYRES32=0x0], &(0x7f00000007c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28)
r3 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}}], 0x1, 0x10000, &(0x7f0000000b40)={0x0, 0x3938700})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x20c, 0x2a8, 0x2a8, 0x20c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2fc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000900)={0x81, 0x4, [0x4]})
r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r4)
sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf2511000000080015000000000008000100", @ANYRES32=0x0, @ANYBLOB="30320b6548d43eb385d79f5a3ca4d4cb85812735ae085fee95d428b3"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

14.602025045s ago: executing program 0 (id=1277):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000900)={0x5, "11a0c02a8e"})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, &(0x7f0000000580))

14.443879775s ago: executing program 2 (id=1278):
r0 = creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc)
close(r0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_GATEWAY={0x8, 0x19, @remote}]}, 0x24}}, 0x0)
syz_usb_connect$uac1(0x1, 0xa5, &(0x7f0000000000)=ANY=[], 0x0)
symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x5f65, 0x88581)
close(r6)

12.179926777s ago: executing program 0 (id=1281):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
r2 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x7, 0x3, 0x34325241, 0x6, 0x3, [{0x3}, {0x180002}, {0x9, 0xfd}, {0x80000000, 0x6}, {0x6, 0x7}, {0xfff, 0x5415}, {0x400, 0x401}, {0x40000001, 0xffffff01}], 0x5, 0xd, 0x4, 0x1, 0x5}})
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001010000000000000000100008500000002000000000300000000000000000000000000000901"], 0x0, 0x4a, 0x0, 0x0, 0x57c}, 0x28)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1)

11.992720145s ago: executing program 0 (id=1283):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x18, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (fail_nth: 2)

11.109803785s ago: executing program 2 (id=1286):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r0, &(0x7f0000000340)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x5, @private2}}, 0x24)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
process_vm_writev(0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/98, 0x62}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f00000005c0)=""/255, 0xff}], 0x3, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/2, 0x2}], 0x1, 0x0)
bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x80000000, @mcast1, 0x4}}, 0x24)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})

10.980075332s ago: executing program 0 (id=1288):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

10.028259006s ago: executing program 1 (id=1290):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix={0x0, 0x2, 0x34324241, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0x6}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c)
r5 = socket$inet6(0xa, 0x803, 0x6)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000380)=ANY=[@ANYBLOB], 0xd0)
sendmmsg$inet6(r5, &(0x7f0000005fc0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x3, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e20, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x9}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000440)="44ed9fb64e24de82a74a489ba991294cf5562ed37e55510a7a898c700d0b9197216e", 0x22}, {&(0x7f0000000480)="e56a05d39e91cf7a9adbdd484cdf21e7d8318bda7c843b9e6fe0bd063b004921c73640e49b359b3b82b6024dbd4a414b151be6e8a066288d0009069d6a8a1261755a56306e1596c6108ffa5e62b833458fafe25bc9a903284ad481ac7e986659ac3828ccaf9ad38a538d891e6b6b970411f4f80a5c8de6a692ea8724fcae2cec9e2d9bc330772ea49ab06760b51a1e46b4faa8754cb05acb12831a2fb925e9d2627a70d3027b9f45df0ba459128a378c702e1de279ccef2c4d27214f328774ccb8f037b28c7f3f05af1692", 0xcb}, {&(0x7f0000000580)="84a36c5570dbc39c731795735884676eccb06a9d400bc441320698b157c3cdab90389d16674cb03071ad5ec6a3e1efcba3db5278a36f9fbaa212e187383f5aba98587bd3939683bcad89a7869e4aa7eb5f2f9ada339924b204777ec07c1abdf91adc815384350dbf6f1aa9abff4b3e866cfde826e5e2a06d20511dabd5ff893b5d5e6368cc9ca0986663eec8a8ad6b20b88816a010a0156a79c1aff692b9481300ebdfcfe6c04e1d6e351d76570f47d92fd04e53065fcf1579eed974f2117e149a76147e859f9012c893dd19130ba08b204cf359696636b55be618d045367ea5ee7bb492", 0xe4}, {&(0x7f0000000680)="4c6c52d9c3135e79e532737741de1673fe4f6bb325f0082e0c86", 0x1a}, {&(0x7f00000006c0)="864edd81b5adec7960b86ec3f196fd40d0bf8c61e312a2ba5c0087943160e72eff741712cf2a55c7089a5dadd3af9f80e43dd560cd6ad5e54213a29ed00b93c0834f56a321f96464fb26090045040f0dabdcc90561ea49c2265858bf94f691cd8eb78b5529e7aaa1046aba73473fbb04face7da9690043f5a0557a1105c24ef3a16f6f107b2ce3b4cd43fafc0742c9683c6b2e7012003ecc10f58c8d0790b9a27b8d24", 0xa3}, {&(0x7f0000000780)="a26dfdceba9234c72220b482f6e958f1ec1fc4145a882544eb353ca7c5f7a27af8df125d9b90760fd06baef3b427d9d823d77776c4d3d0b0fbd5b4321039dda6ba997cc3cfe4fe9bb4dd5f94a6eed7c0df62e27ec911e94468704b3aa35aa5e2563a49edb65af92453c166b7c50b26505e53d915d28c09a691a6b61d70e72cf695bcea1526706693db570102efb757af35f9211b25953a43debc625e09c48c1a91f634749a166a88fbcb730fce96a9d00ff7b0970b8ea3b25980e86e793c1df65ea1468ec6246fff93d1d852f9bd5bc1990164d2154babe5552251abfeef56c7c6e7d68f211eec57", 0xe8}, {&(0x7f0000000880)="412912235cb41bf427fe925582155dffbf27dbfaba86dd17b7e0ecbca26aec3ba04028c887a91e87bac7d46eb61aa656c2426504029ceb6b029ac6860e6bd018dc14e648bf26cddf9b99f8eed9789d074f8c1a8ac7a0cc84e3967c5be7500c75ca9d89", 0x63}], 0x7, &(0x7f00000009c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x94, 0x6, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x8001, [0x8, 0x0, 0x21d5, 0x4]}}, @pad1, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xce8}}, @flowinfo={{0x14, 0x29, 0xb, 0x59c}}, @dstopts={{0x28, 0x29, 0x37, {0xc, 0x1, '\x00', [@pad1, @jumbo, @jumbo={0xc2, 0x4, 0x3}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @dstopts={{0x50, 0x29, 0x37, {0x2c, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x8, [0xd, 0x7]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @pad1]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2c, 0x2, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xe}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0xfff}, @ra, @enc_lim={0x4, 0x1, 0x9}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7fff}}], 0x178}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x9ed, @private2, 0x1}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="c894b1c211709e0d1589cc999a1ba6729dfa9a1b0e570c97f3ff1e", 0x1b}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="280000000000000029000000370000002f01000000000000010a00000000000000000000000000001400000000000000290000000b009c0000000ca700000000380000000000000029000000390000003b04000900000000fe8000000000000000000000000000aa000000000000000000000000000000001400000000000000290000003e00000007000000000000001400000000000000290000000b0000000000000300000000"], 0xa8}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000cc0)="c34db9afa1f98655090b251de99454c721adea9c7122d0f77630023b8679896fb5bc7a458e529339de5cb8d4a2e9228582ab64a3b647a947af5cfc54e47c9ad0c83e898b61ae309535a7bc771daaaabdc258b92cd907c79969ea98e6ec23e07e948f997a254c8acd10508e1b1a7f71474d8bcbf6f0e5782fb304e37f24e5c33bfb94e675761f474b9c84502aa9758d809e8ddaf3694c0cc173c4c2722d2f", 0x9e}], 0x1, &(0x7f0000000dc0)=[@dstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x21d6}}], 0x38}}, {{&(0x7f0000000e00)={0xa, 0x4e20, 0x8, @empty, 0x7ff}, 0x1c, &(0x7f0000002380)=[{&(0x7f0000000e40)}, {&(0x7f0000000ec0)="4893788092d0c55171068c88e766b38a036cfcbc3d14499c26768461a3b053961a7b29411bbf70038bdc2ba5b222114ce491b1ede9660246be1a616bb196d99df6c21ad7256e224300b5cb2aa7a865db5f949424648a2f90a14ab06ce91b24edff1053a32fdf87915df31a3da3096437b0656c01b44b124f0086882558a4ab32cd3f1eee1f362947fa542e810f81091e33b4a599ae77896642540352b2124e0a3ab9d8fdd64eda1ae018e079af71a58c6142d25756ca44c483f1f7f07ec80e2a4b0b60e305df3e6613861c0e8db4de0e9dbb8f8726b020189cdf1aff948d47b660f74b71ffb85371341cad", 0xeb}, {&(0x7f0000000fc0)="79e29b7018bf37a9f04060822b119638592ccb1225412e516cd3309c565c9007f686fd3a2bb9dffb76aca9e9662d003932c8a8a6d2c0971efc6de9971a583357de70bdcaedb1205e5e3351448ccc9e38771b580aaf9b813e2d23f3a8b7d38e818e50cef8fea151afddd7007afb597c3ae144381868370d8610b23b05ed67b49263d349fb643820cab050d0e77f7becd39f9adf6ddc8aab5f08d4a7bab3612c203d151d65260a1100b5bed793cf54ce9a4f1a6fc2cfc0191fbed6f20e4af3372b41", 0xc1}, {0x0}, {&(0x7f00000020c0)="95061ed0e175f9a2", 0x8}, {&(0x7f0000002100)="da29c0c4467229a4fe2e8c9e90bb1ae1e009706f815ce9ae5f7457623b78d89ba9954512ef62fe327d57fb79ad9459a122e75fdbb70914bea3b9e8a834ae8c2d89a3bc781a7b44e936880eeb4ebda9df4cdc3ec46746337ffb28b16474368e87a957d9f1ae4d58a230357180f9fd882d2c8c1b7521799a47943fad8e63a62e71eb4cf7fbeb938fbd0fdbe8835f638ec22cd6a4272e9700db0f83c307b41c6bb6fd5126b189a345c80bb76df5dbe637", 0xaf}, {&(0x7f0000002200)="7718a45a9deb43d66a134ed2a2ca4dedb4f4e20148fd5d7b6ad696845c651cb5fa2db2548b83df475b81c31da8d44414b96fee00bf1a25476f5cee0a2472fe9f6e2c50fe5ae0c44033f162f24983153ae59c12b63f150014c6933b9070e82f7920484f56be499287963cacd41b2c56f19ca578599ab8f6e3f9b03f57f6a94934104fce9bd808d7cb1b7ed3176a8a118c3de400818284e3c12951454f5c6c331f1f6a7ab398ac3cf1", 0xa8}, {&(0x7f00000022c0)="138469ee51b7", 0x6}], 0x8, &(0x7f0000002440)=[@rthdrdstopts={{0x1020, 0x29, 0x37, {0x3c, 0x201, '\x00', [@generic={0x35, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x2}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x21, 0x4, '\x00', [@generic={0xfe}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x2b, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0xfff9}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x27d, [0x7fffffffffffffff, 0x1, 0x4]}}, @generic={0x5, 0x4d, "80d2bba0314a1cefafab241f1acd15679ae4fead8177fceddd80294e7b3a48893061e325c0d2d981c89e3b825a717e2da74ab14095dbda423bf525444ca390f6c5803c1e7ee784dc5d6ea85dd4"}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x6, 0x622, [0xb]}}, @jumbo={0xc2, 0x4, 0x7}, @ra, @generic={0x5, 0x2c, "43005eff5c62ecef90c02efdbf5c5faeaa94a8553d982ea106f87cd721f26f562d4ac30b2a78a307d4b935e6"}]}}}, @rthdrdstopts={{0x1f8, 0x29, 0x37, {0x87, 0x3b, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra, @generic={0x0, 0xc6, "8499cc0f86b40d266d31e7d2d5931d4debdd9c98a691268ecbb0fcb21feb292d83d7d26270d05a9da9228de249a002df57322d10eff07d5ec230543e993127111920fdcd688b63848319aa1033a6eb436a0562af0105a75cf1e5af3283edca587ba6ce42d0090820372b9fabcea8fa355e92be9f1c66aef2d1e8f87ca04cd6fc4c4d39847c9a0cf186310c69a664e50ca508475e5969a5f0a276fa9c4c6f7eec0072e37fa92374689360520403164d86a9bdf6805f2e96be5b31fbe7c2ca226daf1274aa4b43"}, @hao={0xc9, 0x10, @loopback}, @generic={0x4, 0xca, "43ab6d100a06d8a6cafea1d63eff87a41ebef91013092c7925db73c772299177ff393969de0d55c9a9ea2405a5a6e89e2e459b42ed4afd758681bb1ac11a97ee7fa05201e2bbff1bae1e205f4734f504a082d0b3de3c8c5f81e676c7bbf093b8fc1c3436652b0d55412829eedb7e6aba106f539d799a36220e9ce183e761a83c84bf607ba7771c4d379af97a203ac304b27e22f61bfa569f53c04f1e7fea85b3f3feecf2a772d2120f1773ac29b003ca35d155566d07f056d87d781d684f005c2c97225791054e56ac22"}, @padn, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0xf, [0x885, 0x6]}}]}}}], 0x1350}}, {{&(0x7f00000038c0)={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000005c00)=[{&(0x7f0000003900)="c78c784423898d50cbb72d2b8158523ab46442f0d0bac36b3fa015eea42da18924b5e9ce816d3b64acab0aed5d974c7efdb5edd14bbf49acde7dbef5de8aadf6c069e27f4284db59086936111dde7b0847add96c00c68a28833424b3fa0989de3456211b2464d93f047f8258d56ec01e8c70015c8542", 0x76}, {&(0x7f0000003a00)="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", 0xff8}, {&(0x7f0000004a00)="aad5378ed9a8ecaeff626829978f06eb886000d44886a9fd26fd4e9f96dc838d47ba68164bf7d62216b6f2e1ca07b7b03b3eea3b371091a89650af9f829c095a0a579564452a9cc605c82c94b1daf2feddbe1c43808c777f030d183c", 0x5c}, {&(0x7f0000004b00)="fa1d21c3e23ce91f516e7f21cd60e7f475ac49df7e96894b88e51711a8738d74e1a774505a8f172db4c2752a46aea0fd2f1004e8773e845ed83c185c06546100c8a0992da17676c169036465d51cff0459790385f6e5f40db5413c96", 0x5c}, {&(0x7f0000004b80)="7362a9c72ad9380ea09a408af83a24b3f628f865d908d815f2d2db39ab6bdb584055701a50e48c0fa0a08203555378dd5b6fd6e8c69e4e629d3134c61c5ab4c3e999205b72bf52b74c8c067cfa003956ff8a47663b01b84a526230690e15f0441eae4191b2c982c3b48c3a9d0f400f005d9ec602d9089af2636741625492da9233441846aa8fd69c84a5858ba0474ee5c300ff127c6c1652775a64eabfad16320f292633fa44f87a695b10c92fa01e4ae06d70da0e104d5ff15e75e45f5e75039201cd340cae5de1efd540af32d800a3724c0a9cbbfacb4e4e8bf559bef1d414e2dff234c24118b973bf3d408db7c77fc0a6a175697bf713878339c1ac8b2dfa6ba8a29b1b1c0f566a10e5247c6d5e03213e119712797e1d1ebcda3b6e40d3e4012e0ce03ebd8190485fea3b6543e39fb756201aef877365b78c4e8266bd7c106d615b5e49c67297e9462f5bc36bfa4a9f6c266716dbd69dae22af1c32ede2035eb63a83a5253df05be30bc6b9bdb472e128094be8472ec8ee515240663cd5c1da4f9ca3c0f64c1b7edae645706cced315872d7bfd83296027d174bf30106c9e54acc51f0bd22100b94e86d777c7a626598d7c99abe306665289c6673b180646d8f864670dac7d5a016ce06007c2723a41967d896c1b38e712d72a90e610996f0e64021782e32296d032a186d7040595c318c97c5843db99df261e0f88b3f62379dec86458a6651665f5035b8f0c73217017f28219b2a55bdf5028f7ccf0fad3e4c9b362f2a190abd2e13105821de1d1141133f4577c41e06884774642b9a5e36858ef4ebb65fe34cfbbf0b35883bd816ae664e0552eba804c2a83c58f18c16dad493451404eea7637eeada75657a1d92c571c148c7d3b2fc2361db6329415f4c8514259307556ce687155a893df1a3031b03762410f58e94cb3a103a0242fb76c35e3a03a4f3a75ed2d4d6ec06a676c289c120021c41c7362e9b794ec670cc4d59a1e2e632da6bbf38c27d6a84b1864e49efa3d6fa79ee0c142ce34f2e254a67e59dc271843b8bd8d9763cad834f65c700d767e84983699f0341c6134ee3615bfea4cc4c051be44f4f0f04eafa6fdd791e9b9d674a5065774dbd962b9051005233d4cff307793953020ff5bcfcd936d20ef656e5dbdf0de37c73af0f65632c3b00746f6366f36b5a0a6c505fe0938668a09cd59c9b37985b8097c9d3f857d292a0d8280fd64852590324f0033ed1be3acbfe146cabf6c0933122a1ce72a3ba20839375ad10e0d838ead7282fa1534cc4be96b31e1a3db0e5bb7f3bc6510f087918c0e8129b4a641307b0e656e9a6fcf24939cf97c10ece8989c4a805ca36dc5236320b7265eb478576db07152a0daedecdee6077592f5940d45cc8e127e0cf3b38142ba34bcc31dbba8883fa0c0b5692eacd4daab41a3df8e015793db45d24a08362c8250a598efe8760b9428da1590a23b83f7a7c7b810cebb582b67b6edd6cff550c682f1ff07c3553be0252b40519ba1c7b91b695fa66c5bb0e56b683da1d12206e8527f54c010d84e12f5fcecf6db7a839f3a110816dbbeb54db8f42db244526e25ff2fc9de7abb640caab2a7ee411d8f9c32a3bf6575b8291bf02dc000ac5f21d3e85a6b3eea6517ad39c9fb50b33b2d8fd713ef760806f3b53c9ff99c253a372797e0d7aac94b6b4b3f23925a6ef66c63b0e434f36cb4419e7e30081c1858e5dd48668624d74543a1d7fd7c9a1c4077ad35628d77af7424e3056795a23e2e38177ccc605e0562ee606e2cae3da3ebe484ca8ca50fd05cac2864d078229f124c0e29e5b7910ddc7018fd42b2fbe71b374d476d19fbd9a00bf8fb349fea2bc06ae6254e82ab9df5920176801ad175c933c06e20d2c04a92892ec279d2beaa78c8dffcd326ec3ecf25891a61c4adaf48a08a80881944f42d3982002c11abe0283f44f0f856fd06cb0d65f4b6ccbe9bfd28e2ca05863eb9531e1d12bab8cb2b8d1dc013c638f0857513f8e9839ae1ef12cd7f91d839a20525550e036c8cab58fa3263fe0dc88f1dcd0bf1be740683a6f29301da106590b346e8abd0bd4cbc67f07769c83609c425bbb4748b9913b4dcf99fb09db46fb93601612bcb13a085d3549a49bc43e51c2422f61ef83934e18caa601aba57dabc15f91f54715eb440cab26c0d3871cdd68adfc21bc2d39f9db53b0bc91e16cd4f2d585cccbc6b08d55e08d35dacfce570698a115d99d5218cc911c7e0781be290f16a84a57f8373ce52b784677c313e8d69d2d12aee78e3006b7f527321a0b3b5ee966301cfedaccde3dccbf030197802bb00c1625c15bcb3e7631fe60ba90924b95ef6741ce18c9bb4ebc4aad4ca0d4994f5344349520b546cf247382a726ca54b365b7f6026256c03f5fa20ffe5984a7b53374a0af0626826db996c750723a44ed21bc3e6ec264bd514189331a4efe04b1852935d78ab8ddaf78caa0c889b7e7d4ed7a4a24c9abf13fecc880a08f25a1e4eae9bf4c66353c101e3725dabbaee2218d732bef2d6591bc3d2f7fa9202a30781445e7703b9223736161df16c643a8acc7d404bcaf0b8f59a19542fa53aa59570f933ca39062515d6b508bf397395e58d6d16c52f7860ba022944add979e8f3dfcaf2d12ec116b9373b4ef422410eea15fa35fa679a8313b88d7c59d931c0915eae614481e894e81a2a125e491551a2c7f8bd96fc00e774524a44348e54a71a4b5f6df437b30164e8ac33cba68b57dc1d23f7bd1c11b6cd35d2440b515fab7471bf75e125d4d4b5a3807ba8192a8d77b5d537761c9c4290651f8964cb052a6f5b380f79b2aac249fef7e399b7e3a9346935654d1643d71bf7b8a070447820f49147c0283d2d89d1e17d5d6044abf87f745db2078172bb4df365e180253bd7bb2d0995a7c4757d4cafc5ac086022b6e9f02c151cc3bf2112aea0df54fb3189f53f4009d95e7fccb2954ab6089f5f71a6f69cc4466abeda79b01f714ca55698b7dcab6650f910040a1b1ce39b87968fe212333b50856e8bc9264473bfc2f8cbeeac30bd0899044fbe1f81ac9227295e19ed2b6bcc4c56479cbc78d60e44ba7edbb3249192b888caf93b33c360171e45119ef0def0670506b8e85028650934f42aad47126fa11d7c351fa9f4e4bf064d41d8738e628ef3b7b08094b095201be58e3917324d33cf83a6b04b2b326ef0be8866d054f1064d5fae0da9ccada601779f68ac7fb7596aafc9622fe312dde9c4564f11a8e74ea9317fcc017c43f98e264bb7bf68a36aea9897e75fdae9a3ca89a9d7f1ef81ce104b916542f651f8406ece3c848a8ec75099199f58ad67ef79afd8cce3e256731e92ca7f1d55bffbfa7dc05591908baabe7fdb5c227c1d069378b08e0e6a5827532cc8dd1317769e2b9d102771ab3f09a8a6c1df4436e023fc83986cec7c88f951faead873b151cdccbecf1221f5a4d3726c1d51c5381082d9a00b49c9e9c10b1943cc227fe09dd9001125dc90c20cb27ebf3df337444aa6181e0925e3417a09243035c39c02cd168098acf039b70f4b22dcd2da93f2faaa72bdad86f6ae2f4d1b44d6f1f580b987150a0ae8d3c48ca407b1475a41757238fede95c2606a9bc80f37e59ca63b3472885e3616c4f2cebb225fd4ff47a9966d8706dc21ef36843fac7bfdb770c4a6eecd39e5e2e66ba22c90594a8948dbae34a175d704a1d1a0d19e6c91d13fc9f2e0106e411f8d0c2084fdf07448dd7e9a6af37af21d089912fd660c72403ea2a258dd4fa6ba24b62fcea4a0db8e891b779854158e3c3c8d6efe2bba5562be983112adf1c2d876c5da07c5038f358f7b51b13f73b46bd7676062adeb1d3cc311de661b917cb7af1ae3d110245ee9061b683369e2245818e1487b3d48e58267f606437207ca3ae2ecdb7e58e34fb66f2f29f6759985d75b06046692bf984bb0a237b5294e70d1188967b717157f09b55598d8cd26a9fbc6c42c91aac09a9782a67ea72c288bdcd5cf0bb84544578e908bfa3bbfca37a9a52781c173d2df69b0dccab153153ff3543c6954c3532b49e2a33296ad56a0b536d771f08c3e66f355f582b0ac40de8483592a0a8168cec0b551a6dca467bd52c7745ac9b57cbc75c5207828913f31b186ac03fd95fdf3d21b28466de1872698aaa6843f1a36051e84db13b806225112c6ca54bf984459ad0f2687abc285bea6bbcc39f99a9082ad8b4f774b2effc846fc62121fe289483fb9e01871dfcc1f8b22084136fdd90171007db993d17909950457ebf022ff282ab8481a02c60a73b6b66be52d7943bbc267c1fdf5b445aba6cd00da76d3af105d83c024105535973abbda9580fbe438ffea522f99eaf20339bed377ab50e7b4d1dccd4c97c5364d6f1e4fd82fe97a07f3905ea17ad36bba7160b573a49d45ad735cab873d6e009c36a2838a85989a4521c99c2b47a1b83e7479c27c79a1d399a769c82e808e41033eee1f223942660574fce9c32f3bdb7d824595307d298a7c031f5b8dff2e6e6121e80bebb07892b56496c21714a6c7690d034cd3159864bf4dfa3210b52dde26f3e4679cf32b2a1598770106981903a54cb3db5037e90ed95f2b25b96ac5211dd1e00f5f782b55ca86e25c38f6c18686444151d6e6d6d9678b8d78150da860b64622725616ab7761e7c2ea5ac8f489e3e97c9172ab3009784b3eb8723c6869b0820e2d628761f0ecd46f612740a1d2ed47559eaba5a45ace3f1b5286987c0e4b1b1b064fb4f3366a1bc8e211be9e8f712f5bface311238317723ba54171459421677641b056336915e159361b08bdfd2b5bf093ba29a18a3fa766274f86e4ab40538a654263a3c6b1c4ee76f5aa81a1ed90dfad8677e99f595fff72583f9728423a9c656a35009f32de0ea0ce0156e62b55e515faf04a4db9708c859c56a477ca0e5753c5f54ff5815437ce3bcf60b63aa4c0e721e5cf9ebcbea1dddabffd6556cc10da506b4a5849e80a44e4ba9f7d3a37de40cf4761f27e5ae29c91a7de81e30eac690f01cdbf7eb66a1301c30fa737d117632ef5a0525710d49951c4eb32f9eb6b68a0c3cb3b6049ab504a13c31b0ade4214c4510a930a6b487d3060cc15d0f4f96d5a87ea6cccebcd5e5581286a34f7207f771b41b602264e3e5d8c91246289b40274774cefb983920b0095cbf00101652daeeb47494151f3aa4b7e5231a8d8f548a3686d2188d4da5fb5eea718472d9b051a50eee0e47e99a7f3491f5893c28e529c1e2868d86f3a172f9efb4e3e5d81c6af4e9fd7c4fd967277be0b2a40439e8d7f84949c5a5333310fa7da9bbf66361efde32eda7c1dd71fd71fdfa4952c96e48b484616ee7b5ae4c18867d599a02f18bce9030a9a3fa0da47db90a18bbaf699484872b83bda8c63e70e1e7f5227dbddc2955dc29f11e76575efb56ed57e5ae6a5e19709e9c7214e2af20f3ffe27a06ed741b1513e2295420c9c3590390bc4399789ada301202ed7d958c93069f60267dac81e5315947d1e38eb8c9ccc6c2c91da3e91603230dbeabd961acfbc2b90dec5850ed193951ab5c19730d420e3d79d93cdea1480377467a4589d26b6f2c3af92f90541134e0d33e776d368da079286445dc780ad62afb591ec40325e436f7173bfa13fdb04048b8865232cb5b4af422cd2b7a5c91e23a17b35bb267630e748b7111ed443c08a82c7f4531aef49cb7882a1b9e0af5a94ccca58b1bd3574ca2d6c74e7af66ddfda32468b0ba002615894dbd7835e898e07edb9eb1bc0760d0e18992962c38c86018ba8b75e88da98ba1c3029ae", 0x1000}, {&(0x7f0000005b80)="01324d695e013a6657ccc658043b89b950bfe186755fc0f01f0da11a9fb49386779fcac096fd8075c8381097c1c0df3ccc08fa7daac4f165f117998879d197fb78ee13882b47de3cf4b878a80e87106da2dbf98c914bb278441a280c07f2b3ef554d984a23bb26308abfeae60e47", 0x6e}], 0x6, &(0x7f0000005c80)=[@rthdrdstopts={{0x98, 0x29, 0x37, {0x2b, 0xf, '\x00', [@pad1, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x18, {0x0, 0x4, 0xff, 0x9, [0x7, 0x7]}}, @calipso={0x7, 0x48, {0x1, 0x10, 0xd3, 0x2, [0x8, 0x9, 0x144, 0x3, 0x5, 0x7, 0x0, 0x8]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x80, 0x5, [0x5fed]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0xb0}}, {{&(0x7f0000005d80)={0xa, 0x4e24, 0x9, @empty, 0x1}, 0x1c, &(0x7f0000005f80)=[{&(0x7f0000005dc0)="b0caa9af0b5127c6ebf0370669465edf1061b27cee9dd2c343afa12af459d5d951ace9094dbf3c1b7f69a57a3ceae273cd41af411b6d76b16bef0d52d6e96a76822c8ca752d1e946aafa244f52fbec8c74c5b966b9363e1fe91b070f1f10f24db4776aca0259c5162149ea07e0d91b0e86", 0x71}, {&(0x7f0000005e80)="67565e5b65207b744d7d691db00933390f23ff0fefea474561c0f98ff354b15dcc4b8c4133c7d82653c5ca3b6d419a79f735e4b672", 0x35}, {&(0x7f0000005ec0)="184f272b109fec16413a0067f2a3c4b2b3ee28c6191caa11fe4c1b0afd6c7f7659cb1e34cbcb6a4cf452ffe272ba4657c621304dd2b68ee4e07595505ebb02a27722ffa7056a3023f4486a4e65fbcb72441b681ed9f1", 0x56}, {&(0x7f0000005f40)="486bb1e983596daad524cf644be430d8714c4d65e4c607d3d6f2b37093a7dae0a7f0ce2940a3da991a86f55e16f2025d84dfffeb33f8", 0x36}], 0x4}}], 0x8, 0x24000000)
getpid()
socket$inet_sctp(0x2, 0x1, 0x84)
pipe2$9p(&(0x7f0000000300), 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r7=>r6}, './file0\x00'})
ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000040))
r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
sendmsg$key(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020907000000fddbdf2502000100000004d37f03d0020000004002000a000e0000000100ffffffffffff02001000000004d6000004d300000000050019000000000002004e2064010102000000000000000002004e21ac14140d0000000000000000"], 0x68}}, 0x1)
fsmount(r8, 0x0, 0xc)

8.908360267s ago: executing program 1 (id=1293):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x4000)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r4])
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000c223bdeea9e17b000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0x48cb)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r10, 0x5608, 0x3)
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x28, 0x5, 0x0)
connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

8.80714954s ago: executing program 3 (id=1294):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4", 0x3a}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="beaa38543627a7a662afe0d83fc3e43f", 0x10}], 0x1}, 0x20048050)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000002540)=ANY=[@ANYBLOB="180000000000000017010000040000000500000000000000180000000000000017010000030000000000000000000000f0000000000000001701000002000000d7000000fb71f9d100000000137afc5615051a877d79890775d206e49bf72d092030572026a6eafc4923aa9f8fdd5a842527149928128bb1e7a0b1184aa4401a858701f81c5bb86b1c08bc22ddb3e5e7baaa22e8c72ab09b52f603b41d1bb9632e2ddccaa3379be8b025e9a352423d8df61d1d0973c3dcf6cceb26246b1f3f67bf786e6c832d384d9745a8179ab5480f64a39739cbea16906a805bbcfc3fb99ca4d38d7c42301a4a8f6328c8e2ade40c000000d2f8eab61a5faf0547c2f76f8747346733c333ca4f77262415190f33f7acdff3f15fe869bfb7c605000000000018100000000000001701000002000000001000003df011f5dfdd64961200284b444e25bc44cd92d6ba48da4a3bb5c584f8407b56f5589cf552299d90ec467098e894e7b48c58fe885691e20356bdc4b76827ebeaa97557e04200260f22f1ea68dd7fe9750e2a520d649be88bc403de7ee93c095002a10dedea75fc636a596ae34e099a86ef2cc538aa5f58edc807b9135cb856792230707e29b4eeed13ab704d6b470bf5efaf1e6a9a5c48864977bdaf0c03997986768234848653c85c8fb6d334699b8e2df7319b8796d7f44d1217ee6e9a62351103fe4a1bdaaf1da3b1cb9a803c0d6a5adc759ba1e0500c09c8f2d1d14c6ee1384725938f81588e5df0a3f05ddc0fcfc8cea4ae5d29322248d96b9358d536eba5ac67e39b7cf27f5996e85e9afe7b946ac49dd9a012be1d9b083d624defe590bd256b3fa6a2bd7476dc4d4836372a433c723c040c4ab04e7263763ca80cca7ee625cd9683b2e27f3c158a14de6024ebcccf78e8685d6f7a6a08fcf828c65606fb333bdd53ec1b47aeb6126b024c25eb8252f4b0683451116d747e374819364019289fe50fa5d051bf9df74401703352cf38368b06a62d78f4887e7731073f39ff0fe0768bc1023383929a684e9be1f4fdac9d97cead98de7a443067ec7f0edba9b37f3293a4f2905f6a1bd3114b4d481dcbad2033e30560b9f6a7cf4e9e57c7cd890952652880ecf4baeedb75248eac6f2f64439c034435852adcca14c8fc4e378846131be1576b70df1f13aaf38a7ffb0a50fe1c67660810c317441b963d34300e972a56e243d9682a6c662b2f9dc9ecb7b697129e8d738fd68c538ff82f9acb83a7a438cf7d7b9dea899a52c21cfd759305c088e39a4c3ef4db8fcc8d6161dcdec458c5cdf4827b935340464d839ad38d09f5252e3656fd733b0aac7da31a431e4747d905c43e57dd0c67cc2fcdc29917b1f576f2a8260f8355606bec5addc82718798b2db64f6adff05bf71b7c4d64521c4412734dc636621184a458ece3950b99880ccb100237e5277e708606fd086feb2991eb91ba98197e778c67c570788e4ad7d421d0180b2a4412165a934777ecf4a3aeadafc964b269fadf0e9d1522f164e9c9efcca1c43bfd1033b05629466823ceaaf3d5a57e87cd8dae0d299b83f9556cd9cc840ab9dc5e978028009810a6a9390aa7ee4da25afc3eb29a10d611114a46196a2dea6432c6e92f9fc8f7686f3205ce6bf2c555087de26f89adc2aadd76a13d7b62f3e22753758e4821cb2679b7656b83eb8f8ab8f6a1302bde40c03fcdaf98e2a2ac324abb7141d6c0df8d802354918a5437a1cd1ab57397aeb4e866ae34a75971e53c999834c090d727ac410f81d6fba7205866d719214d2177819f2f70302dbbfb7d48cd13d1ca436e3589bb02bc5edc7e77b51c7098a6c71f26a754fbce623c50588f5d7fe7c0ba95a8ae1a507e019ac4a189a176195594935657627f65b0e0335cff1ab896c0039bc1bf89329762ce46e5f5a2e990428c00dcc59bb7729c83350f995bded9fc5546673019884fdf2c3e0161abac35d8efce2119f80f628a93e3079035716241467f057655e7495da0b21440fcdab22beeff7faf834ee626d662a5741c28d5f908a8ccfadc9308a38373b7fa6b6e0ccb7c51dabea40d47af5d53b9f61f21d0cdf5caf876d7e04e25563283bf9e4b6970718b6334255b240e06f2212b686d778f942348ee27371742a5b0d9182965c122f2b4057199d44fca7d23b4aba71d66a4e8f5058b95549e6783b86eb853799074e4878c7dd19508819c345b831de9a066696136d79ccbee77894cd4aeefc96b419d82bcc027a67e345104a492e5989196a3f8e5739b74f3b27717956d83bf1182a498a75b4796fda865052b0d741370963f946fc8ef2ca304571b4f8d10e8469f6cced5b108eeaa1ff838684673c107c91f66ba15bda6bd1254f795718b158000566871695f1ed715ff65ed1251308b09553568a27e2e41bccb54ea7202ca36fe958ca22266b65f8dae3d4f1592eb970d648cf784f8aeb436fcffaeb634d2bce0a306dc43bcf04b7c10ba6549a9cdea3167d9fb9539f3c616d45bfa9f0dd7f624513e00be8f64b27a3688d72d8eb7ade2ee192dbdd605583a5a08dcaa4cd74945e5a935d33b2d374114b6022a29945051537108b0d162205cb93e01753890804e1b52c7e40c44245f5cc5e56ce2b05943694ac3cb42fea12655a96b7bab07e6b30e249714e3cca2aeadf55f6381548955f0d922635d04f4da26dcbb487e0cba38b5653bc3c4be8ee055b0abac0df8a80034147cef0286ef44e499c10abc8d179b5c76bd1d9522579e45b0f6b02a21d5839c1827fa9cf781a55ce55a90fce172170931fb035af0cac4f2dbee4651dbc68b45fdbdbcabb6958ccbaf9ffbc2c7c487db85a6f0935a39481a0490e32897130260a97c312a064eeb2e24fb62245bf9d931e6897fe320199d7979cf17c7e3d1ffcd1e39dd52980836eeed82429b9a832934c9d7d1ca1eb4b58e14fefbcc1da43e0fdd1f0cb389538d739775a0759305c2ddb6a62d0cf571264eda696ae2af2014726341ee1b2487c91036dd0ed1a4d34cf86ebc5da091c91e490955129812abcfa914af2d69823325661cadb2dd11c86edc7d56f3f86586900e815fd8311e732499ec3dd88eb235172c295e9b76793a4682f1d5a49581bb4149882ba7a34e24ba9341e9599288d4cfb5da1e7a6f3ba3791b43736f919a9fe6ab87f3cea36c78b2ab79faea2ffdf522e04169ff2e977b335a1baec5aa56d68dc434f512bdc991e4ed969a6497506d8e40b0761bf9a8986a6ad213dc50021c4d501b374c92af654e0e998907ad25dce5f264ecd1e2fee2678b7041a093b225b6733d03142e33a7e7b62c4dcf807f55b1b53cca33ce88fe4845ec20dcfdfe056348d8e01e6e60c56d9bd84cdf20d20c468149797642d9d472537321d153cd9ebd51e7636bc57e86c165252b9362f8cc232725b3a2e9e2579178dee7ea5aa0c347db6946d7472e621ce0e42d285619c23fce10f79869b16c8e7660d1491db31192dd1195414bcfbda39046bc17a337a711eab404d7ae890232df2b56cd25343782c5153e9fcef99094533ea6d0748574c5c266cf71db5ea42e18e73cbea8bedd4ad28cee76f7d697af47d60ab14c999aba27863eb2a0d464ee5aabb32f86efeeb23e3660a03ccf2c348292cdafd3d1a87833aaac332e05c66e80099c586677eacfc0e1aa3eada98a2864482ced56283ef1661338c5dcf3ba836c5d1ce02ab9c86fb54520f2cbe18a5ef1c11e4be34be93488433a057a6739f653255730003a7086bf5061415a13d8a2908d5074695b038caad42aff0648a8bb8a3cf7f6b116ae5a37252080bf8d20666e98eb9a74ae2e37de510abb6b4cf03fd38611391ec83f111a387ada4789c6def1b84fec6da47c22c9ba1f66e51f1bb5114da35ca86d56f01a3fc69de95a59ab468f58bf50585a9d9e72c81bb197676d12aa319f36fa168246223f008f4e823d1a55c0cb70ded60974312764ef311d1aa01c7ba03208dae343532de101c58ff730440545b85bbea38d5db1d0dce0494878f5025e4a72b85300267950a0a6b872e77af4cce1ed9aca1129e0d8d528dce443130ed6432db602255c26f58e6ed7a81907c1b3309747081f2b61199b634cf530049e6e4e00993a50bf8fcdb4dfb64890dd2c0555dc1f62eaac2243403c7b6412d22de3268f1177caade85933ae2f5ee7d80c777607c564960259ef08bdd666538f74e8987a117610bf6f781b30ba8c181f66320c2a0ec15a93afbcb31cfb1a511389a2ba0c61ce092c26e5e56ce180db3de0055575917d15cee2af7f40ebd1892e7ab36014a03606e44a0f4913b347513fd287b8f839e5933ebaa8b1fbdcf99eeb9edd7f8270b31a09727334add5ae605d341fd8da19c597482adb6b03f76e2386112a7aefdd83b8cbfd7fc96c759c861ec676e4be387bb9cf9754ae44d4d05a24399c8bbe386c5700a0d8af6dd824bb4ec55a70dde8de88640ec6caf25c3154cc3748a21f4a863f80cc9de8c898ce88fdb47240f678cce4fcf3bdd37b4e36522dc1247c3face04494eacfedca64e0ac3ebf840b6580788a0373c54ced319cbc03b837313e777daab7f525d1931cc82771db583482ae99b94bc4e9e055270eb17050666c7db1ce12bcd509d08bbe8ca7a287f2fdbe990ca2342c2d2e8d276cbdd233921b04cfc9a3364ea13da0a7596975c8ef618f4b7f87119fb55c395387cd6379f14ff809531d0d18023178daceb1eed80c82fba4396e3a7058925062e6fb03badd8c2eca33055de51436c4ae3efe7b466183d48d7cf680e6ae1630d98747b8befc71fa417e9df8d026a23082ef251af0aa7b61c7ac9d7e65900acd88794136eff8624bc12b31b646108b59ea8c755912f0a461c2d7e4f050a87e321110c48b5cfee4f94979f35e4c93648bed36b147f9a212170abd0a246dbff8c9aea8f3bb1402b1c267a6d4b0f9013323964aa47db6e9cf794696a90bd191881d894ccdc6e02958cdbcfe59491979c8969eb7ebdd75a6438ce09b7a350015454bf0d05ed585ae820f3663ba8b8d5fdb5eec0e44ca4aaa99e36866cbfc25575e1306fae9de5d616972055c3ef789bbe616c56ca63395861c5eba64e7ccc9cb1e2c922ce13a909319e3caae66952056c473d13d24db0910521dabe002e70d64542196386c782fa776230b9460419030c2ca782bc71a4076f4abe0d4bc58a182227e2a20dbc4f86f2ceb15e2b60ff2993ddf7be9d67556c7d27b1059735c92b11383c80d1387838ddf82e57ba3e16f1915f3cf982f8a0140bd1c7403488ab2fad7395c485aeae485604b8362beaafc1d2dd0ed6af6b81585e099a0f00ae377c3f48f55ea16dbc658081900851675a8ba5921ec114a8138201fd09aa1fb4c07ecf416cdf1e4ad02f2e6ef6d24306404ede0aa2c9c0f1e5a91130287c1672d51da4d0cfaa812fc017be81060121ec021f7ea7adc2e6bc43691e3180cbfa703e06a100e2476dcf7990203cd2ccc20bdd59a57ddb939ce692d8e51b2f06de393c24ee3ece08e0f586d241422e64e1750884a05fc7bffad35679036c1a392a5fff7ed691651458f400b906ffefefde2d45ad2fafd4ddc0eb3d17a6bd125831c276884ea9fc676ed9152e2f59daf15b65970c876c2c2c6895ae907616cfedbfc8a8f864aef7a1650ed87723bff9b11fb18b1542b5a2882624b945fe728f720e0233a06eab54a2ea1e5b078d0a1c5d2a751f3031ddf1cca4329cb6ab9cbf1e475671e27ec6a31b09da7801d1969498dff47df6b78e24d7e38de4f1409f1ad77489e24fdb78f521f5823210c537ba95c72602f84fde3569e25c8e5d1f52ea70a1eef51aa1473c7a9f44bed8e5fa0176508c07ca901afc51054529ddd8fe369a60120d31be647ad180e5418b09e8816abf970f29daccffa24585a0206087d88b24b3da7e75d0bf664de0b96d1033c1ee1892ebbde032f82f87925c627ee2a62e6caaca079ff8c2a2e169f46ea5e35808c193c7d2cf8bbdcea51f6a1a500a17db1fcc3bec5e90cfb2f3fb8025f2b6d005e1d8dba5151c21a413091637c1d1bd458699c9ad4d3567a03475bbbc14bfc0aae30d3bd78e5659f20a4f7ad83f4e0fa392e39020686e6ed3052c7b6abec9e4695c5e581331abb03603b9ee73d3a8d6c9218b242b7a4d52aa7691c64b05f8d536b2245bb51cda5f949d86da801a5f46cb43fe924231453cd6d7aeb21eeebf5b4be7fc6a9abcb0085122a2d6c0d5ff94212b20fad71c0cea0aabd56000000001800000000000000170100000300000001000000000000001800000000000000170100000300000001000000000000004000000000000000170100000200000028000000caf51af783a4a046f756b8c5f998442e989c4fa2631fdb8a6018d84aec42bf1bb6c7e6ef9402850e000000001800000000000000170100000300"/4544], 0x11c0}], 0x1, 0x40800)
r3 = eventfd2(0x8, 0x1)
r4 = epoll_create(0x400003)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x80000002})
write$eventfd(r3, &(0x7f0000000040)=0x9, 0x8)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', &(0x7f0000000580)=@ethtool_ringparam={0x10, 0x2, 0x2, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4}})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002"], 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9)
sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="410000001a22d9f6ce52d3c9d8aea74a6d23a5ff8a63c998ff558595723a8890add6c80dd05e1d6629c2ff5f150e1c1c32b020d296797036bb890020702c28a6d3f8c2e56987acc7aa33e1b804f53d3901ab976b00e19eadcfe7749a2ba19782b13fe9c8e57de46817f787b1e2762fcc9e39bfcc5026f8fd00e2260390881a81535be50a0dc0e8d61d85", @ANYRES16=r10, @ANYBLOB="010029bd7000ffdbdf252100000009001f007068793200000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080)
r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r11, 0x0, 0x0)

8.471780084s ago: executing program 2 (id=1295):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x9624, 0x3180, 0x7ffe, 0x195}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000000300)=""/240, 0xf0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="260f01c32e36260f212366b9090b000066b87a0a000066ba000000000f30b823018ee8ba610066ed0f01c2660f38810f2e0f656c7ff2e3090fa5800500", 0xffffffffffffff96}], 0x1, 0xf, 0x0, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000040)={{@any, 0xf}, 0x0, 0x1, 0x9})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f0000000140)={&(0x7f0000000780)=[0x447, 0x89b1, 0x9, 0x5, 0x7, 0x7, 0x5, 0x4, 0x990, 0x1000, 0x3, 0x8000, 0x7, 0x1, 0x0, 0x1, 0x46f4, 0x5, 0x5, 0x4, 0x5, 0x4b, 0x1, 0x1, 0xa6ff, 0xffffffff, 0x1ff, 0xcdf9, 0x9, 0x7, 0x2, 0x3, 0x1, 0x1, 0x3, 0x1000, 0xfffffffc, 0x7, 0xc96, 0xb92, 0x3, 0x9, 0x9, 0x5, 0x9, 0x2, 0x9, 0x9, 0x2, 0xcab, 0x7, 0xfffff111, 0x7, 0x9, 0x3ff, 0x2, 0x8001, 0x7, 0x8, 0x7, 0xb32, 0x3, 0x5, 0x0, 0x58b7, 0x2, 0x5, 0xe4, 0x5, 0x10000, 0x8, 0xfffffffc, 0x6, 0xbc4, 0x9, 0x2, 0x8000, 0x101, 0x8, 0xb714, 0x6, 0x8, 0x101, 0x92a, 0x4, 0x0, 0xfff, 0x32b, 0x3, 0x9, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x8, 0x5, 0x4, 0x3, 0x7, 0x401, 0x4, 0x6, 0x8, 0x4, 0x38, 0x0, 0x4, 0xac0, 0xd3, 0xff, 0x0, 0xfff, 0x0, 0x2, 0x4f, 0x3, 0x3, 0x1, 0xffffffff, 0x6, 0x4, 0x755, 0x3, 0x40, 0x65f5, 0xfffff801, 0x4, 0x0, 0x3, 0x8, 0xd86, 0xffffffff, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x3, 0x8, 0x8, 0x8, 0x3d, 0x8, 0xf, 0x6, 0x7, 0xa1, 0x5, 0x5ef5, 0x5f0, 0x7, 0x6, 0x0, 0xe, 0x63, 0x0, 0x1, 0xa7, 0x3, 0x40, 0x2, 0x3, 0x1, 0xffff0001, 0x40800000, 0x95, 0x8000, 0x0, 0x4c0, 0x5, 0xdfd, 0x4, 0x5, 0x9, 0x51eb, 0x9, 0x7, 0x1e38, 0x8, 0xffff047c, 0xd, 0x0, 0x2, 0x7b, 0x6, 0xffff, 0x5, 0xfffffffe, 0x2, 0x9, 0x3d, 0x4, 0x8, 0xd, 0x7fffffff, 0x4, 0xffff, 0x22, 0x6, 0x8001, 0x6, 0x5, 0x0, 0x7, 0x400, 0x6, 0x5, 0x401, 0x8, 0x9, 0x7, 0x7, 0x9, 0x1, 0x9350, 0x66, 0x9, 0x4c3, 0x1, 0x2, 0x6, 0x5, 0x5, 0x0, 0x5, 0xffffffff, 0x174, 0x8e, 0x9, 0x9, 0x9fe3, 0xbc99, 0xcd3, 0xd700, 0x401, 0x7, 0x4, 0x9, 0xa, 0x101, 0x800, 0xfffffffc, 0x4f49, 0x2, 0x1, 0x6, 0x1, 0xb, 0x4, 0x5, 0x1000, 0x7, 0x400, 0x6, 0x100, 0x3ff, 0x0, 0x6, 0xffffffe6, 0x3, 0x7, 0x383, 0x40, 0x9, 0x6, 0x101, 0x9, 0x7, 0xf, 0x340000, 0x8c6, 0x62, 0x0, 0x3, 0x5, 0x2, 0x9, 0x9, 0xfffffffc, 0x7fff, 0x0, 0x7, 0x5, 0xff, 0x4, 0x5, 0x2b, 0xb32d, 0xfffffdab, 0x8, 0x9, 0x80000000, 0xf, 0x0, 0x8, 0x8, 0x1, 0xe3, 0xbcf6, 0x7, 0x8b9, 0x6b6, 0x7, 0x5, 0x3, 0x6, 0x1, 0x4, 0x401, 0xa40, 0xb, 0xfffffc01, 0x9, 0x2, 0x80, 0x9, 0x5, 0x4, 0x3ff, 0x7fffffff, 0x4, 0x6, 0x9, 0xc58, 0xc, 0x3, 0x10000, 0x4, 0x2, 0x7, 0x2, 0x6, 0xffff, 0x7, 0x5, 0xd, 0x5, 0x379, 0x6e9f, 0xe0fa, 0x1000, 0x7, 0x5, 0x0, 0x4, 0x0, 0x7, 0xffffffff, 0x4, 0x5, 0x3, 0xfffff100, 0x7, 0x80000000, 0x491, 0x3, 0xd, 0x4, 0x101, 0x1, 0x613d, 0x101, 0xd, 0x1, 0x3ff, 0x0, 0xc, 0xfffffffc, 0x4, 0x198, 0x61, 0x1, 0x5, 0x0, 0x9, 0xf911, 0xb, 0xffffffff, 0x6, 0x5, 0x8, 0x3, 0x4, 0xffffffb5, 0x91c9, 0x4, 0x1, 0x200, 0xff, 0x1, 0x7, 0x3ff, 0xcb2a, 0x8001, 0x3, 0x700000, 0x3, 0x8, 0x9, 0x7fffffff, 0x7d17, 0x400, 0x9, 0xfffffffa, 0x8, 0x9, 0x8, 0x2, 0x2, 0x5, 0x4, 0x595, 0x0, 0x9, 0x6, 0xfffffffd, 0x6, 0x5, 0x8, 0xc1d, 0x3, 0x3000, 0x7, 0xffffffff, 0x1, 0x30000000, 0xfffffff3, 0x7, 0x800, 0x10000, 0xfffffffd, 0xfffff816, 0x401, 0x7, 0x3, 0x388, 0x2, 0x7, 0xca1b, 0xf, 0x0, 0x7, 0x4, 0x8, 0x7, 0x80000000, 0x1, 0x3, 0x9, 0x9, 0x9, 0x747, 0xffffff61, 0x0, 0x8, 0x3, 0x2, 0x8, 0x1, 0xffffff11, 0x2, 0x1, 0x6, 0x9, 0x7ff, 0x2, 0x9, 0x4, 0x2, 0x8, 0x4, 0x2a8c, 0x3, 0x525d, 0x8, 0x4, 0x9, 0x2, 0xa, 0x2, 0x2, 0x15c, 0x1, 0xe34b, 0x7, 0x3, 0x150, 0x6, 0x101, 0x4, 0x0, 0x2c, 0xb, 0x4, 0x8, 0xfff, 0x56a, 0x4, 0xffffffff, 0xa4, 0x80000001, 0x8, 0x4, 0x676d, 0x81, 0x7, 0x4, 0x1, 0x3, 0x1, 0xed90, 0x0, 0x7, 0x100, 0x1, 0x4, 0xb, 0xf2, 0x0, 0x7, 0x80, 0xfffffff1, 0xfffff65b, 0x40, 0x400, 0x81, 0x5, 0x8000000, 0x3ff, 0x3ff, 0xe1, 0x7009, 0xfff, 0x0, 0xf0cf, 0xf8ab, 0x8, 0xb, 0x9, 0xfffffb54, 0x8, 0x8, 0x80000001, 0xfff, 0x7, 0x2, 0x7fffffff, 0xffffffff, 0x8, 0xfffffada, 0x40, 0x7d0, 0x5, 0x7, 0x7ff, 0x7ff, 0x5b5, 0x8, 0x1, 0x10000, 0x9, 0x3, 0x5, 0xfffffff8, 0x5, 0x3, 0x2, 0x3, 0x7, 0x5f3, 0x400, 0x1c00, 0x1, 0xfffffffb, 0x80200000, 0x9, 0x80, 0x3, 0x910, 0x8e8, 0x8, 0xf7b, 0x5, 0x79, 0x1, 0x7ff, 0x9, 0x8, 0x9, 0x401, 0x2, 0x7f, 0x2, 0x80000001, 0x1, 0x6, 0xd47, 0xca, 0x2, 0x100, 0x9, 0x0, 0x9, 0x5c1fc33e, 0x4, 0x0, 0xe, 0x8, 0x80000001, 0x2a1, 0x0, 0x106, 0xfffffff9, 0x4, 0x6, 0x3, 0x0, 0x20003200, 0x5, 0x892, 0x80000001, 0x4, 0x4, 0x40, 0xffffffff, 0x9, 0x887, 0xffffffff, 0x3, 0x1, 0x8, 0x18b348da, 0x1, 0x8, 0x9, 0x1, 0x2, 0x9, 0x5f05d22c, 0x9, 0x0, 0x2, 0x6, 0x8fe, 0x7ff, 0x7, 0x843f, 0x2, 0x7, 0xd575, 0x6, 0x8, 0x4, 0x6, 0x81, 0x7, 0x50000000, 0x6, 0x15, 0x8, 0xffd, 0x6, 0x10000, 0x3, 0x6, 0x749f4463, 0x4, 0x7c20c2c4, 0x2, 0x5, 0x4, 0xfffffffc, 0x5, 0x8, 0x2, 0x8, 0x7, 0x9, 0x8, 0x1, 0x8, 0x9, 0xfff, 0x1000, 0x8, 0x401, 0x1ecd, 0x4, 0x2, 0x3, 0x7b, 0x1, 0x4, 0x200, 0xff, 0x0, 0x3, 0x5, 0xa314, 0x3, 0x10001, 0x9, 0x3, 0x6, 0x7, 0x4, 0xbfb, 0x10000, 0x6, 0x6, 0x1ff, 0x3, 0x7, 0x0, 0x4, 0xff, 0x3, 0x80000000, 0x7, 0xff, 0xbe, 0x4, 0xfffffffe, 0xfffffffc, 0x9, 0x34, 0x3ff, 0x8, 0x5, 0x8, 0x3, 0x10000, 0x0, 0x4, 0x3, 0x9, 0x7, 0x46, 0x9, 0xffff, 0x81, 0x7, 0x2, 0x0, 0x73d, 0xd485, 0xff, 0x9, 0x97, 0x9, 0x6, 0x2, 0xdcc, 0x5e9a, 0xffff, 0x2, 0x9, 0xfffffffd, 0x7, 0xf, 0xfff, 0x4, 0x8, 0x4, 0x3cb, 0x4, 0x418, 0x10000, 0x7, 0x3, 0xa, 0x3b, 0x6, 0x47a, 0x1, 0x7fffffff, 0x7, 0x40, 0x6, 0x81, 0x7, 0x1ff, 0x8, 0x10, 0x9, 0x1, 0x9c, 0xf, 0x6, 0x101, 0x3, 0x9, 0x6, 0x8, 0x7fff, 0x4, 0x8, 0x1, 0xffff7fff, 0x1, 0x3, 0x38, 0xb2, 0x8, 0x2, 0x7, 0x2, 0x5, 0x166, 0x3, 0xe14a, 0x7, 0x4, 0x8, 0x7, 0x9, 0xffffffff, 0x6, 0x8, 0x2, 0xb6, 0x53c, 0x5, 0x5, 0xfffffff9, 0x3, 0x5, 0x8, 0x5, 0x1, 0x9, 0xffffff7f, 0x80000001, 0x5, 0x9, 0x2, 0x0, 0x9, 0x5, 0x4, 0xe4, 0x1, 0x0, 0x5, 0x0, 0xe7d7, 0x7f, 0x101, 0x10000, 0x5, 0xffffffff, 0x9, 0x8, 0xe44e, 0x2, 0x80000000, 0x4, 0x2, 0x1c0460d3, 0xfffffffe, 0x800, 0x8001, 0x1, 0x2, 0x9, 0xfffffff9, 0xa190, 0x81, 0x2, 0x8, 0x0, 0x86, 0x7, 0xb90, 0xcf, 0xf8e4, 0x0, 0xd, 0x7, 0x100, 0x8000, 0x478, 0x6, 0x1, 0xb57, 0x5, 0x7, 0x9655, 0x2, 0x0, 0xfffff5d7, 0x3, 0x9, 0x7, 0x6, 0x9, 0xe, 0x4, 0x7, 0x8000, 0x3, 0x2, 0x6, 0x6, 0xae86, 0x4, 0x7, 0x401, 0x8, 0xffffffff, 0x60b, 0x3, 0x2, 0xb, 0x1, 0x2aa, 0xffffbeff, 0x18, 0x2, 0x100, 0x7, 0xfffffffa, 0x6, 0x1, 0x4, 0x0, 0x3, 0x9, 0x401, 0x8, 0xffffffe0, 0x7fffffff, 0x0, 0x100, 0x8, 0x101, 0x10001, 0xfffffffc, 0x8, 0x7, 0x10001, 0x5a1, 0x4, 0x1, 0x4, 0x8, 0x7f, 0x3, 0x7, 0x7, 0xc8, 0xfff, 0x149, 0x0, 0x0, 0x717e17b5, 0x2, 0x5da47ea8, 0x4, 0x400, 0x6, 0x7, 0x25, 0xd, 0x788f, 0x6, 0x7f, 0x71, 0x1, 0x0, 0x6ccb, 0x6, 0x5, 0x9, 0xfffffa99, 0x1000, 0xffffffff, 0xb4, 0x9900000, 0xd, 0xfffffffb, 0x7, 0xc, 0xf55, 0x6d14e279, 0x6, 0x200005, 0x1, 0x3, 0x152358f9, 0x6, 0xf43, 0x81, 0x9da1, 0x0, 0x6, 0x7f, 0x8, 0x6, 0xa1f, 0x80000001, 0xfffffff7, 0x4, 0xf77f, 0x5, 0x3, 0xc2a, 0xffffffff, 0x6, 0x80c, 0x2, 0x13c, 0xae, 0x2, 0x3, 0xfffffff8, 0x7, 0x3, 0xffffffff, 0x7, 0x8, 0x6, 0x1b04e], 0x6, 0x400, 0x8})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

6.564252443s ago: executing program 2 (id=1297):
sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000580)}], 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000019180)={0x130003, 0x0, [0x7, 0x2, 0x8, 0x6, 0xfffffffffffffffd, 0x0, 0x3, 0x7fffffff]})
r1 = socket(0x15, 0x80005, 0x0)
getsockopt(r1, 0x200000000114, 0x5, &(0x7f0000019b00)=""/102385, &(0x7f0000000000)=0x18ff1)

6.333865338s ago: executing program 5 (id=1299):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_open_procfs(0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22})
r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x1)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc1485544, &(0x7f00000001c0)=0x4e1)

5.546921447s ago: executing program 1 (id=1300):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) (fail_nth: 2)

5.324963322s ago: executing program 3 (id=1301):
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x1, 0x200, {<r0=>0xffffffffffffffff}, {0xee01}, 0x9, 0x7})
prlimit64(r0, 0xa, &(0x7f0000000080)={0x833, 0x4}, &(0x7f00000000c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
select(0x40, &(0x7f0000000340)={0x3, 0x4cf, 0x0, 0x1, 0x0, 0x2e787ec3, 0x0, 0xce}, 0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES64=0x3], 0xb0)

5.213517636s ago: executing program 5 (id=1302):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc8081, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x57)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="180000009800", @ANYBLOB="0000000000000000b702000014000000b7030400000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000d72b1000000000009500", @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.864023538s ago: executing program 1 (id=1303):
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000040)=0x7, 0x7, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b080007484327c5c95482b39773", 0x0, 0x9, 0x720e, 0x0, 0x56, 0x0, 0x0, 0x6}, 0x50)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$igmp6(0xa, 0x3, 0x2)
pipe2$9p(&(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x80000)
creat(&(0x7f00000001c0)='./file0\x00', 0x102)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r3, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28c}, &(0x7f0000000080), &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xd762, 0x100, 0x0, 0x134, 0x0, r4}, &(0x7f00000002c0)=<r6=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r4, 0x8184c, 0x0, 0x9, 0x0, 0x0)
r7 = dup(r3)
write$uinput_user_dev(r7, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xb2e, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0x7fffffff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x1, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0xb, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000980))
get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x1, &(0x7f0000ffd000/0x3000)=nil, 0x2)

4.252226688s ago: executing program 3 (id=1304):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@local, @in=@multicast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0)

4.138533927s ago: executing program 5 (id=1305):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x8000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

4.067934522s ago: executing program 3 (id=1306):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
r3 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_SHUTDOWN)
io_uring_enter(r3, 0x2dbe, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [], {0x14}}, 0x28}}, 0x0)

3.863701432s ago: executing program 1 (id=1307):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
r1 = syz_usb_connect$uac1(0x1, 0xaf, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x1, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x4}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x6, "24f63178"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x7f, 0x4}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfffe, 0x4, 0x4, "9454"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xa, 0x2, {0x7, 0x25, 0x1, 0x0, 0x0, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7f}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x7, "41a573966e0c"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xeb0e, 0x0, 0x4, "a7ba818855"}]}, {{0x9, 0x5, 0x82, 0x9, 0x410, 0x7, 0x7, 0x6, {0x7, 0x25, 0x1, 0x81, 0x1, 0x36b}}}}}}}]}}, &(0x7f0000002840)={0x0, 0x0, 0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="050f010000000006003f00fe01003f00000b1001080100ff060400900b10010c01000d0206000003100b"], 0x5, [{0xe5, &(0x7f0000000480)=ANY=[@ANYBLOB="e503b5e90cdcd87a09e14561d86c9f12468fc64a43d7fdf1dd7670dc502a353575f778cf7470b7aae06fcee6a1d8e587559d457b722c5677a88ddf5f306cbfb716b871a0504647b614adf1cad4264be86e20b807bc424465bcf1b53dcdc4264383bc48da5b86abe012cd95b68207e3f542db33a03934fdda920bf926a239247cd025d3a17dbf8929f026da2093a25c3646f9ddb1aa11316756290dfdc0fab89607bed9bfc5d71722fefc5e6b2a482e98740ba43457eb53de91dfaeed491f7c8daccf8e52d4454eda6f34a194214e37272800d732b4a397f433347ea8523db250f9da0c686d"]}, {0xab, &(0x7f00000005c0)=@string={0xab, 0x3, "7cb3733da45e3b9e910cac72441176acb1de8ce86ae9d2ac87204ab28d67736f5788741e0325e3b2566ded848d81d7270c4d8b86c96849f7b9231b750f8e4ef7f51e40808e398bbdb4bb9b94234b3b818da6b8db44547e99ff5dbcd6dbfe1d7fe7fc4243d7181d75937801170bbc15b0670599c233ab3ef45280948cc5ecd098f9a1ae3a589d8c40f3a86988b258b1031b164f2b03434b326604d933338f1f99af7727d2e4de98123e"}}, {0x1c, &(0x7f00000006c0)=@string={0x1c, 0x3, "c0dd55db1df2b77a6bb01dd44dd6dd275ff75ed2c65db12de021"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000002800)=@lang_id={0x4, 0x3, 0x413}}]})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000002a80)={0x20, 0x11, 0x70, "d4798fde9f2c0c23aac47466f547af4877d53e57e9fa91403a0000000086d72507cff31c9687c000fff8ff040446d59c10711cf51bd503b2cb686c299152abab4d94b44a40cf1369d06ac61323544d10d695ec74ad712f151b9d79b683fb938ba2de4fc49b8200000000eec39f725eee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x42002, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
epoll_create(0x7)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x6, 0x4, {}, {}, 0x9, 0x3})
read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020)

3.681240932s ago: executing program 3 (id=1308):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x8000000000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x201, 0x3, 0x87, 0x0, 0x5, 0x0, 0x5], 0x8000000, 0x3c42d1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x9c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0xfffffffffffffffe, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @val={0x5, 0x3, {0x58, 0xe0, 0x7}}, @val={0x25, 0x3, {0x1, 0x64}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x22, 0xf, [@random={0x1, 0x1c, "566566c044d76ff2cb984d505d6261f445ae7a1fba57871d75497b0c"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)

3.203474832s ago: executing program 3 (id=1309):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x45040) (fail_nth: 2)

2.504152292s ago: executing program 2 (id=1310):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size'])
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181)
open(&(0x7f0000000040)='./bus\x00', 0x840, 0x0)
ftruncate(r0, 0x82081fc)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
read$hidraw(r2, &(0x7f0000002340)=""/147, 0x93)
syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000140)='g')
fanotify_init(0x40, 0x80000)
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="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", 0x14b}, {&(0x7f0000000300)="eccbe81912e6885ebf32921aef6372d26ed59c0383803a3d70a7676ec282f26f4f3bcc3a6e86c8704ae925c4309d4b645e8e06ad935541b8a1ea1e76d66eea82d9b30f2928c51b8a9d731fad43d73c17b24db08423403d49e073d4e55c66c7c61258949ef7b50f6de4e0ded471ae59012d9daa49140664d75f3dcf6ad5c1ad062282f497032491a41a6fea7521d4e001dbb2d6549f81cc4a6db843de5623230d78bd3fb450f1f21eaf541a139fdba586bf0568bbfc22fed1fb2b5cb1a6d4443e23899c796689650031100cbbf3b9f56734ce5e2fcd8febf8e23f0e2bbb6b2db3cf4d"}, {&(0x7f0000000400)="0216947c5198e026725deab92bee0c7d61f23773c637d5d8c4432f0db3687d21ee012bbe3ffe315bd75d2a5383acdca461dd5d65d994bf995088886e2ffd30c09427d5e807c4963d77fc1f604e87369a5a6111e008f054c09b5f319bd1b2e37ea71c557d10efee1fb3fa8dece4ebd24433c5734ef4d4889b59ab0225903db64aa389e4d0db9a90999f4569db"}, {&(0x7f0000000200)="e0e4ef37e525112eea84f4aba2c97ac4abc5a910aa18fa2f43493591acb14a9b82ee2c22501c40a733b5ab9994a078745bee086d01323de52d38a103e021f2290e67090ffedac6f1969040ce9469aa35168dab0cca02d1"}, {&(0x7f00000004c0)="695c305477d0dc8a691abcc5c2e73ac5f696e8ec44741f69e8f1c63e378c30eaa326cf7033904c4c46af0f4d7c4d82338f6cda39f1e0d0055f0a1db342f82af31d604e76785215d136c1c6bffd19cd00bd68d4cd9503b75616162c507cef725866f568515f64c14f7aa7abe60e4f96a3a6f027389318d368ff8a034a0c6072a7b1e2245605c840b3a6d85c4cbe61b56396e659d5fd"}], 0x1, 0x0, 0xfffffffffffffce9}, 0x200488c1)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r3, 0x800000)

1.465663412s ago: executing program 5 (id=1311):
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

1.151645521s ago: executing program 5 (id=1312):
socket(0x10, 0x3, 0x0)
ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, &(0x7f0000001880)={0x5, 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000001a80)=[{{&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000480)=""/231, 0xe7}, {&(0x7f0000001680)=""/244, 0xf4}], 0x3, &(0x7f00000005c0)=""/68, 0x44}, 0x2}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001800)=""/39, 0x27}, {&(0x7f00000018c0)=""/135, 0x87}, {&(0x7f0000001980)=""/159, 0x9f}], 0x3, &(0x7f0000001a40)=""/11, 0xb}, 0x50}], 0x2, 0x40000000, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001b00), 0x111, 0x8}}, 0x20)
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001d40)='ext4_request_blocks\x00'}, 0x18)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000640)=0x40000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x11, &(0x7f0000001b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000001c40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4)
sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0)

632.019678ms ago: executing program 1 (id=1313):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
unshare(0x22020600)
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x208002, 0x0)
signalfd(r2, &(0x7f0000000000)={[0x80000001]}, 0x8)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2a, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x20, 0xfffffffffffffffd)
add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xd0, 0x118, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
getpgrp(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r6 = syz_open_dev$sg(&(0x7f0000000200), 0x100, 0x401)
ioctl$BLKTRACESETUP(r6, 0xc0481273, 0x0)
ioctl$BLKTRACESTART(r6, 0x1274, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
fsopen(&(0x7f00000000c0)='cramfs\x00', 0x0)

250.166489ms ago: executing program 0 (id=1314):
r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x80)
r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)

234.124206ms ago: executing program 2 (id=1315):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r6], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x40)
sendmsg$nl_generic(r6, 0x0, 0x20004000)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'ip6gretap0\x00'}}, 0x1e)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r10 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r10, 0x0, 0x0)
ioctl$int_in(r7, 0x40000000af01, 0x0)
socket(0x8, 0x1, 0x0)

0s ago: executing program 5 (id=1316):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc8081, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x57)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1e, &(0x7f0000000500)=ANY=[@ANYBLOB="180000009800", @ANYBLOB="0000000000000000b702000014000000b7030400000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000d72b1000000000009500", @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

he config
[  326.975476][ T3604] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  326.992183][ T3604] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.012106][ T3604] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  327.040290][ T3604] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  327.070096][ T3604] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  327.100597][ T3604] usb 6-1: Product: syz
[  327.111914][ T3604] usb 6-1: Manufacturer: syz
[  327.119677][ T3604] usb 6-1: SerialNumber: syz
[  327.151968][ T3604] usb 6-1: config 0 descriptor??
[  327.193135][ T3604] yurex 6-1:0.0: Could not find endpoints
[  327.452683][ T5893] usb 6-1: USB disconnect, device number 2
[  327.572138][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.596568][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.626328][ T1097] bond0 (unregistering): Released all slaves
[  328.077162][ T9993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.101337][ T9993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  328.129285][ T9993] bond0 (unregistering): Released all slaves
[  328.252721][ T1097] tipc: Left network mode
[  328.270903][T10009] netlink: 80 bytes leftover after parsing attributes in process `syz.5.888'.
[  328.482722][ T5852] Bluetooth: hci3: command tx timeout
[  330.215508][ T1097] hsr_slave_0: left promiscuous mode
[  330.233934][ T1097] hsr_slave_1: left promiscuous mode
[  330.257221][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'.
[  330.272931][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.280353][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.323561][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.330984][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.413714][ T1097] veth0_macvtap: left promiscuous mode
[  330.422426][ T1097] veth1_vlan: left promiscuous mode
[  330.429634][ T1097] veth0_vlan: left promiscuous mode
[  330.553591][ T5852] Bluetooth: hci3: command tx timeout
[  331.368466][ T1097] team0 (unregistering): Port device team_slave_1 removed
[  331.410511][ T1097] team0 (unregistering): Port device team_slave_0 removed
[  331.770319][T10064] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  331.920252][T10077] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  332.521798][ T9980] chnl_net:caif_netlink_parms(): no params data found
[  332.643200][ T5852] Bluetooth: hci3: command tx timeout
[  333.377112][ T9980] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.425202][ T9980] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.428465][T10116] netlink: 76 bytes leftover after parsing attributes in process `syz.1.910'.
[  333.446209][ T9980] bridge_slave_0: entered allmulticast mode
[  333.488529][ T9980] bridge_slave_0: entered promiscuous mode
[  333.526486][ T9980] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.554734][ T9980] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.585613][ T9980] bridge_slave_1: entered allmulticast mode
[  333.614600][ T9980] bridge_slave_1: entered promiscuous mode
[  333.884697][ T9980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  333.926170][ T9980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.685049][ T9980] team0: Port device team_slave_0 added
[  334.713193][ T5852] Bluetooth: hci3: command tx timeout
[  334.722909][ T9980] team0: Port device team_slave_1 added
[  334.801795][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.819316][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.870971][ T9980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  334.905826][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_1
[  334.923993][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.029456][ T9980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.150505][T10145] tipc: Started in network mode
[  335.165458][T10145] tipc: Node identity 72e8e1fae63c, cluster identity 4711
[  335.196965][T10145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.239713][T10148] syzkaller0: entered promiscuous mode
[  335.258273][T10148] syzkaller0: entered allmulticast mode
[  335.344165][T10155] tipc: Resetting bearer <eth:syzkaller0>
[  335.376806][T10144] tipc: Resetting bearer <eth:syzkaller0>
[  335.469893][T10144] tipc: Disabling bearer <eth:syzkaller0>
[  336.096625][ T9980] hsr_slave_0: entered promiscuous mode
[  336.137387][ T9980] hsr_slave_1: entered promiscuous mode
[  336.157944][ T9980] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  336.215021][ T9980] Cannot create hsr debugfs directory
[  337.462296][ T5852] Bluetooth: hci1: Malformed MSFT vendor event: 0x02
[  339.261575][T10229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.273887][T10229] syzkaller0: entered promiscuous mode
[  339.280864][T10229] syzkaller0: entered allmulticast mode
[  339.310000][T10229] tipc: Resetting bearer <eth:syzkaller0>
[  339.330016][T10227] tipc: Resetting bearer <eth:syzkaller0>
[  339.350039][T10227] tipc: Disabling bearer <eth:syzkaller0>
[  339.479828][T10231] syzkaller1: entered promiscuous mode
[  339.486692][T10231] syzkaller1: entered allmulticast mode
[  339.552853][ T5852] Bluetooth: hci4: Malformed HCI Event
[  340.833029][ T9980] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  341.250473][ T9980] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  341.319467][ T9980] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  341.378682][ T9980] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  342.550901][ T9980] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.619412][ T9980] 8021q: adding VLAN 0 to HW filter on device team0
[  342.647394][T10280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.955'.
[  342.677580][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.684767][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.699854][T10280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'.
[  342.720119][T10280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.955'.
[  342.729559][T10280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.955'.
[  342.750670][T10284] netlink: 'syz.3.956': attribute type 33 has an invalid length.
[  342.761112][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.768518][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.793951][T10284] netlink: 152 bytes leftover after parsing attributes in process `syz.3.956'.
[  342.863313][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.956'.
[  344.373535][ T9980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.539387][ T9980] veth0_vlan: entered promiscuous mode
[  344.602540][ T9980] veth1_vlan: entered promiscuous mode
[  344.716571][ T9980] veth0_macvtap: entered promiscuous mode
[  344.749606][ T9980] veth1_macvtap: entered promiscuous mode
[  344.808363][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.843604][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.886661][ T9980] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.922126][ T9980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.942062][ T9980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.962130][ T9980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.366702][ T6583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.432206][ T6583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.636479][ T5893] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  345.914101][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  346.037378][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  346.048238][ T5893] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  346.085043][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.101711][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.153227][ T5893] usb 6-1: config 0 descriptor??
[  346.159630][T10348] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  346.976971][ T5893] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  347.832376][    T9] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  348.004873][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  348.036406][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.066815][    T9] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  348.102082][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.137751][    T9] usb 1-1: config 0 descriptor??
[  348.182882][ T5893] usb 6-1: reset full-speed USB device number 3 using dummy_hcd
[  348.522111][ T5920] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  348.573489][T10385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.630631][T10385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.702225][ T5920] usb 2-1: Using ep0 maxpacket: 32
[  348.721202][ T5920] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  348.742308][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.771094][ T5920] usb 2-1: Product: syz
[  348.785801][ T5920] usb 2-1: Manufacturer: syz
[  348.791853][T10364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  348.800778][T10364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.442038][ T5920] usb 2-1: SerialNumber: syz
[  349.456127][ T5920] usb 2-1: config 0 descriptor??
[  349.793390][T10378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.876057][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  349.913210][T10378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.972366][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  350.013827][    T9] usb 1-1: USB disconnect, device number 5
[  352.353619][ T5920] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  352.361925][ T5920] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  352.634348][ T5920] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71
[  352.791838][ T3604] usb 6-1: USB disconnect, device number 3
[  352.879462][ T5920] usb 2-1: USB disconnect, device number 2
[  354.954882][ T5844] Bluetooth: hci0: command 0x0406 tx timeout
[  356.013470][T10451] ubi31: attaching mtd0
[  356.021288][T10451] ubi31: scanning is finished
[  356.026097][T10451] ubi31: empty MTD device detected
[  356.637500][T10451] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  356.645607][T10451] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  356.652962][T10451] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  356.660002][T10451] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  356.667571][T10451] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  356.674568][T10451] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  356.682684][T10451] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1862904132
[  356.692757][T10451] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  356.730453][T10461] ubi31: background thread "ubi_bgt31d" started, PID 10461
[  358.324597][T10487] netlink: 272 bytes leftover after parsing attributes in process `syz.5.1000'.
[  360.945795][T10522] netlink: 'syz.0.1006': attribute type 4 has an invalid length.
[  360.958717][T10522] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1006'.
[  366.876163][T10562]  nullb0: AHDI p1
[  367.236411][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'.
[  367.245497][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'.
[  367.254691][T10575] netlink: 46 bytes leftover after parsing attributes in process `syz.1.1023'.
[  368.055407][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  368.864569][T10609] netlink: 'syz.5.1031': attribute type 4 has an invalid length.
[  368.929010][T10609] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.1031'.
[  369.261323][T10620]  nullb0: AHDI p1
[  369.342785][T10625] netlink: 'syz.5.1037': attribute type 4 has an invalid length.
[  369.358787][T10625] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.1037'.
[  370.348312][T10642] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1040'.
[  371.797335][T10659] netlink: 'syz.2.1046': attribute type 4 has an invalid length.
[  371.922188][T10659] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.1046'.
[  373.203765][ T3604] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  373.237841][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'.
[  373.253680][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'.
[  373.263768][T10680] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1054'.
[  373.392927][ T3604] usb 4-1: Using ep0 maxpacket: 8
[  373.403383][ T3604] usb 4-1: config 0 has an invalid interface number: 183 but max is 0
[  373.447938][ T3604] usb 4-1: config 0 has no interface number 0
[  373.462453][ T3604] usb 4-1: config 0 interface 183 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  373.642075][ T3604] usb 4-1: config 0 interface 183 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87
[  373.672563][ T3604] usb 4-1: config 0 interface 183 altsetting 0 endpoint 0x87 has an invalid bInterval 36, changing to 9
[  373.692865][ T3604] usb 4-1: config 0 interface 183 altsetting 0 endpoint 0x87 has invalid maxpacket 50274, setting to 1024
[  374.539578][ T3604] usb 4-1: config 0 interface 183 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  374.572088][ T3604] usb 4-1: New USB device found, idVendor=0e8d, idProduct=0004, bcdDevice=bf.4e
[  374.581158][ T3604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.615010][ T3604] usb 4-1: config 0 descriptor??
[  374.621711][T10673] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  377.527927][ T5913] usb 4-1: USB disconnect, device number 4
[  379.024850][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  379.542067][ T3604] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  380.932158][ T3604] usb 3-1: Using ep0 maxpacket: 32
[  380.950695][ T3604] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  380.960420][ T3604] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.976976][ T3604] usb 3-1: Product: syz
[  380.981545][ T3604] usb 3-1: Manufacturer: syz
[  381.234518][ T3604] usb 3-1: SerialNumber: syz
[  381.860747][ T3604] usb 3-1: config 0 descriptor??
[  382.205179][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.652633][ T5921] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  382.714867][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  383.588267][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  383.631182][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  383.681659][ T5921] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  383.715158][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.731648][T10759] netlink: 'syz.0.1078': attribute type 12 has an invalid length.
[  383.751093][T10759] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1078'.
[  383.758126][ T5921] usb 2-1: config 0 descriptor??
[  384.202803][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.211709][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.378931][ T3604] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  384.396795][ T3604] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  384.585725][ T3604] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71
[  384.662945][ T3604] usb 3-1: USB disconnect, device number 5
[  385.542133][ T5921] usbhid 2-1:0.0: can't add hid device: -71
[  385.741561][ T5921] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  385.768972][ T5921] usb 2-1: USB disconnect, device number 3
[  387.367134][T10806] tipc: Started in network mode
[  387.376782][T10806] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  387.417322][T10806] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  387.437715][T10806] tipc: Enabled bearer <udp:syz2>, priority 10
[  387.895011][T10815] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  388.262834][ T5921] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  388.352091][   T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  388.402127][  T971] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  388.445799][ T5921] usb 3-1: Using ep0 maxpacket: 32
[  388.631028][    T9] tipc: Node number set to 1
[  388.658072][  T971] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  388.715287][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  388.813962][ T5921] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  388.893047][  T971] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  388.916068][   T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  388.929733][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.938268][  T971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  388.959608][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.972207][ T5921] usb 3-1: Product: syz
[  388.976402][ T5921] usb 3-1: Manufacturer: syz
[  388.981024][ T5921] usb 3-1: SerialNumber: syz
[  388.992100][  T971] usb 4-1: config 0 interface 0 has no altsetting 0
[  389.001930][   T10] usb 1-1: config 0 descriptor??
[  389.013837][  T971] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.033412][ T5921] usb 3-1: config 0 descriptor??
[  389.038288][T10821] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  389.042121][  T971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.060491][  T971] usb 4-1: config 0 interface 0 has no altsetting 0
[  389.082246][ T5913] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  389.099352][  T971] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.116667][  T971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.142457][  T971] usb 4-1: config 0 interface 0 has no altsetting 0
[  389.160788][  T971] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.172340][  T971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.183691][  T971] usb 4-1: config 0 interface 0 has no altsetting 0
[  389.194859][  T971] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.204834][  T971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.232072][  T971] usb 4-1: config 0 interface 0 has no altsetting 0
[  389.245086][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  389.256619][  T971] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.270191][  T971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.284874][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.298286][T10819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.310307][  T971] usb 4-1: config 0 interface 0 has no altsetting 0
[  389.317595][ T5913] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  389.327475][T10819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.338039][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.350073][  T971] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  389.610687][   T10] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  389.624185][  T971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  389.645387][ T5913] usb 2-1: config 0 descriptor??
[  390.335724][  T971] usb 4-1: config 0 interface 0 has no altsetting 0
[  390.344472][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.353412][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.366153][  T971] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.383221][  T971] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  390.394324][  T971] usb 4-1: config 0 interface 0 has no altsetting 0
[  390.405244][  T971] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  390.424510][  T971] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  390.440471][  T971] usb 4-1: Product: syz
[  390.447992][  T971] usb 4-1: Manufacturer: syz
[  390.457032][  T971] usb 4-1: SerialNumber: syz
[  390.474932][  T971] usb 4-1: config 0 descriptor??
[  390.505918][  T971] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  390.715406][T10762] usb 4-1: USB disconnect, device number 5
[  390.741837][T10762] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  390.825398][  T971] usb 1-1: reset full-speed USB device number 6 using dummy_hcd
[  390.837993][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1102'.
[  390.848014][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1102'.
[  390.858169][T10835] netlink: 38 bytes leftover after parsing attributes in process `syz.5.1102'.
[  391.004266][T10821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.014657][T10821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.630505][ T5921] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  391.786011][ T5913] usbhid 2-1:0.0: can't add hid device: -71
[  391.794547][ T5921] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  391.803059][ T5913] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  391.837227][ T5913] usb 2-1: USB disconnect, device number 4
[  391.912834][ T5921] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71
[  391.944925][ T5921] usb 3-1: USB disconnect, device number 6
[  392.578034][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'.
[  392.599077][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'.
[  392.758892][T10848] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1108'.
[  392.786980][T10844] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  393.860388][  T979] usb 1-1: USB disconnect, device number 6
[  393.905539][T10854] syzkaller1: entered promiscuous mode
[  393.958870][T10854] syzkaller1: entered allmulticast mode
[  394.652061][  T979] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  394.912767][  T979] usb 4-1: Using ep0 maxpacket: 32
[  394.935304][  T979] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  394.944807][  T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.292883][T10762] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  395.522473][  T979] usb 4-1: Product: syz
[  395.526707][  T979] usb 4-1: Manufacturer: syz
[  395.531349][  T979] usb 4-1: SerialNumber: syz
[  395.543644][  T979] usb 4-1: config 0 descriptor??
[  395.607078][T10762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  395.641568][T10762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  395.681535][T10762] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  395.702425][T10762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.723784][T10762] usb 1-1: config 0 descriptor??
[  395.754302][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.782774][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.140931][T10870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.149746][T10870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.163825][T10878] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  397.906356][  T979] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  397.932617][T10762] usbhid 1-1:0.0: can't add hid device: -71
[  397.939541][T10762] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  397.958250][  T979] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  398.039235][T10762] usb 1-1: USB disconnect, device number 7
[  398.153674][  T979] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[  398.207527][  T979] usb 4-1: USB disconnect, device number 6
[  398.296489][T10888] netlink: 'syz.0.1120': attribute type 3 has an invalid length.
[  398.332127][ T5913] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  398.530853][ T5913] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  398.886656][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  398.918800][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  398.970282][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0
[  398.990712][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  399.021384][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  399.056775][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0
[  399.066429][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  399.075854][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  399.098651][T10897] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.112102][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0
[  399.128638][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  399.147575][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  399.189094][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0
[  399.241378][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  399.257249][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  399.304608][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0
[  399.354747][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  399.378611][T10897] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.397305][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  399.424247][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0
[  399.444372][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  399.464473][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  399.492065][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0
[  399.527426][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  399.549510][ T5913] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  399.567021][ T5913] usb 3-1: config 0 interface 0 has no altsetting 0
[  399.578062][ T5913] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  399.590307][ T5913] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  399.611833][ T5913] usb 3-1: Product: syz
[  399.613745][T10897] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.651078][T10908] syzkaller1: entered promiscuous mode
[  399.665158][T10908] syzkaller1: entered allmulticast mode
[  399.672578][ T5913] usb 3-1: Manufacturer: syz
[  399.719487][ T5913] usb 3-1: SerialNumber: syz
[  399.792780][ T5913] usb 3-1: config 0 descriptor??
[  399.830320][ T5913] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  399.864312][T10897] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.029630][ T5913] usb 3-1: USB disconnect, device number 7
[  400.045040][ T5913] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  400.195601][T10897] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.210479][T10897] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.229028][T10897] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.277836][T10897] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.412324][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  400.628720][    T9] usb 2-1: Using ep0 maxpacket: 32
[  401.306756][    T9] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  401.320503][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.347831][    T9] usb 2-1: Product: syz
[  401.364394][    T9] usb 2-1: Manufacturer: syz
[  401.375674][    T9] usb 2-1: SerialNumber: syz
[  401.384995][    T9] usb 2-1: config 0 descriptor??
[  401.647283][T10918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.672583][T10918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.092260][   T10] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  403.274268][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  403.364495][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  403.390807][   T10] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  403.402332][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.420922][   T10] usb 6-1: config 0 descriptor??
[  403.838717][T10930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.839145][T10930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.930122][    T9] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  403.930189][    T9] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  403.994437][    T9] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71
[  403.997722][    T9] usb 2-1: USB disconnect, device number 5
[  404.661617][T10946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  404.678287][T10946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.921931][   T10] usbhid 6-1:0.0: can't add hid device: -71
[  404.933978][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  404.970995][   T10] usb 6-1: USB disconnect, device number 4
[  405.004616][T10946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.064625][T10946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.148885][T10951] syzkaller1: entered promiscuous mode
[  405.155484][T10951] syzkaller1: entered allmulticast mode
[  405.234110][T10946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.252873][T10946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.626332][T10966] Bluetooth: hci0: invalid length 0, exp 2 for type 20
[  405.677466][T10946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.720183][T10946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.152656][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  406.190821][T10946] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  406.238222][T10762] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  406.261096][T10946] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.363191][T10946] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  406.371544][T10946] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.389228][T10946] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  406.400469][T10946] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.402109][T10762] usb 2-1: Using ep0 maxpacket: 8
[  406.424150][T10762] usb 2-1: config 0 interface 0 has no altsetting 0
[  406.440135][T10762] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  406.465412][T10762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.470115][T10946] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  406.499823][T10762] usb 2-1: Product: syz
[  406.502220][T10946] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.515971][T10762] usb 2-1: Manufacturer: syz
[  406.522766][T10762] usb 2-1: SerialNumber: syz
[  406.548419][T10762] usb 2-1: config 0 descriptor??
[  406.580478][T10762] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found
[  406.810980][T10762] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected
[  406.821907][T10762] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  406.983260][ T5921] usb 2-1: USB disconnect, device number 6
[  407.134733][T10988] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  407.853405][T10988] tipc: Enabled bearer <udp:syz2>, priority 10
[  407.972178][ T5893] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  408.614148][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  408.751750][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.784595][ T5893] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  408.802532][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.829210][ T5893] usb 3-1: config 0 descriptor??
[  408.845274][   T10] tipc: Node number set to 584655775
[  408.909834][T10996] syzkaller1: entered promiscuous mode
[  408.915398][T10996] syzkaller1: entered allmulticast mode
[  409.202560][T11000] CUSE: unknown device info "�KJéH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,�°
ð<Ö_e¤FÀÆ"
[  409.214551][T11000] CUSE: unknown device info "3�ÜŸ•,²¥Ì˜õ"
[  409.220733][T11000] CUSE: unknown device info "Jô©Ð2SZûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q	´ƒ
[  409.220733][T11000] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR�É�Q÷®(hÒ�j	pøVdY0¨Æ|M?2JÿúIšvö^
RÎ@´å"
[  409.240069][T11000] CUSE: unknown device info "!ToÛ}Ý�&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E•gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô"
[  409.251534][T11000] CUSE: DEVNAME unspecified
[  409.583755][T10987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  409.592447][T10987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.680837][ T5893] usbhid 3-1:0.0: can't add hid device: -71
[  410.686965][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  410.762338][ T5893] usb 3-1: USB disconnect, device number 8
[  412.474457][T11022] netlink: 'syz.2.1158': attribute type 12 has an invalid length.
[  412.526019][T11022] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1158'.
[  413.623285][T11033] netlink: 'syz.2.1161': attribute type 12 has an invalid length.
[  413.631141][T11033] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1161'.
[  413.782541][T11044] syzkaller1: entered promiscuous mode
[  413.790665][T11044] syzkaller1: entered allmulticast mode
[  415.282068][ T5893] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  415.343472][T11061] IPv6: addrconf: prefix option has invalid lifetime
[  415.383236][T11064] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.514393][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  415.540064][T11064] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.550393][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.568686][ T5893] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  415.578806][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.582556][  T979] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  415.602687][ T5893] usb 3-1: config 0 descriptor??
[  415.659957][T11064] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.708970][T11064] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.756677][  T979] usb 2-1: Using ep0 maxpacket: 32
[  415.782229][  T979] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  415.791846][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.849589][  T979] usb 2-1: Product: syz
[  415.867223][  T979] usb 2-1: Manufacturer: syz
[  415.879824][  T979] usb 2-1: SerialNumber: syz
[  415.888087][T11064] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.900498][  T979] usb 2-1: config 0 descriptor??
[  415.944991][T11064] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.978848][T11064] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.021027][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.029902][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.054239][T11064] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.119432][T11057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.269461][T11057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.207163][ T5893] usbhid 3-1:0.0: can't add hid device: -71
[  417.298905][ T5893] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  417.496816][ T5893] usb 3-1: USB disconnect, device number 9
[  418.532175][  T979] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  418.540431][  T979] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  418.785862][  T979] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71
[  418.868248][  T979] usb 2-1: USB disconnect, device number 7
[  419.483415][T11197] CUSE: unknown device info "�KJéH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,�°
ð<Ö_e¤FÀÆ"
[  419.690243][T11197] CUSE: unknown device info "3�ÜŸ•,²¥Ì˜õ"
[  419.752438][T11197] CUSE: unknown device info "Jô©Ð2SZûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q	´ƒ
[  419.752438][T11197] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw—üæšxR�É�Q÷®(hÒ�j	pøVdY0¨Æ|M?2JÿúIšvö^
RÎ@´å"
[  419.779817][T11197] CUSE: unknown device info "!ToÛ}Ý�&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E•gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô"
[  419.810326][T11197] CUSE: DEVNAME unspecified
[  422.642088][ T3604] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  422.792430][ T5920] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  422.841846][ T3604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  422.869450][ T3604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.888561][T11219] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  422.927186][ T3604] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  422.962246][ T3604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.979300][ T1097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.005876][ T5920] usb 4-1: Using ep0 maxpacket: 32
[  423.012466][ T3604] usb 1-1: config 0 descriptor??
[  423.079661][ T5920] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  423.096371][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.106441][ T5920] usb 4-1: Product: syz
[  423.110638][ T5920] usb 4-1: Manufacturer: syz
[  423.122388][ T5920] usb 4-1: SerialNumber: syz
[  423.130350][ T5920] usb 4-1: config 0 descriptor??
[  423.218033][ T1097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.315802][ T1097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.343086][T11217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.373715][T11217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.608464][T11228] netlink: 'syz.5.1189': attribute type 4 has an invalid length.
[  424.115392][T11228] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.1189'.
[  424.185849][ T1097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.489863][ T3604] usbhid 1-1:0.0: can't add hid device: -71
[  424.520589][ T3604] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  424.635980][ T3604] usb 1-1: USB disconnect, device number 8
[  424.812378][ T1097] bridge_slave_1: left allmulticast mode
[  424.832133][ T1097] bridge_slave_1: left promiscuous mode
[  424.857405][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.915641][ T1097] bridge_slave_0: left allmulticast mode
[  424.939110][ T1097] bridge_slave_0: left promiscuous mode
[  424.956773][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.164340][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  425.176518][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  425.927943][ T5920] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  425.936802][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  425.959644][ T5920] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  425.974303][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  426.312320][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  428.854412][T11270] netlink: 428 bytes leftover after parsing attributes in process `syz.5.1199'.
[  429.199133][ T5844] Bluetooth: hci3: command tx timeout
[  429.432076][T10762] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  429.824415][T10762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  429.861657][T10762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  429.884951][T10762] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  429.915117][T10762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.055443][T11286] netlink: 'syz.0.1203': attribute type 4 has an invalid length.
[  430.066801][T11286] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1203'.
[  430.077583][T10762] usb 2-1: config 0 descriptor??
[  430.253697][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  430.274189][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  430.291856][ T1097] bond0 (unregistering): Released all slaves
[  430.335091][T11270] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1199'.
[  430.390849][ T1097] tipc: Disabling bearer <udp:syz2>
[  430.410386][ T1097] tipc: Left network mode
[  430.431036][ T5920] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[  430.469042][ T5920] usb 4-1: USB disconnect, device number 7
[  431.082336][ T5920] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  431.272405][ T5844] Bluetooth: hci3: command tx timeout
[  431.306146][ T5920] usb 6-1: Using ep0 maxpacket: 32
[  431.328961][ T5920] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  431.339539][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.347813][ T5920] usb 6-1: Product: syz
[  431.352288][ T5920] usb 6-1: Manufacturer: syz
[  431.358936][ T5920] usb 6-1: SerialNumber: syz
[  431.368092][ T5920] usb 6-1: config 0 descriptor??
[  431.588430][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.604465][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  432.358478][T10762] usbhid 2-1:0.0: can't add hid device: -71
[  432.382144][T10762] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  432.403564][T10762] usb 2-1: USB disconnect, device number 8
[  433.362202][ T5844] Bluetooth: hci3: command tx timeout
[  434.225052][ T5920] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  434.248495][ T5920] peak_usb 6-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  434.791859][T11333] cgroup: fork rejected by pids controller in /syz5
[  434.837853][T11330] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  434.872938][ T5920] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71
[  434.899715][ T5920] usb 6-1: USB disconnect, device number 5
[  434.911272][T11336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1214'.
[  434.992347][ T1097] hsr_slave_0: left promiscuous mode
[  435.027260][ T1097] hsr_slave_1: left promiscuous mode
[  435.066323][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.074564][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.174835][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.212578][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.273084][T11448] netlink: 'syz.1.1215': attribute type 4 has an invalid length.
[  435.280855][T11448] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.1215'.
[  435.281562][ T1097] veth1_macvtap: left promiscuous mode
[  435.304054][ T1097] veth0_macvtap: left promiscuous mode
[  435.309937][ T1097] veth1_vlan: left promiscuous mode
[  435.319297][ T1097] veth0_vlan: left promiscuous mode
[  435.493599][ T5844] Bluetooth: hci3: command tx timeout
[  435.511870][  T979] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  435.889676][  T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.919659][  T979] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  435.990999][  T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.010987][  T979] usb 4-1: config 0 descriptor??
[  436.585342][T10762] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  436.816757][ T5920] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  436.886836][T10762] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  436.950981][  T979] macally 0003:060B:0001.0004: item fetching failed at offset 0/2
[  436.957964][T10762] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  436.982857][  T979] macally 0003:060B:0001.0004: probe with driver macally failed with error -22
[  436.985180][T10762] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  437.004213][T10762] usb 1-1: config 0 interface 0 has no altsetting 0
[  437.015184][T10762] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  437.024216][T10762] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  437.036545][T10762] usb 1-1: config 0 interface 0 has no altsetting 0
[  437.044314][T10762] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  437.053322][T10762] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  437.064344][T10762] usb 1-1: config 0 interface 0 has no altsetting 0
[  437.079954][T10762] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  437.088905][T10762] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  437.105485][T10762] usb 1-1: config 0 interface 0 has no altsetting 0
[  437.114652][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  437.126653][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.136752][ T5920] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  437.147205][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.147339][T10762] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  437.167333][ T5920] usb 2-1: config 0 descriptor??
[  437.172463][T10762] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  437.190053][T10762] usb 1-1: config 0 interface 0 has no altsetting 0
[  437.199899][T10762] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  437.216921][T10762] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  437.228118][T10762] usb 1-1: config 0 interface 0 has no altsetting 0
[  437.236839][T10762] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  437.245947][T10762] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  437.258173][T10762] usb 1-1: config 0 interface 0 has no altsetting 0
[  437.266243][T10762] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  437.275593][T10762] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  437.286703][T10762] usb 1-1: config 0 interface 0 has no altsetting 0
[  437.296288][T10762] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  437.305832][T10762] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  437.314264][T10762] usb 1-1: Product: syz
[  437.319011][T10762] usb 1-1: Manufacturer: syz
[  437.323744][T10762] usb 1-1: SerialNumber: syz
[  437.347138][T10762] usb 1-1: config 0 descriptor??
[  437.368488][T10762] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  437.395691][ T1097] team0 (unregistering): Port device team_slave_1 removed
[  437.449546][ T1097] team0 (unregistering): Port device team_slave_0 removed
[  437.580820][T10762] usb 1-1: USB disconnect, device number 9
[  437.602547][T10762] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  437.824890][T10762] usb 4-1: USB disconnect, device number 8
[  437.989437][T11236] chnl_net:caif_netlink_parms(): no params data found
[  438.089702][T11464] FAULT_INJECTION: forcing a failure.
[  438.089702][T11464] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  438.148958][T11464] CPU: 1 UID: 0 PID: 11464 Comm: syz.3.1221 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  438.148985][T11464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  438.149003][T11464] Call Trace:
[  438.149014][T11464]  <TASK>
[  438.149025][T11464]  dump_stack_lvl+0x189/0x250
[  438.149063][T11464]  ? __pfx____ratelimit+0x10/0x10
[  438.149092][T11464]  ? __pfx_dump_stack_lvl+0x10/0x10
[  438.149114][T11464]  ? __pfx__printk+0x10/0x10
[  438.149139][T11464]  ? __might_fault+0xb0/0x130
[  438.149171][T11464]  should_fail_ex+0x414/0x560
[  438.149197][T11464]  _copy_from_user+0x2d/0xb0
[  438.149225][T11464]  ___sys_sendmsg+0x158/0x2a0
[  438.149258][T11464]  ? __pfx____sys_sendmsg+0x10/0x10
[  438.149327][T11464]  ? __fget_files+0x2a/0x420
[  438.149348][T11464]  ? __fget_files+0x3a0/0x420
[  438.149381][T11464]  __x64_sys_sendmsg+0x19b/0x260
[  438.149414][T11464]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  438.149454][T11464]  ? __pfx_ksys_write+0x10/0x10
[  438.149469][T11464]  ? rcu_is_watching+0x15/0xb0
[  438.149497][T11464]  ? do_syscall_64+0xbe/0x3b0
[  438.149531][T11464]  do_syscall_64+0xfa/0x3b0
[  438.149552][T11464]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.149572][T11464]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.149591][T11464]  ? clear_bhb_loop+0x60/0xb0
[  438.149615][T11464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.149634][T11464] RIP: 0033:0x7fd3e9d8ebe9
[  438.149654][T11464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.149672][T11464] RSP: 002b:00007fd3eab70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  438.149692][T11464] RAX: ffffffffffffffda RBX: 00007fd3e9fb5fa0 RCX: 00007fd3e9d8ebe9
[  438.149707][T11464] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  438.149720][T11464] RBP: 00007fd3eab70090 R08: 0000000000000000 R09: 0000000000000000
[  438.149733][T11464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.149745][T11464] R13: 00007fd3e9fb6038 R14: 00007fd3e9fb5fa0 R15: 00007fff567c64d8
[  438.149777][T11464]  </TASK>
[  438.573924][T11481] FAULT_INJECTION: forcing a failure.
[  438.573924][T11481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.587440][T11481] CPU: 1 UID: 0 PID: 11481 Comm: syz.0.1224 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  438.587465][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  438.587481][T11481] Call Trace:
[  438.587489][T11481]  <TASK>
[  438.587498][T11481]  dump_stack_lvl+0x189/0x250
[  438.587523][T11481]  ? __pfx____ratelimit+0x10/0x10
[  438.587543][T11481]  ? __pfx_dump_stack_lvl+0x10/0x10
[  438.587563][T11481]  ? __pfx__printk+0x10/0x10
[  438.587587][T11481]  ? __might_fault+0xb0/0x130
[  438.587616][T11481]  should_fail_ex+0x414/0x560
[  438.587641][T11481]  _copy_from_user+0x2d/0xb0
[  438.587665][T11481]  ___sys_sendmsg+0x158/0x2a0
[  438.587695][T11481]  ? __pfx____sys_sendmsg+0x10/0x10
[  438.587759][T11481]  ? __fget_files+0x2a/0x420
[  438.587778][T11481]  ? __fget_files+0x3a0/0x420
[  438.587807][T11481]  __x64_sys_sendmsg+0x19b/0x260
[  438.587837][T11481]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  438.587876][T11481]  ? __pfx_ksys_write+0x10/0x10
[  438.587891][T11481]  ? rcu_is_watching+0x15/0xb0
[  438.587918][T11481]  ? do_syscall_64+0xbe/0x3b0
[  438.587944][T11481]  do_syscall_64+0xfa/0x3b0
[  438.587963][T11481]  ? lockdep_hardirqs_on+0x9c/0x150
[  438.587982][T11481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.588001][T11481]  ? clear_bhb_loop+0x60/0xb0
[  438.588024][T11481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.588050][T11481] RIP: 0033:0x7fd0f458ebe9
[  438.588066][T11481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.588083][T11481] RSP: 002b:00007fd0f54c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  438.588102][T11481] RAX: ffffffffffffffda RBX: 00007fd0f47b5fa0 RCX: 00007fd0f458ebe9
[  438.588115][T11481] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  438.588126][T11481] RBP: 00007fd0f54c2090 R08: 0000000000000000 R09: 0000000000000000
[  438.588137][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.588149][T11481] R13: 00007fd0f47b6038 R14: 00007fd0f47b5fa0 R15: 00007ffea486ab28
[  438.588180][T11481]  </TASK>
[  438.927819][ T6952] bridge0: port 3(syz_tun) entered disabled state
[  439.046565][ T6952] syz_tun (unregistering): left allmulticast mode
[  439.082620][ T6952] syz_tun (unregistering): left promiscuous mode
[  439.097707][ T6952] bridge0: port 3(syz_tun) entered disabled state
[  439.157811][ T5920] usbhid 2-1:0.0: can't add hid device: -71
[  439.165151][T11489] netlink: 'syz.0.1225': attribute type 27 has an invalid length.
[  439.192854][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  439.231363][ T5920] usb 2-1: USB disconnect, device number 9
[  439.242656][T11236] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.255029][T11236] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.262324][T11236] bridge_slave_0: entered allmulticast mode
[  439.271393][T11236] bridge_slave_0: entered promiscuous mode
[  439.290814][T11236] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.312236][T11236] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.326029][T11236] bridge_slave_1: entered allmulticast mode
[  439.361042][T11236] bridge_slave_1: entered promiscuous mode
[  439.744710][T11236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.793214][T11236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.928088][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  440.016939][T11505] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1228'.
[  440.034724][T11236] team0: Port device team_slave_0 added
[  440.059814][T11236] team0: Port device team_slave_1 added
[  440.220974][ T1097] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.322576][ T6105] Bluetooth: hci4: Frame reassembly failed (-84)
[  440.339836][T11236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.374865][T11236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.428491][T11511] Bluetooth: hci4: Frame reassembly failed (-90)
[  440.465139][T11236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.508703][ T1097] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.584981][T11236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.617278][T11236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  440.687291][T11236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.749118][ T1097] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.767146][T11518] FAULT_INJECTION: forcing a failure.
[  440.767146][T11518] name failslab, interval 1, probability 0, space 0, times 1
[  440.821142][T11518] CPU: 1 UID: 0 PID: 11518 Comm: syz.3.1233 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  440.821167][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  440.821177][T11518] Call Trace:
[  440.821185][T11518]  <TASK>
[  440.821193][T11518]  dump_stack_lvl+0x189/0x250
[  440.821218][T11518]  ? __pfx____ratelimit+0x10/0x10
[  440.821240][T11518]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.821261][T11518]  ? __pfx__printk+0x10/0x10
[  440.821290][T11518]  ? __pfx___might_resched+0x10/0x10
[  440.821314][T11518]  should_fail_ex+0x414/0x560
[  440.821337][T11518]  ? fuse_readdir+0x146e/0x2bb0
[  440.821361][T11518]  should_failslab+0xa8/0x100
[  440.821390][T11518]  __kvmalloc_node_noprof+0x161/0x5f0
[  440.821410][T11518]  ? fuse_readdir+0x146e/0x2bb0
[  440.821441][T11518]  fuse_readdir+0x146e/0x2bb0
[  440.821466][T11518]  ? is_bpf_text_address+0x26/0x2b0
[  440.821498][T11518]  ? __lock_acquire+0xab9/0xd20
[  440.821528][T11518]  ? __might_fault+0xb0/0x130
[  440.821555][T11518]  ? _parse_integer_limit+0x1ae/0x1f0
[  440.821577][T11518]  ? __pfx_fuse_readdir+0x10/0x10
[  440.821602][T11518]  ? register_lock_class+0x51/0x320
[  440.821636][T11518]  ? __lock_acquire+0xab9/0xd20
[  440.821663][T11518]  ? __mutex_trylock_common+0x153/0x260
[  440.821689][T11518]  ? __pfx___mutex_trylock_common+0x10/0x10
[  440.821709][T11518]  ? look_up_lock_class+0x74/0x170
[  440.821732][T11518]  ? register_lock_class+0x51/0x320
[  440.821796][T11518]  ? iterate_dir+0x49f/0x770
[  440.821823][T11518]  ? down_read_killable+0x1d1/0x350
[  440.821850][T11518]  iterate_dir+0x5af/0x770
[  440.821883][T11518]  __se_sys_getdents64+0xe4/0x260
[  440.821913][T11518]  ? __pfx___se_sys_getdents64+0x10/0x10
[  440.821939][T11518]  ? ksys_write+0x22a/0x250
[  440.821955][T11518]  ? __pfx_filldir64+0x10/0x10
[  440.821973][T11518]  ? __pfx_ksys_write+0x10/0x10
[  440.821991][T11518]  ? rcu_is_watching+0x15/0xb0
[  440.822017][T11518]  ? do_syscall_64+0xbe/0x3b0
[  440.822043][T11518]  do_syscall_64+0xfa/0x3b0
[  440.822061][T11518]  ? lockdep_hardirqs_on+0x9c/0x150
[  440.822081][T11518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.822099][T11518]  ? clear_bhb_loop+0x60/0xb0
[  440.822123][T11518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.822140][T11518] RIP: 0033:0x7fd3e9d8ebe9
[  440.822156][T11518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  440.822173][T11518] RSP: 002b:00007fd3eab70038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  440.822193][T11518] RAX: ffffffffffffffda RBX: 00007fd3e9fb5fa0 RCX: 00007fd3e9d8ebe9
[  440.822208][T11518] RDX: 000000000000006c RSI: 0000200000000080 RDI: 0000000000000004
[  440.822220][T11518] RBP: 00007fd3eab70090 R08: 0000000000000000 R09: 0000000000000000
[  440.822233][T11518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.822244][T11518] R13: 00007fd3e9fb6038 R14: 00007fd3e9fb5fa0 R15: 00007fff567c64d8
[  440.822275][T11518]  </TASK>
[  441.166829][ T1097] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.200556][T11236] hsr_slave_0: entered promiscuous mode
[  441.209296][T11236] hsr_slave_1: entered promiscuous mode
[  441.228962][T11245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  441.238953][T11245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  441.246900][T11245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  441.256256][T11245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  441.265058][T11245] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  441.273155][T11236] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  441.309267][T11236] Cannot create hsr debugfs directory
[  441.922583][ T5921] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  441.982892][ T1097] bridge_slave_1: left allmulticast mode
[  441.992783][ T1097] bridge_slave_1: left promiscuous mode
[  442.007936][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.035977][ T1097] bridge_slave_0: left allmulticast mode
[  442.041610][ T1097] bridge_slave_0: left promiscuous mode
[  442.047759][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.082712][ T5921] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  442.108076][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  442.122639][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  442.156266][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0
[  442.184758][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  442.206507][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  442.233498][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0
[  442.249105][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  442.260249][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  442.272539][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0
[  442.280317][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  442.289899][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  442.301424][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0
[  442.311255][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  442.320689][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  442.338218][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0
[  442.338559][T11536] cgroup: noprefix used incorrectly
[  442.361800][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  442.402037][ T5844] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  442.402306][ T5852] Bluetooth: hci4: command 0x1003 tx timeout
[  442.448957][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  442.475614][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0
[  442.545887][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  442.562389][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  442.603364][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0
[  442.676623][ T5921] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  442.768404][ T5921] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  442.902080][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0
[  442.911830][ T5921] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  442.929165][ T5921] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  442.946371][ T5921] usb 4-1: Product: syz
[  442.951375][ T1097] dvmrp8 (unregistering): left allmulticast mode
[  442.958752][ T5921] usb 4-1: Manufacturer: syz
[  442.963747][ T5921] usb 4-1: SerialNumber: syz
[  443.092786][ T5921] usb 4-1: config 0 descriptor??
[  443.109571][ T5921] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  443.398291][ T5844] Bluetooth: hci5: command tx timeout
[  443.496993][ T5893] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  443.753791][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  443.768192][T10762] usb 4-1: USB disconnect, device number 9
[  443.793197][T10762] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  443.801089][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.828136][ T5893] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  443.837744][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.854363][ T5893] usb 1-1: config 0 descriptor??
[  443.897629][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  443.909056][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  443.919596][ T1097] bond0 (unregistering): Released all slaves
[  444.101012][ T1097] tipc: Disabling bearer <udp:syz2>
[  444.118217][ T1097] tipc: Left network mode
[  444.142883][T11549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1237'.
[  444.268971][T11544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.278700][T11544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.339500][T11552] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  445.277361][T11561] FAULT_INJECTION: forcing a failure.
[  445.277361][T11561] name failslab, interval 1, probability 0, space 0, times 0
[  445.290491][T11561] CPU: 0 UID: 0 PID: 11561 Comm: syz.3.1240 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  445.290515][T11561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  445.290527][T11561] Call Trace:
[  445.290535][T11561]  <TASK>
[  445.290542][T11561]  dump_stack_lvl+0x189/0x250
[  445.290569][T11561]  ? __pfx____ratelimit+0x10/0x10
[  445.290590][T11561]  ? __pfx_dump_stack_lvl+0x10/0x10
[  445.290612][T11561]  ? __pfx__printk+0x10/0x10
[  445.290640][T11561]  ? __pfx___might_resched+0x10/0x10
[  445.290654][T11561]  should_fail_ex+0x414/0x560
[  445.290668][T11561]  should_failslab+0xa8/0x100
[  445.290681][T11561]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  445.290692][T11561]  ? __alloc_skb+0x112/0x2d0
[  445.290719][T11561]  __alloc_skb+0x112/0x2d0
[  445.290749][T11561]  netlink_sendmsg+0x5c6/0xb30
[  445.290787][T11561]  ? __pfx_netlink_sendmsg+0x10/0x10
[  445.290806][T11561]  ? __lock_acquire+0xab9/0xd20
[  445.290817][T11561]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  445.290828][T11561]  ? __pfx_netlink_sendmsg+0x10/0x10
[  445.290845][T11561]  __sock_sendmsg+0x21c/0x270
[  445.290866][T11561]  sock_write_iter+0x258/0x330
[  445.290889][T11561]  ? __pfx_sock_write_iter+0x10/0x10
[  445.290922][T11561]  ? bpf_lsm_file_permission+0x9/0x20
[  445.290942][T11561]  ? security_file_permission+0x75/0x290
[  445.290960][T11561]  vfs_write+0x54b/0xa90
[  445.290972][T11561]  ? __pfx_sock_write_iter+0x10/0x10
[  445.290983][T11561]  ? __pfx_vfs_write+0x10/0x10
[  445.290998][T11561]  ? __fget_files+0x2a/0x420
[  445.291026][T11561]  ksys_write+0x145/0x250
[  445.291047][T11561]  ? __pfx_ksys_write+0x10/0x10
[  445.291063][T11561]  ? rcu_is_watching+0x15/0xb0
[  445.291094][T11561]  ? do_syscall_64+0xbe/0x3b0
[  445.291108][T11561]  do_syscall_64+0xfa/0x3b0
[  445.291119][T11561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.291129][T11561]  ? asm_sysvec_call_function_single+0x1a/0x20
[  445.291139][T11561]  ? clear_bhb_loop+0x60/0xb0
[  445.291152][T11561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.291170][T11561] RIP: 0033:0x7fd3e9d8ebe9
[  445.291187][T11561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  445.291204][T11561] RSP: 002b:00007fd3eab4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  445.291225][T11561] RAX: ffffffffffffffda RBX: 00007fd3e9fb6090 RCX: 00007fd3e9d8ebe9
[  445.291239][T11561] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000006
[  445.291246][T11561] RBP: 00007fd3eab4f090 R08: 0000000000000000 R09: 0000000000000000
[  445.291253][T11561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.291259][T11561] R13: 00007fd3e9fb6128 R14: 00007fd3e9fb6090 R15: 00007fff567c64d8
[  445.291275][T11561]  </TASK>
[  445.563478][ T5844] Bluetooth: hci5: command tx timeout
[  446.112377][ T5893] usbhid 1-1:0.0: can't add hid device: -71
[  446.118410][ T5893] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  446.170185][ T5893] usb 1-1: USB disconnect, device number 10
[  446.636352][T11573] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1241'.
[  447.594714][ T5844] Bluetooth: hci5: command tx timeout
[  448.315907][ T1097] hsr_slave_0: left promiscuous mode
[  448.346177][ T1097] hsr_slave_1: left promiscuous mode
[  448.492701][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.680942][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.698704][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  448.713232][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.770764][ T1097] veth1_macvtap: left promiscuous mode
[  448.787029][ T1097] veth0_macvtap: left promiscuous mode
[  448.801029][ T1097] veth1_vlan: left promiscuous mode
[  448.814283][ T1097] veth0_vlan: left promiscuous mode
[  448.976949][T11592] trusted_key: encrypted_key: insufficient parameters specified
[  449.053815][ T5920] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  449.110965][T11593] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1246'.
[  449.284502][ T5920] usb 1-1: Using ep0 maxpacket: 16
[  449.293325][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.306931][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.317593][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  449.330983][ T5920] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  449.340308][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.368898][ T5920] usb 1-1: config 0 descriptor??
[  449.570571][ T1097] team0 (unregistering): Port device team_slave_1 removed
[  449.638456][ T1097] team0 (unregistering): Port device team_slave_0 removed
[  449.672514][ T5844] Bluetooth: hci5: command tx timeout
[  449.796045][ T5920] microsoft 0003:045E:07DA.0005: unknown main item tag 0x2
[  449.822502][ T5920] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  449.829846][ T5920] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  449.984532][ T5920] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  450.017604][ T5920] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  450.089549][T11597] ptrace attach of "./syz-executor exec"[9200] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  450.748870][ T5920] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  451.039895][ T5920] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  451.076374][ T5920] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  451.094062][ T5920] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0
[  451.140538][ T5920] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input10
[  451.192327][  T979] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  451.280759][ T5920] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  451.339042][ T5920] usb 1-1: USB disconnect, device number 11
[  451.361520][  T979] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  451.388345][  T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  451.432482][  T979] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  451.480579][T11604] fido_id[11604]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  451.506388][  T979] usb 2-1: config 0 interface 0 has no altsetting 0
[  451.527330][  T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  451.537478][  T979] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  451.548640][  T979] usb 2-1: config 0 interface 0 has no altsetting 0
[  451.558669][  T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  451.609334][  T979] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  451.635802][  T979] usb 2-1: config 0 interface 0 has no altsetting 0
[  451.651648][  T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  451.668498][  T979] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  451.688696][  T979] usb 2-1: config 0 interface 0 has no altsetting 0
[  451.701635][  T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  451.714438][  T979] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  451.728278][  T979] usb 2-1: config 0 interface 0 has no altsetting 0
[  451.744763][  T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  451.943097][  T979] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  452.151351][  T979] usb 2-1: config 0 interface 0 has no altsetting 0
[  452.166732][  T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  452.176772][  T979] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  452.188426][  T979] usb 2-1: config 0 interface 0 has no altsetting 0
[  452.197674][  T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  452.209132][  T979] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  452.222670][  T979] usb 2-1: config 0 interface 0 has no altsetting 0
[  452.233361][  T979] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  452.251490][  T979] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  452.273486][  T979] usb 2-1: Product: syz
[  452.293492][  T979] usb 2-1: Manufacturer: syz
[  452.298415][  T979] usb 2-1: SerialNumber: syz
[  452.320818][T11523] chnl_net:caif_netlink_parms(): no params data found
[  452.331531][  T979] usb 2-1: config 0 descriptor??
[  452.364858][  T979] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  452.703993][T10762] usb 2-1: USB disconnect, device number 10
[  452.784701][T10762] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  453.262327][T10762] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  453.490145][T11236] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  453.508990][T11236] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  453.528817][T11236] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  453.551652][T11236] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  453.579127][T11523] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.591335][T11523] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.606228][T11523] bridge_slave_0: entered allmulticast mode
[  453.618003][T11523] bridge_slave_0: entered promiscuous mode
[  453.659183][T11523] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.666711][T11523] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.678945][T11523] bridge_slave_1: entered allmulticast mode
[  453.688167][T11523] bridge_slave_1: entered promiscuous mode
[  453.795956][T11628] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1254'.
[  453.872227][T10762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  454.130801][T10762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.248306][T10762] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  454.295748][T10762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.373732][T10762] usb 4-1: config 0 descriptor??
[  454.479825][T11523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.535762][T11523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.573481][T11636] netlink: 'syz.1.1255': attribute type 4 has an invalid length.
[  454.627048][T11636] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.1255'.
[  454.684108][ T5921] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  454.709859][T11523] team0: Port device team_slave_0 added
[  454.727762][T11523] team0: Port device team_slave_1 added
[  454.823371][T11523] batman_adv: batadv0: Adding interface: batadv_slave_0
[  454.833834][T11614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.842622][T11614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  454.865087][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.897554][T11523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  454.903560][ T5921] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  454.914613][T11523] batman_adv: batadv0: Adding interface: batadv_slave_1
[  454.928500][T11523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  454.961326][T11523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.980248][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  454.990783][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  455.000129][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0
[  455.008397][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.019644][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  455.034896][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0
[  455.049074][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.059837][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  455.073889][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0
[  455.084978][T11236] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.091924][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.114462][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  455.129934][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0
[  455.140969][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.156343][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  455.171912][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0
[  455.747006][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.808418][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  455.840197][T11640] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  455.843851][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0
[  455.929091][T10762] usbhid 4-1:0.0: can't add hid device: -71
[  455.944711][T11640] tipc: Enabled bearer <udp:syz2>, priority 10
[  455.955333][T10762] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  455.975432][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.990663][T10762] usb 4-1: USB disconnect, device number 10
[  456.019590][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  456.039519][T11523] hsr_slave_0: entered promiscuous mode
[  456.044319][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0
[  456.056751][T11523] hsr_slave_1: entered promiscuous mode
[  456.057623][T11523] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  456.057666][T11523] Cannot create hsr debugfs directory
[  456.081036][T11236] 8021q: adding VLAN 0 to HW filter on device team0
[  456.106215][T11643] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.133054][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  456.152613][ T5921] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  456.164121][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0
[  456.174446][ T5921] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  456.183958][ T5921] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  456.192778][ T5921] usb 1-1: Product: syz
[  456.196953][ T5921] usb 1-1: Manufacturer: syz
[  456.201554][ T5921] usb 1-1: SerialNumber: syz
[  456.230161][ T5921] usb 1-1: config 0 descriptor??
[  456.238507][ T5921] yurex 1-1:0.0: Could not find endpoints
[  456.357511][T11643] syzkaller0: entered promiscuous mode
[  456.368281][T11643] syzkaller0: entered allmulticast mode
[  456.438056][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.445264][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.462897][T11648] tipc: Resetting bearer <eth:syzkaller0>
[  456.476837][ T5921] usb 1-1: USB disconnect, device number 12
[  456.520356][T11648] tipc: Disabling bearer <eth:syzkaller0>
[  456.570230][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.577435][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state
[  457.060012][ T5920] tipc: Node number set to 2496979450
[  457.822526][ T5921] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  457.837793][T11523] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  457.888587][T11523] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  457.907018][T11523] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  457.923299][T11236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.931306][T11523] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  458.014478][ T5921] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  458.063758][ T5921] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  458.164804][T11236] veth0_vlan: entered promiscuous mode
[  458.171557][ T5921] usb 1-1: config 2 interface 0 has no altsetting 0
[  458.187073][ T5921] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  458.205452][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.216640][ T5921] usb 1-1: Product: syz
[  458.220798][ T5921] usb 1-1: Manufacturer: syz
[  458.228325][ T5921] usb 1-1: SerialNumber: syz
[  458.314889][T11523] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.344981][T11236] veth1_vlan: entered promiscuous mode
[  458.449766][T11523] 8021q: adding VLAN 0 to HW filter on device team0
[  458.505539][ T5921] usb 1-1: USB disconnect, device number 13
[  458.533262][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.540378][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  458.563726][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.570825][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  458.644369][T11523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  458.668890][T11236] veth0_macvtap: entered promiscuous mode
[  458.723110][T11236] veth1_macvtap: entered promiscuous mode
[  458.783553][T11236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  458.827310][T11236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.893340][T11236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.922252][T11236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.951284][T11236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.961648][T11236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.184495][T11704] FAULT_INJECTION: forcing a failure.
[  459.184495][T11704] name failslab, interval 1, probability 0, space 0, times 0
[  459.248343][T11704] CPU: 0 UID: 0 PID: 11704 Comm: syz.0.1265 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  459.248367][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  459.248380][T11704] Call Trace:
[  459.248387][T11704]  <TASK>
[  459.248395][T11704]  dump_stack_lvl+0x189/0x250
[  459.248420][T11704]  ? __pfx____ratelimit+0x10/0x10
[  459.248442][T11704]  ? __pfx_dump_stack_lvl+0x10/0x10
[  459.248464][T11704]  ? __pfx__printk+0x10/0x10
[  459.248495][T11704]  ? __pfx___might_resched+0x10/0x10
[  459.248521][T11704]  should_fail_ex+0x414/0x560
[  459.248544][T11704]  should_failslab+0xa8/0x100
[  459.248565][T11704]  __kmalloc_cache_node_noprof+0x73/0x3d0
[  459.248596][T11704]  ? __get_vm_area_node+0x13f/0x300
[  459.248621][T11704]  __get_vm_area_node+0x13f/0x300
[  459.248644][T11704]  __vmalloc_node_range_noprof+0x301/0x12f0
[  459.248666][T11704]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  459.248697][T11704]  ? is_bpf_text_address+0x26/0x2b0
[  459.248740][T11704]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  459.248760][T11704]  ? __might_fault+0xb0/0x130
[  459.248780][T11704]  ? _parse_integer_limit+0x1ae/0x1f0
[  459.248807][T11704]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  459.248833][T11704]  __vmalloc_noprof+0xb1/0xf0
[  459.248852][T11704]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  459.248881][T11704]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  459.248912][T11704]  bpf_prog_alloc+0x3c/0x1a0
[  459.248936][T11704]  bpf_prog_load+0x735/0x1930
[  459.248959][T11704]  ? __pfx_bpf_prog_load+0x10/0x10
[  459.248986][T11704]  ? bpf_lsm_bpf+0x9/0x20
[  459.248998][T11704]  ? security_bpf+0x7e/0x300
[  459.249011][T11704]  __sys_bpf+0x5f1/0x860
[  459.249027][T11704]  ? __pfx___sys_bpf+0x10/0x10
[  459.249048][T11704]  ? ksys_write+0x22a/0x250
[  459.249059][T11704]  ? __pfx_ksys_write+0x10/0x10
[  459.249072][T11704]  __x64_sys_bpf+0x7c/0x90
[  459.249086][T11704]  do_syscall_64+0xfa/0x3b0
[  459.249098][T11704]  ? lockdep_hardirqs_on+0x9c/0x150
[  459.249108][T11704]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.249118][T11704]  ? clear_bhb_loop+0x60/0xb0
[  459.249130][T11704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.249140][T11704] RIP: 0033:0x7fd0f458ebe9
[  459.249151][T11704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  459.249160][T11704] RSP: 002b:00007fd0f54c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  459.249172][T11704] RAX: ffffffffffffffda RBX: 00007fd0f47b5fa0 RCX: 00007fd0f458ebe9
[  459.249180][T11704] RDX: 0000000000000021 RSI: 000020000000e000 RDI: 0000000000000005
[  459.249186][T11704] RBP: 00007fd0f54c2090 R08: 0000000000000000 R09: 0000000000000000
[  459.249193][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.249199][T11704] R13: 00007fd0f47b6038 R14: 00007fd0f47b5fa0 R15: 00007ffea486ab28
[  459.249215][T11704]  </TASK>
[  459.266189][T11704] syz.0.1265: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null)
[  459.412093][ T6583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.422121][T11704] ,cpuset=
[  459.442483][ T6583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.499521][T11704] /,mems_allowed=0-1
[  459.677936][T11704] CPU: 0 UID: 0 PID: 11704 Comm: syz.0.1265 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  459.677963][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  459.677975][T11704] Call Trace:
[  459.677982][T11704]  <TASK>
[  459.677990][T11704]  dump_stack_lvl+0x189/0x250
[  459.678016][T11704]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  459.678045][T11704]  ? __pfx_dump_stack_lvl+0x10/0x10
[  459.678064][T11704]  ? __pfx__printk+0x10/0x10
[  459.678088][T11704]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  459.678110][T11704]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  459.678140][T11704]  warn_alloc+0x214/0x310
[  459.678169][T11704]  ? __pfx_warn_alloc+0x10/0x10
[  459.678194][T11704]  ? __get_vm_area_node+0x13f/0x300
[  459.678219][T11704]  ? __get_vm_area_node+0x2b5/0x300
[  459.678246][T11704]  __vmalloc_node_range_noprof+0x326/0x12f0
[  459.678271][T11704]  ? is_bpf_text_address+0x26/0x2b0
[  459.678317][T11704]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  459.678337][T11704]  ? __might_fault+0xb0/0x130
[  459.678358][T11704]  ? _parse_integer_limit+0x1ae/0x1f0
[  459.678386][T11704]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  459.678413][T11704]  __vmalloc_noprof+0xb1/0xf0
[  459.678434][T11704]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  459.678466][T11704]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  459.678501][T11704]  bpf_prog_alloc+0x3c/0x1a0
[  459.678532][T11704]  bpf_prog_load+0x735/0x1930
[  459.678574][T11704]  ? __pfx_bpf_prog_load+0x10/0x10
[  459.678624][T11704]  ? bpf_lsm_bpf+0x9/0x20
[  459.678645][T11704]  ? security_bpf+0x7e/0x300
[  459.678671][T11704]  __sys_bpf+0x5f1/0x860
[  459.678700][T11704]  ? __pfx___sys_bpf+0x10/0x10
[  459.678741][T11704]  ? ksys_write+0x22a/0x250
[  459.678762][T11704]  ? __pfx_ksys_write+0x10/0x10
[  459.678788][T11704]  __x64_sys_bpf+0x7c/0x90
[  459.678814][T11704]  do_syscall_64+0xfa/0x3b0
[  459.678835][T11704]  ? lockdep_hardirqs_on+0x9c/0x150
[  459.678861][T11704]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.678880][T11704]  ? clear_bhb_loop+0x60/0xb0
[  459.678903][T11704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.678921][T11704] RIP: 0033:0x7fd0f458ebe9
[  459.678937][T11704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  459.678953][T11704] RSP: 002b:00007fd0f54c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  459.678972][T11704] RAX: ffffffffffffffda RBX: 00007fd0f47b5fa0 RCX: 00007fd0f458ebe9
[  459.678986][T11704] RDX: 0000000000000021 RSI: 000020000000e000 RDI: 0000000000000005
[  459.678998][T11704] RBP: 00007fd0f54c2090 R08: 0000000000000000 R09: 0000000000000000
[  459.679010][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.679022][T11704] R13: 00007fd0f47b6038 R14: 00007fd0f47b5fa0 R15: 00007ffea486ab28
[  459.679053][T11704]  </TASK>
[  459.679754][T11523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.710617][ T6583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.722317][T11704] Mem-Info:
[  459.736905][ T6583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.775827][T11704] active_anon:271 inactive_anon:6369 isolated_anon:0
[  459.775827][T11704]  active_file:6060 inactive_file:45295 isolated_file:0
[  459.775827][T11704]  unevictable:768 dirty:251 writeback:0
[  459.775827][T11704]  slab_reclaimable:10768 slab_unreclaimable:102310
[  459.775827][T11704]  mapped:30527 shmem:1391 pagetables:1459
[  459.775827][T11704]  sec_pagetables:0 bounce:0
[  459.775827][T11704]  kernel_misc_reclaimable:0
[  459.775827][T11704]  free:1310160 free_pcp:15704 free_cma:0
[  460.213747][T11704] Node 0 active_anon:1084kB inactive_anon:25328kB active_file:24036kB inactive_file:181180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122156kB dirty:980kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12536kB pagetables:5648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  460.310910][T11704] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  460.353598][T11704] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  460.504660][T11704] lowmem_reserve[]: 0 2500 2502 2502 2502
[  460.510494][T11704] Node 0 DMA32 free:1332788kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1080kB inactive_anon:25284kB active_file:22264kB inactive_file:181112kB unevictable:1536kB writepending:976kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:39148kB local_pcp:21280kB free_cma:0kB
[  460.671666][T11704] lowmem_reserve[]: 0 0 1 1 1
[  460.695014][T11704] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  460.783289][T11728] FAULT_INJECTION: forcing a failure.
[  460.783289][T11728] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  460.813783][T11704] lowmem_reserve[]: 0 0 0 0 0
[  460.823965][T11704] Node 1 Normal free:3893452kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21972kB local_pcp:8160kB free_cma:0kB
[  460.871330][T11728] CPU: 0 UID: 0 PID: 11728 Comm: syz.3.1267 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  460.871357][T11728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  460.871370][T11728] Call Trace:
[  460.871378][T11728]  <TASK>
[  460.871386][T11728]  dump_stack_lvl+0x189/0x250
[  460.871412][T11728]  ? __pfx____ratelimit+0x10/0x10
[  460.871433][T11728]  ? __pfx_dump_stack_lvl+0x10/0x10
[  460.871454][T11728]  ? __pfx__printk+0x10/0x10
[  460.871493][T11728]  should_fail_ex+0x414/0x560
[  460.871526][T11728]  _copy_from_user+0x2d/0xb0
[  460.871554][T11728]  __copy_msghdr+0x3c5/0x5b0
[  460.871587][T11728]  ___sys_sendmsg+0x1a5/0x2a0
[  460.871618][T11728]  ? __pfx____sys_sendmsg+0x10/0x10
[  460.871686][T11728]  ? __fget_files+0x2a/0x420
[  460.871706][T11728]  ? __fget_files+0x3a0/0x420
[  460.871739][T11728]  __sys_sendmmsg+0x227/0x430
[  460.871773][T11728]  ? __pfx___sys_sendmmsg+0x10/0x10
[  460.871799][T11728]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  460.871850][T11728]  ? ksys_write+0x22a/0x250
[  460.871871][T11728]  ? __pfx_ksys_write+0x10/0x10
[  460.871887][T11728]  ? rcu_is_watching+0x15/0xb0
[  460.871915][T11728]  __x64_sys_sendmmsg+0xa0/0xc0
[  460.871946][T11728]  do_syscall_64+0xfa/0x3b0
[  460.871966][T11728]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.871988][T11728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.872005][T11728]  ? clear_bhb_loop+0x60/0xb0
[  460.872027][T11728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.872043][T11728] RIP: 0033:0x7fd3e9d8ebe9
[  460.872059][T11728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  460.872075][T11728] RSP: 002b:00007fd3eab70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  460.872096][T11728] RAX: ffffffffffffffda RBX: 00007fd3e9fb5fa0 RCX: 00007fd3e9d8ebe9
[  460.872110][T11728] RDX: 0000000000000001 RSI: 00002000000065c0 RDI: 0000000000000003
[  460.872121][T11728] RBP: 00007fd3eab70090 R08: 0000000000000000 R09: 0000000000000000
[  460.872132][T11728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  460.872144][T11728] R13: 00007fd3e9fb6038 R14: 00007fd3e9fb5fa0 R15: 00007fff567c64d8
[  460.872175][T11728]  </TASK>
[  460.881684][T11704] lowmem_reserve[]: 0 0 0 0 0
[  461.155567][T11704] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  461.302216][T11704] Node 0 DMA32: 1*4kB (M) 1*8kB (E) 459*16kB (ME) 230*32kB (UME) 225*64kB (UME) 174*128kB (UME) 116*256kB (UME) 30*512kB (UM) 14*1024kB (UM) 4*2048kB (UM) 296*4096kB (UM) = 1331388kB
[  461.377240][T11523] veth0_vlan: entered promiscuous mode
[  461.395110][T11704] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  461.460122][T11704] Node 1 Normal: 191*4kB (UE) 52*8kB (UME) 45*16kB (UME) 57*32kB (UME) 25*64kB (UME) 6*128kB (UM) 3*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3893452kB
[  461.876593][T11704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  461.997399][T11523] veth1_vlan: entered promiscuous mode
[  462.011895][T11704] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  462.055598][T11748] FAULT_INJECTION: forcing a failure.
[  462.055598][T11748] name failslab, interval 1, probability 0, space 0, times 0
[  462.075776][T11704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  462.116562][T11704] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  462.128876][T11704] 56173 total pagecache pages
[  462.136505][T11704] 0 pages in swap cache
[  462.141032][T11704] Free swap  = 124996kB
[  462.148252][T11704] Total swap = 124996kB
[  462.153918][T11704] 2097051 pages RAM
[  462.163660][T11704] 0 pages HighMem/MovableOnly
[  462.172348][T11704] 424695 pages reserved
[  462.176929][T11704] 0 pages cma reserved
[  462.200181][T11748] CPU: 0 UID: 0 PID: 11748 Comm: syz.2.1271 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  462.200207][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  462.200218][T11748] Call Trace:
[  462.200226][T11748]  <TASK>
[  462.200235][T11748]  dump_stack_lvl+0x189/0x250
[  462.200262][T11748]  ? __pfx____ratelimit+0x10/0x10
[  462.200283][T11748]  ? __pfx_dump_stack_lvl+0x10/0x10
[  462.200305][T11748]  ? __pfx__printk+0x10/0x10
[  462.200334][T11748]  ? __pfx___might_resched+0x10/0x10
[  462.200364][T11748]  should_fail_ex+0x414/0x560
[  462.200387][T11748]  should_failslab+0xa8/0x100
[  462.200409][T11748]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  462.200430][T11748]  ? __alloc_skb+0x112/0x2d0
[  462.200458][T11748]  __alloc_skb+0x112/0x2d0
[  462.200488][T11748]  netlink_sendmsg+0x5c6/0xb30
[  462.200524][T11748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.200563][T11748]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  462.200581][T11748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  462.200608][T11748]  __sock_sendmsg+0x21c/0x270
[  462.200633][T11748]  ____sys_sendmsg+0x505/0x830
[  462.200666][T11748]  ? __pfx_____sys_sendmsg+0x10/0x10
[  462.200701][T11748]  ? import_iovec+0x74/0xa0
[  462.200729][T11748]  ___sys_sendmsg+0x21f/0x2a0
[  462.200759][T11748]  ? __pfx____sys_sendmsg+0x10/0x10
[  462.200825][T11748]  ? __fget_files+0x2a/0x420
[  462.200847][T11748]  ? __fget_files+0x3a0/0x420
[  462.200879][T11748]  __x64_sys_sendmsg+0x19b/0x260
[  462.200911][T11748]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  462.200951][T11748]  ? __pfx_ksys_write+0x10/0x10
[  462.200967][T11748]  ? rcu_is_watching+0x15/0xb0
[  462.200993][T11748]  ? do_syscall_64+0xbe/0x3b0
[  462.201019][T11748]  do_syscall_64+0xfa/0x3b0
[  462.201038][T11748]  ? lockdep_hardirqs_on+0x9c/0x150
[  462.201058][T11748]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.201077][T11748]  ? clear_bhb_loop+0x60/0xb0
[  462.201100][T11748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.201118][T11748] RIP: 0033:0x7f91f578ebe9
[  462.201135][T11748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  462.201152][T11748] RSP: 002b:00007f91f6682038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  462.201173][T11748] RAX: ffffffffffffffda RBX: 00007f91f59b5fa0 RCX: 00007f91f578ebe9
[  462.201188][T11748] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003
[  462.201201][T11748] RBP: 00007f91f6682090 R08: 0000000000000000 R09: 0000000000000000
[  462.201213][T11748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.201225][T11748] R13: 00007f91f59b6038 R14: 00007f91f59b5fa0 R15: 00007ffd4b59b7b8
[  462.201256][T11748]  </TASK>
[  462.269529][ T5920] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  462.381634][T11523] veth0_macvtap: entered promiscuous mode
[  462.647261][T11523] veth1_macvtap: entered promiscuous mode
[  462.701017][T11523] batman_adv: batadv0: Interface activated: batadv_slave_0
[  463.354890][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  463.400139][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  463.530734][T11523] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.539933][ T5920] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  463.549624][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.584219][ T5920] usb 2-1: config 0 descriptor??
[  463.651273][T11523] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.702064][T11523] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.739368][T11523] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.805651][T11523] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.818623][ T5913] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  463.915582][ T5913] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  464.000546][T11742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  464.009449][T11742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.315533][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.345414][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.364420][T10762] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  464.476418][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.506808][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.555117][T10762] usb 3-1: device descriptor read/64, error -71
[  464.822627][T10762] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  465.126491][ T5920] usbhid 2-1:0.0: can't add hid device: -71
[  465.721047][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  465.829568][ T5920] usb 2-1: USB disconnect, device number 11
[  465.856319][T10762] usb 3-1: device descriptor read/64, error -71
[  465.989651][T10762] usb usb3-port1: attempt power cycle
[  466.217045][T11799] FAULT_INJECTION: forcing a failure.
[  466.217045][T11799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.248818][T11799] CPU: 1 UID: 0 PID: 11799 Comm: syz.1.1282 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  466.248844][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  466.248856][T11799] Call Trace:
[  466.248864][T11799]  <TASK>
[  466.248872][T11799]  dump_stack_lvl+0x189/0x250
[  466.248897][T11799]  ? __pfx____ratelimit+0x10/0x10
[  466.248917][T11799]  ? __pfx_dump_stack_lvl+0x10/0x10
[  466.248938][T11799]  ? __pfx__printk+0x10/0x10
[  466.248969][T11799]  ? __might_fault+0xb0/0x130
[  466.248999][T11799]  should_fail_ex+0x414/0x560
[  466.249025][T11799]  _copy_from_iter+0x1db/0x16f0
[  466.249049][T11799]  ? __lock_acquire+0xab9/0xd20
[  466.249077][T11799]  ? __pfx__copy_from_iter+0x10/0x10
[  466.249116][T11799]  tun_get_user+0x4ce/0x3ce0
[  466.249142][T11799]  ? __lock_acquire+0xab9/0xd20
[  466.249170][T11799]  ? __might_fault+0xb0/0x130
[  466.249191][T11799]  ? __pfx_tun_get_user+0x10/0x10
[  466.249223][T11799]  ? __lock_acquire+0xab9/0xd20
[  466.249245][T11799]  ? ref_tracker_alloc+0x318/0x460
[  466.249263][T11799]  ? __lock_acquire+0xab9/0xd20
[  466.249282][T11799]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  466.249307][T11799]  ? tun_get+0x1c/0x2f0
[  466.249334][T11799]  ? tun_get+0x1c/0x2f0
[  466.249355][T11799]  ? tun_get+0x1c/0x2f0
[  466.249383][T11799]  tun_chr_write_iter+0x113/0x200
[  466.249409][T11799]  vfs_write+0x54b/0xa90
[  466.249431][T11799]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  466.249456][T11799]  ? __pfx_vfs_write+0x10/0x10
[  466.249485][T11799]  ? __fget_files+0x2a/0x420
[  466.249514][T11799]  ksys_write+0x145/0x250
[  466.249535][T11799]  ? __pfx_ksys_write+0x10/0x10
[  466.249550][T11799]  ? rcu_is_watching+0x15/0xb0
[  466.249577][T11799]  ? do_syscall_64+0xbe/0x3b0
[  466.249602][T11799]  do_syscall_64+0xfa/0x3b0
[  466.249623][T11799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.249641][T11799]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  466.249659][T11799]  ? clear_bhb_loop+0x60/0xb0
[  466.249682][T11799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.249701][T11799] RIP: 0033:0x7fe8e158ebe9
[  466.249717][T11799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  466.249732][T11799] RSP: 002b:00007fe8e2498038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  466.249752][T11799] RAX: ffffffffffffffda RBX: 00007fe8e17b5fa0 RCX: 00007fe8e158ebe9
[  466.249765][T11799] RDX: 000000000000007a RSI: 00002000000002c0 RDI: 0000000000000004
[  466.249777][T11799] RBP: 00007fe8e2498090 R08: 0000000000000000 R09: 0000000000000000
[  466.249789][T11799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.249800][T11799] R13: 00007fe8e17b6038 R14: 00007fe8e17b5fa0 R15: 00007ffd31102858
[  466.249832][T11799]  </TASK>
[  466.541797][T11801] FAULT_INJECTION: forcing a failure.
[  466.541797][T11801] name failslab, interval 1, probability 0, space 0, times 0
[  466.554581][T11801] CPU: 1 UID: 0 PID: 11801 Comm: syz.0.1283 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  466.554606][T11801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  466.554618][T11801] Call Trace:
[  466.554626][T11801]  <TASK>
[  466.554633][T11801]  dump_stack_lvl+0x189/0x250
[  466.554658][T11801]  ? __pfx____ratelimit+0x10/0x10
[  466.554679][T11801]  ? __pfx_dump_stack_lvl+0x10/0x10
[  466.554701][T11801]  ? __pfx__printk+0x10/0x10
[  466.554731][T11801]  ? __pfx___might_resched+0x10/0x10
[  466.554757][T11801]  should_fail_ex+0x414/0x560
[  466.554782][T11801]  should_failslab+0xa8/0x100
[  466.554805][T11801]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  466.554824][T11801]  ? __alloc_skb+0x112/0x2d0
[  466.554855][T11801]  __alloc_skb+0x112/0x2d0
[  466.554884][T11801]  netlink_sendmsg+0x5c6/0xb30
[  466.554920][T11801]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.554963][T11801]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  466.554982][T11801]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.555009][T11801]  __sock_sendmsg+0x21c/0x270
[  466.555034][T11801]  ____sys_sendmsg+0x505/0x830
[  466.555068][T11801]  ? __pfx_____sys_sendmsg+0x10/0x10
[  466.555106][T11801]  ? import_iovec+0x74/0xa0
[  466.555136][T11801]  ___sys_sendmsg+0x21f/0x2a0
[  466.555166][T11801]  ? __pfx____sys_sendmsg+0x10/0x10
[  466.555232][T11801]  ? __fget_files+0x2a/0x420
[  466.555252][T11801]  ? __fget_files+0x3a0/0x420
[  466.555284][T11801]  __x64_sys_sendmsg+0x19b/0x260
[  466.555314][T11801]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  466.555353][T11801]  ? __pfx_ksys_write+0x10/0x10
[  466.555369][T11801]  ? rcu_is_watching+0x15/0xb0
[  466.555395][T11801]  ? do_syscall_64+0xbe/0x3b0
[  466.555420][T11801]  do_syscall_64+0xfa/0x3b0
[  466.555438][T11801]  ? lockdep_hardirqs_on+0x9c/0x150
[  466.555457][T11801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.555474][T11801]  ? clear_bhb_loop+0x60/0xb0
[  466.555496][T11801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.555513][T11801] RIP: 0033:0x7fd0f458ebe9
[  466.555530][T11801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  466.555546][T11801] RSP: 002b:00007fd0f54c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  466.555565][T11801] RAX: ffffffffffffffda RBX: 00007fd0f47b5fa0 RCX: 00007fd0f458ebe9
[  466.555578][T11801] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  466.555590][T11801] RBP: 00007fd0f54c2090 R08: 0000000000000000 R09: 0000000000000000
[  466.555602][T11801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.555613][T11801] R13: 00007fd0f47b6038 R14: 00007fd0f47b5fa0 R15: 00007ffea486ab28
[  466.555645][T11801]  </TASK>
[  466.912074][T10762] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  467.356584][T10762] usb 3-1: device not accepting address 12, error -71
[  469.858412][ T5913] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  469.982061][ T5920] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  470.091413][ T5913] usb 2-1: Using ep0 maxpacket: 32
[  470.280325][ T5913] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  470.342078][ T5913] usb 2-1: config 0 has no interface number 0
[  470.563311][ T5913] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  470.706691][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.783387][ T5913] usb 2-1: Product: syz
[  470.818856][ T5913] usb 2-1: Manufacturer: syz
[  470.852140][ T5913] usb 2-1: SerialNumber: syz
[  470.873466][ T5913] usb 2-1: config 0 descriptor??
[  470.882702][ T5913] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  470.995510][ T5920] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  471.013162][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.084565][ T5913] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  471.124930][ T5913] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  471.137778][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  471.151046][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0
[  471.195900][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.226466][T11867] FAULT_INJECTION: forcing a failure.
[  471.226466][T11867] name failslab, interval 1, probability 0, space 0, times 0
[  471.252215][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  471.269776][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0
[  471.277682][T11867] CPU: 1 UID: 0 PID: 11867 Comm: syz.5.1296 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  471.277705][T11867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  471.277722][T11867] Call Trace:
[  471.277729][T11867]  <TASK>
[  471.277737][T11867]  dump_stack_lvl+0x189/0x250
[  471.277764][T11867]  ? __pfx____ratelimit+0x10/0x10
[  471.277786][T11867]  ? __pfx_dump_stack_lvl+0x10/0x10
[  471.277807][T11867]  ? __pfx__printk+0x10/0x10
[  471.277836][T11867]  ? __pfx___might_resched+0x10/0x10
[  471.277862][T11867]  should_fail_ex+0x414/0x560
[  471.277887][T11867]  should_failslab+0xa8/0x100
[  471.277910][T11867]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  471.277930][T11867]  ? __alloc_skb+0x112/0x2d0
[  471.277960][T11867]  __alloc_skb+0x112/0x2d0
[  471.277990][T11867]  netlink_sendmsg+0x5c6/0xb30
[  471.278026][T11867]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.278060][T11867]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  471.278079][T11867]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.278106][T11867]  __sock_sendmsg+0x21c/0x270
[  471.278131][T11867]  ____sys_sendmsg+0x505/0x830
[  471.278164][T11867]  ? __pfx_____sys_sendmsg+0x10/0x10
[  471.278202][T11867]  ? import_iovec+0x74/0xa0
[  471.278231][T11867]  ___sys_sendmsg+0x21f/0x2a0
[  471.278261][T11867]  ? __pfx____sys_sendmsg+0x10/0x10
[  471.278325][T11867]  ? __fget_files+0x2a/0x420
[  471.278346][T11867]  ? __fget_files+0x3a0/0x420
[  471.278377][T11867]  __x64_sys_sendmsg+0x19b/0x260
[  471.278409][T11867]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  471.278446][T11867]  ? __pfx_ksys_write+0x10/0x10
[  471.278462][T11867]  ? rcu_is_watching+0x15/0xb0
[  471.278487][T11867]  ? do_syscall_64+0xbe/0x3b0
[  471.278512][T11867]  do_syscall_64+0xfa/0x3b0
[  471.278532][T11867]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.278551][T11867]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.278570][T11867]  ? clear_bhb_loop+0x60/0xb0
[  471.278593][T11867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.278619][T11867] RIP: 0033:0x7fd69378ebe9
[  471.278637][T11867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  471.278654][T11867] RSP: 002b:00007fd69464a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  471.278674][T11867] RAX: ffffffffffffffda RBX: 00007fd6939b5fa0 RCX: 00007fd69378ebe9
[  471.278688][T11867] RDX: 000000004004a040 RSI: 0000200000000100 RDI: 0000000000000003
[  471.278701][T11867] RBP: 00007fd69464a090 R08: 0000000000000000 R09: 0000000000000000
[  471.278713][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.278724][T11867] R13: 00007fd6939b6038 R14: 00007fd6939b5fa0 R15: 00007ffdc91b93a8
[  471.278755][T11867]  </TASK>
[  471.279929][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.555184][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 8
[  471.905580][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  471.908644][ T5939] usb 2-1: USB disconnect, device number 12
[  471.938333][ T5939] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  472.010068][ T5939] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  472.203154][ T5939] quatech2 2-1:0.51: device disconnected
[  472.209167][ T5920] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  472.944969][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0
[  472.955362][T11884] FAULT_INJECTION: forcing a failure.
[  472.955362][T11884] name failslab, interval 1, probability 0, space 0, times 0
[  472.994605][ T5920] usb 4-1: unable to read config index 3 descriptor/start: -71
[  473.012794][T11884] CPU: 0 UID: 0 PID: 11884 Comm: syz.1.1300 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  473.012821][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  473.012833][T11884] Call Trace:
[  473.012842][T11884]  <TASK>
[  473.012850][T11884]  dump_stack_lvl+0x189/0x250
[  473.012877][T11884]  ? __pfx____ratelimit+0x10/0x10
[  473.012898][T11884]  ? __pfx_dump_stack_lvl+0x10/0x10
[  473.012923][T11884]  ? __pfx__printk+0x10/0x10
[  473.012954][T11884]  ? __pfx___might_resched+0x10/0x10
[  473.012981][T11884]  should_fail_ex+0x414/0x560
[  473.013006][T11884]  should_failslab+0xa8/0x100
[  473.013029][T11884]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  473.013050][T11884]  ? __alloc_skb+0x112/0x2d0
[  473.013081][T11884]  __alloc_skb+0x112/0x2d0
[  473.013110][T11884]  netlink_sendmsg+0x5c6/0xb30
[  473.013145][T11884]  ? __pfx_netlink_sendmsg+0x10/0x10
[  473.013181][T11884]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  473.013199][T11884]  ? __pfx_netlink_sendmsg+0x10/0x10
[  473.013227][T11884]  __sock_sendmsg+0x21c/0x270
[  473.013253][T11884]  ____sys_sendmsg+0x505/0x830
[  473.013287][T11884]  ? __pfx_____sys_sendmsg+0x10/0x10
[  473.013325][T11884]  ? import_iovec+0x74/0xa0
[  473.013356][T11884]  ___sys_sendmsg+0x21f/0x2a0
[  473.013386][T11884]  ? __pfx____sys_sendmsg+0x10/0x10
[  473.013458][T11884]  ? __fget_files+0x2a/0x420
[  473.013479][T11884]  ? __fget_files+0x3a0/0x420
[  473.013509][T11884]  __x64_sys_sendmsg+0x19b/0x260
[  473.013539][T11884]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  473.013575][T11884]  ? __pfx_ksys_write+0x10/0x10
[  473.013590][T11884]  ? rcu_is_watching+0x15/0xb0
[  473.013616][T11884]  ? do_syscall_64+0xbe/0x3b0
[  473.013640][T11884]  do_syscall_64+0xfa/0x3b0
[  473.013659][T11884]  ? lockdep_hardirqs_on+0x9c/0x150
[  473.013678][T11884]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.013696][T11884]  ? clear_bhb_loop+0x60/0xb0
[  473.013718][T11884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.013737][T11884] RIP: 0033:0x7fe8e158ebe9
[  473.013754][T11884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  473.013771][T11884] RSP: 002b:00007fe8e2498038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  473.013791][T11884] RAX: ffffffffffffffda RBX: 00007fe8e17b5fa0 RCX: 00007fe8e158ebe9
[  473.013806][T11884] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[  473.013817][T11884] RBP: 00007fe8e2498090 R08: 0000000000000000 R09: 0000000000000000
[  473.013829][T11884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.013840][T11884] R13: 00007fe8e17b6038 R14: 00007fe8e17b5fa0 R15: 00007ffd31102858
[  473.013870][T11884]  </TASK>
[  473.032442][ T5920] usb 4-1: can't read configurations, error -71
[  473.438292][T11897] input: syz1 as /devices/virtual/input/input11
[  474.205775][   T30] audit: type=1326 audit(1755936504.836:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11893 comm="syz.1.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8e158ebe9 code=0x7fc00000
[  474.642126][ T5939] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  474.802451][ T5939] usb 2-1: Invalid ep0 maxpacket: 16
[  474.942148][ T5939] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  475.045987][ T6578] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.056665][ T6578] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.138213][ T5939] usb 2-1: Invalid ep0 maxpacket: 16
[  475.172467][ T5939] usb usb2-port1: attempt power cycle
[  475.223779][ T6578] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.236709][ T6578] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.349127][ T6578] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.359542][ T6578] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.486460][ T6578] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.503232][ T6578] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.522512][ T5939] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  475.563867][ T5939] usb 2-1: Invalid ep0 maxpacket: 16
[  475.692115][ T5939] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  475.742884][ T5939] usb 2-1: Invalid ep0 maxpacket: 16
[  475.748607][ T5939] usb usb2-port1: unable to enumerate USB device
[  475.925607][  T979] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  476.102351][  T979] usb 3-1: Using ep0 maxpacket: 16
[  476.121081][  T979] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  476.139366][  T979] usb 3-1: config 0 interface 0 has no altsetting 0
[  476.148282][  T979] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  476.172093][  T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.181353][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  476.194906][  T979] usb 3-1: config 0 descriptor??
[  476.198274][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  476.208779][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  476.217893][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  476.225723][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  476.463941][ T6578] tipc: Disabling bearer <udp:syz2>
[  476.482279][ T6578] tipc: Left network mode
[  476.732729][  T979] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  477.082159][   T30] audit: type=1800 audit(1755936507.716:69): pid=11918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1310" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  477.082413][  T979] usb 3-1: USB disconnect, device number 14
[  477.465862][ T6578] hsr_slave_0: left promiscuous mode
[  477.533594][T11821] Set syz1 is full, maxelem 65536 reached
[  477.872205][ T6578] hsr_slave_1: left promiscuous mode
[  477.878274][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  477.910632][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  477.954271][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  477.961691][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  478.115796][ T6578] veth1_macvtap: left promiscuous mode
[  478.121396][ T6578] veth0_macvtap: left promiscuous mode
[  478.127236][ T6578] veth1_vlan: left promiscuous mode
[  478.135165][ T6578] veth0_vlan: left promiscuous mode
[  478.210580][T11957] 
[  478.212948][T11957] ======================================================
[  478.219974][T11957] WARNING: possible circular locking dependency detected
[  478.226994][T11957] 6.16.0-syzkaller #0 Not tainted
[  478.232010][T11957] ------------------------------------------------------
[  478.239018][T11957] syz.1.1313/11957 is trying to acquire lock:
[  478.245071][T11957] ffff888024da2358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  478.254313][T11957] 
[  478.254313][T11957] but task is already holding lock:
[  478.261661][T11957] ffff888024da1368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  478.271236][T11957] 
[  478.271236][T11957] which lock already depends on the new lock.
[  478.271236][T11957] 
[  478.281626][T11957] 
[  478.281626][T11957] the existing dependency chain (in reverse order) is:
[  478.290628][T11957] 
[  478.290628][T11957] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  478.299056][T11957]        lock_acquire+0x120/0x360
[  478.304077][T11957]        down_write+0x96/0x1f0
[  478.308835][T11957]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  478.315075][T11957]        nbd_start_device+0x16c/0xac0
[  478.320443][T11957]        nbd_ioctl+0x636/0xeb0
[  478.325202][T11957]        blkdev_ioctl+0x5a8/0x6d0
[  478.330221][T11957]        __se_sys_ioctl+0xfc/0x170
[  478.335335][T11957]        do_syscall_64+0xfa/0x3b0
[  478.340352][T11957]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.346758][T11957] 
[  478.346758][T11957] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  478.354588][T11957]        lock_acquire+0x120/0x360
[  478.359607][T11957]        __mutex_lock+0x182/0xe80
[  478.364623][T11957]        refcount_dec_and_mutex_lock+0x30/0xa0
[  478.370773][T11957]        nbd_config_put+0x2c/0x790
[  478.375880][T11957]        nbd_release+0xfe/0x140
[  478.380726][T11957]        bdev_release+0x533/0x650
[  478.385750][T11957]        blkdev_release+0x15/0x20
[  478.390774][T11957]        __fput+0x449/0xa70
[  478.395280][T11957]        fput_close_sync+0x119/0x200
[  478.400561][T11957]        __x64_sys_close+0x7f/0x110
[  478.405764][T11957]        do_syscall_64+0xfa/0x3b0
[  478.410785][T11957]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.417196][T11957] 
[  478.417196][T11957] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  478.425019][T11957]        validate_chain+0xb9b/0x2140
[  478.430297][T11957]        __lock_acquire+0xab9/0xd20
[  478.435484][T11957]        lock_acquire+0x120/0x360
[  478.440500][T11957]        __mutex_lock+0x182/0xe80
[  478.445522][T11957]        __del_gendisk+0x129/0x9e0
[  478.450634][T11957]        del_gendisk+0xe8/0x160
[  478.455488][T11957]        loop_remove+0x42/0xc0
[  478.460252][T11957]        loop_control_ioctl+0x4ac/0x5a0
[  478.465790][T11957]        __se_sys_ioctl+0xfc/0x170
[  478.470901][T11957]        do_syscall_64+0xfa/0x3b0
[  478.475917][T11957]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.482322][T11957] 
[  478.482322][T11957] other info that might help us debug this:
[  478.482322][T11957] 
[  478.492541][T11957] Chain exists of:
[  478.492541][T11957]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  478.492541][T11957] 
[  478.506738][T11957]  Possible unsafe locking scenario:
[  478.506738][T11957] 
[  478.514173][T11957]        CPU0                    CPU1
[  478.519527][T11957]        ----                    ----
[  478.524879][T11957]   rlock(&set->update_nr_hwq_lock);
[  478.530170][T11957]                                lock(&nbd->config_lock);
[  478.537278][T11957]                                lock(&set->update_nr_hwq_lock);
[  478.544993][T11957]   lock(&disk->open_mutex);
[  478.549582][T11957] 
[  478.549582][T11957]  *** DEADLOCK ***
[  478.549582][T11957] 
[  478.557712][T11957] 1 lock held by syz.1.1313/11957:
[  478.562808][T11957]  #0: ffff888024da1368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  478.572826][T11957] 
[  478.572826][T11957] stack backtrace:
[  478.578705][T11957] CPU: 0 UID: 0 PID: 11957 Comm: syz.1.1313 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  478.578724][T11957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  478.578735][T11957] Call Trace:
[  478.578742][T11957]  <TASK>
[  478.578750][T11957]  dump_stack_lvl+0x189/0x250
[  478.578772][T11957]  ? __pfx_dump_stack_lvl+0x10/0x10
[  478.578790][T11957]  ? __pfx__printk+0x10/0x10
[  478.578812][T11957]  ? print_lock_name+0xde/0x100
[  478.578834][T11957]  print_circular_bug+0x2ee/0x310
[  478.578855][T11957]  check_noncircular+0x134/0x160
[  478.578877][T11957]  validate_chain+0xb9b/0x2140
[  478.578896][T11957]  ? stack_depot_save_flags+0x40/0x900
[  478.578921][T11957]  __lock_acquire+0xab9/0xd20
[  478.578939][T11957]  ? __del_gendisk+0x129/0x9e0
[  478.578958][T11957]  lock_acquire+0x120/0x360
[  478.578972][T11957]  ? __del_gendisk+0x129/0x9e0
[  478.578995][T11957]  ? lockdep_unlock+0x89/0x120
[  478.579020][T11957]  __mutex_lock+0x182/0xe80
[  478.579039][T11957]  ? __del_gendisk+0x129/0x9e0
[  478.579062][T11957]  ? __del_gendisk+0x129/0x9e0
[  478.579081][T11957]  ? lockdep_hardirqs_on+0x9c/0x150
[  478.579099][T11957]  ? __pfx___mutex_lock+0x10/0x10
[  478.579117][T11957]  ? __pfx___might_resched+0x10/0x10
[  478.579137][T11957]  ? __lock_acquire+0xab9/0xd20
[  478.579152][T11957]  ? disk_del_events+0xb5/0x210
[  478.579173][T11957]  ? __del_gendisk+0xc1/0x9e0
[  478.579194][T11957]  __del_gendisk+0x129/0x9e0
[  478.579215][T11957]  ? del_gendisk+0xe0/0x160
[  478.579237][T11957]  ? __pfx___del_gendisk+0x10/0x10
[  478.579259][T11957]  ? down_read+0x1ad/0x2e0
[  478.579282][T11957]  del_gendisk+0xe8/0x160
[  478.579303][T11957]  loop_remove+0x42/0xc0
[  478.579329][T11957]  loop_control_ioctl+0x4ac/0x5a0
[  478.579346][T11957]  ? __pfx_loop_control_ioctl+0x10/0x10
[  478.579360][T11957]  ? __fget_files+0x2a/0x420
[  478.579380][T11957]  ? bpf_lsm_file_ioctl+0x9/0x20
[  478.579399][T11957]  ? __pfx_loop_control_ioctl+0x10/0x10
[  478.579414][T11957]  __se_sys_ioctl+0xfc/0x170
[  478.579439][T11957]  do_syscall_64+0xfa/0x3b0
[  478.579458][T11957]  ? lockdep_hardirqs_on+0x9c/0x150
[  478.579474][T11957]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.579491][T11957]  ? clear_bhb_loop+0x60/0xb0
[  478.579509][T11957]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  478.579525][T11957] RIP: 0033:0x7fe8e158ebe9
[  478.579541][T11957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  478.579563][T11957] RSP: 002b:00007fe8e2435038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  478.579580][T11957] RAX: ffffffffffffffda RBX: 00007fe8e17b6270 RCX: 00007fe8e158ebe9
[  478.579593][T11957] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000005
[  478.579603][T11957] RBP: 00007fe8e1611e19 R08: 0000000000000000 R09: 0000000000000000
[  478.579615][T11957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  478.579625][T11957] R13: 00007fe8e17b6308 R14: 00007fe8e17b6270 R15: 00007ffd31102858
[  478.579645][T11957]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  479.139943][ T5852] Bluetooth: hci2: command tx timeout
[  480.065620][ T6578] team0 (unregistering): Port device team_slave_1 removed
[  480.095703][ T6578] team0 (unregistering): Port device team_slave_0 removed
[  480.830495][ T6578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.884851][ T6578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.939462][ T6578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.999872][ T6578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.090154][ T6578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.156376][ T6578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.207174][ T6578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.258028][ T6578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.339567][ T6578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.421657][ T6578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.478789][ T6578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.528407][ T6578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.631564][ T6578] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.680068][ T6578] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.730177][ T6578] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.777501][ T6578] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.889792][ T6578] bridge_slave_1: left allmulticast mode
[  481.897444][ T6578] bridge_slave_1: left promiscuous mode
[  481.905718][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.918713][ T6578] bridge_slave_0: left allmulticast mode
[  481.924584][ T6578] bridge_slave_0: left promiscuous mode
[  481.930300][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.943582][ T6578] bridge_slave_1: left allmulticast mode
[  481.949231][ T6578] bridge_slave_1: left promiscuous mode
[  481.955796][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.967294][ T6578] bridge_slave_0: left allmulticast mode
[  481.974950][ T6578] bridge_slave_0: left promiscuous mode
[  481.980621][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.991780][ T6578] bridge_slave_1: left allmulticast mode
[  481.997585][ T6578] bridge_slave_1: left promiscuous mode
[  482.005915][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.016758][ T6578] bridge_slave_0: left allmulticast mode
[  482.023728][ T6578] bridge_slave_0: left promiscuous mode
[  482.029357][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.038504][ T6578] bridge_slave_1: left allmulticast mode
[  482.044284][ T6578] bridge_slave_1: left promiscuous mode
[  482.049943][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.058459][ T6578] bridge_slave_0: left allmulticast mode
[  482.064200][ T6578] bridge_slave_0: left promiscuous mode
[  482.069989][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.184174][ T6578] bond0 (unregistering): Released all slaves
[  482.254781][ T6578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  482.265002][ T6578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  482.276916][ T6578] bond0 (unregistering): Released all slaves
[  482.359702][ T6578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  482.369254][ T6578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  482.379401][ T6578] bond0 (unregistering): Released all slaves
[  482.388810][ T6578] bond1 (unregistering): Released all slaves
[  482.447889][ T6578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  482.457477][ T6578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  482.467469][ T6578] bond0 (unregistering): Released all slaves
[  482.536986][ T6578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  482.547220][ T6578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  482.557131][ T6578] bond0 (unregistering): Released all slaves
[  482.650803][ T6578] tipc: Disabling bearer <udp:syz2>
[  482.656323][ T6578] tipc: Left network mode
[  482.673333][ T6578] tipc: Left network mode
[  483.277003][ T6578] hsr_slave_0: left promiscuous mode
[  483.284248][ T6578] hsr_slave_1: left promiscuous mode
[  483.289978][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  483.297658][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  483.306802][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  483.314854][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  483.326766][ T6578] hsr_slave_0: left promiscuous mode
[  483.337092][ T6578] hsr_slave_1: left promiscuous mode
[  483.342858][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  483.350388][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  483.364575][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  483.372068][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  483.385369][ T6578] hsr_slave_0: left promiscuous mode
[  483.391218][ T6578] hsr_slave_1: left promiscuous mode
[  483.397042][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  483.405880][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  483.414035][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  483.421528][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  483.436528][ T6578] hsr_slave_0: left promiscuous mode
[  483.442515][ T6578] hsr_slave_1: left promiscuous mode
[  483.448239][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  483.456071][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_0
[  483.463661][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  483.471032][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_1
[  483.486627][ T6578] veth1_macvtap: left promiscuous mode
[  483.492161][ T6578] veth0_macvtap: left promiscuous mode
[  483.497650][ T6578] veth1_vlan: left promiscuous mode
[  483.502939][ T6578] veth0_vlan: left promiscuous mode
[  483.508979][ T6578] veth0_macvtap: left promiscuous mode
[  483.514591][ T6578] veth1_vlan: left promiscuous mode
[  483.519805][ T6578] veth0_vlan: left promiscuous mode
[  483.526096][ T6578] veth0_macvtap: left promiscuous mode
[  483.531623][ T6578] veth1_vlan: left promiscuous mode
[  483.536910][ T6578] veth0_vlan: left promiscuous mode
[  483.543001][ T6578] veth1_macvtap: left promiscuous mode
[  483.548465][ T6578] veth0_macvtap: left promiscuous mode
[  483.554038][ T6578] veth1_vlan: left promiscuous mode
[  483.559269][ T6578] veth0_vlan: left promiscuous mode
[  483.797165][ T6578] team0 (unregistering): Port device team_slave_1 removed
[  483.815509][ T6578] team0 (unregistering): Port device team_slave_0 removed
[  483.945832][ T6578] team0 (unregistering): Port device team_slave_1 removed
[  483.965628][ T6578] team0 (unregistering): Port device team_slave_0 removed
[  484.093423][ T6578] team0 (unregistering): Port device team_slave_1 removed
[  484.109422][ T6578] team0 (unregistering): Port device team_slave_0 removed
[  484.241933][ T6578] team0 (unregistering): Port device team_slave_1 removed
[  484.274563][ T6578] team0 (unregistering): Port device team_slave_0 removed