last executing test programs:

5m48.10970464s ago: executing program 4 (id=29):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x121100)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x1, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) (async)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x1, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}})
socket$tipc(0x1e, 0x2, 0x0) (async)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001c000104000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="2000ea080a0001"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001c000104000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="2000ea080a0001"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4)
syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x17, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x17, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'})
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0)
r5 = fcntl$getown(r1, 0x9)
fcntl$lock(r4, 0x7, &(0x7f00000001c0)={0x2, 0x3, 0x44a, 0x0, r5})
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000080)={0x20, 0xa, 0x10, "5f13ba3b11720c3f4b2950ce9f43b745"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000080)={0x20, 0xa, 0x10, "5f13ba3b11720c3f4b2950ce9f43b745"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$tipc(r1, &(0x7f0000000040), 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x1f)

5m44.07954964s ago: executing program 4 (id=34):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.allow\x00', &(0x7f0000000280), 0x4000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd97a6", 0x0}, 0x50)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmsg$inet(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000011c0)='z', 0x1}], 0x1}, 0x18840)

5m42.967734767s ago: executing program 4 (id=36):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r7 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000780)={0x1, @pix_mp={0x3, 0x2, 0x48524742, 0x7, 0x3, [{0x804, 0x8}, {0xfff, 0x2}, {0x2, 0x7fffffff}, {0x0, 0x5}, {0x5, 0x14c}, {0x9, 0x3}, {0xfffffffd}, {0x4, 0x3}], 0x9, 0x6, 0x6, 0x2}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r8, &(0x7f0000000040), 0x0}, 0x20)

5m41.203577628s ago: executing program 4 (id=38):
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
sendfile(r1, r1, 0x0, 0x24002de8)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000480)='./file0\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000100), 0x1001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r4}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000180)}, 0x20)
syz_clone(0x2000000, &(0x7f0000000000)="62ebaac250c645ca41528bab6631ee31da3732832512d0", 0x17, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)="3458c60750270762d31d8edd48394b675e43bec2f382e3ec5dc4da37a6f7bef251e9a25625f6b3866a45b848e3bb54e65587d97f1656f151111a6edf6b5b7a21a9f3a5b4be9d956568da0813c327a88becbb4ebf706d81704ca059b689c1909a444a5a05e8f29726029a2b98d1a956de7b544514ba64a3793850f4a7a526f5a10f977903947e21f4eaf8bae72c3dbd50fc5346ffffc9d152dd818a628ece67f585")
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020)

5m37.613339569s ago: executing program 4 (id=46):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe2(&(0x7f0000000080), 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000080))
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000600)={0x0, "126ebf7d9fdf9aec84c0fe4cb734f282d46938152a71b9399c8d590c79cfaf41", 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000})
r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00')
preadv(r5, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xc, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001e003b1500"/20, @ANYRES32=0x0, @ANYBLOB="800100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="8004000000000000"], 0x48}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
socket$rds(0x15, 0x5, 0x0)

5m31.59168927s ago: executing program 4 (id=55):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x128, 0x11, 0x148, 0x0, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x822, 0x4, 0x1, 0x1}}, @common=@inet=@ecn={{0x28}, {0x50, 0x0, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x579, 0xe, [0x6, 0x2, 0x1e, 0x24, 0x800, 0x2e, 0x28, 0xd, 0x22, 0x19, 0x32, 0x3, 0x32, 0x1, 0x40, 0x14], 0x1, 0x4, 0xffffffffffffffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x10000, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x10d000, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pipe(&(0x7f0000000380))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r5, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r6, 0x28543634fae43ad, 0x0, 0x0, {0xd}}, 0x14}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000202"], 0x1c}}, 0x0)

5m29.103508076s ago: executing program 32 (id=55):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x128, 0x11, 0x148, 0x0, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x822, 0x4, 0x1, 0x1}}, @common=@inet=@ecn={{0x28}, {0x50, 0x0, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x579, 0xe, [0x6, 0x2, 0x1e, 0x24, 0x800, 0x2e, 0x28, 0xd, 0x22, 0x19, 0x32, 0x3, 0x32, 0x1, 0x40, 0x14], 0x1, 0x4, 0xffffffffffffffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x10000, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x10d000, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pipe(&(0x7f0000000380))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r5, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r6, 0x28543634fae43ad, 0x0, 0x0, {0xd}}, 0x14}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000202"], 0x1c}}, 0x0)

4m42.266141808s ago: executing program 2 (id=155):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

4m42.091262738s ago: executing program 2 (id=156):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r2, 0x303, 0x4, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000e8873222a77e1befb5a93468d1c5c3758fe2c2a1cfe6", @ANYRES16=r2, @ANYBLOB="000128bd7000fedbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b00070000000600110004000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000100000006001100000800000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000500000006001100dd040000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00ff0700000600110009000000"], 0xec}, 0x1, 0x0, 0x0, 0x44000}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x2}}, './file0\x00'})
ioctl$FIOCLEX(r3, 0x5451) (async)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 64)
sigaltstack(0x0, 0x0) (rerun: 64)

4m41.451554592s ago: executing program 2 (id=157):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x559, 0x401, {}, {}, {}, 0x1, @can={{}, 0x0, 0x3, 0x0, 0x0, "ce2a4fa700aa108b"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x800)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
mprotect(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x8)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x13, 0x8, 0x100, 0x0})
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r7, 0x2284, &(0x7f0000000040))
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}})
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000100)={0x0, 0x6, 0xa8, 0x8001, 0x2, 0xfffffffffffff427})

4m40.261485328s ago: executing program 2 (id=159):
r0 = socket$inet(0x2, 0x3, 0x5)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000002240)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x1000, 0x756, {{0x8, 0x4, 0x2, 0x37, 0x20, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private, @empty, {[@rr={0x7, 0xb, 0x14, [@broadcast, @remote]}]}}}}})
r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002200)={&(0x7f00000020c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0xa, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000002100)=""/193, 0x28, 0xc1, 0x1, 0x5, 0x10000, @value}, 0x28)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x101, 0x20, 0xd6}, &(0x7f0000000180)=0x18)
keyctl$read(0x2, r1, &(0x7f00000000c0)=""/4096, 0x1000)
keyctl$read(0xb, r1, &(0x7f00000010c0)=""/4096, 0x1000)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff705"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

4m40.035553002s ago: executing program 2 (id=161):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x4, 0x2})
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0)
bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38", 0x14}], 0x3}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000200)=""/82, 0x52}], 0x2}, 0x10042)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/35, 0x23}, 0x90080001}], 0x1, 0x10020, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, r7, 0x1, 0x3, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

4m38.88665875s ago: executing program 2 (id=163):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendfile(r2, r1, 0x0, 0x20000023893)

4m23.612879121s ago: executing program 33 (id=163):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendfile(r2, r1, 0x0, 0x20000023893)

3m52.601055947s ago: executing program 5 (id=268):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x2010000}, 0x40000)

3m51.018460928s ago: executing program 5 (id=271):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x80000000, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010902}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), r5)
syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r8, 0x58, &(0x7f0000000100)}, 0x87)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b80)={&(0x7f0000000000)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r11=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x6c, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x6c}}, 0x20004040)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000}, 0x40044)

3m48.417083259s ago: executing program 5 (id=279):
socket$kcm(0x10, 0x2, 0x0)
syz_emit_ethernet(0x48, &(0x7f0000000400)={@empty, @random="ff00ecb0c74d", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x4, 0x6, 0x0, @empty, @private=0xa010101}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"3fd73387fce13fd09f974d6b3f9b"}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone3(&(0x7f0000000280)={0x100000800, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = epoll_create1(0x0)
r7 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000008c0))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f00000000c0))
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

3m47.280018848s ago: executing program 5 (id=281):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x128, 0x11, 0x148, 0x0, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x822, 0x4, 0x1, 0x1}}, @common=@inet=@ecn={{0x28}, {0x50, 0x0, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x579, 0xe, [0x6, 0x2, 0x1e, 0x24, 0x800, 0x2e, 0x28, 0xd, 0x22, 0x19, 0x32, 0x3, 0x32, 0x1, 0x40, 0x14], 0x1, 0x4, 0xffffffffffffffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x10000, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10d000, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pipe(&(0x7f0000000380))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r5, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000202"], 0x1c}}, 0x0)

3m46.016242974s ago: executing program 5 (id=283):
syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x1}, {0x2, 0xf}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)
socket(0x15, 0x5, 0x0)
r6 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x8, 0x1})
io_uring_enter(r6, 0x1ffe, 0x0, 0x0, 0x0, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r10}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000000680), 0x2, r10}, 0x38)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x2010, r10, 0xfefd2000)
mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r11 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f00000000c0)={r9, 0x800, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a7ddf8a69ea917ded5ba193b3e7772fd29f35239d2", "530bf65043114b2e53000006000000000010e200", [0x1000000000]}})
r12 = dup(r11)
write$UHID_INPUT(r12, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)

3m44.011148102s ago: executing program 5 (id=289):
socket$isdn(0x22, 0x2, 0x26)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff4f) (async)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r2 = getpid()
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYRES16=0x0], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00v\x00\r\v'], 0x30}}, 0x0) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x118, 0x4) (async)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async)
recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)=0x9) (async)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2202, 0x0)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="1e", 0x1}], 0x1) (async)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)

3m28.247241856s ago: executing program 34 (id=289):
socket$isdn(0x22, 0x2, 0x26)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff4f) (async)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r2 = getpid()
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYRES16=0x0], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00v\x00\r\v'], 0x30}}, 0x0) (async)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x118, 0x4) (async)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async)
recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)=0x9) (async)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2202, 0x0)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="1e", 0x1}], 0x1) (async)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)

2m45.443981333s ago: executing program 3 (id=456):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)

2m43.532846197s ago: executing program 3 (id=460):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)

2m42.015860731s ago: executing program 3 (id=464):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000})
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r6 = syz_open_procfs(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, 0x0)
setresuid(0x0, r7, 0x0)
writev(r6, &(0x7f00000000c0)=[{0x0}], 0x1)

2m40.617863738s ago: executing program 3 (id=467):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="a84d01f22eda8d45cc0968c6cbf5296f4ae5a6c71ffd9570892335e9cf99eefae3463fbde93cd34a79c28626", @ANYRESOCT], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x42c})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000434000/0x3000)=nil, 0x3000})
r3 = memfd_secret(0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x2e}, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000001400)="0000000000000000000051229dc9", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r1)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
keyctl$clear(0x11, 0xfffffffffffffffd)

2m39.529280717s ago: executing program 3 (id=473):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x128, 0x11, 0x148, 0x0, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x822, 0x4, 0x1, 0x1}}, @common=@inet=@ecn={{0x28}, {0x50, 0x0, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x579, 0xe, [0x6, 0x2, 0x1e, 0x24, 0x800, 0x2e, 0x28, 0xd, 0x22, 0x19, 0x32, 0x3, 0x32, 0x1, 0x40, 0x14], 0x1, 0x4, 0xffffffffffffffff}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x10000, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10d000, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pipe(&(0x7f0000000380))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r5, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r6, 0x28543634fae43ad, 0x0, 0x0, {0xd}}, 0x14}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)

2m39.155316689s ago: executing program 3 (id=476):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x40)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
kcmp(0x0, 0x0, 0x4, r2, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000300), 0x6)
close(r1)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="06130000ffff00000000", @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f000000c400)={0x2020, 0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000000200)={0x50, 0x0, r8, {0x7, 0x1f, 0xffffffff, 0xa5a020b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m38.4974729s ago: executing program 35 (id=476):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x40)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
kcmp(0x0, 0x0, 0x4, r2, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000300), 0x6)
close(r1)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="06130000ffff00000000", @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f000000c400)={0x2020, 0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000000200)={0x50, 0x0, r8, {0x7, 0x1f, 0xffffffff, 0xa5a020b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009985f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4d6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa350448ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

16.51012383s ago: executing program 8 (id=808):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r5, 0x0, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private1}, @in={0x2, 0x0, @private}}]}, 0xd8}}, 0x0)
mprotect(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x8)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x13, 0x8, 0x100, 0x0})
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r7, 0x2284, &(0x7f0000000040))

13.913657185s ago: executing program 8 (id=813):
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRES32], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0xf1, 0x9c}}]}}]}}, 0x0)
pipe(&(0x7f0000000080))
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x20)

12.70364902s ago: executing program 7 (id=821):
r0 = socket$netlink(0x10, 0x3, 0xb)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f00000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r2}, 0x10)
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x0, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00')
r5 = getpid()
syz_pidfd_open(r5, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)
r6 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c)
setsockopt$inet6_tcp_int(r6, 0x6, 0x12, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)={0x20, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x66, 0x0, 0x0, @u32=0x800}]}, 0x20}], 0x1}, 0x200080c4)

10.872469192s ago: executing program 7 (id=824):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000})
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX])

10.802326969s ago: executing program 8 (id=825):
socket$kcm(0x10, 0x2, 0x0)
syz_emit_ethernet(0x48, &(0x7f0000000400)={@empty, @random="ff00ecb0c74d", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x4, 0x6, 0x0, @empty, @private=0xa010101}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"3fd73387fce13fd09f974d6b3f9b"}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone3(&(0x7f0000000280)={0x100000800, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = epoll_create1(0x0)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000008c0))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f00000000c0))
getdents64(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

9.850658501s ago: executing program 7 (id=826):
socket(0x2, 0x80805, 0x0)
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
vmsplice(r0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="3559ef4f", 0x4}], 0x1, 0x2)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000440)={0x28, 0x6, r3, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0xfffffffffffffe72, 0x2})
shutdown(r1, 0x0)
close(0x3)
r4 = open(0x0, 0x169042, 0x0)
ftruncate(r4, 0x88801)
r5 = socket$inet6(0xa, 0x6, 0x0)
dup(r5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x5}, 0xfffffffffffffff9)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUTCMAP(r9, 0x4605, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=[0x4, 0xf1c1, 0x9], &(0x7f0000000140)=[0x4], &(0x7f0000000180)=[0x2, 0x2, 0x5, 0x5, 0x7, 0x84f3], &(0x7f00000001c0)})
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000240), 0x400, &(0x7f0000000340)={[], [{@smackfsroot={'smackfsroot', 0x3d, '&+-'}}, {@permit_directio}, {@flag='lazytime'}, {@func={'func', 0x3d, 'FILE_MMAP'}}]})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

9.619811486s ago: executing program 6 (id=828):
socket$nl_route(0x10, 0x3, 0x0)
pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00')
syz_emit_ethernet(0x6a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x34, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @sack={0x5, 0x2}, @timestamp={0x8, 0xa}, @generic={0x1, 0xb, "2b26b5a27acf19fc23"}, @fastopen={0x22, 0x4, "ce27"}]}}}}}}}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa3, 0x1, 0x7b, 0x10, 0x5ac, 0x263, 0x6f9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x6a, 0x2}}]}}]}}, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
close_range(r0, r0, 0x2)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

8.3591849s ago: executing program 1 (id=829):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a0000000000000000", @ANYRES32], 0x20)
r0 = io_uring_setup(0x1cb6, &(0x7f00000017c0)={0x0, 0x5120, 0x800, 0xfffffffd, 0x359})
r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0x5cfa, 0x4)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r4, &(0x7f0000000480), 0x10)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000030000000500000000000000000000000500000000000000ffffffff"])
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0xe0, 0x2, 0x0})
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r9, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x68, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4)
bind$inet(r6, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x602a02, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x10)
memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10)

8.141692533s ago: executing program 1 (id=830):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x20000002, 0x4)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000280)=0x90)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x2, 0xa, 0x73)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6.869827108s ago: executing program 1 (id=832):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3})
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x521)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f)

6.868972802s ago: executing program 6 (id=833):
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x9, 0x0, 0x0, 0xfcab})
syz_emit_ethernet(0x92, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x5c, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x1ff}, @md5sig={0x13, 0xfffffffffffffda6, "d082e275205e12a2f7dd21cc13c33d89"}, @eol, @generic={0x22, 0x6, "da643453"}, @sack={0x5, 0x16, [0xa, 0x10, 0x6, 0xfffffff9, 0x7]}, @timestamp={0x8, 0xa, 0x80}]}}}}}}}}, 0x0)

5.840036498s ago: executing program 1 (id=835):
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRES32], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0xf1, 0x9c}}]}}]}}, 0x0)
pipe(&(0x7f0000000080))
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x20)

5.727629644s ago: executing program 6 (id=836):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00cb1b1414aa5a7eb75370b21b1592af9997c26816cb46a6553bb2f2294d57d0ca2f064bc4512f9ad00f0490c9df1a6feba83d4857916bbd307aeed22e5320afe6cdaac0c24556c845996d88cde1da7af727cb84ed638b02e0114fd9b47258f82d57506218f75711c1017ac125fcc394ce72c9537a0b3421b2e96dfb0369502d5e950f5a043aca5333a673", @ANYBLOB="a130ff92ffaf7bdb6d2f3feee882d9f49c396531b8b094efb23b8cc330e1c7bdfbd9bc98c7ba57b8ab54db6fa15a1bf8cd5ea94a66f5001cd6a5f793612455eeeff8141bef8ad4e5e6ac5d5d58649324ea27", @ANYRESHEX=r0], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket(0x10, 0x3, 0x0)
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x31, 0x800000000004, @tid=r1}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
read$midi(0xffffffffffffffff, 0x0, 0x43)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x972443162a1c4fa7)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6)
timer_create(0x2, 0x0, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0)
timer_settime(r5, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000240)={0x77359400}, 0x0)
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000040)={0x5, @raw_data="08dace1554cb5956ee662ba36f6485f6e3e5146bf27deddf43f8c909f548a10df62a5c8d486e9f6e3451bbaf70078aa35ae276c29c521584f39af6eeb5c000d7141fb70749b86775d8f1f1b5b1e3dc6073d66d9f4cf292355a36b04656a72a684df3b005a8871d52e56ce19df5afb08a8e3a05604903b365ad1f3c6e050aa44be370da53ee367be4b03a830e894521a48c99c02cb5445a6fd4be5900d0061543619f82821592a5e7ae7bb7ade47cfd73b1ed9d5e4433c3c9ed45292247359a7b6cfd356f872a488e"})
set_mempolicy(0x8006, 0x0, 0x5)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb)

4.944750002s ago: executing program 7 (id=837):
r0 = socket$inet(0x2, 0x1, 0x100)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000c1e318b700000000000000000000000000000000000000000000000000000002001a00ffffffff00000000"]}, 0x108)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv-cbc-aes-sha256-neon\x00'}, 0x58)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x0, 0x148, 0x120, 0x148, 0x1d8, 0x240, 0x240, 0x1d8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298)
syz_emit_ethernet(0xf3, &(0x7f0000000140)={@remote, @empty, @void, {@llc_tr={0x11, {@llc={0x2, 0xaa, "0314", "2cb807a7a25244a4048b99440055ebe0db228f948185b40a40d8a8bf3a5ab73d27697ba55569352a878cc9e9baa0ae34768aec988180df6a549f1be447f84d5a72ff4ae564e16f2e8052cc66eb1a33f4b07d950e191538046a10cff07f90c643c151920972e58aeadec2c2aff53983cb435add3e92de16ff41ae386bf61a15340e32da4379d8a5a40012a7c4f4252dae72edfc7736355c16f971d40d0569766d6f96a3e66cd5431cd903f0852cece2013b8093be22c486a60bfd338fa8951d1df90e24dbf1e2e90e8a9c61ffd1fd010010000000000000d759ab9d832110e9d165"}}}}}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvlan0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a0002"], 0x48}}, 0x0)
getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000016c0)={@remote, <r6=>0x0}, &(0x7f0000001700)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001800)={'sit0\x00', &(0x7f0000001740)={'gretap0\x00', <r7=>0x0, 0x10, 0x8, 0x7060000, 0x3, {{0x26, 0x4, 0x2, 0x3, 0x98, 0x64, 0x0, 0x5, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@ssrr={0x89, 0xf, 0xc2, [@dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp={0x44, 0xc, 0xa, 0x0, 0xf, [0x1, 0x2]}, @cipso={0x86, 0x3c, 0x2, [{0x4, 0x6, "5a3a71c7"}, {0x0, 0x4, "491d"}, {0x0, 0x4, "d1fa"}, {0x5, 0xa, "bfffd904b0393f76"}, {0x7, 0xd, "3b944be97ca71706bb6ae3"}, {0x5, 0xc, "87489bebea54f260e429"}, {0x7, 0x5, "e343ea"}]}, @ssrr={0x89, 0x7, 0xca, [@dev={0xac, 0x14, 0x14, 0x12}]}, @timestamp_prespec={0x44, 0x24, 0xa4, 0x3, 0x4, [{@multicast1, 0xffffffbb}, {@rand_addr=0x64010102, 0x5}, {@loopback, 0x8}, {@broadcast, 0xb}]}]}}}}})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
r9 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r10, 0x1, {}, 0xfe}, 0x18)
sendmsg$can_j1939(r8, &(0x7f0000000140)={&(0x7f0000000180)={0x1d, r10, 0x800000000, {0x0, 0xf0, 0x4}, 0xfd}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x48010}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001900)={'syztnl0\x00', &(0x7f0000001840)={'syztnl2\x00', <r11=>0x0, 0x7, 0x7, 0x1000, 0x7, {{0x24, 0x4, 0x2, 0x5, 0x90, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast1, @remote, {[@timestamp_addr={0x44, 0x14, 0xc8, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc35}, {@local, 0x3}]}, @noop, @timestamp_addr={0x44, 0x54, 0x92, 0x1, 0x6, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x5}, {@private=0xa010102, 0xb}, {@broadcast, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0x7c}, {@broadcast}, {@multicast2, 0x2}, {@multicast1, 0x81}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x69, [@dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @empty]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1a28241}, 0xc, &(0x7f0000001b40)={&(0x7f0000001940)={0x1fc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008880)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0xf)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003200), 0x80001, 0x0)
r13 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r13}})
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="80100000", @ANYRES16=r12, @ANYBLOB="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"], 0x1080}, 0x1, 0x0, 0x0, 0x20000000}, 0x240040c2)

4.726427413s ago: executing program 8 (id=839):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xef, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

4.381887303s ago: executing program 6 (id=840):
r0 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0))
io_uring_enter(r0, 0x2def, 0x1a38, 0x0, 0x0, 0x0) (async)
io_uring_enter(r0, 0x2def, 0x1a38, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ffffffff0000001500000000080012000000040000000000000006000000000000000000000000000000fe8000000000000000000000000000aaff01000000000000000000ab"], 0x80}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="e759e89b0459a506ad037564cfdbf5e2c8717896aa27f6259b5d2908c6", 0x1d}], 0x5}, 0x0) (async)
sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="e759e89b0459a506ad037564cfdbf5e2c8717896aa27f6259b5d2908c6", 0x1d}], 0x5}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, 0x0)

4.085996575s ago: executing program 8 (id=841):
openat$random(0xffffffffffffff9c, 0x0, 0x40202, 0x0)
ioprio_set$pid(0x1, 0x0, 0x4007)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
unshare(0xc000600)
syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
r0 = getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x20, 0x0, @fd_index=0x7, 0x9, 0x0, 0x57dc})
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
listen(r4, 0x0)
accept4(r4, 0x0, 0x0, 0x80800)
r5 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
brk(0x200000ffc000)
r6 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)=ANY=[], 0x48, 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x45)

3.708066111s ago: executing program 6 (id=843):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a58000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028"], 0x80}}, 0x0)
syz_usb_connect$uac1(0x0, 0xe7, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x0, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@processing_unit={0xd, 0x24, 0x7, 0x2, 0x2, 0x7, "3a0300ed11ef"}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x8, 0xf, "f752"}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x6, "35966f7a"}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x7, 0x4, "6b236184"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x2, 0x4, 0x3, 0x7, "6c2ae0d762ee7168"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0xdc, "6cf73de2c553d4a2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0xcc, 0x2, {0x7, 0x25, 0x1, 0x2, 0x8, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x7, 0x9}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x50a, 0x8, 0x2}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x2, 0x1, 0x4, "933960"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xdb, 0x1001}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x81, 0x6, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x3, 0xfd, {0x7, 0x25, 0x1, 0x1, 0x1, 0x5}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0x0, 0x4, 0xc7, 0x9}, 0x0, 0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a00000000000000000700"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x13)

3.288776107s ago: executing program 7 (id=844):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xead, 0x0, 0x0, 0x0, 0xffff0000}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e17da495aefd6b5, &(0x7f0000000740)={0x3, {{0xa, 0x4e22, 0x52, @mcast1, 0xa}}, {{0xa, 0x4e24, 0x83, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}}}, 0x108)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0x80984120, &(0x7f0000000100))
syz_open_dev$dri(0x0, 0x8, 0x1e1c4)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2802000180001ac0f"], 0x114}, {&(0x7f0000000040)={0xb8, 0x21, 0x100, 0x70bd2b, 0x25dfd9ff, "", [@generic="d1ca7b894b6accaf311b5d743fc73390a2ccd9e98a863781df393931c3b1fd7aff1c8eac421316051ca47cad32dfba012e2bc5b6d66f2ca09040495830b8d7977ed833d36811f6adbfb167c737f5c108261c013514f7465b9b493a05645c34fed5e5f86ad7287b7ffb1fdbd6bff852d5720be7e0984a9826eb763f94fe12bd40cf68689aec234d6caf05d9533f9d113efae2b726d061319636ae40", @nested={0xc, 0x99, 0x0, 0x1, [@typed={0x8, 0x3f8, 0x0, 0x0, @u32=0x6}]}]}, 0xb8}, {&(0x7f0000000200)={0x27c, 0x3b, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@generic="0da052e3c973f2696410875835dfb541da7b2feffce6f2e227d793cf1bba177d64ae93bbb9efe06244ee0e8ebf56408e58f8527016251618efd2678802b49d64f606790bcb8beb9d9fd126cc7168ff6be6d52ed08c7cead7b075b5c20c6d8d958e0a9d18e5236fb12fb18ec46172725534337163cc207a9871f5180285cebd14b12c39b5d02536e1fea8c5ab64904f52d54643e5d075fd881d391cde2306a89be2b00c1d347af7bfbd", @generic="b1ab5405af0a84da95e770d1cf297a901a30e60f508a44109482be310b6ac87aba1fd1de56cc977f8a260beb48d296265cba526e7a528d1766681b307337871f60a59223fd", @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@private0}, @typed={0x6, 0x101, 0x0, 0x0, @str='\\\x00'}, @generic="6208cbf9023f4d9c5c32009f3a4fd77894eebcca259b0b5ff4249689a2d2bf74dfac2427f171db419458661fb0e6687af4876d31d51dfcee9a8aa7cc53d3cc6aeb37c5a145516fad3eba7ae4a9b690096f0c3c20a434716f74a31a29b93b9cbaa060323cedde7f9d3d12fe3bd70db0bc4b92279a97fd3bb27037af5e6f12c15ac22564addeff185959ebed1a79364f19d6e051326d52b82039bdc4bb4017ee8458dc308487d9181c7b875498d89806", @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0xff}}, @generic="f512fe8645e7c108cae8fccfc53a4f129d253e52df5bc5724a44602f0efbbee939e9071a1779c6df26d783244027", @nested={0x6f, 0x127, 0x0, 0x1, [@typed={0x8, 0x99, 0x0, 0x0, @u32}, @nested={0x4, 0x10b}, @generic="ad29ce703db637d34972a1964a506500037261efd71f48ad9bf5a749a162f0293e1961485a80163e7570e0b80d7c1131635a24a0cbec06", @nested={0x4, 0x36}, @generic="2923ba8553c82c2964847c6da84a2b79f7a0c095e531f0b36228162baa7439bf002f8b91"]}]}, 0x27c}, {&(0x7f0000000480)={0x150, 0x31, 0x8, 0x70bd29, 0x25dfdbfe, "", [@nested={0x12a, 0x123, 0x0, 0x1, [@nested={0x4, 0x4a}, @generic="b109a4095654fd147e1951afa111c9a1fc1b2b8cc9e2db0f8c14c588fb0f6321dde6eeefa46ba8ea5c30d1a035119c2847b7fbf0b435bd0542c3ced078ece7a2406f40076a3490b112e19a291f7f75d4a9d5ed8b8bb6193d8f74b4ae2c93c9eeac7b7f0c7a01a3c9dfd62b57a8df696e35482f15cfda34eae50c0ca9eac3048ac9b88c4e47c8495211c0be04cb79e27afd8f07865f6ced55706760902545491113bc2d6bc4ef46c95ddd91aac3e7ace4f8de4ee1f4495591b2bc50bfee264e2c1d2ad79e1f91327127c6491a81", @nested={0x4, 0xe9}, @generic="c7751fcaab24c590cc6a2003616ca361bb7f7b5bf95a1e6364131c32e664741f86e7b287ac", @generic="073c653858888de6d7d9fbba8afd9bcba4ee5239c6ee5001", @nested={0x4, 0x14c}, @nested={0x4, 0x23}, @nested={0x4, 0x38}, @nested={0x4, 0x80}, @nested={0x4, 0x95}]}, @typed={0x14, 0xa4, 0x0, 0x0, @ipv6=@mcast2}]}, 0x150}], 0x4, 0x0, 0x0, 0x1}, 0x0)

3.204639211s ago: executing program 1 (id=845):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="11072abd7000ffdbdf2505000000080003", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x2010000}, 0x40000)

2.176487704s ago: executing program 7 (id=847):
flock(0xffffffffffffffff, 0x5)
gettid()
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x3, 0x0)
move_pages(r2, 0x9, &(0x7f0000000200)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000340)=[0x8, 0x64be, 0x6, 0x91c, 0x1, 0x7], &(0x7f0000000380)=[0x0], 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0)
r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x3b8, 0x1e8, 0x1e8, 0x100, 0x2d0, 0x2d0, 0x2d0, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4, 0x8, {0x7ff}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@empty, @remote, 0xffffffff, 0xff000000, 0x4, 0xa, {@empty, {[0xff, 0x7f, 0x0, 0xff, 0xff, 0x7f]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x3, 0x400, 0x1, 0xa9, 0x3, 'pim6reg1\x00', 'team_slave_0\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408)
close(0x3)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000180))
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x66, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00)
syz_usb_disconnect(r4)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0)

1.961359241s ago: executing program 1 (id=849):
socket$kcm(0x10, 0x2, 0x0)
syz_emit_ethernet(0x48, &(0x7f0000000400)={@empty, @random="ff00ecb0c74d", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x4, 0x6, 0x0, @empty, @private=0xa010101}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"3fd73387fce13fd09f974d6b3f9b"}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone3(&(0x7f0000000280)={0x100000800, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = epoll_create1(0x0)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000008c0))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f00000000c0))
getdents64(0xffffffffffffffff, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r7=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1.881791295s ago: executing program 0 (id=850):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8990, 0x0)

1.587993279s ago: executing program 0 (id=851):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f0000000240)='\f', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0xa00}, 0x8)

1.307741584s ago: executing program 0 (id=852):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="dc58f2ac144dd41e21278ef4a5bc140e1a602a329e4d2524c1833b4bcb12f779dff37a36cd9fb150de675fa0f60abf8f342643f735ccd8f70ce2487783be6d153ff3cf352a5ee1d4d691e455cb05cefba088dd1277098d522afbd4872f042155193c6a2dac4d7626d13ca4cd1dc1e3d7ee2bcd3c6e27a7071dbaacb40b4f1a4e62bb7a61d7e50d15ab2240903c0930e02f81978f9c1e13ec9f22a1d0b8c2093d1e9f05d1073d3ddf75b1bc89564e678f5b752ce6db7d96f2a90f971d97d5e5025ddfe5b7fb4be5373371734b5909", 0xce)
r1 = syz_open_dev$swradio(&(0x7f0000000900), 0x1, 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f00000039c0)="f6895f0a78cbf8c58697958d1e00db0ee3122a4821dc39a2909e9941cb62e446264bf80600ebd9f14eafbda960c95df359db0f1fbe294b6965645c08d9546f221dd157abb09a84c7462074d092cfa901571800342b11366ff660e7cd83251fc76b91425b3b324f356886cb0379722793678f4ed5127ece42", 0x78}, {&(0x7f0000003a40)="2725bf41d64e2883", 0x8}], 0x2}}], 0x1, 0x12)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000009c0)={0xfa50000, 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r4 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x40001)
recvmmsg(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/247, 0xf7}], 0x1}, 0x7fff}], 0x1, 0x2101, 0x0)

887.61741ms ago: executing program 0 (id=853):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

784.101078ms ago: executing program 0 (id=854):
readlink(0x0, 0x0, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000200)={0x1, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @local}}}, 0x108)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

267.991323ms ago: executing program 8 (id=855):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="953d3ac09bf64a5f5f", @ANYBLOB="fe0600000000000000000000000000bb"], 0xf8}}, 0x24004040)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r3 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r3, 0x0, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x0, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8})
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r5, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0)
setresuid(0x0, 0xee00, 0xee01)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8000, 0x3, 0x8, 0x7, 0x0, 0x0, 0x47}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

91.679888ms ago: executing program 0 (id=856):
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRES32], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x90, 0xf1, 0x9c}}]}}]}}, 0x0)
pipe(&(0x7f0000000080))
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socket$kcm(0x11, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x20)

0s ago: executing program 6 (id=857):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000480)='net/fib_trie\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x20000880)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18)
preadv(r1, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
ioctl$NS_GET_PARENT(r8, 0xb702, 0x0)
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r9, 0x8)
accept4(r9, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$netlink(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

7695][ T7884]  ? rcu_is_watching+0x15/0xb0
[  306.387726][ T7884]  ? do_syscall_64+0xbe/0x3b0
[  306.387754][ T7884]  do_syscall_64+0xfa/0x3b0
[  306.387777][ T7884]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.387799][ T7884]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.387819][ T7884]  ? clear_bhb_loop+0x60/0xb0
[  306.387845][ T7884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.387865][ T7884] RIP: 0033:0x7f5901d8e969
[  306.387883][ T7884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.387902][ T7884] RSP: 002b:00007f5902bd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.387924][ T7884] RAX: ffffffffffffffda RBX: 00007f5901fb5fa0 RCX: 00007f5901d8e969
[  306.387941][ T7884] RDX: 0000000020088004 RSI: 0000200000000480 RDI: 0000000000000003
[  306.387954][ T7884] RBP: 00007f5902bd8090 R08: 0000000000000000 R09: 0000000000000000
[  306.387966][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.387978][ T7884] R13: 0000000000000000 R14: 00007f5901fb5fa0 R15: 00007ffdee4f6b38
[  306.388011][ T7884]  </TASK>
[  306.689444][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.706647][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.019955][ T7867] Driver unsupported XDP return value 0 on prog  (id 140) dev N/A, expect packet loss!
[  307.069349][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.107195][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.115985][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.164039][ T7214] usb 2-1: USB disconnect, device number 21
[  307.172508][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.181864][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.329683][ T7886] lo speed is unknown, defaulting to 1000
[  307.439084][ T7213] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  307.519067][ T4048] bridge_slave_1: left allmulticast mode
[  307.524814][ T4048] bridge_slave_1: left promiscuous mode
[  307.538855][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.891195][ T7894] loop8: detected capacity change from 0 to 1
[  307.912843][ T7214] libceph: connect (1)[c::]:6789 error -101
[  307.972399][ T7214] libceph: mon0 (1)[c::]:6789 connect error
[  308.005981][ T7894] Dev loop8: unable to read RDB block 1
[  308.011988][ T7894]  loop8: unable to read partition table
[  308.018865][ T7894] loop8: partition table beyond EOD, truncated
[  308.025159][ T7894] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  308.213829][ T7213] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.228173][ T7213] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  308.250423][ T7213] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  308.262286][ T4048] bridge_slave_0: left allmulticast mode
[  308.268023][ T4048] bridge_slave_0: left promiscuous mode
[  308.273849][ T7893] ceph: No mds server is up or the cluster is laggy
[  308.289159][ T7213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  308.295268][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.316587][ T7213] usb 7-1: SerialNumber: syz
[  308.627277][ T7903] netlink: 60 bytes leftover after parsing attributes in process `syz.1.485'.
[  309.014931][ T7213] usb 7-1: 0:2 : does not exist
[  309.259620][ T5824] Bluetooth: hci3: command tx timeout
[  309.918945][ T7912] slcan: can't register candev
[  309.924221][ T7912] Falling back ldisc for ptm0.
[  309.995115][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  309.995172][   T30] audit: type=1326 audit(1748628493.521:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f718e969 code=0x7ffc0000
[  310.126996][ T7213] usb 7-1: USB disconnect, device number 5
[  310.136975][   T30] audit: type=1326 audit(1748628493.521:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f718e969 code=0x7ffc0000
[  310.185792][   T30] audit: type=1326 audit(1748628493.521:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f06f718e969 code=0x7ffc0000
[  310.234323][   T30] audit: type=1326 audit(1748628493.531:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f718e969 code=0x7ffc0000
[  310.286044][   T30] audit: type=1326 audit(1748628493.531:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f718e969 code=0x7ffc0000
[  310.353931][   T30] audit: type=1326 audit(1748628493.531:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06f718e969 code=0x7ffc0000
[  310.407289][   T30] audit: type=1326 audit(1748628493.531:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f718e969 code=0x7ffc0000
[  310.464647][   T30] audit: type=1326 audit(1748628493.531:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f718e969 code=0x7ffc0000
[  310.526707][   T30] audit: type=1326 audit(1748628493.531:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f06f718e969 code=0x7ffc0000
[  310.598244][   T30] audit: type=1326 audit(1748628493.531:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7905 comm="syz.7.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f718e969 code=0x7ffc0000
[  311.348855][ T5824] Bluetooth: hci3: command tx timeout
[  311.909120][ T4048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  311.935558][ T4048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  311.948042][ T4048] bond0 (unregistering): Released all slaves
[  312.259255][ T7922] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  312.308929][ T7922] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  312.335083][ T7922] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  312.375229][ T7922] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  312.391686][ T7922] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  312.442818][ T7922] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  312.689713][ T7922] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  313.729918][ T7922] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  313.964242][ T7922] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  314.351971][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout
[  314.378736][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout
[  314.385211][ T5824] Bluetooth: hci4: command 0x0c1a tx timeout
[  314.391524][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout
[  314.864505][ T5837] Bluetooth: hci3: command 0x0419 tx timeout
[  316.066195][ T7959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.498'.
[  316.500201][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  316.806876][ T7957] xt_CT: No such helper "snmp"
[  316.816227][ T4048] hsr_slave_0: left promiscuous mode
[  316.834660][ T4048] hsr_slave_1: left promiscuous mode
[  316.874289][ T4048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.905381][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.924245][ T4048] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.935188][ T4048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.942738][ T5837] Bluetooth: hci3: command 0x0419 tx timeout
[  317.001788][ T4048] veth1_macvtap: left promiscuous mode
[  317.007626][ T4048] veth0_macvtap: left promiscuous mode
[  317.013713][ T4048] veth1_vlan: left promiscuous mode
[  317.019871][ T4048] veth0_vlan: left promiscuous mode
[  317.201108][ T7974] netlink: 'syz.1.500': attribute type 5 has an invalid length.
[  317.282561][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'.
[  318.256351][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  318.256372][   T30] audit: type=1326 audit(1748628501.851:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  318.286055][   T30] audit: type=1326 audit(1748628501.851:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  318.436011][ T7981] Bluetooth: MGMT ver 1.23
[  318.464358][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'.
[  318.639092][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  318.665151][ T7979] slcan: can't register candev
[  318.670365][ T7979] Falling back ldisc for ptm0.
[  318.748656][   T30] audit: type=1326 audit(1748628501.951:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  318.787658][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'.
[  318.802451][ T7976] netlink: 32 bytes leftover after parsing attributes in process `syz.0.497'.
[  318.811678][   T30] audit: type=1326 audit(1748628501.951:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  318.856164][   T30] audit: type=1326 audit(1748628501.951:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  318.878139][   T30] audit: type=1326 audit(1748628502.051:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  318.901877][   T30] audit: type=1326 audit(1748628502.051:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  318.923542][   T30] audit: type=1326 audit(1748628502.051:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  318.945409][   T30] audit: type=1326 audit(1748628502.151:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  318.967181][   T30] audit: type=1326 audit(1748628502.151:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7972 comm="syz.6.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  319.019962][ T5837] Bluetooth: hci3: command 0x0419 tx timeout
[  319.325169][ T4048] team0 (unregistering): Port device team_slave_1 removed
[  319.370462][ T4048] team0 (unregistering): Port device team_slave_0 removed
[  319.815784][ T7952] lo speed is unknown, defaulting to 1000
[  320.113924][ T7886] chnl_net:caif_netlink_parms(): no params data found
[  321.164682][ T5837] Bluetooth: hci3: command 0x0419 tx timeout
[  321.449374][ T8007] zonefs (nullb0) ERROR: Not a zoned block device
[  321.884086][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.922539][ T7886] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.946805][ T7886] bridge_slave_0: entered allmulticast mode
[  321.962626][ T7886] bridge_slave_0: entered promiscuous mode
[  321.966793][ T5837] Bluetooth: hci0: unexpected event for opcode 0x200a
[  321.971538][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.982768][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.990042][ T7886] bridge_slave_1: entered allmulticast mode
[  321.997947][ T7886] bridge_slave_1: entered promiscuous mode
[  322.182779][ T7886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  322.249752][ T7886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.319905][ T8019] [U] ¹é
[  322.526110][ T7886] team0: Port device team_slave_0 added
[  322.542108][ T7886] team0: Port device team_slave_1 added
[  323.452653][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  323.452676][   T30] audit: type=1326 audit(1748628507.031:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19cf8e969 code=0x7ffc0000
[  323.480173][    C1] vkms_vblank_simulate: vblank timer overrun
[  323.487724][ T8028] slcan: can't register candev
[  323.493752][ T8028] Falling back ldisc for ptm0.
[  323.504342][   T30] audit: type=1326 audit(1748628507.041:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19cf8e969 code=0x7ffc0000
[  323.660444][ T7886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.688928][   T30] audit: type=1326 audit(1748628507.051:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe19cf8e969 code=0x7ffc0000
[  323.718647][ T7886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.758917][   T30] audit: type=1326 audit(1748628507.051:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19cf8e969 code=0x7ffc0000
[  323.780458][    C1] vkms_vblank_simulate: vblank timer overrun
[  323.787306][   T30] audit: type=1326 audit(1748628507.051:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19cf8e969 code=0x7ffc0000
[  323.808876][ T7886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.829515][   T30] audit: type=1326 audit(1748628507.061:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe19cf8e969 code=0x7ffc0000
[  323.860256][   T30] audit: type=1326 audit(1748628507.061:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19cf8e969 code=0x7ffc0000
[  323.882118][    C1] vkms_vblank_simulate: vblank timer overrun
[  324.208875][   T30] audit: type=1326 audit(1748628507.071:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19cf8e969 code=0x7ffc0000
[  324.230467][    C1] vkms_vblank_simulate: vblank timer overrun
[  324.237033][   T30] audit: type=1326 audit(1748628507.071:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fe19cf8e969 code=0x7ffc0000
[  324.264514][   T30] audit: type=1326 audit(1748628507.081:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8020 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe19cf8e969 code=0x7ffc0000
[  324.409392][ T7886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.448742][ T7886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.478082][ T7886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.412605][ T7886] hsr_slave_0: entered promiscuous mode
[  325.429781][ T7886] hsr_slave_1: entered promiscuous mode
[  325.551141][ T8043] macvlan2: entered promiscuous mode
[  325.556503][ T8043] bridge0: entered promiscuous mode
[  325.608397][ T8046] macvlan3: entered promiscuous mode
[  325.926690][ T8043] syzkaller0: entered promiscuous mode
[  325.932419][ T8043] syzkaller0: entered allmulticast mode
[  326.434945][ T8061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  326.576685][ T8065] netlink: 60 bytes leftover after parsing attributes in process `syz.6.525'.
[  327.842534][ T7218] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  328.152025][ T7218] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  328.168189][ T7218] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  328.179214][ T7218] usb 7-1: config 220 has no interface number 2
[  328.185582][ T7218] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  328.199926][ T7218] usb 7-1: config 220 interface 0 has no altsetting 0
[  328.206856][ T7218] usb 7-1: config 220 interface 76 has no altsetting 0
[  328.215653][ T7218] usb 7-1: config 220 interface 1 has no altsetting 0
[  328.225745][ T7218] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  328.235572][ T7218] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.243680][ T7218] usb 7-1: Product: syz
[  328.247887][ T7218] usb 7-1: Manufacturer: syz
[  328.252579][ T7218] usb 7-1: SerialNumber: syz
[  328.501502][ T7218] usb 7-1: selecting invalid altsetting 0
[  328.521799][ T7218] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[  328.528693][ T7218] usb 7-1: No valid video chain found.
[  328.548204][ T7218] usb 7-1: selecting invalid altsetting 0
[  328.554203][ T7218] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  328.565648][ T7218] usb 7-1: USB disconnect, device number 6
[  329.443570][ T8075] FAULT_INJECTION: forcing a failure.
[  329.443570][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  329.459632][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.0.528 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  329.459663][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  329.459677][ T8075] Call Trace:
[  329.459685][ T8075]  <TASK>
[  329.459695][ T8075]  dump_stack_lvl+0x189/0x250
[  329.459734][ T8075]  ? __pfx____ratelimit+0x10/0x10
[  329.459758][ T8075]  ? __pfx_dump_stack_lvl+0x10/0x10
[  329.459790][ T8075]  ? __pfx__printk+0x10/0x10
[  329.459826][ T8075]  should_fail_ex+0x414/0x560
[  329.459861][ T8075]  _copy_to_user+0x31/0xb0
[  329.459896][ T8075]  sk_getsockopt+0x1a75/0x2530
[  329.459933][ T8075]  ? __pfx_sk_getsockopt+0x10/0x10
[  329.459963][ T8075]  ? do_syscall_64+0xa0/0x3b0
[  329.459999][ T8075]  ? __lock_acquire+0xab9/0xd20
[  329.460034][ T8075]  ? __might_fault+0xb0/0x130
[  329.460090][ T8075]  do_sock_getsockopt+0x275/0x650
[  329.460121][ T8075]  ? do_syscall_64+0xa0/0x3b0
[  329.460148][ T8075]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  329.460178][ T8075]  ? do_syscall_64+0xa0/0x3b0
[  329.460201][ T8075]  ? __fget_files+0x3a0/0x420
[  329.460221][ T8075]  ? __fget_files+0x2a/0x420
[  329.460249][ T8075]  __x64_sys_getsockopt+0x1a5/0x250
[  329.460281][ T8075]  ? do_syscall_64+0xa0/0x3b0
[  329.460306][ T8075]  ? do_syscall_64+0xa0/0x3b0
[  329.460335][ T8075]  do_syscall_64+0xfa/0x3b0
[  329.460357][ T8075]  ? lockdep_hardirqs_on+0x9c/0x150
[  329.460380][ T8075]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.460401][ T8075]  ? clear_bhb_loop+0x60/0xb0
[  329.460428][ T8075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.460449][ T8075] RIP: 0033:0x7f4090f8e969
[  329.460469][ T8075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  329.460488][ T8075] RSP: 002b:00007f4091d44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  329.460511][ T8075] RAX: ffffffffffffffda RBX: 00007f40911b5fa0 RCX: 00007f4090f8e969
[  329.460528][ T8075] RDX: 0000000000000038 RSI: 0000000000000001 RDI: 0000000000000003
[  329.460540][ T8075] RBP: 00007f4091d44090 R08: 0000200000001700 R09: 0000000000000000
[  329.460555][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  329.460568][ T8075] R13: 0000000000000000 R14: 00007f40911b5fa0 R15: 00007ffef9cec2b8
[  329.460602][ T8075]  </TASK>
[  329.701053][ T7886] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  329.718703][ T7886] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  329.734144][ T7886] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  329.750318][ T7886] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  330.020748][ T7886] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.092934][ T7886] 8021q: adding VLAN 0 to HW filter on device team0
[  330.162365][  T921] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  330.185660][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.192971][ T4048] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.212025][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.219308][ T4048] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.306489][ T8088] zonefs (nullb0) ERROR: Not a zoned block device
[  330.388802][  T921] usb 1-1: device descriptor read/64, error -71
[  330.680920][  T921] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  330.866679][ T7886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.018873][  T921] usb 1-1: device descriptor read/64, error -71
[  331.129674][  T921] usb usb1-port1: attempt power cycle
[  331.521583][  T921] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  331.549577][  T921] usb 1-1: device descriptor read/8, error -71
[  331.958783][  T921] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  332.469535][  T921] usb 1-1: device descriptor read/8, error -71
[  332.513605][ T7886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.564097][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.538'.
[  332.643419][  T921] usb usb1-port1: unable to enumerate USB device
[  332.671829][ T8114] netlink: 60 bytes leftover after parsing attributes in process `syz.7.539'.
[  333.513935][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.541'.
[  334.603609][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  334.603629][   T30] audit: type=1326 audit(1748628518.641:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  334.631452][    C1] vkms_vblank_simulate: vblank timer overrun
[  334.652751][   T30] audit: type=1326 audit(1748628518.651:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  334.685051][ T7214] usb 8-1: new low-speed USB device number 3 using dummy_hcd
[  334.708654][   T30] audit: type=1326 audit(1748628518.661:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  334.883473][   T30] audit: type=1326 audit(1748628518.661:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  334.921176][ T7886] veth0_vlan: entered promiscuous mode
[  334.949390][ T7214] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  334.987161][ T7886] veth1_vlan: entered promiscuous mode
[  335.005566][ T7214] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  335.033506][   T30] audit: type=1326 audit(1748628518.661:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  335.067538][ T7214] usb 8-1: config 0 interface 0 has no altsetting 0
[  335.085314][ T7214] usb 8-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  335.095382][ T7214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.107849][   T30] audit: type=1326 audit(1748628518.661:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  335.137224][ T7214] usb 8-1: config 0 descriptor??
[  335.143250][   T30] audit: type=1326 audit(1748628518.661:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  335.164844][    C1] vkms_vblank_simulate: vblank timer overrun
[  335.170042][ T7886] veth0_macvtap: entered promiscuous mode
[  335.172743][ T8129] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  335.341837][   T30] audit: type=1326 audit(1748628518.661:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  335.364213][   T30] audit: type=1326 audit(1748628518.661:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8133 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  335.398468][ T7886] veth1_macvtap: entered promiscuous mode
[  336.033253][ T7886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.045454][ T7886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.048847][ T7214] usbhid 8-1:0.0: can't add hid device: -71
[  336.062217][ T7214] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  336.081174][ T7214] usb 8-1: USB disconnect, device number 3
[  336.201559][ T7886] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.216340][ T7886] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.225917][ T7886] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.234912][ T7886] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.355740][ T3066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.384159][ T3066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.565333][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.580784][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.055390][ T8149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  338.916820][ T8163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.093873][ T8160] lo speed is unknown, defaulting to 1000
[  339.799708][ T7213] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  342.290242][ T8193] netlink: 60 bytes leftover after parsing attributes in process `syz.7.559'.
[  345.189757][ T7213] usb 1-1: device descriptor read/all, error -110
[  345.475558][ T8212] netlink: 60 bytes leftover after parsing attributes in process `syz.6.563'.
[  345.502417][ T7213] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  345.619825][ T5878] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  345.722387][ T7213] usb 1-1: device descriptor read/64, error -32
[  346.213001][ T7213] usb usb1-port1: attempt power cycle
[  346.238974][ T5878] usb 2-1: Using ep0 maxpacket: 8
[  346.256323][ T5878] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  346.286215][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  346.310331][ T5878] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  346.338582][ T5878] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  346.798912][ T5878] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  346.813838][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.866315][ T7213] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  346.909599][ T7213] usb 1-1: device descriptor read/8, error -32
[  347.740420][ T5878] usb 2-1: GET_CAPABILITIES returned 0
[  347.755497][ T5878] usbtmc 2-1:16.0: can't read capabilities
[  347.884388][ T7213] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  347.948911][ T7213] usb 1-1: device descriptor read/8, error -32
[  348.226281][ T7213] usb usb1-port1: unable to enumerate USB device
[  348.417413][ T8238] can0: slcan on ptm0.
[  349.209850][   T30] audit: type=1326 audit(1748628532.491:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.6.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  349.274830][   T30] audit: type=1326 audit(1748628532.491:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.6.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  349.300466][   T30] audit: type=1326 audit(1748628532.491:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.6.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  349.300524][   T30] audit: type=1326 audit(1748628532.491:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.6.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  349.300572][   T30] audit: type=1326 audit(1748628532.491:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.6.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  349.300619][   T30] audit: type=1326 audit(1748628532.491:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.6.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  349.300666][   T30] audit: type=1326 audit(1748628532.501:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.6.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  349.300732][   T30] audit: type=1326 audit(1748628532.501:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.6.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  349.300778][   T30] audit: type=1326 audit(1748628532.501:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.6.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  349.300825][   T30] audit: type=1326 audit(1748628532.501:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8231 comm="syz.6.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  349.341817][ T8231] can0 (unregistered): slcan off ptm0.
[  349.403409][ T7213] usb 2-1: USB disconnect, device number 22
[  350.346065][ T8235] tty tty1: ldisc open failed (-12), clearing slot 0
[  350.659320][ T8261] binder: 8259:8261 ioctl c018620c 200000000380 returned -22
[  354.586808][ T8294] syzkaller1: entered promiscuous mode
[  354.598556][ T8294] syzkaller1: entered allmulticast mode
[  354.872511][ T5878] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  355.703223][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.748752][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  355.809358][ T5878] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  355.818619][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  355.827166][ T5878] usb 2-1: SerialNumber: syz
[  356.154197][ T8310] can0: slcan on ptm0.
[  356.260484][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  356.260529][   T30] audit: type=1326 audit(1748628540.221:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932798e969 code=0x7ffc0000
[  357.069411][   T30] audit: type=1326 audit(1748628540.221:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932798e969 code=0x7ffc0000
[  357.095778][   T30] audit: type=1326 audit(1748628540.231:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f932798e969 code=0x7ffc0000
[  357.598623][   T30] audit: type=1326 audit(1748628540.231:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932798e969 code=0x7ffc0000
[  357.621431][   T30] audit: type=1326 audit(1748628540.231:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932798e969 code=0x7ffc0000
[  357.659085][   T30] audit: type=1326 audit(1748628540.231:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f932798e969 code=0x7ffc0000
[  357.732574][ T8305] can0 (unregistered): slcan off ptm0.
[  357.848947][   T30] audit: type=1326 audit(1748628540.231:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932798e969 code=0x7ffc0000
[  357.911516][ T5878] usb 2-1: 0:2 : does not exist
[  357.947055][   T30] audit: type=1326 audit(1748628540.231:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932798e969 code=0x7ffc0000
[  358.008620][   T30] audit: type=1326 audit(1748628540.231:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f932798e969 code=0x7ffc0000
[  358.034492][ T5878] usb 2-1: USB disconnect, device number 23
[  358.275882][   T30] audit: type=1326 audit(1748628540.231:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8305 comm="syz.8.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932798e969 code=0x7ffc0000
[  358.553296][ T8322] macsec1: entered promiscuous mode
[  358.558660][ T8322] macsec1: entered allmulticast mode
[  358.673081][ T8331] netlink: 60 bytes leftover after parsing attributes in process `syz.7.591'.
[  359.370899][ T8340] FAULT_INJECTION: forcing a failure.
[  359.370899][ T8340] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  359.488618][ T7214] usb 2-1: new low-speed USB device number 24 using dummy_hcd
[  359.561930][ T8340] CPU: 1 UID: 0 PID: 8340 Comm: syz.6.595 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  359.561965][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  359.561979][ T8340] Call Trace:
[  359.561987][ T8340]  <TASK>
[  359.561996][ T8340]  dump_stack_lvl+0x189/0x250
[  359.562035][ T8340]  ? __pfx____ratelimit+0x10/0x10
[  359.562058][ T8340]  ? __pfx_dump_stack_lvl+0x10/0x10
[  359.562091][ T8340]  ? __pfx__printk+0x10/0x10
[  359.562113][ T8340]  ? __might_fault+0xb0/0x130
[  359.562159][ T8340]  should_fail_ex+0x414/0x560
[  359.562189][ T8340]  _copy_from_iter+0x1db/0x16f0
[  359.562228][ T8340]  ? policy_nodemask+0x27c/0x720
[  359.562261][ T8340]  ? __pfx__copy_from_iter+0x10/0x10
[  359.562297][ T8340]  ? set_page_refcounted+0xa0/0x1e0
[  359.562331][ T8340]  ? page_copy_sane+0x4e/0x280
[  359.562361][ T8340]  copy_page_from_iter+0xdd/0x170
[  359.562394][ T8340]  tun_get_user+0x1c4d/0x3ce0
[  359.562428][ T8340]  ? tun_get_user+0x693/0x3ce0
[  359.562461][ T8340]  ? __pfx_tun_get_user+0x10/0x10
[  359.562487][ T8340]  ? __lock_acquire+0xab9/0xd20
[  359.562507][ T8340]  ? ref_tracker_alloc+0x318/0x460
[  359.562523][ T8340]  ? __lock_acquire+0xab9/0xd20
[  359.562539][ T8340]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  359.562561][ T8340]  ? tun_get+0x1c/0x2f0
[  359.562584][ T8340]  ? tun_get+0x1c/0x2f0
[  359.562603][ T8340]  ? tun_get+0x1c/0x2f0
[  359.562626][ T8340]  tun_chr_write_iter+0x113/0x200
[  359.562648][ T8340]  vfs_write+0x548/0xa90
[  359.562673][ T8340]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  359.562693][ T8340]  ? __pfx_vfs_write+0x10/0x10
[  359.562722][ T8340]  ? __fget_files+0x2a/0x420
[  359.562743][ T8340]  ksys_write+0x145/0x250
[  359.562765][ T8340]  ? __pfx_ksys_write+0x10/0x10
[  359.562785][ T8340]  ? rcu_is_watching+0x15/0xb0
[  359.562806][ T8340]  ? do_syscall_64+0xbe/0x3b0
[  359.562835][ T8340]  do_syscall_64+0xfa/0x3b0
[  359.562852][ T8340]  ? lockdep_hardirqs_on+0x9c/0x150
[  359.562867][ T8340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.562883][ T8340]  ? clear_bhb_loop+0x60/0xb0
[  359.562901][ T8340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.562916][ T8340] RIP: 0033:0x7f5901d8d41f
[  359.562930][ T8340] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  359.562943][ T8340] RSP: 002b:00007f5902bd8000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  359.562960][ T8340] RAX: ffffffffffffffda RBX: 00007f5901fb5fa0 RCX: 00007f5901d8d41f
[  359.562972][ T8340] RDX: 000000000000006e RSI: 0000200000000340 RDI: 00000000000000c8
[  359.562982][ T8340] RBP: 00007f5902bd8090 R08: 0000000000000000 R09: 0000000000000000
[  359.562991][ T8340] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001
[  359.563000][ T8340] R13: 0000000000000000 R14: 00007f5901fb5fa0 R15: 00007ffdee4f6b38
[  359.563022][ T8340]  </TASK>
[  359.978567][ T8343] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  360.838216][ T7214] usb 2-1: unable to get BOS descriptor or descriptor too short
[  360.865971][ T7214] usb 2-1: config 8 has an invalid interface number: 150 but max is 0
[  360.888258][ T7214] usb 2-1: config 8 has no interface number 0
[  360.898402][ T7214] usb 2-1: config 8 interface 150 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 8
[  360.924046][ T7214] usb 2-1: config 8 interface 150 altsetting 1 endpoint 0x2 has invalid maxpacket 32, setting to 8
[  361.733158][ T7214] usb 2-1: config 8 interface 150 has no altsetting 0
[  361.791371][ T7214] usb 2-1: string descriptor 0 read error: -22
[  361.799569][ T7214] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=c5.3c
[  361.829973][ T7214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.213231][ T8363] can0: slcan on ptm0.
[  362.322799][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  362.322841][   T30] audit: type=1326 audit(1748628546.291:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  362.921933][   T30] audit: type=1326 audit(1748628546.291:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  362.949356][   T30] audit: type=1326 audit(1748628546.291:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  362.973166][   T30] audit: type=1326 audit(1748628546.291:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  362.995325][   T30] audit: type=1326 audit(1748628546.291:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  363.329133][ T7214] peak_usb 2-1:8.150 can0: unable to request usb[type=0 value=1] err=-71
[  363.337648][ T7214] peak_usb 2-1:8.150: unable to read PCAN-Chip USB firmware info (err -71)
[  363.346679][   T30] audit: type=1326 audit(1748628546.291:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  363.417550][   T30] audit: type=1326 audit(1748628546.301:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  363.448932][ T8358] can0 (unregistered): slcan off ptm0.
[  363.500616][ T7214] peak_usb 2-1:8.150: probe with driver peak_usb failed with error -71
[  363.561761][   T30] audit: type=1326 audit(1748628546.301:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  363.584187][   T30] audit: type=1326 audit(1748628546.301:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  363.606296][   T30] audit: type=1326 audit(1748628546.301:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8358 comm="syz.6.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  363.697519][ T7214] usb 2-1: USB disconnect, device number 24
[  363.756927][ T8370] FAULT_INJECTION: forcing a failure.
[  363.756927][ T8370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  363.838752][ T8370] CPU: 0 UID: 0 PID: 8370 Comm: syz.6.605 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  363.838786][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  363.838800][ T8370] Call Trace:
[  363.838808][ T8370]  <TASK>
[  363.838819][ T8370]  dump_stack_lvl+0x189/0x250
[  363.838857][ T8370]  ? __pfx____ratelimit+0x10/0x10
[  363.838880][ T8370]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.838912][ T8370]  ? __pfx__printk+0x10/0x10
[  363.838934][ T8370]  ? __might_fault+0xb0/0x130
[  363.838980][ T8370]  should_fail_ex+0x414/0x560
[  363.839009][ T8370]  _copy_from_user+0x2d/0xb0
[  363.839042][ T8370]  ___sys_sendmsg+0x158/0x2a0
[  363.839078][ T8370]  ? __pfx____sys_sendmsg+0x10/0x10
[  363.839150][ T8370]  ? __fget_files+0x2a/0x420
[  363.839169][ T8370]  ? __fget_files+0x3a0/0x420
[  363.839201][ T8370]  __x64_sys_sendmsg+0x19b/0x260
[  363.839236][ T8370]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  363.839279][ T8370]  ? __pfx_ksys_write+0x10/0x10
[  363.839307][ T8370]  ? rcu_is_watching+0x15/0xb0
[  363.839338][ T8370]  ? do_syscall_64+0xbe/0x3b0
[  363.839366][ T8370]  do_syscall_64+0xfa/0x3b0
[  363.839394][ T8370]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.839415][ T8370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.839437][ T8370]  ? clear_bhb_loop+0x60/0xb0
[  363.839464][ T8370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.839485][ T8370] RIP: 0033:0x7f5901d8e969
[  363.839505][ T8370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.839524][ T8370] RSP: 002b:00007f5902bd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.839554][ T8370] RAX: ffffffffffffffda RBX: 00007f5901fb5fa0 RCX: 00007f5901d8e969
[  363.839570][ T8370] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  363.839584][ T8370] RBP: 00007f5902bd8090 R08: 0000000000000000 R09: 0000000000000000
[  363.839598][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.839611][ T8370] R13: 0000000000000000 R14: 00007f5901fb5fa0 R15: 00007ffdee4f6b38
[  363.839644][ T8370]  </TASK>
[  365.386467][ T8382] netlink: 60 bytes leftover after parsing attributes in process `syz.7.608'.
[  367.069103][ T8398] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  367.075325][ T8398] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  367.081550][ T8398] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  367.087682][ T8398] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  367.093892][ T8398] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  367.178761][ T5876] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  368.292919][ T5876] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  368.310137][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.338844][ T5876] usb 9-1: Product: syz
[  368.344803][ T5876] usb 9-1: Manufacturer: syz
[  368.360790][ T5876] usb 9-1: SerialNumber: syz
[  368.370197][ T5876] usb 9-1: config 0 descriptor??
[  368.748630][ T8405] can0: slcan on ptm0.
[  368.918838][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  368.918882][   T30] audit: type=1326 audit(1748628552.831:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.6.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  369.259298][ T5824] Bluetooth: hci3: command 0x0419 tx timeout
[  369.266585][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout
[  369.284329][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[  369.284354][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout
[  369.290447][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  369.308663][ T5876] usb 9-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  369.315319][ T5876] f81604 9-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO
[  369.325225][ T5876] f81604 9-1:0.0: probe with driver f81604 failed with error -121
[  369.373558][   T30] audit: type=1326 audit(1748628552.831:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.6.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  369.548277][   T30] audit: type=1326 audit(1748628552.831:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.6.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  369.577855][   T30] audit: type=1326 audit(1748628552.831:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.6.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  369.609176][ T8402] can0 (unregistered): slcan off ptm0.
[  369.609190][   T30] audit: type=1326 audit(1748628552.831:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.6.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  369.721965][   T30] audit: type=1326 audit(1748628552.831:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.6.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  369.822004][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.839046][   T30] audit: type=1326 audit(1748628552.831:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.6.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  370.054732][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.612107][   T30] audit: type=1326 audit(1748628552.831:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.6.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  370.658751][   T30] audit: type=1326 audit(1748628552.831:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.6.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  370.806461][   T30] audit: type=1326 audit(1748628552.841:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.6.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  371.758941][ T8430] FAULT_INJECTION: forcing a failure.
[  371.758941][ T8430] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  371.772462][ T8430] CPU: 0 UID: 0 PID: 8430 Comm: syz.6.620 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  371.772493][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  371.772510][ T8430] Call Trace:
[  371.772521][ T8430]  <TASK>
[  371.772530][ T8430]  dump_stack_lvl+0x189/0x250
[  371.772557][ T8430]  ? irqentry_exit+0x74/0x90
[  371.772575][ T8430]  ? __pfx_dump_stack_lvl+0x10/0x10
[  371.772612][ T8430]  should_fail_ex+0x414/0x560
[  371.772633][ T8430]  _copy_from_user+0x2d/0xb0
[  371.772661][ T8430]  __sys_bpf+0x1ed/0x860
[  371.772679][ T8430]  ? __pfx___sys_bpf+0x10/0x10
[  371.772721][ T8430]  __x64_sys_bpf+0x7c/0x90
[  371.772745][ T8430]  do_syscall_64+0xfa/0x3b0
[  371.772767][ T8430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.772782][ T8430]  ? asm_sysvec_call_function_single+0x1a/0x20
[  371.772797][ T8430]  ? clear_bhb_loop+0x60/0xb0
[  371.772816][ T8430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.772834][ T8430] RIP: 0033:0x7f5901d8e969
[  371.772851][ T8430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  371.772865][ T8430] RSP: 002b:00007f5902b96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  371.772881][ T8430] RAX: ffffffffffffffda RBX: 00007f5901fb6160 RCX: 00007f5901d8e969
[  371.772895][ T8430] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c
[  371.772908][ T8430] RBP: 00007f5902b96090 R08: 0000000000000000 R09: 0000000000000000
[  371.772918][ T8430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.772926][ T8430] R13: 0000000000000000 R14: 00007f5901fb6160 R15: 00007ffdee4f6b38
[  371.772950][ T8430]  </TASK>
[  371.775618][ T8430] netlink: 'syz.6.620': attribute type 10 has an invalid length.
[  372.025340][ T8430] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  373.443719][ T7214] usb 9-1: USB disconnect, device number 2
[  375.256551][ T8443] netlink: 60 bytes leftover after parsing attributes in process `syz.8.626'.
[  376.098780][ T7214] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  377.261915][ T8458] can0: slcan on ptm0.
[  377.369031][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  377.369054][   T30] audit: type=1326 audit(1748628561.321:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  377.834793][   T30] audit: type=1326 audit(1748628561.321:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  377.839100][ T7214] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  378.099818][ T8451] can0 (unregistered): slcan off ptm0.
[  378.382767][   T30] audit: type=1326 audit(1748628561.321:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  378.408626][   T30] audit: type=1326 audit(1748628561.321:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  378.434555][   T30] audit: type=1326 audit(1748628561.321:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  378.488582][ T7214] usb 7-1: config 0 has no interface number 0
[  378.494801][ T7214] usb 7-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e
[  378.525091][   T30] audit: type=1326 audit(1748628561.321:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  378.555874][   T30] audit: type=1326 audit(1748628561.321:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  378.566356][ T7214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.606435][   T30] audit: type=1326 audit(1748628561.321:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  378.641162][ T7214] usb 7-1: config 0 descriptor??
[  378.649150][ T7214] usb 7-1: bad CDC descriptors
[  378.671330][   T30] audit: type=1326 audit(1748628561.321:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  378.808799][   T30] audit: type=1326 audit(1748628561.321:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.0.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4090f8e969 code=0x7ffc0000
[  379.245272][ T7214] usb 7-1: USB disconnect, device number 7
[  380.298870][ T7213] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  381.259288][ T8495] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  381.265532][ T8495] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  381.273124][ T8495] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  381.279962][ T8495] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  381.286178][ T8495] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  381.381878][ T7213] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  381.392826][ T7213] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  381.403626][ T7213] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  381.412949][ T7213] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  382.188882][ T8502] FAULT_INJECTION: forcing a failure.
[  382.188882][ T8502] name failslab, interval 1, probability 0, space 0, times 0
[  382.292877][ T7213] usb 9-1: SerialNumber: syz
[  382.315160][ T8502] CPU: 0 UID: 0 PID: 8502 Comm: syz.1.641 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  382.315194][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  382.315208][ T8502] Call Trace:
[  382.315216][ T8502]  <TASK>
[  382.315226][ T8502]  dump_stack_lvl+0x189/0x250
[  382.315272][ T8502]  ? __pfx____ratelimit+0x10/0x10
[  382.315297][ T8502]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.315329][ T8502]  ? __pfx__printk+0x10/0x10
[  382.315358][ T8502]  ? __pfx___might_resched+0x10/0x10
[  382.315390][ T8502]  should_fail_ex+0x414/0x560
[  382.315419][ T8502]  should_failslab+0xa8/0x100
[  382.315456][ T8502]  kmem_cache_alloc_noprof+0x73/0x3c0
[  382.315489][ T8502]  ? mas_alloc_nodes+0x2e9/0x8e0
[  382.315516][ T8502]  mas_alloc_nodes+0x2e9/0x8e0
[  382.315549][ T8502]  mas_preallocate+0x542/0x8b0
[  382.315576][ T8502]  ? __pfx_mas_preallocate+0x10/0x10
[  382.315612][ T8502]  ? __mas_set_range+0x12f/0x3c0
[  382.315650][ T8502]  __split_vma+0x315/0x9b0
[  382.315691][ T8502]  ? __pfx___split_vma+0x10/0x10
[  382.315729][ T8502]  ? up_write+0x1c4/0x420
[  382.315767][ T8502]  vms_gather_munmap_vmas+0x2de/0x12b0
[  382.315813][ T8502]  ? mtree_range_walk+0x6a7/0x840
[  382.315836][ T8502]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  382.315889][ T8502]  mmap_region+0x5f5/0x1e50
[  382.315931][ T8502]  ? __lock_acquire+0xab9/0xd20
[  382.315952][ T8502]  ? __pfx_mmap_region+0x10/0x10
[  382.316044][ T8502]  ? arch_get_unmapped_area_topdown+0x251/0xbc0
[  382.316084][ T8502]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  382.316125][ T8502]  ? cap_mmap_addr+0xb0/0x100
[  382.316150][ T8502]  ? bpf_lsm_mmap_addr+0x9/0x20
[  382.316173][ T8502]  ? security_mmap_addr+0x71/0x270
[  382.316199][ T8502]  ? shmem_mapping+0xd/0x50
[  382.316225][ T8502]  ? memfd_check_seals_mmap+0xc5/0x200
[  382.316260][ T8502]  do_mmap+0xc68/0x1100
[  382.316306][ T8502]  ? __pfx_do_mmap+0x10/0x10
[  382.316335][ T8502]  ? down_write_killable+0x178/0x230
[  382.316364][ T8502]  ? ksys_write+0x1cb/0x250
[  382.316394][ T8502]  ? __pfx_down_write_killable+0x10/0x10
[  382.316432][ T8502]  vm_mmap_pgoff+0x31b/0x4c0
[  382.316472][ T8502]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  382.316504][ T8502]  ? __fget_files+0x2a/0x420
[  382.316530][ T8502]  ? __fget_files+0x3a0/0x420
[  382.316549][ T8502]  ? __fget_files+0x2a/0x420
[  382.316574][ T8502]  ksys_mmap_pgoff+0x51f/0x760
[  382.316615][ T8502]  do_syscall_64+0xfa/0x3b0
[  382.316638][ T8502]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.316661][ T8502]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.316683][ T8502]  ? clear_bhb_loop+0x60/0xb0
[  382.316710][ T8502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  382.316731][ T8502] RIP: 0033:0x7fe19cf8e969
[  382.316751][ T8502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  382.316770][ T8502] RSP: 002b:00007fe19ddd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  382.316793][ T8502] RAX: ffffffffffffffda RBX: 00007fe19d1b6080 RCX: 00007fe19cf8e969
[  382.316809][ T8502] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000ffd000
[  382.316823][ T8502] RBP: 00007fe19ddd7090 R08: 0000000000000008 R09: 0000000000000000
[  382.316837][ T8502] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  382.316850][ T8502] R13: 0000000000000000 R14: 00007fe19d1b6080 R15: 00007ffdbfb12d38
[  382.316885][ T8502]  </TASK>
[  382.648886][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.862987][ T8511] can0: slcan on ptm0.
[  383.428601][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout
[  383.434738][ T5824] Bluetooth: hci3: command 0x0419 tx timeout
[  383.441644][ T8497] syz.0.633 (8497) used greatest stack depth: 17992 bytes left
[  383.449316][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout
[  383.449364][ T5824] Bluetooth: hci4: command 0x0c1a tx timeout
[  383.449404][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout
[  383.461305][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  383.461352][   T30] audit: type=1326 audit(1748628566.941:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8507 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  383.499544][   T30] audit: type=1326 audit(1748628566.941:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8507 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  383.521711][   T30] audit: type=1326 audit(1748628566.941:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8507 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  383.544305][   T30] audit: type=1326 audit(1748628566.941:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8507 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  383.573082][ T8507] can0 (unregistered): slcan off ptm0.
[  383.580373][   T30] audit: type=1326 audit(1748628566.941:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8507 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  383.603211][   T30] audit: type=1326 audit(1748628566.941:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8507 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  383.624821][   T30] audit: type=1326 audit(1748628566.951:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8507 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  383.718450][ T7213] usb 9-1: can't set config #1, error -71
[  383.732194][ T7213] usb 9-1: USB disconnect, device number 3
[  383.739880][   T30] audit: type=1326 audit(1748628566.951:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8507 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  383.763682][   T30] audit: type=1326 audit(1748628566.951:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8507 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  383.784987][    C0] vkms_vblank_simulate: vblank timer overrun
[  383.796821][ T8514] FAULT_INJECTION: forcing a failure.
[  383.796821][ T8514] name failslab, interval 1, probability 0, space 0, times 0
[  383.809900][ T8514] CPU: 0 UID: 0 PID: 8514 Comm: syz.7.644 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  383.809930][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  383.809944][ T8514] Call Trace:
[  383.809954][ T8514]  <TASK>
[  383.809963][ T8514]  dump_stack_lvl+0x189/0x250
[  383.810001][ T8514]  ? __pfx____ratelimit+0x10/0x10
[  383.810026][ T8514]  ? __pfx_dump_stack_lvl+0x10/0x10
[  383.810059][ T8514]  ? __pfx__printk+0x10/0x10
[  383.810097][ T8514]  should_fail_ex+0x414/0x560
[  383.810128][ T8514]  should_failslab+0xa8/0x100
[  383.810173][ T8514]  kmem_cache_alloc_noprof+0x73/0x3c0
[  383.810206][ T8514]  ? dst_alloc+0x105/0x170
[  383.810224][ T8514]  ? kernel_text_address+0xa5/0xe0
[  383.810251][ T8514]  dst_alloc+0x105/0x170
[  383.810277][ T8514]  ip_route_input_rcu+0x1ed5/0x2ff0
[  383.810316][ T8514]  ? __pfx_ip_route_input_rcu+0x10/0x10
[  383.810336][ T8514]  ? inet_ehashfn+0x8d/0x210
[  383.810402][ T8514]  ? ip_route_input_noref+0x98/0x250
[  383.810426][ T8514]  ip_route_input_noref+0x167/0x250
[  383.810453][ T8514]  ? __pfx_ip_route_input_noref+0x10/0x10
[  383.810483][ T8514]  ? tcp_v4_early_demux+0x4e1/0x9d0
[  383.810513][ T8514]  ? tcp_v4_early_demux+0x5ec/0x9d0
[  383.810555][ T8514]  ip_rcv_finish_core+0x5af/0x1c00
[  383.810600][ T8514]  ip_rcv_finish+0x14c/0x2f0
[  383.810633][ T8514]  NF_HOOK+0x309/0x3a0
[  383.810664][ T8514]  ? __pfx_ip_rcv_finish+0x10/0x10
[  383.810692][ T8514]  ? NF_HOOK+0x9a/0x3a0
[  383.810719][ T8514]  ? __pfx_NF_HOOK+0x10/0x10
[  383.810745][ T8514]  ? ip_rcv_core+0x7f7/0xd00
[  383.810775][ T8514]  ? __pfx_ip_rcv_finish+0x10/0x10
[  383.810812][ T8514]  ? __pfx_ip_rcv+0x10/0x10
[  383.810839][ T8514]  __netif_receive_skb+0x143/0x380
[  383.810871][ T8514]  ? netif_receive_skb+0x115/0x790
[  383.810894][ T8514]  netif_receive_skb+0x1cb/0x790
[  383.810917][ T8514]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  383.810941][ T8514]  ? __pfx_netif_receive_skb+0x10/0x10
[  383.810965][ T8514]  ? preempt_schedule_common+0x83/0xd0
[  383.810986][ T8514]  ? preempt_schedule+0xae/0xc0
[  383.811004][ T8514]  ? tun_rx_batched+0x160/0x730
[  383.811037][ T8514]  tun_rx_batched+0x1b9/0x730
[  383.811064][ T8514]  ? __lock_acquire+0xab9/0xd20
[  383.811091][ T8514]  ? __pfx_tun_rx_batched+0x10/0x10
[  383.811124][ T8514]  ? tun_get_user+0x2549/0x3ce0
[  383.811173][ T8514]  tun_get_user+0x298e/0x3ce0
[  383.811205][ T8514]  ? tun_get_user+0x693/0x3ce0
[  383.811231][ T8514]  ? tun_get_user+0x2549/0x3ce0
[  383.811276][ T8514]  ? __pfx_tun_get_user+0x10/0x10
[  383.811313][ T8514]  ? __lock_acquire+0xab9/0xd20
[  383.811341][ T8514]  ? ref_tracker_alloc+0x318/0x460
[  383.811363][ T8514]  ? __lock_acquire+0xab9/0xd20
[  383.811384][ T8514]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  383.811414][ T8514]  ? tun_get+0x1c/0x2f0
[  383.811450][ T8514]  ? tun_get+0x1c/0x2f0
[  383.811476][ T8514]  ? tun_get+0x1c/0x2f0
[  383.811507][ T8514]  tun_chr_write_iter+0x113/0x200
[  383.811539][ T8514]  vfs_write+0x548/0xa90
[  383.811575][ T8514]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  383.811605][ T8514]  ? __pfx_vfs_write+0x10/0x10
[  383.811648][ T8514]  ? __fget_files+0x2a/0x420
[  383.811679][ T8514]  ksys_write+0x145/0x250
[  383.811712][ T8514]  ? __pfx_ksys_write+0x10/0x10
[  383.811748][ T8514]  ? do_syscall_64+0xbe/0x3b0
[  383.811777][ T8514]  do_syscall_64+0xfa/0x3b0
[  383.811798][ T8514]  ? lockdep_hardirqs_on+0x9c/0x150
[  383.811819][ T8514]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.811838][ T8514]  ? clear_bhb_loop+0x60/0xb0
[  383.811864][ T8514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.811885][ T8514] RIP: 0033:0x7f06f718d41f
[  383.811905][ T8514] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  383.811924][ T8514] RSP: 002b:00007f06f7f72000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  383.811947][ T8514] RAX: ffffffffffffffda RBX: 00007f06f73b6080 RCX: 00007f06f718d41f
[  383.811963][ T8514] RDX: 0000000000000036 RSI: 0000200000000600 RDI: 00000000000000c8
[  383.811976][ T8514] RBP: 00007f06f7f72090 R08: 0000000000000000 R09: 0000000000000000
[  383.811990][ T8514] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001
[  383.812003][ T8514] R13: 0000000000000001 R14: 00007f06f73b6080 R15: 00007ffda90e6478
[  383.812037][ T8514]  </TASK>
[  383.814181][   T30] audit: type=1326 audit(1748628566.951:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8507 comm="syz.6.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  383.896079][ T8516] syzkaller1: entered promiscuous mode
[  384.348787][ T8516] syzkaller1: entered allmulticast mode
[  384.878690][ T8526] IPv6: NLM_F_CREATE should be specified when creating new route
[  384.954970][ T8530] FAULT_INJECTION: forcing a failure.
[  384.954970][ T8530] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  384.971114][ T8530] CPU: 0 UID: 0 PID: 8530 Comm: syz.1.650 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  384.971146][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  384.971160][ T8530] Call Trace:
[  384.971169][ T8530]  <TASK>
[  384.971179][ T8530]  dump_stack_lvl+0x189/0x250
[  384.971216][ T8530]  ? __pfx____ratelimit+0x10/0x10
[  384.971240][ T8530]  ? __pfx_dump_stack_lvl+0x10/0x10
[  384.971273][ T8530]  ? __pfx__printk+0x10/0x10
[  384.971310][ T8530]  should_fail_ex+0x414/0x560
[  384.971340][ T8530]  _copy_from_user+0x2d/0xb0
[  384.971373][ T8530]  __copy_msghdr+0x3c5/0x5b0
[  384.971411][ T8530]  ___sys_sendmsg+0x1a5/0x2a0
[  384.971446][ T8530]  ? __pfx____sys_sendmsg+0x10/0x10
[  384.971520][ T8530]  ? __fget_files+0x2a/0x420
[  384.971541][ T8530]  ? __fget_files+0x3a0/0x420
[  384.971573][ T8530]  __sys_sendmmsg+0x227/0x430
[  384.971610][ T8530]  ? __pfx___sys_sendmmsg+0x10/0x10
[  384.971641][ T8530]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  384.971707][ T8530]  ? ksys_write+0x22a/0x250
[  384.971740][ T8530]  ? __pfx_ksys_write+0x10/0x10
[  384.971766][ T8530]  ? rcu_is_watching+0x15/0xb0
[  384.971799][ T8530]  __x64_sys_sendmmsg+0xa0/0xc0
[  384.971833][ T8530]  do_syscall_64+0xfa/0x3b0
[  384.971855][ T8530]  ? lockdep_hardirqs_on+0x9c/0x150
[  384.971877][ T8530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.971898][ T8530]  ? clear_bhb_loop+0x60/0xb0
[  384.971924][ T8530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.971945][ T8530] RIP: 0033:0x7fe19cf8e969
[  384.971963][ T8530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.971982][ T8530] RSP: 002b:00007fe19ddf8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  384.972014][ T8530] RAX: ffffffffffffffda RBX: 00007fe19d1b5fa0 RCX: 00007fe19cf8e969
[  384.972030][ T8530] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000003
[  384.972044][ T8530] RBP: 00007fe19ddf8090 R08: 0000000000000000 R09: 0000000000000000
[  384.972057][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.972070][ T8530] R13: 0000000000000000 R14: 00007fe19d1b5fa0 R15: 00007ffdbfb12d38
[  384.972103][ T8530]  </TASK>
[  385.198109][    C0] vkms_vblank_simulate: vblank timer overrun
[  386.238692][ T5878] usb 7-1: new low-speed USB device number 8 using dummy_hcd
[  387.380565][ T5878] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  387.402093][ T5878] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  387.441634][ T5878] usb 7-1: config 0 interface 0 has no altsetting 0
[  387.688778][ T5878] usb 7-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  387.699631][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.719920][ T5878] usb 7-1: config 0 descriptor??
[  387.753662][ T8540] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  388.554124][ T5878] holtek_mouse 0003:04D9:A067.0008: unbalanced delimiter at end of report description
[  388.749703][ T5878] holtek_mouse 0003:04D9:A067.0008: hid parse failed: -22
[  388.757000][ T5878] holtek_mouse 0003:04D9:A067.0008: probe with driver holtek_mouse failed with error -22
[  388.770671][ T5878] usb 7-1: USB disconnect, device number 8
[  389.391322][ T8569] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  391.459282][ T8584] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  391.466483][ T8584] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  391.472757][ T8584] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  391.478948][ T8584] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  391.486575][ T8584] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  391.552375][ T8587] netlink: 20 bytes leftover after parsing attributes in process `syz.6.667'.
[  392.317410][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  392.317432][   T30] audit: type=1326 audit(1748628576.341:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.6.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7fc00000
[  392.399981][   T30] audit: type=1326 audit(1748628576.341:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.6.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5901d8e969 code=0x7fc00000
[  392.550720][   T30] audit: type=1326 audit(1748628576.341:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.6.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7fc00000
[  392.589054][   T30] audit: type=1326 audit(1748628576.341:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.6.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7fc00000
[  392.614084][   T30] audit: type=1326 audit(1748628576.341:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.6.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7fc00000
[  392.701605][   T30] audit: type=1326 audit(1748628576.341:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.6.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7fc00000
[  392.768569][   T30] audit: type=1326 audit(1748628576.341:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.6.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7fc00000
[  392.842234][   T30] audit: type=1326 audit(1748628576.341:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.6.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7fc00000
[  392.900919][   T30] audit: type=1326 audit(1748628576.341:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.6.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7fc00000
[  392.905087][ T8604] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.672'.
[  392.968836][   T30] audit: type=1326 audit(1748628576.341:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8586 comm="syz.6.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7fc00000
[  393.387891][ T8610] netlink: 60 bytes leftover after parsing attributes in process `syz.8.674'.
[  393.410540][ T5878] usb 7-1: new low-speed USB device number 9 using dummy_hcd
[  393.500081][ T5837] Bluetooth: hci3: command 0x0419 tx timeout
[  393.500571][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout
[  393.506483][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout
[  393.512351][ T5821] Bluetooth: hci1: command 0x0c1a tx timeout
[  393.512399][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout
[  393.678601][ T5878] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  393.794427][ T5878] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  393.814534][ T5878] usb 7-1: config 0 interface 0 has no altsetting 0
[  393.851626][ T8614] ubi31: attaching mtd0
[  393.856832][ T5878] usb 7-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  393.861044][ T8614] ubi31: scanning is finished
[  393.871804][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.872358][ T8614] ubi31: empty MTD device detected
[  394.067822][ T5878] usb 7-1: config 0 descriptor??
[  394.095503][ T8608] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  394.421281][ T8614] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  394.445456][ T8614] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  394.487479][ T8614] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  394.495728][ T8614] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  394.512027][ T8614] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  394.527143][ T8614] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  394.552904][ T8614] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3119479854
[  394.578629][ T8614] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  394.602081][ T8615] ubi31: background thread "ubi_bgt31d" started, PID 8615
[  394.652864][ T5878] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0
[  394.692591][ T5878] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0
[  394.708950][ T5878] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0
[  394.716605][ T5878] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0
[  394.762297][ T5878] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0
[  394.840590][ T5878] holtek_mouse 0003:04D9:A067.0009: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.6-1/input0
[  395.132946][ T5878] usb 7-1: USB disconnect, device number 9
[  396.814579][ T8649] FAULT_INJECTION: forcing a failure.
[  396.814579][ T8649] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  396.831165][ T8649] CPU: 0 UID: 0 PID: 8649 Comm: syz.8.683 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  396.831196][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  396.831210][ T8649] Call Trace:
[  396.831218][ T8649]  <TASK>
[  396.831227][ T8649]  dump_stack_lvl+0x189/0x250
[  396.831265][ T8649]  ? __pfx____ratelimit+0x10/0x10
[  396.831289][ T8649]  ? __pfx_dump_stack_lvl+0x10/0x10
[  396.831320][ T8649]  ? __pfx__printk+0x10/0x10
[  396.831342][ T8649]  ? __might_fault+0xb0/0x130
[  396.831388][ T8649]  should_fail_ex+0x414/0x560
[  396.831417][ T8649]  _copy_from_user+0x2d/0xb0
[  396.831450][ T8649]  snd_seq_ioctl+0x1d8/0x420
[  396.831473][ T8649]  ? smk_tskacc+0x2fc/0x370
[  396.831509][ T8649]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  396.831531][ T8649]  ? smack_file_ioctl+0x24a/0x340
[  396.831571][ T8649]  ? __fget_files+0x3a0/0x420
[  396.831591][ T8649]  ? __fget_files+0x2a/0x420
[  396.831615][ T8649]  ? bpf_lsm_file_ioctl+0x9/0x20
[  396.831639][ T8649]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  396.831664][ T8649]  __se_sys_ioctl+0xf9/0x170
[  396.831695][ T8649]  do_syscall_64+0xfa/0x3b0
[  396.831718][ T8649]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.831741][ T8649]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.831763][ T8649]  ? clear_bhb_loop+0x60/0xb0
[  396.831789][ T8649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.831810][ T8649] RIP: 0033:0x7f932798e969
[  396.831829][ T8649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.831849][ T8649] RSP: 002b:00007f9328837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  396.831872][ T8649] RAX: ffffffffffffffda RBX: 00007f9327bb5fa0 RCX: 00007f932798e969
[  396.831888][ T8649] RDX: 0000200000000580 RSI: 00000000408c5333 RDI: 0000000000000003
[  396.831902][ T8649] RBP: 00007f9328837090 R08: 0000000000000000 R09: 0000000000000000
[  396.831915][ T8649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  396.831928][ T8649] R13: 0000000000000000 R14: 00007f9327bb5fa0 R15: 00007ffda4b7b8e8
[  396.831959][ T8649]  </TASK>
[  397.398672][  T921] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  397.510939][ T8653] netlink: 224 bytes leftover after parsing attributes in process `syz.8.684'.
[  397.650633][  T921] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  397.701903][  T921] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  397.740640][  T921] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  397.794180][  T921] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  397.882410][  T921] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  397.911351][  T921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.091140][  T921] usb 7-1: Product: syz
[  398.095845][  T921] usb 7-1: Manufacturer: syz
[  398.100787][  T921] usb 7-1: SerialNumber: syz
[  398.109666][ T8643] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  398.118924][  T921] usb 7-1: selecting invalid altsetting 1
[  398.350556][ T8643] program syz.6.682 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  398.372963][  T921] cdc_ncm 7-1:1.0: bind() failure
[  398.393722][  T921] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  398.408520][  T921] cdc_ncm 7-1:1.1: bind() failure
[  398.418093][  T921] usb 7-1: USB disconnect, device number 10
[  401.179731][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[  401.202143][ T5837] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  403.694734][ T8694] binder: BINDER_SET_CONTEXT_MGR already set
[  403.702665][ T8694] binder: 8692:8694 ioctl 4018620d 200000000040 returned -16
[  407.316570][ T8721] can0: slcan on ptm0.
[  407.434510][   T30] kauditd_printk_skb: 57 callbacks suppressed
[  407.434554][   T30] audit: type=1326 audit(1748628591.391:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  408.520588][ T8714] can0 (unregistered): slcan off ptm0.
[  408.645015][   T30] audit: type=1326 audit(1748628591.391:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  408.679112][   T30] audit: type=1326 audit(1748628591.391:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  408.708084][   T30] audit: type=1326 audit(1748628591.391:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  408.739907][   T30] audit: type=1326 audit(1748628591.401:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  408.766851][   T30] audit: type=1326 audit(1748628591.401:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  408.795276][   T30] audit: type=1326 audit(1748628591.401:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  408.822117][ T8730] sctp: [Deprecated]: syz.8.705 (pid 8730) Use of struct sctp_assoc_value in delayed_ack socket option.
[  408.822117][ T8730] Use struct sctp_sack_info instead
[  408.904329][   T30] audit: type=1326 audit(1748628591.401:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  408.978925][   T30] audit: type=1326 audit(1748628591.401:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  409.016216][   T30] audit: type=1326 audit(1748628591.401:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8714 comm="syz.6.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5901d8e969 code=0x7ffc0000
[  409.148560][ T5968] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  409.322724][ T5968] usb 7-1: config 0 has an invalid interface number: 255 but max is 0
[  409.333890][ T5968] usb 7-1: config 0 has no interface number 0
[  409.361253][ T5968] usb 7-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  409.401348][ T5968] usb 7-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  409.470557][ T5968] usb 7-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79
[  409.547390][ T5968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.106647][ T5968] usb 7-1: Product: syz
[  410.116009][ T5968] usb 7-1: Manufacturer: syz
[  410.128531][ T5968] usb 7-1: SerialNumber: syz
[  410.149354][ T5968] usb 7-1: config 0 descriptor??
[  410.192796][ T5968] vmk80xx 7-1:0.255: driver 'vmk80xx' failed to auto-configure device.
[  410.420268][ T5837] Bluetooth: hci4: unexpected event for opcode 0x2062
[  410.738795][ T5968] vmk80xx 7-1:0.255: probe with driver vmk80xx failed with error -22
[  410.773760][ T5968] usb 7-1: USB disconnect, device number 11
[  410.824172][ T8748] FAULT_INJECTION: forcing a failure.
[  410.824172][ T8748] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  410.842801][ T8748] CPU: 1 UID: 0 PID: 8748 Comm: syz.8.713 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  410.842833][ T8748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  410.842847][ T8748] Call Trace:
[  410.842855][ T8748]  <TASK>
[  410.842864][ T8748]  dump_stack_lvl+0x189/0x250
[  410.842900][ T8748]  ? __pfx____ratelimit+0x10/0x10
[  410.842922][ T8748]  ? __pfx_dump_stack_lvl+0x10/0x10
[  410.842951][ T8748]  ? __pfx__printk+0x10/0x10
[  410.842988][ T8748]  ? __might_fault+0xb0/0x130
[  410.843041][ T8748]  should_fail_ex+0x414/0x560
[  410.843068][ T8748]  _copy_from_iter+0x1db/0x16f0
[  410.843098][ T8748]  ? rcu_is_watching+0x15/0xb0
[  410.843124][ T8748]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  410.843158][ T8748]  ? __pfx__copy_from_iter+0x10/0x10
[  410.843185][ T8748]  ? __build_skb_around+0x257/0x3e0
[  410.843217][ T8748]  ? netlink_sendmsg+0x642/0xb30
[  410.843244][ T8748]  ? skb_put+0x11b/0x210
[  410.843276][ T8748]  netlink_sendmsg+0x6b2/0xb30
[  410.843315][ T8748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  410.843351][ T8748]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  410.843370][ T8748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  410.843400][ T8748]  __sock_sendmsg+0x21c/0x270
[  410.843426][ T8748]  ____sys_sendmsg+0x505/0x830
[  410.843463][ T8748]  ? __pfx_____sys_sendmsg+0x10/0x10
[  410.843503][ T8748]  ? import_iovec+0x74/0xa0
[  410.843536][ T8748]  ___sys_sendmsg+0x21f/0x2a0
[  410.843569][ T8748]  ? __pfx____sys_sendmsg+0x10/0x10
[  410.843639][ T8748]  ? __fget_files+0x2a/0x420
[  410.843657][ T8748]  ? __fget_files+0x3a0/0x420
[  410.843688][ T8748]  __x64_sys_sendmsg+0x19b/0x260
[  410.843721][ T8748]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  410.843762][ T8748]  ? __pfx_ksys_write+0x10/0x10
[  410.843788][ T8748]  ? rcu_is_watching+0x15/0xb0
[  410.843818][ T8748]  ? do_syscall_64+0xbe/0x3b0
[  410.843845][ T8748]  do_syscall_64+0xfa/0x3b0
[  410.843865][ T8748]  ? lockdep_hardirqs_on+0x9c/0x150
[  410.843886][ T8748]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.843907][ T8748]  ? clear_bhb_loop+0x60/0xb0
[  410.843931][ T8748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.843951][ T8748] RIP: 0033:0x7f932798e969
[  410.843970][ T8748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  410.843988][ T8748] RSP: 002b:00007f9328837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  410.844010][ T8748] RAX: ffffffffffffffda RBX: 00007f9327bb5fa0 RCX: 00007f932798e969
[  410.844031][ T8748] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  410.844045][ T8748] RBP: 00007f9328837090 R08: 0000000000000000 R09: 0000000000000000
[  410.844057][ T8748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.844070][ T8748] R13: 0000000000000000 R14: 00007f9327bb5fa0 R15: 00007ffda4b7b8e8
[  410.844103][ T8748]  </TASK>
[  411.194014][ T8751] FAULT_INJECTION: forcing a failure.
[  411.194014][ T8751] name failslab, interval 1, probability 0, space 0, times 0
[  411.216983][ T8751] CPU: 1 UID: 0 PID: 8751 Comm: syz.8.714 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  411.217016][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  411.217030][ T8751] Call Trace:
[  411.217038][ T8751]  <TASK>
[  411.217048][ T8751]  dump_stack_lvl+0x189/0x250
[  411.217086][ T8751]  ? __pfx____ratelimit+0x10/0x10
[  411.217110][ T8751]  ? __pfx_dump_stack_lvl+0x10/0x10
[  411.217142][ T8751]  ? __pfx__printk+0x10/0x10
[  411.217167][ T8751]  ? __pfx___might_resched+0x10/0x10
[  411.217200][ T8751]  ? fs_reclaim_acquire+0x7d/0x100
[  411.217230][ T8751]  should_fail_ex+0x414/0x560
[  411.217261][ T8751]  should_failslab+0xa8/0x100
[  411.217297][ T8751]  __kmalloc_noprof+0xcb/0x4f0
[  411.217328][ T8751]  ? tomoyo_encode+0x28b/0x550
[  411.217362][ T8751]  tomoyo_encode+0x28b/0x550
[  411.217396][ T8751]  tomoyo_realpath_from_path+0x58d/0x5d0
[  411.217439][ T8751]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  411.217462][ T8751]  tomoyo_path_number_perm+0x1e8/0x5a0
[  411.217488][ T8751]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  411.217531][ T8751]  ? __lock_acquire+0xab9/0xd20
[  411.217575][ T8751]  ? __fget_files+0x2a/0x420
[  411.217599][ T8751]  ? __fget_files+0x2a/0x420
[  411.217618][ T8751]  ? __fget_files+0x3a0/0x420
[  411.217637][ T8751]  ? __fget_files+0x2a/0x420
[  411.217662][ T8751]  security_file_ioctl+0xcb/0x2d0
[  411.217689][ T8751]  __se_sys_ioctl+0x47/0x170
[  411.217721][ T8751]  do_syscall_64+0xfa/0x3b0
[  411.217744][ T8751]  ? lockdep_hardirqs_on+0x9c/0x150
[  411.217766][ T8751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.217788][ T8751]  ? clear_bhb_loop+0x60/0xb0
[  411.217815][ T8751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.217835][ T8751] RIP: 0033:0x7f932798e969
[  411.217855][ T8751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  411.217874][ T8751] RSP: 002b:00007f9328837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  411.217896][ T8751] RAX: ffffffffffffffda RBX: 00007f9327bb5fa0 RCX: 00007f932798e969
[  411.217913][ T8751] RDX: 0000200000000200 RSI: 00000000c03064b7 RDI: 0000000000000003
[  411.217926][ T8751] RBP: 00007f9328837090 R08: 0000000000000000 R09: 0000000000000000
[  411.217938][ T8751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  411.217951][ T8751] R13: 0000000000000000 R14: 00007f9327bb5fa0 R15: 00007ffda4b7b8e8
[  411.217986][ T8751]  </TASK>
[  411.218009][ T8751] ERROR: Out of memory at tomoyo_realpath_from_path.
[  412.232875][ T8767] can0: slcan on ptm0.
[  412.602081][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  412.608886][   T30] audit: type=1326 audit(1748628596.641:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8759 comm="syz.7.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f718e969 code=0x7ffc0000
[  412.665104][   T30] audit: type=1326 audit(1748628596.641:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8759 comm="syz.7.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f718e969 code=0x7ffc0000
[  412.740047][ T8759] can0 (unregistered): slcan off ptm0.
[  414.468985][ T5837] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  414.477636][ T5837] Bluetooth: hci4: Injecting HCI hardware error event
[  414.486662][ T5837] Bluetooth: hci4: hardware error 0x00
[  415.920394][ T8817] FAULT_INJECTION: forcing a failure.
[  415.920394][ T8817] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  415.935645][ T8817] CPU: 0 UID: 0 PID: 8817 Comm: syz.0.731 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  415.935678][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  415.935693][ T8817] Call Trace:
[  415.935702][ T8817]  <TASK>
[  415.935712][ T8817]  dump_stack_lvl+0x189/0x250
[  415.935751][ T8817]  ? __pfx____ratelimit+0x10/0x10
[  415.935775][ T8817]  ? __pfx_dump_stack_lvl+0x10/0x10
[  415.935808][ T8817]  ? __pfx__printk+0x10/0x10
[  415.935844][ T8817]  should_fail_ex+0x414/0x560
[  415.935874][ T8817]  _copy_to_user+0x31/0xb0
[  415.935908][ T8817]  simple_read_from_buffer+0xe1/0x170
[  415.935953][ T8817]  proc_fail_nth_read+0x1df/0x250
[  415.935981][ T8817]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  415.936002][ T8817]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  415.936026][ T8817]  ? vfs_read+0x1e5/0x980
[  415.936057][ T8817]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  415.936084][ T8817]  vfs_read+0x200/0x980
[  415.936111][ T8817]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  415.936150][ T8817]  ? __pfx___mutex_lock+0x10/0x10
[  415.936175][ T8817]  ? __pfx_vfs_read+0x10/0x10
[  415.936208][ T8817]  ? __rcu_read_unlock+0x84/0xe0
[  415.936243][ T8817]  ? __fget_files+0x3a0/0x420
[  415.936263][ T8817]  ? __fget_files+0x2a/0x420
[  415.936293][ T8817]  ksys_read+0x145/0x250
[  415.936325][ T8817]  ? __pfx_ksys_read+0x10/0x10
[  415.936369][ T8817]  do_syscall_64+0xfa/0x3b0
[  415.936395][ T8817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.936416][ T8817]  ? asm_sysvec_call_function_single+0x1a/0x20
[  415.936437][ T8817]  ? clear_bhb_loop+0x60/0xb0
[  415.936464][ T8817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.936485][ T8817] RIP: 0033:0x7f4090f8d37c
[  415.936505][ T8817] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  415.936524][ T8817] RSP: 002b:00007f4091d23030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  415.936547][ T8817] RAX: ffffffffffffffda RBX: 00007f40911b6080 RCX: 00007f4090f8d37c
[  415.936563][ T8817] RDX: 000000000000000f RSI: 00007f4091d230a0 RDI: 0000000000000008
[  415.936577][ T8817] RBP: 00007f4091d23090 R08: 0000000000000000 R09: 0000000000000000
[  415.936591][ T8817] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001
[  415.936604][ T8817] R13: 0000000000000000 R14: 00007f40911b6080 R15: 00007ffef9cec2b8
[  415.936638][ T8817]  </TASK>
[  416.171908][    C0] vkms_vblank_simulate: vblank timer overrun
[  416.538930][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  417.276318][ T8827] FAULT_INJECTION: forcing a failure.
[  417.276318][ T8827] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.358693][ T8827] CPU: 1 UID: 0 PID: 8827 Comm: syz.0.735 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  417.358727][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  417.358741][ T8827] Call Trace:
[  417.358750][ T8827]  <TASK>
[  417.358759][ T8827]  dump_stack_lvl+0x189/0x250
[  417.358798][ T8827]  ? __pfx____ratelimit+0x10/0x10
[  417.358822][ T8827]  ? __pfx_dump_stack_lvl+0x10/0x10
[  417.358855][ T8827]  ? __pfx__printk+0x10/0x10
[  417.358877][ T8827]  ? __might_fault+0xb0/0x130
[  417.358925][ T8827]  should_fail_ex+0x414/0x560
[  417.358956][ T8827]  _copy_to_iter+0x3f5/0x16f0
[  417.358989][ T8827]  ? lockdep_hardirqs_on+0x9c/0x150
[  417.359019][ T8827]  ? __pfx__copy_to_iter+0x10/0x10
[  417.359043][ T8827]  ? kfree+0x18e/0x440
[  417.359072][ T8827]  ? seq_putc+0x75/0xf0
[  417.359106][ T8827]  ? netstat_seq_show+0xe47/0xe80
[  417.359147][ T8827]  seq_read_iter+0xbeb/0xe10
[  417.359200][ T8827]  seq_read+0x2e2/0x3d0
[  417.359238][ T8827]  ? __pfx_seq_read+0x10/0x10
[  417.359262][ T8827]  ? __mutex_trylock_common+0x153/0x260
[  417.359314][ T8827]  ? __pfx_seq_read+0x10/0x10
[  417.359339][ T8827]  proc_reg_read+0x1e9/0x2e0
[  417.359366][ T8827]  ? __pfx_proc_reg_read+0x10/0x10
[  417.359396][ T8827]  vfs_read+0x200/0x980
[  417.359432][ T8827]  ? __pfx___mutex_lock+0x10/0x10
[  417.359458][ T8827]  ? __pfx_vfs_read+0x10/0x10
[  417.359489][ T8827]  ? __fget_files+0x2a/0x420
[  417.359515][ T8827]  ? __fget_files+0x3a0/0x420
[  417.359534][ T8827]  ? __fget_files+0x2a/0x420
[  417.359564][ T8827]  ksys_read+0x145/0x250
[  417.359606][ T8827]  ? __pfx_ksys_read+0x10/0x10
[  417.359632][ T8827]  ? rcu_is_watching+0x15/0xb0
[  417.359664][ T8827]  ? do_syscall_64+0xbe/0x3b0
[  417.359694][ T8827]  do_syscall_64+0xfa/0x3b0
[  417.359716][ T8827]  ? lockdep_hardirqs_on+0x9c/0x150
[  417.359739][ T8827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.359760][ T8827]  ? clear_bhb_loop+0x60/0xb0
[  417.359788][ T8827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.359809][ T8827] RIP: 0033:0x7f4090f8e969
[  417.359828][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.359848][ T8827] RSP: 002b:00007f4091d44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  417.359871][ T8827] RAX: ffffffffffffffda RBX: 00007f40911b5fa0 RCX: 00007f4090f8e969
[  417.359887][ T8827] RDX: 0000000000002020 RSI: 0000200000002500 RDI: 0000000000000003
[  417.359901][ T8827] RBP: 00007f4091d44090 R08: 0000000000000000 R09: 0000000000000000
[  417.359914][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  417.359926][ T8827] R13: 0000000000000000 R14: 00007f40911b5fa0 R15: 00007ffef9cec2b8
[  417.359961][ T8827]  </TASK>
[  418.071990][ T8833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.737'.
[  420.798188][ T8853] overlayfs: failed to set uuid (148/file1, err=-1); falling back to uuid=null.
[  420.819369][ T8853] overlayfs: failed to verify upper root origin
[  421.074224][ T8861] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.742'.
[  421.147956][ T8862] ubi: mtd0 is already attached to ubi31
[  421.810309][ T8861] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.742'.
[  421.898085][ T8861] netlink: 69 bytes leftover after parsing attributes in process `syz.0.742'.
[  422.007123][ T8852] sctp: failed to load transform for md5: -2
[  422.334286][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.387567][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.318059][ T7214] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  423.506441][ T7214] usb 9-1: Using ep0 maxpacket: 8
[  423.596172][ T7214] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  423.675958][ T7214] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  423.905742][ T7214] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  423.959338][ T7214] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  424.020929][ T7214] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  424.098244][ T7214] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  424.797268][ T7214] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.839154][ T8888] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  424.853505][ T8888] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  424.871167][ T8888] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  424.878840][ T8888] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  425.348928][ T8896] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  425.355123][ T8896] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  425.363265][ T8896] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  425.373901][ T8896] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  425.487289][ T7214] usb 9-1: can't set config #16, error -71
[  425.557532][ T7214] usb 9-1: USB disconnect, device number 4
[  426.677126][ T8907] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.679012][ T8907] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.418682][ T5837] Bluetooth: hci3: command 0x0419 tx timeout
[  427.418855][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  427.419029][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout
[  427.419232][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  427.811195][ T8910] sctp: failed to load transform for md5: -2
[  428.378178][ T8926] netlink: 'syz.0.765': attribute type 18 has an invalid length.
[  431.030645][ T8957] ubi: mtd0 is already attached to ubi31
[  431.704151][ T8952] sctp: failed to load transform for md5: -2
[  431.811556][ T5968] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  431.978552][ T5968] usb 7-1: Using ep0 maxpacket: 16
[  432.732565][ T5968] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  432.929232][ T5968] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  433.022076][ T5968] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  433.041554][ T5968] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  433.051197][ T5968] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  433.061033][ T5968] usb 7-1: SerialNumber: syz
[  433.074414][ T8949] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  433.360456][ T5968] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22
[  433.375456][ T5968] usb 7-1: USB disconnect, device number 12
[  433.394426][ T8972] netlink: 60 bytes leftover after parsing attributes in process `syz.8.778'.
[  434.588823][ T5876] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  434.689055][ T5968] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  434.820241][ T5876] usb 9-1: Using ep0 maxpacket: 16
[  434.955898][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.991809][ T5968] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  435.022046][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.042568][ T5968] usb 7-1: config 0 has no interfaces?
[  435.048223][ T5968] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  435.844718][ T8998] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  435.851177][ T8998] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  435.857363][ T8998] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  435.863672][ T8998] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  436.038215][ T5876] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  436.068913][ T5968] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.110514][ T5876] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  437.121002][ T5968] usb 7-1: config 0 descriptor??
[  437.126146][ T5876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.140473][ T5876] usb 9-1: config 0 descriptor??
[  437.292648][ T5876] usbhid 9-1:0.0: can't add hid device: -71
[  437.308764][ T5876] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  437.338240][ T8989] warning: `syz.6.783' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  437.338628][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout
[  437.368744][ T5876] usb 9-1: USB disconnect, device number 5
[  437.431011][ T9013] FAULT_INJECTION: forcing a failure.
[  437.431011][ T9013] name failslab, interval 1, probability 0, space 0, times 0
[  437.491478][ T9013] CPU: 0 UID: 0 PID: 9013 Comm: syz.8.788 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  437.491512][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  437.491526][ T9013] Call Trace:
[  437.491535][ T9013]  <TASK>
[  437.491545][ T9013]  dump_stack_lvl+0x189/0x250
[  437.491583][ T9013]  ? __pfx____ratelimit+0x10/0x10
[  437.491608][ T9013]  ? __pfx_dump_stack_lvl+0x10/0x10
[  437.491640][ T9013]  ? __pfx__printk+0x10/0x10
[  437.491669][ T9013]  ? __pfx___might_resched+0x10/0x10
[  437.491694][ T9013]  ? fs_reclaim_acquire+0x7d/0x100
[  437.491723][ T9013]  should_fail_ex+0x414/0x560
[  437.491754][ T9013]  should_failslab+0xa8/0x100
[  437.491790][ T9013]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  437.491824][ T9013]  ? is_bpf_text_address+0x292/0x2b0
[  437.491849][ T9013]  ? __alloc_skb+0x112/0x2d0
[  437.491875][ T9013]  ? is_bpf_text_address+0x26/0x2b0
[  437.491905][ T9013]  __alloc_skb+0x112/0x2d0
[  437.491938][ T9013]  sock_omalloc+0xd8/0x1e0
[  437.491977][ T9013]  msg_zerocopy_realloc+0x9c/0x850
[  437.492011][ T9013]  ? sock_cmsg_send+0x232/0x270
[  437.492040][ T9013]  tcp_sendmsg_locked+0x4bb7/0x56f0
[  437.492068][ T9013]  ? stack_depot_save_flags+0x40/0x900
[  437.492104][ T9013]  ? kasan_save_track+0x3e/0x80
[  437.492132][ T9013]  ? __kasan_kmalloc+0x93/0xb0
[  437.492162][ T9013]  ? sock_kmalloc+0xd6/0x160
[  437.492187][ T9013]  ? ____sys_sendmsg+0x1b5/0x830
[  437.492216][ T9013]  ? ___sys_sendmsg+0x21f/0x2a0
[  437.492245][ T9013]  ? __sys_sendmmsg+0x227/0x430
[  437.492274][ T9013]  ? __x64_sys_sendmmsg+0xa0/0xc0
[  437.492304][ T9013]  ? do_syscall_64+0xfa/0x3b0
[  437.492328][ T9013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.492370][ T9013]  ? __lock_acquire+0xab9/0xd20
[  437.492407][ T9013]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  437.492432][ T9013]  ? __local_bh_enable_ip+0x12d/0x1c0
[  437.492463][ T9013]  ? __local_bh_enable_ip+0x12d/0x1c0
[  437.492507][ T9013]  tcp_sendmsg+0x2f/0x50
[  437.492534][ T9013]  __sock_sendmsg+0x19c/0x270
[  437.492563][ T9013]  ____sys_sendmsg+0x52d/0x830
[  437.492602][ T9013]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.492646][ T9013]  ? import_iovec+0x74/0xa0
[  437.492681][ T9013]  ___sys_sendmsg+0x21f/0x2a0
[  437.492717][ T9013]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.492791][ T9013]  ? __fget_files+0x2a/0x420
[  437.492812][ T9013]  ? __fget_files+0x3a0/0x420
[  437.492845][ T9013]  __sys_sendmmsg+0x227/0x430
[  437.492884][ T9013]  ? __pfx___sys_sendmmsg+0x10/0x10
[  437.492914][ T9013]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  437.492969][ T9013]  ? ksys_write+0x22a/0x250
[  437.493003][ T9013]  ? __pfx_ksys_write+0x10/0x10
[  437.493031][ T9013]  ? rcu_is_watching+0x15/0xb0
[  437.493068][ T9013]  __x64_sys_sendmmsg+0xa0/0xc0
[  437.493104][ T9013]  do_syscall_64+0xfa/0x3b0
[  437.493127][ T9013]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.493150][ T9013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.493172][ T9013]  ? clear_bhb_loop+0x60/0xb0
[  437.493205][ T9013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.493226][ T9013] RIP: 0033:0x7f932798e969
[  437.493245][ T9013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  437.493265][ T9013] RSP: 002b:00007f9328837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  437.493288][ T9013] RAX: ffffffffffffffda RBX: 00007f9327bb5fa0 RCX: 00007f932798e969
[  437.493304][ T9013] RDX: 0000000000000001 RSI: 0000200000002780 RDI: 0000000000000003
[  437.493319][ T9013] RBP: 00007f9328837090 R08: 0000000000000000 R09: 0000000000000000
[  437.493332][ T9013] R10: 0000000024004c41 R11: 0000000000000246 R12: 0000000000000001
[  437.493347][ T9013] R13: 0000000000000000 R14: 00007f9327bb5fa0 R15: 00007ffda4b7b8e8
[  437.493381][ T9013]  </TASK>
[  437.860112][    C0] vkms_vblank_simulate: vblank timer overrun
[  437.872278][ T9015] FAULT_INJECTION: forcing a failure.
[  437.872278][ T9015] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  437.894012][ T9015] CPU: 0 UID: 0 PID: 9015 Comm: syz.7.789 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  437.894047][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  437.894061][ T9015] Call Trace:
[  437.894069][ T9015]  <TASK>
[  437.894079][ T9015]  dump_stack_lvl+0x189/0x250
[  437.894117][ T9015]  ? __pfx____ratelimit+0x10/0x10
[  437.894147][ T9015]  ? __pfx_dump_stack_lvl+0x10/0x10
[  437.894179][ T9015]  ? __pfx__printk+0x10/0x10
[  437.894201][ T9015]  ? __might_fault+0xb0/0x130
[  437.894247][ T9015]  should_fail_ex+0x414/0x560
[  437.894277][ T9015]  _copy_from_iter+0x1db/0x16f0
[  437.894310][ T9015]  ? rcu_is_watching+0x15/0xb0
[  437.894338][ T9015]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  437.894373][ T9015]  ? __pfx__copy_from_iter+0x10/0x10
[  437.894403][ T9015]  ? __build_skb_around+0x257/0x3e0
[  437.894438][ T9015]  ? netlink_sendmsg+0x642/0xb30
[  437.894467][ T9015]  ? skb_put+0x11b/0x210
[  437.894501][ T9015]  netlink_sendmsg+0x6b2/0xb30
[  437.894542][ T9015]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.894582][ T9015]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  437.894603][ T9015]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.894635][ T9015]  __sock_sendmsg+0x21c/0x270
[  437.894664][ T9015]  ____sys_sendmsg+0x505/0x830
[  437.894703][ T9015]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.894746][ T9015]  ? import_iovec+0x74/0xa0
[  437.894781][ T9015]  ___sys_sendmsg+0x21f/0x2a0
[  437.894816][ T9015]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.894889][ T9015]  ? __fget_files+0x2a/0x420
[  437.894908][ T9015]  ? __fget_files+0x3a0/0x420
[  437.894941][ T9015]  __x64_sys_sendmsg+0x19b/0x260
[  437.894977][ T9015]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  437.895020][ T9015]  ? __pfx_ksys_write+0x10/0x10
[  437.895048][ T9015]  ? rcu_is_watching+0x15/0xb0
[  437.895079][ T9015]  ? do_syscall_64+0xbe/0x3b0
[  437.895108][ T9015]  do_syscall_64+0xfa/0x3b0
[  437.895131][ T9015]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.895159][ T9015]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.895181][ T9015]  ? clear_bhb_loop+0x60/0xb0
[  437.895208][ T9015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.895230][ T9015] RIP: 0033:0x7f06f718e969
[  437.895249][ T9015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  437.895268][ T9015] RSP: 002b:00007f06f7f93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  437.895291][ T9015] RAX: ffffffffffffffda RBX: 00007f06f73b5fa0 RCX: 00007f06f718e969
[  437.895308][ T9015] RDX: 0000000000004084 RSI: 00002000000001c0 RDI: 0000000000000003
[  437.895322][ T9015] RBP: 00007f06f7f93090 R08: 0000000000000000 R09: 0000000000000000
[  437.895336][ T9015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.895349][ T9015] R13: 0000000000000000 R14: 00007f06f73b5fa0 R15: 00007ffda90e6478
[  437.895383][ T9015]  </TASK>
[  437.898685][ T5837] Bluetooth: hci3: command 0x0419 tx timeout
[  438.318986][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout
[  438.325179][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout
[  438.521018][ T5876] usb 7-1: USB disconnect, device number 13
[  439.427755][ T9030] ubi: mtd0 is already attached to ubi31
[  443.559311][ T9047] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  443.567881][ T9047] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  443.574505][ T9047] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  443.581507][ T9047] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  443.928684][ T5876] usb 8-1: new low-speed USB device number 4 using dummy_hcd
[  444.920511][ T9067] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  445.190605][ T5876] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  445.201955][ T5876] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  445.212913][ T5876] usb 8-1: config 0 interface 0 has no altsetting 0
[  445.388767][ T5876] usb 8-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  445.397908][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.511385][ T5876] usb 8-1: config 0 descriptor??
[  445.534416][ T9055] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  445.578984][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[  445.585706][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout
[  445.593064][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout
[  445.658575][ T5837] Bluetooth: hci3: command 0x0419 tx timeout
[  446.187223][ T9077] netlink: 60 bytes leftover after parsing attributes in process `syz.0.807'.
[  446.378773][ T5876] holtek_mouse 0003:04D9:A067.000A: bogus close delimiter
[  446.408806][ T5876] holtek_mouse 0003:04D9:A067.000A: item 0 2 2 10 parsing failed
[  446.799355][ T5876] holtek_mouse 0003:04D9:A067.000A: hid parse failed: -22
[  446.806623][ T5876] holtek_mouse 0003:04D9:A067.000A: probe with driver holtek_mouse failed with error -22
[  446.868835][ T5876] usb 8-1: USB disconnect, device number 4
[  448.140752][ T7213] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  448.481269][ T9092] 9pnet_fd: Insufficient options for proto=fd
[  448.599698][ T7213] usb 7-1: Using ep0 maxpacket: 8
[  448.622376][ T7213] usb 7-1: config index 0 descriptor too short (expected 6427, got 27)
[  448.637490][ T7213] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  448.680135][ T7213] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  448.690029][ T7213] usb 7-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  448.698148][ T7213] usb 7-1: Product: syz
[  448.777540][ T7213] usb 7-1: Manufacturer: syz
[  448.837546][ T7213] usb 7-1: config 0 descriptor??
[  448.902698][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.811'.
[  449.095308][ T5888] usb 7-1: USB disconnect, device number 14
[  449.106930][ T9100] FAULT_INJECTION: forcing a failure.
[  449.106930][ T9100] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  449.170061][ T9100] CPU: 1 UID: 0 PID: 9100 Comm: syz.7.812 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  449.170095][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  449.170110][ T9100] Call Trace:
[  449.170118][ T9100]  <TASK>
[  449.170128][ T9100]  dump_stack_lvl+0x189/0x250
[  449.170166][ T9100]  ? __pfx____ratelimit+0x10/0x10
[  449.170191][ T9100]  ? __pfx_dump_stack_lvl+0x10/0x10
[  449.170224][ T9100]  ? __pfx__printk+0x10/0x10
[  449.170248][ T9100]  ? fs_reclaim_acquire+0x7d/0x100
[  449.170303][ T9100]  should_fail_ex+0x414/0x560
[  449.170334][ T9100]  prepare_alloc_pages+0x213/0x610
[  449.170368][ T9100]  __alloc_frozen_pages_noprof+0x123/0x370
[  449.170400][ T9100]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  449.170436][ T9100]  ? policy_nodemask+0x27c/0x720
[  449.170476][ T9100]  alloc_pages_mpol+0x232/0x4a0
[  449.170518][ T9100]  alloc_pages_noprof+0xa9/0x190
[  449.170555][ T9100]  af_alg_sendmsg+0x133a/0x22e0
[  449.170608][ T9100]  ? __pfx_af_alg_sendmsg+0x10/0x10
[  449.170632][ T9100]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  449.170682][ T9100]  ? skcipher_sendmsg+0x26/0xf0
[  449.170706][ T9100]  ? __pfx_skcipher_sendmsg+0x10/0x10
[  449.170734][ T9100]  __sock_sendmsg+0x21c/0x270
[  449.170763][ T9100]  __sys_sendto+0x3bd/0x520
[  449.170796][ T9100]  ? __pfx___sys_sendto+0x10/0x10
[  449.170822][ T9100]  ? count_memcg_event_mm+0x35b/0x3b0
[  449.170884][ T9100]  ? exc_page_fault+0x76/0xf0
[  449.170912][ T9100]  ? do_user_addr_fault+0xc8a/0x1390
[  449.170940][ T9100]  __x64_sys_sendto+0xde/0x100
[  449.170975][ T9100]  do_syscall_64+0xfa/0x3b0
[  449.170998][ T9100]  ? lockdep_hardirqs_on+0x9c/0x150
[  449.171020][ T9100]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.171042][ T9100]  ? clear_bhb_loop+0x60/0xb0
[  449.171069][ T9100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.171091][ T9100] RIP: 0033:0x7f06f71907fc
[  449.171110][ T9100] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  449.171129][ T9100] RSP: 002b:00007f06f7f70ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  449.171153][ T9100] RAX: ffffffffffffffda RBX: 00007f06f7f70fc0 RCX: 00007f06f71907fc
[  449.171169][ T9100] RDX: 0000000000000020 RSI: 00007f06f7f71010 RDI: 0000000000000004
[  449.171184][ T9100] RBP: 0000000000000000 R08: 00007f06f7f70f14 R09: 000000000000000c
[  449.171198][ T9100] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  449.171211][ T9100] R13: 00007f06f7f70f68 R14: 00007f06f7f71010 R15: 0000000000000000
[  449.171245][ T9100]  </TASK>
[  449.176704][ T9101] trusted_key: syz.7.812 sent an empty control message without MSG_MORE.
[  449.597902][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.7.815'.
[  449.750442][ T5876] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  449.847746][ T9120] FAULT_INJECTION: forcing a failure.
[  449.847746][ T9120] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  449.865640][ T9120] CPU: 0 UID: 0 PID: 9120 Comm: syz.0.818 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  449.865672][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  449.865685][ T9120] Call Trace:
[  449.865693][ T9120]  <TASK>
[  449.865703][ T9120]  dump_stack_lvl+0x189/0x250
[  449.865740][ T9120]  ? __pfx____ratelimit+0x10/0x10
[  449.865763][ T9120]  ? __pfx_dump_stack_lvl+0x10/0x10
[  449.865795][ T9120]  ? __pfx__printk+0x10/0x10
[  449.865819][ T9120]  ? fs_reclaim_acquire+0x7d/0x100
[  449.865851][ T9120]  should_fail_ex+0x414/0x560
[  449.865898][ T9120]  prepare_alloc_pages+0x213/0x610
[  449.865932][ T9120]  __alloc_frozen_pages_noprof+0x123/0x370
[  449.865963][ T9120]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  449.865993][ T9120]  ? __lock_acquire+0xab9/0xd20
[  449.866020][ T9120]  ? policy_nodemask+0x27c/0x720
[  449.866052][ T9120]  ? __lock_acquire+0xab9/0xd20
[  449.866078][ T9120]  alloc_pages_mpol+0x232/0x4a0
[  449.866119][ T9120]  alloc_pages_noprof+0xa9/0x190
[  449.866155][ T9120]  __pud_alloc+0x3a/0x260
[  449.866193][ T9120]  __handle_mm_fault+0x354b/0x55e0
[  449.866233][ T9120]  ? mt_find+0x46f/0x5f0
[  449.866260][ T9120]  ? mt_find+0x15c/0x5f0
[  449.866287][ T9120]  ? __pfx___handle_mm_fault+0x10/0x10
[  449.866338][ T9120]  ? find_vma+0xe7/0x160
[  449.866370][ T9120]  ? __pfx_find_vma+0x10/0x10
[  449.866408][ T9120]  handle_mm_fault+0x2d5/0x7f0
[  449.866451][ T9120]  do_user_addr_fault+0x764/0x1390
[  449.866493][ T9120]  exc_page_fault+0x76/0xf0
[  449.866527][ T9120]  asm_exc_page_fault+0x26/0x30
[  449.866547][ T9120] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  449.866580][ T9120] Code: f7 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  449.866598][ T9120] RSP: 0018:ffffc9000fb77ca8 EFLAGS: 00050202
[  449.866617][ T9120] RAX: ffffffff84b8d601 RBX: 0000000000000048 RCX: 0000000000000048
[  449.866633][ T9120] RDX: 0000000000000000 RSI: ffffc9000fb77db0 RDI: 0000200000000080
[  449.866647][ T9120] RBP: ffffc9000fb77ee0 R08: ffffc9000fb77df7 R09: 1ffff92001f6efbe
[  449.866664][ T9120] R10: dffffc0000000000 R11: fffff52001f6efbf R12: 00002000000000c8
[  449.866680][ T9120] R13: 00007ffffffff000 R14: ffffc9000fb77db0 R15: 0000200000000080
[  449.866706][ T9120]  ? _copy_from_user+0x91/0xb0
[  449.866745][ T9120]  _copy_to_user+0x8a/0xb0
[  449.866779][ T9120]  __se_sys_shmctl+0x320/0x3e0
[  449.866814][ T9120]  ? __pfx___se_sys_shmctl+0x10/0x10
[  449.866855][ T9120]  ? __fget_files+0x3a0/0x420
[  449.866888][ T9120]  ? ksys_write+0x22a/0x250
[  449.866921][ T9120]  ? __pfx_ksys_write+0x10/0x10
[  449.866949][ T9120]  ? rcu_is_watching+0x15/0xb0
[  449.866980][ T9120]  ? do_syscall_64+0xbe/0x3b0
[  449.867009][ T9120]  do_syscall_64+0xfa/0x3b0
[  449.867032][ T9120]  ? lockdep_hardirqs_on+0x9c/0x150
[  449.867054][ T9120]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.867075][ T9120]  ? clear_bhb_loop+0x60/0xb0
[  449.867102][ T9120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.867123][ T9120] RIP: 0033:0x7f4090f8e969
[  449.867142][ T9120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  449.867160][ T9120] RSP: 002b:00007f4091d44038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f
[  449.867181][ T9120] RAX: ffffffffffffffda RBX: 00007f40911b5fa0 RCX: 00007f4090f8e969
[  449.867198][ T9120] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003
[  449.867212][ T9120] RBP: 00007f4091d44090 R08: 0000000000000000 R09: 0000000000000000
[  449.867225][ T9120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.867238][ T9120] R13: 0000000000000000 R14: 00007f40911b5fa0 R15: 00007ffef9cec2b8
[  449.867272][ T9120]  </TASK>
[  450.238549][  T921] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  450.418529][ T5876] usb 9-1: Using ep0 maxpacket: 16
[  450.428794][ T5876] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  450.437894][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.446131][ T5876] usb 9-1: Product: syz
[  450.450709][ T5876] usb 9-1: Manufacturer: syz
[  450.455333][ T5876] usb 9-1: SerialNumber: syz
[  450.585377][ T5876] usb 9-1: config 0 descriptor??
[  450.620403][  T921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  450.631496][  T921] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  450.645240][  T921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.662528][  T921] usb 2-1: config 0 descriptor??
[  451.122071][ T9132] ubi: mtd0 is already attached to ubi31
[  451.578045][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.587955][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.647947][  T921] pwc: Askey VC010 type 2 USB webcam detected.
[  451.694584][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.703564][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.723368][ T5888] usb 9-1: USB disconnect, device number 6
[  452.297255][  T921] pwc: recv_control_msg error -32 req 02 val 2b00
[  452.372824][  T921] pwc: recv_control_msg error -32 req 02 val 2700
[  452.383594][  T921] pwc: recv_control_msg error -32 req 02 val 2c00
[  452.390944][  T921] pwc: recv_control_msg error -32 req 04 val 1000
[  452.398569][  T921] pwc: recv_control_msg error -32 req 04 val 1300
[  452.408746][  T921] pwc: recv_control_msg error -71 req 04 val 1400
[  452.444012][  T921] pwc: recv_control_msg error -71 req 02 val 2000
[  452.462465][  T921] pwc: recv_control_msg error -71 req 02 val 2100
[  452.472516][  T921] pwc: recv_control_msg error -71 req 04 val 1500
[  452.490130][  T921] pwc: recv_control_msg error -71 req 02 val 2500
[  452.498652][  T921] pwc: recv_control_msg error -71 req 02 val 2400
[  452.515812][  T921] pwc: recv_control_msg error -71 req 02 val 2600
[  452.539705][  T921] pwc: recv_control_msg error -71 req 02 val 2900
[  452.556911][  T921] pwc: recv_control_msg error -71 req 02 val 2800
[  452.588263][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.823'.
[  452.595826][  T921] pwc: recv_control_msg error -71 req 04 val 1100
[  452.681336][  T921] pwc: recv_control_msg error -71 req 04 val 1200
[  452.707752][  T921] pwc: Registered as video103.
[  452.776641][ T9146] 9pnet_fd: Insufficient options for proto=fd
[  453.025438][  T921] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[  453.191911][ T9142] macsec0: entered promiscuous mode
[  453.226290][  T921] usb 2-1: USB disconnect, device number 25
[  454.324109][ T5837] Bluetooth: hci0: unexpected event for opcode 0x2006
[  455.008920][ T5876] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  455.182148][ T5876] usb 7-1: Using ep0 maxpacket: 16
[  455.202243][ T5876] usb 7-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e
[  455.242226][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.282308][ T5876] usb 7-1: Product: syz
[  455.288529][ T5876] usb 7-1: Manufacturer: syz
[  455.293137][ T5876] usb 7-1: SerialNumber: syz
[  455.329574][ T5876] usb 7-1: config 0 descriptor??
[  455.357794][ T5876] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input10
[  456.482992][ T5175] bcm5974 7-1:0.0: could not read from device
[  456.514693][ T5175] bcm5974 7-1:0.0: could not read from device
[  456.569949][ T5876] usb 7-1: USB disconnect, device number 15
[  456.570064][ T5175] bcm5974 7-1:0.0: could not read from device
[  456.881257][ T9176] ubi: mtd0 is already attached to ubi31
[  457.802903][ T9182] netlink: 60 bytes leftover after parsing attributes in process `syz.6.836'.
[  457.968591][  T921] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  458.189595][  T921] usb 2-1: Using ep0 maxpacket: 16
[  458.227926][  T921] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  458.254947][  T921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.274169][  T921] usb 2-1: Product: syz
[  458.315993][  T921] usb 2-1: Manufacturer: syz
[  458.345155][  T921] usb 2-1: SerialNumber: syz
[  458.594958][  T921] usb 2-1: config 0 descriptor??
[  458.883633][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.915817][ T9195] netlink: 32 bytes leftover after parsing attributes in process `syz.7.837'.
[  458.928964][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.949049][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.955419][ T9195] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  458.960398][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.254089][ T5876] usb 2-1: USB disconnect, device number 26
[  459.254568][ T9193] 9pnet_fd: Insufficient options for proto=fd
[  460.122657][ T9210] netlink: 36 bytes leftover after parsing attributes in process `syz.6.843'.
[  460.388860][ T5876] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  460.505128][ T9218] netlink: 224 bytes leftover after parsing attributes in process `syz.7.844'.
[  461.278771][ T5876] usb 7-1: Using ep0 maxpacket: 32
[  461.295488][ T5876] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  461.318042][ T5876] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  461.348058][ T5876] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  461.378042][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.417194][ T5876] usb 7-1: Product: syz
[  461.428355][ T5876] usb 7-1: Manufacturer: syz
[  461.445520][ T5876] usb 7-1: SerialNumber: syz
[  461.618804][  T921] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  461.729918][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.6.843'.
[  461.748706][ T9210] bridge_slave_1: left allmulticast mode
[  461.779995][ T9210] bridge_slave_1: left promiscuous mode
[  461.806388][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.865443][ T9210] bridge_slave_0: left allmulticast mode
[  461.892260][ T9210] bridge_slave_0: left promiscuous mode
[  461.901015][  T921] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  461.947554][  T921] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  461.976055][ T9210] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.000836][  T921] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  462.372241][  T921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.417312][ T9221] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  462.595135][ T5876] usb 7-1: 0:2 : does not exist
[  463.104955][  T921] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  463.110006][ T5876] usb 7-1: USB disconnect, device number 16
[  463.240815][  T921] usb 8-1: USB disconnect, device number 5
[  568.378419][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  568.385442][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=34377, q=211 ncpus=2)
[  568.393442][    C0] rcu: All QSes seen, last rcu_preempt kthread activity 10497 (4294993936-4294983439), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  568.407554][    C0] rcu: rcu_preempt kthread starved for 10497 jiffies! g34377 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  568.418785][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  568.428791][    C0] rcu: RCU grace-period kthread stack dump:
[  568.434803][    C0] task:rcu_preempt     state:R  running task     stack:27304 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  568.448353][    C0] Call Trace:
[  568.451741][    C0]  <TASK>
[  568.454707][    C0]  __schedule+0x16a2/0x4cb0
[  568.459276][    C0]  ? schedule+0x165/0x360
[  568.463741][    C0]  ? __pfx___schedule+0x10/0x10
[  568.468639][    C0]  ? schedule+0x91/0x360
[  568.473192][    C0]  schedule+0x165/0x360
[  568.477387][    C0]  schedule_timeout+0x12b/0x270
[  568.482276][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  568.487684][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  568.493615][    C0]  ? __pfx_process_timeout+0x10/0x10
[  568.498940][    C0]  ? prepare_to_swait_event+0x341/0x380
[  568.504539][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  568.509422][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.514831][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  568.519805][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  568.526011][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  568.531341][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  568.536594][    C0]  ? finish_swait+0xcd/0x1f0
[  568.541323][    C0]  rcu_gp_kthread+0x99/0x390
[  568.545945][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  568.551165][    C0]  ? __kthread_parkme+0x7b/0x200
[  568.556131][    C0]  ? __kthread_parkme+0x1a1/0x200
[  568.561210][    C0]  kthread+0x70e/0x8a0
[  568.565336][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  568.570573][    C0]  ? __pfx_kthread+0x10/0x10
[  568.575205][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  568.580444][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.585764][    C0]  ? __pfx_kthread+0x10/0x10
[  568.590389][    C0]  ret_from_fork+0x3fc/0x770
[  568.595013][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  568.600164][    C0]  ? __switch_to_asm+0x39/0x70
[  568.605035][    C0]  ? __switch_to_asm+0x33/0x70
[  568.609823][    C0]  ? __pfx_kthread+0x10/0x10
[  568.614467][    C0]  ret_from_fork_asm+0x1a/0x30
[  568.619283][    C0]  </TASK>
[  568.622423][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  568.628790][    C0] Sending NMI from CPU 0 to CPUs 1:
[  568.634043][    C1] NMI backtrace for cpu 1
[  568.634064][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(full) 
[  568.634090][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  568.634102][    C1] RIP: 0010:lock_release+0x2a2/0x3e0
[  568.634126][    C1] Code: be 09 b8 ff ff ff ff 65 0f c1 05 b9 86 fa 10 83 f8 01 75 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 <75> 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 6b 46 fa 10 48 3b 44
[  568.634142][    C1] RSP: 0018:ffffc90000a08b78 EFLAGS: 00000046
[  568.634160][    C1] RAX: 0000000000000001 RBX: 0000000000000006 RCX: b6ba4aa465b9bd00
[  568.634172][    C1] RDX: 0000000000000001 RSI: ffffffff8db46de1 RDI: ffffffff8be19140
[  568.634185][    C1] RBP: ffff88801d28e518 R08: 0000000000000003 R09: 0000000000000004
[  568.634196][    C1] R10: dffffc0000000000 R11: fffff5200014116c R12: 0000000000000001
[  568.634209][    C1] R13: 0000000000000001 R14: ffffffff99d0ed88 R15: ffff88801d28da00
[  568.634222][    C1] FS:  0000000000000000(0000) GS:ffff888125d98000(0000) knlGS:0000000000000000
[  568.634237][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  568.634250][    C1] CR2: 0000200000000480 CR3: 0000000062cf2000 CR4: 00000000003526f0
[  568.634266][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  568.634277][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  568.634288][    C1] Call Trace:
[  568.634297][    C1]  <IRQ>
[  568.634308][    C1]  ? debug_object_activate+0x2e2/0x420
[  568.634347][    C1]  _raw_spin_unlock_irqrestore+0x70/0x110
[  568.634380][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  568.634410][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  568.634440][    C1]  debug_object_activate+0x2e2/0x420
[  568.634475][    C1]  enqueue_hrtimer+0x30/0x3a0
[  568.634498][    C1]  __hrtimer_run_queues+0x656/0xc60
[  568.634529][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  568.634549][    C1]  ? read_tsc+0x9/0x20
[  568.634570][    C1]  hrtimer_interrupt+0x45b/0xaa0
[  568.634606][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  568.634631][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  568.634649][    C1]  </IRQ>
[  568.634655][    C1]  <TASK>
[  568.634662][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  568.634682][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  568.634700][    C1] Code: 03 d5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 42 2b 00 f3 0f 1e fa fb f4 <e9> d8 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  568.634716][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[  568.634732][    C1] RAX: b6ba4aa465b9bd00 RBX: ffffffff819752a8 RCX: b6ba4aa465b9bd00
[  568.634746][    C1] RDX: 0000000000000001 RSI: ffffffff8d95b02c RDI: ffffffff8be19140
[  568.634759][    C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb
[  568.634773][    C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9f78f0
[  568.634787][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a51b40
[  568.634802][    C1]  ? do_idle+0x1e8/0x510
[  568.634828][    C1]  default_idle+0x13/0x20
[  568.634849][    C1]  default_idle_call+0x74/0xb0
[  568.634872][    C1]  do_idle+0x1e8/0x510
[  568.634895][    C1]  ? __pfx_do_idle+0x10/0x10
[  568.634914][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  568.634942][    C1]  cpu_startup_entry+0x44/0x60
[  568.634964][    C1]  start_secondary+0x101/0x110
[  568.634980][    C1]  common_startup_64+0x13e/0x147
[  568.635015][    C1]  </TASK>