last executing test programs:

4m46.61627377s ago: executing program 4 (id=757):
syz_open_dev$sndctrl(&(0x7f0000000380), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
ioperm(0x0, 0x7, 0x5)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KDGKBLED(0xffffffffffffffff, 0x4bfa, &(0x7f0000000000))
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x160, 0x194, 0x194, 0x160, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x0, 0x22}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x380000e, 0x12, 0xffffffffffffffff, 0xe6f29000)
connect$l2tp(r2, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000600)={0x8, {"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", 0x1000}}, 0x1006)
r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x3a)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001600010000000800000000000a000000ed61b3de46c453b8d8133a39b74a4e2b1a86b16d245f3c3c52cea29aca71fcfcbb7346992d3841f93a69e83058ee48a8acd95d9a4ffaafc184744dda983630dce35063226459dca65f", @ANYRES32=0x0, @ANYRESOCT=r3], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x8}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60)
socket$unix(0x1, 0x1, 0x0)

4m44.469789862s ago: executing program 4 (id=763):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8}]}}}]}, 0x44}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000400)=""/132, 0x84)
lseek(r1, 0x0, 0x4)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x24044804)

4m44.205063533s ago: executing program 4 (id=766):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
close(r4)
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4m43.268957571s ago: executing program 4 (id=768):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0xe})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001032150d01000000000001090224000100002000090400de0103000000092100000001220600090581030000000000"], 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = syz_usb_connect$uac1(0x0, 0xd2, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x5, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa3, 0x7}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x1, 0x2, 0x7, 0x9, 0xfb}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x5, 0x5, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0xb7}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0xa, 0x1, 0x3, 0x5], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x4, 0x5, "c17955bf4336b3f6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0x1b, 0x5, {0x7, 0x25, 0x1, 0x42, 0x9, 0xfc71}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x400, 0x4, 0xd8, "1d98b6aa62434a55ea"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x52, 0x1, 0x5e, 0x1c, "bc6724e3b76d"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x7, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5d, 0x7, 0x5, {0x7, 0x25, 0x1, 0x83, 0x4, 0x3}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x5a, 0x8, 0xf9, 0x8, 0x4}, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0xba, 0x0, 0x2, 0x17}]}, 0x9, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180a}}, {0x62, &(0x7f0000000340)=@string={0x62, 0x3, "d301e622b02c42fbafa277ca5fae986327b6360f0974ec2b30946ca4af57d3b17a3fb7d352554b16b5dc2e6998c280466a7f78f4270c237c7c0b83d7f326d1e6c829e7ae067d7ff7cf33ef6b80bf34b1b641f92c341efbe785562f55e942eee6"}}, {0x97, &(0x7f00000003c0)=@string={0x97, 0x3, "53d1e071915e94906254e3886ec3bf95979e617c3e1354238419134f6be72bea75cfc4f76ad03e8a8eddb533ee9b58b8f3b83d37be8e1d64cdc952dbb432abbcb9300316d83d734fb6095fa7cdaf4b72d4507cb2a88e595cc359523df2d035dc460d9d1f500712263dc46bc99b60d2edb2ee6ad82bb2e7a1b0520e7bc816ba206a89cfc2e92b650d778145623ec20f8f01d55a8355"}}, {0x71, &(0x7f0000000480)=@string={0x71, 0x3, "034163271887b344a24b328d9c98aaa9ac790437c3d9694a5eed51d730cb0e7856f6a04174cf8d7092f629e6de12fa8d7847fb02db06bae09b70a0da7df61b0225845acb5cfe15cd9cd23c4eba8bea76b2bad5898b76794c339e647e699ed69b9538851dffcf0f8384c076ce9b6075"}}, {0xad, &(0x7f0000000500)=@string={0xad, 0x3, "d9cd35e7820b2f26e75e2ef04219448c6a96ba3def425ef083a076945b83f7e8556615cc2104150386e8ecd2270b1d98492cdf0d8ffe63a836d76651d0e883b488d61e82014582f5df4d3dbb5c1b0ef29302df3c1c21087589130789d725d6c88ecfd2350849066cf3b743a0d3fbe9e042fbb723585ccdf4bc8e26fbbee2f241bdee0b8fac05f62ccb121978a11dece918f1d970efc6b7d748886dc82ea29a786929e1f4f3a2d10add5acd"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc22}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44c}}]})
ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000080)=0x2)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syncfs(r0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x6, {0x6, 0x6, "392cdaab"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000000880)={0x14, &(0x7f0000000780)={0x0, 0xe, 0xac, {0xac, 0x5, "b1b60d4afdb94ab4a1f73ab7b975fcd5152fde18373ac34c6f952773bb3bb4192c1b7ef23426f69f5ce8f92e194c9d5f3a99bfaadf755ac19239b376b937b9fac536e3aa725c5c846ba6efd2e60d9b54f38083461d9e8868054acd6828c792e52db99279c54c67e0e852dbdba7fff392a3168541a22144cadece872aa141b85a345d980d2c1bd9430d02b2039e972d731a44f68194f9d3c197429836b3f55a17eaeb598a5879d672149e"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c04}}}, &(0x7f0000000b40)={0x44, &(0x7f00000008c0)={0x40, 0x1, 0x82, "0ce1bf062172cf55af367e1344aae4301b1e38d8b1afe70ea81b664a402a75fc32f85cb1fc0a5094c10fbd6b71eeda3fcd42a1539622c99858ef0977f908e3634b62d21a0127cab7c94de5311eee4e4fb8f3aa324eeb64d0a40218624ead46faec918e30638de464b5e44e31dd000b2d7880ac6ef2a238eeb40fb4bc3d39b78fdbac"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x2c}, &(0x7f0000000a00)={0x20, 0x81, 0x2, "310e"}, &(0x7f0000000a40)={0x20, 0x82, 0x1, "1a"}, &(0x7f0000000a80)={0x20, 0x83, 0x1, "1f"}, &(0x7f0000000ac0)={0x20, 0x84, 0x4, "0e86041a"}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "09b4c8"}})

4m40.758827006s ago: executing program 4 (id=776):
gettid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000640)=""/148, 0x94}], 0x1, 0x1, 0x0)
r3 = socket(0x2, 0x3, 0x6)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0xc, @local}, 0x10)
recvmmsg(r3, 0x0, 0x0, 0x2043, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}], 0x3, 0x20000, 0x100000)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40186f40, 0x20000502)
sched_setscheduler(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x105}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x20050800)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r7, &(0x7f0000000240), 0x1000000000000062, 0x0, 0x0)
getpid()
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)

4m40.09502941s ago: executing program 4 (id=779):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TCFLSH(r3, 0x400455c8, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040890}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$unix(0x1, 0x1, 0x0)
listen(r5, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)

4m24.800227623s ago: executing program 32 (id=779):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$TCFLSH(r3, 0x400455c8, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040890}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$unix(0x1, 0x1, 0x0)
listen(r5, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)

1m15.39859742s ago: executing program 5 (id=1424):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x10200})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ppoll(&(0x7f0000000100)=[{r3, 0x8000}, {r4, 0x400}, {r4, 0x240}, {r0, 0x410}], 0x4, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8)
r5 = open(0x0, 0x0, 0x0)
fstat(r5, &(0x7f00000006c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000480)={{0x2, 0x0, 0xc6, 0x7, 'syz0\x00', 0xe065}, 0x1, 0x20000000, 0x0, r1, 0x6, 0x4, 'syz1\x00', &(0x7f0000000280)=['\x00', 'usrquota', 'sched_switch\x00', '/\xe3%\x00', '\x00', '!&:]/+@]\x00'], 0x24})
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
quotactl_fd$Q_GETINFO(r6, 0xffffffff80000501, 0xffffffffffffffff, 0x0)

1m14.124821093s ago: executing program 5 (id=1427):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4a8140, 0x0)
mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x42)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}}, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {0x0, 0x410c}}}, 0x1c}}, 0x40000)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setuid(0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000041}, 0x400c004)

1m9.771322926s ago: executing program 5 (id=1444):
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10042, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x2c8)
r2 = getpgid(0xffffffffffffffff)
write$sndseq(r0, &(0x7f00000001c0)=[{0xfd, 0xfd, 0x9, 0xfd, @tick=0x3, {0x75}, {0x8, 0x2}, @result={0x4, 0x2}}, {0x3, 0x40, 0x1, 0x4, @tick=0x101, {0x3}, {0x0, 0x7f}, @time=@tick=0x5}, {0x80, 0xe, 0x4, 0x0, @tick=0x2, {0x7f, 0x8}, {0x6, 0x5}, @queue={0x9, {0x6, 0xe872}}}], 0x54)
ioprio_get$pid(0x2, r2)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x48014)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x30}}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x10100, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7f36, 0x10100, 0x0, 0x1}, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = dup(r4)
read$FUSE(r5, &(0x7f0000004a00)={0x2020}, 0x1f69)
syz_fuse_handle_req(r5, &(0x7f0000002140)="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", 0x2000, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

1m8.658230509s ago: executing program 5 (id=1451):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r2, &(0x7f0000003100)=@id, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x40)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x14)
ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x400, 0x0, 0x7, 0x4, 0x4, 0xfffffffc})
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@datasec={0x6, 0x1, 0x0, 0xf, 0x3, [{0x3, 0x2, 0x2}], "8f54b7"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '@'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000014000100000000000000000002001400000100000000000008000200e0000002080017004e224e2408000b"], 0x34}}, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '$\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x2c}}, 0x20000014)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0xfffd, 0xa}}}, 0xb8}}, 0x0)

1m7.498036975s ago: executing program 5 (id=1454):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1m7.406276756s ago: executing program 5 (id=1455):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x400d00, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x103000)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x44094)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff041, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x300000}, 0x1c)
listen(r3, 0x8957)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0x9}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)

51.841017933s ago: executing program 33 (id=1455):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x400d00, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x103000)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x44094)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff041, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x300000}, 0x1c)
listen(r3, 0x8957)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0x9}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)

12.811063588s ago: executing program 2 (id=1625):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
io_setup(0x5, &(0x7f0000000e80)=<r1=>0x0)
r2 = io_uring_setup(0x5937, 0x0)
io_uring_setup(0x4d12, &(0x7f0000000380)={0x0, 0xf0bc, 0x200, 0x1, 0x36c, 0x0, r2})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000940), 0x0, 0xc050)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$packet(0x11, 0x2, 0x300)
sigaltstack(&(0x7f0000000a40)={0x0, 0x80000002}, 0x0)
sigaltstack(&(0x7f0000001580)={&(0x7f0000001500)=""/79, 0x80000002, 0x4f}, &(0x7f0000001680)={0x0})
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x260, 0x0, 0x260, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='d', 0x2}])

11.109146478s ago: executing program 3 (id=1630):
r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0xde0, 0x202800)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000180)={0x4, 0x2, 0x8, 0x1, '\x00', 0x4})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x5fb5, 0x0, 0xfffffffd}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_pts(r1, 0x0)
r6 = dup3(r5, r1, 0x0)
ioctl$TCSETSW2(r6, 0x5437, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0xb3}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000000080)={r10, 0xffffffffffffffff, 0x5, 0x2})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)

10.66713227s ago: executing program 6 (id=1634):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x204000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/tty/drivers\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x80000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x143042, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008", @ANYRES64=r0], 0x20}}, 0x0)

10.593608608s ago: executing program 0 (id=1635):
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x335}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000480)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x44094)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'})
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12)
r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x275a, 0x0)
epoll_wait(r8, &(0x7f0000000500)=[{}], 0x1, 0x5a22)
sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x38}}, 0x90)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x4080)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x400000, 0x40, 0x29}, &(0x7f0000000100)='./file0\x00', 0x30, 0x0, 0x12345})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

10.500136981s ago: executing program 3 (id=1636):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900"], 0x7c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'sit0\x00', @ifru_settings={0x4, 0x0, @te1=0x0}})
ioctl$sock_netdev_private(r8, 0x89f3, &(0x7f0000000000))
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000)
socket$nl_netfilter(0x10, 0x3, 0xc)

10.486993251s ago: executing program 6 (id=1637):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x6400000c)
r1 = socket(0x2b, 0x1, 0x1)
sendmmsg$sock(r1, &(0x7f0000001280)=[{{&(0x7f0000000240)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x20000001)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r3 = fanotify_init(0x0, 0x0)
fanotify_mark(r3, 0x90, 0x0, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3)
timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=<r6=>0x0)
timer_settime(r6, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r9, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={0x14, 0x2, 0x7, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4004034)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000180)=0x7ff, 0x4)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$watch_queue(0x0, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r11)

9.236010289s ago: executing program 6 (id=1638):
syz_open_dev$sndctrl(&(0x7f0000000380), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
ioperm(0x0, 0x7, 0x5)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KDGKBLED(0xffffffffffffffff, 0x4bfa, &(0x7f0000000000))
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x160, 0x194, 0x194, 0x160, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x0, 0x22}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x380000e, 0x12, 0xffffffffffffffff, 0xe6f29000)
connect$l2tp(r2, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000600)={0x8, {"6896bd316b063fbf4be770d715f90636d4d6f38d0064b2a3c64b4c454eb4121e335f94b2240478a5e60bd04fe67a6b92e2bd51ae299acdc5e97979a61ad37963090f9d8e4d1189f57a73d1f8c7bf58f339ec491cc39007775144fab1e7801efc28112366e1f19b2571106835085d8e07d533a9c6b85f29f7f104a533545df008cbfd6bc139da41dede807a3dfe1d30e26c829567a30ff27acfffc59312601a324a7ea4dc559eb051ba8b3a021ff47ec30d95aca206a94966f866d31209b467e978bece66651429917b1afd432bb3a05da168341a1f1a80e2d8adc1fd6d6568b234edc4239096d6aea9505134dbbb987ce125e46c58eefb0b8e937438f39c538e448264bb0d79ae8c6dbb860d7cca4a5554fc42c24d17da77439b09116540b292ff2d990e86d8f99601c44e1bc32979aefa3055f740b6c24b999d468eb12bc432c1d004659111fdd81f62dae656b1be097076a51b26c45c36ae423c4fde088b9bd3ae8336b4f561507e40b99a7a34a6388475ceccc97c190fa01c17aefd986ecca811a60959af28d01ae6f039fc7fa120d3f9136f9adf6ad529d72858291b94324750ac5663ec0b6b37a37a92545dafa0da2614e09e08c4c3da94e7498573db6e4d91732765d76006ac69afa1aac8f298a56608c22a1ccba29a294e11a9aab9f0f02d4f215318b53a4760e57f85d314d75a6ffdefce2a85bd4d46b2299bd63564093a654e3a016cbd571aab99088389a357b2d905e8113bd96c2a312dfbb1894f9e107ce4683eb187151b9afa740c2262a1f4b3eb45a43e2e93ae4ea60db0032cbb5ce829239528a6143ef39fd8123e03473c597694aeef0666fe881f01f30c269f2da710226683a81d1e1a5148e53f6071c63b849b6799289bca86074f8d53d9981927f3d14221001b706bfe29682a508afabfd0a326751149938d0b0c76e3ab307187618123d4e549facff018820fce1e906d6fe66a645db032546112735ad8b2fd8df6d13a2d36d343c9efa7147ab1a1f6582b878fce520a529c03fe9bd0bd961127429c6bfba92214664c2fd98c26738595f231469284390df4f8dfa0055e55fe4b538e7e7b3f488849d21d1a9a42f9b6dc6cf8836765242b2db54d6f6c016126183e1a11a3b6f3696d5de09b0e2ab7d32b9bffe8208a35d7180860ddbf5750651843811b52e87fe4e32a61a52de5529fc840181fa1b73a8976e63c2ba08286abf867f0423b5cc2ed0c05e94b486123e2f0f528fcddc74427307f91fb773e8d0bd5c25c94fe9aedeae54930c93c4d0aee1068a9948dbb9d61fe1d29ed9bec218e6051e2a0fe9473247ae4bcca7f5422d68dae25de5a8228864aaef8a41de27ca2c7226448bbe29d6acdcf96b9abde4d80ca5672eb49cd52ebf1c78715e123c248ffb1daaf60e939fb8b9983a0bca4b7a980c221064124814b6c9068c30bd4771fdcf8df3cb2c928b3a049568f40df846adeea5c524155d430d2cf45f988e7d36dde4243588914ced3cdd87d400812676ae8425be5b43de0417b17079a8cfe5807f47fb3b42268ea1a569ddb74b419c64e55e66d07d9a02f320d7e009709361fb7ee024185dcf9d2e6227f6ac5cff8355fb1e0782b1ba787f31b07b6739ae6719fc65833d984f2e2de22a48cb45d193341f61a669bc291493c91f3fa34f5f7aaf21734fdd23aa2f99001d62f68f1e2297a05f4ffd1a76593fc437bd7c9f11e81cae6af14a98678a042d8939338048ea9b8266389fe7057ad23721c5dea9344f775749c9893eb653dbee91a30b2666b1d8218a2d750c1aa7dc607980f664cec153e0b02e6f5ec8a1f503b851277922a65e48fc262439962fb7d15b2bcb067f2dd1160af24898915989d1f79e3bfaa2add2b9965d212aa94676bd7cb734efd9e238fac84ae568fd752478eaaf194c1ff84edfa26c545395c75df13353de0d20a1712a1e464e947222979042b999bd903edfc23e686a9ea0125ff9b70efd6c6301f4e9dcbf21ce20f11f551fba2c59d51b99d3ac5415463b9c9fae682824b0cad7e4b847836b98342762c66f39927194797723230539f8a752b70763d02d0eb778e21e2f5373b2e69539f022dc71f2a140172bf0facf170ca9fd1c2698e0a76919a7e7b83f787985e41926ca3e599389d3208de1d30254f88c73cdb1308cb9f87fa7ed3fb43d6e434cef7aac3638fba6ec3a3ec30e04178141069ff342930590ecd2c07f40b1e2636ccc84dac6b688fb573a868d29a6e57db008a65a68ec5e36d72dddd741532fbe390f2055a6c2ff2b548a452ce8bef7b1022bfd7f66efd68381f60e5d962770f6210152869c57ec05774f6fdfd36a63e1b52fb4849242182ad71cb3f673f10bdb9d4f2d718b0f7e92e9b0790f8b1a659c2508c0d58962ec4f658ae1ced7a64bd4ed42098c1f63665d3fcd431f2801059b37483ab678aa35e39ff857573b530985c5b4eefe002d1c820d63f025b2152e2b65d6ea6b8a061059cb4c7cbf3e930e453a9c1754e1eeb23a9d39199e21eba18e29ad38667d7db90e28f4a3ddbf06ac84919c8130a7bfaaec802ff72d3cdea3b77311173818c54ae3c38a95201d966b91957e9fc926c2dbf02c7f49090f27b75d35a3fe5aa96ffac862be844006686d3959aeaa49559f43000ef8b7fb4c4d6dc79aa978a14c1b91c08f353a739c3787a9a615e44ea6d0127cd1dae23481dfcda0adf25c8e5192c719e69d4a52187bfbbd7b972752c09cf4b60d90a31117ae9a52424acbe4a67ae950dbd488c3f4f407dab09df37feed572d49e353d4e133b4c1332ee755d6a2c9407de59db896dbc733822c78af440264a64b36236cfc1da031bd5bf7bfdeb7c902e86e740bf4770362f4abaf6a487e3eb3bf39ee8d0c484deaae4e8f43f89a2b99a2f5580ad09ba2fc8e0e00c61f8ff1222754c27a907a7ae0f3b98f0615da66723ce9e4f5a90efb548f17333e3aa0b769afaff8b9fef24a3159ea19528b9de3bf5981427787178bdab766c7e2cb43ce9cdf8f09057426b50f9ad276fead60f87c2b7ec286c28ba80baa71555beda37c27dfabe084877a3c8c8b0460936d1ac60ff5fa24a32e664333a6d32cd2344da8e2e447d1a74090de9bbc611e1903f1ec3cbe3db67e464475cd351729062a7a5963deb21016182eca51a06be1d5a6fb558f4da9c82c37594216d14857511b556321b573e39bef3c1ae3857e74c2d36685111817758aab0cdb5906af330f6fd6a0f79df0ff6dbd9bd1c6b281b807007743340c6e55dc0771059bbecee6513a2efffe9577264a8ae0f5567112b96851c2ed2b21adca3630c113d63c42a87008e6a387497ceb3f16fcf1b1b2fdbdecde9ca6531d767aeba22ed79dda1b60687176c18d92ea1b249542306d748aec2eb9a6d4b02c29cce5f6dfeefe2863e58179a70ec07e2bf19553adc7203dbce4d6e84252b96089fde15eee3455e47401f2ff9ad9c9d6e98ab495aadc178de5b8d76933fa2f0dcd8cd20ec6647436a706b472f822ed2b49bd6b421d20ef77cda23ec8e4976157315949da90a865b2ffafcb42a72322adfbcd114a34334df6f7113c6b48c6018a8a190522aff8f19df8f3a1cba3b1e6eb2248860495b1007eb26e7d761e6caeb4e67c3ebcfe197dcf91b9b7f558a58c175f43370fbb3238caa624bdf4036f7de43330bc2652137782eac1fe6bb56939614419c653d0f2d03233018727d2e98cf6bd88e0b7195ee55d6168066b1c50668c0c048733ef1885eb695f58029c106382eaf4ebbf383ebf7c75510bbdabc8fb05eea45d6070c0e2b8b769fb5ce0194baa62209aa44f01563770fb1f779fac01685842fcd4a81f8d3ffdc78c90e35a324b186012cc2184937d54c8841a37d0d9bf17d201f8c4d6ff46aca5b3156a744d6ceed080f7eb29cb60cc298fe2440b760d37b5e1c3161d336913921ce609b7181dd19efb778d67da2023c94689142aab495c325a95014bb453bc11f792b8df7024a1a08eca7a62e717a8b999f8d0824a60c4fd956d874fb9e8b0675fb24ae8f236e08c7b9052d2048121f83f12572425f0c7ce1ff9413699f5f7ac9564f0c78150d6cfc4d22e29f9806542715dc8c9867cf52a457b88df11671669687dae505cd4e2e90cf8398bd753d2bb9987029ba6dba8357fccb58eb0d235dea2ceabd6eaa9cf24d41e7347fc25612872e2ff6762c795a237969501b354f55ddabc1ef2c978e244e42bab46f9a99f6638035170ed1d663df654fd8ef81e6983812aeee8fc028cfcc9e0e7c3fe622c2d1f5b242bf3795d83242dbe0b668844a311d234fe6c000b1914cff86c01a76a0692b7c0d38e01a78634a653a4f5c0d9fa327984433878d52f4021fa76815b597083efb4a50ab9e10de3aceb69dab4b9e6817d8f32d97bba0ed72515ec02b9977caa07d66d95ee03f1d6afc39fc8fb925d6387d859afaf0accf1cff133d391e998783816d6b2a3985dd459842ea8abeee3b990c9767e6df934e7439405afa320cd5ec1233a68bc171af8c72b71557e7890b09df6807fd90b655cd1df2c109a9433495837e5382fc29677a41144792f27e84f44cb8b5d2050755950f57b5e15bcfcc8f60c847fd67c6a77d34430326308f869d513b4f3d71251fd2e93bc0a6e6f75412df3eaeeeaa6e95c3aa1c97bb6cc2789ff756fd5559af828732f1443d683641bb17e3666c44207edbcee86abff6ef7967511f31ea761ba52552ae72249885e146a4a5d034f4bd62804f7f9bc2d010c86ee640212f88a6204cfd5b7caa7de49c9c688063f11319bd2ee424956154bb463b3beee8b668cff6964169ec0ebc5d8e777b283a20ce16561f31aa5868fa3e02b311886fb544427284ebc6b46506487db8a1213d7436a8ea16e934eed600a7f80a9a91570494893ab4b9a2ff27676b7a207c21c7146a82a5e9e077922084629983920b8360ffe8769a6ce0bc4df729945180d5208534b96f1e13006e2747e247a7647695962bf8863b05e1c84051fa27f6c70b9909c0d911db2bd438e404c1243ec04dd93bd0f7b08d0819defdcde3e0a8967d7376af8d18fbd74e36839345d203aa448ae490827339803e82f4b65a7fae7e6ff1084e4570e50e323058ccc0a88035346608f4c14b70fc7f55ce85a2068aa19587c707cae90c3db3b3f0f4bf01cfec4f4064b2a466aca5a43f1c01cdd6b23874def33edc1a5bd090c5e9ae6f8526bbbeafc773c22865b699b01dfff26d0e0d62240dc6228d414b896200037e6046bbceb8f915142b3b75a950784ddb48756173e03733a1f426eeb622b85d3d93f7b6072cb7b1299f950d1da0b0ca0bf62ae10d25ccf6cd3e0edd576b6b3c22c290f8f8bbf018832da85e6e0a90242dde59db0b025717cb8508e22b39afc95cf3f75ecef939b016a62fddfcedd2374956a7bd23c0c5654861f1a14fbcc16c42e83d615c5f888e051228438d3f82535fc542dbf241e2bb380fb77c8354b3843ce7d0e9cd9d622d6e186a10cee9275010d377bed41310779a84e58d942ab2810e420dd1aeeae1668a421bfd81e12c37367a19a342bb949521702595005425fb8b3537d16a5f451ed4016d0a42b55e6f8fa629cc8be3a474d64267d5525c902ec851435e2e91bca3f67f7aacb823efe4901ad8d72fcfdc12d2330f601b0ab533940684644a2a59073a483590dab4ef05eba50f1ff037fade1748c14f5576aaeeccbf07a340c27a0f795219d581bc71b3b9eb63b2367ce2a8f29a06dd4d340b382c2868fb221f96e042703eabe152a11b438d601915d363bc660086a7702d6244d0ccf8a33084b0b", 0x1000}}, 0x1006)
syz_open_dev$vim2m(0x0, 0x57, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001600010000000800000000000a000000ed61b3de46c453b8d8133a39b74a4e2b1a86b16d245f3c3c52cea29aca71fcfcbb7346992d3841f93a69e83058ee48a8acd95d9a4ffaafc184744dda983630dce35063226459dca65f", @ANYRES32=0x0, @ANYRESOCT], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$unix(0x1, 0x1, 0x0)

9.230607279s ago: executing program 0 (id=1639):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000280)={0xa0000000, 0x100, "46da2461f0a055ab1df4114c2d4493733a2f7928a8aaeb510ff5a1bb45d7dbf0", 0x935b, 0xd, 0x2, 0x7, 0x2, 0xfffffffc, 0x9, 0x5, [0x8, 0xfff, 0x1, 0x8326e85]})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'gre0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
sendto$packet(r3, &(0x7f0000000040)="c000", 0x2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @random="bf5aa2a954fa"}, 0x14)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'pimreg\x00', @broadcast})
write$tun(r1, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x22, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}, 0x36)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x48}}, 0x0)

9.213176467s ago: executing program 2 (id=1640):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0xfffffffffffffff8}, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x701002, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x84004)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)=',8Z', 0x3)
r5 = accept4(r4, 0x0, 0x0, 0x0)
read$alg(r5, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x50, 0x3, 0x3, "6040c419020600000000000400000000006dd539efe13ef6b6000006ff00", 0x37303250})
iopl(0x3)
capget(0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000580), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
r6 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0108000000fd0000000406241aff070808241c080006e70b0905810300020000040904010000020d00000904010102020d0000090082020002000040090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x8, 0x870, 0xab8, 0xfffc, 0x4, 0x8000, 0x0, 0x5, 0x1, 0x0, 0x400, 0xfb}}, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba51"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

7.571254635s ago: executing program 0 (id=1641):
r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x10, 0x3, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x7a98, 0x0, 0x100000000000000, 0x0, 0x0)

7.194537103s ago: executing program 0 (id=1642):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xf, &(0x7f0000000300)={0x8, 0x20000008f}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f040801280410a2751138e2cedd63976442bda86dfab5f6f91a214af72fb238dfc2ea8394d96029cbe6031bab32d950327d240981265076dd8b024333e9df"], 0x7)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="3f000000010003", 0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
landlock_create_ruleset(&(0x7f0000000180)={0x9910, 0x874da2e8a316cf27, 0x1}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200000, 0x120)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x30d000, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)

7.078655899s ago: executing program 3 (id=1643):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x7, 0x13, r6, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r8 = dup(r6)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x15, 0x0, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)

6.647175027s ago: executing program 0 (id=1644):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = signalfd4(r1, &(0x7f0000000000)={[0x7]}, 0x8, 0x80000)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

6.236561788s ago: executing program 1 (id=1646):
r0 = creat(&(0x7f0000000340)='./bus\x00', 0x98)
inotify_rm_watch(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000001a40)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a8435001406ff00000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090780004c3bcdb1f732f5bfc33a5761da0098255825538c53d994248d41faace8ef924ba6842551a4d6133ef50a37b22d4c6b66ce268eda21762a96c5010c7973c47db040aae20c835ef79d893a8cd64b55543e2504b6054260ab9da9463cd4aabb300000000000000009eb6dfe1d6306012837f98a0e393d165a7d36e7a2868c00444f509db28e16056dc5475b6210102e03736be52160e49c2ce7f87e9a5b028b2eb82114c5f01583490ee1655ec91edc83d673f872dbd1d343e8c52414fd786ae9bcc1bee5a645c56a232d6f990124e35865b476695846e1f092980aebb0546606e3ac5"], 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="b1aaaaaaaaaaffffffffffff86dd604000000020060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800700009078000f080a00000401000000000000"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="67f9217cab49b8ec7bd5d597734c2b600ad86023e0c96b02b6dc003ae1c65b1bd5aebb8f9d858e30d3a247d801e4bf0771c0e2e1d603d78098b11d1fedca709e12cc76fa227ca03d29dea81a42c22522524d500a3484ca314f47ab2b80a35916ac9c8e1818e85a166b2569c5d98e235df54c4b773916dabd63f4e22735734951f0f7f6adb0e2d2a829e05a29687beda4ec1c19ef681bddca3263ad7c4f919d98f50037dff0f85c74928f9333cfe85676e8ccef6c387117722d8918d0de9d628a6f", 0xc1}, {&(0x7f00000014c0)="5e3b5663474c03caafe9c4b670fe57a02c926512f6d561be3688aec75068cec3b52abfaeebad240ff42fe954f26fbf354809b8155403007a935da01303dad7d450442aa70372c3ea72156c7616005ee06a1981207ec7f5872ae31e79f6b3d7d24191b8a0541a3514a06a37c5a04e06d44d6a30dbee45f3e3d85662b1feff26967875792f51601d49b3a73e164d9cef0d3a4392b64cf97b20d89ffa8a5f7c511a61ed391cb21c7b84cc8231aa6eae808a8e9e24bb192e922fa98b1d81cab1d2be6a5a5f8429828f80a08c657a0bb57731934f3dc0", 0xd4}, {&(0x7f00000015c0)="5d6ce1905e8883a67119972a4463abb2aa2e70fb8ba8e8783271798439383033cb9ce11762603ffe7b8fad785c0d45d7784780b42ba72b1d41f84024f7f3edb1ef403003b2f9534ee3c779487663f0878283bdfa076fc3fd7335199066bbf3", 0x5f}, {&(0x7f0000001640)="d0bac12c5ee6274a32d596626c72373b2e7c0ab2df0937b43ae7b6eaa1c967d4bfdbaf71d83c823a1e0afd8497f432bbe0e2c4a0216a7241045402375aaad98370c9d639c4be2b1185ce038ef022e1eaebfe6dc51495a0b13a894f2452a69dc6e469a5106e189a56f2300d8c2191ef6c03ff0463bfa032e4ccf0f0f9b2565c4a289d07582a3d1e0f1dcff75d6007931468928e41ac92a9c141dbf73647a17c4a102b784781b099ad338d669e", 0xac}, {&(0x7f0000001700)="1f9103e3acd88edbf6e4c8798b0ed7324d8787a8283701911bcc8ff05fa1f50c5abf3e0daeacb637926a6bdb50f06d0cec91d2a5239dd9ce23cae94dd74d161a6b2ed5efce1242b6fea4437ad9106cd7132155f007a6a2ed6b918d22f54f2641a80246a38d1cca1f9861a402207b3d50d49eb8ece963b368730a9d2f03ee6b785199754baec97868149f3101d2e6552bba6aa8322c6ee5209d01b240af5c6a9f09", 0xa1}, {&(0x7f00000017c0)="46f8f90735c99b22078e6ab63e8bff01479ce9e5e4dce28dc1e73c19b2325b7fa66f4f83b4d813aed581a9bcd38a7df6b83a92e1c39c6d450b2ec7f7c781ee3d565fff8b8940f8bd3c5044dfea7619908d68430b1f3b712c575391542389277814378eebdc3fe9d9601a5d8f411a1c6360fef3efc830007a950693a3b47e32f656a8c18f303f87a81ef1d09e98774109be816a2192f1ef955edf700d99510cde5b9acf6c1e618a7dea37ab83fcfc8c5d7375845c4d28e9a7268cba9b", 0xbc}], 0x7, &(0x7f0000001900)="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", 0xfd, 0x4000000}, 0x20008003)
rseq(0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
syz_open_dev$tty1(0xc, 0x4, 0x1)

6.108195737s ago: executing program 3 (id=1647):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x204000, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/tty/drivers\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x80000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x143042, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008", @ANYRES64=r0], 0x20}}, 0x0)

5.019216971s ago: executing program 1 (id=1648):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)='#', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21)

4.903005023s ago: executing program 1 (id=1649):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
close(r1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
syz_open_procfs$userns(0x0, &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
preadv(0xffffffffffffffff, &(0x7f0000000c80), 0x0, 0x4b6, 0x0)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r4 = socket(0x1e, 0x1, 0x0)
connect$tipc(r4, &(0x7f0000000040)=@id, 0x10)
shutdown(r4, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/141, 0x8d}], 0x1}, 0x2}], 0x1, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000037c0)='-', 0x1}], 0x1}}], 0x1, 0x4044891)

4.876119106s ago: executing program 0 (id=1650):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
io_setup(0x5, &(0x7f0000000e80)=<r1=>0x0)
r2 = io_uring_setup(0x5937, 0x0)
io_uring_setup(0x4d12, &(0x7f0000000380)={0x0, 0xf0bc, 0x200, 0x1, 0x36c, 0x0, r2})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000940), 0x0, 0xc050)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket$packet(0x11, 0x2, 0x300)
sigaltstack(&(0x7f0000000a40)={0x0, 0x80000002}, 0x0)
sigaltstack(&(0x7f0000001580)={&(0x7f0000001500)=""/79, 0x80000002, 0x4f}, &(0x7f0000001680)={0x0})
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x260, 0x0, 0x260, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='d', 0x2}])

4.842546116s ago: executing program 3 (id=1651):
unshare(0x22020600)
r0 = socket(0x1e, 0x4, 0x0)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
r1 = socket$rds(0x15, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x80}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000000640)=""/102376, 0x18fe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
get_robust_list(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
r4 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f00000000c0), 0x6db6e559)
read$nci(r3, &(0x7f0000000100)=""/107, 0x6b)
sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000380)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000480)=[{&(0x7f0000001a00)='P', 0x1}], 0x1}}], 0x1, 0x0)

4.163231948s ago: executing program 1 (id=1652):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x8000000)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r4 = syz_io_uring_setup(0x5700, &(0x7f00000035c0)={0x0, 0x4, 0x10100, 0x0, 0x40000000}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000003580)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r4, 0x291c, 0x0, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r8, @ANYBLOB="30003080"], 0x4c}}, 0x0)

4.072312519s ago: executing program 2 (id=1653):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0xe})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001032150d01000000000001090224000100002000090400de0103000000092100000001220600090581030000000000"], 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = syz_usb_connect$uac1(0x0, 0xd2, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x5, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa3, 0x7}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x1, 0x2, 0x7, 0x9, 0xfb}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x5, 0x5, 0x3}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0xb7}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x4, 0x4, [0xa, 0x1, 0x3, 0x5], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x4, 0x5, "c17955bf4336b3f6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0x1b, 0x5, {0x7, 0x25, 0x1, 0x42, 0x9, 0xfc71}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x400, 0x4, 0xd8, "1d98b6aa62434a55ea"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x52, 0x1, 0x5e, 0x1c, "bc6724e3b76d"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x7, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5d, 0x7, 0x5, {0x7, 0x25, 0x1, 0x83, 0x4, 0x3}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x5a, 0x8, 0xf9, 0x8, 0x4}, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0xba, 0x0, 0x2, 0x17}]}, 0x9, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180a}}, {0x62, &(0x7f0000000340)=@string={0x62, 0x3, "d301e622b02c42fbafa277ca5fae986327b6360f0974ec2b30946ca4af57d3b17a3fb7d352554b16b5dc2e6998c280466a7f78f4270c237c7c0b83d7f326d1e6c829e7ae067d7ff7cf33ef6b80bf34b1b641f92c341efbe785562f55e942eee6"}}, {0x97, &(0x7f00000003c0)=@string={0x97, 0x3, "53d1e071915e94906254e3886ec3bf95979e617c3e1354238419134f6be72bea75cfc4f76ad03e8a8eddb533ee9b58b8f3b83d37be8e1d64cdc952dbb432abbcb9300316d83d734fb6095fa7cdaf4b72d4507cb2a88e595cc359523df2d035dc460d9d1f500712263dc46bc99b60d2edb2ee6ad82bb2e7a1b0520e7bc816ba206a89cfc2e92b650d778145623ec20f8f01d55a8355"}}, {0x71, &(0x7f0000000480)=@string={0x71, 0x3, "034163271887b344a24b328d9c98aaa9ac790437c3d9694a5eed51d730cb0e7856f6a04174cf8d7092f629e6de12fa8d7847fb02db06bae09b70a0da7df61b0225845acb5cfe15cd9cd23c4eba8bea76b2bad5898b76794c339e647e699ed69b9538851dffcf0f8384c076ce9b6075"}}, {0xad, &(0x7f0000000500)=@string={0xad, 0x3, "d9cd35e7820b2f26e75e2ef04219448c6a96ba3def425ef083a076945b83f7e8556615cc2104150386e8ecd2270b1d98492cdf0d8ffe63a836d76651d0e883b488d61e82014582f5df4d3dbb5c1b0ef29302df3c1c21087589130789d725d6c88ecfd2350849066cf3b743a0d3fbe9e042fbb723585ccdf4bc8e26fbbee2f241bdee0b8fac05f62ccb121978a11dece918f1d970efc6b7d748886dc82ea29a786929e1f4f3a2d10add5acd"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc22}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44c}}]})
ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000080)=0x2)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syncfs(r0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x6, {0x6, 0x6, "392cdaab"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000000880)={0x14, &(0x7f0000000780)={0x0, 0xe, 0xac, {0xac, 0x5, "b1b60d4afdb94ab4a1f73ab7b975fcd5152fde18373ac34c6f952773bb3bb4192c1b7ef23426f69f5ce8f92e194c9d5f3a99bfaadf755ac19239b376b937b9fac536e3aa725c5c846ba6efd2e60d9b54f38083461d9e8868054acd6828c792e52db99279c54c67e0e852dbdba7fff392a3168541a22144cadece872aa141b85a345d980d2c1bd9430d02b2039e972d731a44f68194f9d3c197429836b3f55a17eaeb598a5879d672149e"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c04}}}, &(0x7f0000000b40)={0x44, &(0x7f00000008c0)={0x40, 0x1, 0x82, "0ce1bf062172cf55af367e1344aae4301b1e38d8b1afe70ea81b664a402a75fc32f85cb1fc0a5094c10fbd6b71eeda3fcd42a1539622c99858ef0977f908e3634b62d21a0127cab7c94de5311eee4e4fb8f3aa324eeb64d0a40218624ead46faec918e30638de464b5e44e31dd000b2d7880ac6ef2a238eeb40fb4bc3d39b78fdbac"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x2c}, &(0x7f0000000a00)={0x20, 0x81, 0x2, "310e"}, &(0x7f0000000a40)={0x20, 0x82, 0x1, "1a"}, &(0x7f0000000a80)={0x20, 0x83, 0x1, "1f"}, &(0x7f0000000ac0)={0x20, 0x84, 0x4, "0e86041a"}, &(0x7f0000000b00)={0x20, 0x85, 0x3, "09b4c8"}})

2.953621908s ago: executing program 1 (id=1654):
unshare(0x22020600)
r0 = socket(0x1e, 0x4, 0x0)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
r1 = socket$rds(0x15, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x80}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x3f00)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000000640)=""/102376, 0x18fe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
get_robust_list(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
r4 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f00000000c0), 0x6db6e559)
read$nci(r3, &(0x7f0000000100)=""/107, 0x6b)
sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000380)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000480)=[{&(0x7f0000001a00)='P', 0x1}], 0x1}}], 0x1, 0x0)

1.901691286s ago: executing program 3 (id=1655):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xf, &(0x7f0000000300)={0x8, 0x20000008f}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f040801280410a2751138e2cedd63976442bda86dfab5f6f91a214af72fb238dfc2ea8394d96029cbe6031bab32d950327d240981265076dd8b024333e9df"], 0x7)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000000)="3f000000010003", 0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
landlock_create_ruleset(&(0x7f0000000180)={0x9910, 0x874da2e8a316cf27, 0x1}, 0x18, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200000, 0x120)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x30d000, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)

1.542993136s ago: executing program 1 (id=1656):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x5, 0x9, 0x2, 0x10, 0x7}, 0x20, &(0x7f0000000180)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0xb, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0xaa, "ae97bec030cf6358d4b77d5988a8d717"}]}, 0x2f, [{0x94, &(0x7f00000001c0)=@string={0x94, 0x3, "e037ef00dc2cac2ddd53839e289b112bceea02f52134ceddff1ebfe9df56bf7eedba0b28df9ff33823d3c63d1c0cb3a7be33012440c9de68a5cd20f16a85bf49a3e4fdaaa8ddb854070eab843f64aa08875a2f78f6ce3ef9de792071c526587e26a4e86cd46f4c94631ccb8440980ac5f8358038f2dff74251c4362bfdfcb53a99354ed8ca264fd754b1f7c211144fc118a6"}}]})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
pipe2$9p(&(0x7f00000002c0), 0x1000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000073c00000000000000000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_usb_control_io$printer(r0, 0x0, 0x0)
setresgid(0x0, 0xee01, 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x2d, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5)
mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='ext3\x00', 0x2021008, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0x1434, 0x65, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x1404, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x40}, @TCA_ROUTE4_ACT={0x13f8, 0x6, [@m_sample={0x1038, 0x1a, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x48}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x170, 0x18, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x131, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_vlan={0x8c, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x5d, 0x6, "eda7d7a535361ed0c9b32a364b522addd6669254402ee3ff325c8cea5004909bdc00830603507c7cc3cb8a9b0bfd1aa374f3d137bd1e7f8b57e264a568809005b37e0f9e7b458fe6d976cd4a52b8661fb1fc93f220613f0a0b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x84, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x55, 0x6, "b785195954bf29eb39a865c5695a7ac46cec065f7db06dbdba2e8cf062693312261bf71915b2d84a074fd931b04b8440933794ba3bc0c3d3302773efdb92a216873b53281af4671231b5fff52cece35cfe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x60, 0x1b, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0xb4, 0x40, 0x1f}, {0xf6a, 0x50, 0x2, 0xffffffff}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x7, 0x20000000, 0x0, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0xdc, 0x9, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1}]}, {0x9d, 0x6, "bc1ad3229b696b64631b982f1ae9cf411c2b1e5fdff6242d8695a1ed156c80531bcbd658d1eea2abd881689e410b142d3051cdb54d04700ae8760c4554a295a0dc065e7a467f52ac1406a7c414dea141de52ea6b5ad19c69da24e696a9a9f2d1afa4e45f037f6415a6c384c6d7ac9ab597d537b40239955cdf04e000a6a1df91fa873a6909cdd848aea9e7a3a97b4ac95ae1b196d513b2680e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1434}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
syz_open_procfs(r4, &(0x7f0000000100)='fdinfo/4\x00')
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)=ANY=[@ANYRESDEC=r3], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)

1.122530034s ago: executing program 6 (id=1657):
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000041}, 0x400c004)

983.121813ms ago: executing program 6 (id=1658):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040))
connect$unix(r5, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$rds(0x15, 0x5, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

294.889016ms ago: executing program 2 (id=1659):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)='#', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21)

283.33269ms ago: executing program 6 (id=1660):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
r2 = timerfd_create(0x0, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028b912800b00010065727370616e00001800028004001200050016000200000006001800000000"], 0x48}}, 0x0)
clock_settime(0x0, &(0x7f0000003c80)={0x77359400})
clock_gettime(0x6, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
timerfd_settime(r2, 0x3, &(0x7f0000000000)={{}, {r4, r5+60000000}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f0000000180)=""/65, 0x41}, {&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/121, 0x79}, {&(0x7f0000000680)=""/140, 0x8c}], 0x7, &(0x7f00000007c0)=""/94, 0x5e}, 0x1000}, {{&(0x7f0000000840)=@l2tp6, 0x80, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000100)=""/3, 0x3}], 0x2}}], 0x2, 0x8002, 0x0)

162.783902ms ago: executing program 2 (id=1661):
mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) (async, rerun: 64)
chdir(&(0x7f0000000140)='./file0\x00') (rerun: 64)
openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32)
r0 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async)
mkdir(&(0x7f0000005800)='./bus\x00', 0x6b76f27452643c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x400000, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', <r4=>r2, 0x4, 0x4, 0xdc, 0x5, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @remote, 0x7800, 0x1, 0x7fffffff, 0x3}})
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001800)=@delchain={0xa50, 0x65, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xf}, {0x6, 0xfff3}, {0xa, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xa320c4b}, @TCA_CHAIN={0x8, 0xb, 0xcb78}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_u32={{0x8}, {0x974, 0x2, [@TCA_U32_SEL={0x614, 0x5, {0xc, 0x0, 0x7, 0x248, 0x7, 0x6, 0x8, 0x3ff, [{0x4, 0x9, 0x8, 0x7}, {0x6000, 0xfffffc00, 0x8, 0x9}, {0x2, 0x0, 0x80000000, 0xd}, {0x1, 0x0, 0x7, 0xffff1e20}, {0x100, 0x1, 0xcc, 0xa}, {0xfffffffb, 0x0, 0x8, 0x62}, {0x800, 0x401, 0x7, 0x15}, {0x3, 0x5b, 0x1, 0x1ff}, {0x10, 0x4, 0xfffffffd, 0x6}, {0x1, 0x1, 0x3, 0x80}, {0xca, 0x3, 0x6, 0x3}, {0xffffffff, 0x3, 0x5, 0x80}, {0x4, 0x7, 0x3, 0x9}, {0x7, 0x5, 0x8, 0x9a6}, {0xfffff183, 0x80000000, 0x0, 0x2d56}, {0xee, 0x9, 0x1, 0x10001}, {0x8, 0x1, 0x4, 0x3}, {0x4, 0x8, 0x8, 0x4}, {0x4, 0x4, 0x2, 0x6}, {0x2, 0xffffb5f0, 0x7f, 0x8}, {0x4, 0xb0, 0x7, 0x2}, {0xfffff800, 0x10001, 0x1, 0xc04}, {0x3, 0x3, 0x1, 0x9}, {0xffff, 0x5, 0x8000, 0x9}, {0x3, 0x5, 0x4, 0x100}, {0x8, 0x0, 0x3, 0x3}, {0x6, 0xffffffff, 0x1, 0x1}, {0x3, 0x80, 0x7, 0x1}, {0x7f, 0x3, 0x5, 0x7}, {0x7fffffff, 0xfffffd9f, 0x6f1, 0x8001}, {0xe, 0xffffffff, 0xbf70, 0x101}, {0x7, 0x6, 0x8001, 0x9}, {0x6, 0x5, 0x5, 0x8}, {0x7, 0x5, 0x9, 0xff}, {0xe96, 0x7, 0xdcaa, 0x39f283a5}, {0x7f, 0x9, 0x7, 0x6}, {0x6, 0x2, 0x1ff, 0x4}, {0xffffffcc, 0x2, 0xd3, 0x5}, {0x1, 0xffff, 0x4, 0xcf}, {0x8, 0x6, 0x9, 0x1}, {0x3, 0x9, 0xf5}, {0x6, 0x9, 0xde, 0xfff}, {0x7, 0xe, 0xffffffff, 0x7f}, {0x5, 0xb83, 0x2}, {0x0, 0x7f, 0x9c, 0xa068}, {0x1000, 0xffffe9b9, 0xffffffff, 0x67a}, {0x6c, 0x1, 0x5, 0x4}, {0x9, 0x8001, 0x6, 0x93d}, {0xde, 0x3, 0x6, 0xb}, {0x9, 0x4, 0x9, 0x9}, {0x80000001, 0x4, 0x400, 0x2}, {0xd, 0x8, 0xe9, 0xab2}, {0x2, 0x4, 0x0, 0x8}, {0x3fa, 0x9, 0x800, 0x8a1}, {0x3, 0x7, 0x2, 0x1}, {0xf8, 0xf364, 0x8, 0x401}, {0x4, 0x7, 0xa0, 0x63e}, {0x4, 0x1, 0xe468, 0x1c49}, {0x4, 0x10000, 0x66, 0x3}, {0x7, 0x10, 0x0, 0x3}, {0x1, 0xf, 0xa93, 0x8}, {0x9, 0x8, 0x1, 0x10}, {0x8, 0x1100, 0x8000000, 0x81}, {0x100, 0x10001, 0x6, 0x6}, {0x7, 0x9, 0x2, 0x100}, {0xfffffc01, 0x80000001, 0x0, 0x7}, {0xa3d, 0xb, 0x8a, 0x1}, {0x80000000, 0x2, 0xfffffff0, 0x101}, {0x8, 0x4, 0x6, 0x1ff}, {0xe000000, 0x80000000, 0x3ff, 0x10}, {0x27, 0xff, 0xfffffff8, 0x7}, {0x9, 0x8, 0x1, 0xb}, {0xc, 0x3bf1, 0x7, 0xf}, {0x5, 0x71fb, 0x80000000, 0xa}, {0x63eb823c, 0x401, 0x8, 0x9}, {0x9, 0x8, 0x0, 0x3}, {0x8, 0x7, 0xffffffff, 0xa}, {0x0, 0x3, 0x4, 0x6}, {0x401, 0xff, 0x3, 0x1}, {0x5, 0x7, 0x2, 0x7}, {0x3, 0xf0cf, 0x5, 0x5}, {0x5, 0x6, 0xb, 0x2}, {0x1, 0x8, 0xd, 0xb8}, {0x7, 0x6, 0x3, 0xffff}, {0x4, 0x0, 0x101, 0x3}, {0x1800, 0x4, 0xfffffffe, 0x1}, {0x7, 0x5, 0x8, 0xeb}, {0x6, 0x3, 0x6, 0x55}, {0x9, 0x6}, {0x2, 0x3ff, 0x800, 0x3}, {0x7fff, 0x101, 0x1aee, 0x8000}, {0xe90b, 0x1, 0x3c, 0x2}, {0x7, 0x10, 0x7b9}, {0x401, 0x5, 0x7, 0x5}, {0x1, 0x3, 0x4, 0x8}, {0x1, 0x0, 0x1, 0xde2}]}}, @TCA_U32_ACT={0x35c, 0x7, [@m_connmark={0x14c, 0x1c, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x5, 0x6, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x1, 0x7, 0xae20}, 0x2dcd}}]}, {0xe3, 0x6, "01f3ed8ec02cd02e42b5e7411f579f61fbfd9603e9625eb15b87683920d5f806ab94519d1f3f7e022cad90b7caba49877755714c28fe6696f7d27113d05933768b5aa4beeb0a4848ed4d8cdf47d836dccdc5e19a8e6c0bc69c8d4d1d43f78ca2c7d7d67937e699a62f08378b4ca7d3eb4f6e9f03e48f60fc7b26b0680aeb7fbef2387f78e253384825564b76bb912229475a4f1c5b378efef9a7d590bf0625b09b9e1909690dae8cf2f0275c97e3e4f8c47a4542534af974af098a58960e91f45b9323d0472a94b1f65ca640d38e87d2dcf628844d266d9b1e08f32ce450c4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x11c, 0x17, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x20000000, 0x7, 0xcd2}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0xfffffffc, 0x3, 0x1, 0x7}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xa6b6, 0x1, 0x3, 0x7}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xd, 0x10000000, 0x3, 0x5}, 0x2, r2}}]}, {0x6d, 0x6, "cf6a064b85d1096fe7b9054152b8138e0a5e8212b72fc98fec5a3b1d5c5bc5f18e63f5ddb68e12d6801ca3c1563609229f2b3a15ca9c0f6d6dc4ce75ed88f8ad10b3b0a96dee75f4379691cf83f14994fbdeb86112ac130439fbcea14bcec51fca7b13e4a979d713d6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0xf0, 0x1f, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x200}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x77, 0x6, "181fe3e1b51d466758641cf3aed27639bbe13b3e686fb8a452381f3ca9f0b289c53ebc81932c8e98d45db4bc49981def7d15c37befdddfaecfbbb05e5540b3a7e1a13e922fea34c1407275d661dc817e2566801c559d944a53ca10112109c5a75dee20019f9ca31fb488295f54bf690ba15675"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x80, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0xdd38, 0xfb, 0x2}, {0x8, 0x2, 0x9, 0x1ff}, {0xcf0, 0xb, 0x40, 0xa}, {0x5, 0x7, 0xb, 0x1ff}, {0xa, 0x4, 0x2, 0x4}, {0x8, 0x5, 0x4, 0x7}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff3}}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x7, 0x5a, 0x2, 0xfffffff7}, {0x5, 0x0, 0x1, 0xffff}]}}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0xa}}]}}, @TCA_RATE={0x6, 0x5, {0x23, 0xf4}}]}, 0xa50}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="140008e67339b968000012dd6f36b7a9baa3923287b922d79bed2146d97beb987095c7a3f18dae56d0ebdb1e8ba3cf7fad34d564", @ANYRES16, @ANYBLOB="0100000000000000000025000000"], 0x14}}, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x802a}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfc, 0x0, 0x6}]}, 0x10)
write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xfdef) (async)
landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x3}, 0x18, 0x0) (async)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
read$msr(0xffffffffffffffff, &(0x7f0000000200)=""/166, 0xa6)

0s ago: executing program 2 (id=1662):
r0 = socket$kcm(0x11, 0x3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800018, 0x19) (fail_nth: 3)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)

kernel console output (not intermixed with test programs):

[ T9595] RBP: 00007ffbfb51d090 R08: 0000000000000000 R09: 0000000000000000
[  420.149735][ T9595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  420.158108][ T9595] R13: 0000000000000001 R14: 00007ffbfa976080 R15: 00007ffebd233678
[  420.166217][ T9595]  </TASK>
[  420.757785][ T9293] usb 2-1: Using ep0 maxpacket: 16
[  420.897765][ T9293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.910074][ T9293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.945855][ T9293] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  421.027629][ T9293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.948600][ T9293] usb 2-1: config 0 descriptor??
[  422.158904][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.962'.
[  423.166577][ T9293] usbhid 2-1:0.0: can't add hid device: -71
[  423.173491][ T9293] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  423.239404][ T9293] usb 2-1: USB disconnect, device number 17
[  424.109509][ T9632] loop2: detected capacity change from 0 to 7
[  424.137733][ T9632] Dev loop2: unable to read RDB block 7
[  424.144282][ T9632]  loop2: unable to read partition table
[  424.151347][ T9632] loop2: partition table beyond EOD, truncated
[  424.157970][ T9632] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  425.282358][ T5837] Bluetooth: hci1: link tx timeout
[  425.288005][ T5837] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  426.110067][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.974'.
[  426.971075][ T5880] IPVS: starting estimator thread 0...
[  427.130217][ T9663] IPVS: using max 19 ests per chain, 45600 per kthread
[  427.231546][ T9672] syz.3.983: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  427.231641][ T9672] CPU: 1 UID: 0 PID: 9672 Comm: syz.3.983 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  427.231672][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  427.231688][ T9672] Call Trace:
[  427.231699][ T9672]  <TASK>
[  427.231710][ T9672]  dump_stack_lvl+0x241/0x360
[  427.231751][ T9672]  ? __pfx_dump_stack_lvl+0x10/0x10
[  427.231784][ T9672]  ? __pfx__printk+0x10/0x10
[  427.231818][ T9672]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  427.294993][ T9672]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  427.301644][ T9672]  warn_alloc+0x278/0x410
[  427.306011][ T9672]  ? __vmalloc_node_range_noprof+0x106/0x1380
[  427.312129][ T9672]  ? __pfx_warn_alloc+0x10/0x10
[  427.317186][ T9672]  ? kasan_save_track+0x3f/0x80
[  427.322081][ T9672]  ? __kasan_kmalloc+0x98/0xb0
[  427.326970][ T9672]  ? xsk_setsockopt+0x4ea/0x950
[  427.332483][ T9672]  ? do_sock_setsockopt+0x3af/0x720
[  427.337922][ T9672]  ? __x64_sys_setsockopt+0x1ee/0x280
[  427.343418][ T9672]  ? do_syscall_64+0xf3/0x230
[  427.348218][ T9672]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.354456][ T9672]  __vmalloc_node_range_noprof+0x126/0x1380
[  427.360411][ T9672]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  427.366777][ T9672]  ? __kasan_kmalloc+0x98/0xb0
[  427.371604][ T9672]  vmalloc_user_noprof+0x74/0x80
[  427.377182][ T9672]  ? xskq_create+0xb6/0x170
[  427.381946][ T9672]  xskq_create+0xb6/0x170
[  427.386389][ T9672]  xsk_init_queue+0xa1/0x100
[  427.391037][ T9672]  xsk_setsockopt+0x4ea/0x950
[  427.395763][ T9672]  ? __pfx_xsk_setsockopt+0x10/0x10
[  427.401031][ T9672]  ? __fget_files+0x2a/0x410
[  427.405736][ T9672]  ? __pfx_xsk_setsockopt+0x10/0x10
[  427.410958][ T9672]  do_sock_setsockopt+0x3af/0x720
[  427.416017][ T9672]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  427.421613][ T9672]  ? __fget_files+0x395/0x410
[  427.426310][ T9672]  ? __fget_files+0x2a/0x410
[  427.430951][ T9672]  __x64_sys_setsockopt+0x1ee/0x280
[  427.436293][ T9672]  do_syscall_64+0xf3/0x230
[  427.441174][ T9672]  ? clear_bhb_loop+0x35/0x90
[  427.446066][ T9672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.452166][ T9672] RIP: 0033:0x7ffbfa785d29
[  427.456601][ T9672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.476414][ T9672] RSP: 002b:00007ffbfb51d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  427.484973][ T9672] RAX: ffffffffffffffda RBX: 00007ffbfa976080 RCX: 00007ffbfa785d29
[  427.493068][ T9672] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  427.501613][ T9672] RBP: 00007ffbfa801b08 R08: 0000000000000004 R09: 0000000000000000
[  427.509721][ T9672] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  427.518064][ T9672] R13: 0000000000000000 R14: 00007ffbfa976080 R15: 00007ffebd233678
[  427.526285][ T9672]  </TASK>
[  427.544420][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  427.545786][ T9672] Mem-Info:
[  427.557974][ T9672] active_anon:340 inactive_anon:3677 isolated_anon:0
[  427.557974][ T9672]  active_file:17208 inactive_file:39464 isolated_file:0
[  427.557974][ T9672]  unevictable:768 dirty:131 writeback:8
[  427.557974][ T9672]  slab_reclaimable:9801 slab_unreclaimable:106176
[  427.557974][ T9672]  mapped:29028 shmem:1435 pagetables:733
[  427.557974][ T9672]  sec_pagetables:0 bounce:0
[  427.557974][ T9672]  kernel_misc_reclaimable:0
[  427.557974][ T9672]  free:1316692 free_pcp:201 free_cma:0
[  427.728769][ T9672] Node 0 active_anon:1360kB inactive_anon:14608kB active_file:68760kB inactive_file:157856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116112kB dirty:524kB writeback:32kB shmem:4204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12072kB pagetables:2932kB sec_pagetables:0kB all_unreclaimable? no
[  427.728852][ T9672] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  427.728915][ T9672] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  427.728988][ T9672] lowmem_reserve[]: 0 2465 2466 0 0
[  427.729041][ T9672] Node 0 DMA32 free:1344600kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1356kB inactive_anon:14572kB active_file:67980kB inactive_file:157804kB unevictable:1536kB writepending:556kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:1320kB local_pcp:508kB free_cma:0kB
[  427.729113][ T9672] lowmem_reserve[]: 0 0 0 0 0
[  427.729168][ T9672] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  427.729239][ T9672] lowmem_reserve[]: 0 0 0 0 0
[  427.729296][ T9672] Node 1 Normal free:3907288kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  427.729367][ T9672] lowmem_reserve[]: 0 0 0 0 0
[  427.729423][ T9672] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  427.729605][ T9672] Node 0 DMA32: 2*4kB (ME) 772*8kB (UME) 613*16kB (UME) 486*32kB (UME) 212*64kB (UME) 101*128kB (UME) 59*256kB (UME) 37*512kB (UME) 21*1024kB (UM) 11*2048kB (UME) 295*4096kB (M) = 1344440kB
[  427.729977][ T9672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  427.730130][ T9672] Node 1 Normal: 222*4kB (UME) 68*8kB (UME) 40*16kB (UME) 208*32kB (UME) 91*64kB (UME) 34*128kB (UME) 13*256kB (UM) 12*512kB (UME) 6*1024kB (UME) 1*2048kB (U) 945*4096kB (M) = 3907288kB
[  427.730379][ T9672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  427.730419][ T9672] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  427.730442][ T9672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  427.730464][ T9672] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  427.730486][ T9672] 58112 total pagecache pages
[  427.730498][ T9672] 5 pages in swap cache
[  427.730509][ T9672] Free swap  = 124636kB
[  427.730521][ T9672] Total swap = 124996kB
[  427.730533][ T9672] 2097051 pages RAM
[  427.730543][ T9672] 0 pages HighMem/MovableOnly
[  427.730554][ T9672] 427006 pages reserved
[  427.730565][ T9672] 0 pages cma reserved
[  428.305794][ T9682] FAULT_INJECTION: forcing a failure.
[  428.305794][ T9682] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  428.305835][ T9682] CPU: 0 UID: 0 PID: 9682 Comm: syz.0.987 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  428.305864][ T9682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  428.305880][ T9682] Call Trace:
[  428.305890][ T9682]  <TASK>
[  428.305901][ T9682]  dump_stack_lvl+0x241/0x360
[  428.305946][ T9682]  ? __pfx_dump_stack_lvl+0x10/0x10
[  428.305978][ T9682]  ? __pfx__printk+0x10/0x10
[  428.306010][ T9682]  ? __pfx_lock_release+0x10/0x10
[  428.306046][ T9682]  should_fail_ex+0x3b0/0x4e0
[  428.306076][ T9682]  _copy_from_user+0x2f/0xc0
[  428.306112][ T9682]  do_sock_getsockopt+0x1d1/0x7e0
[  428.306148][ T9682]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  428.306174][ T9682]  ? __fget_files+0x2a/0x410
[  428.306201][ T9682]  ? __fget_files+0x395/0x410
[  428.306225][ T9682]  ? __fget_files+0x2a/0x410
[  428.306257][ T9682]  __x64_sys_getsockopt+0x2a1/0x370
[  428.306292][ T9682]  ? __pfx___x64_sys_getsockopt+0x10/0x10
[  428.306323][ T9682]  ? do_syscall_64+0x100/0x230
[  428.306370][ T9682]  ? do_syscall_64+0xb6/0x230
[  428.306409][ T9682]  do_syscall_64+0xf3/0x230
[  428.306444][ T9682]  ? clear_bhb_loop+0x35/0x90
[  428.306472][ T9682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.306509][ T9682] RIP: 0033:0x7f4093d85d29
[  428.306530][ T9682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  428.306552][ T9682] RSP: 002b:00007f4094bba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  428.306581][ T9682] RAX: ffffffffffffffda RBX: 00007f4093f75fa0 RCX: 00007f4093d85d29
[  428.306601][ T9682] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000003
[  428.306618][ T9682] RBP: 00007f4094bba090 R08: 0000000020000240 R09: 0000000000000000
[  428.306635][ T9682] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001
[  428.306652][ T9682] R13: 0000000000000000 R14: 00007f4093f75fa0 R15: 00007ffd4b1abe38
[  428.306683][ T9682]  </TASK>
[  428.576009][ T9692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.989'.
[  429.302404][ T5837] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  429.326927][ T9694] qrtr: Invalid version 159
[  429.328659][   T30] audit: type=1326 audit(1736607683.322:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  429.328713][   T30] audit: type=1326 audit(1736607683.322:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  429.328754][   T30] audit: type=1326 audit(1736607683.322:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  429.328792][   T30] audit: type=1326 audit(1736607683.322:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  429.328831][   T30] audit: type=1326 audit(1736607683.322:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  429.328870][   T30] audit: type=1326 audit(1736607683.322:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  429.328909][   T30] audit: type=1326 audit(1736607683.322:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  429.328948][   T30] audit: type=1326 audit(1736607683.322:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  429.328986][   T30] audit: type=1326 audit(1736607683.322:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  429.329023][   T30] audit: type=1326 audit(1736607683.322:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9693 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  429.669104][ T5883] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  430.564076][ T5880] IPVS: starting estimator thread 0...
[  430.716271][ T9705] IPVS: using max 20 ests per chain, 48000 per kthread
[  430.846713][    C1] vkms_vblank_simulate: vblank timer overrun
[  430.870387][ T5883] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  430.870429][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.871426][ T5883] usb 1-1: Product: syz
[  430.871450][ T5883] usb 1-1: Manufacturer: syz
[  430.871470][ T5883] usb 1-1: SerialNumber: syz
[  430.894069][    C1] vkms_vblank_simulate: vblank timer overrun
[  430.962242][    C1] vkms_vblank_simulate: vblank timer overrun
[  431.010023][    C1] vkms_vblank_simulate: vblank timer overrun
[  431.723828][ T5883] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  433.123168][ T5912] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  433.131201][ T5912] usb 1-1: ath9k_htc: USB layer deinitialized
[  433.150016][ T5912] usb 1-1: USB disconnect, device number 16
[  433.220119][ T5880] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  433.389085][ T5880] usb 6-1: Using ep0 maxpacket: 32
[  433.397784][ T5880] usb 6-1: config 0 has no interfaces?
[  433.410657][ T5880] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  433.421779][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.435397][ T5880] usb 6-1: Product: syz
[  433.444251][ T5880] usb 6-1: Manufacturer: syz
[  433.452258][ T5880] usb 6-1: SerialNumber: syz
[  433.464528][ T5880] usb 6-1: config 0 descriptor??
[  433.571812][ T9740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1001'.
[  435.655370][ T9293] usb 6-1: USB disconnect, device number 4
[  436.504932][ T9759] FAULT_INJECTION: forcing a failure.
[  436.504932][ T9759] name failslab, interval 1, probability 0, space 0, times 0
[  436.535847][ T9759] CPU: 1 UID: 0 PID: 9759 Comm: syz.5.1009 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  436.546784][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  436.550459][ T5837] Bluetooth: hci5: link tx timeout
[  436.556864][ T9759] Call Trace:
[  436.556883][ T9759]  <TASK>
[  436.556895][ T9759]  dump_stack_lvl+0x241/0x360
[  436.563193][ T5837] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa
[  436.565679][ T9759]  ? __pfx_dump_stack_lvl+0x10/0x10
[  436.586747][ T9759]  ? __pfx__printk+0x10/0x10
[  436.591477][ T9759]  should_fail_ex+0x3b0/0x4e0
[  436.596288][ T9759]  should_failslab+0xac/0x100
[  436.601074][ T9759]  ? skb_clone+0x20c/0x390
[  436.605544][ T9759]  kmem_cache_alloc_noprof+0x70/0x380
[  436.610986][ T9759]  skb_clone+0x20c/0x390
[  436.615280][ T9759]  __netlink_deliver_tap+0x3cc/0x7f0
[  436.620614][ T9759]  ? netlink_deliver_tap+0x2e/0x1b0
[  436.625858][ T9759]  netlink_deliver_tap+0x19d/0x1b0
[  436.631020][ T9759]  netlink_unicast+0x7c4/0x990
[  436.635811][ T9759]  ? __pfx_netlink_unicast+0x10/0x10
[  436.641124][ T9759]  ? __virt_addr_valid+0x45f/0x530
[  436.646257][ T9759]  ? __phys_addr_symbol+0x2f/0x70
[  436.651312][ T9759]  ? __check_object_size+0x47a/0x730
[  436.656655][ T9759]  netlink_sendmsg+0x8e4/0xcb0
[  436.661446][ T9759]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.666759][ T9759]  ? __pfx_netlink_sendmsg+0x10/0x10
[  436.672057][ T9759]  __sock_sendmsg+0x221/0x270
[  436.676779][ T9759]  ____sys_sendmsg+0x52a/0x7e0
[  436.681582][ T9759]  ? __pfx_____sys_sendmsg+0x10/0x10
[  436.686975][ T9759]  ? __fget_files+0x2a/0x410
[  436.691618][ T9759]  ? __fget_files+0x2a/0x410
[  436.696236][ T9759]  __sys_sendmsg+0x269/0x350
[  436.700840][ T9759]  ? __pfx_lock_release+0x10/0x10
[  436.705882][ T9759]  ? __pfx___sys_sendmsg+0x10/0x10
[  436.711102][ T9759]  ? __pfx_vfs_write+0x10/0x10
[  436.715896][ T9759]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  436.722267][ T9759]  ? do_syscall_64+0x100/0x230
[  436.727049][ T9759]  ? do_syscall_64+0xb6/0x230
[  436.731764][ T9759]  do_syscall_64+0xf3/0x230
[  436.736308][ T9759]  ? clear_bhb_loop+0x35/0x90
[  436.741215][ T9759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.747174][ T9759] RIP: 0033:0x7f2d8a985d29
[  436.751653][ T9759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  436.771371][ T9759] RSP: 002b:00007f2d887f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  436.779908][ T9759] RAX: ffffffffffffffda RBX: 00007f2d8ab75fa0 RCX: 00007f2d8a985d29
[  436.787981][ T9759] RDX: 000000000000c000 RSI: 0000000020000000 RDI: 0000000000000004
[  436.795998][ T9759] RBP: 00007f2d887f6090 R08: 0000000000000000 R09: 0000000000000000
[  436.804132][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  436.812137][ T9759] R13: 0000000000000000 R14: 00007f2d8ab75fa0 R15: 00007ffeb8e10f58
[  436.820174][ T9759]  </TASK>
[  437.604863][ T9759] : entered promiscuous mode
[  438.008766][ T5881] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  438.182024][ T5881] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  438.192839][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.219569][ T5881] usb 3-1: config 0 descriptor??
[  438.726990][ T5881] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0009/input/input15
[  438.834929][ T9765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  438.839865][ T5837] Bluetooth: hci5: command 0x0406 tx timeout
[  438.858236][ T5881] sony 0003:054C:03D5.0009: input,hidraw0: USB HID v1.01 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0
[  438.885281][ T9765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.049068][ T9293] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  439.972024][ T9293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10
[  439.984076][ T9293] usb 2-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00
[  439.993716][ T9293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.011329][ T9293] usb 2-1: config 0 descriptor??
[  440.052593][ T9765] program syz.2.1011 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  440.133150][ T5880] usb 3-1: USB disconnect, device number 25
[  440.363249][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  440.370409][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  440.442686][ T9293] aquacomputer_d5next 0003:0C70:F001.000A: hidraw0: USB HID vdd.33 Device [HID 0c70:f001] on usb-dummy_hcd.1-1/input0
[  440.654077][ T9293] usb 2-1: USB disconnect, device number 18
[  442.092744][ T9806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1024'.
[  442.419404][ T9293] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  442.560549][ T5883] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  442.600048][ T5837] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  442.761952][ T9293] usb 1-1: Using ep0 maxpacket: 16
[  442.769763][ T5883] usb 2-1: Using ep0 maxpacket: 8
[  442.776637][ T9293] usb 1-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.778826][ T5883] usb 2-1: config 0 has an invalid interface number: 26 but max is 0
[  442.798124][ T9293] usb 1-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.825165][ T5883] usb 2-1: config 0 has no interface number 0
[  442.850712][ T9293] usb 1-1: config 0 interface 0 has no altsetting 0
[  442.901043][ T9293] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  442.912776][ T9293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.919598][ T5883] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0107, bcdDevice=1f.ca
[  443.020492][ T9293] usb 1-1: config 0 descriptor??
[  443.045999][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.086401][ T5883] usb 2-1: Product: syz
[  443.094239][ T5883] usb 2-1: Manufacturer: syz
[  443.115650][ T5883] usb 2-1: SerialNumber: syz
[  443.134848][ T5883] usb 2-1: config 0 descriptor??
[  443.156460][ T5883] kvaser_usb 2-1:0.26: error -ENODEV: Cannot get usb endpoint(s)
[  443.231307][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.417716][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.494639][ T5882] usb 2-1: USB disconnect, device number 19
[  443.684814][ T9293] usbhid 1-1:0.0: can't add hid device: -71
[  443.691866][ T9293] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  443.706258][ T9293] usb 1-1: USB disconnect, device number 17
[  444.947350][ T9862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1042'.
[  445.205737][ T9864] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1041'.
[  445.641381][ T9866] netlink: 'syz.0.1043': attribute type 33 has an invalid length.
[  451.533810][ T9922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1060'.
[  452.484210][ T9945] trusted_key: encrypted_key: keylen parameter is missing
[  452.973599][ T9944] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  453.323277][ T9948] tmpfs: Bad value for 'nr_blocks'
[  453.439857][ T9952] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  453.735832][ T9967] tmpfs: Cannot change global quota limit on remount
[  454.298842][ T5883] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  454.468740][ T5883] usb 2-1: Using ep0 maxpacket: 32
[  454.484579][ T5883] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  454.533574][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.562224][ T5883] usb 2-1: config 0 descriptor??
[  454.588371][ T5883] gspca_main: nw80x-2.14.0 probing 055f:d001
[  454.935160][ T9970] veth1_to_bond: entered allmulticast mode
[  454.964949][ T9969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.218541][ T9990] trusted_key: encrypted_key: keylen parameter is missing
[  455.518722][ T9989] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  456.006372][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  456.301671][ T5883] gspca_nw80x: reg_w err -71
[  456.352200][ T5883] nw80x 2-1:0.0: probe with driver nw80x failed with error -71
[  457.017214][ T5883] usb 2-1: USB disconnect, device number 20
[  457.643811][T10006] kvm: emulating exchange as write
[  458.031267][T10030] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  458.549272][ T5880] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  458.708593][ T5880] usb 1-1: Using ep0 maxpacket: 8
[  458.842168][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  458.886243][ T5880] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  458.929231][ T5880] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  458.939970][ T5880] usb 1-1: Product: syz
[  458.944296][ T5880] usb 1-1: Manufacturer: syz
[  458.949568][ T5880] usb 1-1: SerialNumber: syz
[  459.400473][ T5880] usb 1-1: palm_os_3_probe - error -110 getting connection information
[  459.410108][ T5880] visor 1-1:1.0: probe with driver visor failed with error -110
[  461.665426][ T5880] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  461.900721][ T5882] usb 1-1: USB disconnect, device number 18
[  461.943513][T10063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1105'.
[  462.915916][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'.
[  462.930776][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.943015][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.975804][ T5880] usb 6-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[  462.985987][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.006389][ T5880] usb 6-1: config 0 descriptor??
[  463.132751][T10070] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1106'.
[  464.159896][ T5880] usbhid 6-1:0.0: can't add hid device: -71
[  464.177389][ T5880] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  464.241282][ T5880] usb 6-1: USB disconnect, device number 5
[  464.258929][T10081] syz.2.1110 (10081): /proc/10075/oom_adj is deprecated, please use /proc/10075/oom_score_adj instead.
[  464.525439][ T5837] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  464.804966][ T5880] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  465.030737][ T5880] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  465.049054][ T5880] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  465.107210][ T5880] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  465.137267][ T5880] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  465.180852][ T5880] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  465.230171][ T5880] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  465.259134][ T5880] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  465.291164][ T5880] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  465.315449][ T5880] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  465.349771][ T5880] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  465.382253][ T5880] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  465.439691][ T5880] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  465.456273][T10096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1117'.
[  465.761173][ T5880] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  465.771672][ T5880] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  465.784165][ T5880] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  465.800801][ T5880] usb 6-1: string descriptor 0 read error: -22
[  465.807234][ T5880] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  465.819963][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.843839][ T5880] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  465.900592][T10098] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1118'.
[  465.983948][T10100] FAULT_INJECTION: forcing a failure.
[  465.983948][T10100] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.011783][T10100] CPU: 0 UID: 0 PID: 10100 Comm: syz.2.1119 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  466.022626][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  466.033253][T10100] Call Trace:
[  466.036569][T10100]  <TASK>
[  466.039537][T10100]  dump_stack_lvl+0x241/0x360
[  466.044287][T10100]  ? __pfx_dump_stack_lvl+0x10/0x10
[  466.049817][T10100]  ? __pfx__printk+0x10/0x10
[  466.054563][T10100]  should_fail_ex+0x3b0/0x4e0
[  466.059296][T10100]  _copy_from_user+0x2f/0xc0
[  466.064124][T10100]  sctp_setsockopt+0xcc/0x11c0
[  466.069041][T10100]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  466.075260][T10100]  do_sock_setsockopt+0x3af/0x720
[  466.080435][T10100]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  466.086035][T10100]  ? __fget_files+0x395/0x410
[  466.090756][T10100]  ? __fget_files+0x2a/0x410
[  466.095404][T10100]  __x64_sys_setsockopt+0x1ee/0x280
[  466.100677][T10100]  do_syscall_64+0xf3/0x230
[  466.105343][T10100]  ? clear_bhb_loop+0x35/0x90
[  466.110082][T10100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.116068][T10100] RIP: 0033:0x7f2f7d785d29
[  466.120528][T10100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  466.140187][T10100] RSP: 002b:00007f2f7e516038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  466.148658][T10100] RAX: ffffffffffffffda RBX: 00007f2f7d975fa0 RCX: 00007f2f7d785d29
[  466.156674][T10100] RDX: 0000000000000014 RSI: 0000000000000084 RDI: 0000000000000003
[  466.164695][T10100] RBP: 00007f2f7e516090 R08: 0000000000000008 R09: 0000000000000000
[  466.172720][T10100] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001
[  466.180745][T10100] R13: 0000000000000000 R14: 00007f2f7d975fa0 R15: 00007ffe89242c88
[  466.188865][T10100]  </TASK>
[  466.341081][T10077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.360884][T10077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.682011][T10110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.697657][T10110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.971975][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'.
[  467.584753][T10120] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1124'.
[  468.192655][ T5880] usb 6-1: USB disconnect, device number 6
[  468.459254][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1130'.
[  468.495455][T10134] kAFS: No cell specified
[  468.559664][ T5880] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  468.708938][ T5880] usb 6-1: Using ep0 maxpacket: 16
[  468.719591][ T5880] usb 6-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  468.732179][ T5880] usb 6-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0
[  468.744745][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0
[  468.752113][ T5880] usb 6-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  468.764440][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.774964][ T5880] usb 6-1: config 0 descriptor??
[  468.879222][ T5881] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  468.985518][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.996650][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.069059][ T5881] usb 3-1: Using ep0 maxpacket: 8
[  469.094934][ T5881] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  469.125766][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  469.133598][ T5881] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  469.133658][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  469.133689][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  469.133718][ T5881] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  469.133767][ T5881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  469.133796][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.213842][ T5880] razer 0003:1532:010D.000B: item fetching failed at offset 4/6
[  469.222790][ T5880] razer 0003:1532:010D.000B: probe with driver razer failed with error -22
[  469.449242][ T5883] usb 6-1: USB disconnect, device number 7
[  469.467218][ T5881] usb 3-1: usb_control_msg returned -32
[  469.474945][ T5881] usbtmc 3-1:16.0: can't read capabilities
[  469.608612][ T5912] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  469.728713][ T5880] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[  469.758801][ T5912] usb 4-1: Using ep0 maxpacket: 16
[  469.766831][ T5912] usb 4-1: unable to get BOS descriptor or descriptor too short
[  469.777143][ T5912] usb 4-1: config 3 has an invalid interface number: 7 but max is 1
[  469.786989][ T5912] usb 4-1: config 3 has no interface number 0
[  469.793365][ T5912] usb 4-1: config 3 interface 1 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0
[  469.809253][ T5912] usb 4-1: config 3 interface 7 has no altsetting 0
[  469.815919][ T5912] usb 4-1: config 3 interface 1 has no altsetting 0
[  469.825624][ T5912] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=e3.e2
[  469.835174][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.847228][ T5912] usb 4-1: Product: syz
[  469.852545][ T5912] usb 4-1: Manufacturer: syz
[  469.857282][ T5912] usb 4-1: SerialNumber: syz
[  469.884592][ T5880] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  469.893845][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  469.904577][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  469.915096][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  469.927701][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  469.940975][ T5880] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  469.949192][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  469.959883][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  469.984736][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  470.002568][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  470.022040][ T5880] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  470.035048][ T5882] usb 3-1: USB disconnect, device number 26
[  470.049321][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  470.076530][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  470.091652][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  470.113446][ T5880] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  470.132252][ T5880] usb 2-1: string descriptor 0 read error: -22
[  470.146699][ T5880] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  470.163623][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.185478][ T5880] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  470.423465][ T5837] Bluetooth: hci3: unexpected event for opcode 0x0c1a
[  470.433983][T10151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.445487][T10151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.790246][T10160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.835990][T10160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.982935][ T5912] xr_serial 4-1:3.7: xr_serial converter detected
[  470.999946][ T5912] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  471.008598][ T5912] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  471.024778][T10162] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1141'.
[  471.064096][ T5912] usb 4-1: USB disconnect, device number 17
[  471.071551][ T5912] xr_serial 4-1:3.7: device disconnected
[  472.541967][ T5881] usb 2-1: USB disconnect, device number 21
[  473.208172][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  475.124194][T10191] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  476.095594][T10208] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1153'.
[  476.169365][ T9293] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[  477.044922][ T9293] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  477.054287][ T9293] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  477.066319][ T9293] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  477.077417][ T9293] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  477.090365][T10236] tmpfs: Bad value for 'mpol'
[  477.099395][ T9293] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  477.114317][ T9293] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  477.122898][ T9293] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  477.166715][ T9293] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  477.187461][ T9293] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  477.219080][ T9293] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  477.240172][ T9293] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  477.247666][ T9293] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  477.279100][ T9293] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  477.296427][ T9293] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  477.318053][ T9293] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  477.339624][ T9293] usb 1-1: string descriptor 0 read error: -22
[  477.345945][ T9293] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  477.355971][ T5880] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  477.365673][ T9293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.520398][ T9293] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  477.720158][ T5880] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  477.929740][ T5880] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1
[  477.960198][ T5837] Bluetooth: hci1: unexpected event for opcode 0x0c1a
[  477.969792][T10219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.004406][ T5880] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  478.118924][T10219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.162703][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  478.206609][ T5880] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  478.479285][ T5880] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  478.588269][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.651007][T10254] lo speed is unknown, defaulting to 1000
[  478.712836][T10256] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[  478.809813][T10258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.819076][T10258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.030070][ T5880] ath6kl: Failed to submit usb control message: -71
[  479.037267][ T5880] ath6kl: unable to send the bmi data to the device: -71
[  479.044888][ T5880] ath6kl: Unable to send get target info: -71
[  479.066524][ T5880] ath6kl: Failed to init ath6kl core: -71
[  479.088335][ T5880] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71
[  479.160255][ T5880] usb 6-1: USB disconnect, device number 8
[  479.212143][T10272] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  479.245585][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  479.363700][ T5880] usb 1-1: USB disconnect, device number 19
[  479.800631][T10293] workqueue: name exceeds WQ_NAME_LEN. Truncating to: �ܻ}����r��ءÑV§�j��Pb�
[  480.349161][ T5880] usb 4-1: new low-speed USB device number 18 using dummy_hcd
[  480.478741][ T5883] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  480.511441][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  480.532532][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  480.543605][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  480.554587][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  480.566534][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  480.602863][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  480.610993][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  480.621439][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  480.634821][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  480.638590][ T5883] usb 6-1: Using ep0 maxpacket: 8
[  480.646744][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  480.664205][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  480.670191][ T5883] usb 6-1: unable to get BOS descriptor or descriptor too short
[  480.677831][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  480.682434][ T5883] usb 6-1: no configurations
[  480.697061][ T5883] usb 6-1: can't read configurations, error -22
[  480.720132][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  480.749571][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  480.782299][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  480.815779][ T5880] usb 4-1: string descriptor 0 read error: -22
[  480.836439][ T5880] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  481.037079][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.097226][ T5880] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  481.517714][ T5837] Bluetooth: hci5: unexpected event for opcode 0x0c1a
[  481.559823][T10305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.624573][T10305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.959044][T10343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.011119][T10343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.041633][ T5837] Bluetooth: hci1: link tx timeout
[  482.509050][ T5879] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  482.519174][ T9293] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  482.635631][ T5883] usb 4-1: USB disconnect, device number 18
[  482.779500][ T5879] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.869882][ T9293] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[  482.895555][ T9293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.093762][ T5879] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  483.162226][ T9293] usb 2-1: config 0 descriptor??
[  483.167475][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.201413][ T9293] pwc: Philips SPC 900NC USB webcam detected.
[  483.207839][ T5879] usb 1-1: Product: syz
[  483.253649][ T5879] usb 1-1: Manufacturer: syz
[  483.258356][ T5879] usb 1-1: SerialNumber: syz
[  483.321300][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'.
[  483.350712][T10366] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1207'.
[  483.360665][T10366] FAULT_INJECTION: forcing a failure.
[  483.360665][T10366] name failslab, interval 1, probability 0, space 0, times 0
[  483.374960][T10366] CPU: 0 UID: 0 PID: 10366 Comm: syz.3.1207 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  483.385801][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  483.395993][T10366] Call Trace:
[  483.399315][T10366]  <TASK>
[  483.402288][T10366]  dump_stack_lvl+0x241/0x360
[  483.407026][T10366]  ? __pfx_dump_stack_lvl+0x10/0x10
[  483.412377][T10366]  ? __pfx__printk+0x10/0x10
[  483.417037][T10366]  ? ref_tracker_alloc+0x332/0x490
[  483.422207][T10366]  should_fail_ex+0x3b0/0x4e0
[  483.427043][T10366]  should_failslab+0xac/0x100
[  483.431795][T10366]  ? skb_clone+0x20c/0x390
[  483.436275][T10366]  kmem_cache_alloc_noprof+0x70/0x380
[  483.441803][T10366]  skb_clone+0x20c/0x390
[  483.446109][T10366]  __netlink_deliver_tap+0x3cc/0x7f0
[  483.451464][T10366]  ? netlink_deliver_tap+0x2e/0x1b0
[  483.456812][T10366]  netlink_deliver_tap+0x19d/0x1b0
[  483.462073][T10366]  netlink_sendskb+0x68/0x140
[  483.466826][T10366]  netlink_unicast+0x39d/0x990
[  483.471754][T10366]  ? __pfx_netlink_unicast+0x10/0x10
[  483.477120][T10366]  netlink_rcv_skb+0x262/0x430
[  483.482025][T10366]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  483.487604][T10366]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  483.492950][T10366]  xfrm_netlink_rcv+0x79/0x90
[  483.497663][T10366]  netlink_unicast+0x7f6/0x990
[  483.502464][T10366]  ? __pfx_netlink_unicast+0x10/0x10
[  483.507861][T10366]  ? __virt_addr_valid+0x45f/0x530
[  483.513089][T10366]  ? __phys_addr_symbol+0x2f/0x70
[  483.518137][T10366]  ? __check_object_size+0x47a/0x730
[  483.523455][T10366]  netlink_sendmsg+0x8e4/0xcb0
[  483.528250][T10366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  483.533581][T10366]  ? __pfx_netlink_sendmsg+0x10/0x10
[  483.538880][T10366]  __sock_sendmsg+0x221/0x270
[  483.543593][T10366]  ____sys_sendmsg+0x52a/0x7e0
[  483.548389][T10366]  ? __pfx_____sys_sendmsg+0x10/0x10
[  483.553697][T10366]  ? __fget_files+0x2a/0x410
[  483.558502][T10366]  ? __fget_files+0x2a/0x410
[  483.563317][T10366]  __sys_sendmsg+0x269/0x350
[  483.567940][T10366]  ? __pfx_lock_release+0x10/0x10
[  483.572988][T10366]  ? __pfx___sys_sendmsg+0x10/0x10
[  483.578232][T10366]  ? __pfx_vfs_write+0x10/0x10
[  483.583132][T10366]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  483.589501][T10366]  do_syscall_64+0xf3/0x230
[  483.594034][T10366]  ? clear_bhb_loop+0x35/0x90
[  483.598728][T10366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.604754][T10366] RIP: 0033:0x7ffbfa785d29
[  483.609188][T10366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  483.628901][T10366] RSP: 002b:00007ffbfb53e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  483.637345][T10366] RAX: ffffffffffffffda RBX: 00007ffbfa975fa0 RCX: 00007ffbfa785d29
[  483.645343][T10366] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004
[  483.653330][T10366] RBP: 00007ffbfb53e090 R08: 0000000000000000 R09: 0000000000000000
[  483.661316][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.669300][T10366] R13: 0000000000000000 R14: 00007ffbfa975fa0 R15: 00007ffebd233678
[  483.677301][T10366]  </TASK>
[  483.780114][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1202'.
[  483.804851][ T9293] pwc: Failed to set LED on/off time (-71)
[  483.829181][ T9293] pwc: send_video_command error -71
[  483.837136][ T9293] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  483.847582][ T9293] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  483.889509][ T9293] usb 2-1: USB disconnect, device number 22
[  484.134977][T10377] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  485.174362][ T5837] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  485.217415][ T5879] cdc_ncm 1-1:1.0: failed to get mac address
[  485.225976][ T5879] cdc_ncm 1-1:1.0: bind() failure
[  485.234632][ T5879] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  485.256593][ T5879] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  485.300169][ T5879] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  485.354997][ T5879] usb 1-1: USB disconnect, device number 20
[  485.370172][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  485.919389][ T9293] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  486.127289][ T9293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  486.719109][ T9293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  486.765849][ T9293] usb 2-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00
[  486.799319][ T9293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.850320][ T9293] usb 2-1: config 0 descriptor??
[  487.118028][T10416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1220'.
[  488.549522][T10429] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 10429 comm: syz.0.1223)
[  488.583350][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'.
[  488.627536][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  488.638945][   T30] kauditd_printk_skb: 73 callbacks suppressed
[  488.638967][   T30] audit: type=1800 audit(1736607742.622:163): pid=10429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1223" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=32458 res=0 errno=0
[  488.639062][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  488.676808][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  488.684188][ T9293] usbhid 2-1:0.0: can't add hid device: -32
[  488.690951][ T9293] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  488.783378][ T9293] usb 2-1: USB disconnect, device number 23
[  489.472790][ T5837] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  489.965282][T10448] lo speed is unknown, defaulting to 1000
[  490.299069][ T5879] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  490.512906][ T5879] usb 2-1: unable to get BOS descriptor or descriptor too short
[  490.900752][ T5837] Bluetooth: hci4: unexpected event for opcode 0x0428
[  491.328061][ T5879] usb 2-1: no configurations
[  491.354987][ T5879] usb 2-1: can't read configurations, error -22
[  491.418976][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1235'.
[  491.782588][T10472] block device autoloading is deprecated and will be removed.
[  491.805770][T10472] bio_check_eod: 2 callbacks suppressed
[  491.806004][T10472] syz.0.1234: attempt to access beyond end of device
[  491.806004][T10472] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  492.403177][T10481] netlink: 'syz.3.1237': attribute type 3 has an invalid length.
[  492.455378][T10480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1238'.
[  492.695748][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  492.748956][ T5880] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  492.752084][T10480] kvm: pic: non byte write
[  492.913003][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0
[  492.930459][T10488] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer.
[  492.954132][ T5880] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  492.980134][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.305657][ T5880] usb 4-1: config 0 descriptor??
[  493.331705][ T5837] Bluetooth: hci1: link tx timeout
[  493.796523][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.819309][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.812823][ T5880] video4linux radio48: keene_cmd_main failed (-110)
[  494.820929][ T5880] radio-keene 4-1:0.0: V4L2 device registered as radio48
[  495.635871][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1244'.
[  496.341483][ T5837] Bluetooth: hci1: unexpected event for opcode 0x0428
[  496.571313][T10516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1248'.
[  496.613206][ T5880] usb 4-1: USB disconnect, device number 19
[  496.675784][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'.
[  497.219645][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  498.084853][T10540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1253'.
[  499.164005][ T5837] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  499.738098][ T5837] Bluetooth: hci3: unexpected event for opcode 0x0428
[  500.481173][T10558] netlink: 'syz.1.1258': attribute type 1 has an invalid length.
[  500.819110][ T5880] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  501.119370][ T5880] usb 2-1: Using ep0 maxpacket: 16
[  501.134830][ T5880] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00
[  501.149235][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.162252][ T5880] usb 2-1: Product: syz
[  501.166987][ T5880] usb 2-1: Manufacturer: syz
[  501.204439][ T5880] usb 2-1: SerialNumber: syz
[  501.581097][ T5880] usb 2-1: config 0 descriptor??
[  501.601519][ T5880] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  501.613398][ T5880] usb 2-1: Detected FT4233HP
[  501.809825][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  501.816553][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  502.159175][ T5879] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  502.815002][ T5879] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  502.826107][ T5879] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  502.844018][ T5879] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  502.861539][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.873789][ T5879] usb 1-1: Product: syz
[  502.878129][ T5879] usb 1-1: Manufacturer: syz
[  502.885563][ T5879] usb 1-1: SerialNumber: syz
[  502.898400][ T5879] usb 1-1: config 0 descriptor??
[  502.907749][T10574] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  502.939779][T10574] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  503.165220][T10574] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  503.174845][T10574] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  503.593935][T10574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.604139][ T5879] Error reading MAC address
[  503.657075][T10574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.971495][T10591] trusted_key: encrypted_key: keylen parameter is missing
[  504.651008][ T5842] Bluetooth: hci5: unexpected event for opcode 0x0428
[  504.683294][ T5880] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  504.839113][ T5880] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  504.906165][T10589] 8021q: adding VLAN 0 to HW filter on device bond1
[  504.914889][T10589] team0: Port device bond1 added
[  505.034652][ T5880] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  505.067148][ T5880] usb 2-1: USB disconnect, device number 26
[  505.075779][ T5880] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  505.085868][ T5880] ftdi_sio 2-1:0.0: device disconnected
[  505.505507][ T5842] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  506.701118][T10612] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1273'.
[  507.449315][    T9] usb 1-1: USB disconnect, device number 21
[  508.771779][    C0] vcan0: j1939_tp_rxtimer: 0xffff888022a98c00: rx timeout, send abort
[  508.780808][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022a98c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  508.868586][ T5883] usb 1-1: new low-speed USB device number 22 using dummy_hcd
[  508.958950][T10640] trusted_key: encrypted_key: keylen parameter is missing
[  509.054499][T10638] 8021q: adding VLAN 0 to HW filter on device bond6
[  509.072731][T10638] team0: Port device bond6 added
[  509.127282][ T5883] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  509.137412][ T5883] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  509.590023][ T5883] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  509.614176][ T5883] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  509.627791][ T5883] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  509.728908][ T5883] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  509.736424][ T5883] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  509.746859][ T5883] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  509.756899][ T5883] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  509.768343][ T5883] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  509.876683][ T5883] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  509.884422][ T5883] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  509.894627][ T5883] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  509.904729][ T5883] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  509.916093][ T5883] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  510.063860][ T5883] usb 1-1: string descriptor 0 read error: -22
[  510.070437][ T5883] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  510.079627][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.089351][ T5842] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  510.103470][ T5883] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  510.238688][ T3075] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  510.351794][ T5842] Bluetooth: hci1: unexpected event for opcode 0x0c1a
[  510.360981][T10632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.399522][T10632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.422212][ T3075] usb 4-1: Using ep0 maxpacket: 32
[  510.449396][ T3075] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  510.457606][ T3075] usb 4-1: config 0 has no interface number 0
[  510.525219][ T3075] usb 4-1: config 0 interface 12 has no altsetting 0
[  510.645060][ T3075] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  510.743083][ T3075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.793476][ T3075] usb 4-1: Product: syz
[  510.921696][ T3075] usb 4-1: Manufacturer: syz
[  511.004196][ T3075] usb 4-1: SerialNumber: syz
[  511.005021][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.040085][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.135885][ T3075] usb 4-1: config 0 descriptor??
[  511.319746][T10660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.328769][T10660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.352913][T10660] netlink: 'syz.1.1286': attribute type 7 has an invalid length.
[  511.374307][T10660] netlink: 'syz.1.1286': attribute type 6 has an invalid length.
[  511.669132][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  511.791363][ T5883] usb 1-1: USB disconnect, device number 22
[  511.829296][    T9] usb 2-1: Using ep0 maxpacket: 32
[  511.839553][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  511.860342][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  511.894899][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  511.912406][T10670] netlink: 'syz.2.1289': attribute type 10 has an invalid length.
[  511.922645][    T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  511.941170][T10670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1289'.
[  511.955363][    T9] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  511.977014][    T9] usb 2-1: config 1 interface 1 has no altsetting 0
[  511.987783][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  512.007040][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.061557][    T9] usb 2-1: Product: syz
[  512.068237][T10670] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  512.078913][    T9] usb 2-1: Manufacturer: syz
[  512.083585][    T9] usb 2-1: SerialNumber: syz
[  512.093072][    T9] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[  512.101392][T10670] team0: Failed to send options change via netlink (err -105)
[  512.109828][    T9] cdc_ncm 2-1:1.0: bind() failure
[  512.118267][T10670] team0: Port device geneve0 added
[  512.201204][ T5932] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.467348][    T9] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  512.677696][    T9] usb 2-1: USB disconnect, device number 27
[  512.678765][ T5932] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.067727][ T3075] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  513.075988][ T3075] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  513.083932][ T3075] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  513.092056][ T3075] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  513.104972][ T3075] usb 4-1: USB disconnect, device number 20
[  513.120710][ T5932] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.462360][ T5932] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.639109][T10685] trusted_key: encrypted_key: keylen parameter is missing
[  513.856120][T10684] 8021q: adding VLAN 0 to HW filter on device bond2
[  513.872143][T10684] team0: Port device bond2 added
[  515.459427][T10699] vivid-000: kernel_thread() failed
[  515.648647][T10696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1296'.
[  516.214796][ T5932] bridge_slave_1: left allmulticast mode
[  516.221378][ T5932] bridge_slave_1: left promiscuous mode
[  516.759896][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.362578][ T5842] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  517.461630][ T5932] bridge_slave_0: left allmulticast mode
[  517.472324][ T5932] bridge_slave_0: left promiscuous mode
[  517.479211][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.916082][T10721] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1302'.
[  517.971497][T10721] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1302'.
[  519.804985][T10738] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003
[  519.983484][T10743] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  520.295814][T10749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1308'.
[  520.384884][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  520.447493][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  520.506146][ T5932] bond0 (unregistering): Released all slaves
[  520.615736][ T5932] bond1 (unregistering): Released all slaves
[  520.695778][ T5932] bond2 (unregistering): Released all slaves
[  521.364575][T10757] team_slave_0: entered promiscuous mode
[  521.371130][T10757] team_slave_1: entered promiscuous mode
[  522.352525][ T5932] hsr_slave_0: left promiscuous mode
[  522.403010][ T5932] hsr_slave_1: left promiscuous mode
[  522.418779][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  522.426330][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0
[  522.444948][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  522.457954][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  522.485209][T10765] netlink: 1264 bytes leftover after parsing attributes in process `syz.5.1313'.
[  522.495461][ T5882] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  522.637092][ T5932] veth1_macvtap: left promiscuous mode
[  523.112483][ T5882] usb 4-1: Using ep0 maxpacket: 16
[  523.120221][ T5882] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.132168][ T5882] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.146566][ T5882] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  523.197012][ T5882] usb 4-1: config 0 interface 0 has no altsetting 0
[  523.224813][ T5882] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  523.225375][ T5932] veth0_macvtap: left promiscuous mode
[  523.270007][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.337616][ T5882] usb 4-1: config 0 descriptor??
[  523.369924][ T5932] veth1_vlan: left promiscuous mode
[  523.406116][ T5932] veth0_vlan: left promiscuous mode
[  523.933503][T10785] FAULT_INJECTION: forcing a failure.
[  523.933503][T10785] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  523.956979][T10785] CPU: 0 UID: 0 PID: 10785 Comm: syz.1.1318 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  523.967857][T10785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  523.977971][T10785] Call Trace:
[  523.981287][T10785]  <TASK>
[  523.984313][T10785]  dump_stack_lvl+0x241/0x360
[  523.989007][T10785]  ? __pfx_dump_stack_lvl+0x10/0x10
[  523.994336][T10785]  ? __pfx__printk+0x10/0x10
[  523.998976][T10785]  ? console_unlock+0x2fc/0x3b0
[  524.003864][T10785]  should_fail_ex+0x3b0/0x4e0
[  524.008577][T10785]  _copy_to_user+0x31/0xb0
[  524.013026][T10785]  vcs_read+0xa8e/0xe20
[  524.017239][T10785]  ? __pfx_vcs_read+0x10/0x10
[  524.021957][T10785]  vfs_read+0x1fc/0xb70
[  524.026127][T10785]  ? __pfx_vfs_read+0x10/0x10
[  524.030879][T10785]  ? __fget_files+0x2a/0x410
[  524.035496][T10785]  ? __fget_files+0x395/0x410
[  524.040446][T10785]  ? __fget_files+0x2a/0x410
[  524.045072][T10785]  ksys_read+0x18f/0x2b0
[  524.049439][T10785]  ? __pfx_ksys_read+0x10/0x10
[  524.054224][T10785]  ? do_syscall_64+0x100/0x230
[  524.059109][T10785]  ? do_syscall_64+0xb6/0x230
[  524.063890][T10785]  do_syscall_64+0xf3/0x230
[  524.068404][T10785]  ? clear_bhb_loop+0x35/0x90
[  524.073116][T10785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.079039][T10785] RIP: 0033:0x7fb387f85d29
[  524.083562][T10785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  524.103201][T10785] RSP: 002b:00007fb388ddc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  524.111754][T10785] RAX: ffffffffffffffda RBX: 00007fb388175fa0 RCX: 00007fb387f85d29
[  524.119749][T10785] RDX: 0000000000002020 RSI: 0000000020003c00 RDI: 0000000000000003
[  524.127735][T10785] RBP: 00007fb388ddc090 R08: 0000000000000000 R09: 0000000000000000
[  524.135728][T10785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  524.143707][T10785] R13: 0000000000000000 R14: 00007fb388175fa0 R15: 00007ffc61156ec8
[  524.151803][T10785]  </TASK>
[  527.297337][ T5932] team0 (unregistering): Port device team_slave_1 removed
[  527.448169][ T5932] team0 (unregistering): Port device team_slave_0 removed
[  528.274541][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1322'.
[  528.846661][ T5882] usbhid 4-1:0.0: can't add hid device: -32
[  528.853428][ T5882] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  529.278396][ T5880] usb 4-1: USB disconnect, device number 21
[  529.785231][T10819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1324'.
[  530.066310][T10816] FAULT_INJECTION: forcing a failure.
[  530.066310][T10816] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  530.080150][T10816] CPU: 0 UID: 0 PID: 10816 Comm: syz.3.1325 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  530.091044][T10816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  530.101183][T10816] Call Trace:
[  530.104495][T10816]  <TASK>
[  530.107544][T10816]  dump_stack_lvl+0x241/0x360
[  530.112277][T10816]  ? __pfx_dump_stack_lvl+0x10/0x10
[  530.117516][T10816]  ? __pfx__printk+0x10/0x10
[  530.122146][T10816]  ? __pfx_lock_release+0x10/0x10
[  530.127216][T10816]  should_fail_ex+0x3b0/0x4e0
[  530.131964][T10816]  _copy_from_user+0x2f/0xc0
[  530.136636][T10816]  memdup_user+0x64/0xc0
[  530.141017][T10816]  strndup_user+0x68/0xc0
[  530.145404][T10816]  __se_sys_mount+0xe2/0x3c0
[  530.150036][T10816]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  530.156065][T10816]  ? __pfx___se_sys_mount+0x10/0x10
[  530.161298][T10816]  ? do_syscall_64+0x100/0x230
[  530.166115][T10816]  ? __x64_sys_mount+0x20/0xc0
[  530.170924][T10816]  do_syscall_64+0xf3/0x230
[  530.175740][T10816]  ? clear_bhb_loop+0x35/0x90
[  530.180478][T10816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.186507][T10816] RIP: 0033:0x7ffbfa785d29
[  530.190960][T10816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  530.210612][T10816] RSP: 002b:00007ffbfb53e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  530.219074][T10816] RAX: ffffffffffffffda RBX: 00007ffbfa975fa0 RCX: 00007ffbfa785d29
[  530.227076][T10816] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000020000180
[  530.235082][T10816] RBP: 00007ffbfb53e090 R08: 0000000000000000 R09: 0000000000000000
[  530.243095][T10816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  530.251100][T10816] R13: 0000000000000000 R14: 00007ffbfa975fa0 R15: 00007ffebd233678
[  530.259126][T10816]  </TASK>
[  530.266531][ T5879] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  530.504570][ T5879] usb 2-1: unable to get BOS descriptor or descriptor too short
[  530.531113][ T5879] usb 2-1: config 1 interface 0 has no altsetting 0
[  530.571250][ T5879] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40
[  530.587875][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.614397][ T5879] usb 2-1: Product: syz
[  530.619320][ T5879] usb 2-1: Manufacturer: syz
[  530.623951][ T5879] usb 2-1: SerialNumber: syz
[  530.737066][ T5932] IPVS: stop unused estimator thread 0...
[  530.743942][ T5880] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  531.410675][T10817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1324'.
[  531.420560][ T5880] usb 6-1: Using ep0 maxpacket: 32
[  531.431881][ T5880] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  531.472733][ T5880] usb 6-1: config 0 has no interface number 0
[  531.510011][ T5880] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  531.526675][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.535617][ T5880] usb 6-1: Product: syz
[  531.543544][ T5880] usb 6-1: Manufacturer: syz
[  531.550566][ T5880] usb 6-1: SerialNumber: syz
[  531.580562][ T5880] usb 6-1: config 0 descriptor??
[  531.609934][ T5880] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  531.640937][ T5879] usbhid 2-1:1.0: can't add hid device: -71
[  531.647035][ T5879] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  531.767392][ T5879] usb 2-1: USB disconnect, device number 28
[  532.468313][T10843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.574602][T10843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.617454][T10841] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  533.402183][ T5882] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  533.475450][T10849] syz.0.1333: attempt to access beyond end of device
[  533.475450][T10849] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  533.686609][ T5882] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  533.696351][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  533.709114][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  533.724291][ T5882] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  533.759978][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.768347][ T5882] usb 3-1: Product: 텓燠庑邔呢裣썮閿麗籡ጾ⍔ᦄ伓콵큪訾㎵鯮롘룳㜽躾搝짍㊴벫スᘃ㷘佳শꝟ꿍牋僔뉼躨屙姃㵒탲െᾝݐ☒쐽쥫悛눫ꇧ劰笎ᛈ₺襪싏⯩൥腷扅숾輏픁荚
[  533.947908][ T5882] usb 3-1: Manufacturer: Ǔ⋦Ⲱ﭂ꊯ쩷깟掘똧༶琉⯬鐰ꑬ垯뇓㽺펷啒ᙋ椮슘䚀罪ధ簣୼힃⛳⧈껧紆㏏毯뾀넴䆶⳹Ḵ嚅唯䋩
[  533.968805][ T5882] usb 3-1: SerialNumber: 䄃❣蜘䒳䮢贲颜ꦪ禬㜄䩩흑쬰砎䆠콴炍ዞ跺䝸˻ۛ炛ț营쭚﹜촕튜丼论盪몲觕皋䱹鸳繤鹩鯖㢕ᶅ쿿茏삄칶悛
[  533.990736][ T5880] usb 6-1: qt2_attach - failed to power on unit: -71
[  534.028036][ T5880] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71
[  534.076681][ T5880] usb 6-1: USB disconnect, device number 11
[  534.407324][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1336'.
[  534.596303][ T5882] usb 3-1: 0:2 : does not exist
[  534.735791][ T5882] usb 3-1: USB disconnect, device number 27
[  535.323397][T10865] FAULT_INJECTION: forcing a failure.
[  535.323397][T10865] name failslab, interval 1, probability 0, space 0, times 0
[  535.338829][T10865] CPU: 1 UID: 0 PID: 10865 Comm: syz.5.1338 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  535.349672][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  535.359764][T10865] Call Trace:
[  535.363052][T10865]  <TASK>
[  535.366002][T10865]  dump_stack_lvl+0x241/0x360
[  535.370715][T10865]  ? __pfx_dump_stack_lvl+0x10/0x10
[  535.375946][T10865]  ? __pfx__printk+0x10/0x10
[  535.380570][T10865]  ? fs_reclaim_acquire+0x93/0x130
[  535.385741][T10865]  ? __pfx___might_resched+0x10/0x10
[  535.391070][T10865]  should_fail_ex+0x3b0/0x4e0
[  535.395773][T10865]  should_failslab+0xac/0x100
[  535.400492][T10865]  __kmalloc_noprof+0xdd/0x4c0
[  535.405371][T10865]  ? tomoyo_encode+0x26f/0x540
[  535.410162][T10865]  tomoyo_encode+0x26f/0x540
[  535.414795][T10865]  tomoyo_mount_permission+0x359/0xb80
[  535.420379][T10865]  ? stack_depot_save_flags+0x37/0x940
[  535.425860][T10865]  ? tomoyo_mount_permission+0x298/0xb80
[  535.431516][T10865]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  535.437909][T10865]  ? hook_sb_mount+0x10b/0x420
[  535.442794][T10865]  ? security_sb_mount+0x22/0x2f0
[  535.447877][T10865]  security_sb_mount+0xe0/0x2f0
[  535.452764][T10865]  path_mount+0xb9/0xfa0
[  535.457035][T10865]  ? kmem_cache_free+0x195/0x410
[  535.461991][T10865]  ? user_path_at+0x44/0x60
[  535.466520][T10865]  __se_sys_mount+0x2d6/0x3c0
[  535.471316][T10865]  ? __pfx___se_sys_mount+0x10/0x10
[  535.476534][T10865]  ? do_syscall_64+0x100/0x230
[  535.481336][T10865]  ? __x64_sys_mount+0x20/0xc0
[  535.486165][T10865]  do_syscall_64+0xf3/0x230
[  535.490697][T10865]  ? clear_bhb_loop+0x35/0x90
[  535.495436][T10865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.501356][T10865] RIP: 0033:0x7f2d8a985d29
[  535.505784][T10865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  535.525414][T10865] RSP: 002b:00007f2d887f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  535.533850][T10865] RAX: ffffffffffffffda RBX: 00007f2d8ab75fa0 RCX: 00007f2d8a985d29
[  535.541834][T10865] RDX: 0000000020000080 RSI: 0000000020000300 RDI: 0000000000000000
[  535.549820][T10865] RBP: 00007f2d887f6090 R08: 0000000020000000 R09: 0000000000000000
[  535.557805][T10865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.565788][T10865] R13: 0000000000000000 R14: 00007f2d8ab75fa0 R15: 00007ffeb8e10f58
[  535.573879][T10865]  </TASK>
[  535.909149][T10873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1340'.
[  535.928917][T10873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1340'.
[  536.875528][ T5842] Bluetooth: hci1: link tx timeout
[  536.881634][ T5842] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  536.907902][T10886] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  536.976278][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1344'.
[  536.986759][T10883] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1344'.
[  537.380539][ T5842] Bluetooth: hci4: unexpected event for opcode 0x0c1a
[  537.462163][T10902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.561245][T10902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.629011][ T3075] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  537.829433][ T5880] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  537.838866][ T3075] usb 3-1: Using ep0 maxpacket: 32
[  537.848121][ T3075] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  537.857698][ T3075] usb 3-1: config 0 has no interface number 0
[  537.872417][ T3075] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  537.882915][ T3075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.891282][ T3075] usb 3-1: Product: syz
[  537.895602][ T3075] usb 3-1: Manufacturer: syz
[  537.900329][ T3075] usb 3-1: SerialNumber: syz
[  537.909051][ T3075] usb 3-1: config 0 descriptor??
[  537.921891][ T3075] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  537.990398][ T5880] usb 6-1: Using ep0 maxpacket: 32
[  538.011018][ T5880] usb 6-1: config 0 has an invalid interface number: 9 but max is 0
[  538.026446][ T5880] usb 6-1: config 0 has no interface number 0
[  538.046823][ T5880] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  538.056821][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.073899][ T5880] usb 6-1: Product: syz
[  538.081358][ T5880] usb 6-1: Manufacturer: syz
[  538.086157][ T5880] usb 6-1: SerialNumber: syz
[  538.100363][ T5880] usb 6-1: config 0 descriptor??
[  538.112907][ T5880] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  538.959427][ T5842] Bluetooth: hci1: command 0x0406 tx timeout
[  539.136810][T10912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.204279][T10912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.390046][ T5880] gspca_topro: reg_r err -32
[  539.394719][ T5880] gspca_topro: Sensor soi763a
[  539.568837][ T5880] usb 6-1: USB disconnect, device number 12
[  540.232218][ T3075] usb 3-1: qt2_attach - failed to power on unit: -71
[  540.255947][ T3075] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71
[  540.329026][ T3075] usb 3-1: USB disconnect, device number 28
[  542.272164][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1368'.
[  542.837908][ T5837] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  542.910105][ T5879] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  542.983724][T10975] xt_CT: No such helper "netbios-ns"
[  543.055077][T10984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1374'.
[  543.092768][ T5879] usb 6-1: Using ep0 maxpacket: 32
[  543.116125][T10984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1374'.
[  543.135741][ T5879] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  543.162092][ T5879] usb 6-1: config 0 has no interface number 0
[  543.172723][T10984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1374'.
[  543.201812][ T5879] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  543.234093][T10984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1374'.
[  543.245807][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.287206][ T5879] usb 6-1: Product: syz
[  543.314995][ T5879] usb 6-1: Manufacturer: syz
[  543.340087][ T5879] usb 6-1: SerialNumber: syz
[  543.376763][ T5879] usb 6-1: config 0 descriptor??
[  543.404028][ T5879] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  543.684568][T10969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.694153][T10969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.291292][T10998] input: syz1 as /devices/virtual/input/input16
[  544.396895][ T5879] usb 6-1: qt2_attach - failed to power on unit: -71
[  544.419001][ T5879] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71
[  544.542332][ T5879] usb 6-1: USB disconnect, device number 13
[  546.042877][T11021] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  546.183155][T11016] openvswitch: netlink: Actions may not be safe on all matching packets
[  547.495866][T11038] netlink: 'syz.0.1390': attribute type 10 has an invalid length.
[  547.670008][T11038] team0: Port device netdevsim0 added
[  547.741952][T11050] syz.3.1396: attempt to access beyond end of device
[  547.741952][T11050] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  548.424846][T11053] overlayfs: failed to get inode (-116)
[  548.443155][T11053] overlayfs: failed to get inode (-116)
[  548.455374][T11053] overlayfs: failed to get inode (-116)
[  548.467689][T11053] overlayfs: failed to get inode (-116)
[  548.479557][T11053] overlayfs: failed to look up (file0) for ino (-116)
[  550.297020][T11061] syz.1.1400: attempt to access beyond end of device
[  550.297020][T11061] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  550.609062][ T5880] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  550.758629][ T5880] usb 3-1: Using ep0 maxpacket: 8
[  550.816711][ T5880] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  550.825918][ T5880] usb 3-1: config 0 has no interface number 0
[  550.832939][ T5880] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  550.844714][ T5880] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  550.857037][ T5880] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  550.868638][ T5880] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  550.882445][ T5880] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  550.892159][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.902844][ T5880] usb 3-1: config 0 descriptor??
[  550.933834][ T5880] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  550.999122][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1408'.
[  551.031236][T11089] syz.3.1409: attempt to access beyond end of device
[  551.031236][T11089] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  551.060213][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1408'.
[  551.314524][ T5880] usb 3-1: USB disconnect, device number 29
[  551.322869][ T5880] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  551.781027][T11099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1412'.
[  552.648202][T11117] NILFS (nullb0): couldn't find nilfs on the device
[  553.948728][ T3075] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  554.588640][ T3075] usb 2-1: Using ep0 maxpacket: 16
[  554.604319][ T3075] usb 2-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.633331][ T3075] usb 2-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.667255][ T3075] usb 2-1: config 0 interface 0 has no altsetting 0
[  554.690260][ T3075] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  554.933122][ T3075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.950904][ T3075] usb 2-1: config 0 descriptor??
[  555.694979][T11129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.792805][T11129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.986629][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'.
[  556.009891][ T3075] razer 0003:1532:010D.000C: item fetching failed at offset 4/6
[  556.018162][ T3075] razer 0003:1532:010D.000C: probe with driver razer failed with error -22
[  556.025524][T11158] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1427'.
[  556.206682][ T5882] usb 2-1: USB disconnect, device number 29
[  557.486959][T11160] syz.2.1429 (11160): drop_caches: 2
[  557.952213][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  558.546629][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'.
[  559.501214][T11194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1441'.
[  561.799163][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1451'.
[  561.828210][T11222] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1451'.
[  561.858784][ T3075] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  562.029223][ T3075] usb 4-1: Using ep0 maxpacket: 16
[  562.055372][ T3075] usb 4-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  562.269011][ T3075] usb 4-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0
[  562.298538][ T3075] usb 4-1: config 0 interface 0 has no altsetting 0
[  562.305237][ T3075] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  562.317788][ T3075] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.346710][ T3075] usb 4-1: config 0 descriptor??
[  562.616018][T11214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.677620][T11214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.659345][ T3075] razer 0003:1532:010D.000D: item fetching failed at offset 4/6
[  563.667410][ T3075] razer 0003:1532:010D.000D: probe with driver razer failed with error -22
[  563.692231][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  563.743980][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  563.976950][ T5837] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  564.387233][ T5879] usb 4-1: USB disconnect, device number 22
[  564.662838][T11247] syz.2.1458: attempt to access beyond end of device
[  564.662838][T11247] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  565.362812][   T30] audit: type=1326 audit(1736611914.356:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11251 comm="syz.0.1462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x0
[  565.383870][    C0] vkms_vblank_simulate: vblank timer overrun
[  566.288797][T11267] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1468'.
[  566.297823][T11267] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1468'.
[  566.360996][T11267] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1468'.
[  566.429691][T11275] delete_channel: no stack
[  567.615063][T11267] lo speed is unknown, defaulting to 1000
[  567.867598][T11284] delete_channel: no stack
[  569.188615][ T3075] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[  569.368919][ T3075] usb 3-1: device descriptor read/64, error -71
[  569.619471][ T3075] usb 3-1: new low-speed USB device number 31 using dummy_hcd
[  569.675856][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'.
[  569.741800][T11303] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  569.928366][ T3075] usb 3-1: device descriptor read/64, error -71
[  569.988737][T11314] FAULT_INJECTION: forcing a failure.
[  569.988737][T11314] name failslab, interval 1, probability 0, space 0, times 0
[  570.001481][T11314] CPU: 1 UID: 0 PID: 11314 Comm: syz.3.1477 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  570.012330][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  570.022473][T11314] Call Trace:
[  570.025797][T11314]  <TASK>
[  570.028772][T11314]  dump_stack_lvl+0x241/0x360
[  570.033532][T11314]  ? __pfx_dump_stack_lvl+0x10/0x10
[  570.038792][T11314]  ? __pfx__printk+0x10/0x10
[  570.043467][T11314]  ? __kmalloc_noprof+0xb5/0x4c0
[  570.048451][T11314]  ? __pfx___might_resched+0x10/0x10
[  570.053808][T11314]  should_fail_ex+0x3b0/0x4e0
[  570.058549][T11314]  should_failslab+0xac/0x100
[  570.063330][T11314]  __kmalloc_noprof+0xdd/0x4c0
[  570.068161][T11314]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  570.074478][T11314]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  570.080615][T11314]  genl_rcv_msg+0x802/0xec0
[  570.085190][T11314]  ? __pfx_genl_rcv_msg+0x10/0x10
[  570.090300][T11314]  ? __pfx_lock_acquire+0x10/0x10
[  570.095382][T11314]  ? __pfx_tipc_nl_media_set+0x10/0x10
[  570.100867][T11314]  ? __pfx___might_resched+0x10/0x10
[  570.106278][T11314]  netlink_rcv_skb+0x1e3/0x430
[  570.111060][T11314]  ? __pfx_genl_rcv_msg+0x10/0x10
[  570.116121][T11314]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  570.121435][T11314]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  570.126934][T11314]  genl_rcv+0x28/0x40
[  570.130938][T11314]  netlink_unicast+0x7f6/0x990
[  570.135730][T11314]  ? __pfx_netlink_unicast+0x10/0x10
[  570.141040][T11314]  ? __virt_addr_valid+0x45f/0x530
[  570.146176][T11314]  ? __phys_addr_symbol+0x2f/0x70
[  570.151219][T11314]  ? __check_object_size+0x47a/0x730
[  570.156549][T11314]  netlink_sendmsg+0x8e4/0xcb0
[  570.161339][T11314]  ? __pfx_netlink_sendmsg+0x10/0x10
[  570.166647][T11314]  ? __pfx_netlink_sendmsg+0x10/0x10
[  570.171949][T11314]  __sock_sendmsg+0x221/0x270
[  570.176652][T11314]  ____sys_sendmsg+0x52a/0x7e0
[  570.181449][T11314]  ? __pfx_____sys_sendmsg+0x10/0x10
[  570.186751][T11314]  ? __fget_files+0x2a/0x410
[  570.191360][T11314]  ? __fget_files+0x2a/0x410
[  570.195969][T11314]  __sys_sendmsg+0x269/0x350
[  570.200576][T11314]  ? __pfx_lock_release+0x10/0x10
[  570.205616][T11314]  ? __pfx___sys_sendmsg+0x10/0x10
[  570.210753][T11314]  ? __pfx_vfs_write+0x10/0x10
[  570.215558][T11314]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  570.221908][T11314]  ? do_syscall_64+0x100/0x230
[  570.226699][T11314]  ? do_syscall_64+0xb6/0x230
[  570.231406][T11314]  do_syscall_64+0xf3/0x230
[  570.235934][T11314]  ? clear_bhb_loop+0x35/0x90
[  570.240820][T11314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.246740][T11314] RIP: 0033:0x7ffbfa785d29
[  570.251187][T11314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  570.270904][T11314] RSP: 002b:00007ffbfb51d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  570.279358][T11314] RAX: ffffffffffffffda RBX: 00007ffbfa976080 RCX: 00007ffbfa785d29
[  570.287448][T11314] RDX: 0000000000020000 RSI: 0000000020004cc0 RDI: 0000000000000009
[  570.295448][T11314] RBP: 00007ffbfb51d090 R08: 0000000000000000 R09: 0000000000000000
[  570.303440][T11314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  570.311431][T11314] R13: 0000000000000000 R14: 00007ffbfa976080 R15: 00007ffebd233678
[  570.319433][T11314]  </TASK>
[  570.328977][ T3075] usb usb3-port1: attempt power cycle
[  570.678890][ T3075] usb 3-1: new low-speed USB device number 32 using dummy_hcd
[  570.722581][ T3075] usb 3-1: device descriptor read/8, error -71
[  571.218585][ T3075] usb 3-1: new low-speed USB device number 33 using dummy_hcd
[  572.564370][ T3075] usb 3-1: device not accepting address 33, error -71
[  573.287542][ T3075] usb usb3-port1: unable to enumerate USB device
[  574.639560][ T5880] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  574.760596][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1489'.
[  575.679533][ T5880] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  575.689327][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.706575][ T5880] usb 2-1: config 0 descriptor??
[  575.716869][ T5880] cp210x 2-1:0.0: cp210x converter detected
[  576.154132][ T5880] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  577.626613][T11384] Option 'TX��Ʈ�' to dns_resolver key: bad/missing value
[  578.215601][ T5880] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71
[  578.252712][ T5880] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  578.340197][ T5880] usb 2-1: cp210x converter now attached to ttyUSB0
[  578.350961][ T5880] usb 2-1: USB disconnect, device number 30
[  578.362097][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  578.382437][ T5880] cp210x 2-1:0.0: device disconnected
[  578.398683][T11392] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003
[  578.890337][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  578.903038][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  578.913940][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  578.923098][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  578.934581][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  578.944397][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  578.977932][T11399] lo speed is unknown, defaulting to 1000
[  579.252320][T11406] syz.3.1502: attempt to access beyond end of device
[  579.252320][T11406] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  581.106223][ T5842] Bluetooth: hci2: command tx timeout
[  581.385238][ T5881] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0
[  581.393441][ T5881] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0
[  581.410042][ T5881] hid-generic 0000:0003:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  581.439964][T11399] chnl_net:caif_netlink_parms(): no params data found
[  581.475699][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'.
[  581.615733][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'.
[  581.953543][T11439] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003
[  582.911899][ T1096] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.963374][T11399] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.984268][T11399] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.992281][T11399] bridge_slave_0: entered allmulticast mode
[  583.005243][T11399] bridge_slave_0: entered promiscuous mode
[  583.014143][T11399] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.022889][T11399] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.037674][T11399] bridge_slave_1: entered allmulticast mode
[  583.046326][T11399] bridge_slave_1: entered promiscuous mode
[  583.170637][ T5842] Bluetooth: hci2: command tx timeout
[  583.178632][ T5881] usb 2-1: new low-speed USB device number 31 using dummy_hcd
[  583.328687][ T5881] usb 2-1: device descriptor read/64, error -71
[  583.472197][ T1096] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.618851][ T5881] usb 2-1: new low-speed USB device number 32 using dummy_hcd
[  583.758909][ T5881] usb 2-1: device descriptor read/64, error -71
[  583.848343][T11456] overlayfs: conflicting lowerdir path
[  583.888920][ T5881] usb usb2-port1: attempt power cycle
[  583.896009][ T1096] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  583.999064][T11399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.115439][T11461] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1516'.
[  584.292036][ T5881] usb 2-1: new low-speed USB device number 33 using dummy_hcd
[  584.916470][ T1096] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  584.937890][ T5881] usb 2-1: device descriptor read/8, error -71
[  584.974938][T11399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  585.139342][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'.
[  585.249700][ T5842] Bluetooth: hci2: command tx timeout
[  586.355766][T11470] netlink: 'syz.2.1520': attribute type 1 has an invalid length.
[  586.359110][T11399] team0: Port device team_slave_0 added
[  586.363809][T11470] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1520'.
[  586.542970][T11399] team0: Port device team_slave_1 added
[  586.640850][T11399] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.674636][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.715393][T11399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.796348][T11399] batman_adv: batadv0: Adding interface: batadv_slave_1
[  586.846985][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  587.409525][ T5842] Bluetooth: hci2: command tx timeout
[  587.443437][T11399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  587.541363][ T5842] Bluetooth: hci4: Malformed Event: 0x13
[  587.695200][T11499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1528'.
[  588.471252][T11497] syz.3.1527: attempt to access beyond end of device
[  588.471252][T11497] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  588.756302][ T1096] bridge_slave_1: left allmulticast mode
[  588.841992][T11498] Bluetooth: MGMT ver 1.23
[  588.851092][ T1096] bridge_slave_1: left promiscuous mode
[  588.902369][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.075514][ T1096] bridge_slave_0: left allmulticast mode
[  589.082730][ T1096] bridge_slave_0: left promiscuous mode
[  589.094542][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.807366][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  589.829938][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  589.844076][ T1096] bond0 (unregistering): Released all slaves
[  590.061920][ T1096] team0: Port device bond1 removed
[  590.070416][ T1096] bond1 (unregistering): Released all slaves
[  590.091026][T11399] hsr_slave_0: entered promiscuous mode
[  590.105354][T11399] hsr_slave_1: entered promiscuous mode
[  590.125564][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'.
[  590.138516][T11498] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1529'.
[  590.169618][ T1096] : left promiscuous mode
[  590.675190][T11520] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003
[  592.033844][T11528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1537'.
[  592.702304][T11533] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1539'.
[  593.567591][ T1096] hsr_slave_0: left promiscuous mode
[  593.584605][ T1096] hsr_slave_1: left promiscuous mode
[  593.679245][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  593.694783][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0
[  593.880379][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  593.916127][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1
[  594.238886][   T30] audit: type=1326 audit(1736611943.076:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11544 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa785d29 code=0x7ffc0000
[  594.260565][    C1] vkms_vblank_simulate: vblank timer overrun
[  594.272148][ T1096] veth1_macvtap: left promiscuous mode
[  594.476299][ T1096] veth0_macvtap: left promiscuous mode
[  594.880190][ T1096] veth1_vlan: left promiscuous mode
[  594.885960][ T1096] veth0_vlan: left promiscuous mode
[  594.915397][   T30] audit: type=1326 audit(1736611943.086:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11544 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa785d29 code=0x7ffc0000
[  595.035340][   T30] audit: type=1326 audit(1736611943.086:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11544 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbfa785d29 code=0x7ffc0000
[  595.079366][   T30] audit: type=1326 audit(1736611943.086:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11544 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa785d29 code=0x7ffc0000
[  595.109003][   T30] audit: type=1326 audit(1736611943.086:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11544 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa785d29 code=0x7ffc0000
[  595.152305][   T30] audit: type=1326 audit(1736611943.096:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11544 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffbfa785d29 code=0x7ffc0000
[  595.198968][   T30] audit: type=1326 audit(1736611943.096:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11544 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa785d29 code=0x7ffc0000
[  595.246919][   T30] audit: type=1326 audit(1736611943.096:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11544 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa785d29 code=0x7ffc0000
[  595.299210][   T30] audit: type=1326 audit(1736611943.096:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11544 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffbfa785d29 code=0x7ffc0000
[  595.342054][   T30] audit: type=1326 audit(1736611943.106:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11544 comm="syz.3.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbfa785d29 code=0x7ffc0000
[  596.115764][T11562] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003
[  596.802024][T11567] netlink: 'syz.2.1549': attribute type 9 has an invalid length.
[  596.892389][ T1096] team0 (unregistering): Port device team_slave_1 removed
[  596.922926][ T5842] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  596.965255][ T1096] team0 (unregistering): Port device team_slave_0 removed
[  598.631349][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'.
[  598.760199][ T3075] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  598.811951][T11399] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  598.842801][T11399] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  598.872523][T11399] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  598.914304][T11399] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  598.937803][ T3075] usb 2-1: Using ep0 maxpacket: 32
[  598.937814][T11584] overlayfs: conflicting lowerdir path
[  598.957409][ T3075] usb 2-1: config 0 has an invalid interface number: 76 but max is 0
[  598.975273][ T3075] usb 2-1: config 0 has no interface number 0
[  599.010735][ T3075] usb 2-1: config 0 interface 76 has no altsetting 0
[  599.027189][ T3075] usb 2-1: New USB device found, idVendor=0403, idProduct=eeeb, bcdDevice=92.d6
[  599.037403][ T3075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.089098][ T3075] usb 2-1: Product: syz
[  599.094145][ T3075] usb 2-1: Manufacturer: syz
[  599.104961][ T3075] usb 2-1: SerialNumber: syz
[  599.120507][ T3075] usb 2-1: config 0 descriptor??
[  599.140910][ T3075] ftdi_sio 2-1:0.76: FTDI USB Serial Device converter detected
[  599.159369][ T3075] ftdi_sio ttyUSB0: unknown device type: 0x92d6
[  599.176830][T11399] 8021q: adding VLAN 0 to HW filter on device bond0
[  599.264926][T11399] 8021q: adding VLAN 0 to HW filter on device team0
[  599.299510][   T30] kauditd_printk_skb: 50 callbacks suppressed
[  599.299541][   T30] audit: type=1326 audit(1736611948.296:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11585 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  599.334888][   T30] audit: type=1326 audit(1736611948.296:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11585 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  599.389409][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.396600][ T5945] bridge0: port 1(bridge_slave_0) entered forwarding state
[  599.440743][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.447984][ T5945] bridge0: port 2(bridge_slave_1) entered forwarding state
[  599.478215][ T5879] usb 2-1: USB disconnect, device number 35
[  599.493285][ T5879] ftdi_sio 2-1:0.76: device disconnected
[  599.524339][   T30] audit: type=1326 audit(1736611948.366:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11585 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  599.577706][ T1096] IPVS: stop unused estimator thread 0...
[  599.601542][   T30] audit: type=1326 audit(1736611948.366:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11585 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  599.632419][   T30] audit: type=1326 audit(1736611948.366:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11585 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  599.663131][   T30] audit: type=1326 audit(1736611948.366:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11585 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  599.759417][   T30] audit: type=1326 audit(1736611948.366:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11585 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  599.787024][T11598] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003
[  599.821919][   T30] audit: type=1326 audit(1736611948.406:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11585 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  599.849169][   T30] audit: type=1326 audit(1736611948.426:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11585 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  599.871558][   T30] audit: type=1326 audit(1736611948.506:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11585 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4093d85d29 code=0x7ffc0000
[  600.673946][T11399] 8021q: adding VLAN 0 to HW filter on device batadv0
[  600.902625][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'.
[  601.441982][T11606] 9pnet_fd: Insufficient options for proto=fd
[  602.516307][T11399] veth0_vlan: entered promiscuous mode
[  602.543150][T11399] veth1_vlan: entered promiscuous mode
[  602.662557][T11399] veth0_macvtap: entered promiscuous mode
[  602.671657][T11399] veth1_macvtap: entered promiscuous mode
[  602.686638][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  602.698118][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.708596][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  602.719141][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.729078][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  602.739751][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.752955][T11399] batman_adv: batadv0: Interface activated: batadv_slave_0
[  602.764896][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  602.775461][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.785820][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  602.796757][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.807609][T11399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  602.818512][T11399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.829643][T11399] batman_adv: batadv0: Interface activated: batadv_slave_1
[  602.854080][T11399] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  602.864347][T11399] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  602.883341][T11399] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  602.896264][T11646] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003
[  602.928715][T11399] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.034177][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.056779][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.100745][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'.
[  603.114221][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.128222][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.303282][ T5911] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  603.485359][ T5911] usb 3-1: config 0 has an invalid interface number: 11 but max is 0
[  603.499366][ T5911] usb 3-1: config 0 has no interface number 0
[  603.526911][ T5911] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=16.5f
[  603.546925][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.557092][ T5911] usb 3-1: Product: syz
[  603.565230][ T5911] usb 3-1: Manufacturer: syz
[  603.571964][ T5911] usb 3-1: SerialNumber: syz
[  603.599083][ T5911] usb 3-1: config 0 descriptor??
[  604.340034][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1579'.
[  604.400081][T11645] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1570'.
[  604.440860][T11645] netlink: 'syz.2.1570': attribute type 1 has an invalid length.
[  604.509438][T11645] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1570'.
[  604.600928][T11717] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20003
[  604.923733][ T5881] usb 3-1: USB disconnect, device number 34
[  606.990842][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1583'.
[  607.579922][ T5880] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0
[  607.587714][ T5880] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0
[  607.644103][ T5880] hid-generic 0000:0003:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  607.778775][ T5881] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  607.918785][ T5881] usb 7-1: device descriptor read/64, error -71
[  608.199355][ T5881] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  608.378677][ T5881] usb 7-1: device descriptor read/64, error -71
[  608.606528][ T5881] usb usb7-port1: attempt power cycle
[  609.388728][ T5881] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  609.419314][ T5881] usb 7-1: device descriptor read/8, error -71
[  609.451046][T11773] dlm: Unknown command passed to DLM device : 0
[  609.451046][T11773] 
[  609.503557][T11773] GUP no longer grows the stack in syz.1.1593 (11773): 20004000-2000a000 (20002000)
[  609.528000][T11777] sctp: [Deprecated]: syz.3.1594 (pid 11777) Use of struct sctp_assoc_value in delayed_ack socket option.
[  609.528000][T11777] Use struct sctp_sack_info instead
[  609.536627][T11773] CPU: 1 UID: 0 PID: 11773 Comm: syz.1.1593 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  609.555180][T11773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  609.565297][T11773] Call Trace:
[  609.568621][T11773]  <TASK>
[  609.571628][T11773]  dump_stack_lvl+0x241/0x360
[  609.576464][T11773]  ? __pfx_dump_stack_lvl+0x10/0x10
[  609.581720][T11773]  ? __pfx__printk+0x10/0x10
[  609.586554][T11773]  ? find_vma+0xf9/0x170
[  609.590860][T11773]  __get_user_pages+0x4385/0x49e0
[  609.595935][T11773]  ? __lock_acquire+0x1397/0x2100
[  609.601056][T11773]  ? __pfx___get_user_pages+0x10/0x10
[  609.606506][T11773]  get_user_pages_remote+0x31e/0xb60
[  609.611861][T11773]  ? __pfx_get_user_pages_remote+0x10/0x10
[  609.617721][T11773]  ? __access_remote_vm+0x320/0x800
[  609.623143][T11773]  __access_remote_vm+0x229/0x800
[  609.628213][T11773]  ? __pfx___access_remote_vm+0x10/0x10
[  609.633782][T11773]  ? do_raw_spin_unlock+0x13c/0x8b0
[  609.639016][T11773]  ? alloc_pages_noprof+0xef/0x170
[  609.644169][T11773]  proc_pid_cmdline_read+0x5b2/0x860
[  609.649497][T11773]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  609.655330][T11773]  ? rw_verify_area+0x55e/0x6f0
[  609.660201][T11773]  vfs_readv+0x6bc/0xa80
[  609.664468][T11773]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  609.670297][T11773]  ? __pfx_vfs_readv+0x10/0x10
[  609.675075][T11773]  ? do_sys_openat2+0x17a/0x1d0
[  609.679960][T11773]  ? __fget_files+0x2a/0x410
[  609.684565][T11773]  ? __fget_files+0x395/0x410
[  609.689254][T11773]  ? __fget_files+0x2a/0x410
[  609.693869][T11773]  __x64_sys_preadv+0x1b7/0x2d0
[  609.698750][T11773]  ? __pfx___x64_sys_preadv+0x10/0x10
[  609.704156][T11773]  ? do_syscall_64+0x100/0x230
[  609.708954][T11773]  ? do_syscall_64+0xb6/0x230
[  609.713667][T11773]  do_syscall_64+0xf3/0x230
[  609.718212][T11773]  ? clear_bhb_loop+0x35/0x90
[  609.722909][T11773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.728840][T11773] RIP: 0033:0x7fb387f85d29
[  609.733284][T11773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  609.752914][T11773] RSP: 002b:00007fb388ddc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  609.761381][T11773] RAX: ffffffffffffffda RBX: 00007fb388175fa0 RCX: 00007fb387f85d29
[  609.769483][T11773] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005
[  609.777489][T11773] RBP: 00007fb388001b08 R08: 0000000000000000 R09: 0000000000000000
[  609.785666][T11773] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  609.793698][T11773] R13: 0000000000000000 R14: 00007fb388175fa0 R15: 00007ffc61156ec8
[  609.801716][T11773]  </TASK>
[  609.842934][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'.
[  609.978527][ T5881] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  610.027150][ T5881] usb 7-1: device descriptor read/8, error -71
[  611.544862][ T5881] usb usb7-port1: unable to enumerate USB device
[  611.869128][ T5882] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  612.639194][ T5882] usb 1-1: device descriptor read/64, error -71
[  612.888589][ T5882] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  612.929531][T11805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1603'.
[  613.018936][ T5882] usb 1-1: device descriptor read/64, error -71
[  613.191147][ T5882] usb usb1-port1: attempt power cycle
[  613.489984][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'.
[  615.313564][T11835] syz.3.1612: attempt to access beyond end of device
[  615.313564][T11835] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  615.580915][T11842] x_tables: duplicate underflow at hook 1
[  616.036049][T11857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1617'.
[  616.209095][ T5883] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  616.238966][ T5880] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  616.374292][ T5883] usb 4-1: Using ep0 maxpacket: 32
[  616.381547][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.402221][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.408523][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.436297][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.445091][ T5883] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  616.465131][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.471588][ T5880] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  616.487522][ T5883] usb 4-1: config 0 descriptor??
[  616.498837][ T5883] hub 4-1:0.0: USB hub found
[  616.502211][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.525771][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'.
[  616.550949][ T5880] usb 2-1: config 0 descriptor??
[  616.700414][ T5883] hub 4-1:0.0: 1 port detected
[  616.820258][ T5880] usbhid 2-1:0.0: can't add hid device: -71
[  616.829241][ T5880] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  616.877689][ T5880] usb 2-1: USB disconnect, device number 36
[  617.158740][ T5911] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  617.428584][ T5911] usb 7-1: Using ep0 maxpacket: 32
[  617.440879][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  617.452443][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  617.474288][ T5911] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  617.512967][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.562081][ T5911] usb 7-1: config 0 descriptor??
[  617.638874][ T3075] hub 4-1:0.0: activate --> -90
[  617.887715][ T5883] usb 4-1: USB disconnect, device number 23
[  617.894941][ T3075] usb 4-1-port1: config error
[  617.978204][ T5911] usbhid 7-1:0.0: can't add hid device: -71
[  617.988930][ T5911] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  618.039426][ T5911] usb 7-1: USB disconnect, device number 6
[  618.949840][T11890] netlink: 'syz.3.1630': attribute type 10 has an invalid length.
[  618.977696][T11890] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1630'.
[  619.014888][T11890] batman_adv: batadv0: Adding interface: virt_wifi0
[  619.052777][T11890] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.109528][T11890] batman_adv: batadv0: Interface activated: virt_wifi0
[  619.280481][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1634'.
[  619.297465][ T5883] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  619.470379][ T5883] usb 2-1: Using ep0 maxpacket: 8
[  619.501131][T11907] syz.0.1635: attempt to access beyond end of device
[  619.501131][T11907] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  619.572326][ T5883] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  619.710207][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.773590][ T5883] usb 2-1: Product: syz
[  619.778289][ T5883] usb 2-1: Manufacturer: syz
[  619.844642][ T5883] usb 2-1: SerialNumber: syz
[  619.957371][ T5883] usb 2-1: config 0 descriptor??
[  620.107483][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'.
[  620.418457][ T5883] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  621.504892][T11928] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1638'.
[  621.819003][ T5880] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  622.150377][ T5880] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  622.170044][ T5880] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  622.235402][ T5880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  622.260774][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.269991][ T5880] usb 3-1: Product: syz
[  622.277827][ T5880] usb 3-1: Manufacturer: syz
[  622.286758][ T5880] usb 3-1: SerialNumber: syz
[  622.574614][ T5883] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  622.620361][ T5883] usb 2-1: USB disconnect, device number 37
[  622.828867][ T5842] Bluetooth: hci1: unexpected event for opcode 0x0428
[  624.039555][ T5880] cdc_ncm 3-1:1.0: bind() failure
[  624.749774][ T5880] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  624.756871][ T5880] cdc_ncm 3-1:1.1: bind() failure
[  624.769319][ T5880] usb 3-1: USB disconnect, device number 35
[  624.780002][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  624.787937][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  624.884758][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'.
[  627.271060][ T5883] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  627.578980][ T5883] usb 3-1: Using ep0 maxpacket: 16
[  627.600755][ T5883] usb 3-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  627.828338][ T5883] usb 3-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0
[  627.873683][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0
[  627.881065][ T5883] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  627.919126][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.950930][ T5883] usb 3-1: config 0 descriptor??
[  628.181655][T11975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.191089][T11975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.414866][ T5842] Bluetooth: hci5: unexpected event for opcode 0x0428
[  628.551476][ T5883] razer 0003:1532:010D.0010: item fetching failed at offset 4/6
[  628.560195][ T5883] razer 0003:1532:010D.0010: probe with driver razer failed with error -22
[  628.758929][ T5882] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  628.775209][ T5883] usb 3-1: USB disconnect, device number 36
[  629.418357][ T5882] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  629.431030][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.526100][ T5882] usb 2-1: config 0 descriptor??
[  629.611495][ T5882] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  629.974899][T11998] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1660'.
[  735.028385][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  735.035469][    C0] rcu: 	1-...!: (1 ticks this GP) idle=3924/1/0x4000000000000000 softirq=41488/41488 fqs=0
[  735.047439][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=45645, q=245 ncpus=2)
[  735.055241][    C0] Sending NMI from CPU 0 to CPUs 1:
[  735.055288][    C1] NMI backtrace for cpu 1
[  735.055303][    C1] CPU: 1 UID: 0 PID: 12004 Comm: syz.6.1660 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0
[  735.055324][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  735.055336][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x81/0x90
[  735.055366][    C1] Code: 8d 42 28 4c 39 c8 77 22 89 f8 89 f6 49 ff c2 4c 89 11 48 c7 44 0a 08 05 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90
[  735.055381][    C1] RSP: 0018:ffffc90000a18c68 EFLAGS: 00000006
[  735.055398][    C1] RAX: 0000000000010000 RBX: ffffffff89c5f632 RCX: ffff8880256e0000
[  735.055412][    C1] RDX: ffff8880256e0000 RSI: 0000000000000001 RDI: 0000000000000000
[  735.055424][    C1] RBP: 0000000000000001 R08: ffffffff89c5f662 R09: 1ffffffff284e310
[  735.055437][    C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: dffffc0000000000
[  735.055450][    C1] R13: 1820c40d94000000 R14: ffff88807c470400 R15: ffff88802949d360
[  735.055465][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  735.055480][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  735.055492][    C1] CR2: 0000001b346e3c20 CR3: 000000000e736000 CR4: 00000000003526f0
[  735.055508][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  735.055519][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  735.055532][    C1] Call Trace:
[  735.055540][    C1]  <NMI>
[  735.055549][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  735.055574][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  735.055595][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  735.055617][    C1]  ? nmi_handle+0x2a/0x5a0
[  735.055645][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  735.055671][    C1]  ? nmi_handle+0x14f/0x5a0
[  735.055691][    C1]  ? nmi_handle+0x2a/0x5a0
[  735.055711][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x81/0x90
[  735.055731][    C1]  ? default_do_nmi+0x63/0x160
[  735.055753][    C1]  ? exc_nmi+0x123/0x1f0
[  735.055773][    C1]  ? end_repeat_nmi+0xf/0x53
[  735.055791][    C1]  ? advance_sched+0xa02/0xca0
[  735.055813][    C1]  ? advance_sched+0xa32/0xca0
[  735.055834][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x81/0x90
[  735.055854][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x81/0x90
[  735.055874][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x81/0x90
[  735.055895][    C1]  </NMI>
[  735.055901][    C1]  <IRQ>
[  735.055907][    C1]  advance_sched+0xa32/0xca0
[  735.055930][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  735.055956][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  735.055985][    C1]  ? __pfx_advance_sched+0x10/0x10
[  735.056006][    C1]  __hrtimer_run_queues+0x59b/0xd30
[  735.056039][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  735.056063][    C1]  ? handle_softirqs+0x7e0/0x9b0
[  735.056090][    C1]  ? read_tsc+0x9/0x20
[  735.056114][    C1]  ? ktime_get_update_offsets_now+0x393/0x3b0
[  735.056144][    C1]  hrtimer_interrupt+0x403/0xa40
[  735.056180][    C1]  __sysvec_apic_timer_interrupt+0x110/0x420
[  735.056202][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  735.056228][    C1]  </IRQ>
[  735.056234][    C1]  <TASK>
[  735.056241][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  735.056270][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x18/0x90
[  735.056291][    C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 14 25 80 d4 03 00 65 8b 05 50 5e 64 7e <25> 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74
[  735.056306][    C1] RSP: 0018:ffffc9000c557270 EFLAGS: 00000246
[  735.056324][    C1] RAX: 0000000080000001 RBX: ffffc9000c557868 RCX: ffff8880256e0000
[  735.056338][    C1] RDX: ffff8880256e0000 RSI: 0000000000000001 RDI: 0000000000000001
[  735.056351][    C1] RBP: ffffc9000c557840 R08: ffffffff81ee1216 R09: 1ffffd400027674e
[  735.056365][    C1] R10: dffffc0000000000 R11: fffff9400027674f R12: dffffc0000000000
[  735.056379][    C1] R13: 0000000000000001 R14: ffff888055e7d000 R15: 0000000000000000
[  735.056395][    C1]  ? __tlb_remove_folio_pages_size+0x96/0x590
[  735.056426][    C1]  __tlb_remove_folio_pages_size+0x96/0x590
[  735.056456][    C1]  unmap_page_range+0x1c06/0x4040
[  735.056483][    C1]  ? __lock_acquire+0x1397/0x2100
[  735.056521][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  735.056553][    C1]  ? mas_next_slot+0xdc6/0xea0
[  735.056581][    C1]  ? uprobe_munmap+0x183/0x460
[  735.056603][    C1]  ? unmap_single_vma+0x1bd/0x2b0
[  735.056634][    C1]  unmap_vmas+0x3cc/0x5f0
[  735.056665][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  735.056706][    C1]  ? tlb_gather_mmu_fullmm+0x160/0x210
[  735.056733][    C1]  exit_mmap+0x275/0xc20
[  735.056761][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  735.056789][    C1]  ? __pfx_exit_aio+0x10/0x10
[  735.056815][    C1]  ? uprobe_clear_state+0x271/0x290
[  735.056833][    C1]  ? mm_update_next_owner+0xa2/0x8a0
[  735.056851][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  735.056880][    C1]  __mmput+0x115/0x3b0
[  735.056907][    C1]  exit_mm+0x220/0x310
[  735.056927][    C1]  ? __pfx_exit_mm+0x10/0x10
[  735.056946][    C1]  ? taskstats_exit+0x326/0xa60
[  735.056968][    C1]  do_exit+0x9ad/0x28e0
[  735.056991][    C1]  ? __pfx_do_exit+0x10/0x10
[  735.057013][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  735.057034][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  735.057053][    C1]  ? cgroup_freezing+0x2a8/0x350
[  735.057073][    C1]  do_group_exit+0x207/0x2c0
[  735.057093][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  735.057115][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  735.057148][    C1]  get_signal+0x16b2/0x1750
[  735.057180][    C1]  ? __pfx_get_signal+0x10/0x10
[  735.057209][    C1]  arch_do_signal_or_restart+0x96/0x860
[  735.057238][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  735.057264][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  735.057291][    C1]  ? syscall_exit_to_user_mode+0xa3/0x340
[  735.057319][    C1]  syscall_exit_to_user_mode+0xce/0x340
[  735.057348][    C1]  do_syscall_64+0x100/0x230
[  735.057376][    C1]  ? clear_bhb_loop+0x35/0x90
[  735.057395][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.057422][    C1] RIP: 0033:0x7f32e6585d29
[  735.057438][    C1] Code: Unable to access opcode bytes at 0x7f32e6585cff.
[  735.057447][    C1] RSP: 002b:00007f32e746f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  735.057465][    C1] RAX: fffffffffffffe00 RBX: 00007f32e6776088 RCX: 00007f32e6585d29
[  735.057478][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f32e6776088
[  735.057491][    C1] RBP: 00007f32e6776080 R08: 0000000000000000 R09: 0000000000000000
[  735.057502][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32e677608c
[  735.057513][    C1] R13: 0000000000000000 R14: 00007fff67c13610 R15: 00007fff67c136f8
[  735.057534][    C1]  </TASK>
[  735.058283][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g45645 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  735.718827][    C0] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=43445
[  735.726850][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g45645 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[  735.738351][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  735.748375][    C0] rcu: RCU grace-period kthread stack dump:
[  735.754307][    C0] task:rcu_preempt     state:I stack:25976 pid:17    tgid:17    ppid:2      flags:0x00004000
[  735.764550][    C0] Call Trace:
[  735.767862][    C0]  <TASK>
[  735.770821][    C0]  __schedule+0x17fb/0x4be0
[  735.775400][    C0]  ? __pfx___schedule+0x10/0x10
[  735.780295][    C0]  ? __pfx_lock_release+0x10/0x10
[  735.785362][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  735.791725][    C0]  ? schedule+0x90/0x320
[  735.796018][    C0]  schedule+0x14b/0x320
[  735.800219][    C0]  schedule_timeout+0x15a/0x290
[  735.805112][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  735.811002][    C0]  ? __pfx_process_timeout+0x10/0x10
[  735.816511][    C0]  ? prepare_to_swait_event+0x330/0x350
[  735.822094][    C0]  rcu_gp_fqs_loop+0x2df/0x1330
[  735.826982][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  735.832239][    C0]  ? rcu_gp_init+0x1256/0x1630
[  735.837066][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  735.842052][    C0]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[  735.847987][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  735.853310][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  735.859250][    C0]  ? finish_swait+0xd4/0x1e0
[  735.863911][    C0]  rcu_gp_kthread+0xa7/0x3b0
[  735.868559][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  735.873798][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  735.879752][    C0]  ? __kthread_parkme+0x169/0x1d0
[  735.884907][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  735.890140][    C0]  kthread+0x2f0/0x390
[  735.894591][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  735.899839][    C0]  ? __pfx_kthread+0x10/0x10
[  735.904496][    C0]  ret_from_fork+0x4b/0x80
[  735.908980][    C0]  ? __pfx_kthread+0x10/0x10
[  735.913647][    C0]  ret_from_fork_asm+0x1a/0x30
[  735.918477][    C0]  </TASK>