last executing test programs:

16m30.174722122s ago: executing program 2 (id=2364):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff)
mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000001cc0)={[{'lock'}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c910"], 0x15)

16m28.933904161s ago: executing program 2 (id=2367):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10)
setrlimit(0x8, 0x0)
ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0)

16m26.404518112s ago: executing program 2 (id=2371):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x50}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0xc}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "00b984efc1"}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x111, 0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x48, 0x0, 0x10000, 0x3, 0x0, 0x1, 0x0, 0x1, {0x3}})
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x5)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002b000b00000000000000000008000000b28fabfdda1377e4", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40)
r10 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x710, 0x2c, 0x20, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x1, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_matchall={{0xd}, {0x6b8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x8}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x7}}, @TCA_MATCHALL_ACT={0x69c, 0x2, [@m_bpf={0x64, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r10}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xf, 0x6, "5c806def2be88be17ba498"}, {0xc, 0x7, {0x6c775daeed74fd47}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xdc, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0xad, 0x6, "38f64ad0db40f57b6b6863d02da7de62446c6084ef73b154d3d399a100fd457b7212ecaa4620d50fd9d93a0fc075fa7dac31361754643937502297e7522e6d4bb2d8a6b5b94fd33ea46b137ad18379b63d1086a310faffd7c8f062f86deeab846441cd61ae696507b64593da4cf537a78aa72343f5b06f534ec7c758b510a498dff6206d0509e37f5718d1b058aa5175cf627da8ba99c5480bac66867041b60ba88cb3e2efad301b1b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}, @m_skbmod={0x90, 0x19, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x5, 0xffffffffffffffff, 0xb319, 0x3}, 0x7}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}]}, {0x2a, 0x6, "de593c43a316101e07af7d1c731d5dbd41b9729d16ce00e788befd7a0b6f502bcdf87edce14a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x128, 0x12, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xff, 0x7, 0x2, 0x6, 0x100}, 0x9}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff8}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0xc7, 0x6, "7c6b62a88662de3d6637e73e4db331affedc65025ced16a3ccba49aaee7a3ee33e860551f010840183e339dd19de42d28f6b1d5a48e8512b8406f90512a772b18c7f2cd8150c88cd54239690b4e71ab88cd981ae61275826f2a6e0f705b6c81245084458f3701bfddb30912a93a8a5a450f4788e5962d7f31e2094ad11c68421464aee01baad8a913d9e41879f11c51df95dd0f0144d739865e69132d577307527b125fc049d410e58ad93e766f1ec0995d947267350c897c542cf158c59a78932d00a"}, {0xc}, {0xc}}}, @m_gact={0x15c, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x8, 0x0, 0xfffffff9, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x9b300000, 0x10000007, 0x7, 0xc9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x22d0, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0xffff, 0x8, 0x1000, 0x1}}]}, {0xdc, 0x6, "ee0fd369a4a82b58ac9904ae36aa951c27e4a9526ff12a677eea977fcac91e87e184bc6b28e59aee7fd6f329be8f3962ce592e44e0a3575cfad4b2723c7e2465d73fb458b51517afa0d39eec6955602ef1d6a4f66efb590d2bc2c4a06ba0b24a6acc809ea1a3cb73c42ca245509868ae6fc99c4aa043ef1207d9884e49385ae32481b003c1c308e7072662d90349d6e79ab79c69d48d8f7cab5e7d3968c14291e8bad8cdf1391e9e14c49fc2f1eb995fbc4168d6ea2254b3761b36aa35f0b8d6d1114fa5bfcbae1190893a756c798a61cd95115dca55512c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0x128, 0x17, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x0, 0x5, 0x1}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x2, 0x7, 0xe}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5c0c, 0x401, 0x3, 0x3, 0x100}, 0x7}}]}, {0xa4, 0x6, "d1fccb46f20f70d0931a3125d59b20c065e4457974f3ebe2958f45a9c0916ac5ec8abffaf5e99ea96191b41c357abec7c0957bac5eca2cc31afa8a9319ec6dd6e6fca8a982d5c46da7385f91efdc5b6405c10125b863cb9aa7f57ab01e52461147d85bc6e8be0311c61e14d7f95e1d3220851ac3205520e3dd252b09b68380cb4064713ea2a61fe85fd4a5e84f19697dc8c587f212759d2ec2cd079e804decc7"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x11c, 0x1b, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x4, 0x1, 0x3, 0x4}}]}, {0xd6, 0x6, "063ddaabfde8215b9ce95d8f7013daa7313a2866744a8f0b58dc2a1ad23716c68969f084accaaf7b99b62d08b0fbc9c5de4f9f4714d3a337cc86eceb3f7e7204a74411f09739a94254be794155f0d367281d21c36c8203c19abf7408b655de8dd876994612750273661173ac24be9122acfd6d6f70ef54ae6bde96078189a7a18f49a2bc7f4899c2c5d4ce051bfd5b38217cf76db57abdbef5716da1d76833bce88c83f559f97a7410217d73b9aceedb5b69622443337a4c875017807ebab6f822b72987c248efb7f31efd7b68e3af1a8ecc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)

16m25.130203038s ago: executing program 2 (id=2372):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='alloc_extent_state\x00', r0, 0x0, 0xd}, 0x18)
rename(0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r1, 0x5603, 0x10000000000004)
r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/vlan/vlan0\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r4)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring={'key_or_keyring:', r5})
request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r4)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x8, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004)
getdents64(r2, &(0x7f0000000340)=""/79, 0x4f)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x70d94e1e2159a137}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x8001, 0x7f5}}]}}]}, 0x64}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
getpeername(r2, &(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000004c0)=0x80)
sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x45}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
getdents(r2, 0xfffffffffffffffd, 0x3b)

16m24.702478757s ago: executing program 2 (id=2376):
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000240)) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_usb_connect(0x3, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b74318860809050725018705ee7f09050a000002810bac090504"], 0x0)

16m20.357785354s ago: executing program 2 (id=2388):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0xaea3, 0x0)
socket(0x2a, 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000002020103000000000000000003000001040002807c3a7d4dc3f80600"], 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x80) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r6 = fspick(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x8000000, 0x2000, &(0x7f0000163000/0x2000)=nil}) (async)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x20)
memfd_create(&(0x7f0000000100)='%\x00K\x03\xd7\xac\x02MQ\xb1\x0e\xa9\x9c\x87\x9a$\x8bK\x8d\x86\xae\t#\xc9;\xc2>\x19\x0e\xbdX\xf2\x10/\xf0m\xe0t\xef\xbet\x12', 0x4) (async)
preadv2(r1, 0x0, 0xe9a5a265bed0f93, 0x10003, 0x6, 0x11) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x80}, "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", "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"})
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, &(0x7f0000000480)="0fc7ab7313cdb866baa10066b82e0066ef660f388177000f72e4000f30c4e1ab5984db00000000c744240000000000c744240200000000c7442406000000000f01142466baf80cb888f79381ef66bafc0cb8b1000000ef0f01cb66b88f008ee8", 0x60}], 0x1, 0x0, 0x0, 0x0) (async)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x4)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbbae2a0d7c11fb1ebc0024000000020011907800000000000000f0ffffff00001090780200000000000000"], 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async)
r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0x2, 0x0, 0x1, 0xc, 0x10, "90e29d93250de17afc0fecf927e4564236bbfc81d48796a00c7eb482cd1161b3761786196f3f9b3847618ecf4fea29e096697a8469c3ce80dceccba20b53ba20", "2e906cce8ccc965cd56b053154a909c773eb584e671aee75e28964b39f45fdcc5474af0a048eb940de5e14e6d019eec5157a69fcbe5034913ad675a0848f2c5f", "bd2217ed94694b6e1cc42063fc6464c97fd6085d5a2fc8d7dd4f173c8ecce6a2", [0x8001000000, 0x1]}) (async)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x1}}, 0x10)

16m3.697271431s ago: executing program 32 (id=2388):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0xaea3, 0x0)
socket(0x2a, 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000002020103000000000000000003000001040002807c3a7d4dc3f80600"], 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x80) (async)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)}) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r6 = fspick(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x8000000, 0x2000, &(0x7f0000163000/0x2000)=nil}) (async)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x20)
memfd_create(&(0x7f0000000100)='%\x00K\x03\xd7\xac\x02MQ\xb1\x0e\xa9\x9c\x87\x9a$\x8bK\x8d\x86\xae\t#\xc9;\xc2>\x19\x0e\xbdX\xf2\x10/\xf0m\xe0t\xef\xbet\x12', 0x4) (async)
preadv2(r1, 0x0, 0xe9a5a265bed0f93, 0x10003, 0x6, 0x11) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x80}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e27c3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d749cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55bdd46e5bcb3330c7edefd31c33f61275e516"})
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, &(0x7f0000000480)="0fc7ab7313cdb866baa10066b82e0066ef660f388177000f72e4000f30c4e1ab5984db00000000c744240000000000c744240200000000c7442406000000000f01142466baf80cb888f79381ef66bafc0cb8b1000000ef0f01cb66b88f008ee8", 0x60}], 0x1, 0x0, 0x0, 0x0) (async)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x4)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbbae2a0d7c11fb1ebc0024000000020011907800000000000000f0ffffff00001090780200000000000000"], 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async)
r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0x2, 0x0, 0x1, 0xc, 0x10, "90e29d93250de17afc0fecf927e4564236bbfc81d48796a00c7eb482cd1161b3761786196f3f9b3847618ecf4fea29e096697a8469c3ce80dceccba20b53ba20", "2e906cce8ccc965cd56b053154a909c773eb584e671aee75e28964b39f45fdcc5474af0a048eb940de5e14e6d019eec5157a69fcbe5034913ad675a0848f2c5f", "bd2217ed94694b6e1cc42063fc6464c97fd6085d5a2fc8d7dd4f173c8ecce6a2", [0x8001000000, 0x1]}) (async)
r10 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r10, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x1}}, 0x10)

15m40.01795774s ago: executing program 4 (id=2509):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x84)
clock_settime(0x2, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioperm(0x400000000, 0x6, 0x2da3b9f3)
r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
fchown(r1, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8)
getsockopt$inet6_opts(r2, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffcba)
ioctl(0xffffffffffffffff, 0x8b21, &(0x7f0000000040))
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

15m36.405964076s ago: executing program 4 (id=2514):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
capget(&(0x7f00000000c0)={0x20071026, r4}, &(0x7f0000000100)={0x40, 0x4, 0xfffffffe, 0xbc23, 0x8, 0x10001})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x20)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b7080000000000007baa00fe000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

15m35.292048884s ago: executing program 4 (id=2520):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[])
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40008c8)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003800000007054fc"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0)
write$vhost_msg(r4, &(0x7f0000000300)={0x1, {&(0x7f00000001c0), 0x0, 0x0, 0x3, 0x3}}, 0x48)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2, 0x8, 0x6, "f79b10", 0xc275, 0x8}, {@any, 0x4, 0x9, 0xb, "13aa8d", 0x2, 0x5}]}}}, 0x22)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4a0, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x1d0, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)

15m31.776254615s ago: executing program 4 (id=2526):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$binder(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x8000000000000)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x9, 0x1)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xd691, 0x10100, 0x0, 0x2b0}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, 0x0)

15m30.510530971s ago: executing program 4 (id=2531):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x25dfdbfd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x4, {@ip4=@broadcast}}}]}, 0x38}}, 0x20044050)
ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff)

15m29.731552564s ago: executing program 4 (id=2533):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r3, &(0x7f00000000c0), 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
r4 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)

15m29.040301116s ago: executing program 33 (id=2533):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r3, &(0x7f00000000c0), 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
r4 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)

3m0.301295011s ago: executing program 6 (id=4815):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0x95a10108, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
unshare(0x22020600)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
syz_open_dev$swradio(0x0, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
socket$packet(0x11, 0x3, 0x300)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$cgroup(r3, 0x0, 0x200002, 0x0)
fallocate(r3, 0x11, 0x9, 0xfd)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
writev(r2, &(0x7f0000000980)=[{&(0x7f0000002500)}, {&(0x7f0000000100)="115f22608e63ba8d972cdecfb254f3332f5fa1e6b53681573a37e03628357587f9edc2588e36ae26ae9670a8477ca2a978e7bf8bf99d3b32edc50fd8286ee16e27398090c4fa599041f7fcea128390a544a08bbdb914b085fec08ccab7f8ea84223eb5695248", 0x66}, {0x0}, {&(0x7f0000000640)}, {0x0}, {0x0}], 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000380)={0x20080522}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8})
shutdown(r4, 0x2)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)

2m55.745722984s ago: executing program 6 (id=4822):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x3)
ioctl$TIOCSLCKTRMIOS(r3, 0x80047437, &(0x7f0000020780))
socket(0x10, 0x4, 0x66782d33)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
lchown(0x0, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioprio_set$pid(0x1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0)
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x48, 0x5a, 0x1, 0xfffffffc, 0x25dfdbfa, {0x2}, [{0x34, 0x3, [@m_ctinfo={0x30, 0x8, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}}, 0x8080)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

2m53.318665116s ago: executing program 6 (id=4824):
socket$inet(0x2, 0x3, 0x2)
syz_open_procfs$pagemap(0x0, &(0x7f0000000100))
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000000000)={@random="9a70b05e7d2c", @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1fa, 0x0, 0x0, @private2, @local, {[], "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"}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c2402", @ANYRES8=r1, @ANYRES16=r0], 0x0)

2m50.352034564s ago: executing program 6 (id=4833):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
chown(&(0x7f0000000280)='./file0\x00', 0xee01, 0xffffffffffffffff)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47)
shutdown(r2, 0x0)
recvmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x140)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
acct(&(0x7f00000001c0)='./file0\x00')
r4 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000040)=0x8)
connect$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x1}}, 0x10)
ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f00000000c0)=0x9)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r5, 0x0)
setpgid(0x0, r5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
recvmmsg(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x1, &(0x7f0000000300)=""/97, 0x61}, 0x9}, {{&(0x7f0000000440)=@isdn, 0x80, &(0x7f0000000a00)=[{&(0x7f00000003c0)=""/40, 0x28}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000000680)=""/97, 0x61}, {&(0x7f0000000700)=""/216, 0xd8}, {&(0x7f0000000800)=""/90, 0x5a}, {&(0x7f0000000880)=""/131, 0x83}, {&(0x7f0000000940)=""/177, 0xb1}], 0x7, &(0x7f0000000600)=""/39, 0x27}, 0x52b}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/168, 0xa8}, {&(0x7f0000000bc0)=""/87, 0x57}, {&(0x7f0000000c40)=""/182, 0xb6}], 0x3, &(0x7f0000000d40)=""/104, 0x68}, 0x5}, {{&(0x7f0000000dc0)=@sco, 0x80, &(0x7f0000001100)=[{&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/157, 0x9d}, {&(0x7f0000000f40)=""/197, 0xc5}, {&(0x7f0000001040)=""/183, 0xb7}], 0x4}, 0x9}, {{&(0x7f0000001140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001200)=[{&(0x7f00000011c0)=""/12, 0xc}], 0x1, &(0x7f0000001240)=""/6, 0x6}, 0x978}, {{&(0x7f0000001280)=@sco, 0x80, &(0x7f0000001580)=[{&(0x7f0000001300)=""/54, 0x36}, {&(0x7f0000001340)=""/86, 0x56}, {&(0x7f00000013c0)=""/162, 0xa2}, {&(0x7f0000001480)=""/133, 0x85}, {&(0x7f0000001540)=""/2, 0x2}], 0x5}, 0xa59}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001600)=""/246, 0xf6}, {&(0x7f0000001700)=""/64, 0x40}], 0x2, &(0x7f0000001780)=""/218, 0xda}, 0x80000000}, {{&(0x7f0000001880)=@un=@abs, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001900)=""/91, 0x5b}, {&(0x7f0000001980)=""/200, 0xc8}, {&(0x7f0000001a80)=""/139, 0x8b}, {&(0x7f0000001b40)=""/135, 0x87}, {&(0x7f0000001c00)=""/8, 0x8}], 0x5}, 0xff}, {{&(0x7f0000001cc0)=@nfc_llcp, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d40)=""/140, 0x8c}, {&(0x7f0000001e00)=""/178, 0xb2}, {&(0x7f0000001ec0)=""/153, 0x99}], 0x3, &(0x7f0000001fc0)=""/11, 0xb}, 0x81da}], 0x9, 0x120, &(0x7f0000002240)={0x0, 0x989680})

2m50.186282918s ago: executing program 6 (id=4836):
r0 = io_uring_setup(0x3dfc, &(0x7f00000002c0)={0x0, 0xb7ca, 0x10, 0x1, 0x5f})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000200)={0x80, 0x108, 0x2, 0xe05, 0xe7, 0x3})
syz_usb_connect$uac1(0x3, 0x94, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r0, @ANYRES8=r3, @ANYRESDEC=r1, @ANYRESOCT=r4, @ANYRES8=r3, @ANYRESHEX=r1, @ANYRES16=r2, @ANYRESOCT=r4, @ANYRESHEX=r3], 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

2m48.925799384s ago: executing program 6 (id=4840):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = fanotify_init(0x8, 0x80000)
fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r4 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x10000005, 0x8, 0x10, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0x4000d615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x6}}, {0x0, 0x13}}}, 0xa0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2m48.611818215s ago: executing program 34 (id=4840):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = fanotify_init(0x8, 0x80000)
fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r4 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x10000005, 0x8, 0x10, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0x4000d615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x6}}, {0x0, 0x13}}}, 0xa0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2m39.848132327s ago: executing program 1 (id=4855):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)

2m36.698992847s ago: executing program 1 (id=4865):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000080))
inotify_init1(0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109240, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x3)
read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x1015)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20)
r2 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80000, 0x0)
dup3(r3, r2, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x2)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000080)=0x3, 0x12)
write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0)
r5 = fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0xffffffffffffffb6)

2m35.727511346s ago: executing program 1 (id=4868):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
close(r0) (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x3}}, './file0\x00'})
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x66}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, 'qS!.hq'}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "4512ced4a8c2d63f1d884125"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) (async)
listen(0xffffffffffffffff, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x6f4dad00}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) (async)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async, rerun: 64)
connect$l2tp6(r3, &(0x7f0000000180)={0xa, 0x0, 0x10000000, @remote, 0x6, 0x4}, 0x20) (async, rerun: 64)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000140)=0x2000) (async, rerun: 64)
ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) (rerun: 64)
r4 = getpid()
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r5, 0x26, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) (async)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) (async)
pipe2(&(0x7f0000000040), 0x0)
r8 = syz_open_dev$vcsa(0x0, 0x1, 0x1a1300)
setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async)
waitid(0x0, 0x0, 0x0, 0x60000009, 0x0)

2m34.917910018s ago: executing program 1 (id=4871):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r1 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1)
fcntl$setlease(r1, 0x400, 0x1)
fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
r2 = io_uring_setup(0x7d5, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}])
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vbi(&(0x7f0000000480), 0x2, 0x2)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00'})

2m33.64625799s ago: executing program 1 (id=4874):
syz_open_dev$tty1(0xc, 0x4, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000002440)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'pimreg0\x00'}}, 0x1e)
r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x20000000, 0x0, 0x40005}, 0x2})
r2 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x8000000)
ftruncate(r2, 0x51a9497)
gettid()
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r4=>0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x10000000})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100})
accept4(r3, 0x0, 0x0, 0x0)

2m32.478065242s ago: executing program 1 (id=4875):
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x20000}], 0x1)

2m16.579731572s ago: executing program 35 (id=4875):
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x20000}], 0x1)

1m41.561383402s ago: executing program 0 (id=5015):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001c0001001bf365eee1aae35b07000000", @ANYRES32=r2, @ANYBLOB="0200a2000a000200bbbb"], 0x2c}}, 0x0)

1m41.473668468s ago: executing program 0 (id=5016):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000049c282ce000040000800010001000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="280000001400190800000000000000002c"], 0x28}}, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x9, 0x4, @thr={0x0, 0x0}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$packet(0x11, 0x2, 0x300)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="99", 0x1, 0xfffffffffffffffc)
keyctl$describe(0x6, r3, &(0x7f0000001480)=""/226, 0xe2)
socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000240)={@private2, @rand_addr, 0x14}})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x400c000)
sync()
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x8140aecc, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff, 0xfc})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
socket(0x1d, 0x2, 0x6)
socket(0x1d, 0xa, 0x7)
creat(&(0x7f0000000080)='./file0\x00', 0x0)

1m39.510004926s ago: executing program 0 (id=5021):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x24) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x881a}, 0x18) (async, rerun: 64)
socketpair(0x1f, 0x1, 0x752, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x110)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x60, 0x4, 0x8, 0x0, 0x5, 0x2, 0x1, 0x3d, 0x42, 0x0, 0x10, 0x0, 0x0, 0x40000208, 0x6, 0x2, 0x8, 0x9, 0xb9, '\x00', 0x7, 0x6})

1m39.234533401s ago: executing program 0 (id=5022):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
unshare(0x26020480)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r1)

1m38.568810044s ago: executing program 0 (id=5023):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = fanotify_init(0x8, 0x80000)
fanotify_mark(r3, 0x105, 0x4800003a, r2, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r4 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x10000005, 0x8, 0x10, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0x4000d615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x6}}, {0x0, 0x13}}}, 0xa0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1m35.419904988s ago: executing program 0 (id=5029):
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_vhci(0x0, 0x0)
sync()
clock_gettime(0x0, &(0x7f0000000400)={<r2=>0x0, <r3=>0x0})
futex(&(0x7f00000003c0)=0x1, 0xd, 0x0, &(0x7f0000000440)={r2, r3+10000000}, &(0x7f0000000480), 0x2)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0xad0b}}, './bus\x00'})
bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xc, @private0, 0x6}, 0x1c)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}})
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r6, 0x0, 0xfffffffffffffd17)
socket$netlink(0x10, 0x3, 0x4)
mount(&(0x7f0000000080)=@nullb, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1004050, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@mcast2, <r7=>0x0}, &(0x7f0000000140)=0x14)
sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r7}, 0x10, &(0x7f0000000300)={&(0x7f0000000240)={0x3, 0xc41, 0x1, {}, {0x0, 0xea60}, {0x1, 0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "98be59c8075a6c0a"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1m19.883482748s ago: executing program 36 (id=5029):
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_vhci(0x0, 0x0)
sync()
clock_gettime(0x0, &(0x7f0000000400)={<r2=>0x0, <r3=>0x0})
futex(&(0x7f00000003c0)=0x1, 0xd, 0x0, &(0x7f0000000440)={r2, r3+10000000}, &(0x7f0000000480), 0x2)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0xad0b}}, './bus\x00'})
bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xc, @private0, 0x6}, 0x1c)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}})
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r6, 0x0, 0xfffffffffffffd17)
socket$netlink(0x10, 0x3, 0x4)
mount(&(0x7f0000000080)=@nullb, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1004050, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@mcast2, <r7=>0x0}, &(0x7f0000000140)=0x14)
sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r7}, 0x10, &(0x7f0000000300)={&(0x7f0000000240)={0x3, 0xc41, 0x1, {}, {0x0, 0xea60}, {0x1, 0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "98be59c8075a6c0a"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

11.529208672s ago: executing program 7 (id=5256):
r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80341, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
preadv(r2, 0x0, 0x0, 0x6, 0x220)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000004180)={0x56, 0xfffd, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x8, {0x4, 0x0, 0x0, 0x809}}})
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x9, 0x0)
r6 = timerfd_create(0x0, 0x0)
ppoll(&(0x7f0000000100)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000040)=0x1)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r7, 0x29, 0xc9, &(0x7f0000004140)=0x4, 0x4)
recvmmsg(r4, &(0x7f0000003fc0)=[{{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f00000005c0)=""/251, 0xfb}, {&(0x7f0000019580)=""/191, 0xbf}], 0x4, &(0x7f00000006c0)=""/8, 0x8}, 0x8}, {{&(0x7f0000000700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)=""/118, 0x76}], 0x1, &(0x7f0000000840)=""/226, 0xe2}, 0x10000}, {{&(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000009c0)=""/4083, 0xff3}, {&(0x7f00000019c0)=""/7, 0x7}, {&(0x7f0000001a00)=""/48, 0x30}, {&(0x7f0000001a40)=""/89, 0x59}, {&(0x7f0000019640)=""/4097, 0x1001}], 0x5, &(0x7f0000002b40)=""/8, 0x8}, 0x100}, {{&(0x7f0000002b80)=@ax25={{0x3, @bcast}, [@netrom, @bcast, @default, @null, @null, @netrom, @null, @netrom]}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002c00)=""/50, 0x32}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x2, &(0x7f0000003c80)=""/213, 0xd5}, 0x1}, {{&(0x7f0000003d80)=@x25={0x9, @remote}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e00)=""/231, 0xe7}, {&(0x7f0000003f00)=""/29, 0x1d}], 0x2, &(0x7f0000003f80)=""/44, 0x2c}, 0x417f}], 0x5, 0x100, &(0x7f0000004100))
syncfs(r0)

11.253729872s ago: executing program 7 (id=5258):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x112, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d080997", 0x32}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc", 0x88}, {0x0}], 0x5}}], 0x1, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r4 = dup(0xffffffffffffffff)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000130d000000000000f4ffffff18230000", @ANYRES32=r4, @ANYBLOB="0000000005180000950000001d64d4cd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r5, 0x1], &(0x7f0000000380)=[{0x3, 0x3, 0x5, 0xb}, {0x4, 0x4, 0xfff, 0xb}], 0x10, 0x4, @void, @value}, 0x94)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

9.710701079s ago: executing program 7 (id=5259):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC=r1, @ANYBLOB="7f43bcda5fbad049433052ae1e83ec4c1b13e5354b5323d58f8f53d49ee6f950bfbca360939839e2b9cd7b1225f29a353adddef47100f6d3f75545e645ace9f2908c9f1948c3909af2b01758681da7ad96400fb52b774db6a05595830163cd78c35d9f076dff260d21f47f975466985d9a07c95c3bd67a29763cd61591c358b70123847984ae4650565382e3eb098410f347535aea28ead354c093b1526868ae8d13cccc9b1caa7af19782d1750f1ce3", @ANYBLOB="13e0cbbea8db68731a3dbd99d85597e00b2d10f5c8f5e1d6fdf2f3b2283ab8a64b5b5ff8c113dcb31a438467b76859496450af6e37f2021634ee723a9203a49de5259a726428a06648356e7e8a6c5959ed429f7aae54457b4f91467201719dbf6780608c8c0fa164ab4da18c0d3fde25aeb4d7f38fa69ad50a44a27b9cb8bec7c74cb19c15aa9210f2d7e2a3301b93a3160e2cc6d6f30d78097df4c9014cf573", @ANYBLOB="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", @ANYRESHEX, @ANYRES32=r1, @ANYRES32=r0, @ANYRES16, @ANYRES8=r1], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = socket$kcm(0x2d, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r5)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r5)
sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x34}}, 0x800)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x480, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080))
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r8, 0x0, 0xa)
bind$bt_hci(r8, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x24000889}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r10], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r11, 0x0, 0x2}, 0x18)
unshare(0x2040400)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r12, &(0x7f0000000cc0), 0x0}, 0x20)

8.783483413s ago: executing program 7 (id=5264):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="120100000000c140c50f80b0000000000001090224000100000000090400000103000000092100441412d20300090581030000000000"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x0, 0x0, 0x1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, 0x41, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=0x4d, 0x4)
write$binfmt_misc(r1, &(0x7f0000000300), 0x6)
r7 = syz_genetlink_get_family_id$nl80211(0x0, r2)
sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x80, r7, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x28040}, 0x4080)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)={0x40, 0x2, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

8.046832223s ago: executing program 3 (id=5268):
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
r6 = io_uring_setup(0x34d, &(0x7f0000000300))
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x22, 0x200000000000000, r7)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, <r8=>0xffffffffffffffff}, './file0\x00'})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r1, 0x36, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], <r10=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=r8, r0, 0x1a, 0x2000, r9, @value=r8, @void, @void, @void, r10}, 0x20)

7.481840465s ago: executing program 3 (id=5269):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000791238000000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='ext4_lazy_itable_init\x00', r0}, 0x18)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
r3 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0x14, &(0x7f00000001c0)='\x00'}, 0x11)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r4, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)

7.472359007s ago: executing program 9 (id=5270):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e23, 0x7, @mcast2}}, 0x0, 0x0, 0x12, 0x0, "0c9e089c1b4a04000bde79f04103ce58187eb46c2d996aff287154e786455262c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d130000d47d1171ed98099f00"}, 0xd8)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
r4 = gettid()
timer_create(0x3, &(0x7f0000000180)={0x0, 0x17, 0x4, @tid=r4}, &(0x7f0000000080))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
rt_sigtimedwait(&(0x7f0000000000)={[0x7fffffff]}, 0x0, 0x0, 0x8)
listen(r3, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

7.214037104s ago: executing program 9 (id=5272):
mknod(0x0, 0x1000, 0x7000000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="0435"], 0x9)

7.213709123s ago: executing program 3 (id=5273):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000040), 0x5005)
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_audit(0x10, 0x3, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r4, &(0x7f0000000480)={0x27}, 0x6)

5.554501419s ago: executing program 9 (id=5276):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket(0x2, 0x2, 0x1)
bind$can_j1939(r3, &(0x7f0000000080), 0x18)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
syz_open_dev$video(0x0, 0xc000, 0x0)
syz_open_dev$I2C(0x0, 0x80, 0x274100)
mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000040)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x5, 0x5, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]})
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r6 = socket$inet(0x2, 0x3, 0x4)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r8, 0x0, 0xcf, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)

5.553955308s ago: executing program 7 (id=5277):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x66, &(0x7f0000000280)={@link_local, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x3, 0x58, 0xfffe, 0x0, 0x0, 0x2f, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xff}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0)
r4 = openat(0xffffffffffffffff, 0x0, 0x2000, 0x68)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x1)
r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f0000000340)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18r\x8e\x9a\xc8\xb09Bl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j\x03\\\x00\x00\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8Nt\xf0\x9fV\xf3\x03XV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?IO\xdf\x14+\xcd\xe66\x0f\xb6\xb1$i\x11\xde\xa7w\xf9}\a\xdd6}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x13\xe1\x05\xd8]\"\xeaD%\xc5\r', 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x2a, &(0x7f0000000440)="78660f57ec884c5ebb1a51ff9ca8503846aee843f7df23fa820ba5c89f4c94a1288650904e0e157ab59b4c1a3a5a888db5482d3d274ef02703883e7de87bc7510fa955469b9112c7254be880f1080b630cf44a72e601196226365f04aa981ea33cf6f54bfffb4d178bb262", 0x6b)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010800800154000000000200004"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0))
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000f40))
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, 0x0, &(0x7f00000011c0))
io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, &(0x7f0000000040)={0x3}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f00000000c0))
getpeername$inet6(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)

3.865861718s ago: executing program 8 (id=5278):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000023000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kvm_mmio\x00', r1, 0xe4}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

3.698534842s ago: executing program 9 (id=5279):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x80000)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000})
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000})
io_uring_setup(0x8e1, &(0x7f0000000340)={0x0, 0xfcd3, 0x8000, 0x3, 0xfffffffd})
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001200050100000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20040810)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

3.654871656s ago: executing program 5 (id=5280):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
unshare(0x26020480)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0)

3.452741505s ago: executing program 8 (id=5281):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
sendto$netrom(r1, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48)

3.440700196s ago: executing program 9 (id=5282):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
sendto$netrom(r2, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48)

3.08137236s ago: executing program 5 (id=5283):
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x80)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
fcntl$setown(r0, 0x8, r2)
r3 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f00000000c0)={0x8, 'syz1\x00'})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="3d352b543b479416651777111d0201e1a4a5f152778420fdebeffc", 0x1b}, {&(0x7f0000000180)="3d68c475423a13df2e3c3d25805505f2fe1a1fe9d8eadb611c24c14e3a8c57c14feff162e289ae", 0x27}, {&(0x7f00000001c0)="9d27e1655bfadb5c7cd97f41", 0xc}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x94, 0x3, 0x2, [{@private=0xa010100, 0x4}, {@rand_addr=0x64010101, 0xffffff1b}, {@multicast2, 0xef61}, {@remote, 0x10001}]}, @timestamp_prespec={0x44, 0x1c, 0x5a, 0x3, 0x6, [{@multicast1, 0x8}, {@loopback, 0x1d}, {@loopback, 0x6}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffe5b1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0xb0}, 0x8000)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2)
sendmsg$inet(r3, &(0x7f0000001840)={&(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="425af0ba8b2a451faf4b42a6efcdbed0f5252f2c6ad6e8659dbc29e3e93f0210847c97bc5de9318fa0f1116c2c4fc05a096f5985d533354cd6c870374d3d33c71e2b356e941490c32128f8", 0x4b}, {&(0x7f0000000400)="ed4c95a5f8eba71ee82b51a587ecb0e9deb65e50d87610df01bc3f0cd15100df388fc4999cc34b447138e745e7623cd67bccc069f660a39b2ca10cd3703da60fcc931195a88c0d5e1c66682d403a268ce23967787a3cd583f91faa02b6643042e0ab8fd2a583967df167ab62db79f43d64e177bf5057da50f404e11d9a4b2596c5362d411ea40a4b0c72868ccba89f0fd16da3a720ec11b8d21e1aeaa10628ca48cf612c6d10ab10e664e242bcdeba7d4883", 0xb2}, {&(0x7f00000004c0)="03aac1c1b83a998c76f1a86484593a1174dd4b04b20201854858927a11b7bbd2df25b175e1f56435e1014d10f7c9d086bed182fbd0b60958ed5b5d40e8f6fc7cda972517198bdd10d32e8c4c43ecc9306bbb6d8fb585d2b23f265cb19417572c9500848f8e67fd4ea32ae61432f2a5e4efdc275612da420db3f6a5d08a0749b999af3b40c55f0e825026b119b6e09f97329dc81c82a7ffd28a5d90e8b66f72b2cc4e5c98a9be297d2f2c886f6be8b41687d9fd645f7ba4dd13e00ac222ae2aebb3ca17bb0727cb039a298e14e7efa1cec7fa0fbdfa3732cfc09e9079c342260320b20dcce25443ae885b4d40ad0799bcb3d5746074f7bbedea913628b01113e1da5f901551b5b9d48b0b17345e38564df4425994df43a9b8b3c98447e632b9ed0e633116d735365989322846ea7bd621877ddf0611167d894f5115176f236097635550fd8dcbe6ccd5422ba53fff8a58ee164149f06dac3ebf9ea0d78f9ddc83bc95018d3e00c878a10ce42da6b94684966be8ea2d4a91e137e22df698af896242d90db6f703ebae3902b600d9f960ce8fcde587178dcf46d08d5a7837e2150e2b462e8b3eaa9fd9e43c4bdd7d5c675e59eb3787ea4e45162e180a3fcdbbc02a2667dab9a46b4df6ddf2199986bb4bed37f83b50a24d0f2d3f71a55bd450e502726227b1c9cea76f76cf6a248a58eab3107ece733410947ed5143d86a82582d59236cf930b76ad201e2c71e1b783b796775851f8c1b39132c9c870f9ac1d89ae2845375e75fddef4de498fbb7428505df85970a49d6300dff9980495ea919bc332404ffd20fbb883b21a9ae4789c917043743cb5e0cf88c487538bae5ab56d8d02afd7f9838afa222f67022531caaf5161089ab38f408610d03487f6e4618b26a948e0cae0928072e385f325c069354833c5d4dd6c015bd80a96439ef7d6763b66b5e5fe12f49da3755dda9d64011281ca99d5e311105dde0041eedff4d588fd5ede7bc5efe79de941142c3d3173a0b0064ebeec93e67900ec83c3a3a1cf75e59c723900afb1d05f53f08b5b3b74e717a03a7ea958c8a031cd06b72193fd0ab7016d1778325e8dc3aa5d83a96e5c3c0aaf8f9b2f0fb054c10128ee9490e26e6a608f1359208cb72c5c57dd57e84eec50a937023195a8cc9f936ec352fd9a2b710f052552f8e011883b46d9b19d844e4e99a6a0c4f4dce9a214e8434af68c7e6cd0d38a8d6b99a413d09f88e9e6b10362d05c43b73d2d43adecb4aee957eab7bdb5931e71e8c69a0f42f97b7171bb8213a4894ef2e05d1bd0c3f89c62492001999e84c262a953cd311b353c829d812e6451a7fed66cbf325d421534693b4185cf16cc2614e4da88ffebe56e94983b591e6847c8a81080c9d4cb6f0bc5ecbad5e28a1405b5f07f95b203a3839d9d029e05b381f9508e7ff8a1edad68c33e5183125ecec6bc54f8a2856e18e3357dfb5b63a339f401c77875bbdcb49d51642f8763718a49409b5ca631b41ac2754fdbcfa5629cdfb6a62fb9f69e01b2b2a7ce505eb3d0e8cbff3c17426ffe924eabe84e3cefde795a638c5ee69c79cd81d61f5ae085683aac3ba2fc07ce86c9fbcdad22f6c421cc4b41fccc6edc40983407705f2ba707bab9b41b2121f77b6f2211a848af172537bcd4e9a594a8468e66020d7eb553f4866eed99e1cdeb5ddd15ffda91440dda39a23232185584a7e397380b0f311428a1826066e162c4443a6633eb92e7d7b180b6546aea593473db53f6246203664911a93a91f2ac59be95cc2e220309a75ef272b64c58a04946417a73133d04bb99800c442c236dfec74bcdc451d24dac34b2d8cdb2d7a3c65cf7d80a05f8ba421effe3e86461b7d009f1cec405e08eb12f76dd26145d93b477be6444c5c16c179b9c8f67778f0de7295dee268ee5f099327a4194a06ee448271f264bb5a04fa90657abb8f050084420223bde1329097021984a5c9064fe30bd1a59dd3c188385d77aecd7f82929c6b9978082f3c00962a9394f6180bbb490bace6dbd3d1958b43d78309ce671e0da81f82bea515c175cf4b97b4bd63bf5b52ea8d4a17d4761189768a43cd645e8f40c91ca483b6ddf8e57dfdeb0a414ce16722e9250eba9487af522697cee7a2d52b0e44d0e7937068cb53bf2075661b6a5f621deec2fbca18d6ac19bc5847d73d586c9dffca2778eacba70eccb778965833331870e4920e919d24896b256b2c38835f19013642460010ac71064b2392d26dbcede8999e86aa2b6e5675cbcc7603738145b66e2cb75ee11ec2b0f60187dbb50ec9c40a9a144bf5fefcf3a3625dcfd2c5c9d21a71943899e081e232dac2dbde171866b65769a93b96133a703c11818f2326a35ade17b1f658d211c91eec72a796b3f4ed35273da4b75398c79c22ab2220879560b7909372e97dbbcfbcd0d59a803cf4b4431e27f97a0f41e48de0a7b7f2a7682c4740b82e4e2a9a1094421298c41983aa86714e7481193fad1c50b4a8695403a999ac06db2b1f75222832274e116e75a8c2f8bfa1323298be8244c14820b20b97e73c97cc70df3cdddd9021ab91d01ea0bd48bb74d3dd153adda4daabd996572a130f79a99899d019dafe6366488e8b475678baa13b401a1575e93ebbca8fd018ca390c994289cb3b45c10a778b3886ea4e7860e6f1e315732cd1644061db0ed12f64e797138bc8212daec39f40467a319625b618882f18385e57c36afb0368c4bf428ca0a9688470497768fd6577630f61af917bcf5f598ac9ed6f0886791ce34c4eba5548d09dafb5e0b51d248542ff65b23108ed950cc0d04122e7be4e2e2744ea20318e1fd8582460ec796d908b29a47f9e3fdd1baa1cb320bdac10dc38cfbb1c9be20987214b68655c518f3537d53f24ffee5e24edec3025da46c0d0038b7a38b7fb38e6f00c7ddda7bbd56ac9e00df8b61e46c49ca13c5ce0fab83653d58ea62e3972ced75677cf0c0d84fea501be9abedbd02058c7bcb02961bb29661ec7cf340e506bb58030e03890d9a942cbe2e30fb8a30ee21302832967058af2ae53293417f5be9a9e0985049758e2cfa0efc1020c208ea1234d562212b8418cbc77a63662899e6a3bcb20b58048e39cf75b596deaf71f3440e65ceafa432bd59fb6c080a03e70455b1295926dd24a73b7079834b9424c74000d85b37ae706afc4839e5c118adfd7e783ac1f3a0024f48590fe25b644b8800479b5f01fa000eb59416675f711eed4b8f925d8445005c96de6e8b15335a25ecd7e03978ce91495ef75d297d96c19f4aabd15c05a83b58446a99232320a8adb7ded15959a533d870120c6270448d0e530f34ef5a5044be0ea46cd2abf42b27bf3b73c67656188a83ebdc575d9fb554270f9e3fe4ac020c2390777606640f92a37c4f2386952d5413a088aaf8087efdcbfa3343ebb47242bafe71eae17e50af97832e420ee2da01ce2b0696a9a95f0988c21b0cc7a913398e335324771a2a3a3d024f9ec7000190c573057f2a074c25a7a11f0c47632ca06141827a7828343f3723c76e60448e12ba32bef2f58450a6da1aec11503c1513835ea49b6e4309308363f57071a4d68f9b3c81d9ecf2ec938d98be2b3558713005cf8d2d245467b79aea6583e6ebd7ce915aca14e0a23c34204ae2310cc122c13fba1a6db857e68dac4ebeffd8e98a1ecc920c9c3b041d2d2ffded99ef32ade673b80cef6041fe2ed9851a0fb06814d0b9bf6e2bf244673fdd459138df6aa996de753adb3d3fee94172a6d43acf1ad3ac3c61cf72a95d30f598156cbe0dc42cc55f22ce98e6452481191c942ef6f19af9ba56154820e6bc6161473ee1a5dcd2b1db8d6f354acafec8453c4b127794075250a26930a7dd5833d4c06d9ab62952e4ef4a300095af66d56d0d3b57c9f12578694d5c3fad312dd1fcf7311e3ef708920b742dfb4fd6e63dbaf7d0e3dd454e1dbfdc10bc4072aaded356f4d75ffdda60451d260895ee531a1f2666dcf6715cb2b71d898300c59bc68c4448c610b93133f0bde16a8046a7d34f9a61adf7c2b1e09799fdc8665556506e710b1a0da39d277dc756800878d1e74cb5cee93f041637a89206b617f2f4abe6ce39e55b0c4aaaf284a835e4d695316bd7f0a0770b4088d3b9fb871ffdf383fe88773ebe849f2a55dea3f17d2438bee2bdbb07114b5b3de61559c2d1b72a55745802493332d285307770c49ad352a0189daea4533e85016fa1034930900d7fb2392a95e298663069d812df7191079ff8d6f8c6fd9b7a8cfd69e9b098758c1688914be6aeee2cd55f77fb6414a82aa604e1182f4bef03fb4264dec881406f725f6bc45b7510ee3142e223926ef4168af3dd3374e7790a31909d0fc68d5848dd2c1ffaed0fc08770caeec50c1654b90e03032a4d0ef1d4e45fdfdd39af9ab4597200af657f58faf7dae140d1f8f96d8c8fb5882567669d40ef8b6625bed1a1bb632f692470420463308b644c0c836c93424efc98a2d7f56057a3c2b269b818a9ef9ef8bcb2932f3c3a8a95710588d8c87fee85f5d75061685b1f9264435007388dbc4cae21ffb296cea51b5dd2c4a4b2b7155308ca704e7e7c2336a50b0ec127092c2b955eecac6c651d54d74819d180269663f9a0c644a2a2394abc3cb2869fa56595069b1a50c9bfbbf2c005bd0695331cb032d849e7d73b74c01c4ad1199bed43d2cdfc1e90df88b1aa29838008b4aeaa8e3bff8c733ee3bc22cb7fc727fb4b5167f99e3a6de97bd0ada575e42da5ea5777c4ee3538e0be171e624d3436b5f5342159341783e0588dcb2d1095d87f4152e48cbabd66bad3fb9d9154a3c830d3749ce82331d6e25e1583fc0401ebc0e1da0c5fa5ccf4cb70ca0e75019859e8d78b050d41e40be61e490e52f9118b5834414cf07f7483b6d62842fbd65bd937397af893a96487df3fa1afaadd253753ee5c958ba248275b28c56b2340c7608b80f0faae15152b410324691b7ba0403d0ef9dc92a09f757016509464c53badd0189dc5127e4fe09a71463ac7e06561695d506ca651f64836ef197ed48720127afd4555f375bacf285eac395aefad7122399bf8260c812ff0708bfadac9910fcaedd93070d455bcdd06f69ba45c775720d23428558518c75b435591362af1fab637264e16a30b1a9868a98b331a77ea3b971d636d484812d65537565c7d800837db15ae699d98feb99cf78e0c857b2ecc1e16e974512d73778f6ddc01545cef17d0dcb71c203d4dcfaa45d614c9ca965cfc01d8140f26d86bc5fb72bdfdbd6b0d68e3b6bc497a7c5ea8270a4be543e858fcb190600a46b5676a95c75e7c7ed09a73478105ddb6ab57d69d1177b6bd6ab2da7d99ad760a7582e4c5d6d2d3845a3fdc07b68f35cfdbaffabbd199ed9df41dbe9e839c62dfb84bba13aa7e17f79dff15aa0e9e96048d16ec0a6741a93be2d980404e2063b4393b4b85514469b0d48a5e65214712a8ed850dd56342f4ab11265141c2e13719085f1651b2c856e3170c86673ac37fd5e27707462596f321973dc2f75916509ae2460d28c5d6042413d78f79eb6f8bd9279b87ff50e9ec7634a6d269419df610c7d265bfb2fdc3bd666a2d760087becf06ef482d0351e581f2c96f48919541591e0be6c8b8135900709b911d5b1c2b930720e981189353c62cbc504d706179a025404a45b85eefbd84bbdd89a9b391d129137cee81db60684fb2748fa736d2d2722c21e502230000a6423def8adb8171f093cbf328dff45eec9e8118f83603c986a1d84da7b7f5c6d53d98b7322d00eabee7ed69be7", 0x1000}, {&(0x7f00000014c0)="b7c5bbb25b0d6cd6fa5dc573db81909b763ca8afe63459f053c6fb4a0ccf4b9ede3742b07d1d6982903e5a23a287e928b29b41654412127b389a54119a33dc85c645cf31d8cb9c81cc190761abcc7159c947328eaced11fb340e24683a57385565d63779fe7e0abd9a81782da2a7aec41228012da15f3a2eddec8f1641f751ade489e45db9590761a4a44d9632e53e03829efad5f44a05bf176b561fbc29b334c17a8f48aa3543e695c684fed86135bfe07c1feb71dfa6859c237d8424dca0e8992d2c6fdfae11548a87158ffe6284f70109f2b9bc76410921c61f7f9dbeda65d924405f39a0259edb68f4ea1169d5f6c458237c", 0xf4}, {&(0x7f00000015c0)="0183ec8e2899d0", 0x7}, {&(0x7f0000001600)="1ff39273c63b652197da4b82af683f9cec3ecc1036782254632edcee46573bc91e16428647dcb11ea02368774514ee9b9eb3aba3da1a23823bfc74c27c672b049c847b2c710e9637d9d4fcf31aadbb7721e6b91b39146def8dbf7c7b3e8b9ef1ce4c1595e830a5b0ec6438aed56480fb4b294ceb290ce30e77d8ac5cec59c0292644304113efc01f4208bc9baf28c1764bfd9195b6b82fd21907a70665feb1e0b2148c3afdf92a20e9f7b380ff6bf0acb818454068c7bd9f15bc929ca0c5802d061139cad2ec23acf81ead605fb3068a718e34eacc9e7f490d584aae5681b18ef6920c0ed20822c78d52a0b42dc6e31eeafaf122f3d198ad747a7d1f", 0xfc}, {&(0x7f0000001700)="bbc92f2a94ee1e5c062748141694a8099fd4b98ecb90d9cd9df080f80189346466e5e6b1393d5d9be472b4500cee51bb5fa717c4fa9e67e5edddd2b167bd33ded7ad2d360cdf728541061577f31eeaba048f10a64b3b1dfc150d74bc76280e658133d441c6870f0ecbb4009bfd0cda02db9a7d3249eed8846bab377008fa7442b83efba66954ab9d22699a7a3446140c5b6a8c8843548e275a7454a2f07835ef07", 0xa1}], 0x7}, 0x40c0)
shmget(0x2, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil)
sched_setscheduler(r2, 0x0, &(0x7f0000001880)=0x7)
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000019c0)={{&(0x7f00000018c0)=""/164, 0xa4}, &(0x7f0000001980), 0x14}, 0x20)
syz_open_dev$evdev(&(0x7f0000001a00), 0x3, 0x1da337917b55d838)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000001a40))
bind$bt_hci(r0, &(0x7f0000001a80)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
gettid()
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
socket$tipc(0x1e, 0x5, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000001ac0))
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000001b00)=r1)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x4048001)
unshare(0x10010200)
bind$xdp(0xffffffffffffffff, &(0x7f0000001c40)={0x2c, 0x9, 0x0, 0x3f, r3}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001c80)=0x2, 0x4)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000001cc0)={0xc, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000001d00)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001d80)='/proc/sysvipc/msg\x00', 0x0, 0x0)
connect$unix(r5, &(0x7f0000001dc0)=@abs, 0x6e)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000005, 0x810, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r6, 0x0, &(0x7f0000001e40)=@IORING_OP_FSYNC={0x3, 0x8, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1})

3.017849371s ago: executing program 7 (id=5284):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$vim2m(&(0x7f0000000600), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0xfffffffd, 0x54485746, 0x2, @discrete={0x6, 0xe}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x701, 0xfffffffc, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x24044004}, 0x4000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0ffff00124000632f77fb80f31416e000030a94029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000700, 0x9b, 0x0, &(0x7f0000000400)="d860292d328ea69abcb01433a33ec78507001d97dd722231bdec288c116f27901936d43dd12539ff621c7235ed74916fc4ea08d192ee46afc946ac4359e753177f7f77cd646e1f2c7a09c32d40d750443e0bc902a1b293ab975e080d5b6316e2d00a174c421c8cfa5d7ec548a814ebd90c9a4b8ee7d54b41c259e34ec3aae8ec4316d891dd0b602c0328fee2541ead3b67d68cf6f1d0f473a5d23b"}, 0x50)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

2.885268351s ago: executing program 5 (id=5285):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='rcu_utilization\x00', r3, 0x0, 0x1}, 0x18)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f00000006c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @initr0, @exit]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f00000004c0)={{0x4, 0x4, 0x78, 0x7f, 'syz1\x00', 0x4}, 0x0, [0x2, 0x8000, 0x61, 0xbe2f, 0xc8, 0x5, 0xc1e7, 0x2, 0x0, 0x8c6, 0xaa, 0x9, 0x400, 0x7, 0x5, 0x5, 0x7, 0x21, 0x3, 0xda, 0x0, 0x8200, 0x2, 0x4, 0xfff, 0x9, 0x4, 0xe, 0x1e27, 0x9, 0x0, 0x8, 0xa4c, 0x9, 0xa41, 0x1000, 0x4, 0x81, 0xfb, 0xfffffffffffffffe, 0x6, 0x6, 0x8, 0xd7, 0x4, 0x9, 0x0, 0x6, 0xffffffffffffff00, 0x1, 0x8000, 0xffffffff00000000, 0x4, 0x7fffffff, 0xc, 0x6, 0x7, 0x6, 0x1, 0x5e, 0x6, 0x6, 0x4, 0x1, 0x7fffffff, 0x81, 0xfffffffffffffff6, 0x7, 0x7, 0x1000, 0x0, 0x2, 0x3ff, 0x7fff, 0x7a0, 0x4, 0x2, 0x3, 0x9, 0x6, 0x10, 0xf87b, 0xe, 0x3a1d, 0x4d69, 0x8, 0x9, 0x4, 0xd925, 0xfe, 0x484, 0x3, 0x100000001, 0x76, 0x7f, 0x400, 0x3, 0x3ff, 0x7f, 0x9, 0x2, 0x9, 0x3, 0xe, 0x5fc0, 0x3, 0x5, 0x9, 0x6, 0x200, 0xb, 0xaf, 0x9, 0x9, 0x2, 0x5, 0x1, 0x8, 0xa8, 0xfffffffffffffffd, 0x80, 0x6, 0x0, 0x80, 0xffffffff80000000, 0xffffffffc0000000, 0x6, 0x7]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x20, 0x1412, 0x1, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff)
unshare(0x28020480)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="1ab6b0a8492e874e8733056d94c4a8efa3e1848ccc883dfdea2e121a35de31ee81625f72514bdb16d5c020fd8976be04d9af793c5ff46434bb44008b119a2350c61bdf6438a7761e6e6c9f1c621f7cf81d638924c4d7db01627f76ce0c274e979fe7b8ef59a49d6b680116f851d1cbdc099b91850f26abed64672c11237553b8312d42519a36bac681667f9f49b9a952454ee75f7a473008e75392e903eb77faeb1634fc36f12befa97b3d525b022e0a0f2285b8359498676bc814d04c", 0xbd}, {&(0x7f0000000580)="4dde90108e798a716e92409bf02605f3c29196a648a9bad8f8cdf2e4fcd335b39001929b17eaa8636f2573f3f05571fd926f6bff7d32684017b16327f9e745944e5e13ba18802b9b651186bb14216c37aa4853980e659474898db9d9e3ea20b2039f939a402a5cc44924d2866e890d7805992914e51306b7d2c22473d5008198448bbac1626551d5d53f024260c2624bcee255e5b47a0f52ca4165ea3e88c1f839b291e015ff5d669c0c631850a587a52781fcc816828998d5a1d2779651a0261aac33d954ca3fbe1fd9acaf4405d1", 0xcf}, {0x0}, {&(0x7f00000008c0)="d21def538b9a3060999de5a6e45be640e62ba261962cc15f3435b4e5b80a06560edc019d43641f108ef0723509d75ebabe53d0ccdb35cee98258ea464a268a70c0c09bcad445d5ccefd78b3c5d8dc87b663ac58e306da5fb4aab1d7cb9b77053c48fe2e4961f3c510a2ac455179804a8b052243faa93e4d0997b036c587f87c517466c6835942204f999a2319bd9621aaa6b217e69735c6fed9b058f554af81f8ed43b0463c580adb4257a038cd13012ede8d33c0a859adcbff3889a889cb6d8d9cd7f9ecadf447028881beab7037db59c46e487aa99483ef5083a8d0fb25bc7ffd7a0c94bf81697181d88fca8d683cb", 0xf0}], 0x4, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x76, 0x3, 0xa, [{@rand_addr=0x64010102, 0x101}, {@multicast2, 0x81}, {@rand_addr=0x64010102, 0x7841}, {@multicast2, 0x1}, {@rand_addr=0x64010100, 0x7}, {@multicast1, 0xffffe736}, {@empty, 0xfffffff8}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x12, "dcd93b6d27c2e78f866720caf6b2c7ad"}]}, @generic={0x86, 0x7, "29b92e559a"}, @ssrr={0x89, 0x17, 0xea, [@remote, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1a}]}, @rr={0x7, 0xf, 0xa5, [@multicast2, @local, @local]}, @lsrr={0x83, 0x17, 0xeb, [@local, @local, @remote, @empty, @private=0xa010101]}, @lsrr={0x83, 0x23, 0x50, [@broadcast, @multicast1, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x63}}], 0x168}, 0x20000002)

2.814109372s ago: executing program 8 (id=5286):
keyctl$read(0xb, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x3}}, 0x4)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x2, @multicast, 'pimreg1\x00'}}, 0x1e)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

2.33932679s ago: executing program 9 (id=5287):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="120100000000c140c50f80b0000000000001090224000100000000090400000103000000092100441412d20300090581030000000000"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x0, 0x0, 0x1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, 0x41, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [], {0x14}}, 0x28}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=0x4d, 0x4)
write$binfmt_misc(r1, &(0x7f0000000300), 0x6)
r7 = syz_genetlink_get_family_id$nl80211(0x0, r2)
sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x80, r7, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x28040}, 0x4080)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)={0x40, 0x2, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.177870201s ago: executing program 3 (id=5288):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000050000000000000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x200000, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r6, 0x29, 0x3d, &(0x7f0000000240)=""/139, &(0x7f0000000000)=0x8b)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
signalfd(r5, &(0x7f0000000340)={[0x1]}, 0x8)
sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000005304000227bd7001fddbdf1129723009bedffa25cebb07000000dfe000009fe3"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x40024)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f00000000c0)=0x4, 0x12)

2.177291243s ago: executing program 8 (id=5289):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@getsa={0x1b8, 0x12, 0x200, 0x70bd2c, 0x25dfdbfc, {@in=@rand_addr=0x64010102, 0x4d4, 0x2, 0x9b}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @algo_crypt={0x99, 0x2, {{'ctr-cast6-avx\x00'}, 0x288, "07018e1ebdc8db7eeffa6d2f73312122ee67cf8c00baac47eb8be800e6be02c5cf5571c18425b2c0f59833039d9b4ba2c30b2fc26b24795a7d2e0e4674f2e15c12df71acd07c7ae7b3a0b80a2e1e8fd8e5"}}, @algo_comp={0x72, 0x3, {{'lzs\x00'}, 0x150, "693ea9c6ea910af573e49d7cdc0054587645f91b327b4543810e7394cd5713806e3fcc635a8c72579d3d"}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e20, 0x4e20, @in=@local}}, @algo_comp={0x5c, 0x3, {{'deflate\x00'}, 0xa0, "07cf00f58771ee2ee1c458f7c1c89f9280d1dbff"}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x4044040)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x104, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "32360a420fe0dabfda2900fe1c4d840f009c680f8dd6fdddb0fa5a71fb66aaad"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "fe231a30cf127d71f5591f3612134783b56faf6fac4998b4"}}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "6bc9a4b9538628f37b37ae46d03d229213b8d0ba6171b1ff001167d61cce67e44fe83c07bf37b383"}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5c}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x24048010}, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{0xf8e8, 0x800}, {0x5ac, 0xa}]})
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000580)={0x2, @pix={0xfffffffb, 0x2, 0x38414261, 0x4, 0xee76, 0xe9, 0x5, 0x27a3, 0x1, 0x8, 0x2, 0x5}})
writev(r0, &(0x7f0000001900)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="e3077deab4279cb31c7ff6f6e02f68abf39ec0f9387e762f0bb6b4b798344af646fa231bcd480335e11f2f6064d4bf17a69f3e1131f07eeb504c8946ca7c4b8f1c045374aa9ad6c24173aafd69eb423be18e92ef986b1388be", 0x59}, {&(0x7f0000001700)="db2d3ddd6cdf94e584f05e1ae4e00342122f032a6c2be118c00c3e0922b353cb334db1dee23123e49ad78796afede8078616d1dffb1d7d74bb439151053c3dd7bcbc3b697f55579af01032b6569569545ef11b82df9016cba336664fe05bd42c842ae2f8d7ba3e710a1f2b0229c8a019415735c4", 0x74}, {&(0x7f0000001780)="08ccccb0070cad26981c34f2ef67da65d8b9bd4598c94533bb4e2f69e4bcbecca1b8f6300762213d3a01480c076c43b4b32188a670db290936c8124c301952da1477b1b915ad7abc402ad38bcd2e39", 0x4f}, {&(0x7f0000001800)="351e8cdc73a0ecfd632a12d2c4589c77ff487809033e8fe154d262fd4ce3dc27814836c0f13142a650c657c1753a06b17209a37732350acd815cf8aeb20e1f0c9dfe4fbcc2dc9aa8c0a01567f9b55d67d187131b607a9d81db56cdd83446cfe4a0c61a269ec2feda7960cc604ea51c268274e65b4aac20d05dcdec2d0262421637a895548f76ae481d5a6be758eaae4bb3954bcadb43ba230ee4cb9fde13b7b4c56a4ae696863c9a5e5ef829f86cd72d09121d185042404d2d8cad427af3ba152c59eaa00e8ca6ba0c100d25b99fbda95de67cd1fa3e037d1bae6bc8b63452b5", 0xe0}], 0x5)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001980), 0x111040, 0x0)
ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f00000019c0)={'\x00', 0x101, 0x2, 0x4})
io_setup(0xc, &(0x7f0000001a40))
syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), r2)
r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001ac0)='cgroup.threads\x00', 0x2, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001b00)=<r6=>0x0)
write$cgroup_pid(r5, &(0x7f0000001b40)=r6, 0x12)
chdir(&(0x7f0000001b80)='./file0\x00')
r7 = syz_open_dev$dri(&(0x7f0000001bc0), 0x3, 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000001c00)={0x7, 0x200, 0x995})
ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x0)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000001c40))
ioctl$FICLONE(r4, 0x40049409, r4)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001c80)={0x0, 0x0, 0x4, 0x0, 0x1})
ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0106426, &(0x7f0000001d00)={0x6, &(0x7f0000001cc0)=[{}, {}, {}, {}, {<r8=>0x0}, {}]})
ioctl$DRM_IOCTL_DMA(r7, 0xc0406429, &(0x7f0000001e40)={r8, 0x3, &(0x7f0000001d40)=[0x9, 0x6, 0x1], &(0x7f0000001d80)=[0x7], 0x1, 0x3, 0xa3e9, &(0x7f0000001dc0)=[0xfffffffb, 0x80000000, 0x6], &(0x7f0000001e00)=[0x400, 0x1]})
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000001ec0)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x210, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f0000001e80), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x0, 0x5, [0x1c, 0xe, 0x40, 0x2d, 0x2, 0x4, 0x2c, 0x18, 0x30, 0xe, 0x20, 0x27, 0x5, 0x1a, 0x2b, 0x18], 0x1, 0xffff6fef}}}, {{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x0, 0x4, 0x0, 0x7, 0x2, 0x4], 0x2, 0x2}}}, @common=@addrtype={{0x30}, {0xa80, 0x64, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x5, 0x0, 0x0, 0x7], 0x1}, {0xffffffffffffffff, [0x0, 0x2, 0x4, 0x0, 0x0, 0x7], 0x4, 0x6}}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010101, 0xffffffff, 0xffffff00, 'pimreg0\x00', 'dummy0\x00', {}, {}, 0x2f, 0x3, 0x22}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x6}, {0x3, 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000002280)=0x82)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000022c0)=0x5, 0x4)
add_key(&(0x7f0000002300)='rxrpc_s\x00', &(0x7f0000002340)={'syz', 0x1}, 0x0, 0x0, 0x0)

1.890864538s ago: executing program 5 (id=5290):
r0 = syz_open_dev$media(&(0x7f0000000080), 0xe960, 0x410300)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0)=[{}, {<r1=>0x80000000}], &(0x7f0000000100)})
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r1, &(0x7f00000001c0), &(0x7f0000000200)})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300200000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4], 0x4c}}, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000c00)="3d438cfb9166a77b294815e29f236a8317292c28959d04fc6af404e9", 0x1c}], 0x1, 0x2, 0x1)

1.880572585s ago: executing program 8 (id=5291):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x112, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d080997", 0x32}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc", 0x88}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r4 = dup(0xffffffffffffffff)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000130d000000000000f4ffffff18230000", @ANYRES32=r4, @ANYBLOB="0000000005180000950000001d64d4cd"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r5, 0x1], &(0x7f0000000380)=[{0x3, 0x3, 0x5, 0xb}, {0x4, 0x4, 0xfff, 0xb}], 0x10, 0x4, @void, @value}, 0x94)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

971.037993ms ago: executing program 3 (id=5292):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kvm_mmio\x00', r1, 0xe4}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

798.056651ms ago: executing program 5 (id=5293):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
unshare(0x26020480)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0)

45.847636ms ago: executing program 8 (id=5294):
r0 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="a12b0000400301001c00128009000100626f6e64000000000c00028005000d000000000014003500626f6e17643000"/57], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20018000)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f0000"], 0x37)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x5}}, './file0\x00'})
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000001300)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x2, 0x24000084)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r4=>0x0}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r4, 0x9}, &(0x7f0000000180)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
getdents(r7, 0xffffffffffffffff, 0x5a)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r9, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r9, 0x3, {0x1, 0xff, 0x1}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x10, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r9, {0x7, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x24048080)

20.243998ms ago: executing program 3 (id=5295):
socket$inet_sctp(0x2, 0x5, 0x84)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10, 0x800)
socket(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'})
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0xffffffffffffff7a, 0xfffffffffffffffa)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
sendto$inet6(r2, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x6, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e0102030109021b0001fd0940ef09048c0001e9d51c03cc0905071708000106"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
r4 = socket(0x22, 0x2, 0x24)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14)

0s ago: executing program 5 (id=5296):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x6000, &(0x7f0000000500)={&(0x7f0000000240)=@allocspi={0x1dc, 0x16, 0x411, 0x0, 0x0, {{{@in=@broadcast, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x67}, {@in6=@empty, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x4, 0x2}, {}, {0x0, 0x0, 0xffffffff}, 0x2000}, 0x0, 0xfdfffefe}, [@sa={0xe4, 0x20, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0xa0, 0x80, 0x30}, {@in=@multicast1, 0x4d5, 0x3c}, @in=@broadcast, {0x8000000000000000, 0x0, 0xc9, 0x83d, 0x278, 0x0, 0x101, 0x1}, {0xffffffff, 0x1, 0x4, 0x5}, {0x8, 0x0, 0x7}, 0x70bd28, 0x803507, 0x2, 0x3, 0xc}}]}, 0x1dc}}, 0x0)

kernel console output (not intermixed with test programs):

:0.0: can't add hid device: -22
[ 1737.184191][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1737.200458][T21469] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[ 1737.572703][T18503] usbhid 7-1:1.0: can't add hid device: -71
[ 1737.578784][T18503] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[ 1737.643851][T18503] usb 7-1: USB disconnect, device number 73
[ 1737.724226][T22850] QAT: Stopping all acceleration devices.
[ 1738.368690][T22845] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1738.378772][T22845] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1738.387580][T22845] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1738.396431][T22845] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1738.839658][ T8956] usb 7-1: new full-speed USB device number 74 using dummy_hcd
[ 1738.906324][T22863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4788'.
[ 1739.033983][T22864] QAT: Stopping all acceleration devices.
[ 1739.117840][T22864] ip6tnl1: entered promiscuous mode
[ 1739.123336][T22864] ip6tnl1: entered allmulticast mode
[ 1739.907567][T22808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1740.160170][ T8956] usb 7-1: config 0 has an invalid interface number: 122 but max is 0
[ 1740.164939][   T24] usb 4-1: USB disconnect, device number 124
[ 1740.168485][ T8956] usb 7-1: config 0 has no interface number 0
[ 1740.168534][ T8956] usb 7-1: config 0 interface 122 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1740.260251][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1740.273695][ T8956] usb 7-1: New USB device found, idVendor=0f11, idProduct=1020, bcdDevice=90.16
[ 1740.283018][ T8956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1740.296988][ T8956] usb 7-1: Product: syz
[ 1740.315593][ T8956] usb 7-1: Manufacturer: syz
[ 1740.323903][ T8956] usb 7-1: SerialNumber: syz
[ 1741.313151][ T8956] usb 7-1: config 0 descriptor??
[ 1741.318935][T22856] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1741.329178][ T8956] ldusb 7-1:0.122: Interrupt in endpoint not found
[ 1741.488802][T22815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1741.497023][T22808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1741.595773][T22882] QAT: Stopping all acceleration devices.
[ 1741.608598][T22882] ip6tnl1: entered promiscuous mode
[ 1741.614384][T22882] ip6tnl1: entered allmulticast mode
[ 1741.921612][T18503] usb 7-1: USB disconnect, device number 74
[ 1741.948110][T22885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4793'.
[ 1741.967027][T22883] : entered promiscuous mode
[ 1741.990400][   T24] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1742.221811][   T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1742.586777][T18503] usb 7-1: new high-speed USB device number 75 using dummy_hcd
[ 1743.070108][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1743.767134][T21469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1743.839125][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1744.551720][T18503] usb 7-1: config 0 has no interfaces?
[ 1745.514821][T18503] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=a1.69
[ 1745.881988][   T24] usb 4-1: config 0 descriptor??
[ 1746.012207][T22808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1746.032531][T18503] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1746.042602][T18503] usb 7-1: Product: syz
[ 1746.046891][T18503] usb 7-1: Manufacturer: syz
[ 1746.051617][T18503] usb 7-1: SerialNumber: syz
[ 1746.059968][T18503] usb 7-1: config 0 descriptor??
[ 1746.070851][   T24] usb 4-1: can't set config #0, error -71
[ 1746.079871][   T24] usb 4-1: USB disconnect, device number 125
[ 1746.192311][T18503] usb 7-1: can't set config #0, error -71
[ 1746.211052][T18503] usb 7-1: USB disconnect, device number 75
[ 1746.394839][T22907] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4800'.
[ 1746.467399][T22907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1746.499776][T22907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1746.549496][T22913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4802'.
[ 1746.561730][T22905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1746.628300][T22905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1746.705937][T22914] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma?
[ 1746.819859][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1746.828889][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1747.046204][T22815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1747.172239][T22923] QAT: Stopping all acceleration devices.
[ 1747.692504][T22808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1748.380106][T22929] autofs: Unknown parameter '�|'
[ 1748.648601][T22932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4808'.
[ 1749.380068][T21469] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1749.514335][T22948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4816'.
[ 1749.541914][T21469] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1749.553095][T21469] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1749.567221][T21469] usb 6-1: config 0 descriptor??
[ 1749.582715][T21469] cp210x 6-1:0.0: cp210x converter detected
[ 1750.852401][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1751.028170][T21469] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1751.041913][T21469] cp210x 6-1:0.0: GPIO initialisation failed: -71
[ 1751.176322][T21469] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1751.257160][T21469] usb 6-1: USB disconnect, device number 78
[ 1751.389260][T21469] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1751.462064][ T1319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1752.869631][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1752.981592][T22960] QAT: Stopping all acceleration devices.
[ 1753.384964][T22808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.312305][T21469] cp210x 6-1:0.0: device disconnected
[ 1754.337003][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1754.579938][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1756.731657][T18503] usb 7-1: new high-speed USB device number 76 using dummy_hcd
[ 1756.941575][T18503] usb 7-1: Using ep0 maxpacket: 16
[ 1757.402222][T21469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1757.421410][T18503] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1757.440413][T18503] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1757.501770][T22997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4827'.
[ 1757.539462][T18503] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1757.593779][T18503] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1757.629064][T18503] usb 7-1: Product: syz
[ 1757.662990][T18503] usb 7-1: Manufacturer: syz
[ 1757.705045][T18503] usb 7-1: SerialNumber: syz
[ 1757.872200][ T6020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1758.129317][T18503] usb 7-1: 0:2 : does not exist
[ 1758.157451][T18503] usb 7-1: unit 6 not found!
[ 1758.169688][T14020] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1758.213337][T22995] delete_channel: no stack
[ 1758.228770][T18503] usb 7-1: USB disconnect, device number 76
[ 1758.492140][T23009] FAULT_INJECTION: forcing a failure.
[ 1758.492140][T23009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1758.615992][T23010] ip6tnl1: entered promiscuous mode
[ 1758.621836][T23010] ip6tnl1: entered allmulticast mode
[ 1759.018923][T23009] CPU: 0 UID: 0 PID: 23009 Comm: syz.0.4832 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1759.018954][T23009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1759.018966][T23009] Call Trace:
[ 1759.018975][T23009]  <TASK>
[ 1759.018984][T23009]  dump_stack_lvl+0x189/0x250
[ 1759.019019][T23009]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1759.019050][T23009]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1759.019079][T23009]  ? __pfx__printk+0x10/0x10
[ 1759.019113][T23009]  should_fail_ex+0x414/0x560
[ 1759.019152][T23009]  _copy_to_user+0x31/0xb0
[ 1759.019174][T23009]  simple_read_from_buffer+0xe1/0x170
[ 1759.019206][T23009]  proc_fail_nth_read+0x1df/0x250
[ 1759.019238][T23009]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1759.019264][T23009]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1759.019292][T23009]  ? vfs_read+0x1e5/0x980
[ 1759.019316][T23009]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1759.019346][T23009]  vfs_read+0x200/0x980
[ 1759.019374][T23009]  ? __pfx___mutex_lock+0x10/0x10
[ 1759.019404][T23009]  ? __pfx_vfs_read+0x10/0x10
[ 1759.019429][T23009]  ? __fget_files+0x2a/0x420
[ 1759.019460][T23009]  ? __fget_files+0x3a0/0x420
[ 1759.019485][T23009]  ? __fget_files+0x2a/0x420
[ 1759.019521][T23009]  ksys_read+0x145/0x250
[ 1759.019553][T23009]  ? __pfx_ksys_read+0x10/0x10
[ 1759.019573][T23009]  ? rcu_is_watching+0x15/0xb0
[ 1759.019607][T23009]  ? do_syscall_64+0xbe/0x3b0
[ 1759.019643][T23009]  do_syscall_64+0xfa/0x3b0
[ 1759.019675][T23009]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1759.019693][T23009]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1759.019713][T23009]  ? clear_bhb_loop+0x60/0xb0
[ 1759.019737][T23009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1759.019757][T23009] RIP: 0033:0x7f296078d33c
[ 1759.019774][T23009] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1759.019790][T23009] RSP: 002b:00007f2961526030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1759.019807][T23009] RAX: ffffffffffffffda RBX: 00007f29609b5fa0 RCX: 00007f296078d33c
[ 1759.019820][T23009] RDX: 000000000000000f RSI: 00007f29615260a0 RDI: 0000000000000005
[ 1759.019831][T23009] RBP: 00007f2961526090 R08: 0000000000000000 R09: 0000000000000000
[ 1759.019841][T23009] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[ 1759.019851][T23009] R13: 0000000000000000 R14: 00007f29609b5fa0 R15: 00007ffec8262a08
[ 1759.019876][T23009]  </TASK>
[ 1759.269056][T22813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1759.277688][T22813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1759.308780][T14020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1759.325173][T14020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1759.335202][T14020] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1759.349664][T14020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1759.417264][T14020] usb 6-1: config 0 descriptor??
[ 1759.429466][T14020] usbhid 6-1:0.0: can't add hid device: -22
[ 1759.436778][T14020] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[ 1760.240903][T18503] usb 6-1: USB disconnect, device number 79
[ 1760.425359][T21470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1760.618159][T16115] syz_tun (unregistering): left allmulticast mode
[ 1761.110521][ T8956] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1761.639295][ T8956] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f
[ 1761.767145][ T8956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1763.498677][T21469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1763.928515][ T8956] usb 4-1: config 0 descriptor??
[ 1764.904043][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1764.915808][T22808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1764.988238][ T8956] usb 4-1: can't set config #0, error -71
[ 1765.023716][ T8956] usb 4-1: USB disconnect, device number 126
[ 1767.529903][T21469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1768.497774][T10720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1768.513155][T10720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1768.523387][T10720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1768.548676][T10720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1768.559752][T10720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1768.863616][T23072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4853'.
[ 1768.960253][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4852'.
[ 1768.970317][ T5897] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1769.001190][T23072] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1769.008945][T23072] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1769.782217][T22813] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1769.855421][ T5897] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1769.869826][ T5897] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1769.939865][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1770.037748][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1770.049627][ T5897] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1770.060714][ T5897] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1770.082332][ T5897] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1770.101365][T23077] FAULT_INJECTION: forcing a failure.
[ 1770.101365][T23077] name failslab, interval 1, probability 0, space 0, times 0
[ 1770.102459][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1770.147350][ T5897] usb 6-1: Product: syz
[ 1770.149669][T23077] CPU: 1 UID: 0 PID: 23077 Comm: syz.3.4854 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1770.149702][T23077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1770.149718][T23077] Call Trace:
[ 1770.149728][T23077]  <TASK>
[ 1770.149739][T23077]  dump_stack_lvl+0x189/0x250
[ 1770.149780][T23077]  ? __pfx____ratelimit+0x10/0x10
[ 1770.149816][T23077]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1770.149851][T23077]  ? __pfx__printk+0x10/0x10
[ 1770.149879][T23077]  ? __pfx___might_resched+0x10/0x10
[ 1770.149912][T23077]  ? fs_reclaim_acquire+0x7d/0x100
[ 1770.149954][T23077]  should_fail_ex+0x414/0x560
[ 1770.149991][T23077]  should_failslab+0xa8/0x100
[ 1770.150025][T23077]  __kmalloc_noprof+0xcb/0x4f0
[ 1770.150051][T23077]  ? tomoyo_encode+0x28b/0x550
[ 1770.150093][T23077]  tomoyo_encode+0x28b/0x550
[ 1770.150136][T23077]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1770.150196][T23077]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1770.150230][T23077]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1770.150263][T23077]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1770.150322][T23077]  ? __lock_acquire+0xab9/0xd20
[ 1770.150376][T23077]  ? __fget_files+0x2a/0x420
[ 1770.150410][T23077]  ? __fget_files+0x2a/0x420
[ 1770.150439][T23077]  ? __fget_files+0x3a0/0x420
[ 1770.150468][T23077]  ? __fget_files+0x2a/0x420
[ 1770.150502][T23077]  security_file_ioctl+0xcb/0x2d0
[ 1770.150535][T23077]  __se_sys_ioctl+0x47/0x170
[ 1770.150563][T23077]  do_syscall_64+0xfa/0x3b0
[ 1770.150596][T23077]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1770.150628][T23077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1770.150651][T23077]  ? clear_bhb_loop+0x60/0xb0
[ 1770.150679][T23077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1770.150701][T23077] RIP: 0033:0x7f797598e929
[ 1770.150721][T23077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1770.150741][T23077] RSP: 002b:00007f797673d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1770.150767][T23077] RAX: ffffffffffffffda RBX: 00007f7975bb5fa0 RCX: 00007f797598e929
[ 1770.150784][T23077] RDX: 0000200000000000 RSI: 0000000000004b52 RDI: 0000000000000003
[ 1770.150800][T23077] RBP: 00007f797673d090 R08: 0000000000000000 R09: 0000000000000000
[ 1770.150813][T23077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1770.150828][T23077] R13: 0000000000000000 R14: 00007f7975bb5fa0 R15: 00007ffe1598fd18
[ 1770.150864][T23077]  </TASK>
[ 1770.151018][T23077] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1770.151667][ T5897] usb 6-1: Manufacturer: syz
[ 1770.402162][T23058] lo speed is unknown, defaulting to 1000
[ 1770.410958][ T5897] cdc_wdm 6-1:1.0: skipping garbage
[ 1770.416321][ T5897] cdc_wdm 6-1:1.0: skipping garbage
[ 1770.424218][ T5897] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1770.431207][ T5897] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1770.532861][T14020] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1770.581359][T21469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1770.659816][ T5837] Bluetooth: hci1: command tx timeout
[ 1770.660499][T22814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1770.675073][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1770.708847][T23058] chnl_net:caif_netlink_parms(): no params data found
[ 1770.721908][T14020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1770.751557][T14020] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1770.783826][T14020] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1770.806044][T14020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1770.833069][T14020] usb 2-1: config 0 descriptor??
[ 1770.884631][T23058] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1770.892386][T23058] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1770.900222][T23058] bridge_slave_0: entered allmulticast mode
[ 1770.908288][T23058] bridge_slave_0: entered promiscuous mode
[ 1770.917941][T23058] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1770.925616][T23058] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1770.934191][T23058] bridge_slave_1: entered allmulticast mode
[ 1770.961680][T23058] bridge_slave_1: entered promiscuous mode
[ 1771.056613][T23058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1771.127230][T23058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1772.076135][T14020] usb 2-1: language id specifier not provided by device, defaulting to English
[ 1772.079278][T23058] team0: Port device team_slave_0 added
[ 1772.310087][T14020] uclogic 0003:256C:006D.0028: failed retrieving Huion firmware version: -71
[ 1772.329696][T14020] uclogic 0003:256C:006D.0028: failed probing parameters: -71
[ 1772.359674][T14020] uclogic 0003:256C:006D.0028: probe with driver uclogic failed with error -71
[ 1772.389660][T14020] usb 2-1: USB disconnect, device number 30
[ 1772.574439][T23058] team0: Port device team_slave_1 added
[ 1772.673046][T23058] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1772.682925][T23058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1772.714171][T23058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1772.726715][T23105] delete_channel: no stack
[ 1772.731541][T23058] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1772.739749][ T5837] Bluetooth: hci1: command tx timeout
[ 1772.741011][T23058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1772.774575][T23058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1772.793605][   T30] audit: type=1800 audit(264172.744:655): pid=23113 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4862" name="file2" dev="overlay" ino=2350 res=0 errno=0
[ 1772.869425][T23058] hsr_slave_0: entered promiscuous mode
[ 1772.876401][T23058] hsr_slave_1: entered promiscuous mode
[ 1772.884173][T23058] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1772.892583][T23058] Cannot create hsr debugfs directory
[ 1772.923409][T23115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4863'.
[ 1772.932779][T23115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4863'.
[ 1773.233894][T23058] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1773.245764][T23058] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1773.256687][T23058] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1773.269991][T23058] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1773.379829][ T5897] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1773.424951][T23058] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1773.572064][ T5897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1773.626730][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1773.646543][ T5897] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1773.726980][ T5897] usb 1-1: config 1 has no interface number 1
[ 1773.787870][ T5897] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1773.926121][ T5897] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7
[ 1774.067166][T20550] usb 6-1: USB disconnect, device number 80
[ 1774.122901][ T5897] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1774.232425][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1774.319995][ T5897] usb 1-1: Product: syz
[ 1774.364111][ T5897] usb 1-1: Manufacturer: syz
[ 1774.385922][ T5897] usb 1-1: SerialNumber: syz
[ 1774.569044][T23122] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1774.599144][T23058] 8021q: adding VLAN 0 to HW filter on device team0
[ 1774.678525][T23058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1774.690075][T23058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1774.704454][T22808] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1774.711680][T22808] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1774.760732][T22808] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1774.767998][T22808] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1775.043661][ T5837] Bluetooth: hci1: command tx timeout
[ 1775.074012][ T5897] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1775.086954][ T5897] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1775.243566][T22808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1775.437677][T23058] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1775.834882][ T5897] usb 1-1: USB disconnect, device number 19
[ 1776.427333][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.436362][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1776.661780][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1777.140046][ T5837] Bluetooth: hci1: command tx timeout
[ 1777.340333][T18503] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1777.374687][T23058] veth0_vlan: entered promiscuous mode
[ 1777.412097][T23058] veth1_vlan: entered promiscuous mode
[ 1777.469635][T18503] usb 6-1: device descriptor read/64, error -71
[ 1777.557989][T23058] veth0_macvtap: entered promiscuous mode
[ 1777.607821][T23058] veth1_macvtap: entered promiscuous mode
[ 1777.696783][T23058] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1777.725599][T23058] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1777.730061][T18503] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1777.748268][T23058] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1777.792082][T23058] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1777.809218][T23058] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1777.821754][T23058] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1778.010140][T18503] usb 6-1: device descriptor read/64, error -71
[ 1778.765804][T18503] usb usb6-port1: attempt power cycle
[ 1779.068972][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1779.118101][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1779.131150][T18503] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1779.241438][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1779.275727][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1779.317259][T18503] usb 6-1: device descriptor read/8, error -71
[ 1779.719019][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1780.058350][T23184] delete_channel: no stack
[ 1780.596445][T23197] netlink: 'syz.7.4842': attribute type 16 has an invalid length.
[ 1780.630071][T23197] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4842'.
[ 1780.900103][T22814] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1781.025511][T23210] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4884'.
[ 1781.037999][T23210] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1781.112343][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4886'.
[ 1781.150200][T23209] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1781.159008][T23209] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1781.167856][T23209] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1781.176637][T23209] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1781.539773][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1781.579848][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1782.208580][T22817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1782.223445][   T30] audit: type=1326 audit(264182.174:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23226 comm="syz.3.4891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f797598e929 code=0x0
[ 1783.388301][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1784.139766][   T24] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[ 1784.571899][   T24] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1784.588576][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1784.604243][T23247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4896'.
[ 1784.611633][   T24] usb 1-1: config 0 descriptor??
[ 1784.613361][T23247] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1784.632457][   T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1784.890418][T23251] netlink: 'syz.3.4898': attribute type 3 has an invalid length.
[ 1785.216233][T23251] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4898'.
[ 1785.531156][T23261] FAULT_INJECTION: forcing a failure.
[ 1785.531156][T23261] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1785.545190][T18503] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1785.564641][T23261] CPU: 1 UID: 0 PID: 23261 Comm: syz.7.4901 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1785.564670][T23261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1785.564684][T23261] Call Trace:
[ 1785.564705][T23261]  <TASK>
[ 1785.564715][T23261]  dump_stack_lvl+0x189/0x250
[ 1785.564751][T23261]  ? __pfx____ratelimit+0x10/0x10
[ 1785.564782][T23261]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1785.564812][T23261]  ? __pfx__printk+0x10/0x10
[ 1785.564834][T23261]  ? __might_fault+0xb0/0x130
[ 1785.564870][T23261]  should_fail_ex+0x414/0x560
[ 1785.564901][T23261]  _copy_from_user+0x2d/0xb0
[ 1785.564922][T23261]  io_submit_one+0xc2/0x1310
[ 1785.564967][T23261]  ? __pfx_io_submit_one+0x10/0x10
[ 1785.564996][T23261]  ? __might_fault+0xb0/0x130
[ 1785.565032][T23261]  ? __might_fault+0xb0/0x130
[ 1785.565060][T23261]  __se_sys_io_submit+0x185/0x2f0
[ 1785.565088][T23261]  ? __pfx___se_sys_io_submit+0x10/0x10
[ 1785.565126][T23261]  ? do_syscall_64+0xbe/0x3b0
[ 1785.565161][T23261]  do_syscall_64+0xfa/0x3b0
[ 1785.565193][T23261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1785.565213][T23261]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1785.565233][T23261]  ? clear_bhb_loop+0x60/0xb0
[ 1785.565259][T23261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1785.565279][T23261] RIP: 0033:0x7f7683f8e929
[ 1785.565298][T23261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1785.565317][T23261] RSP: 002b:00007f7684d26038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1785.565339][T23261] RAX: ffffffffffffffda RBX: 00007f76841b5fa0 RCX: 00007f7683f8e929
[ 1785.565354][T23261] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007f7684d05000
[ 1785.565369][T23261] RBP: 00007f7684d26090 R08: 0000000000000000 R09: 0000000000000000
[ 1785.565381][T23261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1785.565401][T23261] R13: 0000000000000000 R14: 00007f76841b5fa0 R15: 00007ffd848c82a8
[ 1785.565433][T23261]  </TASK>
[ 1786.546308][T21469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1786.591948][T18503] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1787.052088][T22815] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1787.302143][T22815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1787.847855][   T24] gp8psk: usb in 128 operation failed.
[ 1787.856027][   T24] gp8psk: usb in 137 operation failed.
[ 1787.862130][T18503] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1787.870890][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1787.892610][T18503] usb 6-1: config 0 descriptor??
[ 1787.913262][   T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 1787.924923][T18503] cp210x 6-1:0.0: cp210x converter detected
[ 1787.943393][T22815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1788.218151][T18503] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1788.230056][   T24] usb 1-1: USB disconnect, device number 20
[ 1788.527691][T23283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4908'.
[ 1788.536845][T23283] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1788.714157][T23287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4910'.
[ 1788.740012][T23287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4910'.
[ 1789.010912][T23292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4911'.
[ 1789.036840][T23292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1789.047422][T23292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1789.494997][   T24] usb 6-1: USB disconnect, device number 85
[ 1789.520388][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1789.549017][   T24] cp210x 6-1:0.0: device disconnected
[ 1789.578742][T23299] netlink: 'syz.5.4913': attribute type 3 has an invalid length.
[ 1789.588326][T23299] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4913'.
[ 1789.624718][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1789.698671][T23298] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1789.707631][T23298] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1789.716516][T23298] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1789.725269][T23298] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1790.305361][T23301] x_tables: duplicate underflow at hook 1
[ 1790.756811][T23318] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4920'.
[ 1790.766128][T23318] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1791.099607][T18503] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1792.708881][T22808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1792.752764][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.991363][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1793.005538][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1793.014302][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1793.030096][T23328] netlink: 'syz.3.4924': attribute type 3 has an invalid length.
[ 1793.048257][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1793.060854][T22808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1793.078698][T18503] usb 8-1: Using ep0 maxpacket: 8
[ 1793.093728][T23328] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4924'.
[ 1793.160674][T18503] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1793.179699][T18503] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1793.303445][T18503] usb 8-1: Product: syz
[ 1793.307677][T18503] usb 8-1: Manufacturer: syz
[ 1793.327965][T18503] usb 8-1: SerialNumber: syz
[ 1793.792739][T22808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1793.811557][T18503] usb 8-1: config 0 descriptor??
[ 1793.907024][T23333] delete_channel: no stack
[ 1793.921854][T18503] usb 8-1: can't set config #0, error -71
[ 1793.929288][T18503] usb 8-1: USB disconnect, device number 2
[ 1795.121454][T10720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1795.135350][T10720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1795.144695][T10720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1795.160796][T10720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1795.172554][T10720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1795.639702][   T30] audit: type=1326 audit(264195.564:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23363 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797598e929 code=0x7ffc0000
[ 1795.693994][   T30] audit: type=1326 audit(264195.564:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23363 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f797598e929 code=0x7ffc0000
[ 1795.735871][   T30] audit: type=1326 audit(264195.564:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23363 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797598e929 code=0x7ffc0000
[ 1795.773517][   T30] audit: type=1326 audit(264195.564:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23363 comm="syz.3.4936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f797598e929 code=0x7ffc0000
[ 1795.899956][T21469] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 1796.101110][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1796.119064][T21469] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1796.138342][T21469] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1796.192726][T21469] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1796.243943][T21469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1796.344993][T21469] usb 1-1: config 0 descriptor??
[ 1796.453816][T21469] usbhid 1-1:0.0: can't add hid device: -22
[ 1796.464454][T21469] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[ 1796.609258][T23348] lo speed is unknown, defaulting to 1000
[ 1796.764677][T23375] netlink: 'syz.7.4939': attribute type 5 has an invalid length.
[ 1796.887596][T23348] chnl_net:caif_netlink_parms(): no params data found
[ 1797.242414][ T5837] Bluetooth: hci4: command tx timeout
[ 1798.073441][T23348] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1798.082804][T23348] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1798.133079][T23348] bridge_slave_0: entered allmulticast mode
[ 1798.141497][T23388] delete_channel: no stack
[ 1798.181294][T23348] bridge_slave_0: entered promiscuous mode
[ 1798.190511][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1798.199422][T21469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1798.208677][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1798.257134][T23348] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1798.268339][T23348] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1798.277408][T23348] bridge_slave_1: entered allmulticast mode
[ 1798.286117][T23348] bridge_slave_1: entered promiscuous mode
[ 1798.345078][T23348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1798.364476][T23348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1798.429878][T23348] team0: Port device team_slave_0 added
[ 1798.439324][T23348] team0: Port device team_slave_1 added
[ 1798.501542][T23348] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1798.508695][T23348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1798.535297][T23348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1798.557944][T23348] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1798.565379][T23348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1798.592372][T23348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1798.722285][T23348] hsr_slave_0: entered promiscuous mode
[ 1798.722938][T21469] usb 1-1: USB disconnect, device number 21
[ 1798.734178][T23348] hsr_slave_1: entered promiscuous mode
[ 1798.771000][T23348] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1798.785137][T23348] Cannot create hsr debugfs directory
[ 1798.820036][T22817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1798.828664][T22808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1799.329845][ T5897] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 1799.379945][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1799.561257][   T30] audit: type=1107 audit(264199.404:661): pid=23399 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=')r0	���%λ'
[ 1799.672028][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1799.898050][ T5837] Bluetooth: hci4: command tx timeout
[ 1799.973201][ T5897] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1799.983721][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1799.995691][ T5897] usb 6-1: config 0 descriptor??
[ 1800.003419][ T5897] cp210x 6-1:0.0: cp210x converter detected
[ 1800.289878][T23348] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1800.363586][T23348] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1800.392511][T23411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4949'.
[ 1800.416730][T23348] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1800.440347][T23348] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1800.716964][ T5897] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1801.445702][T21469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1801.446624][ T5897] cp210x 6-1:0.0: GPIO initialisation failed: -71
[ 1801.953095][ T5897] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1802.010112][ T5897] usb 6-1: USB disconnect, device number 86
[ 1802.150213][ T5837] Bluetooth: hci4: command tx timeout
[ 1802.207449][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1802.244267][ T5897] cp210x 6-1:0.0: device disconnected
[ 1802.318414][T23428] nfs: Unknown parameter ''
[ 1802.364110][T23348] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1803.324929][T23348] 8021q: adding VLAN 0 to HW filter on device team0
[ 1803.500004][T21469] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1804.526953][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.536328][ T5837] Bluetooth: hci4: command tx timeout
[ 1804.594447][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.620673][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1804.630027][T22815] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1804.991259][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1805.670804][T22815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1805.679030][T22815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1805.708418][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1805.715759][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1806.126233][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1806.133469][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1806.334499][T21469] usb 8-1: device descriptor read/all, error -71
[ 1806.424339][T23439] delete_channel: no stack
[ 1807.498047][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4960'.
[ 1807.499400][T23348] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1807.900158][T21470] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1808.670578][T21470] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1808.689736][T21470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1808.709175][T21470] usb 6-1: config 0 descriptor??
[ 1808.731786][T21470] cp210x 6-1:0.0: cp210x converter detected
[ 1808.746431][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1808.832694][T23348] veth0_vlan: entered promiscuous mode
[ 1809.010394][   T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1809.050661][T18503] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1809.163583][T23348] veth1_vlan: entered promiscuous mode
[ 1809.270748][   T24] usb 1-1: Using ep0 maxpacket: 16
[ 1809.303396][T18503] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1809.358257][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1809.428552][T18503] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1809.466306][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1809.515043][T21470] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1809.544352][T18503] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1809.587142][T21470] cp210x 6-1:0.0: GPIO initialisation failed: -71
[ 1809.617535][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1809.646744][T18503] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1809.696053][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1809.802574][   T24] usb 1-1: Product: syz
[ 1809.815979][T21470] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1809.828684][T18503] usb 8-1: config 0 descriptor??
[ 1809.852324][   T24] usb 1-1: Manufacturer: syz
[ 1809.906924][   T24] usb 1-1: SerialNumber: syz
[ 1809.960758][T21470] usb 6-1: USB disconnect, device number 87
[ 1810.039797][T18503] usbhid 8-1:0.0: can't add hid device: -22
[ 1810.135992][T21470] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1810.153346][T18503] usbhid 8-1:0.0: probe with driver usbhid failed with error -22
[ 1810.263841][T23348] veth0_macvtap: entered promiscuous mode
[ 1810.274173][T21470] cp210x 6-1:0.0: device disconnected
[ 1810.387925][   T24] usb 1-1: 0:2 : does not exist
[ 1810.487241][   T24] usb 1-1: unit 14 not found!
[ 1810.525617][T23348] veth1_macvtap: entered promiscuous mode
[ 1810.576206][T23348] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1810.610346][   T24] usb 1-1: USB disconnect, device number 22
[ 1810.615034][T23348] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1810.631102][T23348] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1810.640103][T23348] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1810.649857][T23348] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1810.658950][T23348] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1810.740793][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1810.965891][T22821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1810.976563][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1810.990677][ T6139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1811.013841][T22821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1811.021378][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1811.629801][T22808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1811.878308][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1811.917529][T23504] netlink: 'syz.5.4972': attribute type 2 has an invalid length.
[ 1811.958009][T23504] netlink: 'syz.5.4972': attribute type 1 has an invalid length.
[ 1812.200365][   T30] audit: type=1107 audit(264212.114:662): pid=23502 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=')r0	���%λ'
[ 1812.607931][T23504] netlink: 'syz.5.4972': attribute type 2 has an invalid length.
[ 1812.607977][T23504] netlink: 'syz.5.4972': attribute type 1 has an invalid length.
[ 1812.607993][T23504] netlink: 'syz.5.4972': attribute type 2 has an invalid length.
[ 1812.608008][T23504] netlink: 'syz.5.4972': attribute type 1 has an invalid length.
[ 1812.676133][T20550] usb 8-1: USB disconnect, device number 5
[ 1812.778826][T23515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4974'.
[ 1812.841920][T23508] tty tty31: ldisc open failed (-12), clearing slot 30
[ 1814.299659][   T24] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1814.522246][   T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1814.547126][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1814.611126][   T24] usb 6-1: config 0 descriptor??
[ 1814.645149][   T24] cp210x 6-1:0.0: cp210x converter detected
[ 1814.900133][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1815.280693][T23539] QAT: Stopping all acceleration devices.
[ 1815.785752][   T24] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1815.944998][   T24] cp210x 6-1:0.0: GPIO initialisation failed: -71
[ 1816.110728][T22814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1816.196179][   T24] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1816.262492][   T24] usb 6-1: USB disconnect, device number 88
[ 1816.316005][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1816.367868][   T24] cp210x 6-1:0.0: device disconnected
[ 1816.766861][T22808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1817.950041][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1818.059773][T22816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1818.392882][T23559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1818.413713][T23559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1818.560017][T14020] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1818.639797][T18503] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1818.712338][T14020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1818.748336][T14020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1818.771789][T14020] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1818.785910][T14020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1818.807018][T14020] usb 1-1: config 0 descriptor??
[ 1818.827313][T14020] usbhid 1-1:0.0: can't add hid device: -22
[ 1819.079056][T23566] FAULT_INJECTION: forcing a failure.
[ 1819.079056][T23566] name failslab, interval 1, probability 0, space 0, times 0
[ 1819.091846][T23566] CPU: 1 UID: 0 PID: 23566 Comm: syz.8.4988 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1819.091876][T23566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1819.091889][T23566] Call Trace:
[ 1819.091899][T23566]  <TASK>
[ 1819.091909][T23566]  dump_stack_lvl+0x189/0x250
[ 1819.091951][T23566]  ? __pfx____ratelimit+0x10/0x10
[ 1819.091982][T23566]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1819.092011][T23566]  ? __pfx__printk+0x10/0x10
[ 1819.092038][T23566]  ? __pfx___might_resched+0x10/0x10
[ 1819.092066][T23566]  ? fs_reclaim_acquire+0x7d/0x100
[ 1819.092100][T23566]  should_fail_ex+0x414/0x560
[ 1819.092131][T23566]  should_failslab+0xa8/0x100
[ 1819.092159][T23566]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1819.092182][T23566]  ? getname_flags+0xb8/0x540
[ 1819.092207][T23566]  ? __pfx_ksys_write+0x10/0x10
[ 1819.092234][T23566]  getname_flags+0xb8/0x540
[ 1819.092267][T23566]  __x64_sys_unlink+0x3a/0x50
[ 1819.092291][T23566]  do_syscall_64+0xfa/0x3b0
[ 1819.092323][T23566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1819.092343][T23566]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1819.092362][T23566]  ? clear_bhb_loop+0x60/0xb0
[ 1819.092387][T23566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1819.092408][T23566] RIP: 0033:0x7fad3118e929
[ 1819.092426][T23566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1819.092443][T23566] RSP: 002b:00007fad31f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 1819.092465][T23566] RAX: ffffffffffffffda RBX: 00007fad313b6160 RCX: 00007fad3118e929
[ 1819.092480][T23566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[ 1819.092492][T23566] RBP: 00007fad31f20090 R08: 0000000000000000 R09: 0000000000000000
[ 1819.092505][T23566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1819.092517][T23566] R13: 0000000000000000 R14: 00007fad313b6160 R15: 00007fff67f9f418
[ 1819.092548][T23566]  </TASK>
[ 1819.451633][T18503] usb 4-1: Using ep0 maxpacket: 16
[ 1819.458373][T14020] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[ 1819.464511][T18503] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1819.475845][T18503] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1819.484743][T18503] usb 4-1: Product: syz
[ 1819.489090][T18503] usb 4-1: Manufacturer: syz
[ 1819.494342][T18503] usb 4-1: SerialNumber: syz
[ 1819.510264][T18503] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1819.517816][T18503] r8152-cfgselector 4-1: config 0 descriptor??
[ 1819.730219][T18503] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1819.736882][T18503] r8152-cfgselector 4-1: bad CDC descriptors
[ 1819.779842][T18503] r8152-cfgselector 4-1: USB disconnect, device number 127
[ 1819.899416][T23570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4986'.
[ 1821.142129][T22817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1821.638014][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1821.657204][T14020] usb 1-1: USB disconnect, device number 23
[ 1821.709602][ T9519] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1822.022035][T23588] sctp: [Deprecated]: syz.5.4997 (pid 23588) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1822.022035][T23588] Use struct sctp_sack_info instead
[ 1822.643427][T23598] loop3: detected capacity change from 0 to 1
[ 1822.746338][T23598] Dev loop3: unable to read RDB block 1
[ 1822.752278][T23598]  loop3: unable to read partition table
[ 1822.759470][T23598] loop3: partition table beyond EOD, truncated
[ 1822.766166][T23598] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[ 1823.011208][ T9519] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1823.020890][T10720] Bluetooth: hci4: command 0x0405 tx timeout
[ 1823.039244][ T9519] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1823.061048][ T9519] usb 8-1: config 0 descriptor??
[ 1823.079902][ T9519] cp210x 8-1:0.0: cp210x converter detected
[ 1823.754137][ T9519] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1823.797490][T22816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1823.833553][T23618] FAULT_INJECTION: forcing a failure.
[ 1823.833553][T23618] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1823.847330][ T9519] cp210x 8-1:0.0: GPIO initialisation failed: -71
[ 1823.952779][ T9519] usb 8-1: cp210x converter now attached to ttyUSB0
[ 1823.959708][T23618] CPU: 1 UID: 0 PID: 23618 Comm: syz.8.5004 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1823.959764][T23618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1823.959777][T23618] Call Trace:
[ 1823.959787][T23618]  <TASK>
[ 1823.959796][T23618]  dump_stack_lvl+0x189/0x250
[ 1823.959832][T23618]  ? __pfx____ratelimit+0x10/0x10
[ 1823.959863][T23618]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1823.959904][T23618]  ? __pfx__printk+0x10/0x10
[ 1823.959936][T23618]  should_fail_ex+0x414/0x560
[ 1823.959965][T23618]  _copy_to_user+0x31/0xb0
[ 1823.960009][T23618]  simple_read_from_buffer+0xe1/0x170
[ 1823.960042][T23618]  proc_fail_nth_read+0x1df/0x250
[ 1823.960076][T23618]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1823.960109][T23618]  ? rw_verify_area+0x258/0x650
[ 1823.960130][T23618]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1823.960161][T23618]  vfs_read+0x200/0x980
[ 1823.960190][T23618]  ? __pfx___mutex_lock+0x10/0x10
[ 1823.960222][T23618]  ? __pfx_vfs_read+0x10/0x10
[ 1823.960247][T23618]  ? __fget_files+0x2a/0x420
[ 1823.960279][T23618]  ? __fget_files+0x3a0/0x420
[ 1823.960304][T23618]  ? __fget_files+0x2a/0x420
[ 1823.960341][T23618]  ksys_read+0x145/0x250
[ 1823.960367][T23618]  ? __pfx_ksys_read+0x10/0x10
[ 1823.960403][T23618]  do_syscall_64+0xfa/0x3b0
[ 1823.960435][T23618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1823.960454][T23618]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1823.960474][T23618]  ? clear_bhb_loop+0x60/0xb0
[ 1823.960500][T23618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1823.960520][T23618] RIP: 0033:0x7fad3118d33c
[ 1823.960545][T23618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1823.960562][T23618] RSP: 002b:00007fad31f20030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1823.960583][T23618] RAX: ffffffffffffffda RBX: 00007fad313b6160 RCX: 00007fad3118d33c
[ 1823.960599][T23618] RDX: 000000000000000f RSI: 00007fad31f200a0 RDI: 0000000000000004
[ 1823.960612][T23618] RBP: 00007fad31f20090 R08: 0000000000000000 R09: 0000000000000000
[ 1823.960624][T23618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1823.960637][T23618] R13: 0000000000000001 R14: 00007fad313b6160 R15: 00007fff67f9f418
[ 1823.960669][T23618]  </TASK>
[ 1824.191153][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1824.220657][ T9519] usb 8-1: USB disconnect, device number 6
[ 1824.297972][ T9519] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1824.329783][T18503] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1824.338338][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[ 1824.352957][ T9519] cp210x 8-1:0.0: device disconnected
[ 1824.469946][T18503] usb 4-1: device descriptor read/64, error -32
[ 1824.660018][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1824.769983][T18503] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1825.355255][T18503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1825.544054][T18503] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1825.559704][T18503] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1825.569029][T18503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1825.601859][T18503] usb 4-1: config 0 descriptor??
[ 1825.642918][T18503] usbhid 4-1:0.0: can't add hid device: -22
[ 1825.664670][T18503] usbhid 4-1:0.0: probe with driver usbhid failed with error -22
[ 1826.741545][T22808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.460918][T23652] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5012'.
[ 1827.576922][T23642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5005'.
[ 1827.679771][T18503] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1827.957797][T21470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1827.979651][T18503] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1828.010110][T18503] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1828.020538][T18503] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1828.145829][T18503] usb 8-1: config 0 descriptor??
[ 1828.156205][T18503] pwc: Askey VC010 type 2 USB webcam detected.
[ 1828.201383][T23660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5015'.
[ 1828.210735][T23660] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1828.261131][T22808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1828.288311][T23662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5016'.
[ 1828.329723][T20550] usb 6-1: new full-speed USB device number 89 using dummy_hcd
[ 1828.503301][T20550] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1828.516753][T20550] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1828.528385][T20550] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1828.540082][T20550] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1828.553327][T20550] usb 6-1: Product: syz
[ 1828.559931][T20550] usb 6-1: Manufacturer: syz
[ 1828.564592][T20550] usb 6-1: SerialNumber: syz
[ 1828.581041][T18503] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1828.637364][T18503] pwc: recv_control_msg error -32 req 02 val 2700
[ 1828.647791][T18503] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1828.665527][T18503] pwc: recv_control_msg error -32 req 04 val 1000
[ 1828.676749][T23647] binder: 23644:23647 ioctl c0306201 200000000340 returned -14
[ 1828.909209][T18503] pwc: recv_control_msg error -71 req 04 val 1400
[ 1828.930127][T18503] pwc: recv_control_msg error -71 req 02 val 2000
[ 1828.941158][T18503] pwc: recv_control_msg error -71 req 02 val 2100
[ 1828.970388][T18503] pwc: recv_control_msg error -71 req 04 val 1500
[ 1828.990333][T18503] pwc: recv_control_msg error -71 req 02 val 2500
[ 1829.008202][T18503] pwc: recv_control_msg error -71 req 02 val 2400
[ 1829.017243][ T9519] usb 4-1: USB disconnect, device number 3
[ 1829.039140][T18503] pwc: recv_control_msg error -71 req 02 val 2600
[ 1829.543626][T22816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1830.044707][T18503] pwc: recv_control_msg error -71 req 02 val 2900
[ 1830.052039][T18503] pwc: recv_control_msg error -71 req 02 val 2800
[ 1830.059147][T18503] pwc: recv_control_msg error -71 req 04 val 1100
[ 1830.066151][T18503] pwc: recv_control_msg error -71 req 04 val 1200
[ 1830.077846][T18503] pwc: Registered as video103.
[ 1830.085345][T18503] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input58
[ 1830.105785][T18503] usb 8-1: USB disconnect, device number 7
[ 1830.329827][ T9519] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1830.508031][T23675] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1830.516941][T23675] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1830.525706][T23675] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1830.533258][ T9519] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1830.534536][T23675] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1830.544593][ T9519] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1830.927826][ T9519] usb 4-1: config 0 descriptor??
[ 1830.980701][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1831.096780][ T9519] cp210x 4-1:0.0: cp210x converter detected
[ 1831.133159][T20550] usb 6-1: 0:2 : does not exist
[ 1831.160389][T20550] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1831.220783][T20550] usb 6-1: USB disconnect, device number 89
[ 1833.500641][T22816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1834.021613][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1834.029359][T22816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1834.152708][ T9519] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1834.177057][ T9519] cp210x 4-1:0.0: GPIO initialisation failed: -71
[ 1834.185337][T23694] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5024'.
[ 1834.195278][ T9519] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1834.213575][ T9519] usb 4-1: USB disconnect, device number 4
[ 1834.246474][ T9519] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1834.276158][ T9519] cp210x 4-1:0.0: device disconnected
[ 1834.440017][T23707] nfs: Unknown parameter ''
[ 1835.730692][T22817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1835.960105][ T9519] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1836.211707][ T9519] usb 1-1: Using ep0 maxpacket: 8
[ 1836.370574][ T9519] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1836.496922][ T9519] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1836.597471][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5032'.
[ 1836.626583][ T9519] usb 1-1: Product: syz
[ 1836.663220][ T9519] usb 1-1: Manufacturer: syz
[ 1836.693378][T23720] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1836.711506][ T9519] usb 1-1: SerialNumber: syz
[ 1836.847717][ T9519] usb 1-1: config 0 descriptor??
[ 1837.034687][ T9519] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1837.060427][T21470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1837.978893][ T9519] gspca_zc3xx: reg_w_i err -110
[ 1839.092661][T14571] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1839.151932][T22821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1839.275436][ T9519] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110
[ 1839.897534][T14571] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1840.091930][T20550] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1840.212726][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1840.220970][ T8956] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1840.395473][T14571] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1840.539981][ T8956] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1840.557110][ T8956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1840.671567][T20550] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1840.686196][T20550] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1840.702498][ T8956] usb 4-1: config 0 descriptor??
[ 1840.707842][T20550] usb 9-1: Product: syz
[ 1840.721791][ T8956] cp210x 4-1:0.0: cp210x converter detected
[ 1840.745466][T20550] usb 9-1: Manufacturer: syz
[ 1840.756708][T20550] usb 9-1: SerialNumber: syz
[ 1840.821223][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1840.847282][T14571] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1841.551489][ T8956] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1841.559332][ T8956] cp210x 4-1:0.0: GPIO initialisation failed: -71
[ 1841.963560][ T8956] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1842.000357][ T8956] usb 4-1: USB disconnect, device number 5
[ 1842.040545][ T8956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1842.057252][ T8956] cp210x 4-1:0.0: device disconnected
[ 1842.118405][T23748] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5043'.
[ 1842.284564][ T5897] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1842.364439][T14571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1842.373981][T14571] bond_slave_0: left promiscuous mode
[ 1842.384723][T14571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1842.393616][T20550] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 1842.400748][T20550] cdc_ncm 9-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 1842.408853][T14571] bond_slave_1: left promiscuous mode
[ 1842.414821][T20550] cdc_ncm 9-1:1.0: setting rx_max = 2048
[ 1842.432373][T14571] bond0 (unregistering): Released all slaves
[ 1842.449591][ T5897] usb 6-1: Using ep0 maxpacket: 8
[ 1842.456220][T14571] bond1 (unregistering): Released all slaves
[ 1842.462563][ T5897] usb 6-1: config 0 has an invalid interface number: 234 but max is 0
[ 1842.482503][ T5897] usb 6-1: config 0 has no interface number 0
[ 1842.493085][ T5897] usb 6-1: config 0 interface 234 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1842.506498][ T5897] usb 6-1: config 0 interface 234 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[ 1842.553943][ T5897] usb 6-1: config 0 interface 234 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1842.593833][ T5897] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice= d.5e
[ 1842.603370][T20550] cdc_ncm 9-1:1.0: setting tx_max = 56
[ 1842.619547][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1842.643975][T20550] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 1842.659193][ T5897] usb 6-1: Product: syz
[ 1842.663850][ T5897] usb 6-1: Manufacturer: syz
[ 1842.668483][ T5897] usb 6-1: SerialNumber: syz
[ 1842.676750][T14571] IPVS: stopping master sync thread 16643 ...
[ 1842.710856][T20550] usb 9-1: USB disconnect, device number 2
[ 1842.739910][T20550] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP)
[ 1842.765605][T23757] nfs: Unknown parameter ''
[ 1843.297418][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1843.306756][   T30] audit: type=1107 audit(264243.174:663): pid=23754 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=')r0	���%λ'
[ 1843.627915][ T5897] usb 6-1: config 0 descriptor??
[ 1845.778955][ T1319] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1845.780730][ T6139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1845.839948][   T24] usb 6-1: USB disconnect, device number 90
[ 1845.992948][T22817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1846.861973][   T30] audit: type=1107 audit(264247.753:664): pid=23763 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=')r0	���%λ'
[ 1847.181056][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1847.577722][T23778] FAULT_INJECTION: forcing a failure.
[ 1847.577722][T23778] name failslab, interval 1, probability 0, space 0, times 0
[ 1847.612219][T23778] CPU: 0 UID: 0 PID: 23778 Comm: syz.7.5052 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1847.612249][T23778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1847.612261][T23778] Call Trace:
[ 1847.612270][T23778]  <TASK>
[ 1847.612278][T23778]  dump_stack_lvl+0x189/0x250
[ 1847.612311][T23778]  ? __pfx____ratelimit+0x10/0x10
[ 1847.612339][T23778]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1847.612367][T23778]  ? __pfx__printk+0x10/0x10
[ 1847.612392][T23778]  ? __pfx___might_resched+0x10/0x10
[ 1847.612419][T23778]  ? fs_reclaim_acquire+0x7d/0x100
[ 1847.612450][T23778]  should_fail_ex+0x414/0x560
[ 1847.612479][T23778]  should_failslab+0xa8/0x100
[ 1847.612505][T23778]  __kmalloc_noprof+0xcb/0x4f0
[ 1847.612533][T23778]  ? fuse_direct_io+0xa12/0x2a70
[ 1847.612558][T23778]  fuse_direct_io+0xa12/0x2a70
[ 1847.612612][T23778]  ? __pfx_fuse_direct_io+0x10/0x10
[ 1847.612633][T23778]  ? __kasan_kmalloc+0x93/0xb0
[ 1847.612663][T23778]  ? __raw_spin_lock_init+0x45/0x100
[ 1847.612687][T23778]  fuse_direct_IO+0x8a8/0x1210
[ 1847.612738][T23778]  ? __pfx_fuse_direct_IO+0x10/0x10
[ 1847.612758][T23778]  ? file_remove_privs_flags+0x483/0x5f0
[ 1847.612815][T23778]  ? generic_write_checks_count+0x43e/0x540
[ 1847.612845][T23778]  generic_file_direct_write+0x1d8/0x3e0
[ 1847.612879][T23778]  fuse_file_write_iter+0xa93/0x10a0
[ 1847.612907][T23778]  ? __pfx_fuse_file_write_iter+0x10/0x10
[ 1847.612928][T23778]  ? __lock_acquire+0xab9/0xd20
[ 1847.612972][T23778]  ? aio_write+0x4c4/0x7a0
[ 1847.613002][T23778]  aio_write+0x535/0x7a0
[ 1847.613034][T23778]  ? __pfx_aio_write+0x10/0x10
[ 1847.613073][T23778]  ? __might_fault+0xb0/0x130
[ 1847.613115][T23778]  io_submit_one+0x78b/0x1310
[ 1847.613175][T23778]  ? __pfx_io_submit_one+0x10/0x10
[ 1847.613204][T23778]  ? __might_fault+0xb0/0x130
[ 1847.613241][T23778]  ? __might_fault+0xb0/0x130
[ 1847.613268][T23778]  __se_sys_io_submit+0x185/0x2f0
[ 1847.613297][T23778]  ? __pfx___se_sys_io_submit+0x10/0x10
[ 1847.613319][T23778]  ? ksys_write+0x22a/0x250
[ 1847.613354][T23778]  ? do_syscall_64+0xbe/0x3b0
[ 1847.613389][T23778]  do_syscall_64+0xfa/0x3b0
[ 1847.613417][T23778]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1847.613446][T23778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1847.613467][T23778]  ? clear_bhb_loop+0x60/0xb0
[ 1847.613492][T23778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1847.613512][T23778] RIP: 0033:0x7f7683f8e929
[ 1847.613537][T23778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1847.613555][T23778] RSP: 002b:00007f7684d26038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[ 1847.613577][T23778] RAX: ffffffffffffffda RBX: 00007f76841b5fa0 RCX: 00007f7683f8e929
[ 1847.613592][T23778] RDX: 0000200000000700 RSI: 0000000000000001 RDI: 00007f7684cfd000
[ 1847.613605][T23778] RBP: 00007f7684d26090 R08: 0000000000000000 R09: 0000000000000000
[ 1847.613617][T23778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1847.613629][T23778] R13: 0000000000000000 R14: 00007f76841b5fa0 R15: 00007ffd848c82a8
[ 1847.613661][T23778]  </TASK>
[ 1847.749850][T23783] loop2: detected capacity change from 0 to 7
[ 1848.071086][T23783] Dev loop2: unable to read RDB block 7
[ 1848.090236][T23783]  loop2: AHDI p2 p3
[ 1848.097380][T14571] hsr_slave_0: left promiscuous mode
[ 1848.117290][T23783] loop2: partition table partially beyond EOD, truncated
[ 1848.129685][T14571] hsr_slave_1: left promiscuous mode
[ 1848.144945][T14571] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1848.152065][T23783] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1848.184958][T14571] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1848.238679][T14571] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1848.268000][T14571] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1848.398547][T14571] veth1_macvtap: left promiscuous mode
[ 1848.440464][T14571] veth1_vlan: left promiscuous mode
[ 1848.445822][T14571] veth0_vlan: left promiscuous mode
[ 1848.874119][T23799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5057'.
[ 1849.928933][T23802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5059'.
[ 1849.950055][T23802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5059'.
[ 1850.248276][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1850.258982][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1850.261212][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1850.284290][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1850.303944][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1850.315176][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1850.348556][T14571] team0 (unregistering): Port device team_slave_0 removed
[ 1851.320982][T22814] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1851.351174][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1851.510321][   T24] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 1852.590809][ T5837] Bluetooth: hci6: command tx timeout
[ 1852.636458][   T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1852.647277][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1852.733773][   T24] usb 6-1: config 0 descriptor??
[ 1852.771311][   T24] cp210x 6-1:0.0: cp210x converter detected
[ 1852.908918][T23804] lo speed is unknown, defaulting to 1000
[ 1853.098961][T23829] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5067'.
[ 1853.108584][T23826] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5066'.
[ 1853.153899][T23826] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1853.182537][   T24] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1853.190885][   T24] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1853.235582][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.302848][T21470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1855.111245][T23829] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1855.120883][T23829] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1855.149377][T10720] Bluetooth: hci6: command tx timeout
[ 1855.168806][   T24] cp210x 6-1:0.0: GPIO initialisation failed: -71
[ 1855.196584][   T24] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1855.478556][T23804] chnl_net:caif_netlink_parms(): no params data found
[ 1855.514896][T14571] IPVS: stop unused estimator thread 0...
[ 1855.911540][T23804] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1855.918773][T23804] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1856.349823][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1856.503493][T23855] delete_channel: no stack
[ 1856.508792][T23804] bridge_slave_0: entered allmulticast mode
[ 1856.516377][T23804] bridge_slave_0: entered promiscuous mode
[ 1856.581879][T23845] xfrm0: entered allmulticast mode
[ 1856.605351][T23853] veth0_vlan: entered allmulticast mode
[ 1856.662849][T23804] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1856.682623][T23804] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1856.703245][T23804] bridge_slave_1: entered allmulticast mode
[ 1856.720796][T23804] bridge_slave_1: entered promiscuous mode
[ 1856.730615][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1856.803091][T23804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1856.842073][T23804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1856.942211][T23804] team0: Port device team_slave_0 added
[ 1856.968278][T23804] team0: Port device team_slave_1 added
[ 1857.038386][T23804] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1857.049335][T23804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1857.081019][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1857.097602][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1857.113396][T23804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1857.127410][T23804] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1857.138558][T23804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1857.171502][T23804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1857.223068][T10720] Bluetooth: hci6: command tx timeout
[ 1857.241718][T23804] hsr_slave_0: entered promiscuous mode
[ 1857.248120][T23804] hsr_slave_1: entered promiscuous mode
[ 1857.254533][T23804] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1857.262152][T23804] Cannot create hsr debugfs directory
[ 1857.449411][T23804] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1857.467910][T23804] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1857.485328][T23804] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1857.503048][T23804] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1857.510384][   T24] usb 6-1: USB disconnect, device number 91
[ 1858.524225][T23804] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1858.587163][T23804] 8021q: adding VLAN 0 to HW filter on device team0
[ 1858.616311][T23877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5077'.
[ 1858.628188][T23877] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1858.640582][T14571] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1858.647738][T14571] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1858.708504][T14571] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1858.715701][T14571] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1858.799178][T23804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1859.009726][ T5915] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1859.037130][T23804] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1859.173000][ T5915] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1859.196952][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1859.226859][ T5915] usb 4-1: Product: syz
[ 1859.241865][ T5915] usb 4-1: Manufacturer: syz
[ 1859.246496][ T5915] usb 4-1: SerialNumber: syz
[ 1859.275759][ T5915] usb 4-1: config 0 descriptor??
[ 1859.292215][ T5915] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1859.299824][T10720] Bluetooth: hci6: command tx timeout
[ 1859.455757][T23804] veth0_vlan: entered promiscuous mode
[ 1859.476468][T23804] veth1_vlan: entered promiscuous mode
[ 1859.523656][T23804] veth0_macvtap: entered promiscuous mode
[ 1859.539407][T23804] veth1_macvtap: entered promiscuous mode
[ 1859.573928][T23804] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1859.589263][T23804] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1859.607208][T23804] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1859.619333][T23804] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1859.645485][T23804] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1859.662018][T23804] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1859.800407][T22808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1859.817890][T22808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1859.856539][T22808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1859.882199][T22808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1860.034857][T23891] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5058'.
[ 1860.057936][T21470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1860.218291][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1860.247159][   T24] cp210x 6-1:0.0: device disconnected
[ 1860.599767][   T24] usb 6-1: new full-speed USB device number 92 using dummy_hcd
[ 1860.690731][ T5915] gspca_sunplus: reg_r err -71
[ 1860.696599][ T5915] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[ 1860.712925][ T5915] usb 4-1: USB disconnect, device number 6
[ 1860.771954][   T24] usb 6-1: config 150 has an invalid interface number: 204 but max is 1
[ 1860.780648][   T24] usb 6-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[ 1860.791260][   T24] usb 6-1: config 150 has 1 interface, different from the descriptor's value: 2
[ 1860.801006][   T24] usb 6-1: config 150 has no interface number 0
[ 1860.807636][   T24] usb 6-1: config 150 interface 204 has no altsetting 0
[ 1860.856720][   T24] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[ 1860.866270][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1860.874713][   T24] usb 6-1: Product: syz
[ 1860.879117][   T24] usb 6-1: Manufacturer: syz
[ 1860.883995][   T24] usb 6-1: SerialNumber: syz
[ 1860.906508][T18503] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1861.072103][T18503] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1861.081873][T18503] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1861.113328][T18503] usb 9-1: config 0 descriptor??
[ 1861.130846][T18503] cp210x 9-1:0.0: cp210x converter detected
[ 1861.239081][   T24] xr_serial 6-1:150.204: skipping garbage
[ 1861.255847][   T24] usb 6-1: USB disconnect, device number 92
[ 1861.348600][T23903] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5083'.
[ 1861.602846][T18503] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1861.613753][T18503] cp210x 9-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1861.622834][T18503] cp210x 9-1:0.0: GPIO initialisation failed: -71
[ 1861.728561][T18503] usb 9-1: cp210x converter now attached to ttyUSB0
[ 1861.982250][T18503] usb 9-1: USB disconnect, device number 3
[ 1862.077865][T18503] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1862.112168][T18503] cp210x 9-1:0.0: device disconnected
[ 1862.191377][T22816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1862.344414][T23913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5087'.
[ 1862.482044][T23918] netlink: 116 bytes leftover after parsing attributes in process `syz.8.5088'.
[ 1863.060232][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1863.691582][T22814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1863.755110][T23905] delete_channel: no stack
[ 1863.976486][T23927] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5092'.
[ 1863.993252][T23927] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1864.001017][T23927] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1864.081305][ T5915] usb 6-1: new full-speed USB device number 93 using dummy_hcd
[ 1864.251405][ T5915] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1864.290387][ T5915] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1864.301641][ T5915] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1864.318584][ T5915] usb 6-1: config 1 has no interface number 1
[ 1864.325043][ T5915] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1864.340381][ T5915] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 139, setting to 64
[ 1864.411400][ T5915] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1864.439643][ T8956] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1864.453244][T23935] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5094'.
[ 1864.480466][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1864.482842][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5094'.
[ 1864.514221][T23935] netlink: 31 bytes leftover after parsing attributes in process `syz.9.5094'.
[ 1864.523644][ T5915] usb 6-1: Product: syz
[ 1864.531276][T23935] netlink: 'syz.9.5094': attribute type 2 has an invalid length.
[ 1864.546211][T23935] netlink: 31 bytes leftover after parsing attributes in process `syz.9.5094'.
[ 1864.555589][ T5915] usb 6-1: Manufacturer: syz
[ 1864.583669][ T5915] usb 6-1: SerialNumber: syz
[ 1864.646609][ T8956] usb 8-1: Using ep0 maxpacket: 32
[ 1864.679065][ T8956] usb 8-1: no configurations
[ 1864.707364][ T8956] usb 8-1: can't read configurations, error -22
[ 1864.869760][ T8956] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1864.929242][ T5915] usb 6-1: USB disconnect, device number 93
[ 1865.070215][ T8956] usb 8-1: Using ep0 maxpacket: 32
[ 1865.077781][ T8956] usb 8-1: no configurations
[ 1865.085864][ T8956] usb 8-1: can't read configurations, error -22
[ 1865.101024][ T8956] usb usb8-port1: attempt power cycle
[ 1865.191542][T23943] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1865.384351][T22814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1865.469625][ T8956] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1865.510340][ T8956] usb 8-1: Using ep0 maxpacket: 32
[ 1865.522990][ T8956] usb 8-1: no configurations
[ 1865.535585][ T8956] usb 8-1: can't read configurations, error -22
[ 1865.819592][ T8956] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1866.055312][   T30] audit: type=1107 audit(264267.968:665): pid=23950 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=')r0	���%λ'
[ 1866.426610][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1866.480404][ T8956] usb 8-1: Using ep0 maxpacket: 32
[ 1866.488887][ T8956] usb 8-1: no configurations
[ 1866.497669][ T8956] usb 8-1: can't read configurations, error -22
[ 1866.511236][ T8956] usb usb8-port1: unable to enumerate USB device
[ 1867.019845][ T8956] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1867.345729][   T30] audit: type=1107 audit(264269.258:666): pid=23955 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=')r0	���%λ'
[ 1867.831327][ T8956] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1867.851920][ T8956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1867.891345][ T8956] usb 4-1: config 0 descriptor??
[ 1867.911238][ T8956] cp210x 4-1:0.0: cp210x converter detected
[ 1867.940628][T22816] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1868.893361][T23974] xfrm0: entered allmulticast mode
[ 1868.911350][T23974] veth0_vlan: entered allmulticast mode
[ 1869.728491][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1870.734629][T22815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1870.921306][ T8956] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71
[ 1870.929203][ T8956] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1870.991824][ T8956] cp210x 4-1:0.0: GPIO initialisation failed: -71
[ 1871.034283][ T8956] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1871.151714][ T8956] usb 4-1: USB disconnect, device number 7
[ 1871.540235][ T8956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1871.565712][ T8956] cp210x 4-1:0.0: device disconnected
[ 1871.650752][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1874.215058][T22815] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1874.386485][T24006] loop2: detected capacity change from 0 to 7
[ 1874.411050][T24006] Dev loop2: unable to read RDB block 7
[ 1874.422603][T24006]  loop2: AHDI p2 p3
[ 1874.426625][T24006] loop2: partition table partially beyond EOD, truncated
[ 1874.453381][T24006] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1874.818029][T18503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1874.993701][T22815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1875.460685][ T8956] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1876.151923][ T8956] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1876.184191][ T8956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1876.220903][ T8956] usb 6-1: config 0 descriptor??
[ 1876.233349][ T8956] cp210x 6-1:0.0: cp210x converter detected
[ 1876.262096][T19426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1876.282611][T24010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1876.685271][ T8956] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1876.744393][ T8956] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1876.776609][ T8956] cp210x 6-1:0.0: GPIO initialisation failed: -71
[ 1877.041321][ T8956] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1877.052106][ T8956] usb 6-1: USB disconnect, device number 94
[ 1877.070700][ T8956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1877.113506][T14020] IPVS: starting estimator thread 0...
[ 1877.140520][ T8956] cp210x 6-1:0.0: device disconnected
[ 1877.422966][T24048] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1877.692455][ T5837] Bluetooth: hci6: command 0x0405 tx timeout
[ 1877.869888][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1879.188889][T24068] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5132'.
[ 1879.300003][T22817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1879.480581][   T30] audit: type=1326 audit(264281.428:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa63f8e929 code=0x7ffc0000
[ 1879.523970][   T30] audit: type=1326 audit(264281.428:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa63f8e929 code=0x7ffc0000
[ 1879.605926][   T30] audit: type=1326 audit(264281.428:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7ffa63f8e929 code=0x7ffc0000
[ 1879.628208][   T30] audit: type=1326 audit(264281.428:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa63f8e929 code=0x7ffc0000
[ 1879.653032][   T30] audit: type=1326 audit(264281.428:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa63f8e929 code=0x7ffc0000
[ 1879.684187][T24077] kernel read not supported for file /file1 (pid: 24077 comm: syz.3.5135)
[ 1879.715109][   T30] audit: type=1326 audit(264281.428:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa63f8e929 code=0x7ffc0000
[ 1879.739079][   T30] audit: type=1326 audit(264281.428:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa63f8e929 code=0x7ffc0000
[ 1879.814367][   T30] audit: type=1326 audit(264281.428:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa63f8e929 code=0x7ffc0000
[ 1879.869632][   T30] audit: type=1326 audit(264281.428:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa63f8e929 code=0x7ffc0000
[ 1879.970415][   T30] audit: type=1326 audit(264281.428:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24075 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa63f8e929 code=0x7ffc0000
[ 1881.405872][T24096] FAULT_INJECTION: forcing a failure.
[ 1881.405872][T24096] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1881.419139][T24096] CPU: 0 UID: 0 PID: 24096 Comm: syz.3.5142 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1881.419166][T24096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1881.419178][T24096] Call Trace:
[ 1881.419186][T24096]  <TASK>
[ 1881.419194][T24096]  dump_stack_lvl+0x189/0x250
[ 1881.419226][T24096]  ? __pfx____ratelimit+0x10/0x10
[ 1881.419253][T24096]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1881.419280][T24096]  ? __pfx__printk+0x10/0x10
[ 1881.419311][T24096]  should_fail_ex+0x414/0x560
[ 1881.419338][T24096]  _copy_from_user+0x2d/0xb0
[ 1881.419358][T24096]  copy_from_sockptr_offset+0x66/0xa0
[ 1881.419384][T24096]  do_ip6t_set_ctl+0x8b7/0xce0
[ 1881.419414][T24096]  ? rcu_is_watching+0x15/0xb0
[ 1881.419441][T24096]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[ 1881.419496][T24096]  ? __pfx___mutex_lock+0x10/0x10
[ 1881.419542][T24096]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1881.419574][T24096]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 1881.419604][T24096]  ? vfs_write+0x8d8/0xa90
[ 1881.419631][T24096]  nf_setsockopt+0x26c/0x290
[ 1881.419660][T24096]  rawv6_setsockopt+0x23b/0x5b0
[ 1881.419684][T24096]  ? __lock_acquire+0xab9/0xd20
[ 1881.419710][T24096]  ? __pfx_rawv6_setsockopt+0x10/0x10
[ 1881.419738][T24096]  ? sock_common_setsockopt+0x36/0xc0
[ 1881.419757][T24096]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1881.419776][T24096]  do_sock_setsockopt+0x25a/0x3e0
[ 1881.419801][T24096]  ? __pfx_do_sock_setsockopt+0x10/0x10
[ 1881.419827][T24096]  ? __fget_files+0x2a/0x420
[ 1881.419860][T24096]  __x64_sys_setsockopt+0x18b/0x220
[ 1881.419888][T24096]  do_syscall_64+0xfa/0x3b0
[ 1881.419914][T24096]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1881.419939][T24096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1881.419957][T24096]  ? clear_bhb_loop+0x60/0xb0
[ 1881.419979][T24096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1881.419997][T24096] RIP: 0033:0x7f797598e929
[ 1881.420013][T24096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1881.420035][T24096] RSP: 002b:00007f797673d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1881.420056][T24096] RAX: ffffffffffffffda RBX: 00007f7975bb5fa0 RCX: 00007f797598e929
[ 1881.420071][T24096] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[ 1881.420082][T24096] RBP: 00007f797673d090 R08: 0000000000000490 R09: 0000000000000000
[ 1881.420094][T24096] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001
[ 1881.420106][T24096] R13: 0000000000000000 R14: 00007f7975bb5fa0 R15: 00007ffe1598fd18
[ 1881.420135][T24096]  </TASK>
[ 1881.430556][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1882.663425][T22813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1882.715109][T19426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1883.263125][T24113] netlink: 'syz.8.5145': attribute type 9 has an invalid length.
[ 1883.920376][T24121] overlayfs: failed to resolve './file0': -2
[ 1884.071627][T24123] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6)
[ 1884.078178][T24123] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1884.181891][T24127] libceph: resolve '4..' (ret=-3): failed
[ 1884.208816][T24127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5150'.
[ 1884.211317][T24123] vhci_hcd vhci_hcd.0: Device attached
[ 1884.305771][T24116] tipc: Started in network mode
[ 1884.313279][T24116] tipc: Node identity ffffa848, cluster identity 4711
[ 1884.328041][T24116] tipc: Node number set to 4294944840
[ 1884.350959][T24124] vhci_hcd: connection closed
[ 1884.351622][T19426] vhci_hcd: stop threads
[ 1884.370640][T19426] vhci_hcd: release socket
[ 1884.375299][T19426] vhci_hcd: disconnect device
[ 1884.499803][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1884.525724][T24135] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5152'.
[ 1886.318307][T24155] QAT: Stopping all acceleration devices.
[ 1887.211384][   T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[ 1887.916617][T19426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1887.929323][T22808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1887.987093][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1888.068793][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[ 1888.099279][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[ 1888.115079][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[ 1888.145929][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1888.169015][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1888.259015][   T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[ 1888.276482][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1888.284989][   T24] usb 4-1: Product: syz
[ 1888.289309][   T24] usb 4-1: Manufacturer: syz
[ 1888.300953][   T24] usb 4-1: SerialNumber: syz
[ 1888.320740][   T24] usb 4-1: config 0 descriptor??
[ 1888.334185][   T24] xbox_remote_probe: endpoint_in message size==0?
[ 1888.834568][T24170] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5164'.
[ 1888.979764][T24029] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1889.110978][T20550] usb 4-1: USB disconnect, device number 8
[ 1889.131508][T24029] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1889.185476][T24029] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1889.230575][ T8956] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1889.238156][T24029] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1889.264260][T24029] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1889.275247][T24029] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1889.285527][T24029] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1889.296473][T24029] usb 10-1: config 0 descriptor??
[ 1889.495275][ T8956] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 1889.509747][ T8956] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1889.529960][T24029] hdpvr 10-1:0.0: firmware version 0x0 dated 
[ 1889.539821][T20550] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1889.547529][ T8956] usb 9-1: Product: syz
[ 1889.557708][T24029] hdpvr 10-1:0.0: untested firmware, the driver might not work.
[ 1889.565449][ T8956] usb 9-1: Manufacturer: syz
[ 1889.580066][ T8956] usb 9-1: SerialNumber: syz
[ 1889.587826][ T8956] usb 9-1: config 0 descriptor??
[ 1889.712329][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1889.756082][T20550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1889.805090][T20550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1889.826838][T24029] hdpvr 10-1:0.0: device init failed
[ 1889.869762][T24029] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12
[ 1889.879816][T20550] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1889.919912][T24029] usb 10-1: USB disconnect, device number 2
[ 1889.933782][ T8956] usb 9-1: f81604_read: reg: 105 failed: -EPROTO
[ 1889.940612][T20550] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1889.973745][ T8956] f81604 9-1:0.0: Setting termination of CH#0 failed: -EPROTO
[ 1889.993412][T20550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1890.058212][ T8956] f81604 9-1:0.0: probe with driver f81604 failed with error -71
[ 1890.148817][T20550] usb 4-1: config 0 descriptor??
[ 1890.231504][ T8956] usb 9-1: USB disconnect, device number 4
[ 1890.440382][T24194] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5173'.
[ 1890.674630][T20550] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving
[ 1890.722668][T20550] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1890.874544][T20550] usb 4-1: USB disconnect, device number 9
[ 1891.142847][T10720] Bluetooth: hci1: command 0x0406 tx timeout
[ 1891.219692][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1892.450382][T24201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5175'.
[ 1893.503332][T24211] netem: incorrect ge model size
[ 1893.512093][T24211] netem: change failed
[ 1893.540967][T22817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1893.549219][T22817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1894.348241][T24225] xfrm0: entered allmulticast mode
[ 1894.383159][T24225] veth0_vlan: entered allmulticast mode
[ 1894.951334][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1894.970852][T24204] delete_channel: no stack
[ 1896.091437][T22814] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1898.023895][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1898.261450][T24257] 9pnet: p9_errstr2errno: server reported unknown error �@
[ 1898.465261][   T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1898.494845][T24261] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5194'.
[ 1898.618889][T24262] openvswitch: netlink: Message has 24 unknown bytes.
[ 1898.626512][T24262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1898.721664][T22808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1899.312188][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1899.419231][   T24] usb 10-1: Using ep0 maxpacket: 8
[ 1899.454138][   T24] usb 10-1: config 0 has an invalid interface number: 186 but max is 0
[ 1899.485408][   T24] usb 10-1: config 0 has no interface number 0
[ 1899.513375][   T24] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1899.545392][   T24] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1899.758213][   T24] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1899.946883][   T24] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1899.974366][   T24] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1899.994412][   T24] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1900.004076][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1900.012767][   T24] usb 10-1: Product: syz
[ 1900.105976][   T24] usb 10-1: Manufacturer: syz
[ 1900.110874][   T24] usb 10-1: SerialNumber: syz
[ 1900.122027][   T24] usb 10-1: config 0 descriptor??
[ 1900.360580][   T24] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[ 1900.555635][   T24] usb 10-1: USB disconnect, device number 3
[ 1901.520271][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1902.442302][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1904.579729][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1905.060055][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1905.077677][T22815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1905.161519][T24297] netlink: 'syz.7.5208': attribute type 2 has an invalid length.
[ 1905.164991][ T8956] libceph: connect (1)[c::]:6789 error -101
[ 1905.169361][T24297] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5208'.
[ 1905.191129][ T8956] libceph: mon0 (1)[c::]:6789 connect error
[ 1905.200618][T24296] ceph: No mds server is up or the cluster is laggy
[ 1905.788224][T24312] QAT: Stopping all acceleration devices.
[ 1905.799625][ T8956] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1905.989637][ T8956] usb 10-1: Using ep0 maxpacket: 16
[ 1906.001767][ T8956] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1906.023147][ T8956] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1906.045365][ T8956] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1906.070847][ T8956] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1906.078983][ T8956] usb 10-1: Product: syz
[ 1906.088944][ T8956] usb 10-1: Manufacturer: syz
[ 1906.105571][ T8956] usb 10-1: SerialNumber: syz
[ 1906.350327][ T8956] usb 10-1: 0:2 : does not exist
[ 1906.388383][ T8956] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 1907.141653][ T8956] usb 10-1: USB disconnect, device number 4
[ 1907.620239][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1909.658919][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1910.229637][ T9519] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1910.405724][T24345] FAULT_INJECTION: forcing a failure.
[ 1910.405724][T24345] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1910.422477][T24345] CPU: 1 UID: 0 PID: 24345 Comm: syz.9.5222 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1910.422499][T24345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1910.422509][T24345] Call Trace:
[ 1910.422516][T24345]  <TASK>
[ 1910.422523][T24345]  dump_stack_lvl+0x189/0x250
[ 1910.422549][T24345]  ? __pfx____ratelimit+0x10/0x10
[ 1910.422571][T24345]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1910.422593][T24345]  ? __pfx__printk+0x10/0x10
[ 1910.422617][T24345]  should_fail_ex+0x414/0x560
[ 1910.422640][T24345]  _copy_to_user+0x31/0xb0
[ 1910.422656][T24345]  simple_read_from_buffer+0xe1/0x170
[ 1910.422679][T24345]  proc_fail_nth_read+0x1df/0x250
[ 1910.422702][T24345]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1910.422726][T24345]  ? rw_verify_area+0x258/0x650
[ 1910.422742][T24345]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1910.422764][T24345]  vfs_read+0x200/0x980
[ 1910.422784][T24345]  ? __pfx___mutex_lock+0x10/0x10
[ 1910.422808][T24345]  ? __pfx_vfs_read+0x10/0x10
[ 1910.422837][T24345]  ? __fget_files+0x2a/0x420
[ 1910.422859][T24345]  ? __fget_files+0x3a0/0x420
[ 1910.422877][T24345]  ? __fget_files+0x2a/0x420
[ 1910.422903][T24345]  ksys_read+0x145/0x250
[ 1910.422921][T24345]  ? __pfx_ksys_read+0x10/0x10
[ 1910.422936][T24345]  ? rcu_is_watching+0x15/0xb0
[ 1910.422958][T24345]  ? trace_sys_enter+0x25/0x120
[ 1910.422981][T24345]  do_syscall_64+0xfa/0x3b0
[ 1910.423002][T24345]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1910.423022][T24345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1910.423036][T24345]  ? clear_bhb_loop+0x60/0xb0
[ 1910.423054][T24345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1910.423068][T24345] RIP: 0033:0x7ffa63f8d33c
[ 1910.423083][T24345] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1910.423096][T24345] RSP: 002b:00007ffa64d11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1910.423111][T24345] RAX: ffffffffffffffda RBX: 00007ffa641b5fa0 RCX: 00007ffa63f8d33c
[ 1910.423122][T24345] RDX: 000000000000000f RSI: 00007ffa64d110a0 RDI: 0000000000000005
[ 1910.423131][T24345] RBP: 00007ffa64d11090 R08: 0000000000000000 R09: 0000000000000000
[ 1910.423140][T24345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1910.423149][T24345] R13: 0000000000000000 R14: 00007ffa641b5fa0 R15: 00007ffe987e95d8
[ 1910.423171][T24345]  </TASK>
[ 1910.676360][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1910.817073][ T9519] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1910.828528][ T9519] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1910.839044][T22817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1910.847247][T22817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1910.857561][ T9519] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1910.867017][ T9519] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1910.875144][ T9519] usb 8-1: SerialNumber: syz
[ 1910.937343][T24349] FAULT_INJECTION: forcing a failure.
[ 1910.937343][T24349] name failslab, interval 1, probability 0, space 0, times 0
[ 1910.955469][T24349] CPU: 1 UID: 0 PID: 24349 Comm: syz.5.5226 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1910.955503][T24349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1910.955517][T24349] Call Trace:
[ 1910.955529][T24349]  <TASK>
[ 1910.955537][T24349]  dump_stack_lvl+0x189/0x250
[ 1910.955564][T24349]  ? __pfx____ratelimit+0x10/0x10
[ 1910.955587][T24349]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1910.955608][T24349]  ? __pfx__printk+0x10/0x10
[ 1910.955627][T24349]  ? __pfx___might_resched+0x10/0x10
[ 1910.955648][T24349]  ? fs_reclaim_acquire+0x7d/0x100
[ 1910.955673][T24349]  should_fail_ex+0x414/0x560
[ 1910.955707][T24349]  should_failslab+0xa8/0x100
[ 1910.955727][T24349]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1910.955744][T24349]  ? drm_atomic_state_alloc+0xa9/0x100
[ 1910.955765][T24349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1910.955783][T24349]  drm_atomic_state_alloc+0xa9/0x100
[ 1910.955806][T24349]  drm_mode_atomic_ioctl+0x437/0xcb0
[ 1910.955839][T24349]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[ 1910.955872][T24349]  ? do_raw_spin_unlock+0x122/0x240
[ 1910.955890][T24349]  ? _raw_spin_unlock+0x28/0x50
[ 1910.955907][T24349]  ? drm_is_current_master+0x19f/0x200
[ 1910.955926][T24349]  drm_ioctl_kernel+0x2cc/0x390
[ 1910.955945][T24349]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[ 1910.955961][T24349]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 1910.955986][T24349]  drm_ioctl+0x67f/0xb10
[ 1910.956002][T24349]  ? smk_tskacc+0x2fc/0x370
[ 1910.956018][T24349]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[ 1910.956038][T24349]  ? __pfx_drm_ioctl+0x10/0x10
[ 1910.956066][T24349]  ? __fget_files+0x2a/0x420
[ 1910.956088][T24349]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1910.956108][T24349]  ? __pfx_drm_ioctl+0x10/0x10
[ 1910.956125][T24349]  __se_sys_ioctl+0xfc/0x170
[ 1910.956142][T24349]  do_syscall_64+0xfa/0x3b0
[ 1910.956163][T24349]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1910.956184][T24349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1910.956197][T24349]  ? clear_bhb_loop+0x60/0xb0
[ 1910.956215][T24349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1910.956229][T24349] RIP: 0033:0x7f703db8e929
[ 1910.956242][T24349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1910.956255][T24349] RSP: 002b:00007f703ea37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1910.956270][T24349] RAX: ffffffffffffffda RBX: 00007f703ddb5fa0 RCX: 00007f703db8e929
[ 1910.956280][T24349] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000f
[ 1910.956290][T24349] RBP: 00007f703ea37090 R08: 0000000000000000 R09: 0000000000000000
[ 1910.956299][T24349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1910.956308][T24349] R13: 0000000000000000 R14: 00007f703ddb5fa0 R15: 00007fffaef5d798
[ 1910.956330][T24349]  </TASK>
[ 1911.404517][ T9519] usb 8-1: 0:2 : does not exist
[ 1911.435627][ T9519] usb 8-1: USB disconnect, device number 12
[ 1911.674019][T24357] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 1913.054903][T24375] FAULT_INJECTION: forcing a failure.
[ 1913.054903][T24375] name failslab, interval 1, probability 0, space 0, times 0
[ 1913.266900][T24375] CPU: 0 UID: 0 PID: 24375 Comm: syz.3.5233 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1913.266933][T24375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1913.266947][T24375] Call Trace:
[ 1913.266956][T24375]  <TASK>
[ 1913.266966][T24375]  dump_stack_lvl+0x189/0x250
[ 1913.267002][T24375]  ? __pfx____ratelimit+0x10/0x10
[ 1913.267032][T24375]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1913.267062][T24375]  ? __pfx__printk+0x10/0x10
[ 1913.267089][T24375]  ? __pfx___might_resched+0x10/0x10
[ 1913.267118][T24375]  ? fs_reclaim_acquire+0x7d/0x100
[ 1913.267152][T24375]  should_fail_ex+0x414/0x560
[ 1913.267182][T24375]  should_failslab+0xa8/0x100
[ 1913.267210][T24375]  __kmalloc_noprof+0xcb/0x4f0
[ 1913.267232][T24375]  ? kfree+0x4d/0x440
[ 1913.267250][T24375]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1913.267286][T24375]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1913.267318][T24375]  ? tomoyo_domain+0xda/0x130
[ 1913.267359][T24375]  tomoyo_path_perm+0x213/0x4b0
[ 1913.267383][T24375]  ? tomoyo_path_perm+0x1e3/0x4b0
[ 1913.267407][T24375]  ? __pfx_tomoyo_path_perm+0x10/0x10
[ 1913.267471][T24375]  ? __might_fault+0xb0/0x130
[ 1913.267505][T24375]  security_inode_getattr+0x12f/0x330
[ 1913.267532][T24375]  vfs_statx+0x18e/0x550
[ 1913.267566][T24375]  ? __pfx_vfs_statx+0x10/0x10
[ 1913.267594][T24375]  ? getname_flags+0x1e5/0x540
[ 1913.267635][T24375]  vfs_fstatat+0x118/0x170
[ 1913.267694][T24375]  __x64_sys_newfstatat+0x116/0x190
[ 1913.267729][T24375]  ? __pfx___x64_sys_newfstatat+0x10/0x10
[ 1913.267784][T24375]  ? __pfx_ksys_write+0x10/0x10
[ 1913.267804][T24375]  ? rcu_is_watching+0x15/0xb0
[ 1913.267840][T24375]  ? do_syscall_64+0xbe/0x3b0
[ 1913.267877][T24375]  do_syscall_64+0xfa/0x3b0
[ 1913.267907][T24375]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1913.267937][T24375]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1913.267957][T24375]  ? clear_bhb_loop+0x60/0xb0
[ 1913.267983][T24375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1913.268003][T24375] RIP: 0033:0x7f797598e929
[ 1913.268030][T24375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1913.268045][T24375] RSP: 002b:00007f797673d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[ 1913.268066][T24375] RAX: ffffffffffffffda RBX: 00007f7975bb5fa0 RCX: 00007f797598e929
[ 1913.268080][T24375] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: ffffffffffffff9c
[ 1913.268093][T24375] RBP: 00007f797673d090 R08: 0000000000000000 R09: 0000000000000000
[ 1913.268105][T24375] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001
[ 1913.268116][T24375] R13: 0000000000000000 R14: 00007f7975bb5fa0 R15: 00007ffe1598fd18
[ 1913.268146][T24375]  </TASK>
[ 1913.268154][T24375] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1913.486824][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1913.714440][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1914.459571][   T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1914.661027][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1914.875578][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1914.957990][   T24] usb 4-1: config 0 has an invalid interface number: 82 but max is 0
[ 1914.982317][   T24] usb 4-1: config 0 has no interface number 0
[ 1914.999775][ T9519] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1915.015804][   T24] usb 4-1: too many endpoints for config 0 interface 82 altsetting 196: 170, using maximum allowed: 30
[ 1915.068512][   T24] usb 4-1: config 0 interface 82 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 170
[ 1915.131482][   T24] usb 4-1: config 0 interface 82 has no altsetting 0
[ 1915.194418][ T9519] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1915.209141][ T9519] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1915.226421][   T24] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=c7.7e
[ 1915.235926][   T24] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[ 1915.245007][ T9519] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1915.256837][   T24] usb 4-1: Product: syz
[ 1915.261314][ T9519] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1915.270092][   T24] usb 4-1: Manufacturer: syz
[ 1915.274881][   T24] usb 4-1: SerialNumber: syz
[ 1915.286605][   T24] usb 4-1: config 0 descriptor??
[ 1915.300594][ T6139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1915.303114][ T9519] usb 10-1: config 0 descriptor??
[ 1915.329648][T24415] overlayfs: missing 'lowerdir'
[ 1915.403305][ T9519] usbhid 10-1:0.0: can't add hid device: -22
[ 1915.416630][ T9519] usbhid 10-1:0.0: probe with driver usbhid failed with error -22
[ 1915.537244][T24399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1915.546366][T24399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1915.628303][   T24] mvusb_mdio 4-1:0.82: probe with driver mvusb_mdio failed with error -5
[ 1915.662815][   T24] usb 4-1: USB disconnect, device number 10
[ 1915.953272][T22817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1916.025229][T24422] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5241'.
[ 1916.580801][T22817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1916.756397][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1916.917989][T24419] delete_channel: no stack
[ 1917.687603][T24432] netlink: 308 bytes leftover after parsing attributes in process `syz.3.5252'.
[ 1917.702192][T24432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5252'.
[ 1917.714521][T24432] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 1917.975426][T24424] delete_channel: no stack
[ 1918.031041][ T5897] usb 10-1: USB disconnect, device number 5
[ 1918.045554][T24437] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5250'.
[ 1918.236231][T24446] CIFS: Unable to determine destination address
[ 1920.082178][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1920.557471][T24467] 9pnet_fd: Insufficient options for proto=fd
[ 1920.797196][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1920.807093][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1920.816213][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1920.825345][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1920.834474][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1920.967377][T24474] net_ratelimit: 635 callbacks suppressed
[ 1920.967417][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1920.982604][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1920.991911][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1921.001117][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1921.010322][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1921.019520][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1921.028694][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1921.037912][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1921.047135][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1921.056342][T24474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1921.070791][T22817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1921.279595][ T5897] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1921.444239][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1921.481940][ T5897] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1921.509081][ T5897] usb 8-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1921.519058][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1921.652607][ T5897] usb 8-1: config 0 descriptor??
[ 1921.675693][ T5897] usbhid 8-1:0.0: can't add hid device: -22
[ 1921.689680][ T5897] usbhid 8-1:0.0: probe with driver usbhid failed with error -22
[ 1921.708793][T24490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5268'.
[ 1922.088583][T10720] Bluetooth: hci4: command 0x0405 tx timeout
[ 1922.516922][T24504] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5264'.
[ 1924.127560][   T24] usb 8-1: USB disconnect, device number 13
[ 1925.308378][T24525] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5277'.
[ 1926.164904][T24531] netlink: 116 bytes leftover after parsing attributes in process `syz.9.5279'.
[ 1926.343261][   T24] net_ratelimit: 2682 callbacks suppressed
[ 1926.343282][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1926.841179][T22815] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1927.462018][T22808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1927.471235][T22815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1927.532651][T20550] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1927.565292][T24555] x_tables: duplicate underflow at hook 2
[ 1927.778591][ T9519] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1927.829636][T20550] usb 8-1: Using ep0 maxpacket: 8
[ 1927.838973][T20550] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1927.850110][T20550] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1927.858228][T20550] usb 8-1: Product: syz
[ 1928.201343][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 1928.207902][   T30] audit: type=1107 audit(264335.113:688): pid=24554 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=')r0	���%λ'
[ 1928.488906][T20550] usb 8-1: Manufacturer: syz
[ 1928.493950][T20550] usb 8-1: SerialNumber: syz
[ 1928.501620][T20550] usb 8-1: config 0 descriptor??
[ 1928.554703][ T9519] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1928.566251][ T9519] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1928.576553][ T9519] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1928.587058][ T9519] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1928.741384][ T9519] usb 10-1: config 0 descriptor??
[ 1928.771389][ T9519] usbhid 10-1:0.0: can't add hid device: -22
[ 1928.788211][ T9519] usbhid 10-1:0.0: probe with driver usbhid failed with error -22
[ 1928.824766][T20550] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1929.497498][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1929.759999][T24571] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5287'.
[ 1929.897379][T24570] sctp: [Deprecated]: syz.8.5294 (pid 24570) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1929.897379][T24570] Use struct sctp_sack_info instead
[ 1930.021278][   T31] INFO: task syz.1.4875:23172 blocked for more than 142 seconds.
[ 1930.039707][T24577] netlink: 'syz.5.5296': attribute type 32 has an invalid length.
[ 1930.073422][   T31]       Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0
[ 1930.188681][T20550] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1930.205839][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1930.339398][   T31] task:syz.1.4875      state:D stack:26216 pid:23172 tgid:23171 ppid:17207  task_flags:0x400140 flags:0x00004004
[ 1930.428785][   T31] Call Trace:
[ 1930.432308][   T31]  <TASK>
[ 1930.439620][   T31]  __schedule+0x16a2/0x4cb0
[ 1930.450090][T20550] usb 8-1: USB disconnect, device number 14
[ 1930.458791][   T31]  ? schedule+0x165/0x360
[ 1930.468690][   T31]  ? __pfx___schedule+0x10/0x10
[ 1930.473815][   T31]  ? schedule+0x91/0x360
[ 1930.478235][   T31]  schedule+0x165/0x360
[ 1930.485739][   T31]  netfs_wait_for_request+0x1f0/0x600
[ 1930.498252][   T31]  ? __pfx_netfs_write_collection+0x10/0x10
[ 1930.512107][   T31]  ? __pfx_netfs_wait_for_request+0x10/0x10
[ 1930.527528][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1930.539398][T24572] delete_channel: no stack
[ 1930.545583][   T31]  netfs_unbuffered_write_iter_locked+0x52a/0x910
[ 1930.552718][   T31]  netfs_unbuffered_write_iter+0x4c4/0x660
[ 1930.558955][   T31]  do_iter_readv_writev+0x56b/0x7f0
[ 1930.564525][   T31]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 1930.590677][   T31]  ? rcu_read_lock_any_held+0xb3/0x120
[ 1930.602218][   T31]  vfs_writev+0x31a/0x960
[ 1930.612392][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1930.623103][   T31]  ? __pfx_vfs_writev+0x10/0x10
[ 1930.637158][   T31]  ? __fget_files+0x2a/0x420
[ 1930.648957][   T31]  ? __fget_files+0x3a0/0x420
[ 1930.659495][   T31]  ? __fget_files+0x2a/0x420
[ 1930.676998][   T31]  do_writev+0x14d/0x2d0
[ 1930.687791][   T31]  ? __pfx_do_writev+0x10/0x10
[ 1930.693070][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1930.698299][   T31]  ? do_syscall_64+0xbe/0x3b0
[ 1930.703253][   T31]  do_syscall_64+0xfa/0x3b0
[ 1930.707905][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1930.713470][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1930.719780][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1930.724664][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1930.730767][   T31] RIP: 0033:0x7efe6b38e929
[ 1930.735979][   T31] RSP: 002b:00007efe6c229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1930.745174][   T31] RAX: ffffffffffffffda RBX: 00007efe6b5b5fa0 RCX: 00007efe6b38e929
[ 1930.753455][   T31] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007
[ 1930.761615][   T31] RBP: 00007efe6b410b39 R08: 0000000000000000 R09: 0000000000000000
[ 1930.769772][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1930.777794][   T31] R13: 0000000000000000 R14: 00007efe6b5b5fa0 R15: 00007fffbe2d8ac8
[ 1930.786263][   T31]  </TASK>
[ 1930.789413][   T31] 
[ 1930.789413][   T31] Showing all locks held in the system:
[ 1930.798176][   T31] 1 lock held by khungtaskd/31:
[ 1930.803197][   T31]  #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1930.819970][   T31] 2 locks held by getty/5583:
[ 1930.839427][   T31]  #0: ffff888030c390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1930.868099][   T31]  #1: ffffc9000362c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1930.881328][ T8956] usb 10-1: USB disconnect, device number 6
[ 1930.893832][   T31] 3 locks held by kworker/u8:12/6139:
[ 1930.899312][   T31] 3 locks held by kworker/0:1/8956:
[ 1930.906814][   T31]  #0: ffff8881432e6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1930.918466][   T31]  #1: ffffc9000b26fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1930.930667][   T31]  #2: ffff888143fd0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00
[ 1930.940758][   T31] 3 locks held by syz.1.4875/23172:
[ 1930.946044][   T31]  #0: ffff888011854d38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320
[ 1930.955383][   T31]  #1: ffff88805777c428 (sb_writers#20){.+.+}-{0:0}, at: vfs_writev+0x288/0x960
[ 1930.964782][   T31]  #2: ffff888078ba8e28 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: netfs_start_io_direct+0x1ef/0x230
[ 1930.976813][   T31] 
[ 1930.979189][   T31] =============================================
[ 1930.979189][   T31] 
[ 1930.997787][   T31] NMI backtrace for cpu 0
[ 1930.997813][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1930.997839][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1930.997852][   T31] Call Trace:
[ 1930.997861][   T31]  <TASK>
[ 1930.997872][   T31]  dump_stack_lvl+0x189/0x250
[ 1930.997907][   T31]  ? __wake_up_klogd+0xd9/0x110
[ 1930.997932][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1930.997961][   T31]  ? __pfx__printk+0x10/0x10
[ 1930.997996][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1930.998025][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1930.998048][   T31]  ? _printk+0xcf/0x120
[ 1930.998074][   T31]  ? __pfx__printk+0x10/0x10
[ 1930.998097][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1930.998125][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1930.998154][   T31]  watchdog+0xfee/0x1030
[ 1930.998183][   T31]  ? watchdog+0x1de/0x1030
[ 1930.998217][   T31]  kthread+0x70e/0x8a0
[ 1930.998244][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1930.998267][   T31]  ? __pfx_kthread+0x10/0x10
[ 1930.998290][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1930.998319][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1930.998354][   T31]  ? __pfx_kthread+0x10/0x10
[ 1930.998377][   T31]  ret_from_fork+0x3f9/0x770
[ 1930.998408][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1930.998442][   T31]  ? __switch_to_asm+0x39/0x70
[ 1930.998460][   T31]  ? __switch_to_asm+0x33/0x70
[ 1930.998478][   T31]  ? __pfx_kthread+0x10/0x10
[ 1930.998501][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1930.998537][   T31]  </TASK>
[ 1930.998546][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1931.160653][    C1] NMI backtrace for cpu 1
[ 1931.160672][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1931.160693][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1931.160705][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1931.160735][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f6 28 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1931.160751][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[ 1931.160767][    C1] RAX: ee8927d587d2b000 RBX: ffffffff81975c68 RCX: ee8927d587d2b000
[ 1931.160781][    C1] RDX: 0000000000000001 RSI: ffffffff8d96eade RDI: ffffffff8be1b800
[ 1931.160794][    C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb
[ 1931.160811][    C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9fe3f0
[ 1931.160825][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40
[ 1931.160836][    C1] FS:  0000000000000000(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000
[ 1931.160851][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1931.160863][    C1] CR2: 000020000002a000 CR3: 0000000027dde000 CR4: 00000000003526f0
[ 1931.160879][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1931.160889][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1931.160900][    C1] Call Trace:
[ 1931.160908][    C1]  <TASK>
[ 1931.160915][    C1]  default_idle+0x13/0x20
[ 1931.160932][    C1]  default_idle_call+0x74/0xb0
[ 1931.160951][    C1]  do_idle+0x1e8/0x510
[ 1931.160980][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1931.161003][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1931.161038][    C1]  cpu_startup_entry+0x44/0x60
[ 1931.161063][    C1]  start_secondary+0x101/0x110
[ 1931.161084][    C1]  common_startup_64+0x13e/0x147
[ 1931.161112][    C1]  </TASK>
[ 1931.400845][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1931.407772][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) 
[ 1931.419597][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1931.429676][   T31] Call Trace:
[ 1931.432968][   T31]  <TASK>
[ 1931.435912][   T31]  dump_stack_lvl+0x99/0x250
[ 1931.440522][   T31]  ? __asan_memcpy+0x40/0x70
[ 1931.445128][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1931.450373][   T31]  ? __pfx__printk+0x10/0x10
[ 1931.455018][   T31]  panic+0x2db/0x790
[ 1931.458943][   T31]  ? __pfx_panic+0x10/0x10
[ 1931.463398][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[ 1931.469232][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1931.474655][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[ 1931.480851][   T31]  watchdog+0x102d/0x1030
[ 1931.485211][   T31]  ? watchdog+0x1de/0x1030
[ 1931.489650][   T31]  kthread+0x70e/0x8a0
[ 1931.493736][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1931.498441][   T31]  ? __pfx_kthread+0x10/0x10
[ 1931.503065][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1931.508318][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1931.513540][   T31]  ? __pfx_kthread+0x10/0x10
[ 1931.518147][   T31]  ret_from_fork+0x3f9/0x770
[ 1931.522795][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1931.527950][   T31]  ? __switch_to_asm+0x39/0x70
[ 1931.532727][   T31]  ? __switch_to_asm+0x33/0x70
[ 1931.537502][   T31]  ? __pfx_kthread+0x10/0x10
[ 1931.542107][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1931.546925][   T31]  </TASK>
[ 1931.550296][   T31] Kernel Offset: disabled
[ 1931.554640][   T31] Rebooting in 86400 seconds..