last executing test programs:

8m6.624916413s ago: executing program 4 (id=20):
r0 = semget(0x1, 0x1, 0x39c)
semop(r0, &(0x7f0000000080)=[{0x4, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2)
unshare(0x26020400)
r1 = syz_io_uring_complete(0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', r1}, 0x18)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x200800, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000300)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\a'])
write$6lowpan_enable(r2, &(0x7f00000000c0)='0', 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x80, 0x0, 0x7fff0000}]})
readahead(r4, 0xb, 0x83)
flock(r4, 0x2)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x2000c011)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
socket$inet6(0xa, 0x80002, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r6], 0x0)

8m3.455469983s ago: executing program 4 (id=35):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
syz_open_dev$loop(0x0, 0x10, 0x42000)
r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})

8m2.389884536s ago: executing program 4 (id=37):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
syz_open_dev$loop(0x0, 0x10, 0x42000)
r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)

8m0.437175403s ago: executing program 4 (id=40):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

7m59.501778942s ago: executing program 4 (id=44):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

7m58.187392441s ago: executing program 4 (id=49):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$kcm(0x29, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x200000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000000c0), 0x0, 0x0)
keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55)
mkdir(&(0x7f0000000000)='./file0\x00', 0x12)
mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x18000, &(0x7f0000000300)={[{@memory_localevents}, {@memory_hugetlb_accounting}]})
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="0468d192431a46c3a5960d62e7a097392338dadf21bcb529282c908d150ca02d7bc4f14bc5e33d8eae32b75b31ceb6fc14519098854bd0a9c34ad95597c155642519350707927b7f13f80a6c9c462e4dddcfa14f21ad57e643e0bd336d7ac5a1844853e2f28ea80ccaa04abddd5361f448794258d5bdca7d2c83a719b31fc82b96b09b9378cbf0b5e3fd11a208cd49648bf0f4c16118123f7e0316cb616733815501dc3a4a072232461e5785fc049c5d98aec0c8197f1793e8c2848569bc0f38", @ANYBLOB="02be779b7305e67e498427dba7b8e1071213d502ecbe7312c8e8e56e7e43bc60c73bac6f53654fe35f66f737cf21b1e55b070bbca2863fd227802d28f970c17b6ea3bc63b0901242ea031557eb4f4c070d0e5ee528601cde6d24c3510cf1c824a2b859f7a687d2aa167cd96664235a8c68b3db33cab881f7f41412dc856170882c2911cec89cf7ade65f93294ed593e7e495131ad0e7f4bb4f015332bf6a6e6651688e54ea0487c06d301be56c2fdef42e51c5f01f", @ANYRES8=r0, @ANYRESHEX=r4, @ANYRESHEX=r4], 0xff2e)
gettid()

7m42.785767391s ago: executing program 32 (id=49):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$kcm(0x29, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x200000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000000c0), 0x0, 0x0)
keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55)
mkdir(&(0x7f0000000000)='./file0\x00', 0x12)
mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x18000, &(0x7f0000000300)={[{@memory_localevents}, {@memory_hugetlb_accounting}]})
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="0468d192431a46c3a5960d62e7a097392338dadf21bcb529282c908d150ca02d7bc4f14bc5e33d8eae32b75b31ceb6fc14519098854bd0a9c34ad95597c155642519350707927b7f13f80a6c9c462e4dddcfa14f21ad57e643e0bd336d7ac5a1844853e2f28ea80ccaa04abddd5361f448794258d5bdca7d2c83a719b31fc82b96b09b9378cbf0b5e3fd11a208cd49648bf0f4c16118123f7e0316cb616733815501dc3a4a072232461e5785fc049c5d98aec0c8197f1793e8c2848569bc0f38", @ANYBLOB="02be779b7305e67e498427dba7b8e1071213d502ecbe7312c8e8e56e7e43bc60c73bac6f53654fe35f66f737cf21b1e55b070bbca2863fd227802d28f970c17b6ea3bc63b0901242ea031557eb4f4c070d0e5ee528601cde6d24c3510cf1c824a2b859f7a687d2aa167cd96664235a8c68b3db33cab881f7f41412dc856170882c2911cec89cf7ade65f93294ed593e7e495131ad0e7f4bb4f015332bf6a6e6651688e54ea0487c06d301be56c2fdef42e51c5f01f", @ANYRES8=r0, @ANYRESHEX=r4, @ANYRESHEX=r4], 0xff2e)
gettid()

2m46.271805395s ago: executing program 2 (id=871):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x20}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
fcntl$lock(r2, 0x6, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfff})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[], 0x50)
clock_gettime(0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000042c0))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80ff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x5000000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94)

2m44.562947197s ago: executing program 2 (id=873):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m44.446800563s ago: executing program 2 (id=876):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m44.108017063s ago: executing program 2 (id=880):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
syz_extract_tcp_res(&(0x7f0000000080), 0x7, 0x200)
r1 = syz_open_dev$loop(&(0x7f0000000480), 0x8000, 0x22383)
r2 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1\xf2Y<\xe2\x84g-V\x97\xc6^\xbbg}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9\x00\x00QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\x87\x9d\x1f\x1bA\xa5\x87\x11\x86_\x81\xda\xac\xc8\xdbT8\x04\x16a\xed\xce\xe8\xcc\xed\b^\xb4\x18\xe9$\xbb.\xef\x96\x06G\xf1(E\xdbd\x96\xfb\nC\xeb\b><+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x20000051}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x100000000000000, 0x0, 0x20044804}, 0x40040)

2m41.562352065s ago: executing program 2 (id=885):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2m41.278907875s ago: executing program 2 (id=889):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x9, 0x5, "9abd6809", "dd6e00"}}, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x9, 0x5, "9abd6809", "dd6e00"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
close(r1)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000)
getsockopt(r3, 0x128, 0x6, &(0x7f00000000c0)=""/53, &(0x7f0000000100)=0x35)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2e, 0x2, 0x6, {0xc, @tcp_ip4_spec={@empty, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e24, 0x4e20, 0x7}, {0x0, @remote, 0xe, 0x5, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x5}, {0x0, @empty, 0x8, 0x9, [0xf, 0x9]}, 0xff, 0x3}}})
mkdir(&(0x7f0000000000)='./file0\x00', 0x168) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x168)

2m25.312282974s ago: executing program 33 (id=889):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x9, 0x5, "9abd6809", "dd6e00"}}, 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x9, 0x5, "9abd6809", "dd6e00"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
close(r1)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000)
getsockopt(r3, 0x128, 0x6, &(0x7f00000000c0)=""/53, &(0x7f0000000100)=0x35)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2e, 0x2, 0x6, {0xc, @tcp_ip4_spec={@empty, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e24, 0x4e20, 0x7}, {0x0, @remote, 0xe, 0x5, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x5}, {0x0, @empty, 0x8, 0x9, [0xf, 0x9]}, 0xff, 0x3}}})
mkdir(&(0x7f0000000000)='./file0\x00', 0x168) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x168)

9.419893191s ago: executing program 6 (id=1327):
getpid()
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x6, 0x0)
io_submit(0x0, 0x0, 0x0)
mknodat(r2, 0x0, 0x80, 0xffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ff010000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) (fail_nth: 5)

9.275753798s ago: executing program 1 (id=1329):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

9.037564982s ago: executing program 1 (id=1330):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0)
fchown(r2, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc48, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fsopen(0x0, 0x1)
shmctl$IPC_RMID(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f00000000c0)=0xfffffffe, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x0, 0x4e1ee79f, 0x0, 0xf0})

7.75156418s ago: executing program 6 (id=1333):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
syz_init_net_socket$llc(0x1a, 0x802, 0x0) (async)
r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000906010200000000000000000200ffff180007800c00018008000100e000000208000a40000000020900020073797a310000000005000100070000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
close(r4) (async)
close(r4)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private1}, @in={0x2, 0x0, @private}}]}, 0xd8}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
recvfrom$llc(r4, &(0x7f0000000940)=""/4096, 0x1000, 0x2, &(0x7f0000000180)={0x1a, 0x118, 0x6, 0x9, 0x2, 0x7b, @local}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10)

7.747511328s ago: executing program 1 (id=1334):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
close(r9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r13=>0x0})
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYRES16=r8, @ANYRES16=r14, @ANYRESDEC=r1, @ANYRES32=r13, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x398}}, 0x0)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc)
splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600200008000300", @ANYRES32=r6, @ANYBLOB="0800050002"], 0x24}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000000}]}}, @TCA_CHAIN={0x8, 0xb, 0x256c}, @TCA_CHAIN={0x8, 0xb, 0xafe8}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014)

6.723209533s ago: executing program 3 (id=1335):
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x49}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x10) (async)
r1 = syz_usb_connect(0x5, 0x64, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a24010000000201020524044c"], 0x0) (async)
r2 = socket$inet6(0xa, 0x3, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000002}}, 0x1c) (async, rerun: 32)
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r1], 0x0) (rerun: 32)

5.880350237s ago: executing program 0 (id=1338):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0xd8000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x100, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x1a}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="24000000021401002abd700001dcdf2508000180"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c0258", "122000", "1000"}, 0x28)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r8, 0x106, 0x1, 0x0, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010000000000000000000200000000000009000000000c001680050002000200000006001c004e240000080010000180ffff08001e0022"], 0x60}, 0x1, 0x0, 0x0, 0x4008091}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/169, 0xa9}], 0x1, &(0x7f00000002c0)=""/135, 0x87}, 0x40010120)
r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r9, 0xc040564a, &(0x7f0000000140)={0x1, 0x1, @value=0x1012})

5.726005037s ago: executing program 1 (id=1340):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

5.436540889s ago: executing program 1 (id=1341):
readahead(0xffffffffffffffff, 0xb, 0x83)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r1], 0x0)

5.434185798s ago: executing program 0 (id=1343):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f00000002c0)=0xd, 0x4)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18)
rseq(0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1f080045000024000000020011907800000000000000000000000700109078e2fd000180000000d000a07b8225fa618848d931db248cb00017ff0194432ad42e22"], 0x0)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8011, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x7)
syz_kvm_setup_cpu$x86(r5, r8, &(0x7f0000541000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000580)="b973080000b860037798ba78f1aa590f3036410f30b9800000c00f3235000400000f3066baf80cb8382d0089ef66bafc0cb88e992a2eef660f38801eb9500b0000b889000000ba000000000f30640f09c7442400a0000000c74424020f000000ff1c24c4a28d9acb0f30", 0x6a}], 0x1, 0x54, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.211872077s ago: executing program 5 (id=1344):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = socket(0x1, 0x803, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1d", @ANYRESOCT])
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000400)=ANY=[], 0x1df)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000005440)=@base={0x12, 0x5, 0x8, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r3}, 0x20)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvmmsg(r3, &(0x7f0000005040)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x59d3}], 0x3, 0x10000, 0x0)
write$binfmt_misc(r2, &(0x7f0000000600)="a337662a29b62ba7d45cc491f2ab53c97dd342205d43600938ceeb209097a27347adc6", 0x23)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
eventfd(0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea)

4.677614897s ago: executing program 3 (id=1345):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r5 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28)
r6 = fsopen(&(0x7f0000000240)='ubifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)

4.218154177s ago: executing program 0 (id=1346):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="20eba9fdb4cbab48929e1af151000000000000000100000000000100", 0x1c}], 0x1)

3.980007883s ago: executing program 0 (id=1347):
unshare(0x2a020400)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})

3.325719401s ago: executing program 5 (id=1348):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

3.17901968s ago: executing program 3 (id=1349):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.991540973s ago: executing program 5 (id=1350):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.991135271s ago: executing program 6 (id=1351):
socket$kcm(0x11, 0xa, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x100000001)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

2.876300101s ago: executing program 3 (id=1352):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0x4040}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.743032374s ago: executing program 5 (id=1353):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @local}, 0x10)
r3 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r2, 0x1, 0x6, @local}, 0x10)

2.608243852s ago: executing program 0 (id=1354):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x3f, 0x0, 0x0, 0x200000}}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x0)

2.606647164s ago: executing program 6 (id=1355):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x30, r1, 0x1, 0x6000, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044815}, 0x0)

2.487883911s ago: executing program 3 (id=1356):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0)

2.465404435s ago: executing program 5 (id=1357):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0)
write$vga_arbiter(r4, &(0x7f0000000080)=@target={'target ', {'PCI:', '0', ':', '0', ':', '5', '.', '0'}}, 0x13)

2.408169204s ago: executing program 0 (id=1358):
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0xa0}, 0x742108b30e2cd9ac)
ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000600)={0x1, 0x1})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000080)={0x0, 0x80000}, 0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x5, 0xfede, 0x202, 0x100, 0x2, 0xfffffa75, 0x200, 0x6}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, 0x0, 0x0, 0x4)
r7 = fsopen(0x0, 0x0)
r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r7, 0x0, 0xf4)
r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r11, 0x0, 0x5}, 0x18)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
read(r10, &(0x7f0000000040)=""/77, 0x4d)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200000000001, 0x0)

2.315938644s ago: executing program 6 (id=1359):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r5 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28)
r6 = fsopen(&(0x7f0000000240)='ubifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)

2.154946703s ago: executing program 1 (id=1360):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)

267.442822ms ago: executing program 3 (id=1361):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]})
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000200), 0x4, r1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r3], &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[r2, r2], &(0x7f0000000040), 0x0, 0x8})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000140)="20eba9fdb4cbab48929e1af151000000000000000000000000000100", 0x1c}], 0x1)

51.336032ms ago: executing program 6 (id=1362):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
close(r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000940)=0x20000000, 0x4)
shutdown(r4, 0x0)
recvmmsg$unix(r3, &(0x7f00000057c0), 0x0, 0x40010002, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r5 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}}}, 0x24}}, 0x0)
recvmmsg$unix(r5, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001600)=""/4086, 0x10b8c}], 0x1}}], 0x1, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee9, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
process_madvise(r9, &(0x7f0000000000), 0x0, 0x64, 0x0)

0s ago: executing program 5 (id=1363):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

kernel console output (not intermixed with test programs):

isconnect, device number 4
[  272.686923][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'.
[  272.877115][ T7808] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  272.883930][ T7808] PKCS7: Only support pkcs7_signedData type
[  273.097717][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'.
[  273.676214][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  273.884506][    T9] usb 6-1: Using ep0 maxpacket: 8
[  273.950309][    T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  273.980733][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.030548][    T9] usb 6-1: Product: syz
[  274.052751][    T9] usb 6-1: Manufacturer: syz
[  274.080033][    T9] usb 6-1: SerialNumber: syz
[  274.108151][ T7821] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  274.129910][    T9] usb 6-1: config 0 descriptor??
[  274.361444][    T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  274.557206][ T7810] fuse: Bad value for 'rootmode'
[  274.655784][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  274.747547][ T5952] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  274.843381][   T24] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  274.869539][   T24] usb 1-1: config 0 has no interface number 0
[  274.898243][   T24] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  274.938175][ T5952] usb 4-1: Using ep0 maxpacket: 16
[  274.943471][   T24] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  274.978665][ T5952] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[  274.997076][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  275.010774][   T24] usb 1-1: config 0 interface 255 has no altsetting 0
[  275.031376][ T5952] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  275.042866][   T24] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  275.059462][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.072570][ T5952] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  275.085748][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.106350][   T24] usb 1-1: config 0 descriptor??
[  275.127847][   T24] ums-realtek 1-1:0.255: USB Mass Storage device detected
[  275.151003][ T5952] usb 4-1: Product: syz
[  275.169573][ T5952] usb 4-1: Manufacturer: syz
[  275.174241][ T5952] usb 4-1: SerialNumber: syz
[  275.223245][ T5952] usb 4-1: config 0 descriptor??
[  275.257056][ T7838] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  275.279408][ T7845] netlink: 892 bytes leftover after parsing attributes in process `syz.2.486'.
[  275.306314][    C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71)
[  275.313252][ T5952] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected
[  275.313375][    C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71)
[  275.362670][ T7846] netlink: 892 bytes leftover after parsing attributes in process `syz.2.486'.
[  275.419539][    T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  275.453257][    T9] usb 6-1: USB disconnect, device number 3
[  275.487551][ T7838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.501673][ T7838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.558363][ T5911] usb 4-1: USB disconnect, device number 4
[  275.568297][ T5911] mcba_usb 4-1:0.0 can0: device disconnected
[  275.878646][ T5911] usb 1-1: USB disconnect, device number 8
[  276.219972][   T30] audit: type=1326 audit(1753644917.931:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.5.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e5f8e9a9 code=0x7ffc0000
[  276.537142][   T30] audit: type=1326 audit(1753644917.931:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.5.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1e5f8e9a9 code=0x7ffc0000
[  276.561265][   T30] audit: type=1326 audit(1753644917.931:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.5.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e5f8e9a9 code=0x7ffc0000
[  276.585753][   T30] audit: type=1326 audit(1753644917.931:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.5.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1e5f8e9a9 code=0x7ffc0000
[  276.781241][ T7864] FAULT_INJECTION: forcing a failure.
[  276.781241][ T7864] name failslab, interval 1, probability 0, space 0, times 0
[  276.795140][ T7864] CPU: 1 UID: 0 PID: 7864 Comm: syz.5.488 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  276.795167][ T7864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  276.795178][ T7864] Call Trace:
[  276.795186][ T7864]  <TASK>
[  276.795195][ T7864]  dump_stack_lvl+0x189/0x250
[  276.795221][ T7864]  ? __pfx____ratelimit+0x10/0x10
[  276.795243][ T7864]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.795264][ T7864]  ? __pfx__printk+0x10/0x10
[  276.795295][ T7864]  ? __pfx___might_resched+0x10/0x10
[  276.795322][ T7864]  should_fail_ex+0x414/0x560
[  276.795347][ T7864]  should_failslab+0xa8/0x100
[  276.795370][ T7864]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  276.795391][ T7864]  ? __alloc_skb+0x112/0x2d0
[  276.795422][ T7864]  __alloc_skb+0x112/0x2d0
[  276.795454][ T7864]  netlink_sendmsg+0x5c6/0xb30
[  276.795480][ T7864]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.795510][ T7864]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.795546][ T7864]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  276.795565][ T7864]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.795593][ T7864]  __sock_sendmsg+0x21c/0x270
[  276.795619][ T7864]  ____sys_sendmsg+0x505/0x830
[  276.795655][ T7864]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.795694][ T7864]  ? import_iovec+0x74/0xa0
[  276.795725][ T7864]  ___sys_sendmsg+0x21f/0x2a0
[  276.795757][ T7864]  ? __pfx____sys_sendmsg+0x10/0x10
[  276.795783][ T7864]  ? preempt_schedule_common+0x83/0xd0
[  276.795844][ T7864]  ? __fget_files+0x2a/0x420
[  276.795864][ T7864]  ? __fget_files+0x3a0/0x420
[  276.795898][ T7864]  __x64_sys_sendmsg+0x19b/0x260
[  276.795938][ T7864]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  276.795978][ T7864]  ? __pfx_ksys_write+0x10/0x10
[  276.796003][ T7864]  ? do_syscall_64+0xbe/0x3b0
[  276.796028][ T7864]  do_syscall_64+0xfa/0x3b0
[  276.796051][ T7864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.796070][ T7864]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  276.796089][ T7864]  ? clear_bhb_loop+0x60/0xb0
[  276.796114][ T7864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.796133][ T7864] RIP: 0033:0x7ff1e5f8e9a9
[  276.796152][ T7864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.796169][ T7864] RSP: 002b:00007ff1e6e7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.796190][ T7864] RAX: ffffffffffffffda RBX: 00007ff1e61b6160 RCX: 00007ff1e5f8e9a9
[  276.796204][ T7864] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 000000000000000b
[  276.796217][ T7864] RBP: 00007ff1e6e7c090 R08: 0000000000000000 R09: 0000000000000000
[  276.796229][ T7864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.796241][ T7864] R13: 0000000000000000 R14: 00007ff1e61b6160 R15: 00007fff4074ae38
[  276.796275][ T7864]  </TASK>
[  277.073699][    C1] vkms_vblank_simulate: vblank timer overrun
[  277.217901][   T30] audit: type=1326 audit(1753644917.991:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.5.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e5f8e9a9 code=0x7ffc0000
[  277.239146][    C1] vkms_vblank_simulate: vblank timer overrun
[  277.247510][   T30] audit: type=1326 audit(1753644917.991:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.5.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff1e5f8e9a9 code=0x7ffc0000
[  277.268805][    C1] vkms_vblank_simulate: vblank timer overrun
[  277.277605][   T30] audit: type=1326 audit(1753644917.991:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.5.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e5f8e9a9 code=0x7ffc0000
[  277.299968][   T30] audit: type=1326 audit(1753644917.991:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.5.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff1e5f8e9a9 code=0x7ffc0000
[  277.321178][    C1] vkms_vblank_simulate: vblank timer overrun
[  277.329796][   T30] audit: type=1326 audit(1753644917.991:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.5.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e5f8e9a9 code=0x7ffc0000
[  277.352318][   T30] audit: type=1326 audit(1753644917.991:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.5.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e5f8e9a9 code=0x7ffc0000
[  279.540633][ T7895] netlink: 56 bytes leftover after parsing attributes in process `syz.3.497'.
[  280.622320][ T7900] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  282.198190][ T7893] fscrypt: Error allocating hmac(sha512): -2
[  284.245715][ T7924] 9pnet: Unknown protocol version 9p
[  285.796106][ T5911] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  285.966041][ T5911] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  286.044919][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.099193][ T5911] usb 6-1: config 0 descriptor??
[  287.122426][ T5911] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  287.327307][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.365519][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.786795][ T5911] gspca_stv06xx: I2C: Read error writing address: -71
[  287.811864][ T5911] usb 6-1: USB disconnect, device number 4
[  287.997742][ T7964] netlink: 56 bytes leftover after parsing attributes in process `syz.1.513'.
[  289.838640][ T7971] netlink: 'syz.5.515': attribute type 1 has an invalid length.
[  290.169408][ T7971] 8021q: adding VLAN 0 to HW filter on device bond1
[  290.258518][ T7975] vlan2: entered allmulticast mode
[  290.270022][ T7975] veth1: entered allmulticast mode
[  290.293078][ T7975] bond1: (slave vlan2): making interface the new active one
[  290.451473][ T7975] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  290.455436][ T5944] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  290.622064][ T5944] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  290.749517][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.121117][ T7983] Invalid ELF header magic: != ELF
[  291.227781][ T5944] usb 6-1: config 0 descriptor??
[  291.272590][ T5944] gspca_main: cpia1-2.14.0 probing 0813:0001
[  291.478074][ T5944] gspca_cpia1: usb_control_msg 05, error -71
[  291.506573][ T5944] gspca_cpia1: usb_control_msg 01, error -71
[  291.522865][ T5944] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  291.581409][ T5944] usb 6-1: USB disconnect, device number 5
[  293.072430][ T7982] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  293.235488][   T51] Bluetooth: hci5: unexpected cc 0x2039 length: 9 > 1
[  293.243320][   T51] Bluetooth: hci5: unexpected event for opcode 0x2039
[  295.857345][ T8025] 9pnet: Unknown protocol version 9p
[  296.050040][ T8026] netlink: 56 bytes leftover after parsing attributes in process `syz.5.526'.
[  297.418903][   T51] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  297.429295][   T51] Bluetooth: hci5: Injecting HCI hardware error event
[  297.439426][   T51] Bluetooth: hci5: hardware error 0x00
[  299.560012][   T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  303.687288][ T8072] trusted_key: encrypted_key: key user:syz not found
[  304.286377][ T8077] netlink: 56 bytes leftover after parsing attributes in process `syz.5.542'.
[  304.527668][ T8089] Invalid option length (1042865) for dns_resolver key
[  309.847854][ T8133] netlink: 56 bytes leftover after parsing attributes in process `syz.2.557'.
[  310.412050][   T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  312.226963][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'.
[  315.829943][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.561'.
[  316.628305][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'.
[  316.849427][    T9] IPVS: starting estimator thread 0...
[  317.569525][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  317.589294][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  317.655700][ T8162] IPVS: using max 24 ests per chain, 57600 per kthread
[  317.818757][ T8173] 9pnet: Unknown protocol version 9p
[  319.982624][ T5952] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  320.040363][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  320.040382][   T30] audit: type=1326 audit(1753644961.751:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687938e9a9 code=0x7ffc0000
[  320.252811][ T5952] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  320.383029][ T5952] usb 2-1: config 0 has no interface number 0
[  320.399495][   T30] audit: type=1326 audit(1753644961.751:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687938e9a9 code=0x7ffc0000
[  320.915847][ T5952] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  320.945667][ T5952] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  320.960949][   T30] audit: type=1326 audit(1753644961.761:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f687939083c code=0x7ffc0000
[  321.029091][ T5952] usb 2-1: config 0 interface 255 has no altsetting 0
[  321.079665][ T5952] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  321.091807][   T30] audit: type=1326 audit(1753644961.761:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6879390774 code=0x7ffc0000
[  321.115361][   T30] audit: type=1326 audit(1753644961.761:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6879390774 code=0x7ffc0000
[  321.136576][    C0] vkms_vblank_simulate: vblank timer overrun
[  321.157156][   T30] audit: type=1326 audit(1753644961.761:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687938e9a9 code=0x7ffc0000
[  321.160431][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.408221][ T8199] netlink: 56 bytes leftover after parsing attributes in process `syz.5.575'.
[  321.567196][ T5952] usb 2-1: config 0 descriptor??
[  321.789362][ T5952] ums-realtek 2-1:0.255: USB Mass Storage device detected
[  322.139310][   T30] audit: type=1326 audit(1753644961.761:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f687938e9a9 code=0x7ffc0000
[  322.411827][   T30] audit: type=1326 audit(1753644961.761:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687938e9a9 code=0x7ffc0000
[  322.586210][   T30] audit: type=1326 audit(1753644961.761:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f687938e9a9 code=0x7ffc0000
[  322.630826][   T30] audit: type=1326 audit(1753644961.761:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8189 comm="syz.2.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687938e9a9 code=0x7ffc0000
[  323.361281][ T5952] usb 2-1: USB disconnect, device number 2
[  323.671712][ T8218] netlink: 'syz.1.579': attribute type 15 has an invalid length.
[  323.684400][ T8213] gre1: entered allmulticast mode
[  323.699323][ T8218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.579'.
[  324.772033][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.582'.
[  325.057523][ T8238] FAULT_INJECTION: forcing a failure.
[  325.057523][ T8238] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  325.117097][ T8238] CPU: 1 UID: 0 PID: 8238 Comm: syz.0.585 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  325.117126][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  325.117138][ T8238] Call Trace:
[  325.117146][ T8238]  <TASK>
[  325.117155][ T8238]  dump_stack_lvl+0x189/0x250
[  325.117185][ T8238]  ? __pfx____ratelimit+0x10/0x10
[  325.117208][ T8238]  ? __pfx_dump_stack_lvl+0x10/0x10
[  325.117231][ T8238]  ? __pfx__printk+0x10/0x10
[  325.117258][ T8238]  ? __might_fault+0xb0/0x130
[  325.117292][ T8238]  should_fail_ex+0x414/0x560
[  325.117320][ T8238]  _copy_from_user+0x2d/0xb0
[  325.117349][ T8238]  restore_altstack+0x9d/0x4b0
[  325.117377][ T8238]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  325.117413][ T8238]  ? __pfx_restore_altstack+0x10/0x10
[  325.117447][ T8238]  ? _raw_spin_unlock_irq+0x23/0x50
[  325.117466][ T8238]  ? lockdep_hardirqs_on+0x9c/0x150
[  325.117490][ T8238]  __ia32_sys_rt_sigreturn+0x1ac/0x7b0
[  325.117527][ T8238]  ? lockdep_hardirqs_on+0x9c/0x150
[  325.117548][ T8238]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  325.117574][ T8238]  ? _raw_spin_unlock_irq+0x2e/0x50
[  325.117592][ T8238]  ? signal_setup_done+0x230/0x310
[  325.117619][ T8238]  ? __lock_acquire+0xab9/0xd20
[  325.117663][ T8238]  ? __task_pid_nr_ns+0x28/0x470
[  325.117697][ T8238]  ? do_syscall_64+0xbe/0x3b0
[  325.117725][ T8238]  do_syscall_64+0xfa/0x3b0
[  325.117746][ T8238]  ? lockdep_hardirqs_on+0x9c/0x150
[  325.117766][ T8238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.117786][ T8238]  ? clear_bhb_loop+0x60/0xb0
[  325.117820][ T8238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.117840][ T8238] RIP: 0033:0x7f406c12ab89
[  325.117859][ T8238] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  325.117876][ T8238] RSP: 002b:00007f406d002a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[  325.117898][ T8238] RAX: ffffffffffffffda RBX: 00007f406c3b5fa0 RCX: 00007f406c12ab89
[  325.117912][ T8238] RDX: 00007f406d002a80 RSI: 00007f406d002bb0 RDI: 0000000000000021
[  325.117926][ T8238] RBP: 00007f406d003090 R08: 0000000000000000 R09: 0000000000000000
[  325.117938][ T8238] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  325.117956][ T8238] R13: 0000000000000000 R14: 00007f406c3b5fa0 R15: 00007fffd2dd4c78
[  325.117989][ T8238]  </TASK>
[  326.270815][ T5952] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  326.658610][ T5952] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  326.734207][ T5952] usb 1-1: config 0 has no interface number 0
[  326.834202][ T5952] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  326.862221][ T8259] fuse: Unknown parameter 'user_i00000000000000000000'
[  326.899109][ T5952] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  326.947137][ T5952] usb 1-1: config 0 interface 255 has no altsetting 0
[  326.963860][ T5952] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  326.991334][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.164227][ T5952] usb 1-1: config 0 descriptor??
[  327.175966][ T5952] ums-realtek 1-1:0.255: USB Mass Storage device detected
[  328.329630][ T8276] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  328.340574][ T8276] PKCS7: Only support pkcs7_signedData type
[  328.898113][   T24] usb 1-1: USB disconnect, device number 10
[  329.905851][ T8289] 9pnet: Unknown protocol version 9p
[  330.183590][ T8287] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  331.517244][ T8302] fuse: Unknown parameter 'user_i00000000000000000000'
[  331.533667][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.603'.
[  332.510438][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.603'.
[  335.132191][ T8326] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  335.508697][ T8341] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  335.519601][ T8341] PKCS7: Only support pkcs7_signedData type
[  337.756248][ T5911] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  338.019707][ T8358] fuse: Unknown parameter 'user_id00000000000000000000'
[  338.023313][ T5911] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  338.343588][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.461329][ T5911] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  338.486261][ T5911] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  338.509127][ T5911] usb 6-1: Manufacturer: syz
[  338.531525][ T5911] usb 6-1: config 0 descriptor??
[  339.571132][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.780016][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  340.616098][ T5911] rc_core: IR keymap rc-hauppauge not found
[  340.650506][ T5911] Registered IR keymap rc-empty
[  340.702073][ T5911] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  340.858210][ T5911] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input5
[  340.946746][ T5911] usb 6-1: USB disconnect, device number 6
[  341.317275][ T8381] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  341.324498][ T8381] PKCS7: Only support pkcs7_signedData type
[  342.928043][ T8396] fuse: Unknown parameter 'user_id00000000000000000000'
[  346.076938][ T8433] netlink: 56 bytes leftover after parsing attributes in process `syz.1.640'.
[  349.116423][ T8447] fuse: Unknown parameter 'user_id00000000000000000000'
[  351.856000][    T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  352.317916][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.329284][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  352.340048][    T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  352.390809][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.453861][    T9] usb 2-1: config 0 descriptor??
[  352.506666][    T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  352.546182][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  352.564331][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  352.610266][    T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  352.632210][    T9] usb 2-1: media controller created
[  352.651239][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  352.697791][ T8472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.718651][ T8472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.749736][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  352.780232][    T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  352.829898][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[  352.867761][ T8483] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  352.974017][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[  352.998451][ T8487] netlink: 36 bytes leftover after parsing attributes in process `syz.5.655'.
[  353.008932][    T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  353.082639][    T9] usb 2-1: USB disconnect, device number 3
[  353.178757][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  353.332871][ T8491] netlink: 'syz.5.656': attribute type 72 has an invalid length.
[  355.414328][ T8510] Invalid ELF header magic: != ELF
[  358.360630][ T8539] overlayfs: failed to resolve './file0': -2
[  359.285751][ T5944] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  359.358654][ T8560] Driver unsupported XDP return value 0 on prog  (id 141) dev N/A, expect packet loss!
[  359.425894][ T5944] usb 2-1: device descriptor read/64, error -71
[  359.763013][ T5944] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  360.675690][ T5944] usb 2-1: device descriptor read/64, error -71
[  360.785639][ T5944] usb usb2-port1: attempt power cycle
[  361.130081][ T5944] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  361.177203][ T5944] usb 2-1: device descriptor read/8, error -71
[  361.622651][ T5944] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[  361.666884][ T5944] usb 2-1: device descriptor read/8, error -71
[  361.760486][ T8591] FAULT_INJECTION: forcing a failure.
[  361.760486][ T8591] name failslab, interval 1, probability 0, space 0, times 0
[  361.775997][ T8591] CPU: 0 UID: 0 PID: 8591 Comm: syz.2.692 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  361.776023][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  361.776034][ T8591] Call Trace:
[  361.776043][ T8591]  <TASK>
[  361.776052][ T8591]  dump_stack_lvl+0x189/0x250
[  361.776082][ T8591]  ? __pfx____ratelimit+0x10/0x10
[  361.776104][ T8591]  ? __pfx_dump_stack_lvl+0x10/0x10
[  361.776127][ T8591]  ? __pfx__printk+0x10/0x10
[  361.776162][ T8591]  ? __pfx___might_resched+0x10/0x10
[  361.776183][ T8591]  ? fs_reclaim_acquire+0x7d/0x100
[  361.776213][ T8591]  should_fail_ex+0x414/0x560
[  361.776242][ T8591]  should_failslab+0xa8/0x100
[  361.776267][ T8591]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  361.776288][ T8591]  ? __alloc_skb+0x112/0x2d0
[  361.776321][ T8591]  __alloc_skb+0x112/0x2d0
[  361.776353][ T8591]  netlink_ack+0x146/0xa50
[  361.776377][ T8591]  ? __pfx_genl_rcv_msg+0x10/0x10
[  361.776397][ T8591]  ? __pfx_devlink_nl_pre_doit+0x10/0x10
[  361.776416][ T8591]  ? __pfx_devlink_nl_post_doit+0x10/0x10
[  361.776452][ T8591]  netlink_rcv_skb+0x28c/0x470
[  361.776481][ T8591]  ? __pfx_genl_rcv_msg+0x10/0x10
[  361.776505][ T8591]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  361.776554][ T8591]  ? down_read+0x1ad/0x2e0
[  361.776582][ T8591]  genl_rcv+0x28/0x40
[  361.776610][ T8591]  netlink_unicast+0x75c/0x8e0
[  361.776650][ T8591]  netlink_sendmsg+0x805/0xb30
[  361.776678][ T8591]  ? lockdep_hardirqs_on+0x9c/0x150
[  361.776709][ T8591]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.776740][ T8591]  ? trace_irq_disable+0x37/0x110
[  361.776772][ T8591]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  361.776792][ T8591]  ? __pfx_netlink_sendmsg+0x10/0x10
[  361.776822][ T8591]  __sock_sendmsg+0x21c/0x270
[  361.776850][ T8591]  ____sys_sendmsg+0x505/0x830
[  361.776888][ T8591]  ? __pfx_____sys_sendmsg+0x10/0x10
[  361.776930][ T8591]  ? import_iovec+0x74/0xa0
[  361.776963][ T8591]  ___sys_sendmsg+0x21f/0x2a0
[  361.776997][ T8591]  ? __pfx____sys_sendmsg+0x10/0x10
[  361.777073][ T8591]  ? __fget_files+0x2a/0x420
[  361.777095][ T8591]  ? __fget_files+0x3a0/0x420
[  361.777130][ T8591]  __x64_sys_sendmsg+0x19b/0x260
[  361.777164][ T8591]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  361.777218][ T8591]  ? do_syscall_64+0xbe/0x3b0
[  361.777245][ T8591]  do_syscall_64+0xfa/0x3b0
[  361.777269][ T8591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.777288][ T8591]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  361.777308][ T8591]  ? clear_bhb_loop+0x60/0xb0
[  361.777333][ T8591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  361.777358][ T8591] RIP: 0033:0x7f687938e9a9
[  361.777377][ T8591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  361.777393][ T8591] RSP: 002b:00007f687a19a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.777415][ T8591] RAX: ffffffffffffffda RBX: 00007f68795b6160 RCX: 00007f687938e9a9
[  361.777430][ T8591] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000008
[  361.777443][ T8591] RBP: 00007f687a19a090 R08: 0000000000000000 R09: 0000000000000000
[  361.777455][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.777467][ T8591] R13: 0000000000000000 R14: 00007f68795b6160 R15: 00007ffc2fca8048
[  361.777501][ T8591]  </TASK>
[  362.063566][ T5944] usb usb2-port1: unable to enumerate USB device
[  362.068030][    C0] vkms_vblank_simulate: vblank timer overrun
[  363.996415][ T8613] FAULT_INJECTION: forcing a failure.
[  363.996415][ T8613] name failslab, interval 1, probability 0, space 0, times 0
[  364.073389][ T8613] CPU: 1 UID: 0 PID: 8613 Comm: syz.1.703 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  364.073422][ T8613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  364.073434][ T8613] Call Trace:
[  364.073442][ T8613]  <TASK>
[  364.073451][ T8613]  dump_stack_lvl+0x189/0x250
[  364.073481][ T8613]  ? __pfx____ratelimit+0x10/0x10
[  364.073503][ T8613]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.073526][ T8613]  ? __pfx__printk+0x10/0x10
[  364.073560][ T8613]  ? __pfx___might_resched+0x10/0x10
[  364.073618][ T8613]  ? fs_reclaim_acquire+0x7d/0x100
[  364.073649][ T8613]  should_fail_ex+0x414/0x560
[  364.073678][ T8613]  should_failslab+0xa8/0x100
[  364.073703][ T8613]  __kmalloc_noprof+0xcb/0x4f0
[  364.073720][ T8613]  ? kfree+0x4d/0x440
[  364.073747][ T8613]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  364.073780][ T8613]  tomoyo_realpath_from_path+0xe3/0x5d0
[  364.073808][ T8613]  ? tomoyo_domain+0xda/0x130
[  364.073842][ T8613]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  364.073864][ T8613]  tomoyo_path_number_perm+0x1e8/0x5a0
[  364.073890][ T8613]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  364.073933][ T8613]  ? __lock_acquire+0xab9/0xd20
[  364.073978][ T8613]  ? __fget_files+0x2a/0x420
[  364.074005][ T8613]  ? __fget_files+0x2a/0x420
[  364.074027][ T8613]  ? __fget_files+0x3a0/0x420
[  364.074048][ T8613]  ? __fget_files+0x2a/0x420
[  364.074075][ T8613]  security_file_ioctl+0xcb/0x2d0
[  364.074102][ T8613]  __se_sys_ioctl+0x47/0x170
[  364.074135][ T8613]  do_syscall_64+0xfa/0x3b0
[  364.074157][ T8613]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.074178][ T8613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.074198][ T8613]  ? clear_bhb_loop+0x60/0xb0
[  364.074223][ T8613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.074252][ T8613] RIP: 0033:0x7f768ab8e9a9
[  364.074271][ T8613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  364.074287][ T8613] RSP: 002b:00007f768ba1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  364.074309][ T8613] RAX: ffffffffffffffda RBX: 00007f768adb5fa0 RCX: 00007f768ab8e9a9
[  364.074329][ T8613] RDX: 0000200000000280 RSI: 0000000040047451 RDI: 0000000000000003
[  364.074342][ T8613] RBP: 00007f768ba1e090 R08: 0000000000000000 R09: 0000000000000000
[  364.074355][ T8613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  364.074367][ T8613] R13: 0000000000000000 R14: 00007f768adb5fa0 R15: 00007ffc3031e848
[  364.074400][ T8613]  </TASK>
[  364.401972][ T8613] ERROR: Out of memory at tomoyo_realpath_from_path.
[  366.254951][  T980] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  366.443349][  T980] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  366.510954][  T980] usb 2-1: config 1 interface 0 has no altsetting 0
[  366.636884][ T8648] netlink: 56 bytes leftover after parsing attributes in process `syz.5.715'.
[  366.854089][  T980] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40
[  366.865227][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.874077][  T980] usb 2-1: Product: syz
[  366.879858][  T980] usb 2-1: Manufacturer: syz
[  366.886056][  T980] usb 2-1: SerialNumber: syz
[  366.975559][ T5886] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  367.112941][ T8637] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.711'.
[  367.158569][ T5886] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  367.216546][ T5886] usb 1-1: config 0 has no interface number 0
[  367.259099][  T980] usbhid 2-1:1.0: can't add hid device: -71
[  367.262737][ T5886] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  367.275600][  T980] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  367.326608][ T5886] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  367.377243][  T980] usb 2-1: USB disconnect, device number 8
[  367.383908][ T5886] usb 1-1: config 0 interface 255 has no altsetting 0
[  367.430711][ T5886] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  367.451414][ T8657] 9pnet: Could not find request transport: fd0x00000000000000060x0000000000000007
[  367.483623][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.708411][ T8668] syzkaller0: entered promiscuous mode
[  367.729650][ T8668] syzkaller0: entered allmulticast mode
[  367.762236][ T5886] usb 1-1: config 0 descriptor??
[  367.777663][ T5886] ums-realtek 1-1:0.255: USB Mass Storage device detected
[  368.478515][ T8675] 9pnet: Could not find request transport: fd0x00000000000000060x0000000000000007
[  368.848255][ T5886] usb 1-1: USB disconnect, device number 11
[  369.000256][ T8683] netlink: 828 bytes leftover after parsing attributes in process `syz.1.722'.
[  369.403686][ T8683] netlink: 828 bytes leftover after parsing attributes in process `syz.1.722'.
[  372.595671][ T5944] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  373.522787][ T5944] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  373.532480][ T8728] netlink: 'syz.2.737': attribute type 72 has an invalid length.
[  373.564529][ T8728] netlink: 'syz.2.737': attribute type 8 has an invalid length.
[  373.651015][ T8728] netlink: 'syz.2.737': attribute type 72 has an invalid length.
[  373.660542][ T8728] netlink: 'syz.2.737': attribute type 8 has an invalid length.
[  373.701763][ T5944] usb 1-1: config 0 has no interface number 0
[  373.710701][ T5944] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  373.722909][ T5944] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  373.737500][ T5944] usb 1-1: config 0 interface 255 has no altsetting 0
[  373.744341][ T5944] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  373.765796][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.815423][ T5944] usb 1-1: config 0 descriptor??
[  373.910572][ T5944] ums-realtek 1-1:0.255: USB Mass Storage device detected
[  374.393986][ T8743] 9pnet: Unknown protocol version 9p
[  375.049081][ T8735] Invalid ELF header magic: != ELF
[  375.102296][ T8732] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  375.322092][ T5944] usb 1-1: USB disconnect, device number 12
[  375.615435][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'.
[  376.493599][ T8759] Invalid ELF header magic: != ELF
[  377.764254][ T8767] syzkaller0: entered promiscuous mode
[  377.784039][ T8767] syzkaller0: entered allmulticast mode
[  378.229646][ T8774] netlink: 'syz.3.750': attribute type 72 has an invalid length.
[  378.289831][ T8774] netlink: 'syz.3.750': attribute type 8 has an invalid length.
[  378.347440][ T8774] netlink: 'syz.3.750': attribute type 72 has an invalid length.
[  378.382529][ T8774] netlink: 'syz.3.750': attribute type 8 has an invalid length.
[  378.654055][ T8782] netlink: 32 bytes leftover after parsing attributes in process `syz.5.754'.
[  378.668529][ T8782] netlink: 32 bytes leftover after parsing attributes in process `syz.5.754'.
[  378.682450][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  378.682546][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  378.766880][ T8788] 9pnet: Unknown protocol version 9p
[  379.395953][ T5886] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  379.507696][  T980] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  379.580345][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  379.618032][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  379.643489][ T5886] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  379.664017][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.687936][  T980] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  379.692047][ T5886] usb 6-1: config 0 descriptor??
[  379.726444][  T980] usb 2-1: config 0 has no interface number 0
[  379.732606][  T980] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  379.781615][  T980] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  379.821337][  T980] usb 2-1: config 0 interface 255 has no altsetting 0
[  379.838157][  T980] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  379.850859][  T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.867698][  T980] usb 2-1: config 0 descriptor??
[  379.883092][  T980] ums-realtek 2-1:0.255: USB Mass Storage device detected
[  380.382909][  T980] usb 6-1: USB disconnect, device number 7
[  380.867517][ T8812] syzkaller0: entered promiscuous mode
[  380.873643][ T8812] syzkaller0: entered allmulticast mode
[  380.977004][ T5886] usb 2-1: USB disconnect, device number 9
[  387.843992][   T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  388.158443][   T24] usb 6-1: Using ep0 maxpacket: 8
[  388.280914][   T24] usb 6-1: config 0 has an invalid interface number: 143 but max is 0
[  388.472508][   T24] usb 6-1: config 0 has no interface number 0
[  388.635936][   T24] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  388.798792][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.029443][ T8863] FAULT_INJECTION: forcing a failure.
[  389.029443][ T8863] name failslab, interval 1, probability 0, space 0, times 0
[  389.086699][ T8863] CPU: 0 UID: 0 PID: 8863 Comm: syz.2.777 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  389.086731][ T8863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  389.086744][ T8863] Call Trace:
[  389.086752][ T8863]  <TASK>
[  389.086761][ T8863]  dump_stack_lvl+0x189/0x250
[  389.086791][ T8863]  ? __pfx____ratelimit+0x10/0x10
[  389.086815][ T8863]  ? __pfx_dump_stack_lvl+0x10/0x10
[  389.086838][ T8863]  ? __pfx__printk+0x10/0x10
[  389.086867][ T8863]  ? __pfx___might_resched+0x10/0x10
[  389.086890][ T8863]  ? fs_reclaim_acquire+0x7d/0x100
[  389.086920][ T8863]  should_fail_ex+0x414/0x560
[  389.086948][ T8863]  should_failslab+0xa8/0x100
[  389.086973][ T8863]  __kmalloc_noprof+0xcb/0x4f0
[  389.086992][ T8863]  ? tomoyo_encode+0x28b/0x550
[  389.087024][ T8863]  tomoyo_encode+0x28b/0x550
[  389.087053][ T8863]  tomoyo_realpath_from_path+0x58d/0x5d0
[  389.087075][ T8863]  ? tomoyo_domain+0xda/0x130
[  389.087108][ T8863]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  389.087131][ T8863]  tomoyo_path_number_perm+0x1e8/0x5a0
[  389.087156][ T8863]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  389.087199][ T8863]  ? __lock_acquire+0xab9/0xd20
[  389.087245][ T8863]  ? __fget_files+0x2a/0x420
[  389.087272][ T8863]  ? __fget_files+0x2a/0x420
[  389.087303][ T8863]  ? __fget_files+0x3a0/0x420
[  389.087324][ T8863]  ? __fget_files+0x2a/0x420
[  389.087352][ T8863]  security_file_ioctl+0xcb/0x2d0
[  389.087379][ T8863]  __se_sys_ioctl+0x47/0x170
[  389.087411][ T8863]  do_syscall_64+0xfa/0x3b0
[  389.087435][ T8863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.087454][ T8863]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  389.087473][ T8863]  ? clear_bhb_loop+0x60/0xb0
[  389.087498][ T8863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.087518][ T8863] RIP: 0033:0x7f687938e9a9
[  389.087538][ T8863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  389.087555][ T8863] RSP: 002b:00007f687a1dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  389.087578][ T8863] RAX: ffffffffffffffda RBX: 00007f68795b5fa0 RCX: 00007f687938e9a9
[  389.087594][ T8863] RDX: 0000000000000000 RSI: 0000000000005434 RDI: 0000000000000003
[  389.087607][ T8863] RBP: 00007f687a1dc090 R08: 0000000000000000 R09: 0000000000000000
[  389.087620][ T8863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  389.087631][ T8863] R13: 0000000000000000 R14: 00007f68795b5fa0 R15: 00007ffc2fca8048
[  389.087666][ T8863]  </TASK>
[  389.087692][ T8863] ERROR: Out of memory at tomoyo_realpath_from_path.
[  389.259713][   T24] usb 6-1: config 0 descriptor??
[  389.977309][ T8882] netlink: 56 bytes leftover after parsing attributes in process `syz.1.781'.
[  390.005579][ T5886] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  391.060806][   T24] usb 6-1: can't set config #0, error -71
[  391.832532][ T5886] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  392.736656][   T24] usb 6-1: USB disconnect, device number 8
[  393.368447][ T5886] usb 1-1: config 0 has no interface number 0
[  394.561425][ T5886] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  395.029920][ T5886] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  395.044406][ T5886] usb 1-1: config 0 interface 255 has no altsetting 0
[  395.051900][ T5886] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  395.075680][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.119877][ T5886] usb 1-1: config 0 descriptor??
[  395.126903][ T5886] usb 1-1: can't set config #0, error -71
[  395.137371][ T5886] usb 1-1: USB disconnect, device number 13
[  396.259505][ T8895] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  398.827068][ T8918] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  399.266030][ T8915] net_ratelimit: 30 callbacks suppressed
[  399.266051][ T8915] sctp: failed to load transform for md5: -2
[  402.305687][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  402.355569][ T8939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.797'.
[  402.403269][ T8939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.797'.
[  402.523428][   T10] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  402.574455][   T10] usb 4-1: config 0 has no interface number 0
[  402.592992][   T10] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  403.462185][   T10] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  403.494447][   T10] usb 4-1: config 0 interface 255 has no altsetting 0
[  403.511578][   T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  403.528458][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.573269][   T10] usb 4-1: config 0 descriptor??
[  403.636220][   T10] ums-realtek 4-1:0.255: USB Mass Storage device detected
[  403.841641][ T8955] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  403.852636][ T8955] PKCS7: Only support pkcs7_signedData type
[  404.275510][   T10] usb 4-1: USB disconnect, device number 5
[  408.500720][ T9000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  409.153388][ T9003] Invalid ELF header magic: != ELF
[  411.023474][ T9031] gtp0: entered promiscuous mode
[  411.074036][ T9031] gtp0: entered allmulticast mode
[  412.550563][ T9044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  413.721796][ T9058] 9pnet: Unknown protocol version 9p
[  414.899632][  T980] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  415.088206][  T980] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  415.122364][  T980] usb 6-1: config 0 has no interface number 0
[  415.159998][  T980] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  415.203692][  T980] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  415.236282][  T980] usb 6-1: config 0 interface 255 has no altsetting 0
[  415.243149][  T980] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  415.319571][  T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.349629][  T980] usb 6-1: config 0 descriptor??
[  415.368864][  T980] ums-realtek 6-1:0.255: USB Mass Storage device detected
[  415.673773][  T980] usb 6-1: USB disconnect, device number 9
[  418.529761][ T9101] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  418.532884][ T9087] Invalid ELF header magic: != ELF
[  418.905869][ T9109] 9pnet: Unknown protocol version 9p
[  419.130789][ T9112] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  419.453084][ T9103] Invalid ELF header magic: != ELF
[  420.146099][  T980] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  420.438300][  T980] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  420.448568][  T980] usb 6-1: config 0 has no interface number 0
[  420.455829][  T980] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  420.470519][  T980] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  420.488360][  T980] usb 6-1: config 0 interface 255 has no altsetting 0
[  420.499348][  T980] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  420.509935][  T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.522386][  T980] usb 6-1: config 0 descriptor??
[  420.536211][  T980] ums-realtek 6-1:0.255: USB Mass Storage device detected
[  421.268590][  T980] usb 6-1: USB disconnect, device number 10
[  421.506313][ T9137] trusted_key: encrypted_key: key user:syz not found
[  421.551484][ T9139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'.
[  422.256981][ T9151] 9pnet: Unknown protocol version 9p
[  425.486586][ T9177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  425.588265][ T9177] tipc: Resetting bearer <eth:syzkaller0>
[  425.656299][ T9176] tipc: Disabling bearer <eth:syzkaller0>
[  425.798203][ T9191] syz.2.880 uses obsolete (PF_INET,SOCK_PACKET)
[  426.252600][ T9199] batadv1: entered promiscuous mode
[  427.920460][   T49] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  428.355377][  T980] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  428.537183][  T980] usb 2-1: Using ep0 maxpacket: 32
[  428.573713][  T980] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.633763][  T980] usb 2-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  428.669148][  T980] usb 2-1: config 1 interface 0 has no altsetting 0
[  428.687058][  T980] usb 2-1: language id specifier not provided by device, defaulting to English
[  428.702599][  T980] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.40
[  428.720341][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.730266][  T980] usb 2-1: Product: syz
[  428.736826][  T980] usb 2-1: Manufacturer: 隒邝运ၒ庢綾qᡫ⸼竈㏷噧르讛訮魧陓軴嵽昚Ḃ꺛㧻睤敾ꜛ꺱쥯暵茠ꏛ箜呉珟觧儗餀널ᡯﷺꐤ̀떓薨䀣鬲䚩홁懒裃鬺笼静솅ꉺ쎁尿뒙
[  428.761006][  T980] usb 2-1: SerialNumber: syz
[  428.866440][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  429.035794][    T9] usb 3-1: Using ep0 maxpacket: 32
[  429.056032][  T980] usbhid 2-1:1.0: can't add hid device: -71
[  429.067726][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  429.080672][  T980] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  429.107699][  T980] usb 2-1: USB disconnect, device number 10
[  429.124011][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  429.170016][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  429.186521][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.223653][    T9] usb 3-1: config 0 descriptor??
[  429.277675][    T9] hub 3-1:0.0: USB hub found
[  429.581179][    T9] hub 3-1:0.0: 2 ports detected
[  429.912626][ T9237] fuse: Bad value for 'fd'
[  429.987267][    T9] hub 3-1:0.0: hub_hub_status failed (err = -32)
[  429.997329][    T9] hub 3-1:0.0: config failed, can't get hub status (err -32)
[  430.030835][ T9230] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  430.038118][ T9236] netlink: 32 bytes leftover after parsing attributes in process `syz.3.896'.
[  430.947058][ T9254] netlink: 32 bytes leftover after parsing attributes in process `syz.5.902'.
[  431.048085][ T9254] netlink: 32 bytes leftover after parsing attributes in process `syz.5.902'.
[  431.514269][ T5911] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  433.016422][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  433.040218][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  433.082443][ T5911] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  433.106234][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.130072][ T5911] usb 6-1: config 0 descriptor??
[  433.394116][ T5911] usb 6-1: USB disconnect, device number 11
[  433.407271][ T9271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.905'.
[  433.433343][ T9271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.905'.
[  433.716014][ T5944] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  434.676285][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  434.715138][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  435.156474][    T9] usbhid 3-1:0.0: can't add hid device: -32
[  435.186120][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  435.192369][ T5944] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  435.204182][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.237535][ T5944] usb 2-1: config 0 descriptor??
[  435.343544][ T9280] netlink: 828 bytes leftover after parsing attributes in process `syz.5.908'.
[  435.422635][ T9281] netlink: 828 bytes leftover after parsing attributes in process `syz.5.908'.
[  435.463010][ T5944] usb 2-1: USB disconnect, device number 11
[  435.560500][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'.
[  437.054588][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.918'.
[  438.005716][ T9316] Invalid ELF header magic: != ELF
[  438.109203][ T9317] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  438.330802][ T9324] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  438.391433][ T9323] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.922'.
[  438.475275][ T9321] Invalid ELF header magic: != ELF
[  438.901022][ T9328] PM: Enabling pm_trace changes system date and time during resume.
[  438.901022][ T9328] PM: Correct system time has to be restored manually after resume.
[  440.041414][ T9332] veth1_macvtap: left promiscuous mode
[  440.050918][ T9332] macsec0: entered promiscuous mode
[  440.059007][ T9332] macsec0: entered allmulticast mode
[  440.187290][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  440.193841][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  445.005579][ T9368] 9pnet: Unknown protocol version 9p
[  446.600042][ T5944] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  447.737751][ T5944] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[  447.780466][ T5944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  447.814877][ T5944] usb 6-1: config 0 has no interface number 0
[  447.821089][ T5944] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  447.885628][ T5944] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  447.930180][ T5944] usb 6-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  447.995768][ T5944] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  448.023233][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.058771][ T5944] usb 6-1: Product: syz
[  448.071366][ T5944] usb 6-1: Manufacturer: syz
[  448.086194][ T5944] usb 6-1: SerialNumber: syz
[  448.120850][ T5944] usb 6-1: config 0 descriptor??
[  448.143512][ T5944] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  448.177069][ T5944] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  448.211567][ T9386] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  448.224071][ T9386] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  448.237435][ T9386] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  448.270193][ T9386] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  448.283328][ T9386] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  448.319652][ T5944] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  448.885749][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.937'.
[  449.090535][ T5952] usb 6-1: USB disconnect, device number 12
[  449.122227][ T5952] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  449.136280][ T9391] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  449.209080][ T5952] cyberjack 6-1:0.69: device disconnected
[  449.975581][ T5952] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  450.009678][ T9384] chnl_net:caif_netlink_parms(): no params data found
[  450.217313][ T5952] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  450.307371][ T5952] usb 2-1: config 0 has no interface number 0
[  450.313950][ T5952] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  450.357428][ T9386] Bluetooth: hci1: command tx timeout
[  450.791426][ T5952] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  450.827368][ T9384] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.844973][ T9384] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.881785][ T5952] usb 2-1: config 0 interface 255 has no altsetting 0
[  450.889277][ T9384] bridge_slave_0: entered allmulticast mode
[  450.897834][ T5952] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  450.908120][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.966910][ T9384] bridge_slave_0: entered promiscuous mode
[  450.979000][ T5952] usb 2-1: config 0 descriptor??
[  450.981896][ T9384] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.999327][ T5952] ums-realtek 2-1:0.255: USB Mass Storage device detected
[  451.041459][ T9384] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.073010][ T9384] bridge_slave_1: entered allmulticast mode
[  451.084092][ T9384] bridge_slave_1: entered promiscuous mode
[  451.361530][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.949'.
[  452.291695][ T9384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  452.316009][ T9384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.435340][ T9386] Bluetooth: hci1: command tx timeout
[  452.502406][ T9384] team0: Port device team_slave_0 added
[  452.522197][ T9384] team0: Port device team_slave_1 added
[  452.584156][  T980] usb 2-1: USB disconnect, device number 12
[  452.896092][ T9384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.906705][ T9384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  453.015643][ T9384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.069745][ T9384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.087629][ T9384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  453.117698][ T9384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  454.516541][ T9386] Bluetooth: hci1: command tx timeout
[  456.138566][ T9459] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  456.555836][ T9384] hsr_slave_0: entered promiscuous mode
[  456.599181][ T9386] Bluetooth: hci1: command tx timeout
[  456.618858][ T9384] hsr_slave_1: entered promiscuous mode
[  456.667748][ T9384] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  456.828221][ T9384] Cannot create hsr debugfs directory
[  457.056576][  T980] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  458.543530][  T980] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  458.576895][  T980] usb 1-1: config 0 has no interface number 0
[  458.583056][  T980] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  458.638127][  T980] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  458.691704][  T980] usb 1-1: config 0 interface 255 has no altsetting 0
[  458.746109][  T980] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  458.802542][  T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.900982][  T980] usb 1-1: config 0 descriptor??
[  458.971055][  T980] ums-realtek 1-1:0.255: USB Mass Storage device detected
[  459.382001][ T9384] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  459.636594][ T9384] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  459.747132][ T9384] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  460.030587][ T9384] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  460.099494][   T24] usb 1-1: USB disconnect, device number 14
[  462.113089][ T9384] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.306691][ T9384] 8021q: adding VLAN 0 to HW filter on device team0
[  462.446642][ T6293] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.453777][ T6293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.529467][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.536720][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  462.828042][    T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  463.276685][    T9] usb 6-1: config index 0 descriptor too short (expected 65069, got 45)
[  463.496034][    T9] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  463.512646][ T9384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  463.558960][    T9] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  463.587280][    T9] usb 6-1: config 0 has an invalid descriptor of length 177, skipping remainder of the config
[  463.663608][    T9] usb 6-1: config 0 has no interfaces?
[  463.703392][    T9] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  463.742619][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.793342][    T9] usb 6-1: config 0 descriptor??
[  464.067108][    T9] usb 6-1: USB disconnect, device number 13
[  464.306111][  T980] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  464.523059][ T9384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.587234][  T980] usb 2-1: Using ep0 maxpacket: 8
[  464.664481][  T980] usb 2-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9
[  464.681064][  T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.732748][  T980] usb 2-1: config 0 descriptor??
[  464.862496][  T980] usblcd 2-1:0.0: USBLCD model not supported.
[  465.157053][ T9541] mmap: syz.1.981 (9541) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  465.296379][  T980] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  465.552555][  T980] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  465.577721][  T980] usb 6-1: config 0 has no interface number 0
[  465.594254][  T980] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  465.627283][  T980] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  465.689990][  T980] usb 6-1: config 0 interface 255 has no altsetting 0
[  465.721307][  T980] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  465.736941][  T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.778103][ T9384] veth0_vlan: entered promiscuous mode
[  465.785648][  T980] usb 6-1: config 0 descriptor??
[  465.831915][  T980] ums-realtek 6-1:0.255: USB Mass Storage device detected
[  465.851534][ T9384] veth1_vlan: entered promiscuous mode
[  465.997441][ T9384] veth0_macvtap: entered promiscuous mode
[  466.053847][  T980] usb 6-1: USB disconnect, device number 14
[  466.062637][ T9384] veth1_macvtap: entered promiscuous mode
[  466.262168][ T9384] batman_adv: batadv0: Interface activated: batadv_slave_0
[  466.321845][ T9384] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.403026][ T9384] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.601822][ T9384] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.616609][ T9384] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.627525][ T9384] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  467.769584][ T9569] netlink: 892 bytes leftover after parsing attributes in process `syz.5.987'.
[  467.782901][ T6293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.815830][ T6293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.878531][ T9569] netlink: 892 bytes leftover after parsing attributes in process `syz.5.987'.
[  467.926511][ T6293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.938825][ T6293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.065730][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'.
[  468.090259][ T9512] usb 2-1: USB disconnect, device number 13
[  468.139917][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'.
[  468.782475][ T9582] Invalid ELF header magic: != ELF
[  469.046831][ T9581] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  469.456284][ T9589] FAULT_INJECTION: forcing a failure.
[  469.456284][ T9589] name failslab, interval 1, probability 0, space 0, times 0
[  469.495854][ T9589] CPU: 1 UID: 0 PID: 9589 Comm: syz.1.993 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  469.495885][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  469.495898][ T9589] Call Trace:
[  469.495907][ T9589]  <TASK>
[  469.495916][ T9589]  dump_stack_lvl+0x189/0x250
[  469.495948][ T9589]  ? __pfx____ratelimit+0x10/0x10
[  469.495972][ T9589]  ? __pfx_dump_stack_lvl+0x10/0x10
[  469.495997][ T9589]  ? __pfx__printk+0x10/0x10
[  469.496041][ T9589]  should_fail_ex+0x414/0x560
[  469.496071][ T9589]  should_failslab+0xa8/0x100
[  469.496097][ T9589]  kmem_cache_alloc_noprof+0x73/0x3c0
[  469.496119][ T9589]  ? skb_clone+0x212/0x3a0
[  469.496147][ T9589]  skb_clone+0x212/0x3a0
[  469.496173][ T9589]  __netlink_deliver_tap+0x404/0x850
[  469.496219][ T9589]  ? netlink_deliver_tap+0x2e/0x1b0
[  469.496251][ T9589]  netlink_deliver_tap+0x19c/0x1b0
[  469.496282][ T9589]  netlink_sendskb+0x68/0x140
[  469.496312][ T9589]  netlink_rcv_skb+0x28c/0x470
[  469.496343][ T9589]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  469.496373][ T9589]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  469.496419][ T9589]  ? netlink_deliver_tap+0x2e/0x1b0
[  469.496447][ T9589]  ? netlink_deliver_tap+0x2e/0x1b0
[  469.496484][ T9589]  netlink_unicast+0x75c/0x8e0
[  469.496524][ T9589]  netlink_sendmsg+0x805/0xb30
[  469.496565][ T9589]  ? __pfx_netlink_sendmsg+0x10/0x10
[  469.496597][ T9589]  ? __lock_acquire+0xab9/0xd20
[  469.496624][ T9589]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  469.496644][ T9589]  ? __pfx_netlink_sendmsg+0x10/0x10
[  469.496676][ T9589]  __sock_sendmsg+0x21c/0x270
[  469.496706][ T9589]  sock_write_iter+0x258/0x330
[  469.496733][ T9589]  ? __pfx_sock_write_iter+0x10/0x10
[  469.496780][ T9589]  ? bpf_lsm_file_permission+0x9/0x20
[  469.496802][ T9589]  ? security_file_permission+0x75/0x290
[  469.496838][ T9589]  vfs_write+0x54b/0xa90
[  469.496865][ T9589]  ? __pfx_sock_write_iter+0x10/0x10
[  469.496896][ T9589]  ? __pfx_vfs_write+0x10/0x10
[  469.496930][ T9589]  ? __fget_files+0x2a/0x420
[  469.496965][ T9589]  ksys_write+0x145/0x250
[  469.496989][ T9589]  ? __pfx_ksys_write+0x10/0x10
[  469.497007][ T9589]  ? rcu_is_watching+0x15/0xb0
[  469.497037][ T9589]  ? do_syscall_64+0xbe/0x3b0
[  469.497066][ T9589]  do_syscall_64+0xfa/0x3b0
[  469.497089][ T9589]  ? lockdep_hardirqs_on+0x9c/0x150
[  469.497112][ T9589]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.497132][ T9589]  ? clear_bhb_loop+0x60/0xb0
[  469.497159][ T9589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.497179][ T9589] RIP: 0033:0x7f768ab8e9a9
[  469.497199][ T9589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.497217][ T9589] RSP: 002b:00007f768ba1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  469.497241][ T9589] RAX: ffffffffffffffda RBX: 00007f768adb5fa0 RCX: 00007f768ab8e9a9
[  469.497258][ T9589] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003
[  469.497272][ T9589] RBP: 00007f768ba1e090 R08: 0000000000000000 R09: 0000000000000000
[  469.497286][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.497299][ T9589] R13: 0000000000000000 R14: 00007f768adb5fa0 R15: 00007ffc3031e848
[  469.497335][ T9589]  </TASK>
[  469.997412][ T9591] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.992'.
[  470.186352][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  470.336719][    T9] usb 1-1: device descriptor read/64, error -71
[  470.503835][ T9605] FAULT_INJECTION: forcing a failure.
[  470.503835][ T9605] name failslab, interval 1, probability 0, space 0, times 0
[  470.570593][ T9512] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  470.582527][ T9605] CPU: 1 UID: 0 PID: 9605 Comm: syz.1.999 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  470.582559][ T9605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  470.582572][ T9605] Call Trace:
[  470.582580][ T9605]  <TASK>
[  470.582589][ T9605]  dump_stack_lvl+0x189/0x250
[  470.582618][ T9605]  ? __pfx____ratelimit+0x10/0x10
[  470.582649][ T9605]  ? __pfx_dump_stack_lvl+0x10/0x10
[  470.582670][ T9605]  ? __pfx__printk+0x10/0x10
[  470.582697][ T9605]  ? __pfx___might_resched+0x10/0x10
[  470.582719][ T9605]  ? fs_reclaim_acquire+0x7d/0x100
[  470.582749][ T9605]  should_fail_ex+0x414/0x560
[  470.582776][ T9605]  should_failslab+0xa8/0x100
[  470.582799][ T9605]  __kmalloc_noprof+0xcb/0x4f0
[  470.582816][ T9605]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  470.582834][ T9605]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  470.582863][ T9605]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  470.582884][ T9605]  ? __dev_queue_xmit+0x27e/0x3a70
[  470.582910][ T9605]  genl_family_rcv_msg_doit+0xb8/0x300
[  470.582941][ T9605]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  470.582966][ T9605]  ? rcu_is_watching+0x15/0xb0
[  470.582988][ T9605]  ? cap_capable+0x11f/0x460
[  470.583011][ T9605]  ? safesetid_security_capable+0xa9/0x1a0
[  470.583035][ T9605]  ? bpf_lsm_capable+0x9/0x20
[  470.583059][ T9605]  ? security_capable+0x7e/0x2e0
[  470.583092][ T9605]  genl_rcv_msg+0x60e/0x790
[  470.583121][ T9605]  ? __pfx_genl_rcv_msg+0x10/0x10
[  470.583139][ T9605]  ? ref_tracker_free+0x63a/0x7d0
[  470.583159][ T9605]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  470.583191][ T9605]  ? __pfx_ref_tracker_free+0x10/0x10
[  470.583227][ T9605]  netlink_rcv_skb+0x205/0x470
[  470.583256][ T9605]  ? __pfx_genl_rcv_msg+0x10/0x10
[  470.583279][ T9605]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  470.583327][ T9605]  ? down_read+0x1ad/0x2e0
[  470.583354][ T9605]  genl_rcv+0x28/0x40
[  470.583372][ T9605]  netlink_unicast+0x75c/0x8e0
[  470.583409][ T9605]  netlink_sendmsg+0x805/0xb30
[  470.583447][ T9605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.583484][ T9605]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  470.583504][ T9605]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.583533][ T9605]  __sock_sendmsg+0x21c/0x270
[  470.583561][ T9605]  ____sys_sendmsg+0x505/0x830
[  470.583600][ T9605]  ? __pfx_____sys_sendmsg+0x10/0x10
[  470.583648][ T9605]  ? import_iovec+0x74/0xa0
[  470.583682][ T9605]  ___sys_sendmsg+0x21f/0x2a0
[  470.583713][ T9605]  ? __pfx____sys_sendmsg+0x10/0x10
[  470.583783][ T9605]  ? __fget_files+0x2a/0x420
[  470.583805][ T9605]  ? __fget_files+0x3a0/0x420
[  470.583839][ T9605]  __x64_sys_sendmsg+0x19b/0x260
[  470.583872][ T9605]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  470.583914][ T9605]  ? __pfx_ksys_write+0x10/0x10
[  470.583931][ T9605]  ? rcu_is_watching+0x15/0xb0
[  470.583958][ T9605]  ? do_syscall_64+0xbe/0x3b0
[  470.583985][ T9605]  do_syscall_64+0xfa/0x3b0
[  470.584003][ T9605]  ? lockdep_hardirqs_on+0x9c/0x150
[  470.584025][ T9605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.584046][ T9605]  ? clear_bhb_loop+0x60/0xb0
[  470.584070][ T9605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.584089][ T9605] RIP: 0033:0x7f768ab8e9a9
[  470.584108][ T9605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  470.584127][ T9605] RSP: 002b:00007f768ba1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  470.584150][ T9605] RAX: ffffffffffffffda RBX: 00007f768adb5fa0 RCX: 00007f768ab8e9a9
[  470.584164][ T9605] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  470.584177][ T9605] RBP: 00007f768ba1e090 R08: 0000000000000000 R09: 0000000000000000
[  470.584189][ T9605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.584200][ T9605] R13: 0000000000000000 R14: 00007f768adb5fa0 R15: 00007ffc3031e848
[  470.584233][ T9605]  </TASK>
[  470.586162][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  471.042656][ T9512] usb 7-1: device descriptor read/64, error -71
[  471.190865][    T9] usb 1-1: device descriptor read/64, error -71
[  471.196960][ T9607] netlink: 892 bytes leftover after parsing attributes in process `syz.3.1000'.
[  471.641729][ T9610] netlink: 892 bytes leftover after parsing attributes in process `syz.3.1000'.
[  471.644665][    T9] usb usb1-port1: attempt power cycle
[  471.715738][ T9512] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  472.256591][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  472.300179][    T9] usb 1-1: device descriptor read/8, error -71
[  472.339841][ T9615] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  472.350392][ T9614] Invalid ELF header magic: != ELF
[  472.356894][ T9512] usb 7-1: device descriptor read/64, error -71
[  472.476094][ T9512] usb usb7-port1: attempt power cycle
[  472.548295][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  472.761823][    T9] usb 1-1: device descriptor read/8, error -71
[  472.915862][ T9512] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  472.938928][    T9] usb usb1-port1: unable to enumerate USB device
[  472.950525][ T9512] usb 7-1: device descriptor read/8, error -71
[  473.226024][ T9512] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  473.276419][ T9512] usb 7-1: device descriptor read/8, error -71
[  473.395834][ T9512] usb usb7-port1: unable to enumerate USB device
[  473.965875][ T9636] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1009'.
[  475.181330][ T9647] netlink: 892 bytes leftover after parsing attributes in process `syz.5.1013'.
[  475.252103][ T9652] netlink: 892 bytes leftover after parsing attributes in process `syz.5.1013'.
[  475.451064][ T9650] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  475.477039][   T10] IPVS: starting estimator thread 0...
[  475.576577][ T9655] IPVS: using max 25 ests per chain, 60000 per kthread
[  475.856215][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  476.066570][   T10] usb 4-1: device descriptor read/64, error -71
[  476.327789][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  476.668184][   T10] usb 4-1: device descriptor read/64, error -71
[  476.887712][   T10] usb usb4-port1: attempt power cycle
[  477.326730][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  478.227038][ T9677] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  478.397393][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1024'.
[  478.466762][   T10] usb 4-1: device descriptor read/8, error -71
[  478.481586][ T9682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1024'.
[  478.982641][ T9697] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1025'.
[  479.377847][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  479.588885][   T10] usb 4-1: Using ep0 maxpacket: 16
[  479.697096][   T10] usb 4-1: config 0 has an invalid interface number: 45 but max is 0
[  479.737152][   T10] usb 4-1: config 0 has no interface number 0
[  479.801232][   T10] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=85.00
[  479.837189][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.880870][   T10] usb 4-1: Product: syz
[  479.900010][   T10] usb 4-1: Manufacturer: syz
[  479.906952][   T10] usb 4-1: SerialNumber: syz
[  480.047505][   T10] usb 4-1: config 0 descriptor??
[  480.356951][   T10] cdc_subset 4-1:0.45: probe with driver cdc_subset failed with error -71
[  481.183784][   T10] usb 4-1: USB disconnect, device number 9
[  482.533782][ T9712] 9pnet: Unknown protocol version 9p
[  482.689771][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'.
[  482.843868][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'.
[  484.166015][ T5952] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  484.348315][ T5952] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  484.359826][ T5952] usb 6-1: config 0 has no interface number 0
[  484.385973][ T5952] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  484.415270][ T5952] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  484.478421][ T5952] usb 6-1: config 0 interface 255 has no altsetting 0
[  484.519927][ T5952] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  484.560928][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.634051][ T5952] usb 6-1: config 0 descriptor??
[  484.757611][ T5952] ums-realtek 6-1:0.255: USB Mass Storage device detected
[  484.985388][ T5952] usb 6-1: USB disconnect, device number 15
[  486.040578][ T9752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  486.100463][ T9752] syzkaller0: entered promiscuous mode
[  486.146676][ T9752] syzkaller0: entered allmulticast mode
[  486.224056][ T9752] tipc: Resetting bearer <eth:syzkaller0>
[  486.259684][ T9751] tipc: Resetting bearer <eth:syzkaller0>
[  486.412939][ T9751] tipc: Disabling bearer <eth:syzkaller0>
[  486.552286][ T9758] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1045'.
[  488.367401][ T9771] 9pnet: Unknown protocol version 9p
[  489.674657][ T9787] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  489.681655][ T9787] PKCS7: Only support pkcs7_signedData type
[  491.075655][ T5952] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  491.137310][   T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  491.235765][ T5952] usb 7-1: device descriptor read/64, error -71
[  491.362768][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  491.366318][ T9805] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  491.544250][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  491.752796][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1061'.
[  491.773241][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  491.786396][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.815600][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1061'.
[  491.825583][ T5952] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  491.840505][   T24] usb 2-1: config 0 descriptor??
[  491.965678][ T5952] usb 7-1: device descriptor read/64, error -71
[  492.085917][ T5952] usb usb7-port1: attempt power cycle
[  492.128027][ T5886] usb 2-1: USB disconnect, device number 14
[  493.271090][ T5952] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  493.368354][ T9826] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  493.373192][ T5952] usb 7-1: device descriptor read/8, error -71
[  493.382102][ T9826] PKCS7: Only support pkcs7_signedData type
[  493.705755][ T5952] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  494.114008][ T5952] usb 7-1: device descriptor read/8, error -71
[  494.258262][ T5952] usb usb7-port1: unable to enumerate USB device
[  494.451549][   T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  495.705050][   T24] usb 6-1: Using ep0 maxpacket: 8
[  495.713402][   T24] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  495.722487][   T24] usb 6-1: config 0 has no interface number 0
[  495.729444][   T24] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  495.988726][   T24] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  496.012008][   T24] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  496.034249][   T24] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  496.300553][   T24] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  496.310501][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.077323][   T24] usb 6-1: config 0 descriptor??
[  497.127089][ T9866] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  497.207919][   T24] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  497.366038][   T24] usb 6-1: USB disconnect, device number 16
[  497.456740][   T24] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  497.526367][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  498.217173][    T9] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  498.235505][    T9] usb 2-1: config 0 has no interface number 0
[  498.272407][    T9] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  498.319884][    T9] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  498.343084][    T9] usb 2-1: config 0 interface 255 has no altsetting 0
[  498.353262][    T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  498.372917][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.455750][    T9] usb 2-1: config 0 descriptor??
[  498.466922][    T9] ums-realtek 2-1:0.255: USB Mass Storage device detected
[  498.670647][   T10] usb 2-1: USB disconnect, device number 15
[  498.716607][    T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  498.976732][ T9894] tipc: Started in network mode
[  498.981822][ T9894] tipc: Node identity c2b710146c58, cluster identity 4711
[  499.225754][ T9894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  499.486176][ T9895] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  499.517870][ T9897] syzkaller0: entered promiscuous mode
[  499.523397][ T9897] syzkaller0: entered allmulticast mode
[  499.701332][ T9894] tipc: Resetting bearer <eth:syzkaller0>
[  499.761249][ T9891] tipc: Resetting bearer <eth:syzkaller0>
[  499.781655][    T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  499.796826][    T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  499.809006][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  499.818489][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  499.840165][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  499.877960][ T9891] tipc: Disabling bearer <eth:syzkaller0>
[  499.884010][    T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  499.933909][    T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  499.957343][    T9] usb 6-1: Product: syz
[  499.979049][    T9] usb 6-1: Manufacturer: syz
[  500.001611][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  500.022302][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  500.034262][    T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  500.050225][    T9] cdc_wdm 6-1:1.0: Unknown control protocol
[  500.277256][ T9908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1092'.
[  500.290031][ T9908] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  500.326900][ T9908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  501.015512][ T9921] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  501.563942][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  501.571282][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  502.962811][ T9934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  503.075779][ T9938] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1101'.
[  503.268230][ T9512] usb 6-1: USB disconnect, device number 17
[  503.535964][   T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  504.200611][   T24] usb 2-1: Using ep0 maxpacket: 8
[  504.255946][ T9944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.302747][ T9944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.908631][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  504.961590][ T9969] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1112'.
[  506.219270][ T9972] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.1113'.
[  506.266572][    T9] usb 4-1: Using ep0 maxpacket: 8
[  506.316525][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  506.336784][    T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  506.354115][    T9] usb 4-1: config 0 has no interface number 0
[  506.362700][    T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  506.369601][   T24] usb 2-1: unable to read config index 0 descriptor/start: -71
[  506.379694][    T9] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  506.401644][    T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  506.417835][    T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  506.438150][   T24] usb 2-1: can't read configurations, error -71
[  506.463532][    T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  506.496600][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.520195][    T9] usb 4-1: config 0 descriptor??
[  506.542329][    T9] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  506.922566][ T5952] usb 4-1: USB disconnect, device number 10
[  507.087833][ T5952] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  507.225790][ T9996] random: crng reseeded on system resumption
[  508.726410][T10003] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  509.562340][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1124'.
[  511.530954][T10030] netlink: 'syz.5.1130': attribute type 72 has an invalid length.
[  511.590693][T10036] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1129'.
[  511.909624][T10046] binder: 10042:10046 ioctl c0306201 200000000640 returned -22
[  512.058361][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'.
[  512.206959][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'.
[  512.854868][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1136'.
[  513.468144][T10070] FAULT_INJECTION: forcing a failure.
[  513.468144][T10070] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  513.511266][T10070] CPU: 1 UID: 0 PID: 10070 Comm: syz.1.1141 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  513.511300][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  513.511312][T10070] Call Trace:
[  513.511320][T10070]  <TASK>
[  513.511329][T10070]  dump_stack_lvl+0x189/0x250
[  513.511359][T10070]  ? __pfx____ratelimit+0x10/0x10
[  513.511382][T10070]  ? __pfx_dump_stack_lvl+0x10/0x10
[  513.511404][T10070]  ? __pfx__printk+0x10/0x10
[  513.511445][T10070]  should_fail_ex+0x414/0x560
[  513.511473][T10070]  _copy_from_user+0x2d/0xb0
[  513.511502][T10070]  memdup_user+0x5e/0xd0
[  513.511528][T10070]  __se_sys_kexec_load+0x109/0x160
[  513.511554][T10070]  do_syscall_64+0xfa/0x3b0
[  513.511575][T10070]  ? lockdep_hardirqs_on+0x9c/0x150
[  513.511596][T10070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.511616][T10070]  ? clear_bhb_loop+0x60/0xb0
[  513.511641][T10070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.511661][T10070] RIP: 0033:0x7f768ab8e9a9
[  513.511681][T10070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  513.511698][T10070] RSP: 002b:00007f768ba1e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  513.511720][T10070] RAX: ffffffffffffffda RBX: 00007f768adb5fa0 RCX: 00007f768ab8e9a9
[  513.511735][T10070] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000004
[  513.511747][T10070] RBP: 00007f768ba1e090 R08: 0000000000000000 R09: 0000000000000000
[  513.511760][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  513.511772][T10070] R13: 0000000000000001 R14: 00007f768adb5fa0 R15: 00007ffc3031e848
[  513.511805][T10070]  </TASK>
[  513.849774][T10077] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1145'.
[  513.982626][T10076] netlink: 'syz.5.1143': attribute type 72 has an invalid length.
[  516.395033][T10103] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  516.403618][T10103] PKCS7: Only support pkcs7_signedData type
[  517.573852][T10111] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1152'.
[  520.652567][T10122] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  520.910254][T10133] netlink: 'syz.0.1159': attribute type 72 has an invalid length.
[  521.680807][T10136] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  522.358048][T10147] 9pnet: Unknown protocol version 9p
[  524.230090][T10158] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1166'.
[  524.306849][T10158] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1166'.
[  524.571218][T10163] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  524.583773][T10163] PKCS7: Only support pkcs7_signedData type
[  524.618525][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  525.185439][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  525.208460][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  525.238066][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  525.263136][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.308558][    T9] usb 6-1: config 0 descriptor??
[  525.573362][   T24] usb 6-1: USB disconnect, device number 18
[  527.045868][T10191] 9pnet: Unknown protocol version 9p
[  527.601581][T10183] Invalid ELF header magic: != ELF
[  527.798481][T10193] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  528.442217][T10204] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  528.456997][T10204] PKCS7: Only support pkcs7_signedData type
[  529.047548][T10206] process 'syz.3.1178' launched './file0' with NULL argv: empty string added
[  531.035665][T10230] 9pnet: Unknown protocol version 9p
[  532.500966][T10235] tipc: Enabled bearer <ib:geneve1>, priority 12
[  532.887699][T10246] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  532.896709][T10246] PKCS7: Only support pkcs7_signedData type
[  533.397873][T10241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.431789][T10241] syzkaller0: entered promiscuous mode
[  533.487384][T10241] syzkaller0: entered allmulticast mode
[  533.944214][T10244] tipc: Resetting bearer <eth:syzkaller0>
[  534.094325][T10239] tipc: Resetting bearer <eth:syzkaller0>
[  534.481812][T10239] tipc: Disabling bearer <eth:syzkaller0>
[  535.283468][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  535.283491][   T30] audit: type=1326 audit(1753645176.991:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10267 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c18e9a9 code=0x7ffc0000
[  535.322715][   T30] audit: type=1326 audit(1753645176.991:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10267 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c18e9a9 code=0x7ffc0000
[  535.368446][   T30] audit: type=1326 audit(1753645176.991:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10267 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f406c18e9a9 code=0x7ffc0000
[  535.430646][T10271] 9pnet: Unknown protocol version 9p
[  535.445232][   T30] audit: type=1326 audit(1753645176.991:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10267 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c18e9a9 code=0x7ffc0000
[  535.506728][   T30] audit: type=1326 audit(1753645176.991:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10267 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406c18e9a9 code=0x7ffc0000
[  535.568968][   T30] audit: type=1326 audit(1753645176.991:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10267 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c18e9a9 code=0x7ffc0000
[  535.631684][   T30] audit: type=1326 audit(1753645176.991:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10267 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406c18e9a9 code=0x7ffc0000
[  535.875485][   T30] audit: type=1326 audit(1753645176.991:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10267 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c18e9a9 code=0x7ffc0000
[  536.005577][   T30] audit: type=1326 audit(1753645176.991:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10267 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c18e9a9 code=0x7ffc0000
[  536.071675][   T30] audit: type=1326 audit(1753645176.991:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10267 comm="syz.0.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406c18e9a9 code=0x7ffc0000
[  536.311822][T10273] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  536.765752][ T9386] Bluetooth: hci1: command tx timeout
[  537.172447][T10288] 9pnet: Unknown protocol version 9p
[  537.697894][T10292] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1206'.
[  539.885526][ T9386] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  539.905603][ T9386] Bluetooth: hci1: Injecting HCI hardware error event
[  539.915954][   T51] Bluetooth: hci1: hardware error 0x00
[  542.276515][   T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  543.631764][T10328] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  543.987394][T10339] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1218'.
[  548.440139][ T5952] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  548.585743][ T5952] usb 1-1: device descriptor read/64, error -71
[  548.599448][T10361] 9pnet: Unknown protocol version 9p
[  549.195819][ T5952] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  549.335051][ T5952] usb 1-1: device descriptor read/64, error -71
[  549.447488][ T5952] usb usb1-port1: attempt power cycle
[  550.036746][T10369] trusted_key: syz.0.1227 sent an empty control message without MSG_MORE.
[  551.497259][T10387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  551.846528][T10397] FAULT_INJECTION: forcing a failure.
[  551.846528][T10397] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  551.863186][T10397] CPU: 0 UID: 0 PID: 10397 Comm: syz.6.1236 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  551.863215][T10397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  551.863227][T10397] Call Trace:
[  551.863236][T10397]  <TASK>
[  551.863245][T10397]  dump_stack_lvl+0x189/0x250
[  551.863274][T10397]  ? __pfx____ratelimit+0x10/0x10
[  551.863297][T10397]  ? __pfx_dump_stack_lvl+0x10/0x10
[  551.863321][T10397]  ? __pfx__printk+0x10/0x10
[  551.863364][T10397]  should_fail_ex+0x414/0x560
[  551.863392][T10397]  _copy_to_user+0x31/0xb0
[  551.863423][T10397]  simple_read_from_buffer+0xe1/0x170
[  551.863452][T10397]  proc_fail_nth_read+0x1df/0x250
[  551.863481][T10397]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  551.863510][T10397]  ? rw_verify_area+0x258/0x650
[  551.863541][T10397]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  551.863568][T10397]  vfs_read+0x200/0x980
[  551.863606][T10397]  ? __pfx___mutex_lock+0x10/0x10
[  551.863631][T10397]  ? __pfx_vfs_read+0x10/0x10
[  551.863663][T10397]  ? __fget_files+0x2a/0x420
[  551.863689][T10397]  ? __fget_files+0x3a0/0x420
[  551.863709][T10397]  ? __fget_files+0x2a/0x420
[  551.863741][T10397]  ksys_read+0x145/0x250
[  551.863762][T10397]  ? __pfx_ksys_read+0x10/0x10
[  551.863776][T10397]  ? rcu_is_watching+0x15/0xb0
[  551.863804][T10397]  ? do_syscall_64+0xbe/0x3b0
[  551.863830][T10397]  do_syscall_64+0xfa/0x3b0
[  551.863850][T10397]  ? lockdep_hardirqs_on+0x9c/0x150
[  551.863869][T10397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.863888][T10397]  ? clear_bhb_loop+0x60/0xb0
[  551.863912][T10397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  551.863937][T10397] RIP: 0033:0x7fda4498d3bc
[  551.863964][T10397] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  551.863982][T10397] RSP: 002b:00007fda458be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  551.864005][T10397] RAX: ffffffffffffffda RBX: 00007fda44bb5fa0 RCX: 00007fda4498d3bc
[  551.864020][T10397] RDX: 000000000000000f RSI: 00007fda458be0a0 RDI: 0000000000000005
[  551.864033][T10397] RBP: 00007fda458be090 R08: 0000000000000000 R09: 0000000000000000
[  551.864046][T10397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  551.864059][T10397] R13: 0000000000000000 R14: 00007fda44bb5fa0 R15: 00007ffe57698b48
[  551.864095][T10397]  </TASK>
[  552.475676][ T5886] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  552.668036][T10408] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  552.676488][T10408] PKCS7: Only support pkcs7_signedData type
[  552.730883][ T5886] usb 7-1: device descriptor read/64, error -71
[  553.478192][ T5886] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  553.625663][ T5886] usb 7-1: device descriptor read/64, error -71
[  553.796100][ T5886] usb usb7-port1: attempt power cycle
[  554.422854][T10411] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  554.844979][ T5886] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  555.116121][ T5886] usb 7-1: device descriptor read/8, error -71
[  555.139501][T10404] Invalid ELF header magic: != ELF
[  555.358242][ T5886] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  555.605570][ T5886] usb 7-1: device not accepting address 13, error -71
[  555.620895][ T5886] usb usb7-port1: unable to enumerate USB device
[  556.206166][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1247'.
[  557.751975][T10451] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  557.763770][T10451] PKCS7: Only support pkcs7_signedData type
[  558.252775][T10441] input: syz0 as /devices/virtual/input/input8
[  558.536566][ T5911] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  558.927534][ T5911] usb 2-1: unable to get BOS descriptor or descriptor too short
[  558.946291][ T5911] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  559.011222][ T5911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  559.042188][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.059983][ T5911] usb 2-1: Product: syz
[  559.069975][ T5911] usb 2-1: Manufacturer: syz
[  559.230684][ T5911] usb 2-1: SerialNumber: syz
[  559.260016][   T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  559.466837][   T10] usb 1-1: Using ep0 maxpacket: 16
[  559.478198][   T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  559.492776][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.704391][   T10] usb 1-1: Product: syz
[  559.716561][   T10] usb 1-1: Manufacturer: syz
[  559.722187][   T10] usb 1-1: SerialNumber: syz
[  559.792494][   T10] usb 1-1: config 0 descriptor??
[  559.801914][   T10] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  560.339839][   T10] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110
[  560.376613][  T980] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  560.478841][ T5911] usb 2-1: can't set config #1, error -71
[  560.486574][ T5911] usb 2-1: USB disconnect, device number 18
[  560.518180][ T8725] udevd[8725]: setting mode of /dev/bus/usb/002/018 to 020664 failed: No such file or directory
[  560.530137][  T980] usb 6-1: device descriptor read/64, error -71
[  560.596829][ T8725] udevd[8725]: setting owner of /dev/bus/usb/002/018 to uid=0, gid=0 failed: No such file or directory
[  560.846531][  T980] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  560.986515][  T980] usb 6-1: device descriptor read/64, error -71
[  561.189807][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'.
[  562.034734][  T980] usb usb6-port1: attempt power cycle
[  562.158818][ T5836] usb 1-1: USB disconnect, device number 22
[  562.343524][T10483] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  562.398906][  T980] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  562.476099][  T980] usb 6-1: device descriptor read/8, error -71
[  562.736861][  T980] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  562.777641][T10494] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  562.789672][T10494] PKCS7: Only support pkcs7_signedData type
[  562.887260][T10499] 9pnet: Unknown protocol version 9p
[  562.999775][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  563.008002][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  563.538181][  T980] usb 6-1: device descriptor read/8, error -71
[  563.656864][  T980] usb usb6-port1: unable to enumerate USB device
[  565.472052][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'.
[  565.718830][T10523] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  565.827434][T10516] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1272'.
[  565.888959][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  565.888980][   T30] audit: type=1326 audit(1753645207.591:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.1.1270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f768ab8e9a9 code=0x0
[  567.458762][T10529] veth1_macvtap: left promiscuous mode
[  567.465496][T10529] macsec0: entered allmulticast mode
[  567.562306][T10529] veth1_macvtap: entered promiscuous mode
[  567.568827][T10529] veth1_macvtap: entered allmulticast mode
[  567.576134][T10529] macsec0: left allmulticast mode
[  567.581194][T10529] veth1_macvtap: left allmulticast mode
[  567.867529][   T24] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  568.037947][   T24] usb 7-1: config 8 has an invalid interface number: 223 but max is 0
[  568.047445][   T24] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  568.058028][   T24] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  568.070806][   T24] usb 7-1: config 8 has no interface number 0
[  568.076219][  T980] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  568.078125][   T24] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  568.099219][   T24] usb 7-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  568.125634][   T24] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  568.135557][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.143554][   T24] usb 7-1: Product: syz
[  568.152414][   T24] usb 7-1: Manufacturer: syz
[  568.155129][ T5911] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  568.158218][   T24] usb 7-1: SerialNumber: syz
[  568.246574][  T980] usb 1-1: device descriptor read/64, error -71
[  568.373034][ T5911] usb 4-1: too many configurations: 255, using maximum allowed: 8
[  568.537769][ T5911] usb 4-1: unable to read config index 0 descriptor/start: -61
[  569.003980][  T980] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  569.036704][ T5911] usb 4-1: can't read configurations, error -61
[  569.091691][   T24] usb 7-1: USB disconnect, device number 14
[  569.198700][  T980] usb 1-1: device descriptor read/64, error -71
[  569.206995][ T5911] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  569.348859][  T980] usb usb1-port1: attempt power cycle
[  569.387661][ T5911] usb 4-1: too many configurations: 255, using maximum allowed: 8
[  569.436327][ T5911] usb 4-1: unable to read config index 0 descriptor/start: -61
[  569.443957][ T5911] usb 4-1: can't read configurations, error -61
[  569.692492][ T5911] usb usb4-port1: attempt power cycle
[  569.757737][  T980] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  569.785659][  T980] usb 1-1: device descriptor read/8, error -71
[  569.868556][T10572] FAULT_INJECTION: forcing a failure.
[  569.868556][T10572] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  569.884223][T10572] CPU: 0 UID: 0 PID: 10572 Comm: syz.5.1290 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  569.884252][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  569.884264][T10572] Call Trace:
[  569.884273][T10572]  <TASK>
[  569.884282][T10572]  dump_stack_lvl+0x189/0x250
[  569.884315][T10572]  ? __pfx____ratelimit+0x10/0x10
[  569.884336][T10572]  ? __pfx_dump_stack_lvl+0x10/0x10
[  569.884357][T10572]  ? __pfx__printk+0x10/0x10
[  569.884382][T10572]  ? __might_fault+0xb0/0x130
[  569.884415][T10572]  should_fail_ex+0x414/0x560
[  569.884440][T10572]  _copy_from_user+0x2d/0xb0
[  569.884469][T10572]  ___sys_recvmsg+0x12e/0x510
[  569.884495][T10572]  ? __pfx____sys_recvmsg+0x10/0x10
[  569.884543][T10572]  ? __fget_files+0x3a0/0x420
[  569.884577][T10572]  __x64_sys_recvmsg+0x198/0x260
[  569.884598][T10572]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  569.884628][T10572]  ? __pfx_ksys_write+0x10/0x10
[  569.884644][T10572]  ? rcu_is_watching+0x15/0xb0
[  569.884671][T10572]  ? do_syscall_64+0xbe/0x3b0
[  569.884696][T10572]  do_syscall_64+0xfa/0x3b0
[  569.884716][T10572]  ? lockdep_hardirqs_on+0x9c/0x150
[  569.884736][T10572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.884756][T10572]  ? clear_bhb_loop+0x60/0xb0
[  569.884780][T10572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.884799][T10572] RIP: 0033:0x7ff1e5f8e9a9
[  569.884817][T10572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  569.884834][T10572] RSP: 002b:00007ff1e6ebe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  569.884855][T10572] RAX: ffffffffffffffda RBX: 00007ff1e61b5fa0 RCX: 00007ff1e5f8e9a9
[  569.884869][T10572] RDX: 0000000000000102 RSI: 0000200000000080 RDI: 0000000000000003
[  569.884881][T10572] RBP: 00007ff1e6ebe090 R08: 0000000000000000 R09: 0000000000000000
[  569.884893][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  569.884905][T10572] R13: 0000000000000000 R14: 00007ff1e61b5fa0 R15: 00007fff4074ae38
[  569.884945][T10572]  </TASK>
[  570.416803][ T5911] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  570.467208][ T5911] usb 4-1: too many configurations: 255, using maximum allowed: 8
[  570.488797][  T980] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  570.533036][ T5911] usb 4-1: unable to read config index 0 descriptor/start: -61
[  570.554860][  T980] usb 1-1: device descriptor read/8, error -71
[  570.580586][ T5911] usb 4-1: can't read configurations, error -61
[  570.642346][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1293'.
[  570.677956][  T980] usb usb1-port1: unable to enumerate USB device
[  570.714461][ T5911] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  570.747919][ T5911] usb 4-1: too many configurations: 255, using maximum allowed: 8
[  570.763106][ T5911] usb 4-1: unable to read config index 0 descriptor/start: -61
[  570.777401][   T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  570.777924][ T5911] usb 4-1: can't read configurations, error -61
[  570.799426][ T5911] usb usb4-port1: unable to enumerate USB device
[  570.935594][   T24] usb 2-1: Using ep0 maxpacket: 8
[  570.953188][   T24] usb 2-1: config index 0 descriptor too short (expected 19730, got 18)
[  570.985696][   T24] usb 2-1: config 0 has too many interfaces: 54, using maximum allowed: 32
[  571.037284][   T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 54
[  571.098312][   T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d
[  571.145236][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.195711][   T24] usb 2-1: Product: syz
[  571.208876][   T24] usb 2-1: Manufacturer: syz
[  571.250858][T10590] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  571.337335][   T24] usb 2-1: SerialNumber: syz
[  571.378994][T10586] Invalid ELF header magic: != ELF
[  571.413792][   T24] usb 2-1: config 0 descriptor??
[  571.725183][ T5886] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  571.961713][ T5886] usb 4-1: config 17 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  572.012732][ T5886] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  572.048248][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.118687][ T5886] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1
[  572.370931][T10607] Invalid source name
[  572.572191][ T5886] usb 2-1: USB disconnect, device number 19
[  573.005634][   T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  573.306732][T10621] sp0: Synchronizing with TNC
[  573.398788][   T24] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  574.607671][T10625] FAULT_INJECTION: forcing a failure.
[  574.607671][T10625] name failslab, interval 1, probability 0, space 0, times 0
[  574.732821][T10625] CPU: 0 UID: 0 PID: 10625 Comm: syz.6.1306 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  574.732862][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  574.732875][T10625] Call Trace:
[  574.732884][T10625]  <TASK>
[  574.732893][T10625]  dump_stack_lvl+0x189/0x250
[  574.732923][T10625]  ? __pfx____ratelimit+0x10/0x10
[  574.732945][T10625]  ? __pfx_dump_stack_lvl+0x10/0x10
[  574.732968][T10625]  ? __pfx__printk+0x10/0x10
[  574.732998][T10625]  ? __pfx___might_resched+0x10/0x10
[  574.733022][T10625]  ? fs_reclaim_acquire+0x7d/0x100
[  574.733053][T10625]  should_fail_ex+0x414/0x560
[  574.733081][T10625]  should_failslab+0xa8/0x100
[  574.733107][T10625]  __kmalloc_noprof+0xcb/0x4f0
[  574.733126][T10625]  ? tomoyo_encode+0x28b/0x550
[  574.733158][T10625]  tomoyo_encode+0x28b/0x550
[  574.733196][T10625]  tomoyo_realpath_from_path+0x58d/0x5d0
[  574.733237][T10625]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  574.733261][T10625]  tomoyo_path_number_perm+0x1e8/0x5a0
[  574.733287][T10625]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  574.733307][T10625]  ? sb_end_write+0x197/0x1c0
[  574.733352][T10625]  ? __lock_acquire+0xab9/0xd20
[  574.733396][T10625]  ? __fget_files+0x2a/0x420
[  574.733424][T10625]  ? __fget_files+0x2a/0x420
[  574.733445][T10625]  ? __fget_files+0x3a0/0x420
[  574.733466][T10625]  ? __fget_files+0x2a/0x420
[  574.733494][T10625]  security_file_ioctl+0xcb/0x2d0
[  574.733522][T10625]  __se_sys_ioctl+0x47/0x170
[  574.733556][T10625]  do_syscall_64+0xfa/0x3b0
[  574.733577][T10625]  ? lockdep_hardirqs_on+0x9c/0x150
[  574.733598][T10625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.733618][T10625]  ? clear_bhb_loop+0x60/0xb0
[  574.733644][T10625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.733664][T10625] RIP: 0033:0x7fda4498e9a9
[  574.733683][T10625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  574.733700][T10625] RSP: 002b:00007fda458be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  574.733724][T10625] RAX: ffffffffffffffda RBX: 00007fda44bb5fa0 RCX: 00007fda4498e9a9
[  574.733739][T10625] RDX: 0000200000000380 RSI: 00000000c0d05605 RDI: 0000000000000003
[  574.733753][T10625] RBP: 00007fda458be090 R08: 0000000000000000 R09: 0000000000000000
[  574.733765][T10625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  574.733777][T10625] R13: 0000000000000000 R14: 00007fda44bb5fa0 R15: 00007ffe57698b48
[  574.733812][T10625]  </TASK>
[  575.057675][T10625] ERROR: Out of memory at tomoyo_realpath_from_path.
[  575.648071][   T24] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  575.946746][   T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  577.468899][   T10] usb 6-1: too many configurations: 255, using maximum allowed: 8
[  577.535583][ T5886] usb 4-1: USB disconnect, device number 15
[  577.623824][   T24] usb 1-1: string descriptor 0 read error: -71
[  577.632771][   T24] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[  577.641607][   T10] usb 6-1: unable to read config index 0 descriptor/start: -61
[  577.646124][   T24] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  577.681870][   T24] usb 1-1: can't set config #36, error -71
[  577.700984][   T24] usb 1-1: USB disconnect, device number 27
[  577.716587][   T10] usb 6-1: can't read configurations, error -61
[  577.886548][   T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  577.931971][T10638] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1309'.
[  578.112430][   T10] usb 6-1: too many configurations: 255, using maximum allowed: 8
[  578.158829][   T10] usb 6-1: unable to read config index 0 descriptor/start: -61
[  578.183095][   T10] usb 6-1: can't read configurations, error -61
[  578.210969][   T10] usb usb6-port1: attempt power cycle
[  578.237678][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1313'.
[  578.266202][T10635] block device autoloading is deprecated and will be removed.
[  578.315438][T10644] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  578.317339][T10645] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 1
[  578.370552][T10646] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 2
[  578.374532][T10647] loop2: detected capacity change from 0 to 7
[  578.468522][T10648] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 3
[  578.507857][T10647] Dev loop2: unable to read RDB block 7
[  578.541224][T10647]  loop2: AHDI p1 p2 p3
[  578.556482][T10647] loop2: partition table partially beyond EOD, truncated
[  578.577314][T10647] loop2: p3 start 335544320 is beyond EOD, truncated
[  578.915582][   T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  579.057439][   T24] usb 1-1: device descriptor read/64, error -71
[  579.315613][   T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  579.465692][   T24] usb 1-1: device descriptor read/64, error -71
[  579.575737][   T24] usb usb1-port1: attempt power cycle
[  579.619573][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'.
[  579.637854][T10679] loop2: detected capacity change from 0 to 7
[  579.648580][T10679] Dev loop2: unable to read RDB block 7
[  579.654214][T10679]  loop2: AHDI p1 p2 p3
[  579.661062][T10679] loop2: partition table partially beyond EOD, truncated
[  579.671407][T10679] loop2: p1 start 1601398130 is beyond EOD, truncated
[  579.678731][T10679] loop2: p2 start 1702059890 is beyond EOD, truncated
[  579.916240][   T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  579.948833][   T24] usb 1-1: device descriptor read/8, error -71
[  580.096405][ T5836] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  580.206041][   T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  580.238181][   T24] usb 1-1: device descriptor read/8, error -71
[  580.339167][ T5836] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  580.402639][   T24] usb usb1-port1: unable to enumerate USB device
[  580.410495][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  580.443275][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  580.492338][ T5836] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  580.575630][ T5836] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  580.599930][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.610458][T10697] FAULT_INJECTION: forcing a failure.
[  580.610458][T10697] name failslab, interval 1, probability 0, space 0, times 0
[  580.784134][ T5836] usb 6-1: config 0 descriptor??
[  581.077825][T10697] CPU: 0 UID: 0 PID: 10697 Comm: syz.6.1327 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  581.077857][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  581.077870][T10697] Call Trace:
[  581.077879][T10697]  <TASK>
[  581.077889][T10697]  dump_stack_lvl+0x189/0x250
[  581.077917][T10697]  ? __pfx____ratelimit+0x10/0x10
[  581.077938][T10697]  ? __pfx_dump_stack_lvl+0x10/0x10
[  581.077960][T10697]  ? __pfx__printk+0x10/0x10
[  581.077991][T10697]  ? __pfx___might_resched+0x10/0x10
[  581.078012][T10697]  ? fs_reclaim_acquire+0x7d/0x100
[  581.078043][T10697]  should_fail_ex+0x414/0x560
[  581.078069][T10697]  should_failslab+0xa8/0x100
[  581.078093][T10697]  __kmalloc_noprof+0xcb/0x4f0
[  581.078112][T10697]  ? snd_ctl_elem_add+0x429/0xa60
[  581.078129][T10697]  ? snd_ctl_elem_add+0x436/0xa60
[  581.078154][T10697]  snd_ctl_elem_add+0x436/0xa60
[  581.078190][T10697]  snd_ctl_ioctl+0xcc7/0x1ad0
[  581.078219][T10697]  ? stack_trace_save+0x9c/0xe0
[  581.078249][T10697]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  581.078291][T10697]  ? kasan_save_track+0x4f/0x80
[  581.078316][T10697]  ? kasan_save_track+0x3e/0x80
[  581.078342][T10697]  ? kasan_save_free_info+0x46/0x50
[  581.078364][T10697]  ? __kasan_slab_free+0x62/0x70
[  581.078380][T10697]  ? kfree+0x18e/0x440
[  581.078405][T10697]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  581.078426][T10697]  ? security_file_ioctl+0xcb/0x2d0
[  581.078446][T10697]  ? __se_sys_ioctl+0x47/0x170
[  581.078473][T10697]  ? do_syscall_64+0xfa/0x3b0
[  581.078492][T10697]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.078576][T10697]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  581.078599][T10697]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  581.078621][T10697]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[  581.078641][T10697]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  581.078662][T10697]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  581.078681][T10697]  ? smack_log+0xef/0x3f0
[  581.078712][T10697]  ? __pfx_smack_log+0x10/0x10
[  581.078741][T10697]  ? smk_access+0x14c/0x4e0
[  581.078787][T10697]  ? smk_tskacc+0x2fc/0x370
[  581.078821][T10697]  ? smack_file_ioctl+0x2a9/0x340
[  581.078843][T10697]  ? __pfx_smack_file_ioctl+0x10/0x10
[  581.078876][T10697]  ? __fget_files+0x2a/0x420
[  581.078898][T10697]  ? __fget_files+0x3a0/0x420
[  581.078917][T10697]  ? __fget_files+0x2a/0x420
[  581.078942][T10697]  ? bpf_lsm_file_ioctl+0x9/0x20
[  581.078965][T10697]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  581.078992][T10697]  __se_sys_ioctl+0xfc/0x170
[  581.079024][T10697]  do_syscall_64+0xfa/0x3b0
[  581.079043][T10697]  ? lockdep_hardirqs_on+0x9c/0x150
[  581.079063][T10697]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.079083][T10697]  ? clear_bhb_loop+0x60/0xb0
[  581.079109][T10697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.079129][T10697] RIP: 0033:0x7fda4498e9a9
[  581.079147][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  581.079162][T10697] RSP: 002b:00007fda4589d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  581.079181][T10697] RAX: ffffffffffffffda RBX: 00007fda44bb6080 RCX: 00007fda4498e9a9
[  581.079196][T10697] RDX: 0000200000000080 RSI: 00000000c1105517 RDI: 0000000000000003
[  581.079208][T10697] RBP: 00007fda4589d090 R08: 0000000000000000 R09: 0000000000000000
[  581.079219][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  581.079230][T10697] R13: 0000000000000000 R14: 00007fda44bb6080 R15: 00007ffe57698b48
[  581.079263][T10697]  </TASK>
[  581.620556][ T5836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x3
[  581.683443][ T5836] plantronics 0003:047F:FFFF.0002: unbalanced collection at end of report description
[  581.764129][ T5836] plantronics 0003:047F:FFFF.0002: parse failed
[  581.819284][ T5836] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22
[  581.941757][ T5836] usb 6-1: USB disconnect, device number 26
[  583.269379][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.326232][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.401439][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.477760][   T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  583.484889][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.508199][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.539373][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.589906][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.610668][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.647255][T10721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.669951][T10721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.692320][   T24] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 76
[  583.723717][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  583.751723][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  583.790083][   T24] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  583.807985][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.829616][   T24] usb 4-1: Product: syz
[  583.840608][   T24] usb 4-1: Manufacturer: syz
[  583.852154][   T24] usb 4-1: SerialNumber: syz
[  583.912382][   T24] usb 4-1: config 0 descriptor??
[  583.942384][   T24] usb-storage 4-1:0.0: USB Mass Storage device detected
[  584.007583][   T24] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  584.128372][T10732] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.160325][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1338'.
[  584.227909][   T24] usb 4-1: USB disconnect, device number 16
[  584.713267][T10745] syz.0.1343: attempt to access beyond end of device
[  584.713267][T10745] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0
[  585.438220][T10749] loop6: detected capacity change from 0 to 1
[  585.465067][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  585.598194][T10749] Dev loop6: unable to read RDB block 1
[  585.660397][T10749]  loop6: AHDI p1 p3 p4
[  585.676744][T10749] loop6: partition table partially beyond EOD, truncated
[  585.710184][T10749] loop6: p3 start 3056314324 is beyond EOD, truncated
[  585.745629][T10749] loop6: p4 start 3544326237 is beyond EOD, truncated
[  585.874801][    T9] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  585.898271][    T9] usb 2-1: config 0 has no interface number 0
[  586.093663][    T9] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  586.400915][    T9] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  586.486756][    T9] usb 2-1: config 0 interface 255 has no altsetting 0
[  586.493720][    T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  586.592378][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.678269][    T9] usb 2-1: config 0 descriptor??
[  586.729087][    T9] ums-realtek 2-1:0.255: USB Mass Storage device detected
[  586.969339][    T9] usb 2-1: USB disconnect, device number 20
[  587.146748][T10773] batadv_slave_1: entered promiscuous mode
[  587.172031][T10773] batadv_slave_1: left promiscuous mode
[  587.509347][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'.
[  587.586824][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'.
[  624.466991][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  624.473356][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  673.388242][    T0] sched: DL replenish lagged too much
[  695.314278][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  695.321484][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5206/1:b..l
[  695.329740][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=41717, q=325 ncpus=2)
[  695.337471][    C1] task:udevd           state:R  running task     stack:22952 pid:5206  tgid:5206  ppid:1      task_flags:0x400140 flags:0x00004002
[  695.351772][    C1] Call Trace:
[  695.355070][    C1]  <TASK>
[  695.358000][    C1]  __schedule+0x16aa/0x4c90
[  695.362513][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  695.367805][    C1]  ? __pfx___schedule+0x10/0x10
[  695.372669][    C1]  ? preempt_schedule_irq+0xaa/0x150
[  695.377952][    C1]  preempt_schedule_irq+0xb5/0x150
[  695.383164][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  695.388906][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  695.394720][    C1]  irqentry_exit+0x6f/0x90
[  695.399131][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  695.405114][    C1] RIP: 0010:unwind_next_frame+0x1888/0x2390
[  695.411011][    C1] Code: 0f 85 63 01 00 00 49 8d 4c 24 08 4c 39 e9 0f 86 55 01 00 00 48 39 c1 0f 87 4c 01 00 00 4c 3b a4 24 90 00 00 00 4c 8b 7c 24 48 <0f> 87 c9 00 00 00 49 8d 5e 28 48 89 d8 48 c1 e8 03 80 3c 28 00 74
[  695.430632][    C1] RSP: 0018:ffffc90003e5f8b8 EFLAGS: 00000206
[  695.436708][    C1] RAX: ffffc90003e60000 RBX: ffffffff90344701 RCX: ffffc90003e5fac8
[  695.444691][    C1] RDX: ffffc90003e5f901 RSI: dffffc0000000000 RDI: ffffc90003e5f990
[  695.452660][    C1] RBP: dffffc0000000000 R08: ffffc90003e5fab0 R09: 0000000000000000
[  695.460624][    C1] R10: ffffc90003e5f9d8 R11: fffff520007cbf3d R12: ffffc90003e5fac0
[  695.468607][    C1] R13: ffffc90003e58000 R14: ffffc90003e5f988 R15: ffffffff8172aae5
[  695.476592][    C1]  ? unwind_next_frame+0xa5/0x2390
[  695.481710][    C1]  ? unwind_next_frame+0x17c4/0x2390
[  695.487012][    C1]  ? unwind_next_frame+0xa5/0x2390
[  695.492134][    C1]  ? stack_trace_save+0x9c/0xe0
[  695.496992][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  695.503146][    C1]  arch_stack_walk+0x11c/0x150
[  695.507913][    C1]  ? kasan_save_track+0x3e/0x80
[  695.512765][    C1]  stack_trace_save+0x9c/0xe0
[  695.517450][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  695.522819][    C1]  ? __x64_sys_close+0x7f/0x110
[  695.527700][    C1]  kasan_save_track+0x3e/0x80
[  695.532406][    C1]  __kasan_slab_alloc+0x6c/0x80
[  695.537373][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  695.542947][    C1]  ? getname_flags+0xb8/0x540
[  695.547641][    C1]  getname_flags+0xb8/0x540
[  695.552165][    C1]  do_sys_openat2+0xbc/0x1c0
[  695.556769][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  695.562089][    C1]  ? fput_close_sync+0x119/0x200
[  695.567061][    C1]  ? __pfx_fput_close_sync+0x10/0x10
[  695.572380][    C1]  __x64_sys_openat+0x138/0x170
[  695.577252][    C1]  do_syscall_64+0xfa/0x3b0
[  695.581779][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.587846][    C1]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  695.593653][    C1]  ? clear_bhb_loop+0x60/0xb0
[  695.598332][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.604225][    C1] RIP: 0033:0x7f7bbfea7407
[  695.608634][    C1] RSP: 002b:00007ffdf2a16fa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  695.617055][    C1] RAX: ffffffffffffffda RBX: 00007f7bc0697880 RCX: 00007f7bbfea7407
[  695.625024][    C1] RDX: 0000000000080241 RSI: 00007ffdf2a17410 RDI: ffffffffffffff9c
[  695.633185][    C1] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
[  695.641148][    C1] R10: 00000000000001b6 R11: 0000000000000202 R12: 00005629017c7dfc
[  695.649126][    C1] R13: 00005629017c7dfc R14: 0000000000000001 R15: 00007ffdf2a17300
[  695.657105][    C1]  </TASK>
[  695.660123][    C1] rcu: rcu_preempt kthread starved for 8852 jiffies! g41717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  695.671229][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  695.681192][    C1] rcu: RCU grace-period kthread stack dump:
[  695.687335][    C1] task:rcu_preempt     state:R  running task     stack:27320 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  695.700826][    C1] Call Trace:
[  695.704101][    C1]  <TASK>
[  695.707030][    C1]  __schedule+0x16aa/0x4c90
[  695.711540][    C1]  ? schedule+0x165/0x360
[  695.715886][    C1]  ? __pfx___schedule+0x10/0x10
[  695.720760][    C1]  ? schedule+0x91/0x360
[  695.725084][    C1]  schedule+0x165/0x360
[  695.729409][    C1]  schedule_timeout+0x12b/0x270
[  695.734280][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  695.739677][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  695.745576][    C1]  ? __pfx_process_timeout+0x10/0x10
[  695.750946][    C1]  ? prepare_to_swait_event+0x341/0x380
[  695.756494][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  695.761346][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  695.766648][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  695.772796][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  695.778073][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  695.783271][    C1]  rcu_gp_kthread+0x99/0x390
[  695.787855][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  695.793043][    C1]  ? __kthread_parkme+0x7b/0x200
[  695.797974][    C1]  ? __kthread_parkme+0x1a1/0x200
[  695.802997][    C1]  kthread+0x70e/0x8a0
[  695.807063][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  695.812251][    C1]  ? __pfx_kthread+0x10/0x10
[  695.816841][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  695.822034][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  695.827351][    C1]  ? __pfx_kthread+0x10/0x10
[  695.832026][    C1]  ret_from_fork+0x3fc/0x770
[  695.836613][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  695.841724][    C1]  ? __switch_to_asm+0x39/0x70
[  695.846506][    C1]  ? __switch_to_asm+0x33/0x70
[  695.851263][    C1]  ? __pfx_kthread+0x10/0x10
[  695.855848][    C1]  ret_from_fork_asm+0x1a/0x30
[  695.860615][    C1]  </TASK>
[  695.863630][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  695.869949][    C1] Sending NMI from CPU 1 to CPUs 0:
[  695.875161][    C0] NMI backtrace for cpu 0
[  695.875175][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) 
[  695.875193][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  695.875203][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  695.875222][    C0] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  695.875236][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  695.875252][    C0] RAX: 1ecd24a1f7df7300 RBX: ffffffff81976918 RCX: 1ecd24a1f7df7300
[  695.875264][    C0] RDX: 0000000000000001 RSI: ffffffff8d982ff2 RDI: ffffffff8be1ba80
[  695.875275][    C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb
[  695.875287][    C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0b3f0
[  695.875299][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  695.875310][    C0] FS:  0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
[  695.875323][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  695.875334][    C0] CR2: 00007fa0000f4437 CR3: 000000003412c000 CR4: 00000000003526f0
[  695.875350][    C0] Call Trace:
[  695.875359][    C0]  <TASK>
[  695.875365][    C0]  default_idle+0x13/0x20
[  695.875383][    C0]  default_idle_call+0x74/0xb0
[  695.875402][    C0]  do_idle+0x1e8/0x510
[  695.875419][    C0]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  695.875436][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  695.875452][    C0]  ? __pfx_do_idle+0x10/0x10
[  695.875473][    C0]  ? do_idle+0x8/0x510
[  695.875490][    C0]  cpu_startup_entry+0x44/0x60
[  695.875506][    C0]  rest_init+0x2de/0x300
[  695.875525][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  695.875548][    C0]  start_kernel+0x47d/0x500
[  695.875569][    C0]  x86_64_start_reservations+0x24/0x30
[  695.875590][    C0]  x86_64_start_kernel+0x143/0x1c0
[  695.875611][    C0]  common_startup_64+0x13e/0x147
[  695.875638][    C0]  </TASK>
[  696.139669][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  696.954759][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
SYZFAIL: failed to send rpc
fd=3 want=4472 sent=0 n=-1 (errno 32: Broken pipe)
[  699.393260][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.477013][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.521656][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.618849][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  699.779549][   T13] bridge_slave_0: left allmulticast mode
[  699.786648][   T13] bridge_slave_0: left promiscuous mode
[  699.792471][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.805993][   T13] tipc: Resetting bearer <ib:geneve1>
[  700.060954][   T13] tipc: Disabling bearer <ib:geneve1>
[  700.173587][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  700.188877][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  700.200081][   T13] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  700.213006][   T13] bond0 (unregistering): Released all slaves
[  700.297277][   T13] tipc: Disabling bearer <eth:team0>
[  700.318880][   T13] tipc: Left network mode
[  700.587989][   T13] hsr_slave_0: left promiscuous mode
[  700.598835][   T13] batman_adv: batadv0: Interface deactivated: dummy0
[  700.607747][   T13] batman_adv: batadv0: Removing interface: dummy0
[  700.617223][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  700.630144][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.640735][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  700.650158][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  700.679924][   T13] veth1_macvtap: left promiscuous mode
[  700.689451][   T13] veth0_macvtap: left promiscuous mode
[  700.700019][   T13] veth1_vlan: left promiscuous mode
[  700.709627][   T13] veth0_vlan: left promiscuous mode
[  701.342340][   T13] team0 (unregistering): Port device team_slave_1 removed
[  701.391053][   T13] team0 (unregistering): Port device team_slave_0 removed
[  702.262120][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.351440][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.455706][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.542726][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.839762][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.987297][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.063698][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.167064][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.392350][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.498467][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.573946][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.656844][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  703.883804][   T13] bridge_slave_1: left allmulticast mode
[  703.898455][   T13] bridge_slave_1: left promiscuous mode
[  703.913907][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.933898][   T13] bridge_slave_0: left allmulticast mode
[  703.942595][   T13] bridge_slave_0: left promiscuous mode
[  703.958942][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.983507][   T13] bridge_slave_1: left allmulticast mode
[  703.994219][   T13] bridge_slave_1: left promiscuous mode
[  704.002660][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.021326][   T13] bridge_slave_0: left allmulticast mode
[  704.034459][   T13] bridge_slave_0: left promiscuous mode
[  704.040301][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.063139][   T13] bridge_slave_1: left allmulticast mode
[  704.071883][   T13] bridge_slave_1: left promiscuous mode
[  704.081686][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.102395][   T13] bridge_slave_0: left allmulticast mode
[  704.112001][   T13] bridge_slave_0: left promiscuous mode
[  704.120665][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.590604][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  704.602761][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  704.615612][   T13] bond0 (unregistering): Released all slaves
[  704.982134][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  704.993708][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  705.007990][   T13] bond0 (unregistering): Released all slaves
[  705.130101][   T13] bond1 (unregistering): (slave vlan2): Releasing active interface
[  705.139958][   T13] bond1 (unregistering): Released all slaves