last executing test programs:

15m51.171328125s ago: executing program 0 (id=184):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000008005)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000580)={0x2c, r5, 0x1, 0x40, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x2c}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x3000000, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
r7 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x330}}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0x46)
r9 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000080)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)

15m49.769686015s ago: executing program 0 (id=187):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xc6fffffd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x12000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

15m48.458668393s ago: executing program 0 (id=190):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)

15m47.339859s ago: executing program 0 (id=193):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept(r7, &(0x7f0000000240)=@x25, &(0x7f0000000040)=0x80)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x5}, &(0x7f0000000100)=0x8)
r8 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x60401)
socket$inet6(0x2d, 0x806, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, r6)
ioctl$BLKTRACESTART(r8, 0x1274, 0x0)
r9 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r10 = fsmount(r9, 0x0, 0x1)
fchdir(r10)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r11 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x1b0)
getdents(r11, 0x0, 0x0)

15m46.250016353s ago: executing program 0 (id=194):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x54001, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0)
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = dup(r0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x800)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x80984120, &(0x7f0000000340))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

15m43.522708941s ago: executing program 0 (id=201):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'ip6tnl0\x00', {0x2, 0x0, @private=0xfffffffe}})
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x9000000, 0x4008084}, 0x0)

15m27.962969795s ago: executing program 32 (id=201):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'ip6tnl0\x00', {0x2, 0x0, @private=0xfffffffe}})
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x9000000, 0x4008084}, 0x0)

11.894953577s ago: executing program 3 (id=2586):
socket(0x22, 0xc, 0x7)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
write$cgroup_int(r0, &(0x7f0000000180)=0x200, 0x12)
r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
writev(r3, &(0x7f0000002680)=[{&(0x7f00000025c0)='8', 0x1}, {0x0, 0x2}], 0x2)

9.85852715s ago: executing program 1 (id=2590):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000400000d0001007564703a73797a32"], 0x54}}, 0x0)
r3 = syz_io_uring_setup(0x3b9, &(0x7f0000000300)={0x0, 0x0, 0x40, 0xfffffffc, 0x30a}, 0x0, &(0x7f0000000280))
io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000c80))
recvmmsg$unix(r4, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x100, 0x20000)
ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8, 0x5, 0x0, 0x1, 0xd26f, 0x4, 0x7, 0x9, 0x0, 0x3579, 0x93, 0xfffffffc, 0x81, 0x2, 0x3, 0x0, {0x8dc5, 0x94}, 0x7, 0x3}})
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {0xfff}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00')

7.428712082s ago: executing program 5 (id=2595):
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x415, &(0x7f0000000080)={[{@uuid_null}, {@uuid_off}, {@uuid_on}], [{@audit}, {@dont_appraise}]})
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80142, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0xfff, 0x2, 0xc, 0xfffffff9}, {0x4, 0x7, 0x6, 0x2}, {0x10, 0x9, 0x2, 0x5}, {0x5, 0x40, 0x4, 0x2}, {0x8, 0x4, 0x4, 0x6}]})
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x404080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r4=>r0, {0x4}}, './file0\x00'})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=<r5=>r1, 0x24, 0x0, 0x1, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0)
openat$cgroup_int(r3, &(0x7f0000000400)='cpuset.sched_load_balance\x00', 0x2, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x200100, 0x20)
clock_gettime(0x0, &(0x7f00000004c0)={<r7=>0x0, <r8=>0x0})
utimensat(r6, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500)={{0x77359400}, {r7, r8/1000+10000}}, 0x0)
r9 = syz_open_dev$vim2m(&(0x7f0000000540), 0x8, 0x2)
clock_gettime(0x0, &(0x7f0000000580)={<r10=>0x0, <r11=>0x0})
ioctl$vim2m_VIDIOC_QUERYBUF(r9, 0xc0585609, &(0x7f00000005c0)=@overlay={0x6, 0x0, 0x4, 0x100000, 0x40, {r10, r11/1000+60000}, {0x1, 0x8c42815461645d5e, 0x9, 0x0, 0x2, 0x10, "fccf04af"}, 0xffffb07f, 0x3, {}, 0x6, 0x0, r3})
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x50, r4, 0x180000000)
ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000640)={0x0, 0x3, {<r12=>0x0}, {}, 0x4, 0x2})
fcntl$setownex(r2, 0xf, &(0x7f0000000680)={0x0, r12})
newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700), 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
clock_gettime(0x0, &(0x7f00000007c0)={<r13=>0x0, <r14=>0x0})
clock_settime(0x1, &(0x7f0000000800)={r13, r14+10000000})
ptrace(0x10, r12)
r15 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$sock_FIOSETOWN(r15, 0x8901, &(0x7f0000000840)=r12)
setsockopt$SO_ATTACH_FILTER(r15, 0x1, 0x1a, &(0x7f00000008c0)={0x2, &(0x7f0000000880)=[{0x1, 0x5, 0x1, 0x6}, {0x7f, 0x1, 0xf}]}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900))
syz_open_dev$vbi(&(0x7f0000000940), 0x2, 0x2)

7.293332509s ago: executing program 1 (id=2596):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800000000000000000000fff0", @ANYRES32=0x0, @ANYBLOB="000000001004000014001a8010002d800c000180080016000600000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

7.241166801s ago: executing program 4 (id=2597):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2404c000)
socket$tipc(0x1e, 0x2, 0x0)
io_setup(0x800, &(0x7f0000000500))
close(0x3)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040))
io_setup(0xc, &(0x7f0000000440)=<r6=>0x0)
io_submit(r6, 0x0, &(0x7f0000000480))
r7 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r7, &(0x7f0000000080), 0xc)
read(r7, &(0x7f0000000040)=""/49, 0x31)
socket$qrtr(0x2a, 0x2, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x1a})
io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0)

7.179830235s ago: executing program 5 (id=2599):
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e004300100000", 0x27}], 0x1}, 0x40000)
r1 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000030000000000000002000013020000000100000000000000000000006100"], 0x0, 0x3f, 0x0, 0x9}, 0x28)
write(r1, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
getsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000380))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x51)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x20800, 0x0, 0x21}, 0x18)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

6.615517624s ago: executing program 1 (id=2601):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140))
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000001700000000000000000000cc4800a0665ad666b40727e86ef59a00000000a38bdfeef74d88c37c11aea6ffe200000080000000000000e5c5eba83aa4376eeb5636f3f9c5207d5848db3c474bd38425c3ac"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
getpid()
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r5)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r7, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r9, 0x0, 0xd}, 0x18)
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x3, [<r10=>0x0, 0x0, 0x0, <r11=>0x0], [0x800000], [0x0, 0x1001000, 0x0, 0x37], [0x0, 0x0, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, 0x0, 0x0, r11], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[<r12=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r5, 0xc00464af, &(0x7f0000000480)=r12)

5.510738026s ago: executing program 1 (id=2603):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0)

5.499744647s ago: executing program 5 (id=2604):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0xfffffffffffffea2, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80ffffff}, 0x8000)

5.485491538s ago: executing program 3 (id=2605):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/90]}, 0xd2)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={&(0x7f00000004c0)={{@hyper, 0x5}, {@host, 0xed82}, 0x430, "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"}, 0x448, 0xb34})
chdir(&(0x7f0000000300)='./file0\x00')
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d2140000000000000000001400000011"], 0x68}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffc9b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x801}, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/80, 0x50, 0x0)

4.877100197s ago: executing program 1 (id=2606):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$vbi(0x0, 0x2, 0x2)
preadv(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x6, 0x29, 0x0, &(0x7f0000695ffc))
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000002060108000000000000000000000008140007800800114000000000050015002c0000000520010006000000050005000a04000005000400000000000900020073797a30000000000400007766cd980d702546f1a237d5e6ab213b6859746ed3782060f2c2e6c8905f59697fe54f74ef4b1546b31f5e9f70326e0ec2ce702fe3a248f144704f249ba7ccac2316c30f46395848b354d601c85e2296c2740aafa34237ca0a9f4287d02c13904c696addd59eb4f739582f502466b2ca2806c05bbddca6ba89"], 0x60}}, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
getdents64(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r6 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r6, &(0x7f0000000600), 0xfec8)
recvmmsg(r6, &(0x7f0000002180)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}, 0xffffffff}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000740)=""/232, 0xe8}, {&(0x7f00000009c0)=""/247, 0xf7}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/71, 0x47}, {&(0x7f0000001ac0)=""/113, 0x71}, {&(0x7f0000000140)=""/62, 0x3e}], 0x7, &(0x7f0000001bc0)=""/200, 0xc8}, 0x7}, {{&(0x7f0000001cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000001d40)=""/69, 0x45}], 0x1, &(0x7f0000001dc0)=""/153, 0x99}, 0x80}, {{&(0x7f0000001e80)=@ax25={{}, [@null, @remote, @netrom, @null, @remote, @default, @default, @default]}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001f00)=""/83, 0x53}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000002000)=""/245, 0xf5}], 0x3, &(0x7f0000002140)=""/61, 0x3d}}], 0x5, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

4.831957977s ago: executing program 4 (id=2607):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$netlink(0x10, 0x3, 0x8000000004)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x200140, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x4004)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, 0x0, 0x4000000)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000030c0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x0, 0x0, 0xf0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@uncond, 0xffffff99, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @local, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @mangle={0x0, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private=0xa010100, 0xd, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0xff9b)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0)
read$nci(r0, &(0x7f0000000080)=""/41, 0x29)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4402f549b96fc8030022000000000000", @ANYRES32=0x0, @ANYBLOB="0400000414000300070000000a000000000000000000000014000100ff020000000000000000000000000001"], 0x44}}, 0x8000)
syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0xc0001c8}, &(0x7f0000001300), &(0x7f0000001180))

4.723048761s ago: executing program 5 (id=2608):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0xfffffffffffffffe) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000005000000fd0d000000100000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400000005000000000000000000000000000000000000000d21592852225c8536a319479993c3c7bd2fb8f0f83eb29d6fcd9484728a3f362362636c199ebbb0a4d1fad893db3cd4d79cdd8e256f27c19683f43e188c"], 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r2, 0x37, 0x1, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x7, 0x3, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x32)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8044) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0xc0045405, 0xffffffffffffffff) (async)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) (async)
r6 = io_uring_setup(0x2852, &(0x7f0000000380)={0x0, 0xc4a5, 0x2008, 0x3, 0x1ac})
syz_io_uring_setup(0x10f1, &(0x7f0000000400)={0x0, 0xb224, 0x0, 0x0, 0xc1, 0x0, r6}, &(0x7f0000000300), &(0x7f0000000480))
socket$inet6_tcp(0xa, 0x1, 0x0)

4.578620479s ago: executing program 2 (id=2609):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00240367726574617000001800028004001200060018001c00000006000e"], 0x48}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)

4.135969755s ago: executing program 5 (id=2610):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/90]}, 0xd2)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={&(0x7f00000004c0)={{@hyper, 0x5}, {@host, 0xed82}, 0x430, "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"}, 0x448, 0xb34})
chdir(&(0x7f0000000300)='./file0\x00')
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a30000000001400000002"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffc9b, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x801}, 0x0)

3.636895322s ago: executing program 2 (id=2611):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ff"], 0xa0}}, 0x0)

3.499766038s ago: executing program 5 (id=2612):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x8)
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)

3.493832278s ago: executing program 4 (id=2613):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500fffe05000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

3.384839305s ago: executing program 3 (id=2614):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140))
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$media(&(0x7f00000001c0), 0x10, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000001700000000000000000000cc4800a0665ad666b40727e86ef59a00000000a38bdfeef74d88c37c11aea6ffe200000080000000000000e5c5eba83aa4376eeb5636f3f9c5207d5848db3c474bd38425c3ac"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0)
getpid()
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r6)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r8, <r9=>0x0})
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r10, 0x0, 0xd}, 0x18)
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x3, [<r11=>0x0, 0x0, 0x0, <r12=>0x0], [0x800000], [0x0, 0x1001000, 0x0, 0x37], [0x0, 0x0, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r11, 0x0, 0x0, r12], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[<r13=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000480)=r13)

3.296001743s ago: executing program 1 (id=2615):
syz_usb_connect(0x5, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109023f00010000100009045507050349020009050a0008002b070709058101ff030e0701090508100002090a4909050101080009010f09058203"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYBLOB="529194a8150f932022940e90c7", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES8], 0xb4}}, 0x81)

3.282941573s ago: executing program 2 (id=2616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

3.111712485s ago: executing program 2 (id=2617):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9e}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0xfff6)

2.166377835s ago: executing program 3 (id=2618):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$media(&(0x7f00000001c0), 0x10, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0)
getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x4000, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, 0x0, 0x0)

2.079824909s ago: executing program 4 (id=2619):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$vbi(0x0, 0x2, 0x2)
preadv(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x6, 0x29, 0x0, &(0x7f0000695ffc))
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6000000002060108000000000000000000000008140007800800114000000000050015002c0000000520010006000000050005000a04000005000400000000000900020073797a30000000000400007766cd980d702546f1a237d5e6ab213b6859746ed3782060f2c2e6c8905f59697fe54f74ef4b1546b31f5e9f70326e0ec2ce702fe3a248f144704f249ba7ccac2316c30f46395848b354d601c85e2296c2740aafa34237ca0a9f4287d02c13904c696addd59eb4f739582f502466b2ca2806c05bbddca6ba89"], 0x60}}, 0x800)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
getdents64(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}, 0xffffffff}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000740)=""/232, 0xe8}, {&(0x7f00000009c0)=""/247, 0xf7}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/71, 0x47}, {&(0x7f0000001ac0)=""/113, 0x71}, {&(0x7f0000000140)=""/62, 0x3e}], 0x7, &(0x7f0000001bc0)=""/200, 0xc8}, 0x7}, {{&(0x7f0000001cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000001d40)=""/69, 0x45}], 0x1, &(0x7f0000001dc0)=""/153, 0x99}, 0x80}, {{&(0x7f0000001e80)=@ax25={{}, [@null, @remote, @netrom, @null, @remote, @default, @default, @default]}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001f00)=""/83, 0x53}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000002000)=""/245, 0xf5}], 0x3, &(0x7f0000002140)=""/61, 0x3d}}], 0x5, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

2.079180291s ago: executing program 2 (id=2620):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x110)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x398f, '\x00', 0x0, r0, 0x1, 0x2}, 0x50)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_fuse_handle_req(r2, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x20001, 0x0, 0xdcf, 0x7, 0xb, 0x800, 0x0, 0x0, 0x10, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x0, 0x0, {0x5, 0x400000000000007, 0x0, 0x80000005, 0x40000000000003, 0x1, 0x9ec, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0x9e7, 0xffffffffffffffff, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r2, &(0x7f000000db40)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0x0, r3}, 0x10)

1.145582194s ago: executing program 3 (id=2621):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0) (async)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)="390000fa461ad7e48489bfe95602001300111809000000000000000000ff3f21000000170a00170000000004001400b4bb4a39bbbf2f68005687ef77ffc531", 0x3f}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)="390000fa461ad7e48489bfe95602001300111809000000000000000000ff3f21000000170a00170000000004001400b4bb4a39bbbf2f68005687ef77ffc531", 0x3f}], 0x1)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x8040) (async)
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x8040)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid() (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async)
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) (async)
getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28)

647.164226ms ago: executing program 2 (id=2622):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x4}, {}, {}, {0x0, 0x1, 0x100000}, 0x0, 0x40, 0x4, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x8000000, 0x16, 0x0, 0x0, 0x5})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0xc2, 0x4f, 0x19, 0x7, 0xc0, 0x9, 0xff, 0x6, 0xc, 0x0, 0x9}, {0x8, 0xa6f3, 0x6, 0x8, 0x9, 0xff, 0x8, 0x3, 0x4, 0xc, 0x1, 0x6, 0x10005}, {0x1fb, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x1, 0x3, 0xf0c}], 0x9})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x0, 0x100010003, 0xffffffffffffffff, 0x4002004c0, 0x1001, 0xfffffffffffffffe, 0xfff, 0x1, 0x0, 0x0, 0xb, 0x401, 0x3], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r6, 0x4004ae8b, &(0x7f0000000140)={0x99, "213734e4d86e8212829230a39626c4acb9d5e4c4a59ebd1b68ce5677954edcfc420706ebb83d5836dc69098990c9d6e07ab5999a14ff91fe34700303e714ce58f481840df373061efc7db065c784f28c6763c72cb1ae79424629ad8d929f7901c7f6b7a762072e901b86037e0e782bc1aef66e34776cb04c70d96b32b8b7e35eb0e79674819da7def1985bb68638dbdfaa3a5c07ee0e9a77f4"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

451.449711ms ago: executing program 4 (id=2623):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [<r4=>0x0, 0x0, 0x0, <r5=>0x0], [0x800000], [0x0, 0x1001000, 0x0, 0x37], [0x0, 0x0, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000})

180.152277ms ago: executing program 3 (id=2624):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x5)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0)
pipe2$9p(&(0x7f0000000000), 0x4800)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000760001"], 0x18}, 0x1, 0x5502000000000000}, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
syz_io_uring_setup(0x7b43, &(0x7f0000000580)={0x0, 0xe7b9, 0x2, 0x1, 0x800000, 0x0, r2}, &(0x7f0000000180), &(0x7f00000000c0))
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = getpid()
syz_pidfd_open(r3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10)
r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r10, 0x40186f40, &(0x7f0000000440)=0x1f)
syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r6, 0x1)

0s ago: executing program 4 (id=2625):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1a91c2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x68000, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0x8004}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

77478][T11413] 8021q: adding VLAN 0 to HW filter on device bond1
[  756.687791][T11416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1467'.
[  756.763750][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  756.763768][   T30] audit: type=1326 audit(1755238678.880:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11412 comm="syz.1.1467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f1a38ebe9 code=0x0
[  759.829458][T11437] netlink: 'syz.2.1473': attribute type 136 has an invalid length.
[  761.249615][T11454] block nbd3: Device being setup by another task
[  761.294589][T11451] block nbd3: NBD_DISCONNECT
[  761.301558][T11455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1480'.
[  761.341291][T11455] netlink: 'syz.4.1480': attribute type 1 has an invalid length.
[  761.368930][T11455] netlink: 'syz.4.1480': attribute type 2 has an invalid length.
[  761.376919][T11455] netlink: 'syz.4.1480': attribute type 3 has an invalid length.
[  761.588635][T11449] block nbd3: Disconnected due to user request.
[  761.629378][T11449] block nbd3: shutting down sockets
[  761.908268][T11472] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1483'.
[  762.451273][T10599] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  762.634132][T10599] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  762.672121][T11482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1489'.
[  762.672252][T10599] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  762.729218][T10599] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  762.747084][T11482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1489'.
[  762.767022][T10599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  762.795158][T11482] dummy0: entered promiscuous mode
[  762.810184][T10599] usb 3-1: SerialNumber: syz
[  762.836583][T11482] batadv_slave_1: entered promiscuous mode
[  762.847990][T11482] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  762.856758][T11482] Cannot create hsr debugfs directory
[  763.708531][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  764.151809][    T9] usb 4-1: config index 0 descriptor too short (expected 72, got 40)
[  764.173232][    T9] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  764.214672][T11502] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.1494'.
[  764.215509][T10599] usb 3-1: 0:2 : does not exist
[  764.238562][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  764.277115][    T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  764.286687][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.313891][    T9] usb 4-1: Product: syz
[  764.318301][    T9] usb 4-1: Manufacturer: syz
[  764.323246][    T9] usb 4-1: SerialNumber: syz
[  764.439864][T10599] usb 3-1: USB disconnect, device number 16
[  765.159871][    T9] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  765.271263][T10158] udevd[10158]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  766.419988][ T5887] usb 4-1: USB disconnect, device number 18
[  766.776842][T11538] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1501'.
[  767.829070][T10599] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  768.919442][T10599] usb 5-1: Using ep0 maxpacket: 32
[  768.994218][T10599] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  769.004967][T10599] usb 5-1: config 0 has an invalid descriptor of length 202, skipping remainder of the config
[  769.015615][T10599] usb 5-1: config 0 has no interface number 0
[  769.022593][T10599] usb 5-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  769.036251][T10599] usb 5-1: config 0 interface 184 has no altsetting 0
[  769.052609][T10599] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  769.077692][T10599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.106397][T10599] usb 5-1: Product: syz
[  769.113353][T10599] usb 5-1: Manufacturer: syz
[  769.124773][T10599] usb 5-1: SerialNumber: syz
[  769.135918][T10599] usb 5-1: config 0 descriptor??
[  769.402538][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'.
[  769.408112][T10599] smsc75xx v1.0.0
[  769.464101][T10599] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  769.536754][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'.
[  769.538790][T10599] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  769.666923][T10599] usb 5-1: USB disconnect, device number 20
[  770.799021][T11587] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1516'.
[  771.339356][T11594] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1519'.
[  771.375584][T11594] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  771.946484][T11612] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  771.955897][T11611] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1525'.
[  772.404037][T11614] netlink: 'syz.1.1526': attribute type 12 has an invalid length.
[  772.480465][T11614] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1526'.
[  774.331054][T11639] sctp: [Deprecated]: syz.4.1533 (pid 11639) Use of struct sctp_assoc_value in delayed_ack socket option.
[  774.331054][T11639] Use struct sctp_sack_info instead
[  774.358834][ T5959] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  774.642562][ T5959] usb 4-1: Using ep0 maxpacket: 16
[  774.733253][ T5959] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  774.868665][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.990700][ T5959] usb 4-1: config 0 descriptor??
[  775.006312][ T5959] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  775.300373][ T5959] usb 4-1: Detected FT232B
[  775.950497][T11631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  775.957437][ T5959] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  776.009003][   T30] audit: type=1800 audit(1755238697.942:87): pid=11651 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1536" name="nullb0" dev="devtmpfs" ino=2928 res=0 errno=0
[  776.068644][T11631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  776.632862][ T5959] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  776.966104][T11666] random: crng reseeded on system resumption
[  778.063665][ T5946] usb 4-1: USB disconnect, device number 19
[  778.099179][ T5946] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  778.123739][ T5946] ftdi_sio 4-1:0.0: device disconnected
[  778.157170][T10599] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  778.337139][T10599] usb 3-1: Using ep0 maxpacket: 8
[  778.356582][T10599] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  778.376746][T10599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.611932][T10599] usb 3-1: Product: syz
[  778.616153][T10599] usb 3-1: Manufacturer: syz
[  778.624764][T10599] usb 3-1: SerialNumber: syz
[  778.635318][T10599] usb 3-1: config 0 descriptor??
[  778.735586][T11684] fuse: Unknown parameter 'f¤'
[  778.829231][T10599] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244)
[  779.452739][T10599] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  779.467184][T10599] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  779.489493][T10599] usb 3-1: USB disconnect, device number 17
[  779.603612][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'.
[  780.097009][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'.
[  780.626787][ T5841] Bluetooth: hci5: command 0x0406 tx timeout
[  780.855691][T11704] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  782.729002][T11716] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  783.270954][T11721] sctp: [Deprecated]: syz.4.1560 (pid 11721) Use of struct sctp_assoc_value in delayed_ack socket option.
[  783.270954][T11721] Use struct sctp_sack_info instead
[  784.917165][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1563'.
[  785.467162][T11756] netlink: 'syz.4.1569': attribute type 13 has an invalid length.
[  785.811911][T11760] atomic_op ffff88805600f198 conn xmit_atomic 0000000000000000
[  786.388121][T11756] gretap0: refused to change device tx_queue_len
[  786.394693][T11756] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  786.438054][T11758] ceph: No mds server is up or the cluster is laggy
[  786.452805][ T5887] libceph: connect (1)[c::]:6789 error -101
[  786.464827][ T5887] libceph: mon0 (1)[c::]:6789 connect error
[  787.209636][T10599] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  787.689830][T10599] usb 4-1: Using ep0 maxpacket: 32
[  787.716087][T10599] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  787.735979][T10599] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  787.780020][T10599] usb 4-1: config 0 interface 0 has no altsetting 0
[  787.795349][T10599] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  787.814848][T10599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.845606][T10599] usb 4-1: config 0 descriptor??
[  788.060468][T11784] sctp: [Deprecated]: syz.2.1576 (pid 11784) Use of struct sctp_assoc_value in delayed_ack socket option.
[  788.060468][T11784] Use struct sctp_sack_info instead
[  788.728910][T10599] usbhid 4-1:0.0: can't add hid device: -71
[  788.734958][T10599] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  788.772052][T10599] usb 4-1: USB disconnect, device number 20
[  788.780834][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1574'.
[  788.978509][T11787] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  791.454568][T11809] smk_cipso_doi:679 remove rc = -2
[  791.468095][T11809] smk_cipso_doi:692 cipso add rc = -17
[  793.451866][T11824] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  793.954561][T11832] sctp: [Deprecated]: syz.4.1588 (pid 11832) Use of struct sctp_assoc_value in delayed_ack socket option.
[  793.954561][T11832] Use struct sctp_sack_info instead
[  794.713893][T11834] netlink: 'syz.2.1590': attribute type 2 has an invalid length.
[  795.581534][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1592'.
[  796.015417][T11852] netlink: 'syz.3.1597': attribute type 12 has an invalid length.
[  796.228344][T11852] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1597'.
[  796.975594][T11861] netlink: 'syz.4.1598': attribute type 1 has an invalid length.
[  797.994946][T11861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  799.872884][T11906] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1614'.
[  800.408787][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1613'.
[  800.987412][T11901] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  801.008732][T11923] netlink: 'syz.5.1619': attribute type 1 has an invalid length.
[  801.049499][T11901] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  801.049939][T11923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  801.142305][T11901] overlayfs: conflicting lowerdir path
[  801.518211][T11933] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  802.066664][T11931] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  802.364592][ T5959] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  803.384479][ T5959] usb 3-1: Using ep0 maxpacket: 8
[  803.401857][ T5959] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  803.445763][ T5959] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  803.532475][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.014470][ T5959] usb 3-1: Product: syz
[  804.029829][ T5959] usb 3-1: Manufacturer: syz
[  804.048268][ T5959] usb 3-1: SerialNumber: syz
[  804.076836][ T5959] usb 3-1: config 0 descriptor??
[  804.139019][ T5959] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  804.206814][ T5959] usb 3-1: setting power ON
[  804.223273][ T5959] dvb-usb: bulk message failed: -22 (2/0)
[  804.276675][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  804.325512][ T5959] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  804.366047][ T5959] usb 3-1: media controller created
[  804.933164][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  805.058093][ T5959] usb 3-1: selecting invalid altsetting 6
[  805.081611][ T5959] usb 3-1: digital interface selection failed (-22)
[  805.097736][ T5959] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  805.119400][ T5959] usb 3-1: setting power OFF
[  805.139422][ T5959] dvb-usb: bulk message failed: -22 (2/0)
[  805.163094][ T5959] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  805.183425][ T5959] (NULL device *): no alternate interface
[  805.731883][ T5959] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  805.944708][ T5959] usb 3-1: USB disconnect, device number 18
[  808.472405][ T5959] kernel write not supported for file /1138/loginuid (pid: 5959 comm: kworker/1:7)
[  808.548597][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  808.555301][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  809.843481][T12018] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  810.981401][T12024] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  811.788273][T12037] overlayfs: failed to clone lowerpath
[  812.858664][T12048] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  814.487760][T12065] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  815.248743][T12080] fuse: Unknown parameter 'f¤'
[  816.920661][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'.
[  817.039766][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'.
[  817.709095][T12100] atomic_op ffff888032e9d198 conn xmit_atomic 0000000000000000
[  818.201885][T12098] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  818.752117][   T30] audit: type=1804 audit(1755238740.856:88): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.1671" name="/newroot/339/file1" dev="fuse" ino=1 res=1 errno=0
[  819.440030][   T30] audit: type=1800 audit(1755238740.866:89): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1671" name="/" dev="fuse" ino=1 res=0 errno=0
[  820.183921][T12120] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1674'.
[  821.227000][T12137] fuse: Unknown parameter 'f¤'
[  821.739035][T12145] atomic_op ffff8880556c4198 conn xmit_atomic 0000000000000000
[  821.952611][T12149] openvswitch: netlink: VXLAN extension message has 8 unknown bytes.
[  822.022965][ T5959] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  822.047570][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'.
[  822.066124][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'.
[  822.236977][ T5959] usb 2-1: config 1 has an invalid interface number: 224 but max is 0
[  822.574897][ T5959] usb 2-1: config 1 has no interface number 0
[  822.606248][ T5959] usb 2-1: config 1 interface 224 has no altsetting 0
[  822.701212][ T5959] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0620, bcdDevice=2c.26
[  822.878016][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1689'.
[  823.043902][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.061286][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1689'.
[  823.091556][ T5959] usb 2-1: Product: syz
[  823.096268][ T5959] usb 2-1: Manufacturer: syz
[  823.101240][ T5959] usb 2-1: SerialNumber: syz
[  823.369203][T12168] Invalid ELF header magic: != ELF
[  824.122715][T12174] atomic_op ffff88807bee7998 conn xmit_atomic 0000000000000000
[  824.134239][ T5959] qmi_wwan 2-1:1.224: probe with driver qmi_wwan failed with error -22
[  824.147015][ T5959] usb 2-1: USB disconnect, device number 22
[  825.048263][T12190] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  825.058648][T12184] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  825.208094][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1696'.
[  825.572865][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'.
[  825.710264][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1695'.
[  825.719597][T12186] IPVS: stopping backup sync thread 12191 ...
[  825.778724][T12199] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  825.793382][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'.
[  825.803867][T12184] IPVS: stopping backup sync thread 12199 ...
[  826.569295][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1702'.
[  826.617725][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1702'.
[  826.972755][T12222] atomic_op ffff888027ca1998 conn xmit_atomic 0000000000000000
[  827.322477][T12229] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  828.240192][T12234] sctp: [Deprecated]: syz.5.1708 (pid 12234) Use of struct sctp_assoc_value in delayed_ack socket option.
[  828.240192][T12234] Use struct sctp_sack_info instead
[  829.849207][T12243] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  829.867851][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1711'.
[  830.011106][T12250] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  830.017258][T12243] IPVS: stopping backup sync thread 12250 ...
[  832.275556][ T5959] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  832.518592][ T5959] usb 5-1: Using ep0 maxpacket: 32
[  832.540963][ T5959] usb 5-1: config 0 has an invalid interface number: 92 but max is 0
[  832.581254][T12286] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  832.645873][ T5959] usb 5-1: config 0 has no interface number 0
[  832.705108][ T5959] usb 5-1: config 0 interface 92 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  832.721322][ T5959] usb 5-1: config 0 interface 92 has no altsetting 0
[  832.747298][ T5959] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=a8.eb
[  832.764524][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.773022][ T5959] usb 5-1: Product: syz
[  832.777211][ T5959] usb 5-1: Manufacturer: syz
[  832.918471][ T5959] usb 5-1: SerialNumber: syz
[  833.519694][ T5959] usb 5-1: config 0 descriptor??
[  833.838531][ T5959] usb 5-1: can't set config #0, error -71
[  833.894628][ T5959] usb 5-1: USB disconnect, device number 21
[  834.017413][T10158] udevd[10158]: setting mode of /dev/bus/usb/005/021 to 020664 failed: No such file or directory
[  834.111388][T10158] udevd[10158]: setting owner of /dev/bus/usb/005/021 to uid=0, gid=0 failed: No such file or directory
[  834.128358][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1726'.
[  834.211545][ T5887] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  834.326616][T12302] IPVS: stopping backup sync thread 12303 ...
[  834.554933][ T5887] usb 3-1: too many configurations: 76, using maximum allowed: 8
[  834.572788][ T5887] usb 3-1: unable to read config index 0 descriptor/start: -61
[  834.601480][ T5887] usb 3-1: can't read configurations, error -61
[  834.741907][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1729'.
[  834.749526][ T5887] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  834.855411][T12315] overlayfs: failed to clone lowerpath
[  834.901523][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  834.926863][ T5887] usb 3-1: too many configurations: 76, using maximum allowed: 8
[  835.017163][ T5887] usb 3-1: unable to read config index 0 descriptor/start: -61
[  835.090574][ T5887] usb 3-1: can't read configurations, error -61
[  835.148749][ T5887] usb usb3-port1: attempt power cycle
[  835.177981][    T9] usb 4-1: Using ep0 maxpacket: 32
[  835.526103][    T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  835.549588][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.571666][    T9] usb 4-1: Product: syz
[  835.582566][    T9] usb 4-1: Manufacturer: syz
[  835.590010][    T9] usb 4-1: SerialNumber: syz
[  835.655400][    T9] usb 4-1: config 0 descriptor??
[  836.156645][ T5887] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  836.191938][ T5887] usb 3-1: too many configurations: 76, using maximum allowed: 8
[  836.222158][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1735'.
[  836.232679][ T5887] usb 3-1: unable to read config index 0 descriptor/start: -61
[  836.242422][ T5887] usb 3-1: can't read configurations, error -61
[  836.386383][ T5887] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  836.405519][    T9] airspy 4-1:0.0: Board ID: 00
[  836.447946][ T5887] usb 3-1: too many configurations: 76, using maximum allowed: 8
[  836.450880][    T9] airspy 4-1:0.0: Firmware version: 
[  836.505041][ T5887] usb 3-1: unable to read config index 0 descriptor/start: -61
[  836.575511][ T5887] usb 3-1: can't read configurations, error -61
[  836.581551][T12336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'.
[  836.593010][ T5887] usb usb3-port1: unable to enumerate USB device
[  836.954219][T12334] IPVS: stopping backup sync thread 12339 ...
[  837.332954][    T9] airspy 4-1:0.0: usb_control_msg() failed -71 request 0f
[  837.353968][    T9] airspy 4-1:0.0: Registered as swradio24
[  837.359767][    T9] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  838.145882][T12354] atomic_op ffff888031644998 conn xmit_atomic 0000000000000000
[  838.225842][T12352] ceph: No mds server is up or the cluster is laggy
[  838.239475][ T5959] libceph: connect (1)[c::]:6789 error -101
[  838.324407][    T9] usb 4-1: USB disconnect, device number 21
[  838.362757][ T5959] libceph: mon0 (1)[c::]:6789 connect error
[  838.571284][T12357] syz_tun: entered allmulticast mode
[  839.509684][T12356] syz_tun: left allmulticast mode
[  839.860154][T12372] overlayfs: failed to clone lowerpath
[  840.974148][T12386] batadv_slave_0: entered promiscuous mode
[  841.236202][T12390] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1752'.
[  841.626589][T12401] ALSA: mixer_oss: invalid OSS volume ''
[  841.647876][T12401] ALSA: mixer_oss: invalid OSS volume 'ÄNi)À·E{:ÊT%½cB'
[  841.667937][T12401] ALSA: mixer_oss: invalid OSS volume 'fEøà,MTÔóÝé‹8P„דT}¦'‘§Wàül©{'
[  841.690389][T12401] ALSA: mixer_oss: invalid OSS volume 'Áé;›y@¸]Ì>ë#óÒaèýÍ6\9/¸ü[Óø\'
[  841.709503][T12401] ALSA: mixer_oss: invalid OSS volume 'þçý¦� F÷�4ïõ|׃Œ‹|ò„t@ÜÕ'
[  841.727395][T12401] ALSA: mixer_oss: invalid OSS volume 'GJJ³Ý<­m¼œÒË7ÈÔ–N­F‚cͲaD¶¤÷'
[  841.743556][T12406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1757'.
[  841.838939][T12406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1757'.
[  842.436572][T12385] batadv_slave_0: left promiscuous mode
[  842.666633][T12416] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  843.470278][T12418] netlink: 'syz.3.1761': attribute type 1 has an invalid length.
[  843.478068][T12418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  843.602463][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'.
[  843.621237][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'.
[  844.227486][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1766'.
[  844.236783][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1766'.
[  844.272131][T12435] netlink: 'syz.4.1767': attribute type 11 has an invalid length.
[  844.418309][T12447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1767'.
[  844.432452][T12445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1768'.
[  844.846753][ T5887] kernel read not supported for file /dsp (pid: 5887 comm: kworker/1:3)
[  845.764809][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1777'.
[  846.443375][T12490] __nla_validate_parse: 1 callbacks suppressed
[  846.443388][T12490] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1783'.
[  846.601036][T12490] unsupported nlmsg_type 40
[  848.759636][    T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  848.993166][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  849.018291][    T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  849.045146][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.073082][    T9] usb 3-1: config 0 descriptor??
[  849.086341][T12511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  849.262436][T12518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1790'.
[  849.314033][T12520] netlink: 'syz.1.1792': attribute type 1 has an invalid length.
[  849.356808][T12521] netlink: 'syz.1.1792': attribute type 1 has an invalid length.
[  849.428623][T12529] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  849.517547][    T9] elan 0003:04F3:0755.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  849.839514][ T5959] kernel read not supported for file /dsp (pid: 5959 comm: kworker/1:7)
[  850.440708][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'.
[  850.473107][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'.
[  850.558739][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1796'.
[  850.614717][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1796'.
[  852.347046][    T9] usb 3-1: USB disconnect, device number 23
[  852.367966][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1804'.
[  852.526600][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1804'.
[  860.183625][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1821'.
[  860.216187][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1821'.
[  861.983175][T12633] fuse: Unknown parameter 'f¤'
[  864.364941][T12662] atomic_op ffff88805b48f198 conn xmit_atomic 0000000000000000
[  864.500077][T12661] ceph: No mds server is up or the cluster is laggy
[  864.908487][ T5959] libceph: connect (1)[c::]:6789 error -101
[  864.914599][ T5959] libceph: mon0 (1)[c::]:6789 connect error
[  865.587987][T12679] fuse: Unknown parameter 'f¤'
[  866.351162][T12682] block nbd3: Device being setup by another task
[  866.380200][T12683] block nbd3: NBD_DISCONNECT
[  866.573459][T12675] block nbd3: Disconnected due to user request.
[  866.580388][T12675] block nbd3: shutting down sockets
[  867.416617][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  867.943360][    T9] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  867.951811][    T9] usb 3-1: config 0 has no interface number 0
[  867.972664][    T9] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  868.080959][    T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  868.097826][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.107827][    T9] usb 3-1: Product: syz
[  868.115181][    T9] usb 3-1: Manufacturer: syz
[  868.183477][    T9] usb 3-1: SerialNumber: syz
[  868.307603][    T9] usb 3-1: config 0 descriptor??
[  868.327767][ T5887] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  868.448752][T12719] fuse: Unknown parameter 'f¤'
[  868.572388][    C0] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  868.968329][    T9] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  869.088972][ T5887] usb 2-1: Using ep0 maxpacket: 8
[  869.098784][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  869.119399][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  869.131306][ T5959] usb 3-1: USB disconnect, device number 24
[  869.491730][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  869.504008][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  869.520868][ T5959] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  869.698780][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  869.720665][ T5887] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  869.736030][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.749996][T12727] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1854'.
[  869.759775][T12727] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1854'.
[  869.789831][ T5887] usb 2-1: config 0 descriptor??
[  869.802272][T12711] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  869.992755][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  869.999398][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  870.541227][ T5889] usb 2-1: USB disconnect, device number 23
[  870.555279][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -19
[  870.620830][T12740] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1857'.
[  871.402060][T12753] wg1 speed is unknown, defaulting to 1000
[  873.123257][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'.
[  875.847272][T12838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1884'.
[  876.101652][T12841] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  876.126187][T12833] IPVS: stopping backup sync thread 12841 ...
[  877.917815][ T5933] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  878.002911][T12870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1895'.
[  878.089928][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  878.100268][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  878.133041][ T5933] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  878.518191][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.596581][ T5887] kernel read not supported for file /dsp (pid: 5887 comm: kworker/1:3)
[  878.629151][ T5933] usb 4-1: config 0 descriptor??
[  878.933327][ T5933] usb 4-1: USB disconnect, device number 23
[  879.900467][T12890] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  879.909688][T12890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1903'.
[  879.931398][T12890] IPVS: stopping backup sync thread 12892 ...
[  881.043002][ T5887] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  881.498400][ T5887] usb 3-1: Using ep0 maxpacket: 16
[  881.518215][ T5887] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  881.540035][ T5887] usb 3-1: config 0 has no interface number 0
[  881.778571][ T5887] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  881.826734][ T5887] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  881.853683][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  881.892316][ T5887] usb 3-1: Product: syz
[  881.897042][ T5887] usb 3-1: SerialNumber: syz
[  881.942653][ T5887] usb 3-1: config 0 descriptor??
[  881.964303][ T5887] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[  882.152539][ T5889] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  882.176993][   T30] audit: type=1800 audit(1755238803.301:90): pid=12914 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1910" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0
[  882.223768][ T5959] usb 3-1: USB disconnect, device number 25
[  882.298002][ T5946] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  882.309475][ T5889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  882.321280][ T5889] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  882.332413][ T5889] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  882.349932][ T5889] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  882.359477][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  882.367566][ T5889] usb 2-1: Product: syz
[  882.371841][ T5889] usb 2-1: Manufacturer: syz
[  882.376436][ T5889] usb 2-1: SerialNumber: syz
[  882.388341][ T5887] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  882.451320][ T5946] usb 5-1: config 0 interface 0 has no altsetting 0
[  882.458536][ T5946] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  882.467582][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.478821][ T5946] usb 5-1: config 0 descriptor??
[  882.540555][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  882.553237][ T5887] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  882.563653][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.574919][ T5887] usb 4-1: config 0 descriptor??
[  882.581873][T12934] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  882.597158][ T5889] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  882.805531][ T5889] usb 2-1: USB disconnect, device number 24
[  882.842568][T12939] netlink: 182 bytes leftover after parsing attributes in process `syz.5.1919'.
[  882.926471][T12942] 9pnet_fd: Insufficient options for proto=fd
[  883.013763][ T5887] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  883.065805][T12926] virtio-fs: tag </dev/md0> not found
[  883.950696][ T5946] video4linux radio48: keene_cmd_set failed (-110)
[  883.967793][ T5946] radio-keene 5-1:0.0: V4L2 device registered as radio48
[  883.977578][ T5946] usb 5-1: USB disconnect, device number 22
[  883.994466][T12955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  884.028293][T12955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  884.032166][T12926] usblp0: removed
[  884.294367][T12963] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  884.954665][ T5887] usb 4-1: USB disconnect, device number 24
[  885.279902][T12970] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1930'.
[  885.558905][ T5946] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  886.518003][ T5946] usb 3-1: Using ep0 maxpacket: 32
[  886.535360][ T5946] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  886.556730][ T5946] usb 3-1: config 0 has no interface number 0
[  886.575237][ T5946] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  886.578512][T12994] netlink: 'syz.5.1936': attribute type 10 has an invalid length.
[  886.863623][ T5946] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  886.877693][T12994] team0: Cannot enslave team device to itself
[  886.885394][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.935296][ T5946] usb 3-1: Product: syz
[  886.969888][ T5946] usb 3-1: Manufacturer: syz
[  887.124754][ T5946] usb 3-1: SerialNumber: syz
[  887.785277][ T5946] usb 3-1: config 0 descriptor??
[  887.894391][ T5946] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  887.913792][ T5946] em28xx 3-1:0.132: Video interface 132 found:
[  888.154441][ T5887] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  888.937891][ T5946] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  889.358325][ T5887] usb 4-1: Using ep0 maxpacket: 16
[  889.378194][ T5946] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  889.408681][ T5887] usb 4-1: config index 0 descriptor too short (expected 1828, got 36)
[  889.424802][ T5946] em28xx 3-1:0.132: board has no eeprom
[  889.432203][ T5887] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  889.516636][ T5887] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  889.526592][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  889.539668][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  889.584187][ T5946] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  889.597064][ T5946] em28xx 3-1:0.132: analog set to bulk mode.
[  889.615187][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  889.633174][ T5959] em28xx 3-1:0.132: Registering V4L2 extension
[  889.703852][ T5887] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  889.715440][ T5946] usb 3-1: USB disconnect, device number 26
[  889.721933][T13018] netlink: 'syz.2.1944': attribute type 11 has an invalid length.
[  889.748214][ T5946] em28xx 3-1:0.132: Disconnecting em28xx
[  889.757456][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.928380][ T5887] usb 4-1: Product: syz
[  889.939798][ T5887] usb 4-1: Manufacturer: syz
[  890.249020][T12998] input: syz1 as /devices/virtual/input/input13
[  890.387159][ T5887] usb 4-1: SerialNumber: syz
[  890.472613][ T5887] usb 4-1: config 0 descriptor??
[  890.619729][ T5887] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected
[  890.691392][ T5959] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  891.118295][ T5887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87
[  891.149886][ T5959] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  891.157957][ T5887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[  891.174108][ T5959] em28xx 3-1:0.132: No AC97 audio processor
[  891.201844][ T5887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  891.258739][ T5959] usb 3-1: Decoder not found
[  891.265777][ T5887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  891.294491][ T5959] em28xx 3-1:0.132: failed to create media graph
[  891.305906][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1948'.
[  891.319836][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1948'.
[  891.329942][ T5887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  891.348724][ T5959] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  891.752793][ T5887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[  891.787435][ T5959] em28xx 3-1:0.132: Remote control support is not available for this card.
[  891.801558][ T5887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[  891.815480][ T5946] em28xx 3-1:0.132: Closing input extension
[  891.839716][ T5887] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  891.897199][ T5887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83
[  891.925090][ T5946] em28xx 3-1:0.132: Freeing device
[  891.936430][ T5887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4
[  891.955270][ T5887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86
[  891.964137][ T5887] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6
[  891.974608][ T5887] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  892.101827][T13046] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  892.817138][ T5887] usb 4-1: USB disconnect, device number 25
[  892.827236][ T5887] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  892.844627][ T5887] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  892.858516][ T5887] keyspan 4-1:0.0: device disconnected
[  895.709127][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1959'.
[  895.739857][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1959'.
[  897.449775][T13099] fuse: Unknown parameter 'f¤'
[  898.178780][T13101] mmap: syz.5.1963 (13101) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  898.493791][T13107] /dev/nullb0: Can't lookup blockdev
[  898.647154][T13109] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  899.560677][T13121] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  900.729984][T13139] fuse: Unknown parameter 'f¤'
[  901.321711][T13140] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  901.624649][ T5889] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  901.721591][T13143] netlink: 'syz.5.1975': attribute type 11 has an invalid length.
[  901.777784][ T5889] usb 5-1: Using ep0 maxpacket: 16
[  901.827511][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  901.968159][ T5887] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  902.169378][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  902.219855][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  902.288738][ T5887] usb 2-1: config 0 interface 0 has no altsetting 1
[  902.312567][ T5889] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  902.392602][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.412386][T13153] futex_wake_op: syz.5.1979 tries to shift op by 32; fix this program
[  902.413660][ T5887] usb 2-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f
[  902.457959][ T5889] usb 5-1: Product: syz
[  902.462504][ T5889] usb 5-1: Manufacturer: syz
[  902.463739][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  902.467103][ T5889] usb 5-1: SerialNumber: syz
[  902.495968][ T5887] usb 2-1: Product: syz
[  902.512505][ T5887] usb 2-1: Manufacturer: syz
[  902.517130][ T5887] usb 2-1: SerialNumber: syz
[  902.622165][ T5889] usb 5-1: config 0 descriptor??
[  902.647029][ T5889] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  902.752897][ T5889] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  902.825981][ T5887] usb 2-1: config 0 descriptor??
[  903.049444][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  903.073141][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  903.137057][ T5889] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  903.175699][ T5889] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  903.276963][ T5889] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  903.280156][ T5887] usb 2-1: USB disconnect, device number 25
[  903.476361][T13168] atomic_op ffff88807df2d998 conn xmit_atomic 0000000000000000
[  903.881208][ T5889] em28xx 5-1:0.0: No AC97 audio processor
[  903.893687][T13167] ceph: No mds server is up or the cluster is laggy
[  903.909029][ T5959] libceph: connect (1)[c::]:6789 error -101
[  903.915121][ T5959] libceph: mon0 (1)[c::]:6789 connect error
[  903.935174][ T5889] usb 5-1: USB disconnect, device number 23
[  903.949137][ T5889] em28xx 5-1:0.0: Disconnecting em28xx
[  904.021521][T13161] udevd[13161]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  904.059657][ T5889] em28xx 5-1:0.0: Freeing device
[  905.059745][T13184] fuse: Unknown parameter 'f¤'
[  905.759013][T13179] binder: 13176:13179 ioctl 40106437 200000000000 returned -22
[  906.027189][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1990'.
[  906.110762][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1990'.
[  907.209101][T13208] xt_SECMARK: invalid mode: 2
[  907.274396][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'.
[  907.608075][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'.
[  908.859950][T13231] atomic_op ffff888024902998 conn xmit_atomic 0000000000000000
[  908.972252][T13227] ceph: No mds server is up or the cluster is laggy
[  910.851906][T13251] siw: device registration error -23
[  910.861612][T13251] netlink: 'syz.4.2005': attribute type 1 has an invalid length.
[  910.995872][ T5887] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  911.004196][ T5946] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  911.287856][ T5946] usb 3-1: Using ep0 maxpacket: 16
[  911.299587][ T5887] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  911.313861][ T5887] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  911.328665][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  911.389877][ T5887] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  911.417943][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  911.433781][ T5887] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  911.445289][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  911.459740][ T5946] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  911.483174][ T5887] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  911.498286][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  911.517936][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  911.532490][ T5887] usb 2-1: Product: syz
[  911.543894][ T5887] usb 2-1: Manufacturer: syz
[  911.553563][ T5946] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  911.563477][ T5887] usb 2-1: SerialNumber: syz
[  911.568880][ T5946] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  911.580329][ T5946] usb 3-1: Manufacturer: syz
[  911.613382][ T5946] usb 3-1: config 0 descriptor??
[  912.608090][ T5887] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  912.615988][ T5887] usb 2-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[  912.625553][ T5887] usb 2-1: found format II with max.bitrate = 128, frame size=0
[  912.633614][ T5887] usb 2-1: 2:1: All rates were zero
[  912.747959][ T5946] rc_core: IR keymap rc-hauppauge not found
[  912.783941][ T5887] usb 2-1: USB disconnect, device number 26
[  912.790279][ T5946] Registered IR keymap rc-empty
[  912.797042][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  912.817895][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  912.850569][ T5946] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  912.882478][ T5946] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14
[  912.937361][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  912.968299][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  913.008692][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  913.047885][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  913.087891][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  913.168044][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  913.208005][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  913.245590][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  913.317856][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  913.379106][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  913.641663][ T5946] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  913.665727][ T5946] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  914.312975][ T5946] usb 3-1: USB disconnect, device number 27
[  914.666338][T13288] ceph: No mds server is up or the cluster is laggy
[  915.044892][ T5887] libceph: connect (1)[c::]:6789 error -101
[  915.054543][ T5887] libceph: mon0 (1)[c::]:6789 connect error
[  915.261361][T13296] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2020'.
[  915.325868][T13296] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2020'.
[  915.416250][T13301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  915.496497][ T5889] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  915.590171][T13307] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  915.615526][T13307] bridge0: port 2(bridge_slave_1) entered disabled state
[  915.624201][T13307] bridge0: port 1(bridge_slave_0) entered disabled state
[  915.633592][T13307] bridge0: entered allmulticast mode
[  915.653979][T13307] bridge_slave_1: left allmulticast mode
[  915.660135][T13307] bridge_slave_1: left promiscuous mode
[  915.667183][T13307] bridge0: port 2(bridge_slave_1) entered disabled state
[  915.679156][T13307] bridge_slave_0: left allmulticast mode
[  915.684796][T13307] bridge_slave_0: left promiscuous mode
[  915.690997][T13307] bridge0: port 1(bridge_slave_0) entered disabled state
[  915.706554][T13310] 9pnet_fd: Insufficient options for proto=fd
[  915.774081][ T5889] usb 5-1: device descriptor read/64, error -71
[  916.717555][ T5889] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  916.793524][T13315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2028'.
[  916.897901][ T5889] usb 5-1: device descriptor read/64, error -71
[  917.028210][ T5889] usb usb5-port1: attempt power cycle
[  917.063779][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'.
[  917.934460][ T5889] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  917.970153][ T5889] usb 5-1: device descriptor read/8, error -71
[  918.068106][T13341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2037'.
[  918.097082][T13341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2037'.
[  918.199077][T13350] netlink: 'syz.5.2039': attribute type 11 has an invalid length.
[  918.227969][ T5889] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  918.395573][T13356] fuse: Unknown parameter 'fÿÿ6]äYmV/:™
*ãîðíº *ïl³JCíßm¹³
‚¹ö¹ž$O÷1ÍZ¦ùÉúê@äŽã÷?¼HʲRÁÃ6Ñ�/ÝÐÚO³6ªºýÆe׶)ßú`	a�/]ƒ+wìغ2'
[  918.606498][ T5889] usb 5-1: device not accepting address 27, error -71
[  919.376854][ T5889] usb usb5-port1: unable to enumerate USB device
[  920.787349][T13382] nbd: must specify an index to disconnect
[  921.492154][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2053'.
[  923.345649][T13412] wg1 speed is unknown, defaulting to 1000
[  924.065452][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'.
[  924.117818][T13427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2059'.
[  925.590513][T13450] netlink: 'syz.1.2064': attribute type 1 has an invalid length.
[  925.604798][T13450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  926.402517][T13464] sctp: [Deprecated]: syz.2.2067 (pid 13464) Use of struct sctp_assoc_value in delayed_ack socket option.
[  926.402517][T13464] Use struct sctp_sack_info instead
[  928.267316][T13482] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  928.328763][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2074'.
[  928.383980][T13483] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  928.384306][T13482] IPVS: stopping backup sync thread 13483 ...
[  929.482034][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'.
[  929.491169][T13498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2078'.
[  930.775784][T13508] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  931.139454][T13514] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  931.154903][T13512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2083'.
[  931.164065][T13512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2083'.
[  931.189786][T13514] netlink: 'syz.2.2082': attribute type 10 has an invalid length.
[  931.970695][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  931.977280][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  933.946093][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'.
[  934.116491][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2095'.
[  934.607901][ T5889] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  934.638640][T13559] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  935.636311][ T5889] usb 4-1: Using ep0 maxpacket: 8
[  935.674071][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  935.727988][ T5889] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[  935.737084][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.819083][ T5889] usb 4-1: config 0 descriptor??
[  937.048085][T13554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  937.120664][T13554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  937.448726][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2107'.
[  937.592082][ T5889] corsair 0003:1B1C:1B09.0008: unbalanced delimiter at end of report description
[  937.640486][ T5889] corsair 0003:1B1C:1B09.0008: parse failed
[  937.642654][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2107'.
[  937.665718][ T5889] corsair 0003:1B1C:1B09.0008: probe with driver corsair failed with error -22
[  937.861911][ T5889] usb 4-1: USB disconnect, device number 26
[  939.157871][ T5889] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  939.246570][T13600] wg1 speed is unknown, defaulting to 1000
[  939.356971][ T5889] usb 4-1: Using ep0 maxpacket: 16
[  939.395483][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  939.590507][ T5889] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  939.621948][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.148480][ T5854] Bluetooth: hci5: command 0x0406 tx timeout
[  940.587421][ T5889] usb 4-1: config 0 descriptor??
[  940.649809][T13610] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  941.540989][T13618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  941.592124][T13618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  941.624577][ T5889] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  942.838252][    T9] usb 4-1: USB disconnect, device number 27
[  942.862864][T13630] netlink: 'syz.2.2117': attribute type 1 has an invalid length.
[  942.886035][T13630] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2117'.
[  942.941739][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2119'.
[  944.086558][T13645] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  944.131327][T13644] IPVS: stopping backup sync thread 13645 ...
[  944.450163][ T5887] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  944.638205][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  945.646918][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  946.064102][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  946.108075][ T5887] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  946.139749][T13669] overlayfs: failed to clone upperpath
[  946.147876][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.184154][ T5887] usb 4-1: Product: syz
[  946.203829][ T5887] usb 4-1: Manufacturer: syz
[  946.217411][ T5887] usb 4-1: SerialNumber: syz
[  946.237174][ T5887] usb 4-1: config 0 descriptor??
[  946.247200][T13648] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  946.254231][T13666] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  946.258508][T13648] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  946.278612][ T5887] usb 4-1: ucan: probing device on interface #0
[  946.285559][T13674] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  947.264575][ T5887] usb 4-1: ucan: could not read protocol version, ret=0
[  947.684202][ T5887] usb 4-1: ucan: probe failed; try to update the device firmware
[  947.963996][T13666] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  948.313772][T13666] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  948.428270][ T5887] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  949.036257][    T9] usb 4-1: USB disconnect, device number 28
[  949.152917][T13713] netlink: 'syz.5.2138': attribute type 4 has an invalid length.
[  949.175949][ T5887] usb 3-1: config 0 has an invalid interface number: 57 but max is 0
[  949.187878][ T5887] usb 3-1: config 0 has no interface number 0
[  949.218845][T13712] netlink: 'syz.5.2138': attribute type 4 has an invalid length.
[  949.247348][ T5887] usb 3-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  949.285690][ T5887] usb 3-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4
[  949.378046][ T5887] usb 3-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7
[  949.403555][ T5887] usb 3-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024
[  949.427644][ T5887] usb 3-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  949.465703][ T5887] usb 3-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63
[  949.486898][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.504014][ T5887] usb 3-1: config 0 descriptor??
[  949.682996][T13712] netlink: 'syz.5.2138': attribute type 3 has an invalid length.
[  950.636009][T13666] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  950.716847][T13666] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  950.762002][T13666] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  950.887040][T13666] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  951.248498][T12725] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  951.617956][T12725] usb 4-1: Using ep0 maxpacket: 32
[  951.902475][T12725] usb 4-1: config 0 has an invalid interface number: 202 but max is 0
[  951.992620][T13735] FAULT_INJECTION: forcing a failure.
[  951.992620][T13735] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  952.006675][T13735] CPU: 0 UID: 0 PID: 13735 Comm: syz.4.2144 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  952.006701][T13735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  952.006714][T13735] Call Trace:
[  952.006722][T13735]  <TASK>
[  952.006731][T13735]  dump_stack_lvl+0x189/0x250
[  952.006759][T13735]  ? __pfx____ratelimit+0x10/0x10
[  952.006780][T13735]  ? __pfx_dump_stack_lvl+0x10/0x10
[  952.006802][T13735]  ? __pfx__printk+0x10/0x10
[  952.006841][T13735]  should_fail_ex+0x414/0x560
[  952.006867][T13735]  _copy_to_user+0x31/0xb0
[  952.006896][T13735]  vivid_radio_rx_read+0x9e5/0xb70
[  952.006937][T13735]  ? __pfx_vivid_radio_rx_read+0x10/0x10
[  952.006963][T13735]  ? __pfx_v4l2_read+0x10/0x10
[  952.006989][T13735]  ? video_devdata+0x6b/0xd0
[  952.007013][T13735]  ? vivid_radio_read+0x7a/0xc0
[  952.007039][T13735]  v4l2_read+0x19c/0x2c0
[  952.007065][T13735]  ? __pfx_v4l2_read+0x10/0x10
[  952.007092][T13735]  vfs_read+0x200/0x980
[  952.007131][T13735]  ? __pfx_vfs_read+0x10/0x10
[  952.007161][T13735]  ? __fget_files+0x2a/0x420
[  952.007186][T13735]  ? __fget_files+0x2a/0x420
[  952.007205][T13735]  ? __fget_files+0x3a0/0x420
[  952.007225][T13735]  ? __fget_files+0x2a/0x420
[  952.007257][T13735]  ksys_read+0x145/0x250
[  952.007277][T13735]  ? __pfx_ksys_read+0x10/0x10
[  952.007292][T13735]  ? rcu_is_watching+0x15/0xb0
[  952.007319][T13735]  ? do_syscall_64+0xbe/0x3b0
[  952.007345][T13735]  do_syscall_64+0xfa/0x3b0
[  952.007367][T13735]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  952.007386][T13735]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  952.007404][T13735]  ? clear_bhb_loop+0x60/0xb0
[  952.007428][T13735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  952.007447][T13735] RIP: 0033:0x7f982fb8ebe9
[  952.007465][T13735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  952.007482][T13735] RSP: 002b:00007f9830989038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  952.007503][T13735] RAX: ffffffffffffffda RBX: 00007f982fdb6180 RCX: 00007f982fb8ebe9
[  952.007526][T13735] RDX: 00000000fffffeb2 RSI: 0000200000000080 RDI: 0000000000000008
[  952.007539][T13735] RBP: 00007f9830989090 R08: 0000000000000000 R09: 0000000000000000
[  952.007551][T13735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  952.007563][T13735] R13: 00007f982fdb6218 R14: 00007f982fdb6180 R15: 00007ffc0ce803c8
[  952.007599][T13735]  </TASK>
[  952.243788][    C0] vkms_vblank_simulate: vblank timer overrun
[  952.645031][T12725] usb 4-1: config 0 has no interface number 0
[  952.717017][T12725] usb 4-1: config 0 interface 202 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  952.751564][T12725] usb 4-1: New USB device found, idVendor=08ca, idProduct=0103, bcdDevice=bf.1b
[  952.791362][T13740] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  952.811756][T12725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.020121][T12725] usb 4-1: Product: syz
[  954.024359][T12725] usb 4-1: Manufacturer: syz
[  954.050230][T12725] usb 4-1: SerialNumber: syz
[  954.093610][T12725] usb 4-1: config 0 descriptor??
[  954.103473][T13744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2148'.
[  954.112970][T12725] usb 4-1: can't set config #0, error -71
[  954.138853][ T5887] usb 3-1: can't set config #0, error -71
[  954.148726][T12725] usb 4-1: USB disconnect, device number 29
[  954.189220][ T5887] usb 3-1: USB disconnect, device number 28
[  954.805572][T12725] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  955.079989][T12725] usb 4-1: Using ep0 maxpacket: 32
[  955.298806][T12725] usb 4-1: config index 0 descriptor too short (expected 49410, got 36)
[  955.304002][T13753] ceph: No mds server is up or the cluster is laggy
[  955.313987][T12725] usb 4-1: config 12 has too many interfaces: 127, using maximum allowed: 32
[  955.314015][T12725] usb 4-1: config 12 contains an unexpected descriptor of type 0x2, skipping
[  955.314032][T12725] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[  955.314050][T12725] usb 4-1: config 12 has 0 interfaces, different from the descriptor's value: 127
[  955.316002][T12725] usb 4-1: config index 1 descriptor too short (expected 49410, got 36)
[  955.586267][T12725] usb 4-1: config 12 has too many interfaces: 127, using maximum allowed: 32
[  955.683270][T12725] usb 4-1: config 12 contains an unexpected descriptor of type 0x2, skipping
[  955.698048][T12725] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[  955.723603][T12725] usb 4-1: config 12 has 0 interfaces, different from the descriptor's value: 127
[  955.734491][T12725] usb 4-1: config index 2 descriptor too short (expected 49410, got 36)
[  955.744648][T12725] usb 4-1: config 12 has too many interfaces: 127, using maximum allowed: 32
[  955.754610][T12725] usb 4-1: config 12 contains an unexpected descriptor of type 0x2, skipping
[  955.763803][T12725] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[  956.337445][T13776] openvswitch: netlink: IP tunnel dst address not specified
[  956.350195][T12725] usb 4-1: config 12 has 0 interfaces, different from the descriptor's value: 127
[  956.364685][T12725] usb 4-1: config index 3 descriptor too short (expected 49410, got 36)
[  956.727791][T12725] usb 4-1: config 12 has too many interfaces: 127, using maximum allowed: 32
[  956.750450][T12725] usb 4-1: config 12 contains an unexpected descriptor of type 0x2, skipping
[  956.760524][T12725] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[  956.774640][T12725] usb 4-1: config 12 has 0 interfaces, different from the descriptor's value: 127
[  956.795901][T12725] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice= 0.40
[  956.954712][T12725] usb 4-1: New USB device strings: Mfr=16, Product=0, SerialNumber=9
[  956.993338][T12725] usb 4-1: Manufacturer: syz
[  957.005946][T12725] usb 4-1: SerialNumber: syz
[  957.054112][T13784] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  957.075411][T13787] fuse: Bad value for 'rootmode'
[  957.243280][    T9] usb 4-1: USB disconnect, device number 30
[  957.336157][T13797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2164'.
[  958.833738][T13822] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2166'.
[  960.270436][T13847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2178'.
[  961.136136][T13855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2180'.
[  961.190577][T13861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2180'.
[  961.428381][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  961.889773][    T9] usb 3-1: config 0 has an invalid interface number: 109 but max is 0
[  961.902708][    T9] usb 3-1: config 0 has no interface number 0
[  961.909337][    T9] usb 3-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  961.926437][    T9] usb 3-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1
[  961.945191][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.973855][    T9] usb 3-1: config 0 descriptor??
[  962.001416][    T9] cxacru 3-1:0.109: cxacru_bind: interface has incorrect endpoints
[  962.018456][    T9] cxacru 3-1:0.109: usbatm_usb_probe: bind failed: -19!
[  963.128464][T13881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  963.154378][T13881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  963.437619][ T5917] usb 3-1: USB disconnect, device number 29
[  963.699379][T13899] atomic_op ffff888031bc9198 conn xmit_atomic 0000000000000000
[  963.821117][ T5887] libceph: connect (1)[c::]:6789 error -101
[  963.833840][ T5887] libceph: mon0 (1)[c::]:6789 connect error
[  964.149887][T13895] ceph: No mds server is up or the cluster is laggy
[  964.176627][ T5887] libceph: connect (1)[c::]:6789 error -101
[  964.201826][ T5887] libceph: mon0 (1)[c::]:6789 connect error
[  964.466354][T13904] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2192'.
[  966.904897][ T5917] libceph: connect (1)[c::]:6789 error -101
[  967.021110][ T5917] libceph: mon0 (1)[c::]:6789 connect error
[  967.378206][    T9] libceph: connect (1)[c::]:6789 error -101
[  967.384326][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  967.500858][T13924] ceph: No mds server is up or the cluster is laggy
[  967.674954][T13940] netlink: 'syz.4.2201': attribute type 11 has an invalid length.
[  967.683000][T13940] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2201'.
[  969.588281][T13954] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2204'.
[  970.150744][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2204'.
[  970.323332][T13966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2206'.
[  975.733929][T14015] l2tp_ppp: sess 2/0: no socket in recv
[  975.829078][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2218'.
[  976.057876][    T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  976.239555][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  976.298346][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  976.325146][    T9] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  976.345297][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.377950][    T9] usb 5-1: Product: syz
[  976.392385][    T9] usb 5-1: Manufacturer: syz
[  976.402738][    T9] usb 5-1: SerialNumber: syz
[  976.424920][    T9] usb 5-1: config 0 descriptor??
[  976.496911][    T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  976.570789][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  977.500955][    T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  977.511551][    T9] usb 5-1: media controller created
[  977.536047][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  977.867976][    T9] DVB: Unable to find symbol tda10046_attach()
[  977.874177][    T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  978.683337][    T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  978.716003][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2217'.
[  978.804599][T14064] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  978.861696][T14064] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  979.658556][    T9] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  979.673034][    T9] usb 5-1: USB disconnect, device number 28
[  980.708208][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'.
[  980.741955][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'.
[  980.783743][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2232'.
[  980.949457][T14099] netlink: 'syz.4.2234': attribute type 11 has an invalid length.
[  981.017572][T14102] pim6reg: entered allmulticast mode
[  981.039803][T14102] pim6reg: left allmulticast mode
[  981.049102][ T5887] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  981.228211][ T5887] usb 2-1: Using ep0 maxpacket: 32
[  981.267280][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short
[  981.378210][ T5887] usb 2-1: config 1 has an invalid interface descriptor of length 3, skipping
[  981.458299][ T5887] usb 2-1: config 1 has an invalid interface descriptor of length 3, skipping
[  981.539544][ T5887] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  981.770359][ T5887] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  981.793229][ T5887] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  982.597782][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.605838][ T5887] usb 2-1: Product: syz
[  982.632556][ T5887] usb 2-1: Manufacturer: syz
[  982.638245][ T5887] usb 2-1: SerialNumber: syz
[  982.896145][T14091] netlink: 'syz.1.2232': attribute type 10 has an invalid length.
[  983.005971][T14091] geneve0: entered promiscuous mode
[  983.123701][T14091] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  983.517874][T14132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'.
[  983.522350][ T5887] usb 2-1: 0:2 : does not exist
[  983.556275][ T5887] usb 2-1: USB disconnect, device number 27
[  983.585945][T14139] C: renamed from lo
[  983.603327][T14139] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  983.615356][T14013] udevd[14013]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  985.605369][T14144] netlink: 'syz.4.2245': attribute type 7 has an invalid length.
[  985.657884][ T5887] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  985.858038][ T5887] usb 3-1: Using ep0 maxpacket: 16
[  985.866532][ T5887] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  985.875919][ T5887] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  985.886509][ T5887] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  985.898500][ T5887] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  985.926514][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.946630][ T5887] usb 3-1: Product: syz
[  985.951283][ T5887] usb 3-1: Manufacturer: syz
[  985.955901][ T5887] usb 3-1: SerialNumber: syz
[  987.331415][ T5887] usb 3-1: 0:2 : does not exist
[  987.338111][T14172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2251'.
[  987.362811][ T5887] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[  987.415836][ T5887] usb 3-1: USB disconnect, device number 30
[  987.479697][T14013] udevd[14013]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  987.582875][T14179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2255'.
[  991.408208][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2268'.
[  991.679057][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2268'.
[  991.765946][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'.
[  991.776137][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2269'.
[  992.142222][T14237] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2272'.
[  992.217960][T14238] /dev/nullb0: Can't lookup blockdev
[  992.863133][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  993.034809][T14243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2273'.
[  993.141705][   T30] audit: type=1326 audit(1755238914.271:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14249 comm="syz.2.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81778ebe9 code=0x7ffc0000
[  993.240867][   T30] audit: type=1326 audit(1755238914.301:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14249 comm="syz.2.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81778ebe9 code=0x7ffc0000
[  993.274050][   T30] audit: type=1326 audit(1755238914.301:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14249 comm="syz.2.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb81778ebe9 code=0x7ffc0000
[  993.339772][   T30] audit: type=1326 audit(1755238914.301:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14249 comm="syz.2.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81778ebe9 code=0x7ffc0000
[  993.372443][   T30] audit: type=1326 audit(1755238914.301:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14249 comm="syz.2.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81778ebe9 code=0x7ffc0000
[  993.414676][   T30] audit: type=1326 audit(1755238914.301:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14249 comm="syz.2.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb81778ebe9 code=0x7ffc0000
[  993.449686][   T30] audit: type=1326 audit(1755238914.301:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14249 comm="syz.2.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81778ebe9 code=0x7ffc0000
[  993.473954][   T30] audit: type=1326 audit(1755238914.301:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14249 comm="syz.2.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81778ebe9 code=0x7ffc0000
[  993.508926][   T30] audit: type=1326 audit(1755238914.311:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14249 comm="syz.2.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb81778ebe9 code=0x7ffc0000
[  993.543934][T14233] team0 (unregistering): Port device team_slave_0 removed
[  993.552579][   T30] audit: type=1326 audit(1755238914.451:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14249 comm="syz.2.2276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb81778ebe9 code=0x7ffc0000
[  993.578668][T14233] team0 (unregistering): Port device team_slave_1 removed
[  993.636345][T14237] batadv1: entered promiscuous mode
[  993.643935][T14237] batadv1: entered allmulticast mode
[  993.697803][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  993.907756][    T9] usb 3-1: Using ep0 maxpacket: 8
[  994.430201][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  994.470840][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  994.510224][    T9] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  994.561529][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  994.592851][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  994.655969][    T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  994.692175][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  994.722990][T14250] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  994.760536][    T9] hub 3-1:1.0: bad descriptor, ignoring hub
[  994.824654][    T9] hub 3-1:1.0: probe with driver hub failed with error -5
[  994.842171][    T9] cdc_wdm 3-1:1.0: skipping garbage
[  994.847426][    T9] cdc_wdm 3-1:1.0: skipping garbage
[  994.886347][    T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  994.899464][    T9] cdc_wdm 3-1:1.0: Unknown control protocol
[  995.507656][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  995.514455][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  995.521782][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  995.528375][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  995.534951][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  995.541539][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  995.548073][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  995.554678][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  995.561138][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  995.567743][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  995.574049][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  995.580634][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  995.586926][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  995.593509][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  995.599788][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  995.606382][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  995.612944][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  995.619525][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  995.625829][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  995.632407][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  995.649403][T14287] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  995.668644][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2283'.
[  995.818079][T14289] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  995.830405][T14283] IPVS: stopping backup sync thread 14289 ...
[  995.904155][ T5887] usb 3-1: USB disconnect, device number 31
[  996.409094][T14300] atomic_op ffff888078334998 conn xmit_atomic 0000000000000000
[ 1000.827821][ T5933] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1000.989122][T14357] atomic_op ffff88807dff4998 conn xmit_atomic 0000000000000000
[ 1001.895007][T14356] macvtap1: entered promiscuous mode
[ 1001.903481][T14356] macvtap1: entered allmulticast mode
[ 1002.293131][ T5933] usb 3-1: Using ep0 maxpacket: 16
[ 1002.816837][ T5933] usb 3-1: device descriptor read/all, error -71
[ 1004.642784][T14395] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1004.677793][ T5917] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1004.839943][ T5917] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[ 1004.887854][ T5917] usb 4-1: config 0 has no interface number 0
[ 1004.895017][ T5917] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 1005.012275][T14398] atomic_op ffff8880770c6998 conn xmit_atomic 0000000000000000
[ 1005.683893][ T5917] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1006.811577][ T5917] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 1006.837770][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.845812][ T5917] usb 4-1: Product: syz
[ 1006.857759][ T5917] usb 4-1: Manufacturer: syz
[ 1006.862397][ T5917] usb 4-1: SerialNumber: syz
[ 1007.052292][ T5917] usb 4-1: config 0 descriptor??
[ 1007.818044][ T5917] usb 4-1: can't set config #0, error -71
[ 1007.825859][ T5917] usb 4-1: USB disconnect, device number 31
[ 1008.331712][T14422] overlay: Unknown parameter '/dev/cpu/#/msr'
[ 1008.358438][ T5933] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1008.727815][ T5933] usb 5-1: Using ep0 maxpacket: 8
[ 1008.737522][ T5933] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1008.781255][ T5933] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1008.959259][ T5933] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1008.993950][ T5933] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1009.098894][ T5933] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1009.120884][ T5933] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1009.139571][ T5933] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1009.201894][ T5933] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1009.227779][ T5933] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1009.274476][ T5933] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1009.428708][ T5933] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1009.446599][ T5933] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1010.247870][ T5933] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1010.261100][ T5933] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1010.272305][ T5933] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1012.638973][ T5933] usb 5-1: string descriptor 0 read error: -71
[ 1012.673790][ T5933] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1012.723481][T14463] netlink: 'syz.5.2330': attribute type 4 has an invalid length.
[ 1012.731449][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1012.830292][ T5933] usb 5-1: can't set config #168, error -71
[ 1012.884325][ T5933] usb 5-1: USB disconnect, device number 29
[ 1012.905796][T14469] netlink: 'syz.5.2330': attribute type 4 has an invalid length.
[ 1013.233398][T14479] trusted_key: syz.3.2334 sent an empty control message without MSG_MORE.
[ 1013.854022][T14477] tmpfs: Bad value for 'mpol'
[ 1014.384367][T14484] wg1 speed is unknown, defaulting to 1000
[ 1014.889739][ T5887] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1015.636203][T14484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2338'.
[ 1016.912510][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2349'.
[ 1017.063318][T14532] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1017.079116][T14520] IPVS: stopping backup sync thread 14532 ...
[ 1017.348242][T14540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2354'.
[ 1017.379365][T14540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2354'.
[ 1017.494545][T14546] netlink: 'syz.5.2355': attribute type 4 has an invalid length.
[ 1017.647340][T14551] netlink: 'syz.5.2355': attribute type 4 has an invalid length.
[ 1017.911144][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'.
[ 1017.987346][T14557] fuse: Unknown parameter 'f¤'
[ 1018.549144][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'.
[ 1019.054373][T14565] fuse: Bad value for 'fd'
[ 1019.591215][T14568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2362'.
[ 1019.601100][ T5959] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[ 1020.490816][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1020.517789][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1020.527748][ T5959] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 1020.536809][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1020.550641][T14578] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2364'.
[ 1020.572782][ T5959] usb 4-1: config 0 descriptor??
[ 1020.749503][T14580] FAULT_INJECTION: forcing a failure.
[ 1020.749503][T14580] name failslab, interval 1, probability 0, space 0, times 0
[ 1020.783624][T14580] CPU: 1 UID: 0 PID: 14580 Comm: syz.2.2366 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1020.783654][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1020.783666][T14580] Call Trace:
[ 1020.783674][T14580]  <TASK>
[ 1020.783683][T14580]  dump_stack_lvl+0x189/0x250
[ 1020.783710][T14580]  ? __pfx____ratelimit+0x10/0x10
[ 1020.783731][T14580]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1020.783753][T14580]  ? __pfx__printk+0x10/0x10
[ 1020.783780][T14580]  ? __pfx___might_resched+0x10/0x10
[ 1020.783802][T14580]  ? fs_reclaim_acquire+0x7d/0x100
[ 1020.783828][T14580]  should_fail_ex+0x414/0x560
[ 1020.783853][T14580]  should_failslab+0xa8/0x100
[ 1020.783876][T14580]  __kmalloc_noprof+0xcb/0x4f0
[ 1020.783893][T14580]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 1020.783922][T14580]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 1020.783952][T14580]  genl_family_rcv_msg_doit+0xb8/0x300
[ 1020.783980][T14580]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1020.784003][T14580]  ? rcu_is_watching+0x15/0xb0
[ 1020.784022][T14580]  ? cap_capable+0x11f/0x460
[ 1020.784041][T14580]  ? safesetid_security_capable+0xa9/0x1a0
[ 1020.784062][T14580]  ? bpf_lsm_capable+0x9/0x20
[ 1020.784084][T14580]  ? security_capable+0x7e/0x2e0
[ 1020.784115][T14580]  genl_rcv_msg+0x60e/0x790
[ 1020.784140][T14580]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1020.784159][T14580]  ? __pfx_netlbl_cipsov4_add+0x10/0x10
[ 1020.784201][T14580]  netlink_rcv_skb+0x205/0x470
[ 1020.784229][T14580]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1020.784250][T14580]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1020.784291][T14580]  ? down_read+0x1ad/0x2e0
[ 1020.784316][T14580]  genl_rcv+0x28/0x40
[ 1020.784332][T14580]  netlink_unicast+0x75c/0x8e0
[ 1020.784367][T14580]  netlink_sendmsg+0x805/0xb30
[ 1020.784411][T14580]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1020.784446][T14580]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1020.784465][T14580]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1020.784492][T14580]  __sock_sendmsg+0x21c/0x270
[ 1020.784519][T14580]  ____sys_sendmsg+0x505/0x830
[ 1020.784553][T14580]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1020.784591][T14580]  ? import_iovec+0x74/0xa0
[ 1020.784620][T14580]  ___sys_sendmsg+0x21f/0x2a0
[ 1020.784652][T14580]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1020.784718][T14580]  ? __fget_files+0x2a/0x420
[ 1020.784739][T14580]  ? __fget_files+0x3a0/0x420
[ 1020.784772][T14580]  __x64_sys_sendmsg+0x19b/0x260
[ 1020.784804][T14580]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1020.784843][T14580]  ? __pfx_ksys_write+0x10/0x10
[ 1020.784859][T14580]  ? rcu_is_watching+0x15/0xb0
[ 1020.784885][T14580]  ? do_syscall_64+0xbe/0x3b0
[ 1020.784911][T14580]  do_syscall_64+0xfa/0x3b0
[ 1020.784931][T14580]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1020.784950][T14580]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1020.784969][T14580]  ? clear_bhb_loop+0x60/0xb0
[ 1020.784993][T14580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1020.785011][T14580] RIP: 0033:0x7fb81778ebe9
[ 1020.785028][T14580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1020.785045][T14580] RSP: 002b:00007fb8185c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1020.785065][T14580] RAX: ffffffffffffffda RBX: 00007fb8179b5fa0 RCX: 00007fb81778ebe9
[ 1020.785080][T14580] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000004
[ 1020.785093][T14580] RBP: 00007fb8185c9090 R08: 0000000000000000 R09: 0000000000000000
[ 1020.785106][T14580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1020.785117][T14580] R13: 00007fb8179b6038 R14: 00007fb8179b5fa0 R15: 00007fffeacd72e8
[ 1020.785151][T14580]  </TASK>
[ 1021.151263][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2367'.
[ 1021.160441][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2367'.
[ 1021.680257][T14598] fuse: Unknown parameter 'f¤'
[ 1022.243272][ T5933] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1022.401621][ T5959] isku 0003:1E7D:319C.000A: unknown global tag 0xc
[ 1022.437778][ T5959] isku 0003:1E7D:319C.000A: item 0 0 1 12 parsing failed
[ 1022.499163][ T5959] isku 0003:1E7D:319C.000A: parse failed
[ 1022.573246][ T5959] isku 0003:1E7D:319C.000A: probe with driver isku failed with error -22
[ 1022.660142][T14562] _ÐZ`Ô€@: entered promiscuous mode
[ 1022.757749][ T5933] usb 2-1: Using ep0 maxpacket: 8
[ 1022.817852][T14590] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 1022.818765][ T5933] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1022.841827][T14590] macvtap1: entered allmulticast mode
[ 1022.858708][ T5933] usb 2-1: config 1 has an invalid interface descriptor of length 2, skipping
[ 1023.224360][T14590] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1023.325925][ T5933] usb 2-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config
[ 1023.337445][ T5933] usb 2-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1023.361437][T14590] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[ 1023.369851][ T5933] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1023.379432][T14590] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[ 1023.390086][ T5933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1023.400079][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.414835][ T5933] usb 2-1: Product: syz
[ 1023.419868][ T5933] usb 2-1: Manufacturer: syz
[ 1023.424779][ T5933] usb 2-1: SerialNumber: syz
[ 1023.722617][ T5933] cdc_ether 2-1:1.0: skipping garbage
[ 1023.745017][ T5946] usb 4-1: USB disconnect, device number 32
[ 1023.754462][ T5933] usb 2-1: bad CDC descriptors
[ 1023.966418][ T5933] usb 2-1: USB disconnect, device number 28
[ 1024.942280][T14644] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[ 1024.987860][ T5946] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[ 1025.153482][ T5946] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1025.170108][T14653] netlink: 'syz.1.2387': attribute type 4 has an invalid length.
[ 1025.188267][ T5946] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1025.243742][T14653] netlink: 'syz.1.2387': attribute type 4 has an invalid length.
[ 1025.287481][ T5946] usb 5-1: config 1 interface 0 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1025.319166][ T5946] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1025.343823][ T5946] usb 5-1: string descriptor 0 read error: -22
[ 1025.350691][ T5946] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1025.352330][T14656] netlink: 'syz.1.2387': attribute type 3 has an invalid length.
[ 1026.047980][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1026.089947][ T5946] usb 5-1: bad CDC descriptors
[ 1026.328393][ T5946] usb 5-1: USB disconnect, device number 31
[ 1026.943529][T14679] 9pnet_fd: Insufficient options for proto=fd
[ 1027.154887][T14684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2396'.
[ 1027.169213][T14684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2396'.
[ 1027.391399][T14690] overlayfs: missing 'lowerdir'
[ 1029.669830][T14721] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1030.629295][T14734] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1030.703171][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2408'.
[ 1030.864067][T14736] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1030.902606][T14733] IPVS: stopping backup sync thread 14736 ...
[ 1031.182345][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2410'.
[ 1031.192837][ T5887] kernel write not supported for file /1635/clear_refs (pid: 5887 comm: kworker/1:3)
[ 1031.254045][T14737] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1031.263097][T14737] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1031.271849][T14737] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1031.280327][T14737] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1031.319546][T14737] vxlan0: entered promiscuous mode
[ 1031.369844][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2412'.
[ 1031.408114][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2412'.
[ 1031.446659][T14742] dummy0: entered promiscuous mode
[ 1031.522723][T14742] batadv_slave_1: entered promiscuous mode
[ 1031.543947][T14742] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[ 1031.552780][T14742] Cannot create hsr debugfs directory
[ 1031.681851][T14749] netlink: 'syz.3.2414': attribute type 15 has an invalid length.
[ 1031.722153][T14751] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1031.875914][T14751] overlayfs: failed to set xattr on upper
[ 1031.882988][T14751] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1031.962301][T14757] FAULT_INJECTION: forcing a failure.
[ 1031.962301][T14757] name failslab, interval 1, probability 0, space 0, times 0
[ 1031.975236][T14757] CPU: 1 UID: 0 PID: 14757 Comm: syz.2.2416 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1031.975268][T14757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1031.975281][T14757] Call Trace:
[ 1031.975289][T14757]  <TASK>
[ 1031.975297][T14757]  dump_stack_lvl+0x189/0x250
[ 1031.975324][T14757]  ? __pfx____ratelimit+0x10/0x10
[ 1031.975345][T14757]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1031.975367][T14757]  ? __pfx__printk+0x10/0x10
[ 1031.975398][T14757]  ? __pfx___might_resched+0x10/0x10
[ 1031.975419][T14757]  ? fs_reclaim_acquire+0x7d/0x100
[ 1031.975447][T14757]  should_fail_ex+0x414/0x560
[ 1031.975474][T14757]  should_failslab+0xa8/0x100
[ 1031.975497][T14757]  __kmalloc_noprof+0xcb/0x4f0
[ 1031.975514][T14757]  ? kfree+0x4d/0x440
[ 1031.975540][T14757]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1031.975571][T14757]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1031.975608][T14757]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1031.975629][T14757]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1031.975653][T14757]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1031.975678][T14757]  ? __pfx___schedule+0x10/0x10
[ 1031.975709][T14757]  ? __lock_acquire+0xab9/0xd20
[ 1031.975751][T14757]  ? __fget_files+0x2a/0x420
[ 1031.975776][T14757]  ? __fget_files+0x2a/0x420
[ 1031.975796][T14757]  ? __fget_files+0x3a0/0x420
[ 1031.975816][T14757]  ? __fget_files+0x2a/0x420
[ 1031.975842][T14757]  security_file_ioctl+0xcb/0x2d0
[ 1031.975867][T14757]  __se_sys_ioctl+0x47/0x170
[ 1031.975898][T14757]  do_syscall_64+0xfa/0x3b0
[ 1031.975921][T14757]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.975939][T14757]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1031.975958][T14757]  ? clear_bhb_loop+0x60/0xb0
[ 1031.975982][T14757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.976000][T14757] RIP: 0033:0x7fb81778ebe9
[ 1031.976017][T14757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1031.976034][T14757] RSP: 002b:00007fb818587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1031.976055][T14757] RAX: ffffffffffffffda RBX: 00007fb8179b6180 RCX: 00007fb81778ebe9
[ 1031.976069][T14757] RDX: 0000200000000040 RSI: 00000000c040565e RDI: 0000000000000009
[ 1031.976083][T14757] RBP: 00007fb818587090 R08: 0000000000000000 R09: 0000000000000000
[ 1031.976095][T14757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1031.976107][T14757] R13: 00007fb8179b6218 R14: 00007fb8179b6180 R15: 00007fffeacd72e8
[ 1031.976140][T14757]  </TASK>
[ 1032.218060][T14757] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1032.218074][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1032.242097][T14751] overlayfs: ...falling back to uuid=null.
[ 1033.605422][T14767] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1035.408324][T14788] /dev/nullb0: Can't lookup blockdev
[ 1036.048051][ T5887] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1036.268441][T14789] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1036.407759][T14795] veth1_macvtap: left promiscuous mode
[ 1036.413380][T14795] macsec0: entered promiscuous mode
[ 1036.417850][ T5887] usb 4-1: device descriptor read/64, error -71
[ 1036.425253][T14795] macsec0: entered allmulticast mode
[ 1036.479976][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2427'.
[ 1036.519580][T14794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2429'.
[ 1036.526426][T14795] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2428'.
[ 1036.534959][T14785] IPVS: stopping backup sync thread 14798 ...
[ 1036.596419][T14794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2429'.
[ 1037.428661][ T5887] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1037.649477][ T5887] usb 4-1: device descriptor read/64, error -71
[ 1037.658697][T14802] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2431'.
[ 1037.759861][ T5887] usb usb4-port1: attempt power cycle
[ 1038.223492][ T5887] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1038.497866][ T5887] usb 4-1: device not accepting address 35, error -71
[ 1038.896411][T14825] sctp: [Deprecated]: syz.2.2438 (pid 14825) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1038.896411][T14825] Use struct sctp_sack_info instead
[ 1041.702490][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2444'.
[ 1042.034108][T14861] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1042.063608][T14842] IPVS: stopping backup sync thread 14861 ...
[ 1042.086076][T14862] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2450'.
[ 1042.144907][T14862] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2450'.
[ 1043.238044][T14889] netlink: 'syz.5.2457': attribute type 1 has an invalid length.
[ 1043.273699][T14889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1046.258158][T14913] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2463'.
[ 1046.267160][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2463'.
[ 1046.519517][T14917] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1046.542776][T14917] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.550454][T14917] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1046.609541][T12725] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1046.890178][T12725] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1046.908176][T12725] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d
[ 1047.061370][T12725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1047.667418][T12725] usb 2-1: config 0 descriptor??
[ 1047.685298][T12725] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[ 1047.691824][T12725] command write [95] error -22
[ 1047.846571][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2472'.
[ 1047.997905][ T5887] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1048.069133][ T5933] usb 2-1: USB disconnect, device number 29
[ 1048.932211][ T5887] usb 5-1: Using ep0 maxpacket: 32
[ 1048.969734][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1049.063402][ T5887] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1049.136671][ T5887] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1049.146862][ T5887] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1049.163943][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1049.172599][ T5887] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1049.209512][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.282078][ T5887] usb 5-1: config 0 descriptor??
[ 1049.386138][T14957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2475'.
[ 1049.396989][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2475'.
[ 1049.596064][T14959] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2476'.
[ 1049.719562][ T5887] corsair-cpro 0003:1B1C:0C10.000B: item fetching failed at offset 2/5
[ 1049.744077][T14959] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[ 1049.760273][T14959] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[ 1049.764384][ T5887] corsair-cpro 0003:1B1C:0C10.000B: probe with driver corsair-cpro failed with error -22
[ 1049.790870][T14959] overlayfs: conflicting options: userxattr,redirect_dir=on
[ 1050.249722][ T5887] usb 5-1: USB disconnect, device number 32
[ 1050.764456][ T5946] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1050.870434][T14985] /dev/nullb0: Can't lookup blockdev
[ 1052.387635][T14991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2486'.
[ 1052.437772][ T5946] usb 2-1: Using ep0 maxpacket: 16
[ 1052.444657][ T5946] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1052.454199][ T5946] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1052.469129][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1052.481377][ T5946] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1052.488033][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'.
[ 1052.507397][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1052.550712][ T5946] usb 2-1: Product: syz
[ 1052.561464][ T5946] usb 2-1: Manufacturer: syz
[ 1052.667319][ T5946] usb 2-1: SerialNumber: syz
[ 1054.592757][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.654147][T15008] FAULT_INJECTION: forcing a failure.
[ 1054.654147][T15008] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1054.672849][ T5946] usb 2-1: 0:2 : does not exist
[ 1054.675365][T15008] CPU: 0 UID: 0 PID: 15008 Comm: syz.4.2491 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1054.675390][T15008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1054.675403][T15008] Call Trace:
[ 1054.675411][T15008]  <TASK>
[ 1054.675418][T15008]  dump_stack_lvl+0x189/0x250
[ 1054.675445][T15008]  ? __pfx____ratelimit+0x10/0x10
[ 1054.675466][T15008]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1054.675487][T15008]  ? __pfx__printk+0x10/0x10
[ 1054.675511][T15008]  ? __might_fault+0xb0/0x130
[ 1054.675543][T15008]  should_fail_ex+0x414/0x560
[ 1054.675568][T15008]  _copy_from_user+0x2d/0xb0
[ 1054.675594][T15008]  sctp_getsockopt_pr_streamstatus+0xca/0x780
[ 1054.675622][T15008]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1054.675642][T15008]  ? __pfx_sctp_getsockopt_pr_streamstatus+0x10/0x10
[ 1054.675666][T15008]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1054.675702][T15008]  sctp_getsockopt+0x814/0xb60
[ 1054.675726][T15008]  ? __pfx_sock_common_getsockopt+0x10/0x10
[ 1054.675752][T15008]  do_sock_getsockopt+0x36f/0x450
[ 1054.675784][T15008]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1054.675811][T15008]  ? do_syscall_64+0x20/0x3b0
[ 1054.675830][T15008]  ? __fget_files+0x3a0/0x420
[ 1054.675849][T15008]  ? __fget_files+0x2a/0x420
[ 1054.675878][T15008]  __x64_sys_getsockopt+0x1a5/0x250
[ 1054.675905][T15008]  ? do_syscall_64+0x20/0x3b0
[ 1054.675926][T15008]  ? do_syscall_64+0x20/0x3b0
[ 1054.675950][T15008]  do_syscall_64+0xfa/0x3b0
[ 1054.675969][T15008]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1054.675987][T15008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1054.676006][T15008]  ? clear_bhb_loop+0x60/0xb0
[ 1054.676044][T15008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1054.676062][T15008] RIP: 0033:0x7f982fb8ebe9
[ 1054.676079][T15008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1054.676095][T15008] RSP: 002b:00007f98309cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1054.676115][T15008] RAX: ffffffffffffffda RBX: 00007f982fdb5fa0 RCX: 00007f982fb8ebe9
[ 1054.676130][T15008] RDX: 0000000000000074 RSI: 0000000000000084 RDI: 0000000000000003
[ 1054.676140][T15008] RBP: 00007f98309cb090 R08: 00002000000001c0 R09: 0000000000000000
[ 1054.676152][T15008] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[ 1054.676164][T15008] R13: 00007f982fdb6038 R14: 00007f982fdb5fa0 R15: 00007ffc0ce803c8
[ 1054.676196][T15008]  </TASK>
[ 1055.103431][ T5946] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1)
[ 1055.858431][T15020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2495'.
[ 1055.893662][ T5946] usb 2-1: USB disconnect, device number 30
[ 1056.011757][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2495'.
[ 1057.438194][T15040] /dev/nullb0: Can't lookup blockdev
[ 1058.096641][T15039] bridge2: entered promiscuous mode
[ 1058.998494][T15057] netlink: 'syz.4.2506': attribute type 4 has an invalid length.
[ 1059.029301][T15057] netlink: 'syz.4.2506': attribute type 4 has an invalid length.
[ 1059.142351][T15060] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2507'.
[ 1059.486422][T15064] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[ 1059.667962][T15067] netlink: 'syz.1.2510': attribute type 1 has an invalid length.
[ 1059.696751][T15067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1059.966573][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'.
[ 1060.502350][T15080] /dev/nullb0: Can't lookup blockdev
[ 1061.486892][T15091] netlink: 'syz.4.2516': attribute type 4 has an invalid length.
[ 1061.550554][T15091] netlink: 'syz.4.2516': attribute type 4 has an invalid length.
[ 1061.757877][ T5889] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1062.252489][ T5889] usb 3-1: Using ep0 maxpacket: 8
[ 1062.277925][ T5889] usb 3-1: config 127 has an invalid interface number: 195 but max is 1
[ 1062.316847][ T5889] usb 3-1: config 127 has an invalid interface number: 242 but max is 1
[ 1062.392099][ T5889] usb 3-1: config 127 has an invalid descriptor of length 202, skipping remainder of the config
[ 1062.523883][ T5889] usb 3-1: config 127 has no interface number 0
[ 1062.547760][ T5889] usb 3-1: config 127 has no interface number 1
[ 1062.708889][ T5889] usb 3-1: too many endpoints for config 127 interface 242 altsetting 151: 245, using maximum allowed: 30
[ 1062.844488][ T5889] usb 3-1: config 127 interface 242 altsetting 151 has 0 endpoint descriptors, different from the interface descriptor's value: 245
[ 1063.001367][ T5889] usb 3-1: config 127 interface 195 has no altsetting 0
[ 1063.029300][ T5889] usb 3-1: config 127 interface 242 has no altsetting 0
[ 1063.091314][ T5889] usb 3-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=38.d0
[ 1063.120022][ T5889] usb 3-1: New USB device strings: Mfr=49, Product=255, SerialNumber=255
[ 1063.147317][ T5889] usb 3-1: Product: syz
[ 1063.167602][ T5889] usb 3-1: Manufacturer: syz
[ 1063.187856][ T5889] usb 3-1: SerialNumber: syz
[ 1063.505861][ T5889] usb 3-1: USB disconnect, device number 34
[ 1063.958219][T15121] bridge: RTM_NEWNEIGH with invalid ether address
[ 1064.777174][T15127] netlink: 'syz.2.2528': attribute type 11 has an invalid length.
[ 1065.146455][T15129] fuse: Bad value for 'fd'
[ 1065.807865][ T5933] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1065.988896][ T5933] usb 5-1: Using ep0 maxpacket: 32
[ 1066.009621][ T5933] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1066.032974][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.064552][ T5933] usb 5-1: config 0 descriptor??
[ 1066.100035][ T5933] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1066.187931][    T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1066.634521][ T5933] gspca_vc032x: reg_r err -110
[ 1066.643989][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.666243][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.694944][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.725756][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.731823][    T9] usb 3-1: Using ep0 maxpacket: 8
[ 1066.764641][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.775306][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1066.784058][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.797297][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.803319][    T9] usb 3-1: config 4 interface 0 has no altsetting 0
[ 1066.810484][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.819862][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.825674][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.836602][    T9] usb 3-1: string descriptor 0 read error: -22
[ 1066.844607][    T9] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1066.856781][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.888056][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.893801][    T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1066.909378][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.920936][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1066.930100][    T9] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1066.949945][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1067.005781][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1067.011952][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1067.017442][ T5933] gspca_vc032x: I2c Bus Busy Wait 00
[ 1067.027287][ T5933] gspca_vc032x: Unknown sensor...
[ 1067.033742][ T5933] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[ 1067.044351][    T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1067.065817][    T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1067.111664][    T9] usb 3-1: media controller created
[ 1067.173573][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1067.448898][    T9] usb 3-1: USB disconnect, device number 35
[ 1067.835720][    T9] usb 5-1: USB disconnect, device number 33
[ 1067.898417][T15153] fuse: Unknown parameter 'f¤'
[ 1069.296088][T15167] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1070.592619][T15168] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1072.885674][T15178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2541'.
[ 1073.134176][T15183] netlink: 'syz.4.2540': attribute type 4 has an invalid length.
[ 1073.335468][T15189] atomic_op ffff888077100198 conn xmit_atomic 0000000000000000
[ 1073.430276][T15187] ceph: No mds server is up or the cluster is laggy
[ 1073.868310][T15183] netlink: 'syz.4.2540': attribute type 4 has an invalid length.
[ 1075.948661][T15216] fuse: Bad value for 'fd'
[ 1078.181035][T15226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2553'.
[ 1080.263425][T15259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2561'.
[ 1080.272751][T15259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2561'.
[ 1080.306406][T15259] team0: entered promiscuous mode
[ 1080.378312][T15259] team_slave_0: entered promiscuous mode
[ 1080.385227][T15259] team_slave_1: entered promiscuous mode
[ 1080.414371][T15259] team0: left promiscuous mode
[ 1080.508976][T15259] team_slave_0: left promiscuous mode
[ 1080.596683][T15259] team_slave_1: left promiscuous mode
[ 1080.880181][T15264] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1080.900001][T15266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'.
[ 1081.158245][T15272] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1081.168741][T15261] IPVS: stopping backup sync thread 15272 ...
[ 1081.182467][T15274] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2564'.
[ 1081.232357][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2563'.
[ 1081.242958][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2563'.
[ 1081.443184][T15280] atomic_op ffff88803529d998 conn xmit_atomic 0000000000000000
[ 1081.881719][T15289] netlink: 'syz.5.2570': attribute type 11 has an invalid length.
[ 1081.934550][ T5887] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1082.086885][T15290] FAULT_INJECTION: forcing a failure.
[ 1082.086885][T15290] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1082.101798][T15290] CPU: 0 UID: 0 PID: 15290 Comm: syz.4.2569 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1082.101825][T15290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1082.101837][T15290] Call Trace:
[ 1082.101845][T15290]  <TASK>
[ 1082.101853][T15290]  dump_stack_lvl+0x189/0x250
[ 1082.101884][T15290]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1082.101928][T15290]  should_fail_ex+0x414/0x560
[ 1082.101954][T15290]  _copy_from_user+0x2d/0xb0
[ 1082.101982][T15290]  kstrtouint_from_user+0xc4/0x170
[ 1082.102008][T15290]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1082.102050][T15290]  proc_fail_nth_write+0x88/0x240
[ 1082.102074][T15290]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1082.102105][T15290]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1082.102130][T15290]  vfs_write+0x27e/0xa90
[ 1082.102160][T15290]  ? __pfx_vfs_write+0x10/0x10
[ 1082.102180][T15290]  ? __fget_files+0x2a/0x420
[ 1082.102207][T15290]  ? __fget_files+0x3a0/0x420
[ 1082.102226][T15290]  ? __fget_files+0x2a/0x420
[ 1082.102257][T15290]  ksys_write+0x145/0x250
[ 1082.102278][T15290]  ? __pfx_ksys_write+0x10/0x10
[ 1082.102294][T15290]  ? rcu_is_watching+0x15/0xb0
[ 1082.102321][T15290]  ? do_syscall_64+0xbe/0x3b0
[ 1082.102347][T15290]  do_syscall_64+0xfa/0x3b0
[ 1082.102366][T15290]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1082.102386][T15290]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1082.102405][T15290]  ? clear_bhb_loop+0x60/0xb0
[ 1082.102429][T15290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1082.102447][T15290] RIP: 0033:0x7f982fb8d69f
[ 1082.102464][T15290] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1082.102482][T15290] RSP: 002b:00007f9830989030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1082.102502][T15290] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f982fb8d69f
[ 1082.102517][T15290] RDX: 0000000000000001 RSI: 00007f98309890a0 RDI: 0000000000000005
[ 1082.102529][T15290] RBP: 00007f9830989090 R08: 0000000000000000 R09: 0000000000000000
[ 1082.102541][T15290] R10: 000000000000004c R11: 0000000000000293 R12: 0000000000000001
[ 1082.102553][T15290] R13: 00007f982fdb6218 R14: 00007f982fdb6180 R15: 00007ffc0ce803c8
[ 1082.102585][T15290]  </TASK>
[ 1082.321607][ T5887] usb 2-1: Using ep0 maxpacket: 16
[ 1082.495388][T15291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'.
[ 1082.638012][ T5887] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1082.691926][ T5887] usb 2-1: can't read configurations, error -61
[ 1082.868127][ T5887] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1083.247770][ T5887] usb 2-1: Using ep0 maxpacket: 16
[ 1083.260050][ T5887] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1083.280702][ T5887] usb 2-1: can't read configurations, error -61
[ 1083.314215][ T5887] usb usb2-port1: attempt power cycle
[ 1083.958032][ T5887] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1084.064084][ T5887] usb 2-1: Using ep0 maxpacket: 16
[ 1084.137242][ T5887] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1084.211161][ T5887] usb 2-1: can't read configurations, error -61
[ 1084.359025][ T5887] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1084.408486][ T5887] usb 2-1: Using ep0 maxpacket: 16
[ 1084.416231][ T5887] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1084.426359][ T5887] usb 2-1: can't read configurations, error -61
[ 1084.441958][ T5887] usb usb2-port1: unable to enumerate USB device
[ 1085.443814][T15331] atomic_op ffff88805600f198 conn xmit_atomic 0000000000000000
[ 1085.673591][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2581'.
[ 1085.936906][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2581'.
[ 1086.014055][T15336] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1088.098493][T15357] smk_cipso_doi:679 remove rc = -2
[ 1088.103690][T15357] smk_cipso_doi:692 cipso add rc = -17
[ 1088.280081][T15358] veth1_macvtap: left promiscuous mode
[ 1088.285580][T15358] macsec0: entered promiscuous mode
[ 1088.290863][T15358] macsec0: entered allmulticast mode
[ 1088.300238][T15358] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2589'.
[ 1088.309412][T12725] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1088.732324][T15362] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1089.130127][T12725] usb 5-1: Using ep0 maxpacket: 8
[ 1089.202608][T15364] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1089.409803][T12725] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1089.525340][T12725] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1089.637786][T12725] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1089.667844][T12725] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1089.721009][T12725] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1089.814475][T12725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1089.816643][T15371] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1090.339717][T12725] usb 5-1: can't set config #16, error -71
[ 1090.479009][T12725] usb 5-1: USB disconnect, device number 34
[ 1090.588320][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2590'.
[ 1091.480923][T15382] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[ 1091.503651][T15375] IPVS: stopping backup sync thread 15382 ...
[ 1091.735863][T15389] netlink: 'syz.1.2596': attribute type 1 has an invalid length.
[ 1091.766826][T15389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1092.333055][   T30] kauditd_printk_skb: 33 callbacks suppressed
[ 1092.333071][   T30] audit: type=1326 audit(1755239013.461:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15400 comm="syz.2.2600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb81778ebe9 code=0x0
[ 1093.572924][T15413] veth1_macvtap: left promiscuous mode
[ 1093.579029][T15413] macsec0: entered promiscuous mode
[ 1093.584490][T15413] macsec0: entered allmulticast mode
[ 1093.881874][T15413] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2602'.
[ 1094.127807][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2605'.
[ 1094.357736][T15423] veth1_macvtap: left promiscuous mode
[ 1094.364199][T15423] macsec0: entered promiscuous mode
[ 1094.369727][T15423] macsec0: entered allmulticast mode
[ 1094.444662][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2605'.
[ 1094.525497][T15423] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2606'.
[ 1095.354612][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2610'.
[ 1095.493735][T15448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2611'.
[ 1095.576040][T15447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2613'.
[ 1095.634452][T15447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2613'.
[ 1096.029354][T12725] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1097.007878][T12725] usb 2-1: Using ep0 maxpacket: 32
[ 1097.015037][T12725] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[ 1097.027802][T12725] usb 2-1: config 0 has no interface number 0
[ 1097.034788][T12725] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64
[ 1097.072274][T12725] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1097.152971][T12725] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1097.625654][T12725] usb 2-1: config 0 interface 85 has no altsetting 0
[ 1097.768364][T12725] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1097.777723][T12725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.785769][T12725] usb 2-1: Product: syz
[ 1097.792486][T15473] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2619'.
[ 1097.801770][T12725] usb 2-1: Manufacturer: syz
[ 1097.801841][T12725] usb 2-1: SerialNumber: syz
[ 1097.812224][T12725] usb 2-1: config 0 descriptor??
[ 1098.158543][T15472] fuse: Bad value for 'fd'
[ 1098.449568][T12725] appletouch 2-1:0.85: Failed to read mode from device.
[ 1098.728827][T12725] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[ 1098.751053][T12725] usb 2-1: USB disconnect, device number 35
[ 1099.062464][T15483] ------------[ cut here ]------------
[ 1099.068687][T15483] WARNING: CPU: 0 PID: 15483 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310
[ 1099.078622][T15483] Modules linked in:
[ 1099.083075][T15483] CPU: 0 UID: 0 PID: 15483 Comm: syz.2.2622 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1099.093158][T15483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1099.103436][T15483] RIP: 0010:folio_memcg+0x1a8/0x310
[ 1099.108721][T15483] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[ 1099.128918][T15483] RSP: 0018:ffffc9000c4e7250 EFLAGS: 00010287
[ 1099.134995][T15483] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000
[ 1099.143085][T15483] RDX: ffffc9000c931000 RSI: 0000000000000c9e RDI: 0000000000000c9f
[ 1099.151191][T15483] RBP: 0000000000000000 R08: ffffea0000c8ca87 R09: 1ffffd4000191950
[ 1099.159279][T15483] R10: dffffc0000000000 R11: fffff94000191951 R12: ffffea0000c8cab0
[ 1099.167240][T15483] R13: dffffc0000000000 R14: ffff888078f1e400 R15: 0000000000000002
[ 1099.175266][T15483] FS:  00007fb8185c96c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
[ 1099.184587][T15483] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1099.191308][T15483] CR2: 0000000000000000 CR3: 000000004947e000 CR4: 00000000003526f0
[ 1099.199316][T15483] Call Trace:
[ 1099.202618][T15483]  <TASK>
[ 1099.205567][T15483]  workingset_activation+0x5f/0x4a0
[ 1099.210864][T15483]  ? folio_mark_accessed+0x361/0x4a0
[ 1099.216187][T15483]  folio_mark_accessed+0x3b5/0x4a0
[ 1099.221397][T15483]  kvm_release_page_clean+0x9a/0xe0
[ 1099.226627][T15483]  kvm_tdp_page_fault+0x2dd/0x370
[ 1099.232293][T15483]  kvm_mmu_do_page_fault+0x2c5/0x640
[ 1099.237611][T15483]  ? vmx_vcpu_run+0xd8b/0x25d0
[ 1099.242575][T15483]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[ 1099.248541][T15483]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[ 1099.254119][T15483]  ? __pfx_current_save_fsgs+0x10/0x10
[ 1099.260548][T15483]  kvm_mmu_page_fault+0x22f/0xb70
[ 1099.265621][T15483]  ? __pfx_handle_ept_violation+0x10/0x10
[ 1099.271631][T15483]  vmx_handle_exit+0x1090/0x18a0
[ 1099.276608][T15483]  ? vcpu_run+0x361c/0x6f70
[ 1099.281200][T15483]  vcpu_run+0x432e/0x6f70
[ 1099.285571][T15483]  ? emulator_read_write_onepage+0x6ba/0xa10
[ 1099.291673][T15483]  ? vcpu_run+0x361c/0x6f70
[ 1099.296308][T15483]  ? __pfx_vcpu_run+0x10/0x10
[ 1099.301164][T15483]  ? __pfx_x86_emulate_instruction+0x10/0x10
[ 1099.307182][T15483]  ? complete_emulated_mmio+0x18e/0x7a0
[ 1099.312830][T15483]  ? __asan_memcpy+0x40/0x70
[ 1099.317458][T15483]  ? complete_emulated_mmio+0x4d2/0x7a0
[ 1099.323081][T15483]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[ 1099.328782][T15483]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 1099.335079][T15483]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1099.341151][T15483]  ? rcu_is_watching+0x15/0xb0
[ 1099.345936][T15483]  ? trace_contention_end+0x39/0x120
[ 1099.351304][T15483]  ? __mutex_lock+0x330/0xe80
[ 1099.356007][T15483]  ? kasan_quarantine_put+0xdd/0x220
[ 1099.361397][T15483]  ? kvm_vcpu_ioctl+0x22e/0xe90
[ 1099.366284][T15483]  ? __pfx___mutex_lock+0x10/0x10
[ 1099.371401][T15483]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1099.377109][T15483]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1099.382817][T15483]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1099.388913][T15483]  ? kvm_vcpu_ioctl+0xb82/0xe90
[ 1099.393784][T15483]  kvm_vcpu_ioctl+0x95c/0xe90
[ 1099.398480][T15483]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1099.403668][T15483]  ? __lock_acquire+0xab9/0xd20
[ 1099.408571][T15483]  ? __asan_memset+0x22/0x50
[ 1099.413195][T15483]  ? smack_file_ioctl+0x302/0x340
[ 1099.418527][T15483]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1099.423940][T15483]  ? __fget_files+0x2a/0x420
[ 1099.428605][T15483]  ? __fget_files+0x3a0/0x420
[ 1099.433308][T15483]  ? __fget_files+0x2a/0x420
[ 1099.440047][T15483]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1099.446069][T15483]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1099.456429][T15483]  __se_sys_ioctl+0xfc/0x170
[ 1099.461163][T15483]  do_syscall_64+0xfa/0x3b0
[ 1099.466068][T15483]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1099.473001][T15483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1099.482142][T15483]  ? clear_bhb_loop+0x60/0xb0
[ 1099.486941][T15483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1099.493074][T15483] RIP: 0033:0x7fb81778ebe9
[ 1099.497606][T15483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1099.517697][T15483] RSP: 002b:00007fb8185c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1099.526304][T15483] RAX: ffffffffffffffda RBX: 00007fb8179b5fa0 RCX: 00007fb81778ebe9
[ 1099.534530][T15483] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1099.544399][T15483] RBP: 00007fb817811e19 R08: 0000000000000000 R09: 0000000000000000
[ 1099.552581][T15483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1099.560786][T15483] R13: 00007fb8179b6038 R14: 00007fb8179b5fa0 R15: 00007fffeacd72e8
[ 1099.569062][T15483]  </TASK>
[ 1099.572200][T15483] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1099.579490][T15483] CPU: 0 UID: 0 PID: 15483 Comm: syz.2.2622 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1099.589483][T15483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1099.599554][T15483] Call Trace:
[ 1099.602843][T15483]  <TASK>
[ 1099.605782][T15483]  dump_stack_lvl+0x99/0x250
[ 1099.610388][T15483]  ? __asan_memcpy+0x40/0x70
[ 1099.615002][T15483]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1099.620217][T15483]  ? __pfx__printk+0x10/0x10
[ 1099.624847][T15483]  panic+0x2db/0x790
[ 1099.628763][T15483]  ? __pfx_panic+0x10/0x10
[ 1099.633216][T15483]  ? __warn+0x303/0x4b0
[ 1099.637395][T15483]  __warn+0x31b/0x4b0
[ 1099.641387][T15483]  ? folio_memcg+0x1a8/0x310
[ 1099.645998][T15483]  ? folio_memcg+0x1a8/0x310
[ 1099.650603][T15483]  report_bug+0x2be/0x4f0
[ 1099.654947][T15483]  ? folio_memcg+0x1a8/0x310
[ 1099.659556][T15483]  ? folio_memcg+0x1a8/0x310
[ 1099.664164][T15483]  ? folio_memcg+0x1aa/0x310
[ 1099.668767][T15483]  handle_bug+0x84/0x160
[ 1099.673114][T15483]  exc_invalid_op+0x1a/0x50
[ 1099.677633][T15483]  asm_exc_invalid_op+0x1a/0x20
[ 1099.682493][T15483] RIP: 0010:folio_memcg+0x1a8/0x310
[ 1099.687710][T15483] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[ 1099.707332][T15483] RSP: 0018:ffffc9000c4e7250 EFLAGS: 00010287
[ 1099.713417][T15483] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000
[ 1099.721401][T15483] RDX: ffffc9000c931000 RSI: 0000000000000c9e RDI: 0000000000000c9f
[ 1099.729386][T15483] RBP: 0000000000000000 R08: ffffea0000c8ca87 R09: 1ffffd4000191950
[ 1099.737380][T15483] R10: dffffc0000000000 R11: fffff94000191951 R12: ffffea0000c8cab0
[ 1099.745367][T15483] R13: dffffc0000000000 R14: ffff888078f1e400 R15: 0000000000000002
[ 1099.753360][T15483]  ? folio_memcg+0x1a7/0x310
[ 1099.758004][T15483]  workingset_activation+0x5f/0x4a0
[ 1099.763239][T15483]  ? folio_mark_accessed+0x361/0x4a0
[ 1099.768551][T15483]  folio_mark_accessed+0x3b5/0x4a0
[ 1099.773688][T15483]  kvm_release_page_clean+0x9a/0xe0
[ 1099.778908][T15483]  kvm_tdp_page_fault+0x2dd/0x370
[ 1099.783954][T15483]  kvm_mmu_do_page_fault+0x2c5/0x640
[ 1099.789257][T15483]  ? vmx_vcpu_run+0xd8b/0x25d0
[ 1099.794038][T15483]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[ 1099.799879][T15483]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[ 1099.805442][T15483]  ? __pfx_current_save_fsgs+0x10/0x10
[ 1099.810922][T15483]  kvm_mmu_page_fault+0x22f/0xb70
[ 1099.815975][T15483]  ? __pfx_handle_ept_violation+0x10/0x10
[ 1099.821714][T15483]  vmx_handle_exit+0x1090/0x18a0
[ 1099.826668][T15483]  ? vcpu_run+0x361c/0x6f70
[ 1099.831203][T15483]  vcpu_run+0x432e/0x6f70
[ 1099.835560][T15483]  ? emulator_read_write_onepage+0x6ba/0xa10
[ 1099.841575][T15483]  ? vcpu_run+0x361c/0x6f70
[ 1099.846148][T15483]  ? __pfx_vcpu_run+0x10/0x10
[ 1099.850932][T15483]  ? __pfx_x86_emulate_instruction+0x10/0x10
[ 1099.856928][T15483]  ? complete_emulated_mmio+0x18e/0x7a0
[ 1099.862491][T15483]  ? __asan_memcpy+0x40/0x70
[ 1099.867103][T15483]  ? complete_emulated_mmio+0x4d2/0x7a0
[ 1099.872678][T15483]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[ 1099.878259][T15483]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[ 1099.884003][T15483]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 1099.890010][T15483]  ? rcu_is_watching+0x15/0xb0
[ 1099.894793][T15483]  ? trace_contention_end+0x39/0x120
[ 1099.900095][T15483]  ? __mutex_lock+0x330/0xe80
[ 1099.904791][T15483]  ? kasan_quarantine_put+0xdd/0x220
[ 1099.910104][T15483]  ? kvm_vcpu_ioctl+0x22e/0xe90
[ 1099.914974][T15483]  ? __pfx___mutex_lock+0x10/0x10
[ 1099.920013][T15483]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1099.925665][T15483]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1099.931314][T15483]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1099.937308][T15483]  ? kvm_vcpu_ioctl+0xb82/0xe90
[ 1099.942190][T15483]  kvm_vcpu_ioctl+0x95c/0xe90
[ 1099.946896][T15483]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1099.952108][T15483]  ? __lock_acquire+0xab9/0xd20
[ 1099.956973][T15483]  ? __asan_memset+0x22/0x50
[ 1099.961587][T15483]  ? smack_file_ioctl+0x302/0x340
[ 1099.966625][T15483]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1099.972022][T15483]  ? __fget_files+0x2a/0x420
[ 1099.976627][T15483]  ? __fget_files+0x3a0/0x420
[ 1099.981318][T15483]  ? __fget_files+0x2a/0x420
[ 1099.985928][T15483]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1099.990884][T15483]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 1099.996098][T15483]  __se_sys_ioctl+0xfc/0x170
[ 1100.000712][T15483]  do_syscall_64+0xfa/0x3b0
[ 1100.005228][T15483]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1100.010439][T15483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1100.016516][T15483]  ? clear_bhb_loop+0x60/0xb0
[ 1100.021213][T15483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1100.027122][T15483] RIP: 0033:0x7fb81778ebe9
[ 1100.031556][T15483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1100.051190][T15483] RSP: 002b:00007fb8185c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1100.059626][T15483] RAX: ffffffffffffffda RBX: 00007fb8179b5fa0 RCX: 00007fb81778ebe9
[ 1100.067608][T15483] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1100.075588][T15483] RBP: 00007fb817811e19 R08: 0000000000000000 R09: 0000000000000000
[ 1100.083568][T15483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1100.091550][T15483] R13: 00007fb8179b6038 R14: 00007fb8179b5fa0 R15: 00007fffeacd72e8
[ 1100.099549][T15483]  </TASK>
[ 1100.102830][T15483] Kernel Offset: disabled
[ 1100.107146][T15483] Rebooting in 86400 seconds..