last executing test programs:

10m41.197358394s ago: executing program 32 (id=216):
r0 = socket$inet6(0xa, 0x3, 0x3)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r3}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
unshare(0x400)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
r6 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x349}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x7ff, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1003, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x9, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0xc03e)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8)

10m15.086560709s ago: executing program 33 (id=255):
unshare(0x60000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x2, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x4c060d00)
close(r2)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x509301)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0xa, 0x0, 0x0, 0x9, '\x00', 0x8}, 0x0, [0x4, 0xfffffffffffffffe, 0x100, 0x3, 0xffffffeffffffffe, 0x0, 0x6, 0x3, 0x0, 0x7, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3ff, 0x0, 0x80000001, 0x743, 0x4000000000, 0x8000000006, 0x0, 0x40, 0x0, 0x0, 0x80100200000, 0xb, 0x8000000000000000, 0x0, 0x4, 0x0, 0x9, 0x0, 0x7, 0x1000, 0x9, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffe000000002, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x1a8e, 0x200, 0xfffffffffffffffe, 0x2, 0xbb4e, 0x5, 0x0, 0x1, 0x0, 0x800000004, 0x0, 0x8, 0x100000, 0x7ff, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0xfffffffffffffffc, 0x80000000000000, 0x8, 0xfffffffffffffffe, 0x200000003, 0x0, 0xfffffffffffffffe, 0x3, 0xc0002002, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffefff9, 0x0, 0x200000003, 0x0, 0x9, 0x80000000, 0x80000000000001, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x3, 0x2, 0xffffffffffeffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "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"})
r6 = fsopen(&(0x7f0000000740)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000100)='0..:\x00', 0x0)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)

9m31.011025649s ago: executing program 2 (id=349):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
openat$pfkey(0xffffff9c, 0x0, 0x404000, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f00000000c0)=""/32, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r3 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr={{0x18, 0x29, 0x39, {0x99, 0x0, 0x1, 0x2}}}], 0x30}}], 0x1, 0x40000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010100000000000000000a0000021800018014000180fb0001006401010006000000000000000c00"], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000)

9m28.492354378s ago: executing program 2 (id=346):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000708000100e0000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080007"], 0x4a)

9m27.725111069s ago: executing program 5 (id=350):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000004000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30"], 0xf0}}, 0x0)

9m27.456431201s ago: executing program 5 (id=351):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80}, {@loopback, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
syz_usb_connect$midi(0x2, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040ca150101400001020311090226000101064009090400000101"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="0ebd5ea3bea2", 'bridge0\x00'}}, 0x1e)
syz_usb_connect(0x5, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040490d0070010001020301090227000101008032"], 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r5, 0x6db34000)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x6000)
ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000080))
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10010, r8, 0x7c1f1000)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100))

9m25.671965694s ago: executing program 6 (id=354):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000002000000000000200000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000080ffffff000000000000ffffffff000000000000000000000000fc020000000000000000000000000001fb0200000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

9m25.20749847s ago: executing program 6 (id=355):
socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x156}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x3, 0x252}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x3, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000201000088bed2868a1610e8f515ab"], 0xfdef)

9m24.896182956s ago: executing program 5 (id=356):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7f}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e64000000080009000000000008"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)

9m24.683967095s ago: executing program 5 (id=357):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
openat$pfkey(0xffffff9c, 0x0, 0x404000, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f00000000c0)=""/32, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r3 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr={{0x18, 0x29, 0x39, {0x99, 0x0, 0x1, 0x2}}}], 0x30}}], 0x1, 0x40000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010100000000000000000a0000021800018014000180fb0001006401010006000000000000000c00"], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000)

9m20.618393589s ago: executing program 2 (id=360):
r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r0, &(0x7f0000000740), 0x0, 0x6, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0x38, 0x67, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [{0x20, 'cpuacct.usage_percpu_sys\x00'}, {0x20, 'H[W]-:3%%'}, {0x20, '/dev/snd/controlC#\x00'}, {0x20, 'decodes'}]}, 0x4b)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc0b45545, &(0x7f0000000040)=0x1000)

9m20.618007129s ago: executing program 5 (id=361):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c000030390001a000030a000a0000000100050007"], 0x6a)

9m19.709274252s ago: executing program 2 (id=362):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0, 0xfffffffffffffccc}, &(0x7f00000011c0), 0x0, 0x28b1d35c834f09d7, 0xffffffff00000005}}], 0x48, 0x20040005}, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
open(&(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x400, 0x80)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000000c0)={0x40000039})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0xc0, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8c, 0x2, [@TCA_MATCHALL_ACT={0x88, 0x2, [@m_gact={0x84, 0x1, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x20000000, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf, 0xb, 0x5, 0x8, 0x20}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1deb, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x79, 0x4, 0x4, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

9m18.230435354s ago: executing program 6 (id=366):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502001d0000100905"], 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x123200, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040))

9m16.234299691s ago: executing program 6 (id=367):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7f}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x0)

9m15.93112422s ago: executing program 6 (id=368):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c0003801400010077673200000000fffffff500000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)

9m15.930549851s ago: executing program 5 (id=369):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=<r3=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c80, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810)
r4 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x40008001, @empty, 0xffffff5d}, 0x15)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x80}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r5, &(0x7f00000000c0), 0x2c8, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48008)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000640)={0x28, 0x0, 0x209, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x938}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x4)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x300, 0x78}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4)
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc02c5625, &(0x7f0000002940)={0x1c0f0f000, 0x6, "9a0f0134c966e134d14000aaaa7da80f8e4fa888dece6ffdb507a30100000028", 0xffffdfffff7fa4c5, 0x9, 0xf36, 0x46, 0x10001, 0x5, 0x0, 0x8000008, [0x5, 0x0, 0x0, 0x2dc]})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r9, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004)
r10 = openat$cgroup_int(r6, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r10, r10, 0x0, 0x100000000)

9m15.92736021s ago: executing program 2 (id=370):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

9m15.536603674s ago: executing program 6 (id=371):
r0 = socket$inet6(0xa, 0x3, 0x3)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r3}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
unshare(0x400)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
r6 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x349}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x7ff, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1003, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x9, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0xc03e)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

9m15.385954222s ago: executing program 2 (id=372):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
openat$pfkey(0xffffff9c, 0x0, 0x404000, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f00000000c0)=""/32, &(0x7f0000000080)=0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r3 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr={{0x18, 0x29, 0x39, {0x99, 0x0, 0x1, 0x2}}}], 0x30}}], 0x1, 0x40000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010100000000000000000a0000021800018014000180fb0001006401010006000000000000000c00"], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000)

9m10.066520677s ago: executing program 34 (id=348):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048080}, 0x24000080)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x5, 0x87, 0x7ffc0221}, {0xa, 0x9, 0x89, 0x8}]})
rseq(0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000000002)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0xfffffffa}, 0x0})
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000002c0))
keyctl$clear(0x7, 0xfffffffffffffffb)
r2 = socket$inet6(0xa, 0x3, 0x88)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0x0, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000400)={0x1, 0x0, 0x7})
syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c)
syz_open_procfs$pagemap(0x0, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, 0xffffffffffffffff, &(0x7f0000000180))

9m0.620395397s ago: executing program 35 (id=369):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6(0xa, 0x6, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x40b02)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=<r3=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c80, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810)
r4 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x40008001, @empty, 0xffffff5d}, 0x15)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x80}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r5, &(0x7f00000000c0), 0x2c8, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48008)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000640)={0x28, 0x0, 0x209, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x938}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x4)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x300, 0x78}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4)
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc02c5625, &(0x7f0000002940)={0x1c0f0f000, 0x6, "9a0f0134c966e134d14000aaaa7da80f8e4fa888dece6ffdb507a30100000028", 0xffffdfffff7fa4c5, 0x9, 0xf36, 0x46, 0x10001, 0x5, 0x0, 0x8000008, [0x5, 0x0, 0x0, 0x2dc]})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r9, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004)
r10 = openat$cgroup_int(r6, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r10, r10, 0x0, 0x100000000)

8m52.777130735s ago: executing program 36 (id=371):
r0 = socket$inet6(0xa, 0x3, 0x3)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000180)='./file1\x00', 0x0, 0x0, r3}, 0x18)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
unshare(0x400)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
r6 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x349}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r6, 0x17, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x7ff, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1003, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x9, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0xc03e)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

8m51.453034058s ago: executing program 37 (id=372):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
openat$pfkey(0xffffff9c, 0x0, 0x404000, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f00000000c0)=""/32, &(0x7f0000000080)=0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r3 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x6)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr={{0x18, 0x29, 0x39, {0x99, 0x0, 0x1, 0x2}}}], 0x30}}], 0x1, 0x40000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010100000000000000000a0000021800018014000180fb0001006401010006000000000000000c00"], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000)

7m9.613113389s ago: executing program 8 (id=792):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200001800100905"], 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x123200, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040))

7m7.296281906s ago: executing program 8 (id=805):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x474, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x448, 0x2, [@TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x1, 0x8, 0x1, 0x4, {0x10, 0x1, 0x2020, 0xb, 0x99, 0x2}, {0xcd, 0x2, 0xeb18, 0xa, 0xeba9}, 0xe5, 0x4, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xffffff88, 0xdb, 0x6, 0x5, 0x0, 0xb86a, 0x1, 0x9, 0x0, 0x7fff, 0x14a, 0x10000, 0x0, 0x4, 0x2, 0x0, 0x0, 0x7, 0x4, 0x6, 0x2, 0x0, 0x7, 0x3, 0xfffffffa, 0x1, 0x5, 0xe9, 0x856, 0x9445, 0xfffffffd, 0x9, 0x5, 0x2, 0x0, 0x2, 0x9, 0x0, 0xfff, 0x1, 0x0, 0x7, 0x9, 0xfffffffb, 0x1, 0xa8, 0x7, 0x4, 0x6, 0x1, 0x7fff, 0x4f352225, 0xe25, 0x7, 0x3, 0xd58, 0xff, 0x8, 0x0, 0x9, 0x8, 0xb, 0x0, 0x7fff, 0xa, 0x2, 0x3, 0x5, 0xf, 0x1, 0x4, 0x0, 0x1, 0xa09c, 0x8, 0x483, 0x5, 0x79, 0x7, 0x649, 0xcbc3, 0x7, 0x47, 0x7fff, 0xfffffffc, 0xc2, 0x7ff, 0x8, 0xff, 0x1, 0x101, 0xadf, 0xfffff0b9, 0x5, 0x7, 0xe9ff, 0xf, 0x0, 0x5, 0xa5c, 0x3, 0x1, 0x0, 0x7, 0x100, 0xf13, 0x2, 0x3, 0x8001, 0x4, 0xb, 0x1, 0x8, 0x9, 0x57, 0x6, 0x5, 0x7, 0x9, 0x3, 0x5, 0x3, 0x5, 0xffffff36, 0x80000001, 0x9, 0x8, 0xb1e5, 0x68, 0x0, 0x2, 0x4, 0x4, 0x401, 0x80, 0x4, 0xfffffffc, 0x1000, 0x7fff, 0xffffffff, 0x1ff, 0x6, 0x7bc, 0x7, 0x0, 0xff, 0xd, 0x8, 0x5, 0x8001, 0x1ff, 0x8, 0x8, 0x9, 0x4, 0x72, 0x1, 0x40, 0x8, 0x3, 0x800, 0xd31, 0x6, 0x3, 0x2, 0x8, 0x4, 0xd, 0x4, 0x8c, 0x8a25, 0x8, 0x3, 0x81, 0x1, 0x2, 0x200, 0x4, 0x1, 0x8, 0x8000, 0x4, 0xfffffffd, 0x7, 0x3193c001, 0x8001, 0x8, 0x4, 0x1, 0x7ff, 0xfffffff7, 0xe, 0x4, 0x9, 0x0, 0x6, 0x3788003e, 0x0, 0x7d, 0x1, 0x40, 0xc, 0x8, 0x101, 0x80, 0x40, 0x0, 0x7, 0xfffffff6, 0x2, 0xffff, 0x80, 0xa, 0x200, 0x4, 0x6, 0x2, 0xaa, 0x9, 0x7fffffff, 0x689e, 0x0, 0x3, 0x8e9, 0x97, 0x8, 0x7, 0x800, 0x80000001, 0x4, 0x7fffffff, 0xffff7fff, 0x3e3, 0x10000, 0x1ff, 0x0, 0x8, 0x9, 0x3ff, 0x9c, 0x8, 0xe, 0x6, 0x316b, 0x5, 0x9, 0x10, 0x8, 0xffff103c, 0x4, 0xfffffded, 0xfffffffe, 0x4, 0x5]}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000040000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)

7m7.052643565s ago: executing program 8 (id=807):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000140000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)

7m6.8363149s ago: executing program 8 (id=811):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioprio_set$pid(0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x6e, 0x2, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
r1 = gettid()
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0xd, 0x800000000004, @thr={0x0, 0x0}}, &(0x7f0000bbdffc))
fcntl$lock(r0, 0x24, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000200)={0x18, 0x1, 0x213d6a4c09b4bef8, 0x0, r3, 0x963})
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',r'])
socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000240))
mprotect(&(0x7f00003d2000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000014000780080012400006000008000840000000370d000300686173683a6e657400000000050005000200000005000400000000000900020073797a31000000000500010007"], 0x5c}}, 0x8800)
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xd004, 0x2, 0xfffffb, 0x29c}, &(0x7f0000000040), &(0x7f0000000140), 0x0)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=<r7=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_REINIT(r7, 0x7c81, 0x0)
lseek(0xffffffffffffffff, 0x81, 0x8100)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, r1})
r8 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff)

7m6.250505418s ago: executing program 8 (id=816):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7f}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)

7m5.674918944s ago: executing program 8 (id=819):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000ffff27bd7000fbdbdd2500000000", @ANYRES32=0x0, @ANYBLOB="03fc0300145f02002c0012800e0001006970366772657461700000001800028014000700feffffffffffffffffff5c9151e7fffe08000100"], 0x54}, 0x1, 0x0, 0x0, 0x14044080}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)

7m4.795527498s ago: executing program 38 (id=819):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000ffff27bd7000fbdbdd2500000000", @ANYRES32=0x0, @ANYBLOB="03fc0300145f02002c0012800e0001006970366772657461700000001800028014000700feffffffffffffffffff5c9151e7fffe08000100"], 0x54}, 0x1, 0x0, 0x0, 0x14044080}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)

6m42.745621896s ago: executing program 7 (id=918):
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) (async)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000140)=0x7ff, 0x4) (async)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={<r2=>0x0, 0x3}, &(0x7f00000001c0)=0x8)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x9, 0x3, 0x1, 0x9, 0x4, 0x3, 0x108, 0x1000, r2}, &(0x7f0000000280)=0x20) (async)
connect$pppl2tp(r4, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @empty}, 0x3, 0x4, 0x1, 0x2}}, 0x26)
read$FUSE(r4, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), r4) (async)
ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000002380)) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000023c0), 0xe00, 0x0)
r6 = accept4(r3, &(0x7f0000002400)=@nfc_llcp, &(0x7f0000002480)=0x80, 0x800)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000024c0)={{0x1, 0x1, 0x18, <r7=>r4, {0x2}}, './file0\x00'}) (async)
sendmsg$inet6(r6, &(0x7f0000002c80)={&(0x7f0000002500)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1b4d}, 0x1c, &(0x7f0000002a40)=[{&(0x7f0000002540)="822e84afc9452821bd5e645a815b35a742d91da94e4b8534abab5df246aca879d4968c674580defc22572219c9b6486c437d2cac69da3b637cbb392ed38514be8f8eff7db1d2ced2d83165c4319c106b910a81af6ea2d49d422b39a109f224a013583097a03e625f9e13a2ae64bf9335335e", 0x72}, {&(0x7f00000025c0)="69a449493f2f9c3d18305cd52042e1539e10edf08d6f74984ce952d66b727a0bc895aba2e9ed1b0534d67e334ae5ae38c30baeb44ddbed53b6da37b1ddfba4b2a07ed41bbdbf211841b9c1e5104d6f6e8da47a0596c9f72c0c18323ff63b14fe422f8609826f0ed15a9387c0c7ab4d1673fb77b53542405b461df2ac7a6c3bfc525de817989557e8af98929214a9e2b05647b31eeed40bd0c8d37bbdc6ed576c4949207e0e0d1ff9bd10e760acc0be5ed41a9c65bb9379cfe86161a6c91c3bb81b9eb245922aa992027bedb6bea7dd5b5d22bd671a21c50b88aff398cb9d5f", 0xdf}, {&(0x7f00000026c0)="712e5f34591b9e2b9650585b4c8afe44b394dd58d4254bdd1e33f6d95c859c04d234dbfedf41987db1a8ce9be790ad6767da94b6b86f4770a26779144be047e0f3a5f130d716bf2adc83cc1ae236738b7f3d903ec5887e414c74c87713b3a17f88c1a68232dd40c1b0223929f5a73f5ecbacf5c7a02861e4eaedc589809eb97e385fd4c063fb122c3f26b128bc20eced2d257fb30b94d6b16b8e975e33601bbe5625ea116f8baecf458a3a18f2321cc275be9de5648f01177613eee63970178c9b389c9f30fd3a0521162e5febe59d2a37a230d502bb9dc439fe3e29e0a54283cd37475d6ac5905cbc4b83113d", 0xed}, {&(0x7f00000027c0)="1721d7ffe83fdb1f167a", 0xa}, {&(0x7f0000002800)="1629e9454779fbc27807fa31221c7a67a4d35babd092b9b5b551456e706d01a9971033f05ef2d09f81cec4b1b4bf5e1edc6398272a56f4c8968a05c02fd47b05c1cc10e32214c38a3e8305003167f7c51daf19b9240bb56174262abce6057c89840b11cdaa763147b7ac1e55a5a460185115011e9c6455e6f17076f50e3d85095e4b88a70bdb9205b858beb90a30a6dc1eafa66fc5cf4859afe46502aa992b3385b6979016139bb93f6b55e4b5734697f76cc973a300d8", 0xb7}, {&(0x7f00000028c0)="e6812286dfcb93b0f0de337dbffda548c2fd86615d54c7149191310194cc3d156d451851425e2d142333b9123ea65d4e248500a98c3f54a0b939027a87b9b1e3820937b7be0d8f5e2422b0b62fe898d86eb12b24afe50d5edd08341b84cb8a4c82b7f80f73", 0x65}, {&(0x7f0000002940)="f4dabaddb1b272c538a51a302b5f7eb2ad98acf26b9f87e32f6b7ad0fb16397b16deb9540086cb1277bb7fd7b1d763e48a78fe43d9cf12ed779dcccec6a3ff0b2047185865d000a0bd7b1441510687c9bea5ab024b579394cb514c7e00e5b456e835f99a44977e6f221fc3aa2416b6c5b2633cc194014c29fb25331f7b8723ffa24c60f6a65e18dac0e8cfc57b62a61135d42054d8233781b8c9ac2d87f93876f58b192633b5a6e71608ba4c7b860af27b9cd3fa1ee75f8a32b0c310e1fc0e454df065f2658fde695593f6400d634a1b4249b36d1dd37d0eb9b21d5fdcec5b13f7df2314e9126880280d434faaf1", 0xee}], 0x7, &(0x7f0000002ac0)=[@rthdrdstopts={{0x70, 0x29, 0x37, {0x32, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x5d}, @calipso={0x7, 0x40, {0x2, 0xe, 0xa3, 0xa, [0x3, 0x2, 0x81, 0x3, 0xd, 0x3, 0x80000000]}}, @hao={0xc9, 0x10, @mcast2}]}}}, @dstopts={{0x90, 0x29, 0x37, {0x73, 0xe, '\x00', [@hao={0xc9, 0x10, @local}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x9, 0x34da, [0x3, 0x9, 0xfffffffffffffff5, 0x4, 0x0, 0xfff, 0x1]}}, @calipso={0x7, 0x18, {0x2, 0x4, 0x7, 0x5, [0x2000000, 0xca]}}]}}}, @rthdrdstopts={{0xc0, 0x29, 0x37, {0x1d, 0x14, '\x00', [@ra={0x5, 0x2, 0xa}, @calipso={0x7, 0x20, {0x1, 0x6, 0x98, 0x2, [0xa, 0x400, 0x7]}}, @calipso={0x7, 0x48, {0x1, 0x10, 0x3, 0xf65e, [0x3, 0x7fffffffffffffff, 0x7fff, 0x7, 0xd, 0x6, 0x6, 0xd]}}, @enc_lim={0x4, 0x1, 0x19}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x401}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x4}]}}}], 0x1c0}, 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000002cc0))
ioctl$mixer_OSS_ALSAEMULVER(r7, 0x80044df9, &(0x7f0000002d00))
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002d80), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000002e40)={&(0x7f0000002d40), 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x24, r8, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x24}}, 0x0) (async)
syz_ublk_setup_io_uring(0x4894, &(0x7f0000002e80)={0x0, 0x850b, 0x20, 0x3, 0x19a}, &(0x7f0000002f00)=<r9=>0x0, &(0x7f0000002f40), &(0x7f0000002f80))
r10 = mmap$IORING_OFF_CQ_RING(0x0, 0x0, 0x1000000, 0x10, r4, 0x8000000) (async, rerun: 64)
syz_ublk_setup_queues(r7, 0x0, &(0x7f0000002fc0)={0x0, 0xab11, 0x80000, 0x2, 0xfc, 0x0, r7}, &(0x7f0000003040)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1cb6, 0x40, 0x1, 0x3ce, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ee4, 0x20, 0x0, 0x351, 0x0, r7}, 0xffffffffffffffff, 0x0, 0x0, <r11=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70c6, 0x0, 0x3, 0x3ba, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5707, 0x0, 0x0, 0x375, 0x0, r4}}], 0x4, &(0x7f00000042c0)={0x2e, 0x46, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xe}, 0x0, 0x0, '\x00', {0x3, 0x759, 0x0, &(0x7f00000032c0)=@buf_max_buf="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"}}, &(0x7f0000004340)) (async, rerun: 64)
syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f00000043c0)={0x2e, 0x28, 0x0, <r12=>r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000004380)=@any_dev={0x4, 0x63b, 0x0, 0x0, 0x1000, 0x6d6d, r5, 0x0, 0x1df}}}, &(0x7f0000004440))
syz_ublk_add_dev(r7, r9, r10, r11, &(0x7f00000044c0)={0x2e, 0x0, 0x0, r12, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000004480)=@new_dev={0x2, 0x259, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x100}}}, &(0x7f0000004540)) (async)
r13 = ioctl$USERFAULTFD_IOC_NEW(r4, 0xaa00)
ioctl$UFFDIO_REGISTER(r13, 0xc020aa00, &(0x7f0000004580)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x6})
poll(&(0x7f00000045c0)=[{r13, 0x410}], 0x1, 0x5)
bind(r4, &(0x7f0000004600)=@vsock={0x28, 0x0, 0x0, @host}, 0x80) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f00000047c0)={&(0x7f0000004680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004780)={&(0x7f0000004700)={0x58, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x2c000801)

6m42.563781489s ago: executing program 7 (id=921):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, 0xc82, 0x3)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0xfe)
writev(r2, &(0x7f0000001940)=[{&(0x7f0000000940)='V', 0x1}], 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x558, 0x0, 0x0, 0x148, 0x1d8, 0x148, 0x4c0, 0x240, 0x240, 0x4c0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010102, 'nr0\x00', {0x80000000}}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x2c0, 0x2e8, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@dev={0xac, 0x14, 0x14, 0x27}, [0xffffffff, 0xff000000, 0x0, 0xff000000], @ipv4=@local, [0xffffffff, 0x0, 0x0, 0xff000000], 0x4d4, 0x3502, 0xff, 0x0, 0x1}, {@ipv6=@private2, [0xffffffff, 0xffffffff, 0x80ffffff, 0xff], @ipv6=@empty, [0x0, 0x0, 0xffffff00, 0xff000000], 0x4d5, 0x3507, 0x2, 0x0, 0x6}, {@ipv6=@remote, [0x0, 0xffffffff, 0xffffffff], @ipv6=@mcast2, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d3, 0x3503, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@loopback, [0xff, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], 0x4d3, 0x0, 0x0, 0x1, 0x9, 0x10}], 0x4, 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x8, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8)

6m40.931953715s ago: executing program 7 (id=931):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000002000000000000200000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa00000000ffffff8000000000ffffffff000000000000000000000000fc020000000000000000000000000001fb0200000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

6m40.684878364s ago: executing program 7 (id=932):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/fuse\x00'}, {0x20, '{'}, {0x20, '(,'}], 0xa, "04d925a7da28489aab88ab176ae273c09ecd4113782b40c6812a8239e286658ff7fa470afe37702bf5a903369fa516060f9b77cc2d8eb8284ce1a523acb3cdab76747a598d8b19"}, 0x62)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001200050104000000fbdbdf2505001900ff00000028001a0000000000000000000000000000fc00000000000000000000000000010a000509000000e269"], 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040840)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
socket$inet_tcp(0x2, 0x1, 0x0)

6m40.484419683s ago: executing program 7 (id=933):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be)
pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe)
pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00)
pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c)
pwrite64(r0, &(0x7f0000000100)='12345678-1', 0xa, 0xc30)
pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23)
pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b)
pwrite64(r0, &(0x7f0000000100)='\x00', 0x1, 0x1e8133)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00@\x00'})

6m40.230520106s ago: executing program 7 (id=937):
r0 = socket$kcm(0x29, 0x2, 0x0)
getsockopt(r0, 0x5, 0x9, &(0x7f0000000000), &(0x7f0000000040))
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000080)=[@out_dx={0x6a, 0x28, {0xd1d8, 0x2}}, @rdmsr={0x66, 0x18, {0x8be}}, @in_dx={0x69, 0x20, {0x8022, 0x4}}, @nested_load_syzos={0x136, 0xe0, {0x3, 0xb, [@in_dx={0x69, 0x20, {0x9d46, 0x6}}, @wr_drn={0x68, 0x20, {0x7, 0x4}}, @nested_vmresume={0x130, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x836}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host_nat=0x6c02, 0x8000000000000000, 0x5, 0x200000000000}}]}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x86, 0x2, 0x5233e898, 0x1}}, @nested_load_code={0x12e, 0x67, {0x3, "d9eb66b822000f00d066baf80cb82906708eef66bafc0cecf0420fab77080f01cf66450fa2c4a17b2c3a420f8600800000b805000000b957f000000f01c1b9b9030000b800000000ba000001000f30"}}, @code={0xa, 0x81, {"b967090000b800000080ba000000000f3066b8f9000f00d0f3410f588225978d53362e3e66410f6d6348660f2098c4229107e0b805000000b92cb000000f01d9b9ff0b0000b80a000000ba000000000f3066baf80cb80d87a484ef66bafc0cb000eeb9800000c00f3235002000000f30"}}, @nested_amd_invlpga={0x17d, 0x20, {0x9000, 0x6ee3}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x50, {"460f01c23e65440f01f8450f01d9660f747908c4827979f9c4e109f630f243abc481e558448300c7442400a0000000c744240200000080ff2c24460fae5a00"}}, @rdmsr={0x66, 0x18, {0x986}}, @nested_amd_invlpga={0x17d, 0x20, {0xf000, 0x71e4}}, @rdmsr={0x66, 0x18, {0xaf3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xc0, 0x0, 0x3, 0x7}}, @in_dx={0x69, 0x20, {0x93a8, 0x4}}, @enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x3, 0x3}}, @nested_load_code={0x12e, 0x64, {0x3, "b9a20a00000f3266b81f008ec065660f3882a78f0000003e430f01c9c74424005f000000c744240200004001ff1c24260f01f72e470abb002000000fb615b900000066440f72f4f9650f01cb"}}, @nested_load_code={0x12e, 0x64, {0x3, "6566430f01f5c744240022000000c744240266000000ff2c242ed186860000006426648edc66ba6100b800980000ef660f38822cedf7ffffffc4c2090d7500260f01ca8740008fe910027100"}}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x0, 0x6}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee8000, 0xf137}}, @wr_drn={0x68, 0x20, {0x1, 0x3}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0x3905}}, @nested_load_code={0x12e, 0x57, {0x0, "430f23058f6868a275000b470f73d00266b87a000f00d065815a0678000000b805000000b90a0000000f01c1b92c0200000f32f48f284085e70066ba4000ed"}}], 0x5d7})
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000006c0)={0x4, 0x0, [{0x391, 0x0, 0x9}, {0x866, 0x0, 0x1}, {0xb58, 0x0, 0x3}, {0x9ae, 0x0, 0xd}]}) (async)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000006c0)={0x4, 0x0, [{0x391, 0x0, 0x9}, {0x866, 0x0, 0x1}, {0xb58, 0x0, 0x3}, {0x9ae, 0x0, 0xd}]})
r2 = fsopen(&(0x7f0000000740)='tmpfs\x00', 0x0)
r3 = fsmount(r2, 0x0, 0x88)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3)
sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f00000008c0)={0xdf, [[0xc, 0x76, 0x80000000, 0x1, 0x9, 0x401, 0x5, 0x9], [0x8000, 0x40, 0x8, 0x1a000000, 0x3, 0x3, 0x0, 0x9], [0xff, 0x1, 0x2, 0xffffffff, 0xb, 0x81, 0x7ff, 0x80000001]], '\x00', [{0x1e61, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5f, 0x7ff, 0x1}, {0x7, 0x400, 0x0, 0x1, 0x1}, {0x7fff, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xa, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x54, 0x1, 0x0, 0x0, 0x1}, {0xfffff4de, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x4, 0x0, 0x1, 0x0, 0x1}, {0xd, 0x6, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x8})
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000bc0)={0x9, &(0x7f0000000b40)=[{0x0, 0x5, 0x80, 0x5}, {0x6, 0x8, 0x0, 0xfffffff7}, {0xfff, 0x57, 0x7, 0x7}, {0x0, 0x5, 0x9, 0x80000001}, {0x1, 0x2, 0xb, 0x80000001}, {0xfffc, 0x4, 0x5, 0xfff}, {0x3, 0xde, 0x3, 0xb}, {0x9, 0x1, 0xf, 0x6}, {0x63b, 0x3, 0x3, 0x6}]}, 0x10)
getresgid(&(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r6=>0x0)
fstat(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x4000)
mount$fuse(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x3000010, &(0x7f0000000e80)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@allow_other}], [{@fowner_lt={'fowner<', r7}}, {@uid_eq={'uid', 0x3d, r8}}, {@permit_directio}]}}) (async)
mount$fuse(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x3000010, &(0x7f0000000e80)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@allow_other}], [{@fowner_lt={'fowner<', r7}}, {@uid_eq={'uid', 0x3d, r8}}, {@permit_directio}]}})
ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000f80)) (async)
ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000f80))
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000001000)={0x42, 0x4, 0x3}, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000001040)={0x0, 0x401, 0xffffffffffffff81})
sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1fbf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc23}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040805) (async)
sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1fbf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc23}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040805)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000001180)={r3, 0x0, 0x1000, 0x100000000})
openat$rtc(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) (async)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000001200)=0x10000000)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000001240))
sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x81800}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x88, r5, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x46}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x20000040) (async)
sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x81800}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x88, r5, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x46}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x20000040)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000001400), 0x101002, 0x0) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001400), 0x101002, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001440)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r10, 0x3ba0, &(0x7f0000001480)={0x48, 0x2, r11})
syz_open_dev$mouse(&(0x7f0000001500), 0xce, 0x40) (async)
r12 = syz_open_dev$mouse(&(0x7f0000001500), 0xce, 0x40)
ioctl$VIDIOC_S_DV_TIMINGS(r12, 0xc0845657, &(0x7f0000001540)={0x0, @reserved}) (async)
ioctl$VIDIOC_S_DV_TIMINGS(r12, 0xc0845657, &(0x7f0000001540)={0x0, @reserved})
socket$igmp(0x2, 0x3, 0x2)

6m39.615789393s ago: executing program 39 (id=937):
r0 = socket$kcm(0x29, 0x2, 0x0)
getsockopt(r0, 0x5, 0x9, &(0x7f0000000000), &(0x7f0000000040))
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000080)=[@out_dx={0x6a, 0x28, {0xd1d8, 0x2}}, @rdmsr={0x66, 0x18, {0x8be}}, @in_dx={0x69, 0x20, {0x8022, 0x4}}, @nested_load_syzos={0x136, 0xe0, {0x3, 0xb, [@in_dx={0x69, 0x20, {0x9d46, 0x6}}, @wr_drn={0x68, 0x20, {0x7, 0x4}}, @nested_vmresume={0x130, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x836}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host_nat=0x6c02, 0x8000000000000000, 0x5, 0x200000000000}}]}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x86, 0x2, 0x5233e898, 0x1}}, @nested_load_code={0x12e, 0x67, {0x3, "d9eb66b822000f00d066baf80cb82906708eef66bafc0cecf0420fab77080f01cf66450fa2c4a17b2c3a420f8600800000b805000000b957f000000f01c1b9b9030000b800000000ba000001000f30"}}, @code={0xa, 0x81, {"b967090000b800000080ba000000000f3066b8f9000f00d0f3410f588225978d53362e3e66410f6d6348660f2098c4229107e0b805000000b92cb000000f01d9b9ff0b0000b80a000000ba000000000f3066baf80cb80d87a484ef66bafc0cb000eeb9800000c00f3235002000000f30"}}, @nested_amd_invlpga={0x17d, 0x20, {0x9000, 0x6ee3}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x50, {"460f01c23e65440f01f8450f01d9660f747908c4827979f9c4e109f630f243abc481e558448300c7442400a0000000c744240200000080ff2c24460fae5a00"}}, @rdmsr={0x66, 0x18, {0x986}}, @nested_amd_invlpga={0x17d, 0x20, {0xf000, 0x71e4}}, @rdmsr={0x66, 0x18, {0xaf3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xc0, 0x0, 0x3, 0x7}}, @in_dx={0x69, 0x20, {0x93a8, 0x4}}, @enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x3, 0x3}}, @nested_load_code={0x12e, 0x64, {0x3, "b9a20a00000f3266b81f008ec065660f3882a78f0000003e430f01c9c74424005f000000c744240200004001ff1c24260f01f72e470abb002000000fb615b900000066440f72f4f9650f01cb"}}, @nested_load_code={0x12e, 0x64, {0x3, "6566430f01f5c744240022000000c744240266000000ff2c242ed186860000006426648edc66ba6100b800980000ef660f38822cedf7ffffffc4c2090d7500260f01ca8740008fe910027100"}}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x0, 0x6}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee8000, 0xf137}}, @wr_drn={0x68, 0x20, {0x1, 0x3}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0x3905}}, @nested_load_code={0x12e, 0x57, {0x0, "430f23058f6868a275000b470f73d00266b87a000f00d065815a0678000000b805000000b90a0000000f01c1b92c0200000f32f48f284085e70066ba4000ed"}}], 0x5d7})
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000006c0)={0x4, 0x0, [{0x391, 0x0, 0x9}, {0x866, 0x0, 0x1}, {0xb58, 0x0, 0x3}, {0x9ae, 0x0, 0xd}]}) (async)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000006c0)={0x4, 0x0, [{0x391, 0x0, 0x9}, {0x866, 0x0, 0x1}, {0xb58, 0x0, 0x3}, {0x9ae, 0x0, 0xd}]})
r2 = fsopen(&(0x7f0000000740)='tmpfs\x00', 0x0)
r3 = fsmount(r2, 0x0, 0x88)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3)
sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f00000008c0)={0xdf, [[0xc, 0x76, 0x80000000, 0x1, 0x9, 0x401, 0x5, 0x9], [0x8000, 0x40, 0x8, 0x1a000000, 0x3, 0x3, 0x0, 0x9], [0xff, 0x1, 0x2, 0xffffffff, 0xb, 0x81, 0x7ff, 0x80000001]], '\x00', [{0x1e61, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5f, 0x7ff, 0x1}, {0x7, 0x400, 0x0, 0x1, 0x1}, {0x7fff, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xa, 0xffffffff, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x54, 0x1, 0x0, 0x0, 0x1}, {0xfffff4de, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x4, 0x0, 0x1, 0x0, 0x1}, {0xd, 0x6, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x8})
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000bc0)={0x9, &(0x7f0000000b40)=[{0x0, 0x5, 0x80, 0x5}, {0x6, 0x8, 0x0, 0xfffffff7}, {0xfff, 0x57, 0x7, 0x7}, {0x0, 0x5, 0x9, 0x80000001}, {0x1, 0x2, 0xb, 0x80000001}, {0xfffc, 0x4, 0x5, 0xfff}, {0x3, 0xde, 0x3, 0xb}, {0x9, 0x1, 0xf, 0x6}, {0x63b, 0x3, 0x3, 0x6}]}, 0x10)
getresgid(&(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=<r6=>0x0)
fstat(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x4000)
mount$fuse(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x3000010, &(0x7f0000000e80)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@allow_other}], [{@fowner_lt={'fowner<', r7}}, {@uid_eq={'uid', 0x3d, r8}}, {@permit_directio}]}}) (async)
mount$fuse(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x3000010, &(0x7f0000000e80)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@allow_other}], [{@fowner_lt={'fowner<', r7}}, {@uid_eq={'uid', 0x3d, r8}}, {@permit_directio}]}})
ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000f80)) (async)
ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000f80))
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000001000)={0x42, 0x4, 0x3}, 0x10)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000001040)={0x0, 0x401, 0xffffffffffffff81})
sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1fbf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc23}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040805) (async)
sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1fbf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc23}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040805)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000001180)={r3, 0x0, 0x1000, 0x100000000})
openat$rtc(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) (async)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000001200)=0x10000000)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000001240))
sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x81800}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x88, r5, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x46}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x20000040) (async)
sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x81800}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x88, r5, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x46}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x20000040)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000001400), 0x101002, 0x0) (async)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001400), 0x101002, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001440)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r10, 0x3ba0, &(0x7f0000001480)={0x48, 0x2, r11})
syz_open_dev$mouse(&(0x7f0000001500), 0xce, 0x40) (async)
r12 = syz_open_dev$mouse(&(0x7f0000001500), 0xce, 0x40)
ioctl$VIDIOC_S_DV_TIMINGS(r12, 0xc0845657, &(0x7f0000001540)={0x0, @reserved}) (async)
ioctl$VIDIOC_S_DV_TIMINGS(r12, 0xc0845657, &(0x7f0000001540)={0x0, @reserved})
socket$igmp(0x2, 0x3, 0x2)

1m29.160506226s ago: executing program 0 (id=2946):
r0 = socket$inet(0x2, 0x80000, 0xc)
shutdown(r0, 0x0) (async)
shutdown(r0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0)
recvmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/227, 0xe3}, {&(0x7f0000000180)=""/85, 0x55}], 0x2, &(0x7f0000000240)=""/12, 0xc}, 0x200}], 0x1, 0x2000, 0x0) (async)
recvmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/227, 0xe3}, {&(0x7f0000000180)=""/85, 0x55}], 0x2, &(0x7f0000000240)=""/12, 0xc}, 0x200}], 0x1, 0x2000, 0x0)

1m29.008751463s ago: executing program 0 (id=2949):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd70000000000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

1m28.915404541s ago: executing program 0 (id=2951):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
fcntl$setsig(r0, 0xa, 0x2e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

1m28.467083148s ago: executing program 0 (id=2953):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="ba157c04000000a100be753ab6aab1dfc1", 0xffffffffffffff4a, 0x12, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000010240)=[{{0x0, 0x0, 0x0}, 0x94}, {{0x0, 0x32, &(0x7f0000000600)=[{0xfffffffffffffffe}], 0x1}, 0x80008}], 0x2, 0x40000160, 0x0)
sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x0)
getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000120000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

1m27.739962671s ago: executing program 0 (id=2956):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000013c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_WRITE(r0, &(0x7f0000003400)={0x18, 0x0, r1, {0x1000}}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
open(&(0x7f0000000280)='.\x00', 0x0, 0x109)
gettid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00')
readlinkat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0xc0, 0x112, 0x27}, 0x18)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r3=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(r4, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x3ba, 0x7})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4b, 0x1800005, 0x81, 0x7fffffff, 0xfff8, 0x0, 0x10000, 0x0, 0x4bfb, 0x4, 0x200000000042, 0x20000000000004, 0x3, 0x5, 0x9, 0x100000090], 0x0, 0x108e55})
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r5, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r5, 0x5, 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
syz_ublk_setup_io_uring(0x4000020, &(0x7f0000000340)={0x0, 0x1cddd, 0x10000, 0x2, 0x19a}, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)

1m27.239822871s ago: executing program 0 (id=2960):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r0, 0x607d8000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x8, 0x5805})
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd29, 0x0, {0x81, 0x80}, [@FRA_SRC={0x14, 0x2, @mcast1}]}, 0x30}}, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000200)={0x0, 0x31, "fe248904625185af321c229888c31c85a508bdfa90a64c0fc3ef26286f7a166b0996c86f9ffa60b5a45b1e4348b106bbdf"})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="8520000002000000850000006200000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000a987fb47807d8b95a3e530caa5a10c"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m24.902710027s ago: executing program 3 (id=2974):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000001900090400000000000000000a000000000000060000000008001e0001000000a59d52049f05f9a1305ed8a3f924c6809f75ffa64993dbc31ff70992dfb8f2fcb57be6a42a0eeac09a4fe5835d24022933429d57e05df66ddf77fffd60a8cb05ea8d0b7326eab752c4ae8084f62d44f2cc4df21ebc5d92a2982deb52c6ab61c3f704b9885ae594143c1dde0a4a9f7d4f5a36091c652caf3eaec41531"], 0x24}}, 0x80)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010ffe90025bd7000739bdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x40800)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xffff0046})
inotify_init()
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x800, 0x3, 0x6})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

1m24.776021514s ago: executing program 3 (id=2975):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000aa6000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f000084e000/0x1000)=nil)
getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f0000000000)={0xe45, 0x80000000000003, 0x6, 0x401, 0x1, 0x8000000000000001, 0x7fffffffffffffff, 0x1651}, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000001800), 0xcc60, 0xa002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5393, &(0x7f0000000000)=ANY=[])
inotify_init()
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3, 0x0, 0x3})
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

1m24.640414643s ago: executing program 3 (id=2977):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000140), 0x4)
ioctl$EVIOCGMASK(r1, 0x5b01, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "06a51b98ea88a73bf99389b230cfeb33fc198570a6494644e92e40f886b3704a889cd17f0dcf286e29c8578fb5d89f26efd5b17e92aeb4b87b5213ff522551c6", 0x1c}, 0x48, 0xfffffffffffffff8)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x3]}, 0x6)
keyctl$setperm(0x5, r3, 0x4)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x0)

1m23.716981596s ago: executing program 4 (id=2979):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0xa]}, 0x8)
unshare(0x400)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000016c0)='/sys/kernel/uevent_seqnum', 0xa4142, 0x0)
vmsplice(r1, 0x0, 0x0, 0x4)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)
getsockname$inet(r2, 0x0, &(0x7f00000001c0))

1m23.654947721s ago: executing program 4 (id=2980):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000002000000000000200000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa000000000000000000000000ffffffff000000000a00000000000000fc020000000000000000000000000001fb0200000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

1m23.508563422s ago: executing program 4 (id=2981):
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010029bd700000000000fc020000000000000000010000000000fe88000000000000000000000000000100000006000000000a0000002c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x40044)

1m23.507888291s ago: executing program 9 (id=2982):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x220040000000fff, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r5)

1m23.491178315s ago: executing program 4 (id=2983):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003440)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_WRITE(r0, &(0x7f0000003400)={0x18, 0x0, r1, {0x1000}}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000009, 0x1010, 0xffffffffffffffff, 0x947fe000)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109)
gettid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=""/116, 0x74)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0xc0, 0x112, 0x27}, 0x18)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x10, {}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1)
timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r4=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(r5, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xcddd, 0x10000, 0x2, 0x19a}, &(0x7f0000000040), 0x0, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc10c5541, &(0x7f0000000040))
fsetxattr$security_capability(r2, &(0x7f0000000200), 0x0, 0x0, 0x0)

1m22.497080364s ago: executing program 4 (id=2984):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x90, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x20000000, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1deb, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x6000}, 0x0)

1m22.174398683s ago: executing program 1 (id=2986):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', &(0x7f0000000040)={0x20081, 0x1, 0x5}, 0x18)
execveat(r0, &(0x7f00000007c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x0)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00')
rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00')
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', &(0x7f0000000040)={0x20081, 0x1, 0x5}, 0x18) (async)
execveat(r0, &(0x7f00000007c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x0) (async)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') (async)
rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') (async)

1m22.136101998s ago: executing program 9 (id=2987):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000840)={0x35b, 0x2, 0x2, {{0x51f, 0x21a, 0x0, 0xffffffff, {}, 0x2810000, 0x8, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\xfd\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x83\x00\xb5\x00\x00+YN\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x103, '\x00\x00\x9f\xd2\x8f43\xb6\x02\"K\xdd_MR\xb8=a\xcb\v!\x89A\x16\x95\xef\xe2\xefH\xb2\x11\x1d\x1c6\x04\x82\xe6\xc7\x8e\x1e{\xb8\x8e7\x9d*\xec\xff\xfe\xc3\xa1\x9e^\x17<\x8b\x04\xcfr\f\xa4+\xfd3\x8c\xb7\x0f\xdaP+\x89/\xb0\xdd\x83{\x9e\xc6S\x05\x0f\r|\xdcE\x99\x7f\xa6w;\xbf\xe1\xbdp\xee\x03\xe4\xaf\xb4\x99\xa2\x9b\xd3\xde\xce/F@\xf8V\x02\x1c\xde\xe9\xdcoR\x1e{\xc0jv\xa9\x1eg\xba\x8d\xf3\xcc%:\xbcY\x1a\x15\a\x7f\x89\x92\xeaWv\x80\xff\xec\x87\xa9\x06\xd0(\x8am\xbf2\xa2$\x01T6{\x1e\x05v\x1a;\xac\xde\xab\xba\x82\xb3\xccLFl\xe0\x0e&\x81\xb2\xffk\x94\"\xd8\x01\b\n\x96\xc8\xc8r\xa6\xad\xd7\xd7 D3\x82\xaea\xb3U89\xde#4]\v\xdd\xcc\t\x878\x97\x03\xf81\xa0\x948\x91\xf0\xfa\x9eo\x9b\xb5w\x86\xd9R\xc2\x9a\x8c\xbd\xb8M\xd5\xed~\xd8\xab\xf6\x0f\xacKC\x1b\xbfo\x0e\xc9\x006\xf5\xe4', 0x91, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8r\x9aE\x1b4\a\xdb\xda\xb2\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x13\x12D\xf7s=\xa4*&%\x00\x00\x00_\ro \xe5\xfd\xac\xfb\xa5l\xf3\xe7\xa3\xc0\x14\x19N\x13\xa4\x92G\x7f\x92\'\xe4{\x1a^,)\xee\xec\x05}d\xc2\xb5\x9e\\\xa6\a\x1e\x06l\xa4\x86,\xff\b\x9f\xd5\x9fo\xb8\x8cLi\x14\xd0\x9a\xf7\xf6'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x35b)

1m22.006173612s ago: executing program 4 (id=2988):
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c)
writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
syz_open_dev$sg(0x0, 0x0, 0x40100)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
preadv(r5, &(0x7f0000000300), 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000680)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m21.841339487s ago: executing program 1 (id=2989):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001400b59527bd7000ffdbdf250a1700ff", @ANYRES32, @ANYBLOB="1400020000000000000000000000000000000001100001"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = eventfd2(0xe5f, 0x80000)
r5 = eventfd2(0x42000006, 0x801)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000240)={r5, 0x7, 0x2, r4})
r6 = eventfd2(0xe5c, 0x80000)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r6, 0x7, 0x2, r4})
close(0x4)
r7 = userfaultfd(0x801)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00')
lseek(r8, 0x2004, 0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
socket$kcm(0x29, 0x2, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x402a82, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
socket$kcm(0x2, 0x1, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})

1m21.448234684s ago: executing program 9 (id=2990):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
inotify_init()
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3})
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

1m20.727566493s ago: executing program 9 (id=2991):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c000030390001a000000a000a000000010005f507"], 0x6a)

1m20.563440016s ago: executing program 1 (id=2992):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000499000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x89901)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'macvlan1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001d00010429bd7000fbdbdf2507000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="08000f00000000000a0002"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="11"], 0x20)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf255100000008000300", @ANYRES32=r5, @ANYBLOB="0008021100000100000a00060008021100000100"/36], 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x40)
ioctl$I2C_SLAVE(r0, 0x703, 0x132)
move_mount(r2, &(0x7f0000000100)='.\x00', r2, &(0x7f0000000180)='./file0\x00', 0x2)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000040)={0x9, 0xffffffff, 0x4, 0x3, 0xd})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_open_dev$mtd(&(0x7f0000000140), 0x100000001, 0x101681)
ioctl$MEMERASE(r7, 0x40084d02, &(0x7f0000000180)={0x7, 0x7b})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0xa, 0x6)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1b0, r9, 0x1, 0x70bd2d, 0x8ef1, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8000}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x18c, 0x3, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xee, 0x1, "894eeaf82c7b190bf5fad52003378be2c0d14ba9acc0244b2314c158297f36728ccf36758d6c00fdcc34e6efffe9ce06b73d070b7bc83033b79b0d8cb86e08507e78f9068a9cad8c6f240115e6e00fb0dc646944fbe75f42455df5df1ab2c523e1f52622fb87ef1dec5f840027415bbf2171b0ae7e41298c419971ed804a604016577a55d9a8f1e9b93f4ec309817e1ed130a191e49620174d822e7187b820cfbe7ab63cebd0e12a1987ce0e5f1901a2cccbb1b9fedbb6a46e92a5fdf0a25572721f837d53545574583cd8487ca7d7b872f06e8674d00fc7cde290fd3c956e23c47d284a8d1bcb948227"}}, {0x94, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x8d, 0x2, "d6bee37443646e2aeea4377e8d6bdbebb582301b5a38ee61655e24e4342924582564334223dbd76e00ee2bd70ea27091eac347dd1aa15de6221802fee6284eebbc31616a540f233c56328540b8b7d408cf18062e6d1e10eba8cea9118ad3cf2050502bb99283d05da170a8ca5b7a112184bfcc402bcd03ce9ec1f3156c0d8e14dcd73d5475f90518d8"}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000040}, 0x814)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f200000060001000700000008000500", @ANYRES32=r6], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x10)
pipe(&(0x7f00000007c0))
r10 = socket$l2tp6(0xa, 0x2, 0x73)
connect(r10, &(0x7f0000000000)=@generic={0x0, "a580f1724e779971ec8449b37f662c740dd6f32f4192451be94d20d79c1885f5affd021e978c1ba6d87d9bb35f8e73bbb763abcc60fba685174814fbdec7624b87f7ddc441cc67fdf1cb839bea4a7b3f9a0fc44711bdd6913b7381dea622ac79bc252f10f96b9b201e9e4a736d999a2cf671690e4a1b12da522173e13a5f"}, 0x80)
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffb]}, 0x0, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0)

1m18.771247662s ago: executing program 9 (id=2993):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be)
pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe)
pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00)
pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c)
pwrite64(r0, &(0x7f0000000100)='12345678-1', 0xa, 0xc30)
pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23)
pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b)
pwrite64(r0, &(0x7f0000000100)='\x00', 0x1, 0x1e8133)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00 \x00'})

1m17.871681007s ago: executing program 3 (id=2994):
r0 = userfaultfd(0x801)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
unshare(0x2a020400)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffebb, 0x0, 0xffffffffffffffff, 0xffffffffffffff04}, 0x48)

1m17.733926534s ago: executing program 1 (id=2995):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="96e2f9278546dcf06e4c25049a5a2cb0f68ebdcd2748ecfbac888ab76aca89bb41aebc46908f5d1c911813cb44cc2bafeab7a32ab7bcfb8eb5b52604199a8b88dcade0d5e58a7caf34977a82be83a0c308ccc7f972c9dd9b2d365734e9ee5750", 0x60}], 0x1) (fail_nth: 23)

1m16.770654835s ago: executing program 9 (id=2996):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x90, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x20000000, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1deb, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0xf1ff}, 0x0)

1m6.469009398s ago: executing program 40 (id=2960):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r0, 0x607d8000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x4, 0x8, 0x5805})
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd29, 0x0, {0x81, 0x80}, [@FRA_SRC={0x14, 0x2, @mcast1}]}, 0x30}}, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000200)={0x0, 0x31, "fe248904625185af321c229888c31c85a508bdfa90a64c0fc3ef26286f7a166b0996c86f9ffa60b5a45b1e4348b106bbdf"})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="8520000002000000850000006200000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000a987fb47807d8b95a3e530caa5a10c"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m6.069743164s ago: executing program 3 (id=2998):
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10)
r1 = syz_ublk_setup_io_uring(0x4907, &(0x7f0000000040)={0x0, 0xa27, 0x400, 0x3, 0x1d0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x109882, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000240)={0x1aa, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]})
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[r0, r0, r3], 0x3)
listen(r0, 0x5)
r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000240)='//127.0.0.1/share\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='vers\x00', &(0x7f00000002c0)='1.0\x00', 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81})
r6 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000f40)='//\xf2/\x06\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I0e\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\x02\xb75\x91S\xa4x\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\x9c\x00\x00\x00\x00\x00\x00\x00&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc50\x97w\x87\xe5\x06\x91W\rr\xe5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdo\xa8H\xb0\xd6X\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8\xdb9\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\x05\f\xabj%Y\xa9\xdd\x15o\xaf\xf5\xec\x99@\xd2\t\n\xb1oO\xe4\x99\xd6\xed\x83\xb0\x18q\xb9\xda\xf1kk\xb0N\xe69D\x12\x96\x85y\xe1\xf6\x83\x81\xc1\xcb\x169\xa5A%\xcb\n\xaby\x9f\x97\xde\xcf\x14\x0f\xffl\xb0e\xa2m\xb3\x8fsI\xc8v<\x8aA\xef\x92\x98', 0x0)
ioctl$SG_BLKTRACESTART(r5, 0x1274, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x3800)

1m5.656494039s ago: executing program 41 (id=2988):
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c)
writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
syz_open_dev$sg(0x0, 0x0, 0x40100)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
preadv(r5, &(0x7f0000000300), 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000680)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1m5.489683632s ago: executing program 1 (id=3000):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000013c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_WRITE(r0, &(0x7f0000003400)={0x18, 0x0, r1, {0x1000}}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109)
gettid()
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00')
readlinkat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0xc0, 0x112, 0x27}, 0x18)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r4=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$lock(r5, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xcddd, 0x10000, 0x2, 0x19a}, &(0x7f0000000040), 0x0, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc10c5541, &(0x7f0000000040))
fsetxattr$security_capability(r2, &(0x7f0000000200), 0x0, 0x0, 0x1000000)
close(0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080)

59.691760371s ago: executing program 42 (id=2996):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x90, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x20000000, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1deb, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0xf1ff}, 0x0)

58.644029645s ago: executing program 1 (id=3002):
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000180)='wchan\x00')
pread64(r1, &(0x7f000001b440)=""/102385, 0x18ff1, 0x8)
r2 = syz_usb_connect(0x1, 0x36, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRESOCT, @ANYRESDEC, @ANYRES64=r1, @ANYRESDEC=r1], 0x0)
syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0)
syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
r7 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="ee"], 0x0, 0x0, 0x0, 0x0, 0x0})

55.848550685s ago: executing program 3 (id=3003):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)="ba157c04000000a100be753ab6aab1dfc1", 0xffffffffffffff4a, 0x12, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000010240)=[{{0x0, 0x0, 0x0}, 0x94}, {{0x0, 0x32, &(0x7f0000000600)=[{0xfffffffffffffffe}], 0x1}, 0x80008}], 0x2, 0x40000160, 0x0)
sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x0)
getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100003040000000000000000001f0000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

0s ago: executing program 43 (id=3002):
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000180)='wchan\x00')
pread64(r1, &(0x7f000001b440)=""/102385, 0x18ff1, 0x8)
r2 = syz_usb_connect(0x1, 0x36, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRESOCT, @ANYRESDEC, @ANYRES64=r1, @ANYRESDEC=r1], 0x0)
syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0)
syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
r7 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="ee"], 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

read failed
[  680.958464][ T5678] gspca_stk1135: serial bus timeout: status=0x00
[  680.958472][ T5678] gspca_stk1135: Sensor read failed
[  680.958496][ T5678] gspca_stk1135: serial bus timeout: status=0x00
[  680.958506][ T5678] gspca_stk1135: Sensor write failed
[  680.958529][ T5678] gspca_stk1135: serial bus timeout: status=0x00
[  680.958539][ T5678] gspca_stk1135: Sensor write failed
[  680.965792][ T5678] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71
[  680.978385][ T5678] usb 2-1: USB disconnect, device number 103
[  681.083578][T15724] syzkaller0: entered promiscuous mode
[  681.083603][T15724] syzkaller0: entered allmulticast mode
[  681.087799][T13882] 0: reclassify loop, rule prio 0, protocol 800
[  681.714698][   T30] audit: type=1800 audit(1789886083.047:4843): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2742" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1956 res=0 errno=0
[  681.726067][T15739] FAULT_INJECTION: forcing a failure.
[  681.726067][T15739] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  681.726098][T15739] CPU: 0 UID: 0 PID: 15739 Comm: syz.4.2742 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  681.726132][T15739] Tainted: [L]=SOFTLOCKUP
[  681.726140][T15739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  681.726150][T15739] Call Trace:
[  681.726158][T15739]  <TASK>
[  681.726166][T15739]  dump_stack_lvl+0xe8/0x150
[  681.726198][T15739]  should_fail_ex+0x410/0x560
[  681.726224][T15739]  _copy_to_user+0x31/0xb0
[  681.726250][T15739]  simple_read_from_buffer+0xe1/0x170
[  681.726280][T15739]  proc_fail_nth_read+0x1bb/0x230
[  681.726307][T15739]  ? common_file_perm+0x20e/0x2b0
[  681.726333][T15739]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  681.726363][T15739]  ? rw_verify_area+0x24a/0x4c0
[  681.726393][T15739]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  681.726420][T15739]  vfs_read+0x213/0xa80
[  681.726450][T15739]  ? __pfx___mutex_lock+0x10/0x10
[  681.726473][T15739]  ? __pfx_vfs_read+0x10/0x10
[  681.726499][T15739]  ? __fget_files+0x2a/0x420
[  681.726526][T15739]  ? __fget_files+0x3a2/0x420
[  681.726548][T15739]  ? __fget_files+0x2a/0x420
[  681.726579][T15739]  ksys_read+0x150/0x270
[  681.726607][T15739]  ? __pfx_ksys_read+0x10/0x10
[  681.726643][T15739]  do_syscall_64+0x166/0x520
[  681.726663][T15739]  ? trace_irq_disable+0x3b/0x140
[  681.726681][T15739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.726700][T15739]  ? clear_bhb_loop+0x70/0xc0
[  681.726722][T15739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.726739][T15739] RIP: 0033:0x7f7e5115e98e
[  681.726757][T15739] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  681.726772][T15739] RSP: 002b:00007f7e4f3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  681.726794][T15739] RAX: ffffffffffffffda RBX: 00007f7e4f3f66c0 RCX: 00007f7e5115e98e
[  681.726808][T15739] RDX: 000000000000000f RSI: 00007f7e4f3f60a0 RDI: 0000000000000005
[  681.726820][T15739] RBP: 00007f7e4f3f6090 R08: 0000000000000000 R09: 0000000000000000
[  681.726832][T15739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  681.726843][T15739] R13: 00007f7e51426038 R14: 00007f7e51425fa0 R15: 00007f7e5154fa48
[  681.726872][T15739]  </TASK>
[  681.931554][T11087] IPVS: ip_vs_send_async error -101
[  682.010362][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'.
[  682.010398][T15747] netlink: 'syz.0.2746': attribute type 20 has an invalid length.
[  682.010413][T15747] netlink: 'syz.0.2746': attribute type 21 has an invalid length.
[  682.120306][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2746'.
[  682.272248][T15760] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  682.551423][T12899] usb 10-1: new high-speed USB device number 100 using dummy_hcd
[  682.705509][T12899] usb 10-1: unable to get BOS descriptor or descriptor too short
[  682.705567][T12899] usb 10-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  682.706779][T12899] usb 10-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  682.706803][T12899] usb 10-1: config 66 has 1 interface, different from the descriptor's value: 2
[  682.709216][T12899] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.709240][T12899] usb 10-1: Product: syz
[  682.709254][T12899] usb 10-1: Manufacturer: syz
[  682.709269][T12899] usb 10-1: SerialNumber: syz
[  683.520540][T15782] FAULT_INJECTION: forcing a failure.
[  683.520540][T15782] name failslab, interval 1, probability 0, space 0, times 0
[  683.520567][T15782] CPU: 1 UID: 0 PID: 15782 Comm: syz.4.2754 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  683.520585][T15782] Tainted: [L]=SOFTLOCKUP
[  683.520597][T15782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  683.520605][T15782] Call Trace:
[  683.520611][T15782]  <TASK>
[  683.520617][T15782]  dump_stack_lvl+0xe8/0x150
[  683.520643][T15782]  should_fail_ex+0x410/0x560
[  683.520661][T15782]  should_failslab+0xa8/0x100
[  683.520676][T15782]  ? __break_lease+0x224/0x2060
[  683.520721][T15782]  kmem_cache_alloc_noprof+0xa1/0x600
[  683.520737][T15782]  ? __lock_acquire+0x747/0x2de0
[  683.520751][T15782]  ? __break_lease+0x224/0x2060
[  683.520771][T15782]  __break_lease+0x224/0x2060
[  683.520788][T15782]  ? evm_protected_xattr_common+0x170/0x190
[  683.520850][T15782]  ? evm_protect_xattr+0x75c/0xb20
[  683.520870][T15782]  ? __pfx___break_lease+0x10/0x10
[  683.520890][T15782]  ? evm_inode_setxattr+0x5e/0x120
[  683.520908][T15782]  ? security_inode_setxattr+0x18f/0x6c0
[  683.520928][T15782]  __vfs_setxattr_locked+0x1f7/0x2b0
[  683.520948][T15782]  vfs_setxattr+0x163/0x360
[  683.520968][T15782]  ? __pfx_vfs_setxattr+0x10/0x10
[  683.520985][T15782]  ? mnt_want_write_file+0x172/0x200
[  683.521000][T15782]  file_setxattr+0x1d9/0x2b0
[  683.521018][T15782]  path_setxattrat+0x3cc/0x450
[  683.521037][T15782]  ? __pfx_path_setxattrat+0x10/0x10
[  683.521065][T15782]  ? ksys_write+0x242/0x270
[  683.521083][T15782]  ? __pfx_ksys_write+0x10/0x10
[  683.521107][T15782]  __x64_sys_fsetxattr+0xbc/0xe0
[  683.521126][T15782]  do_syscall_64+0x166/0x520
[  683.521140][T15782]  ? trace_irq_disable+0x3b/0x140
[  683.521152][T15782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.521164][T15782]  ? clear_bhb_loop+0x70/0xc0
[  683.521178][T15782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  683.521190][T15782] RIP: 0033:0x7f7e5119e159
[  683.521203][T15782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  683.521214][T15782] RSP: 002b:00007f7e4f3f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  683.521233][T15782] RAX: ffffffffffffffda RBX: 00007f7e51425fa0 RCX: 00007f7e5119e159
[  683.521247][T15782] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  683.521260][T15782] RBP: 00007f7e4f3f6090 R08: 0000000000000000 R09: 0000000000000000
[  683.521272][T15782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  683.521285][T15782] R13: 00007f7e51426038 R14: 00007f7e51425fa0 R15: 00007f7e5154fa48
[  683.521318][T15782]  </TASK>
[  683.841468][ T5678] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  683.981044][   T30] audit: type=1800 audit(1789886085.317:4844): pid=15791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2757" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2097 res=0 errno=0
[  684.015266][ T5678] usb 4-1: Using ep0 maxpacket: 32
[  684.017283][ T5678] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  684.018655][ T5678] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  684.018685][ T5678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 130, setting to 64
[  684.026490][ T5678] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  684.026515][ T5678] usb 4-1: Product: syz
[  684.026529][ T5678] usb 4-1: Manufacturer: syz
[  684.026542][ T5678] usb 4-1: SerialNumber: syz
[  684.044291][ T5678] usb 4-1: config 0 descriptor??
[  684.121988][ T5678] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  684.157335][T15797] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2758'.
[  684.225386][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2759'.
[  684.336983][T15801] syzkaller0: entered promiscuous mode
[  684.337034][T15801] syzkaller0: entered allmulticast mode
[  684.357870][T15801] FAULT_INJECTION: forcing a failure.
[  684.357870][T15801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  684.357907][T15801] CPU: 1 UID: 0 PID: 15801 Comm: syz.0.2760 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  684.357933][T15801] Tainted: [L]=SOFTLOCKUP
[  684.357944][T15801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  684.357957][T15801] Call Trace:
[  684.357966][T15801]  <TASK>
[  684.357975][T15801]  dump_stack_lvl+0xe8/0x150
[  684.358010][T15801]  should_fail_ex+0x410/0x560
[  684.358039][T15801]  _copy_from_iter+0x1d3/0x1660
[  684.358070][T15801]  ? _copy_from_iter+0x21b/0x1660
[  684.358095][T15801]  ? __pfx__copy_from_iter+0x10/0x10
[  684.358133][T15801]  ? __pfx__copy_from_iter+0x10/0x10
[  684.358162][T15801]  copy_page_from_iter+0x219/0x2d0
[  684.358189][T15801]  skb_copy_datagram_from_iter+0x2f4/0x720
[  684.358233][T15801]  packet_sendmsg+0x35e2/0x4f80
[  684.358254][T15801]  ? up_write+0x19d/0x4a0
[  684.358292][T15801]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  684.358337][T15801]  ? lock_acquire+0x115/0x350
[  684.358361][T15801]  ? __lock_acquire+0x747/0x2de0
[  684.358392][T15801]  ? __pfx_packet_sendmsg+0x10/0x10
[  684.358411][T15801]  ? aa_sk_perm+0x713/0x900
[  684.358433][T15801]  ? __lock_acquire+0x747/0x2de0
[  684.358459][T15801]  ? debug_mutex_wake_waiter+0x56/0x230
[  684.358489][T15801]  ? __pfx_aa_sk_perm+0x10/0x10
[  684.358515][T15801]  ? aa_sock_msg_perm+0x144/0x210
[  684.358545][T15801]  ? apparmor_socket_sendmsg+0x98/0x360
[  684.358569][T15801]  ? __pfx_packet_sendmsg+0x10/0x10
[  684.358588][T15801]  sock_sendmsg_nosec+0x13a/0x180
[  684.358611][T15801]  ____sys_sendmsg+0x54e/0x850
[  684.358642][T15801]  ? __pfx_____sys_sendmsg+0x10/0x10
[  684.358678][T15801]  ? import_iovec+0x73/0xa0
[  684.358706][T15801]  ___sys_sendmsg+0x2a5/0x360
[  684.358731][T15801]  ? __lock_acquire+0x747/0x2de0
[  684.358755][T15801]  ? __pfx____sys_sendmsg+0x10/0x10
[  684.358817][T15801]  ? __fget_files+0x2a/0x420
[  684.358843][T15801]  ? __fget_files+0x3a2/0x420
[  684.358878][T15801]  __x64_sys_sendmsg+0x1b1/0x290
[  684.358908][T15801]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  684.358956][T15801]  do_syscall_64+0x166/0x520
[  684.358980][T15801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.359000][T15801]  ? clear_bhb_loop+0x70/0xc0
[  684.359026][T15801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.359045][T15801] RIP: 0033:0x7f7fdad9e159
[  684.359067][T15801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  684.359084][T15801] RSP: 002b:00007f7fdbbe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  684.359108][T15801] RAX: ffffffffffffffda RBX: 00007f7fdb025fa0 RCX: 00007f7fdad9e159
[  684.359133][T15801] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  684.359146][T15801] RBP: 00007f7fdbbe6090 R08: 0000000000000000 R09: 0000000000000000
[  684.359159][T15801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  684.359171][T15801] R13: 00007f7fdb026038 R14: 00007f7fdb025fa0 R15: 00007f7fdb14fa48
[  684.359203][T15801]  </TASK>
[  684.539405][ T6817] usb 4-1: USB disconnect, device number 94
[  684.545872][T13883] usb 4-1: Failed to submit usb control message: -71
[  684.545910][T13883] usb 4-1: unable to send the bmi data to the device: -71
[  684.545926][T13883] usb 4-1: unable to get target info from device
[  684.545940][T13883] usb 4-1: could not get target info (-71)
[  684.546178][T13883] usb 4-1: could not probe fw (-71)
[  684.889560][   T30] audit: type=1800 audit(1789886086.227:4845): pid=15809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2763" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2118 res=0 errno=0
[  685.219509][T15820] FAULT_INJECTION: forcing a failure.
[  685.219509][T15820] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  685.219546][T15820] CPU: 0 UID: 0 PID: 15820 Comm: syz.3.2766 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  685.219574][T15820] Tainted: [L]=SOFTLOCKUP
[  685.219582][T15820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  685.219595][T15820] Call Trace:
[  685.219613][T15820]  <TASK>
[  685.219622][T15820]  dump_stack_lvl+0xe8/0x150
[  685.219659][T15820]  should_fail_ex+0x410/0x560
[  685.219692][T15820]  _copy_from_user+0x2d/0xb0
[  685.219720][T15820]  snd_seq_oss_write+0x6e2/0x950
[  685.219766][T15820]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  685.219807][T15820]  ? security_file_permission+0x75/0x260
[  685.219836][T15820]  odev_write+0x5a/0x80
[  685.219863][T15820]  vfs_writev+0x4bb/0x990
[  685.219892][T15820]  ? __pfx_odev_write+0x10/0x10
[  685.219920][T15820]  ? __pfx_vfs_writev+0x10/0x10
[  685.219954][T15820]  ? __fget_files+0x2a/0x420
[  685.219986][T15820]  ? __fget_files+0x3a2/0x420
[  685.220007][T15820]  ? __fget_files+0x2a/0x420
[  685.220043][T15820]  do_writev+0x154/0x2e0
[  685.220069][T15820]  ? __pfx_do_writev+0x10/0x10
[  685.220102][T15820]  do_syscall_64+0x166/0x520
[  685.220129][T15820]  ? trace_irq_disable+0x3b/0x140
[  685.220152][T15820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.220174][T15820]  ? clear_bhb_loop+0x70/0xc0
[  685.220213][T15820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.220235][T15820] RIP: 0033:0x7f68a999e159
[  685.220255][T15820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  685.220274][T15820] RSP: 002b:00007f68aa7c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  685.220297][T15820] RAX: ffffffffffffffda RBX: 00007f68a9c25fa0 RCX: 00007f68a999e159
[  685.220312][T15820] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003
[  685.220326][T15820] RBP: 00007f68aa7c4090 R08: 0000000000000000 R09: 0000000000000000
[  685.220338][T15820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  685.220350][T15820] R13: 00007f68a9c26038 R14: 00007f68a9c25fa0 R15: 00007f68a9d4fa48
[  685.220386][T15820]  </TASK>
[  685.584744][   T30] audit: type=1326 audit(1789886086.927:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.4.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7e5119e159 code=0x7ffc0000
[  685.585882][   T30] audit: type=1326 audit(1789886086.927:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.4.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7e5119e159 code=0x7ffc0000
[  685.587337][   T30] audit: type=1326 audit(1789886086.927:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.4.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7e5119e159 code=0x7ffc0000
[  685.588595][   T30] audit: type=1326 audit(1789886086.927:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.4.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7e5119e159 code=0x7ffc0000
[  685.589917][   T30] audit: type=1326 audit(1789886086.927:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.4.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7e5119e159 code=0x7ffc0000
[  685.591137][   T30] audit: type=1326 audit(1789886086.927:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.4.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7e5119e159 code=0x7ffc0000
[  685.642473][   T30] audit: type=1326 audit(1789886086.957:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.4.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7e5119e159 code=0x7ffc0000
[  685.742161][   T30] audit: type=1326 audit(1789886087.057:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15826 comm="syz.4.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7e5119e159 code=0x7ffc0000
[  685.795046][T12899] ati_remote2 10-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint
[  685.834890][T12899] usb 10-1: USB disconnect, device number 100
[  685.933990][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  685.934031][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  685.996652][T15834] syzkaller0: entered promiscuous mode
[  685.996678][T15834] syzkaller0: entered allmulticast mode
[  686.469134][T15851] A link change request failed with some changes committed already. Interface 
2
6���P may have been left with an inconsistent configuration, please check.
[  686.751342][ T5706] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  686.902362][ T5706] usb 4-1: Using ep0 maxpacket: 8
[  686.903259][ T5706] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  686.930189][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.930210][ T5706] usb 4-1: Product: syz
[  686.930219][ T5706] usb 4-1: Manufacturer: syz
[  686.930228][ T5706] usb 4-1: SerialNumber: syz
[  686.963447][ T5706] usb 4-1: config 0 descriptor??
[  687.045697][T15869] netlink: 'syz.9.2782': attribute type 9 has an invalid length.
[  687.073890][T15870] trusted_key: encrypted_key: master key parameter 'defaultte' is invalid
[  687.129892][T15870] kvm: MONITOR instruction emulated as NOP!
[  687.171013][ T5706] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  687.207539][T15874] syzkaller0: entered promiscuous mode
[  687.207603][T15874] syzkaller0: entered allmulticast mode
[  687.235585][T15874] FAULT_INJECTION: forcing a failure.
[  687.235585][T15874] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  687.235621][T15874] CPU: 0 UID: 0 PID: 15874 Comm: syz.0.2783 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  687.235644][T15874] Tainted: [L]=SOFTLOCKUP
[  687.235651][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  687.235662][T15874] Call Trace:
[  687.235672][T15874]  <TASK>
[  687.235682][T15874]  dump_stack_lvl+0xe8/0x150
[  687.235717][T15874]  should_fail_ex+0x410/0x560
[  687.235745][T15874]  _copy_from_iter+0x1d3/0x1660
[  687.235765][T15874]  ? irqentry_exit+0x218/0x910
[  687.235780][T15874]  ? __pfx__copy_from_iter+0x10/0x10
[  687.235792][T15874]  ? irqentry_exit+0x218/0x910
[  687.235809][T15874]  ? trace_irq_disable+0x3b/0x140
[  687.235845][T15874]  copy_page_from_iter+0x219/0x2d0
[  687.235873][T15874]  skb_copy_datagram_from_iter+0x2f4/0x720
[  687.235911][T15874]  packet_sendmsg+0x35e2/0x4f80
[  687.235927][T15874]  ? up_write+0x19d/0x4a0
[  687.235949][T15874]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  687.235987][T15874]  ? lock_acquire+0x115/0x350
[  687.236010][T15874]  ? __lock_acquire+0x747/0x2de0
[  687.236045][T15874]  ? __pfx_packet_sendmsg+0x10/0x10
[  687.236064][T15874]  ? aa_sk_perm+0x713/0x900
[  687.236077][T15874]  ? __lock_acquire+0x747/0x2de0
[  687.236091][T15874]  ? debug_mutex_wake_waiter+0x56/0x230
[  687.236107][T15874]  ? __pfx_aa_sk_perm+0x10/0x10
[  687.236127][T15874]  ? aa_sock_msg_perm+0x144/0x210
[  687.236156][T15874]  ? apparmor_socket_sendmsg+0x98/0x360
[  687.236180][T15874]  ? __pfx_packet_sendmsg+0x10/0x10
[  687.236204][T15874]  sock_sendmsg_nosec+0x13a/0x180
[  687.236226][T15874]  ____sys_sendmsg+0x54e/0x850
[  687.236245][T15874]  ? __pfx_____sys_sendmsg+0x10/0x10
[  687.236265][T15874]  ? import_iovec+0x73/0xa0
[  687.236286][T15874]  ___sys_sendmsg+0x2a5/0x360
[  687.236311][T15874]  ? __lock_acquire+0x747/0x2de0
[  687.236335][T15874]  ? __pfx____sys_sendmsg+0x10/0x10
[  687.236390][T15874]  ? __fget_files+0x2a/0x420
[  687.236406][T15874]  ? __fget_files+0x3a2/0x420
[  687.236426][T15874]  __x64_sys_sendmsg+0x1b1/0x290
[  687.236449][T15874]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  687.236496][T15874]  do_syscall_64+0x166/0x520
[  687.236519][T15874]  ? trace_irq_disable+0x3b/0x140
[  687.236537][T15874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.236550][T15874]  ? clear_bhb_loop+0x70/0xc0
[  687.236571][T15874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  687.236583][T15874] RIP: 0033:0x7f7fdad9e159
[  687.236597][T15874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  687.236614][T15874] RSP: 002b:00007f7fdbbe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  687.236637][T15874] RAX: ffffffffffffffda RBX: 00007f7fdb025fa0 RCX: 00007f7fdad9e159
[  687.236652][T15874] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  687.236665][T15874] RBP: 00007f7fdbbe6090 R08: 0000000000000000 R09: 0000000000000000
[  687.236677][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  687.236689][T15874] R13: 00007f7fdb026038 R14: 00007f7fdb025fa0 R15: 00007f7fdb14fa48
[  687.236711][T15874]  </TASK>
[  687.588201][T15875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.588616][T15875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.879272][ T5706] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  687.903884][ T5706] usb 4-1: USB disconnect, device number 95
[  688.101347][ T6817] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  688.252133][ T6817] usb 2-1: Using ep0 maxpacket: 32
[  688.254353][ T6817] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  688.255759][ T6817] usb 2-1: config index 0 descriptor too short (expected 19, got 18)
[  688.263411][ T6817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.263436][ T6817] usb 2-1: Product: syz
[  688.263448][ T6817] usb 2-1: Manufacturer: syz
[  688.263461][ T6817] usb 2-1: SerialNumber: syz
[  688.269659][ T6817] usb 2-1: config 0 descriptor??
[  688.274606][ T6817] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  688.289083][ T6817] dvb-usb: bulk message failed: -22 (2/0)
[  688.294892][ T6817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  688.296271][ T6817] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  688.296323][ T6817] usb 2-1: media controller created
[  688.342625][ T6817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  688.393722][ T6817] usb 2-1: selecting invalid altsetting 7
[  688.393743][ T6817] cxusb: set interface failed
[  688.393756][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  688.475166][T15884] cxusb: i2c rd: len=119 is too big!
[  688.475166][T15884] 
[  688.475936][ T6817] DVB: Unable to find symbol lgdt330x_attach()
[  688.475953][ T6817] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  688.669616][ T6817] rc_core: IR keymap rc-dvico-portable not found
[  688.669640][ T6817] Registered IR keymap rc-empty
[  688.680439][ T6817] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  688.689796][ T6817] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input46
[  688.708628][ T6817] dvb-usb: schedule remote query interval to 100 msecs.
[  688.708657][ T6817] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  688.815183][T12897] dvb-usb: bulk message failed: -22 (1/0)
[  688.919312][T15892] can: request_module (can-proto-5) failed.
[  688.921844][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  688.943769][T12897] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  689.031549][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  689.071828][T12897] usb 4-1: device descriptor read/64, error -71
[  689.142229][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  689.267002][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  689.322600][T12897] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  689.371580][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  689.461513][T12897] usb 4-1: device descriptor read/64, error -71
[  689.481905][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  689.571625][T12897] usb usb4-port1: attempt power cycle
[  689.591553][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  689.703540][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  689.767154][T15917] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  689.811534][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  689.923113][   T25] usb 10-1: new high-speed USB device number 101 using dummy_hcd
[  689.923197][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  689.931363][T12897] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  689.952292][T12897] usb 4-1: device descriptor read/8, error -71
[  689.960864][T15919] FAULT_INJECTION: forcing a failure.
[  689.960864][T15919] name failslab, interval 1, probability 0, space 0, times 0
[  689.960900][T15919] CPU: 0 UID: 0 PID: 15919 Comm: syz.0.2797 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  689.960927][T15919] Tainted: [L]=SOFTLOCKUP
[  689.960935][T15919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  689.960946][T15919] Call Trace:
[  689.960956][T15919]  <TASK>
[  689.960965][T15919]  dump_stack_lvl+0xe8/0x150
[  689.961002][T15919]  should_fail_ex+0x410/0x560
[  689.961031][T15919]  should_failslab+0xa8/0x100
[  689.961060][T15919]  __kvmalloc_node_noprof+0x176/0x820
[  689.961087][T15919]  ? simple_xattr_alloc+0x5e/0x100
[  689.961107][T15919]  ? simple_xattr_alloc+0x5e/0x100
[  689.961137][T15919]  simple_xattr_alloc+0x5e/0x100
[  689.961160][T15919]  simple_xattr_set+0x69/0x2830
[  689.961188][T15919]  ? do_raw_spin_unlock+0xf5/0x200
[  689.961225][T15919]  shmem_xattr_handler_set+0x1a7/0x2e0
[  689.961259][T15919]  ? __pfx_shmem_xattr_handler_set+0x10/0x10
[  689.961288][T15919]  __vfs_setxattr+0x442/0x480
[  689.961330][T15919]  __vfs_setxattr_noperm+0x12a/0x660
[  689.961366][T15919]  vfs_setxattr+0x163/0x360
[  689.961400][T15919]  ? __pfx_vfs_setxattr+0x10/0x10
[  689.961432][T15919]  ? mnt_want_write_file+0x172/0x200
[  689.961456][T15919]  file_setxattr+0x1d9/0x2b0
[  689.961488][T15919]  path_setxattrat+0x3cc/0x450
[  689.961520][T15919]  ? __pfx_path_setxattrat+0x10/0x10
[  689.961571][T15919]  ? ksys_write+0x242/0x270
[  689.961612][T15919]  ? __pfx_ksys_write+0x10/0x10
[  689.961647][T15919]  __x64_sys_fsetxattr+0xbc/0xe0
[  689.961680][T15919]  do_syscall_64+0x166/0x520
[  689.961704][T15919]  ? trace_irq_disable+0x3b/0x140
[  689.961725][T15919]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.961745][T15919]  ? clear_bhb_loop+0x70/0xc0
[  689.961771][T15919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.961791][T15919] RIP: 0033:0x7f7fdad9e159
[  689.961812][T15919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  689.961828][T15919] RSP: 002b:00007f7fdbbe6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  689.961851][T15919] RAX: ffffffffffffffda RBX: 00007f7fdb025fa0 RCX: 00007f7fdad9e159
[  689.961867][T15919] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  689.961879][T15919] RBP: 00007f7fdbbe6090 R08: 0000000000000000 R09: 0000000000000000
[  689.961891][T15919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  689.961903][T15919] R13: 00007f7fdb026038 R14: 00007f7fdb025fa0 R15: 00007f7fdb14fa48
[  689.961937][T15919]  </TASK>
[  690.031662][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  690.135285][   T25] usb 10-1: Using ep0 maxpacket: 8
[  690.142376][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  690.147372][   T25] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  690.191374][T12897] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  690.214837][T12897] usb 4-1: device descriptor read/8, error -71
[  690.220940][   T25] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7
[  690.251649][ T6817] dvb-usb: bulk message failed: -22 (1/0)
[  690.291883][   T25] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  690.291916][   T25] usb 10-1: Product: syz
[  690.291931][   T25] usb 10-1: Manufacturer: syz
[  690.291946][   T25] usb 10-1: SerialNumber: syz
[  690.321914][T12897] usb usb4-port1: unable to enumerate USB device
[  690.361609][T12897] dvb-usb: bulk message failed: -22 (1/0)
[  690.390365][T15931] syzkaller0: entered promiscuous mode
[  690.390390][T15931] syzkaller0: entered allmulticast mode
[  690.471878][T12897] dvb-usb: bulk message failed: -22 (1/0)
[  690.512004][ T6817] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[  690.582993][T12897] dvb-usb: bulk message failed: -22 (1/0)
[  690.628240][   T25] usb 10-1: Handspring Visor / Palm OS: port 0, is for unknown use
[  690.628269][   T25] usb 10-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  690.628288][   T25] usb 10-1: Handspring Visor / Palm OS: Number of ports: 2
[  690.669034][ T6817] usb 1-1: unable to get BOS descriptor or descriptor too short
[  690.669704][ T6817] usb 1-1: not running at top speed; connect to a high speed hub
[  690.669739][ T6817] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  690.669775][ T6817] usb 1-1: too many configurations: 17, using maximum allowed: 8
[  690.671478][ T6817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  690.671522][ T6817] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  690.672497][ T6817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  690.672536][ T6817] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  690.673483][ T6817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  690.673523][ T6817] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  690.674600][ T6817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  690.674639][ T6817] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  690.675612][ T6817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  690.675652][ T6817] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  690.676593][ T6817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  690.676631][ T6817] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  690.677555][ T6817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  690.677601][ T6817] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  690.678514][ T6817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  690.678553][ T6817] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  690.683389][ T6817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.683412][ T6817] usb 1-1: Product: syz
[  690.683425][ T6817] usb 1-1: Manufacturer: syz
[  690.683437][ T6817] usb 1-1: SerialNumber: syz
[  690.692067][T12897] dvb-usb: bulk message failed: -22 (1/0)
[  690.759637][T12897] usb 2-1: USB disconnect, device number 104
[  690.928601][T15925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.947002][   T25] usb 10-1: palm_os_3_probe - error -110 getting bytes available request
[  690.947167][   T25] visor 10-1:1.0: Handspring Visor / Palm OS converter detected
[  690.948011][T15925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.999965][   T25] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  691.042971][ T6817] usb 1-1: USB disconnect, device number 81
[  691.094378][T12897] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  691.095540][   T25] usb 10-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  691.257320][T15938] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2802'.
[  691.257348][T15938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  691.363522][T15942] syzkaller0: entered promiscuous mode
[  691.363546][T15942] syzkaller0: entered allmulticast mode
[  691.368745][T15942] FAULT_INJECTION: forcing a failure.
[  691.368745][T15942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  691.368770][T15942] CPU: 0 UID: 0 PID: 15942 Comm: syz.1.2803 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  691.368787][T15942] Tainted: [L]=SOFTLOCKUP
[  691.368792][T15942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  691.368799][T15942] Call Trace:
[  691.368804][T15942]  <TASK>
[  691.368811][T15942]  dump_stack_lvl+0xe8/0x150
[  691.368833][T15942]  should_fail_ex+0x410/0x560
[  691.368850][T15942]  _copy_from_iter+0x1d3/0x1660
[  691.368868][T15942]  ? _copy_from_iter+0x21b/0x1660
[  691.368882][T15942]  ? __pfx__copy_from_iter+0x10/0x10
[  691.368898][T15942]  ? __pfx__copy_from_iter+0x10/0x10
[  691.368916][T15942]  copy_page_from_iter+0x219/0x2d0
[  691.368932][T15942]  skb_copy_datagram_from_iter+0x2f4/0x720
[  691.368956][T15942]  packet_sendmsg+0x35e2/0x4f80
[  691.368968][T15942]  ? up_write+0x19d/0x4a0
[  691.368989][T15942]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  691.369014][T15942]  ? lock_acquire+0x115/0x350
[  691.369027][T15942]  ? __lock_acquire+0x747/0x2de0
[  691.369055][T15942]  ? __pfx_packet_sendmsg+0x10/0x10
[  691.369074][T15942]  ? aa_sk_perm+0x713/0x900
[  691.369095][T15942]  ? __lock_acquire+0x747/0x2de0
[  691.369119][T15942]  ? debug_mutex_wake_waiter+0x56/0x230
[  691.369147][T15942]  ? __pfx_aa_sk_perm+0x10/0x10
[  691.369173][T15942]  ? aa_sock_msg_perm+0x144/0x210
[  691.369199][T15942]  ? apparmor_socket_sendmsg+0x98/0x360
[  691.369213][T15942]  ? __pfx_packet_sendmsg+0x10/0x10
[  691.369229][T15942]  sock_sendmsg_nosec+0x13a/0x180
[  691.369244][T15942]  ____sys_sendmsg+0x54e/0x850
[  691.369263][T15942]  ? __pfx_____sys_sendmsg+0x10/0x10
[  691.369284][T15942]  ? import_iovec+0x73/0xa0
[  691.369300][T15942]  ___sys_sendmsg+0x2a5/0x360
[  691.369315][T15942]  ? __lock_acquire+0x747/0x2de0
[  691.369329][T15942]  ? __pfx____sys_sendmsg+0x10/0x10
[  691.369364][T15942]  ? __fget_files+0x2a/0x420
[  691.369379][T15942]  ? __fget_files+0x3a2/0x420
[  691.369400][T15942]  __x64_sys_sendmsg+0x1b1/0x290
[  691.369429][T15942]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  691.369457][T15942]  do_syscall_64+0x166/0x520
[  691.369471][T15942]  ? trace_irq_disable+0x3b/0x140
[  691.369482][T15942]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.369495][T15942]  ? clear_bhb_loop+0x70/0xc0
[  691.369509][T15942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.369521][T15942] RIP: 0033:0x7fd0d259e159
[  691.369533][T15942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.369550][T15942] RSP: 002b:00007fd0d33f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  691.369565][T15942] RAX: ffffffffffffffda RBX: 00007fd0d2825fa0 RCX: 00007fd0d259e159
[  691.369574][T15942] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  691.369582][T15942] RBP: 00007fd0d33f0090 R08: 0000000000000000 R09: 0000000000000000
[  691.369590][T15942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  691.369597][T15942] R13: 00007fd0d2826038 R14: 00007fd0d2825fa0 R15: 00007fd0d294fa48
[  691.369616][T15942]  </TASK>
[  691.491891][ T6817] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  691.649090][ T6817] usb 5-1: Using ep0 maxpacket: 8
[  691.656071][ T6817] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  691.660163][ T6817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.679129][ T6817] usb 5-1: config 0 descriptor??
[  691.887760][ T6817] usb 5-1: string descriptor 0 read error: -71
[  691.887800][ T6817] uvcvideo 5-1:0.0: Found multiple Units with ID 1
[  691.887864][ T6817] uvcvideo 5-1:0.0: Found UVC 0.00 device <unnamed> (2833:0201)
[  691.888680][ T6817] uvcvideo 5-1:0.0: No valid video chain found.
[  691.920677][ T6817] usb 5-1: USB disconnect, device number 79
[  692.291402][T12897] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  692.445994][T12897] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  692.447610][T12897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  692.447644][T12897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  692.447659][T12897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  692.447672][T12897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  692.447697][T12897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.462992][T12897] usb 2-1: config 0 descriptor??
[  692.589593][T15958] FAULT_INJECTION: forcing a failure.
[  692.589593][T15958] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  692.589618][T15958] CPU: 0 UID: 0 PID: 15958 Comm: syz.4.2807 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  692.589636][T15958] Tainted: [L]=SOFTLOCKUP
[  692.589641][T15958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  692.589648][T15958] Call Trace:
[  692.589654][T15958]  <TASK>
[  692.589660][T15958]  dump_stack_lvl+0xe8/0x150
[  692.589682][T15958]  should_fail_ex+0x410/0x560
[  692.589699][T15958]  _copy_from_user+0x2d/0xb0
[  692.589715][T15958]  snd_seq_oss_write+0x382/0x950
[  692.589741][T15958]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  692.589764][T15958]  ? security_file_permission+0x75/0x260
[  692.589780][T15958]  odev_write+0x5a/0x80
[  692.589795][T15958]  vfs_writev+0x4bb/0x990
[  692.589814][T15958]  ? __pfx_odev_write+0x10/0x10
[  692.589842][T15958]  ? __pfx_vfs_writev+0x10/0x10
[  692.589879][T15958]  ? __fget_files+0x2a/0x420
[  692.589909][T15958]  ? __fget_files+0x3a2/0x420
[  692.589929][T15958]  ? __fget_files+0x2a/0x420
[  692.589961][T15958]  do_writev+0x154/0x2e0
[  692.589986][T15958]  ? __pfx_do_writev+0x10/0x10
[  692.590018][T15958]  do_syscall_64+0x166/0x520
[  692.590042][T15958]  ? trace_irq_disable+0x3b/0x140
[  692.590059][T15958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.590080][T15958]  ? clear_bhb_loop+0x70/0xc0
[  692.590103][T15958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.590122][T15958] RIP: 0033:0x7f7e5119e159
[  692.590141][T15958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  692.590158][T15958] RSP: 002b:00007f7e4f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  692.590180][T15958] RAX: ffffffffffffffda RBX: 00007f7e51425fa0 RCX: 00007f7e5119e159
[  692.590193][T15958] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003
[  692.590201][T15958] RBP: 00007f7e4f3f6090 R08: 0000000000000000 R09: 0000000000000000
[  692.590209][T15958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  692.590216][T15958] R13: 00007f7e51426038 R14: 00007f7e51425fa0 R15: 00007f7e5154fa48
[  692.590239][T15958]  </TASK>
[  692.740526][T12897] usb 2-1: USB disconnect, device number 105
[  692.956332][ T6817] usb 10-1: USB disconnect, device number 101
[  693.013994][ T6817] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  693.028750][ T6817] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  693.054552][ T6817] visor 10-1:1.0: device disconnected
[  693.767321][T15968] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2811'.
[  693.877865][   T25] usb 10-1: new high-speed USB device number 102 using dummy_hcd
[  694.026694][   T25] usb 10-1: unable to get BOS descriptor or descriptor too short
[  694.026752][   T25] usb 10-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  694.029506][   T25] usb 10-1: config 63 has an invalid interface number: 66 but max is 0
[  694.029537][   T25] usb 10-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  694.029555][   T25] usb 10-1: config 63 has no interface number 0
[  694.029583][   T25] usb 10-1: config 63 interface 66 has no altsetting 0
[  694.092822][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.092854][   T25] usb 10-1: Product: syz
[  694.092868][   T25] usb 10-1: Manufacturer: syz
[  694.092883][   T25] usb 10-1: SerialNumber: syz
[  694.221469][ T6817] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  694.311626][ T5743] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  694.385761][T15964] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  694.416680][T15966] block device autoloading is deprecated and will be removed.
[  694.420430][   T25] uvcvideo 10-1:63.66: probe with driver uvcvideo failed with error -22
[  694.445090][   T25] usb 10-1: USB disconnect, device number 102
[  694.466359][ T5743] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  694.469009][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.473134][ T5743] usb 2-1: config 0 descriptor??
[  694.601620][ T6817] usb 1-1: Using ep0 maxpacket: 32
[  694.603737][ T6817] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  694.607098][ T6817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.607123][ T6817] usb 1-1: Product: syz
[  694.607160][ T6817] usb 1-1: Manufacturer: syz
[  694.607169][ T6817] usb 1-1: SerialNumber: syz
[  694.610608][ T6817] usb 1-1: config 0 descriptor??
[  694.628684][ T6817] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  694.944421][ T5743] gt683r_led 0003:1770:FF00.0015: unknown main item tag 0x0
[  694.944494][ T5743] gt683r_led 0003:1770:FF00.0015: unknown main item tag 0x0
[  694.944521][ T5743] gt683r_led 0003:1770:FF00.0015: unknown main item tag 0x0
[  694.944549][ T5743] gt683r_led 0003:1770:FF00.0015: unknown main item tag 0x0
[  694.944574][ T5743] gt683r_led 0003:1770:FF00.0015: unknown main item tag 0x0
[  694.944631][ T5743] gt683r_led 0003:1770:FF00.0015: unknown main item tag 0x0
[  694.944667][ T5743] gt683r_led 0003:1770:FF00.0015: unknown main item tag 0x0
[  694.944691][ T5743] gt683r_led 0003:1770:FF00.0015: unknown main item tag 0x0
[  694.944717][ T5743] gt683r_led 0003:1770:FF00.0015: unknown main item tag 0x0
[  694.944748][ T5743] gt683r_led 0003:1770:FF00.0015: unknown main item tag 0x0
[  694.944845][ T5743] gt683r_led 0003:1770:FF00.0015: unbalanced collection at end of report description
[  694.945961][ T5743] gt683r_led 0003:1770:FF00.0015: hid parsing failed
[  694.949594][ T5743] gt683r_led 0003:1770:FF00.0015: probe with driver gt683r_led failed with error -22
[  695.206409][   T25] usb 2-1: USB disconnect, device number 106
[  695.443375][ T5706] usb 10-1: new high-speed USB device number 103 using dummy_hcd
[  695.476959][ T6817] gspca_ov534_9: reg_w failed -71
[  695.591378][ T5706] usb 10-1: Using ep0 maxpacket: 8
[  695.592162][ T5706] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  695.593384][ T5706] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  695.593410][ T5706] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  695.593434][ T5706] usb 10-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  695.593460][ T5706] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024
[  695.593486][ T5706] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024
[  695.593509][ T5706] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  695.593554][ T5706] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.763221][ T6817] gspca_ov534_9: Unknown sensor 0000
[  695.763308][ T6817] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  695.768745][ T6817] usb 1-1: USB disconnect, device number 82
[  695.949637][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2819'.
[  695.978594][ T5706] usb 10-1: GET_CAPABILITIES returned 0
[  695.978650][ T5706] usbtmc 10-1:16.0: can't read capabilities
[  696.095199][T15996] netlink: 'syz.0.2821': attribute type 1 has an invalid length.
[  696.134459][T15997] netlink: 'syz.0.2821': attribute type 1 has an invalid length.
[  696.185821][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.185859][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.185883][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.185905][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.186096][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.186125][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.186150][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.186174][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.186347][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.186372][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.186397][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.186422][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.186446][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.186470][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.186650][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  696.186677][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[  696.200702][   T25] usb 10-1: USB disconnect, device number 103
[  696.348381][T16000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2822'.
[  696.566507][   T30] kauditd_printk_skb: 42 callbacks suppressed
[  696.566538][   T30] audit: type=1800 audit(1789886097.907:4896): pid=16010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2825" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2195 res=0 errno=0
[  696.633032][T16004] FAULT_INJECTION: forcing a failure.
[  696.633032][T16004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  696.633106][T16004] CPU: 0 UID: 0 PID: 16004 Comm: syz.1.2824 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  696.633136][T16004] Tainted: [L]=SOFTLOCKUP
[  696.633144][T16004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  696.633157][T16004] Call Trace:
[  696.633166][T16004]  <TASK>
[  696.633176][T16004]  dump_stack_lvl+0xe8/0x150
[  696.633212][T16004]  should_fail_ex+0x410/0x560
[  696.633243][T16004]  _copy_to_user+0x31/0xb0
[  696.633272][T16004]  simple_read_from_buffer+0xe1/0x170
[  696.633304][T16004]  proc_fail_nth_read+0x1bb/0x230
[  696.633333][T16004]  ? common_file_perm+0x20e/0x2b0
[  696.633364][T16004]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  696.633399][T16004]  ? rw_verify_area+0x24a/0x4c0
[  696.633431][T16004]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  696.633462][T16004]  vfs_read+0x213/0xa80
[  696.633498][T16004]  ? __pfx___mutex_lock+0x10/0x10
[  696.633524][T16004]  ? __pfx_vfs_read+0x10/0x10
[  696.633556][T16004]  ? __fget_files+0x2a/0x420
[  696.633588][T16004]  ? __fget_files+0x3a2/0x420
[  696.633615][T16004]  ? __fget_files+0x2a/0x420
[  696.633652][T16004]  ksys_read+0x150/0x270
[  696.633685][T16004]  ? __pfx_ksys_read+0x10/0x10
[  696.633727][T16004]  do_syscall_64+0x166/0x520
[  696.633752][T16004]  ? trace_irq_disable+0x3b/0x140
[  696.633772][T16004]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.633794][T16004]  ? clear_bhb_loop+0x70/0xc0
[  696.633820][T16004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.633841][T16004] RIP: 0033:0x7fd0d255e98e
[  696.633862][T16004] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  696.633879][T16004] RSP: 002b:00007fd0d33effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  696.633903][T16004] RAX: ffffffffffffffda RBX: 00007fd0d33f06c0 RCX: 00007fd0d255e98e
[  696.633918][T16004] RDX: 000000000000000f RSI: 00007fd0d33f00a0 RDI: 000000000000000c
[  696.633931][T16004] RBP: 00007fd0d33f0090 R08: 0000000000000000 R09: 0000000000000000
[  696.633944][T16004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  696.633957][T16004] R13: 00007fd0d2826038 R14: 00007fd0d2825fa0 R15: 00007fd0d294fa48
[  696.633992][T16004]  </TASK>
[  696.718964][T16018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.719394][T16018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.941675][ T6817] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  696.949469][   T30] audit: type=1800 audit(1789886098.287:4897): pid=16021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2830" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2108 res=0 errno=0
[  697.071504][ T6817] usb 1-1: device descriptor read/64, error -71
[  697.159233][T16029] sctp: [Deprecated]: syz.3.2832 (pid 16029) Use of int in max_burst socket option deprecated.
[  697.159233][T16029] Use struct sctp_assoc_value instead
[  697.159294][T16029] sctp: [Deprecated]: syz.3.2832 (pid 16029) Use of int in max_burst socket option deprecated.
[  697.159294][T16029] Use struct sctp_assoc_value instead
[  697.159340][T16029] sctp: [Deprecated]: syz.3.2832 (pid 16029) Use of int in max_burst socket option deprecated.
[  697.159340][T16029] Use struct sctp_assoc_value instead
[  697.159386][T16029] sctp: [Deprecated]: syz.3.2832 (pid 16029) Use of int in max_burst socket option deprecated.
[  697.159386][T16029] Use struct sctp_assoc_value instead
[  697.159431][T16029] sctp: [Deprecated]: syz.3.2832 (pid 16029) Use of int in max_burst socket option deprecated.
[  697.159431][T16029] Use struct sctp_assoc_value instead
[  697.159477][T16029] sctp: [Deprecated]: syz.3.2832 (pid 16029) Use of int in max_burst socket option deprecated.
[  697.159477][T16029] Use struct sctp_assoc_value instead
[  697.159522][T16029] sctp: [Deprecated]: syz.3.2832 (pid 16029) Use of int in max_burst socket option deprecated.
[  697.159522][T16029] Use struct sctp_assoc_value instead
[  697.159578][T16029] sctp: [Deprecated]: syz.3.2832 (pid 16029) Use of int in max_burst socket option deprecated.
[  697.159578][T16029] Use struct sctp_assoc_value instead
[  697.159624][T16029] sctp: [Deprecated]: syz.3.2832 (pid 16029) Use of int in max_burst socket option deprecated.
[  697.159624][T16029] Use struct sctp_assoc_value instead
[  697.159670][T16029] sctp: [Deprecated]: syz.3.2832 (pid 16029) Use of int in max_burst socket option deprecated.
[  697.159670][T16029] Use struct sctp_assoc_value instead
[  697.261494][ T5743] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  697.314908][ T6817] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  697.424022][ T5743] usb 2-1: Using ep0 maxpacket: 16
[  697.426131][ T5743] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  697.427339][ T5743] usb 2-1: config 0 interface 0 has no altsetting 0
[  697.427379][ T5743] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.430767][ T5743] usb 2-1: config 0 descriptor??
[  697.443579][ T6817] usb 1-1: device descriptor read/64, error -71
[  697.552243][ T6817] usb usb1-port1: attempt power cycle
[  697.879147][T16030] xt_HMARK: spi-set and port-set can't be combined
[  697.892313][ T6817] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  697.912299][ T6817] usb 1-1: device descriptor read/8, error -71
[  697.921148][T16042] syzkaller0: entered promiscuous mode
[  697.921172][T16042] syzkaller0: entered allmulticast mode
[  697.947099][T16042] 0: reclassify loop, rule prio 0, protocol 800
[  698.151632][ T6817] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  698.174374][ T6817] usb 1-1: device descriptor read/8, error -71
[  698.281898][ T6817] usb usb1-port1: unable to enumerate USB device
[  698.318805][T16048] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2837'.
[  698.344823][T16048] fuse: Bad value for 'user_id'
[  698.344847][T16048] fuse: Bad value for 'user_id'
[  698.350978][ T5743] usbhid 2-1:0.0: can't add hid device: -71
[  698.351093][ T5743] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  698.361132][ T5743] usb 2-1: USB disconnect, device number 107
[  698.539864][T16052] FAULT_INJECTION: forcing a failure.
[  698.539864][T16052] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  698.539902][T16052] CPU: 0 UID: 0 PID: 16052 Comm: syz.4.2840 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  698.539929][T16052] Tainted: [L]=SOFTLOCKUP
[  698.539937][T16052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  698.539958][T16052] Call Trace:
[  698.539967][T16052]  <TASK>
[  698.539977][T16052]  dump_stack_lvl+0xe8/0x150
[  698.540011][T16052]  should_fail_ex+0x410/0x560
[  698.540039][T16052]  _copy_from_user+0x2d/0xb0
[  698.540067][T16052]  snd_seq_oss_write+0x6e2/0x950
[  698.540110][T16052]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  698.540149][T16052]  ? security_file_permission+0x75/0x260
[  698.540175][T16052]  odev_write+0x5a/0x80
[  698.540202][T16052]  vfs_writev+0x4bb/0x990
[  698.540229][T16052]  ? __pfx_odev_write+0x10/0x10
[  698.540260][T16052]  ? __pfx_vfs_writev+0x10/0x10
[  698.540297][T16052]  ? __fget_files+0x2a/0x420
[  698.540327][T16052]  ? __fget_files+0x3a2/0x420
[  698.540353][T16052]  ? __fget_files+0x2a/0x420
[  698.540387][T16052]  do_writev+0x154/0x2e0
[  698.540414][T16052]  ? __pfx_do_writev+0x10/0x10
[  698.540448][T16052]  do_syscall_64+0x166/0x520
[  698.540472][T16052]  ? trace_irq_disable+0x3b/0x140
[  698.540492][T16052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.540513][T16052]  ? clear_bhb_loop+0x70/0xc0
[  698.540538][T16052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.540559][T16052] RIP: 0033:0x7f7e5119e159
[  698.540579][T16052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  698.540595][T16052] RSP: 002b:00007f7e4f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  698.540620][T16052] RAX: ffffffffffffffda RBX: 00007f7e51425fa0 RCX: 00007f7e5119e159
[  698.540636][T16052] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003
[  698.540649][T16052] RBP: 00007f7e4f3f6090 R08: 0000000000000000 R09: 0000000000000000
[  698.540662][T16052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  698.540675][T16052] R13: 00007f7e51426038 R14: 00007f7e51425fa0 R15: 00007f7e5154fa48
[  698.540706][T16052]  </TASK>
[  698.955340][T16060] fuse: Bad value for 'group_id'
[  698.955364][T16060] fuse: Bad value for 'group_id'
[  699.029976][   T30] audit: type=1800 audit(1789886100.367:4898): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2847" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2458 res=0 errno=0
[  699.116368][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2846'.
[  699.491620][ T5706] usb 2-1: new full-speed USB device number 108 using dummy_hcd
[  699.621356][ T5706] usb 2-1: device descriptor read/64, error -71
[  699.784524][T16084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2852'.
[  699.864552][ T5706] usb 2-1: new full-speed USB device number 109 using dummy_hcd
[  699.870719][T16087] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2853'.
[  699.991600][ T5706] usb 2-1: device descriptor read/64, error -71
[  700.101661][ T5706] usb usb2-port1: attempt power cycle
[  700.363893][   T30] audit: type=1800 audit(1789886101.707:4899): pid=16101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2860" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2475 res=0 errno=0
[  700.438287][T16101] batadv_slave_1: entered promiscuous mode
[  700.448521][T16100] batadv_slave_1: left promiscuous mode
[  700.451530][ T5706] usb 2-1: new full-speed USB device number 110 using dummy_hcd
[  700.482279][ T5706] usb 2-1: device descriptor read/8, error -71
[  700.602154][T16107] syzkaller0: entered allmulticast mode
[  700.627018][T13883] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  700.627347][   T59] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  700.627385][   T59] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  700.627417][   T59] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  700.688823][T16109] FAULT_INJECTION: forcing a failure.
[  700.688823][T16109] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  700.688858][T16109] CPU: 1 UID: 0 PID: 16109 Comm: syz.4.2863 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  700.688892][T16109] Tainted: [L]=SOFTLOCKUP
[  700.688903][T16109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  700.688914][T16109] Call Trace:
[  700.688922][T16109]  <TASK>
[  700.688930][T16109]  dump_stack_lvl+0xe8/0x150
[  700.688961][T16109]  should_fail_ex+0x410/0x560
[  700.688996][T16109]  _copy_from_user+0x2d/0xb0
[  700.689019][T16109]  snd_seq_oss_write+0x6e2/0x950
[  700.689060][T16109]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  700.689096][T16109]  ? security_file_permission+0x75/0x260
[  700.689120][T16109]  odev_write+0x5a/0x80
[  700.689142][T16109]  vfs_writev+0x4bb/0x990
[  700.689165][T16109]  ? __pfx_odev_write+0x10/0x10
[  700.689194][T16109]  ? __pfx_vfs_writev+0x10/0x10
[  700.689225][T16109]  ? __fget_files+0x2a/0x420
[  700.689249][T16109]  ? __fget_files+0x3a2/0x420
[  700.689270][T16109]  ? __fget_files+0x2a/0x420
[  700.689300][T16109]  do_writev+0x154/0x2e0
[  700.689322][T16109]  ? __pfx_do_writev+0x10/0x10
[  700.689350][T16109]  do_syscall_64+0x166/0x520
[  700.689370][T16109]  ? trace_irq_disable+0x3b/0x140
[  700.689387][T16109]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.689405][T16109]  ? clear_bhb_loop+0x70/0xc0
[  700.689426][T16109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.689443][T16109] RIP: 0033:0x7f7e5119e159
[  700.689461][T16109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  700.689477][T16109] RSP: 002b:00007f7e4f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  700.689498][T16109] RAX: ffffffffffffffda RBX: 00007f7e51425fa0 RCX: 00007f7e5119e159
[  700.689512][T16109] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003
[  700.689524][T16109] RBP: 00007f7e4f3f6090 R08: 0000000000000000 R09: 0000000000000000
[  700.689535][T16109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  700.689545][T16109] R13: 00007f7e51426038 R14: 00007f7e51425fa0 R15: 00007f7e5154fa48
[  700.689572][T16109]  </TASK>
[  700.731741][ T5706] usb 2-1: new full-speed USB device number 111 using dummy_hcd
[  700.774898][ T5706] usb 2-1: device descriptor read/8, error -71
[  700.933995][ T5706] usb usb2-port1: unable to enumerate USB device
[  701.181372][ T6817] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  701.334089][ T6817] usb 4-1: unable to get BOS descriptor or descriptor too short
[  701.334191][ T6817] usb 4-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  701.335386][ T6817] usb 4-1: config 63 has an invalid interface number: 66 but max is 0
[  701.335411][ T6817] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  701.335430][ T6817] usb 4-1: config 63 has no interface number 0
[  701.335461][ T6817] usb 4-1: config 63 interface 66 has no altsetting 0
[  701.338320][ T6817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.338347][ T6817] usb 4-1: Product: syz
[  701.338362][ T6817] usb 4-1: Manufacturer: syz
[  701.338377][ T6817] usb 4-1: SerialNumber: syz
[  701.502862][   T30] audit: type=1800 audit(1789886102.847:4900): pid=16124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2867" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2155 res=0 errno=0
[  701.665083][T16114] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  701.701115][ T6817] uvcvideo 4-1:63.66: probe with driver uvcvideo failed with error -22
[  701.752422][ T6817] usb 4-1: USB disconnect, device number 100
[  701.929394][T16129] syzkaller0: entered promiscuous mode
[  701.929420][T16129] syzkaller0: entered allmulticast mode
[  701.944383][T16129] team_slave_0: entered allmulticast mode
[  702.319737][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2873'.
[  702.646833][T16143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2877'.
[  702.646869][T16143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2877'.
[  702.681594][ T6817] usb 2-1: new full-speed USB device number 112 using dummy_hcd
[  702.702241][   T30] audit: type=1326 audit(1789886104.037:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdad9e159 code=0x7ffc0000
[  702.702303][   T30] audit: type=1326 audit(1789886104.037:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdad9e159 code=0x7ffc0000
[  702.702348][   T30] audit: type=1326 audit(1789886104.037:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdad9e159 code=0x7ffc0000
[  702.702417][   T30] audit: type=1326 audit(1789886104.037:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdad9e159 code=0x7ffc0000
[  702.702461][   T30] audit: type=1326 audit(1789886104.037:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7fdad9e159 code=0x7ffc0000
[  702.702506][   T30] audit: type=1326 audit(1789886104.037:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdad9e159 code=0x7ffc0000
[  702.702551][   T30] audit: type=1326 audit(1789886104.037:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdad9e159 code=0x7ffc0000
[  702.702595][   T30] audit: type=1326 audit(1789886104.037:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdad9e159 code=0x7ffc0000
[  702.702637][   T30] audit: type=1326 audit(1789886104.037:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f7fdad9e159 code=0x7ffc0000
[  702.702683][   T30] audit: type=1326 audit(1789886104.037:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fdad9e159 code=0x7ffc0000
[  702.857806][ T6817] usb 2-1: unable to get BOS descriptor or descriptor too short
[  702.867114][ T6817] usb 2-1: not running at top speed; connect to a high speed hub
[  702.867148][ T6817] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  702.867181][ T6817] usb 2-1: too many configurations: 17, using maximum allowed: 8
[  702.870427][ T6817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  702.870471][ T6817] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  702.872953][ T6817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  702.873017][ T6817] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  702.876387][ T6817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  702.876429][ T6817] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  702.877903][ T6817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  702.877945][ T6817] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  702.884102][ T6817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  702.884147][ T6817] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  702.885599][ T6817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  702.885641][ T6817] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  702.897316][ T6817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  702.897362][ T6817] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  702.900000][ T6817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  702.900045][ T6817] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  702.914795][ T6817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.914821][ T6817] usb 2-1: Product: syz
[  702.914834][ T6817] usb 2-1: Manufacturer: syz
[  702.914847][ T6817] usb 2-1: SerialNumber: syz
[  703.107810][T16147] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  703.172032][ T5743] usb 1-1: new full-speed USB device number 87 using dummy_hcd
[  703.188838][T16137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.209522][T16137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.312851][ T5743] usb 1-1: device descriptor read/64, error -71
[  703.356342][ T6817] usb 2-1: USB disconnect, device number 112
[  703.379568][T16154] syzkaller0: entered promiscuous mode
[  703.391821][  T678] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  703.393575][  T678] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  703.393615][  T678] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  703.393649][  T678] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  703.551477][ T5743] usb 1-1: new full-speed USB device number 88 using dummy_hcd
[  703.681751][ T5743] usb 1-1: device descriptor read/64, error -71
[  703.791690][ T5743] usb usb1-port1: attempt power cycle
[  703.981401][ T6817] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  704.108687][T16163] FAULT_INJECTION: forcing a failure.
[  704.108687][T16163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  704.108726][T16163] CPU: 1 UID: 0 PID: 16163 Comm: syz.9.2883 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  704.108754][T16163] Tainted: [L]=SOFTLOCKUP
[  704.108761][T16163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  704.108774][T16163] Call Trace:
[  704.108783][T16163]  <TASK>
[  704.108792][T16163]  dump_stack_lvl+0xe8/0x150
[  704.108828][T16163]  should_fail_ex+0x410/0x560
[  704.108858][T16163]  _copy_from_user+0x2d/0xb0
[  704.108886][T16163]  snd_seq_oss_write+0x382/0x950
[  704.108934][T16163]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  704.108978][T16163]  ? security_file_permission+0x75/0x260
[  704.109005][T16163]  odev_write+0x5a/0x80
[  704.109044][T16163]  vfs_writev+0x4bb/0x990
[  704.109071][T16163]  ? __pfx_odev_write+0x10/0x10
[  704.109102][T16163]  ? __pfx_vfs_writev+0x10/0x10
[  704.109142][T16163]  ? __fget_files+0x2a/0x420
[  704.109174][T16163]  ? __fget_files+0x3a2/0x420
[  704.109197][T16163]  ? __fget_files+0x2a/0x420
[  704.109233][T16163]  do_writev+0x154/0x2e0
[  704.109258][T16163]  ? __pfx_do_writev+0x10/0x10
[  704.109293][T16163]  do_syscall_64+0x166/0x520
[  704.109318][T16163]  ? trace_irq_disable+0x3b/0x140
[  704.109339][T16163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.109361][T16163]  ? clear_bhb_loop+0x70/0xc0
[  704.109386][T16163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.109406][T16163] RIP: 0033:0x7f1971b9e159
[  704.109427][T16163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  704.109445][T16163] RSP: 002b:00007f196fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  704.109468][T16163] RAX: ffffffffffffffda RBX: 00007f1971e25fa0 RCX: 00007f1971b9e159
[  704.109483][T16163] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003
[  704.109497][T16163] RBP: 00007f196fdf6090 R08: 0000000000000000 R09: 0000000000000000
[  704.109510][T16163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  704.109522][T16163] R13: 00007f1971e26038 R14: 00007f1971e25fa0 R15: 00007f1971f4fa48
[  704.109555][T16163]  </TASK>
[  704.131607][ T5743] usb 1-1: new full-speed USB device number 89 using dummy_hcd
[  704.131801][ T6817] usb 4-1: Using ep0 maxpacket: 8
[  704.135865][ T6817] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  704.140978][ T6817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.141000][ T6817] usb 4-1: Product: syz
[  704.141013][ T6817] usb 4-1: Manufacturer: syz
[  704.141026][ T6817] usb 4-1: SerialNumber: syz
[  704.159310][ T6817] usb 4-1: config 0 descriptor??
[  704.165414][ T5743] usb 1-1: device descriptor read/8, error -71
[  704.178940][ T6817] gspca_main: sq930x-2.14.0 probing 2770:930c
[  704.401983][ T5743] usb 1-1: new full-speed USB device number 90 using dummy_hcd
[  704.430264][ T5743] usb 1-1: device descriptor read/8, error -71
[  704.531733][ T5743] usb usb1-port1: unable to enumerate USB device
[  704.556371][T16169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2886'.
[  704.811739][ T5743] wiimote 0005:057E:0306.0016: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  704.812090][ T5743] wiimote 0005:057E:0306.0016: New device registered
[  704.833386][ T6817] gspca_sq930x: reg_w 0305 fd00 failed -71
[  704.874127][T16177] x_tables: duplicate underflow at hook 1
[  705.053315][ T6817] gspca_sq930x: Sensor ov9630 not yet treated
[  705.053416][ T6817] sq930x 4-1:0.0: probe with driver sq930x failed with error -22
[  705.057802][ T6817] usb 4-1: USB disconnect, device number 101
[  705.211886][ T5678] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  705.361396][ T5678] usb 2-1: Using ep0 maxpacket: 16
[  705.362154][ T5678] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  705.363535][ T5678] usb 2-1: config index 0 descriptor too short (expected 65407, got 27)
[  705.363560][ T5678] usb 2-1: config 254 has too many interfaces: 255, using maximum allowed: 32
[  705.363580][ T5678] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[  705.363597][ T5678] usb 2-1: config 254 has 0 interfaces, different from the descriptor's value: 255
[  705.367121][ T5678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.367418][ T5678] usb 2-1: Product: syz
[  705.367435][ T5678] usb 2-1: Manufacturer: syz
[  705.369056][ T5678] usb 2-1: SerialNumber: syz
[  705.668799][T16173] wiimote 0005:057E:0306.0016: Remote error 255 on req 255
[  705.854441][ T5743] wiimote 0005:057E:0306.0016: detected device: Nintendo Wii Remote (Gen 1)
[  706.036164][ T5743] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0016/input/input48
[  706.148646][ T5743] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0016/input/input49
[  706.174049][ T5743] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0016/input/input47
[  706.220482][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'.
[  706.251699][   T25] usb 10-1: new high-speed USB device number 104 using dummy_hcd
[  706.450517][   T25] usb 10-1: unable to get BOS descriptor or descriptor too short
[  706.450576][   T25] usb 10-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  706.470863][   T25] usb 10-1: config 63 has an invalid interface number: 66 but max is 0
[  706.470894][   T25] usb 10-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  706.470913][   T25] usb 10-1: config 63 has no interface number 0
[  706.470945][   T25] usb 10-1: config 63 interface 66 has no altsetting 0
[  706.532873][   T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.532906][   T25] usb 10-1: Product: syz
[  706.532920][   T25] usb 10-1: Manufacturer: syz
[  706.532934][   T25] usb 10-1: SerialNumber: syz
[  706.828553][T16190] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  706.864465][   T25] uvcvideo 10-1:63.66: probe with driver uvcvideo failed with error -22
[  706.890665][   T25] usb 10-1: USB disconnect, device number 104
[  706.985146][ T5678] usb 2-1: USB disconnect, device number 113
[  707.075728][ T6885] usb 4-1: new full-speed USB device number 102 using dummy_hcd
[  707.211334][ T6885] usb 4-1: device descriptor read/64, error -71
[  707.461374][ T6885] usb 4-1: new full-speed USB device number 103 using dummy_hcd
[  707.591428][ T6885] usb 4-1: device descriptor read/64, error -71
[  707.669041][T16173] wiimote 0005:057E:0306.0016: Device removed
[  707.671008][T16234] netlink: 23 bytes leftover after parsing attributes in process `syz.9.2901'.
[  707.701697][ T6885] usb usb4-port1: attempt power cycle
[  707.976817][T16230] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2899'.
[  708.041450][ T6885] usb 4-1: new full-speed USB device number 104 using dummy_hcd
[  708.062200][ T6885] usb 4-1: device descriptor read/8, error -71
[  708.131386][   T25] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  708.291712][   T25] usb 5-1: Using ep0 maxpacket: 8
[  708.292798][   T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  708.294541][   T25] usb 5-1: config 0 interface 0 altsetting 168 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  708.294575][   T25] usb 5-1: config 0 interface 0 has no altsetting 0
[  708.294610][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.302332][ T6885] usb 4-1: new full-speed USB device number 105 using dummy_hcd
[  708.306523][   T25] usb 5-1: config 0 descriptor??
[  708.322108][ T6885] usb 4-1: device descriptor read/8, error -71
[  708.438950][ T6885] usb usb4-port1: unable to enumerate USB device
[  708.683884][T16248] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (106990014240 ns) > initial count (39680 ns). Using initial count to start timer.
[  709.428604][T16254] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  709.452869][   T25] usbhid 5-1:0.0: can't add hid device: -71
[  709.452999][   T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  709.486493][   T25] usb 5-1: USB disconnect, device number 80
[  709.619471][T16260] syzkaller0: entered promiscuous mode
[  709.619496][T16260] syzkaller0: entered allmulticast mode
[  709.633289][T16260] 0: reclassify loop, rule prio 0, protocol 800
[  709.814724][T12899] usb 10-1: new high-speed USB device number 105 using dummy_hcd
[  709.971337][T12899] usb 10-1: Using ep0 maxpacket: 32
[  709.973852][T12899] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  709.975200][T12899] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 75, changing to 7
[  709.975235][T12899] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 512, setting to 64
[  709.975263][T12899] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  709.975286][T12899] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  709.975307][T12899] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  709.975327][T12899] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  709.975347][T12899] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  709.975370][T12899] usb 10-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[  709.978317][T12899] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.978344][T12899] usb 10-1: Product: 십茵臷콂陖⧷꣑丗꩐㰱ྋꪜ鞆乌ℑᒝҴ簈엉恎Е䳹夓䌭먭嬷躝냑㝀괔㇭ᑉᚌ唦䓬鬁ꉣჷ⍨ⵝ㫷芵૚璔Ý㰩
[  709.978366][T12899] usb 10-1: Manufacturer: 頱⛗➊呼Ე氌塯匶㣩ꍞ╺ꏖ쁳ᦫይ쌀ƺඣ嬰벡㟾䉁ࡌ킺ꇼ鈂荚풐뱞괜缛⇰鴬随膡喂긜苝猴㸀ᓼ꾔⨹囮㠫꧅譤ⳣŁꐫ玡窤佘㊥ﾘ캝䍅掶棅爛蹂⚧簍⿠砑଱⿩憨너옺澃㝜ｙ┝⸮㝱놏㒬ﶵഷ䬴屪䝗蚾ۨ
[  709.978394][T12899] usb 10-1: SerialNumber: ఄ
[  710.101522][ T5678] usb 5-1: new full-speed USB device number 81 using dummy_hcd
[  710.211440][ T6817] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  710.254672][ T5678] usb 5-1: unable to get BOS descriptor or descriptor too short
[  710.255200][ T5678] usb 5-1: not running at top speed; connect to a high speed hub
[  710.255232][ T5678] usb 5-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  710.255268][ T5678] usb 5-1: too many configurations: 17, using maximum allowed: 8
[  710.256264][ T5678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  710.256310][ T5678] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  710.257290][ T5678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  710.257334][ T5678] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  710.258469][ T5678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  710.258513][ T5678] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  710.259517][ T5678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  710.259562][ T5678] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  710.260771][ T5678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  710.260817][ T5678] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  710.262328][ T5678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  710.262370][ T5678] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  710.263297][ T5678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  710.263335][ T5678] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  710.264258][ T5678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  710.264296][ T5678] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  710.266260][ T5678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.266280][ T5678] usb 5-1: Product: syz
[  710.266294][ T5678] usb 5-1: Manufacturer: syz
[  710.266306][ T5678] usb 5-1: SerialNumber: syz
[  710.364737][ T6817] usb 1-1: unable to get BOS descriptor set
[  710.364851][ T6817] usb 1-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40
[  710.369238][ T6817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.369262][ T6817] usb 1-1: Product: syz
[  710.369275][ T6817] usb 1-1: Manufacturer: syz
[  710.369377][ T6817] usb 1-1: SerialNumber: syz
[  710.489649][T16262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  710.490194][T16262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  710.566931][T12899] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  710.585389][ T5678] usb 5-1: USB disconnect, device number 81
[  710.684266][ T6817] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  710.685136][ T6817] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2
[  710.710461][T12899] usb 10-1: USB disconnect, device number 105
[  710.727591][ T6817] usb 1-1: USB disconnect, device number 91
[  710.914507][T16275] FAULT_INJECTION: forcing a failure.
[  710.914507][T16275] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  710.914534][T16275] CPU: 1 UID: 0 PID: 16275 Comm: syz.3.2912 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  710.914551][T16275] Tainted: [L]=SOFTLOCKUP
[  710.914556][T16275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  710.914564][T16275] Call Trace:
[  710.914569][T16275]  <TASK>
[  710.914575][T16275]  dump_stack_lvl+0xe8/0x150
[  710.914598][T16275]  should_fail_ex+0x410/0x560
[  710.914615][T16275]  _copy_from_user+0x2d/0xb0
[  710.914631][T16275]  snd_seq_oss_write+0x6e2/0x950
[  710.914657][T16275]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  710.914680][T16275]  ? security_file_permission+0x75/0x260
[  710.914695][T16275]  odev_write+0x5a/0x80
[  710.914711][T16275]  vfs_writev+0x4bb/0x990
[  710.914726][T16275]  ? __pfx_odev_write+0x10/0x10
[  710.914743][T16275]  ? __pfx_vfs_writev+0x10/0x10
[  710.914765][T16275]  ? __fget_files+0x2a/0x420
[  710.914782][T16275]  ? __fget_files+0x3a2/0x420
[  710.914796][T16275]  ? __fget_files+0x2a/0x420
[  710.914824][T16275]  do_writev+0x154/0x2e0
[  710.914838][T16275]  ? __pfx_do_writev+0x10/0x10
[  710.914858][T16275]  do_syscall_64+0x166/0x520
[  710.914871][T16275]  ? trace_irq_disable+0x3b/0x140
[  710.914883][T16275]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.914895][T16275]  ? clear_bhb_loop+0x70/0xc0
[  710.914910][T16275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.914921][T16275] RIP: 0033:0x7f68a999e159
[  710.914933][T16275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  710.914944][T16275] RSP: 002b:00007f68aa7c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  710.914959][T16275] RAX: ffffffffffffffda RBX: 00007f68a9c25fa0 RCX: 00007f68a999e159
[  710.914968][T16275] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003
[  710.914976][T16275] RBP: 00007f68aa7c4090 R08: 0000000000000000 R09: 0000000000000000
[  710.914983][T16275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  710.914991][T16275] R13: 00007f68a9c26038 R14: 00007f68a9c25fa0 R15: 00007f68a9d4fa48
[  710.915008][T16275]  </TASK>
[  711.258488][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2916'.
[  711.281671][   T25] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  711.384483][T16291] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2919'.
[  711.440888][   T25] usb 4-1: Using ep0 maxpacket: 16
[  711.450800][   T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  711.466328][   T25] usb 4-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[  711.466359][   T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  711.470314][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.470343][   T25] usb 4-1: Product: syz
[  711.470359][   T25] usb 4-1: Manufacturer: syz
[  711.470373][   T25] usb 4-1: SerialNumber: syz
[  711.479122][T16293] syzkaller0: entered promiscuous mode
[  711.479145][T16293] syzkaller0: entered allmulticast mode
[  711.506858][   T25] usb 4-1: 0:2 : does not exist
[  711.648199][T16300] 8021q: VLANs not supported on gre0
[  711.710791][   T25] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  711.852190][   T25] usb 4-1: USB disconnect, device number 106
[  711.915082][T11340] udevd[11340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  711.961392][ T6817] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  711.986377][T16306] netlink: 'syz.0.2925': attribute type 1 has an invalid length.
[  712.049442][T16306] veth11: entered allmulticast mode
[  712.069894][T16306] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  712.093988][ T6817] usb 5-1: device descriptor read/64, error -71
[  712.253395][T16310] netlink: 'syz.0.2926': attribute type 1 has an invalid length.
[  712.317499][T16310] 8021q: adding VLAN 0 to HW filter on device bond6
[  712.331676][ T6817] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  712.333362][T16309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2926'.
[  712.419151][T16309] bond6: (slave geneve2): making interface the new active one
[  712.436893][T16309] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  712.462483][ T6817] usb 5-1: device descriptor read/64, error -71
[  712.481859][T13881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  712.481909][T13881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  712.481943][T13881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  712.481977][T13881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  712.572245][ T6817] usb usb5-port1: attempt power cycle
[  712.911340][ T6817] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  712.942680][ T6817] usb 5-1: device descriptor read/8, error -71
[  713.021894][T16324] FAULT_INJECTION: forcing a failure.
[  713.021894][T16324] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  713.021932][T16324] CPU: 1 UID: 0 PID: 16324 Comm: syz.9.2932 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  713.021960][T16324] Tainted: [L]=SOFTLOCKUP
[  713.021969][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  713.021981][T16324] Call Trace:
[  713.021990][T16324]  <TASK>
[  713.022000][T16324]  dump_stack_lvl+0xe8/0x150
[  713.022036][T16324]  should_fail_ex+0x410/0x560
[  713.022065][T16324]  _copy_from_user+0x2d/0xb0
[  713.022094][T16324]  ucma_write+0x15d/0x2f0
[  713.022123][T16324]  ? common_file_perm+0x20e/0x2b0
[  713.022151][T16324]  ? __pfx_ucma_write+0x10/0x10
[  713.022178][T16324]  ? security_file_permission+0x75/0x260
[  713.022201][T16324]  ? rw_verify_area+0x203/0x4c0
[  713.022236][T16324]  vfs_writev+0x4bb/0x990
[  713.022262][T16324]  ? __pfx_ucma_write+0x10/0x10
[  713.022295][T16324]  ? __pfx_vfs_writev+0x10/0x10
[  713.022333][T16324]  ? __fget_files+0x2a/0x420
[  713.022365][T16324]  ? __fget_files+0x3a2/0x420
[  713.022391][T16324]  ? __fget_files+0x2a/0x420
[  713.022437][T16324]  do_writev+0x154/0x2e0
[  713.022463][T16324]  ? __pfx_do_writev+0x10/0x10
[  713.022499][T16324]  do_syscall_64+0x166/0x520
[  713.022524][T16324]  ? trace_irq_disable+0x3b/0x140
[  713.022544][T16324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.022565][T16324]  ? clear_bhb_loop+0x70/0xc0
[  713.022591][T16324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.022612][T16324] RIP: 0033:0x7f1971b9e159
[  713.022632][T16324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  713.022649][T16324] RSP: 002b:00007f196fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  713.022672][T16324] RAX: ffffffffffffffda RBX: 00007f1971e25fa0 RCX: 00007f1971b9e159
[  713.022688][T16324] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  713.022701][T16324] RBP: 00007f196fdf6090 R08: 0000000000000000 R09: 0000000000000000
[  713.022714][T16324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  713.022727][T16324] R13: 00007f1971e26038 R14: 00007f1971e25fa0 R15: 00007f1971f4fa48
[  713.022761][T16324]  </TASK>
[  713.086453][T16326] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2933'.
[  713.183470][ T6817] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  713.207484][ T6817] usb 5-1: device descriptor read/8, error -71
[  713.241376][ T5743] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  713.306815][T16331] syzkaller0: entered promiscuous mode
[  713.306832][T16331] syzkaller0: entered allmulticast mode
[  713.313194][ T6817] usb usb5-port1: unable to enumerate USB device
[  713.337346][T16331] 0: reclassify loop, rule prio 0, protocol 800
[  713.391437][ T5743] usb 4-1: Using ep0 maxpacket: 8
[  713.393219][ T5743] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  713.394368][ T5743] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  713.394407][ T5743] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  713.394448][ T5743] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  713.394471][ T5743] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  713.394486][ T5743] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  713.394501][ T5743] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  713.394516][ T5743] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  713.394531][ T5743] usb 4-1: config 168 interface 0 has no altsetting 0
[  713.395575][ T5743] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  713.395610][ T5743] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  713.395645][ T5743] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  713.395674][ T5743] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  713.395688][ T5743] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  713.395702][ T5743] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  713.395718][ T5743] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  713.395740][ T5743] usb 4-1: config 168 interface 0 has no altsetting 0
[  713.396862][ T5743] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  713.396895][ T5743] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  713.396916][ T5743] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  713.396931][ T5743] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  713.396945][ T5743] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  713.396960][ T5743] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  713.396976][ T5743] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  713.396990][ T5743] usb 4-1: config 168 interface 0 has no altsetting 0
[  713.400768][ T5743] usb 4-1: string descriptor 0 read error: -22
[  713.400901][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.417610][ T5743] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  713.754451][ T5743] usb 4-1: USB disconnect, device number 107
[  713.758458][T16338] usb 4-1: Couldn't submit interrupt_out_urb -19
[  713.985078][T16338] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=34145027 (68290054 ns) > initial count (564 ns). Using initial count to start timer.
[  713.987340][T16338] adutux: No device or device unplugged -19
[  713.988671][T16338] adutux: No device or device unplugged -19
[  714.051373][ T6817] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  714.203777][ T6817] usb 1-1: unable to get BOS descriptor or descriptor too short
[  714.203812][ T6817] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=bb.9e
[  714.204638][ T6817] usb 1-1: config 4 has an invalid interface number: 17 but max is 0
[  714.204653][ T6817] usb 1-1: config 4 has no interface number 0
[  714.204677][ T6817] usb 1-1: config 4 interface 17 altsetting 2 endpoint 0x2 has invalid maxpacket 2047, setting to 1024
[  714.204692][ T6817] usb 1-1: config 4 interface 17 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024
[  714.204707][ T6817] usb 1-1: config 4 interface 17 altsetting 2 has an endpoint descriptor with address 0xB9, changing to 0x89
[  714.204721][ T6817] usb 1-1: config 4 interface 17 altsetting 2 endpoint 0x89 has invalid maxpacket 512, setting to 64
[  714.204736][ T6817] usb 1-1: config 4 interface 17 has no altsetting 0
[  714.206398][ T6817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.206412][ T6817] usb 1-1: Product: syz
[  714.206421][ T6817] usb 1-1: Manufacturer: syz
[  714.206429][ T6817] usb 1-1: SerialNumber: syz
[  714.209541][T16335] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  714.242842][T12899] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  714.401357][T12899] usb 4-1: Using ep0 maxpacket: 8
[  714.402131][T12899] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  714.403402][T12899] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  714.403430][T12899] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  714.403454][T12899] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  714.403473][T12899] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  714.403497][T12899] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  714.403522][T12899] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  714.403546][T12899] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  714.403571][T12899] usb 4-1: config 168 interface 0 has no altsetting 0
[  714.405387][T12899] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  714.405422][T12899] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  714.405459][T12899] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  714.405483][T12899] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  714.405498][T12899] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  714.405512][T12899] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  714.405526][T12899] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  714.405546][T12899] usb 4-1: config 168 interface 0 has no altsetting 0
[  714.406460][T12899] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  714.406495][T12899] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  714.406531][T12899] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  714.406557][T12899] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  714.406580][T12899] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  714.406600][T12899] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  714.406615][T12899] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  714.406629][T12899] usb 4-1: config 168 interface 0 has no altsetting 0
[  714.409236][T12899] usb 4-1: string descriptor 0 read error: -22
[  714.409359][T12899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.465760][ T6817] kvaser_usb 1-1:4.17: error -ENODEV: Cannot get usb endpoint(s)
[  714.521177][ T6817] usb 1-1: USB disconnect, device number 92
[  714.730637][T12899] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  714.742298][T12899] usb 4-1: USB disconnect, device number 108
[  714.913175][T16357] FAULT_INJECTION: forcing a failure.
[  714.913175][T16357] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  714.913213][T16357] CPU: 1 UID: 0 PID: 16357 Comm: syz.4.2941 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  714.913241][T16357] Tainted: [L]=SOFTLOCKUP
[  714.913250][T16357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  714.913263][T16357] Call Trace:
[  714.913272][T16357]  <TASK>
[  714.913281][T16357]  dump_stack_lvl+0xe8/0x150
[  714.913317][T16357]  should_fail_ex+0x410/0x560
[  714.913348][T16357]  _copy_from_user+0x2d/0xb0
[  714.913376][T16357]  snd_seq_oss_write+0x6e2/0x950
[  714.913424][T16357]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  714.913467][T16357]  ? security_file_permission+0x75/0x260
[  714.913495][T16357]  odev_write+0x5a/0x80
[  714.913522][T16357]  vfs_writev+0x4bb/0x990
[  714.913549][T16357]  ? __pfx_odev_write+0x10/0x10
[  714.913581][T16357]  ? __pfx_vfs_writev+0x10/0x10
[  714.913621][T16357]  ? __fget_files+0x2a/0x420
[  714.913653][T16357]  ? __fget_files+0x3a2/0x420
[  714.913679][T16357]  ? __fget_files+0x2a/0x420
[  714.913715][T16357]  do_writev+0x154/0x2e0
[  714.913741][T16357]  ? __pfx_do_writev+0x10/0x10
[  714.913785][T16357]  do_syscall_64+0x166/0x520
[  714.913810][T16357]  ? trace_irq_disable+0x3b/0x140
[  714.913831][T16357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.913853][T16357]  ? clear_bhb_loop+0x70/0xc0
[  714.913880][T16357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.913900][T16357] RIP: 0033:0x7f7e5119e159
[  714.913920][T16357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.913938][T16357] RSP: 002b:00007f7e4f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  714.913961][T16357] RAX: ffffffffffffffda RBX: 00007f7e51425fa0 RCX: 00007f7e5119e159
[  714.913976][T16357] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003
[  714.914006][T16357] RBP: 00007f7e4f3f6090 R08: 0000000000000000 R09: 0000000000000000
[  714.914019][T16357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  714.914033][T16357] R13: 00007f7e51426038 R14: 00007f7e51425fa0 R15: 00007f7e5154fa48
[  714.914072][T16357]  </TASK>
[  715.268189][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2945'.
[  715.431359][T12899] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[  715.481943][T16382] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2949'.
[  715.577702][T16386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2950'.
[  715.577740][T16386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2950'.
[  715.584828][T16387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2950'.
[  715.584859][T16387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2950'.
[  715.625149][T12899] usb 2-1: unable to get BOS descriptor or descriptor too short
[  715.625674][T12899] usb 2-1: not running at top speed; connect to a high speed hub
[  715.625707][T12899] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  715.625744][T12899] usb 2-1: too many configurations: 17, using maximum allowed: 8
[  715.627970][T12899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.628020][T12899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  715.628985][T12899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.629031][T12899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  715.630169][T12899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.630264][T12899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  715.657441][T12899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.657509][T12899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  715.674849][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2951'.
[  715.699723][ T5685] usb 10-1: new high-speed USB device number 106 using dummy_hcd
[  715.700033][T12899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.700080][T12899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  715.748293][T12899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.748345][T12899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  715.812928][T12899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.812983][T12899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  715.856703][T12899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.856767][T12899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  715.861133][T12899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.861160][T12899] usb 2-1: Product: syz
[  715.861174][T12899] usb 2-1: Manufacturer: syz
[  715.861188][T12899] usb 2-1: SerialNumber: syz
[  715.909404][ T5685] usb 10-1: device descriptor read/64, error -71
[  716.076492][T16393] netlink: 'syz.0.2953': attribute type 1 has an invalid length.
[  716.138407][T16361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  716.141524][ T5685] usb 10-1: new high-speed USB device number 107 using dummy_hcd
[  716.163271][T16361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  716.182289][   T25] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  716.220687][T12899] usb 2-1: USB disconnect, device number 114
[  716.294928][ T5685] usb 10-1: device descriptor read/64, error -71
[  716.303354][T16397] loop6: detected capacity change from 0 to 2640
[  716.308984][T16397] Buffer I/O error on dev loop6, logical block 0, async page read
[  716.309030][T16397] Buffer I/O error on dev loop6, logical block 0, async page read
[  716.309060][T16397] Buffer I/O error on dev loop6, logical block 0, async page read
[  716.309091][T16397] Buffer I/O error on dev loop6, logical block 0, async page read
[  716.309123][T16397] Buffer I/O error on dev loop6, logical block 0, async page read
[  716.309172][T16397] Buffer I/O error on dev loop6, logical block 0, async page read
[  716.309217][T16397] Buffer I/O error on dev loop6, logical block 0, async page read
[  716.309248][T16397] Buffer I/O error on dev loop6, logical block 0, async page read
[  716.309264][T16397] ldm_validate_partition_table(): Disk read failed.
[  716.309300][T16397] Buffer I/O error on dev loop6, logical block 0, async page read
[  716.309363][T16397] Buffer I/O error on dev loop6, logical block 0, async page read
[  716.309412][T16397] Dev loop6: unable to read RDB block 0
[  716.309580][T16397]  loop6: unable to read partition table
[  716.309807][T16397] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  716.384502][   T25] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  716.454645][ T5685] usb usb10-port1: attempt power cycle
[  716.456643][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  716.456675][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  716.456714][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.460842][   T25] usb 4-1: config 0 descriptor??
[  716.477521][T16395] veth13: entered allmulticast mode
[  716.510455][T16398] bond5: (slave veth0_to_bond): Releasing active interface
[  716.555696][T16398] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  716.791401][ T5685] usb 10-1: new high-speed USB device number 108 using dummy_hcd
[  716.813619][ T5685] usb 10-1: device descriptor read/8, error -71
[  716.942601][ T6817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.953181][T16405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.070075][ T6817] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.078255][ T5685] usb 10-1: new high-speed USB device number 109 using dummy_hcd
[  717.123539][ T5685] usb 10-1: device descriptor read/8, error -71
[  717.124771][   T25] usbhid 4-1:0.0: can't add hid device: -32
[  717.124891][   T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -32
[  717.157906][   T25] usb 4-1: USB disconnect, device number 109
[  717.232189][ T5685] usb usb10-port1: unable to enumerate USB device
[  717.458649][T16417] FAULT_INJECTION: forcing a failure.
[  717.458649][T16417] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  717.458675][T16417] CPU: 1 UID: 0 PID: 16417 Comm: syz.4.2961 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  717.458693][T16417] Tainted: [L]=SOFTLOCKUP
[  717.458698][T16417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  717.458705][T16417] Call Trace:
[  717.458711][T16417]  <TASK>
[  717.458725][T16417]  dump_stack_lvl+0xe8/0x150
[  717.458748][T16417]  should_fail_ex+0x410/0x560
[  717.458766][T16417]  _copy_from_user+0x2d/0xb0
[  717.458782][T16417]  ucma_reject+0xf5/0x2f0
[  717.458801][T16417]  ? aa_file_perm+0x4ed/0x15f0
[  717.458817][T16417]  ? __pfx_ucma_reject+0x10/0x10
[  717.458855][T16417]  ucma_write+0x24e/0x2f0
[  717.458870][T16417]  ? common_file_perm+0x20e/0x2b0
[  717.458885][T16417]  ? __pfx_ucma_write+0x10/0x10
[  717.458900][T16417]  ? security_file_permission+0x75/0x260
[  717.458913][T16417]  ? rw_verify_area+0x203/0x4c0
[  717.458932][T16417]  vfs_writev+0x4bb/0x990
[  717.458946][T16417]  ? __pfx_ucma_write+0x10/0x10
[  717.458963][T16417]  ? __pfx_vfs_writev+0x10/0x10
[  717.458984][T16417]  ? __fget_files+0x2a/0x420
[  717.459006][T16417]  ? __fget_files+0x3a2/0x420
[  717.459020][T16417]  ? __fget_files+0x2a/0x420
[  717.459040][T16417]  do_writev+0x154/0x2e0
[  717.459054][T16417]  ? __pfx_do_writev+0x10/0x10
[  717.459074][T16417]  do_syscall_64+0x166/0x520
[  717.459089][T16417]  ? trace_irq_disable+0x3b/0x140
[  717.459101][T16417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.459112][T16417]  ? clear_bhb_loop+0x70/0xc0
[  717.459127][T16417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.459139][T16417] RIP: 0033:0x7f7e5119e159
[  717.459151][T16417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  717.459162][T16417] RSP: 002b:00007f7e4f3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  717.459177][T16417] RAX: ffffffffffffffda RBX: 00007f7e51425fa0 RCX: 00007f7e5119e159
[  717.459186][T16417] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  717.459194][T16417] RBP: 00007f7e4f3f6090 R08: 0000000000000000 R09: 0000000000000000
[  717.459202][T16417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  717.459210][T16417] R13: 00007f7e51426038 R14: 00007f7e51425fa0 R15: 00007f7e5154fa48
[  717.459228][T16417]  </TASK>
[  717.491409][ T6817] usb 2-1: new full-speed USB device number 115 using dummy_hcd
[  717.642188][ T6817] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  717.643418][ T6817] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  717.643445][ T6817] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  717.643478][ T6817] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  717.643511][ T6817] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  717.646033][ T6817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.646054][ T6817] usb 2-1: Product: syz
[  717.646068][ T6817] usb 2-1: Manufacturer: syz
[  717.646081][ T6817] usb 2-1: SerialNumber: syz
[  717.651762][T16415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  717.823500][T16425] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2963'.
[  717.859590][T16415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  717.945129][ T5743] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  718.009363][T16431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2966'.
[  718.071482][ T5743] usb 5-1: device descriptor read/64, error -71
[  718.311471][ T5743] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  718.441486][ T5743] usb 5-1: device descriptor read/64, error -71
[  718.536591][T16438] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  718.537120][T16438] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  718.537599][T16438] xt_socket: unknown flags 0xc
[  718.552801][ T5743] usb usb5-port1: attempt power cycle
[  718.667278][T16415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  718.753826][T16444] FAULT_INJECTION: forcing a failure.
[  718.753826][T16444] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  718.753852][T16444] CPU: 0 UID: 0 PID: 16444 Comm: syz.9.2971 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  718.753870][T16444] Tainted: [L]=SOFTLOCKUP
[  718.753875][T16444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  718.753882][T16444] Call Trace:
[  718.753888][T16444]  <TASK>
[  718.753894][T16444]  dump_stack_lvl+0xe8/0x150
[  718.753920][T16444]  should_fail_ex+0x410/0x560
[  718.753939][T16444]  _copy_from_user+0x2d/0xb0
[  718.753972][T16444]  snd_seq_oss_write+0x6e2/0x950
[  718.754000][T16444]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  718.754023][T16444]  ? security_file_permission+0x75/0x260
[  718.754039][T16444]  odev_write+0x5a/0x80
[  718.754054][T16444]  vfs_writev+0x4bb/0x990
[  718.754070][T16444]  ? __pfx_odev_write+0x10/0x10
[  718.754087][T16444]  ? __pfx_vfs_writev+0x10/0x10
[  718.754109][T16444]  ? __fget_files+0x2a/0x420
[  718.754127][T16444]  ? __fget_files+0x3a2/0x420
[  718.754141][T16444]  ? __fget_files+0x2a/0x420
[  718.754161][T16444]  do_writev+0x154/0x2e0
[  718.754176][T16444]  ? __pfx_do_writev+0x10/0x10
[  718.754196][T16444]  do_syscall_64+0x166/0x520
[  718.754210][T16444]  ? trace_irq_disable+0x3b/0x140
[  718.754222][T16444]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.754234][T16444]  ? clear_bhb_loop+0x70/0xc0
[  718.754249][T16444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.754266][T16444] RIP: 0033:0x7f1971b9e159
[  718.754279][T16444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  718.754290][T16444] RSP: 002b:00007f196fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  718.754306][T16444] RAX: ffffffffffffffda RBX: 00007f1971e25fa0 RCX: 00007f1971b9e159
[  718.754315][T16444] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003
[  718.754323][T16444] RBP: 00007f196fdf6090 R08: 0000000000000000 R09: 0000000000000000
[  718.754331][T16444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  718.754338][T16444] R13: 00007f1971e26038 R14: 00007f1971e25fa0 R15: 00007f1971f4fa48
[  718.754356][T16444]  </TASK>
[  718.892865][ T5743] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  718.911996][ T6817] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  718.912022][ T6817] cdc_ncm 2-1:1.0: dwNtbInMaxSize=15 is too small. Using 2048
[  718.912068][ T6817] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  718.918106][ T5743] usb 5-1: device descriptor read/8, error -71
[  719.094269][T16448] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  719.151865][ T5743] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  719.171996][ T5743] usb 5-1: device descriptor read/8, error -71
[  719.173932][ T6817] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  719.186655][ T6817] usb 2-1: USB disconnect, device number 115
[  719.192375][ T6817] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  719.281613][ T5743] usb usb5-port1: unable to enumerate USB device
[  719.630548][T16456] geneve3: entered promiscuous mode
[  719.630573][T16456] geneve3: entered allmulticast mode
[  719.647442][T16456] program syz.3.2974 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  719.701969][   T25] usb 10-1: new high-speed USB device number 110 using dummy_hcd
[  719.855110][   T25] usb 10-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  719.856324][   T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.121549][ T5706] usb 2-1: new full-speed USB device number 116 using dummy_hcd
[  720.143083][ T6817] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  720.291344][ T6817] usb 4-1: Using ep0 maxpacket: 8
[  720.292117][ T6817] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  720.292140][ T5706] usb 2-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  720.293473][ T6817] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  720.293528][ T6817] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  720.293551][ T6817] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  720.293555][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0
[  720.293575][ T6817] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  720.293593][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.293598][ T6817] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  720.293639][ T6817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.299420][ T5706] usb 2-1: config 0 descriptor??
[  720.409256][   T25] usbhid 10-1:1.0: can't add hid device: -71
[  720.409381][   T25] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[  720.433042][   T25] usb 10-1: USB disconnect, device number 110
[  720.505852][ T6817] usb 4-1: usb_control_msg returned -32
[  720.505905][ T6817] usbtmc 4-1:16.0: can't read capabilities
[  720.604710][T16460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.605315][T16460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.607863][T16460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.610164][T16460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.707510][   T30] kauditd_printk_skb: 2048 callbacks suppressed
[  720.707531][   T30] audit: type=1800 audit(1789886122.047:6959): pid=16464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2978" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2261 res=0 errno=0
[  720.817620][T16460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.818098][T16460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  721.140990][ T5706] usb 2-1: string descriptor 0 read error: -71
[  721.160188][ T5706] usbhid 2-1:0.0: can't add hid device: -71
[  721.160328][ T5706] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  721.191393][ T5706] usb 2-1: USB disconnect, device number 116
[  722.166052][T16482] syzkaller0: entered promiscuous mode
[  722.166078][T16482] syzkaller0: entered allmulticast mode
[  722.191995][T16482] 0: reclassify loop, rule prio 0, protocol 800
[  723.070850][T16498] netlink: 'syz.4.2988': attribute type 4 has an invalid length.
[  725.493630][T16507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2992'.
[  725.713686][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2992'.
[  725.714092][T16505] 8021q: VLANs not supported on ip6_vti0
[  725.946641][T16468] usbtmc 4-1:16.0: usb_control_msg returned -110
[  726.363632][   T25] usb 4-1: USB disconnect, device number 110
[  738.505050][T16516] FAULT_INJECTION: forcing a failure.
[  738.505050][T16516] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  738.505089][T16516] CPU: 1 UID: 0 PID: 16516 Comm: syz.1.2995 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  738.505117][T16516] Tainted: [L]=SOFTLOCKUP
[  738.505125][T16516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  738.505149][T16516] Call Trace:
[  738.505159][T16516]  <TASK>
[  738.505169][T16516]  dump_stack_lvl+0xe8/0x150
[  738.505206][T16516]  should_fail_ex+0x410/0x560
[  738.505237][T16516]  _copy_from_user+0x2d/0xb0
[  738.505265][T16516]  snd_seq_oss_write+0x6e2/0x950
[  738.505314][T16516]  ? __pfx_snd_seq_oss_write+0x10/0x10
[  738.505359][T16516]  ? security_file_permission+0x75/0x260
[  738.505385][T16516]  odev_write+0x5a/0x80
[  738.505415][T16516]  vfs_writev+0x4bb/0x990
[  738.505442][T16516]  ? __pfx_odev_write+0x10/0x10
[  738.505474][T16516]  ? __pfx_vfs_writev+0x10/0x10
[  738.505514][T16516]  ? __fget_files+0x2a/0x420
[  738.505551][T16516]  ? __fget_files+0x3a2/0x420
[  738.505577][T16516]  ? __fget_files+0x2a/0x420
[  738.505613][T16516]  do_writev+0x154/0x2e0
[  738.505639][T16516]  ? __pfx_do_writev+0x10/0x10
[  738.505675][T16516]  do_syscall_64+0x166/0x520
[  738.505700][T16516]  ? trace_irq_disable+0x3b/0x140
[  738.505720][T16516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.505742][T16516]  ? clear_bhb_loop+0x70/0xc0
[  738.505766][T16516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.505788][T16516] RIP: 0033:0x7fd0d259e159
[  738.505809][T16516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.505827][T16516] RSP: 002b:00007fd0d33f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  738.505852][T16516] RAX: ffffffffffffffda RBX: 00007fd0d2825fa0 RCX: 00007fd0d259e159
[  738.505868][T16516] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003
[  738.505881][T16516] RBP: 00007fd0d33f0090 R08: 0000000000000000 R09: 0000000000000000
[  738.505895][T16516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  738.505907][T16516] R13: 00007fd0d2826038 R14: 00007fd0d2825fa0 R15: 00007fd0d294fa48
[  738.505940][T16516]  </TASK>
[  739.035385][T16517] syzkaller0: entered promiscuous mode
[  739.035409][T16517] syzkaller0: entered allmulticast mode
[  739.077908][T16517] 0: reclassify loop, rule prio 0, protocol 800
[  739.840023][T16522] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  745.335230][ T9845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  745.356863][ T9845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  745.792020][ T9845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  745.812043][ T9845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  745.816229][ T9845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  746.341100][ T9845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  746.361523][ T9845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  746.362536][ T9845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  746.363650][ T9845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  746.364522][ T9845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  747.374064][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  747.374155][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  747.549682][ T9845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  747.568813][ T9845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  747.570103][ T9845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  747.571158][ T9845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  747.594002][ T9845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  748.092030][ T4932] Bluetooth: hci2: command tx timeout
[  748.634144][T12897] usb 2-1: new low-speed USB device number 117 using dummy_hcd
[  748.971008][T12897] usb 2-1: device descriptor read/64, error -71
[  749.057689][ T4932] Bluetooth: hci3: command tx timeout
[  749.477740][T12897] usb 2-1: new low-speed USB device number 118 using dummy_hcd
[  749.767126][ T4932] Bluetooth: hci5: command tx timeout
[  750.270092][ T4932] Bluetooth: hci2: command tx timeout
[  751.895375][ T4932] Bluetooth: hci3: command tx timeout
[  751.938734][ T4932] Bluetooth: hci5: command tx timeout
[  752.604105][T12897] usb 2-1: device descriptor read/64, error -71
[  752.791434][T12897] usb usb2-port1: attempt power cycle
[  752.791679][ T4932] Bluetooth: hci2: command tx timeout
[  753.890852][T12897] usb 2-1: new low-speed USB device number 119 using dummy_hcd
[  753.945725][ T4932] Bluetooth: hci3: command tx timeout
[  754.077729][ T4932] Bluetooth: hci5: command tx timeout
[  755.071739][ T4932] Bluetooth: hci2: command tx timeout
[  756.043406][ T4932] Bluetooth: hci3: command tx timeout
[  756.990763][ T4932] Bluetooth: hci5: command tx timeout
[  759.230372][T12897] usb 2-1: device descriptor read/8, error -110
[  806.818385][T12897] usb 2-1: new low-speed USB device number 120 using dummy_hcd
[  810.176530][T12897] usb 2-1: device not accepting address 120, error -71
[  811.176402][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  811.196232][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  832.966856][T12897] usb usb2-port1: unable to enumerate USB device
[  872.448185][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  872.457940][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  885.613023][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  899.066648][   T31] INFO: task syz-executor:16539 blocked for more than 143 seconds.
[  899.066682][   T31]       Tainted: G             L      syzkaller #0
[  899.066696][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  899.066706][   T31] task:syz-executor    state:D stack:27600 pid:16539 tgid:16539 ppid:16526  task_flags:0x400140 flags:0x00080000
[  899.066774][   T31] Call Trace:
[  899.066783][   T31]  <TASK>
[  899.066800][   T31]  __schedule+0x17db/0x58f0
[  899.066868][   T31]  ? __pfx___schedule+0x10/0x10
[  899.066904][   T31]  ? schedule+0x90/0x2b0
[  899.066933][   T31]  schedule+0x164/0x2b0
[  899.066970][   T31]  schedule_preempt_disabled+0x13/0x30
[  899.066993][   T31]  __mutex_lock+0x7c1/0x1550
[  899.067018][   T31]  ? do_syscall_64+0x166/0x520
[  899.067049][   T31]  ? __mutex_lock+0x5d4/0x1550
[  899.067079][   T31]  ? register_nexthop_notifier+0x8b/0x290
[  899.067204][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  899.067252][   T31]  register_nexthop_notifier+0x8b/0x290
[  899.067288][   T31]  ? __pfx_register_nexthop_notifier+0x10/0x10
[  899.067314][   T31]  ? net_generic+0x1e/0x240
[  899.067382][   T31]  ? net_generic+0x1e/0x240
[  899.067403][   T31]  ? net_generic+0x1e/0x240
[  899.067428][   T31]  ? __asan_memset+0x22/0x50
[  899.067464][   T31]  ops_init+0x35d/0x5d0
[  899.067512][   T31]  setup_net+0x118/0x350
[  899.067539][   T31]  ? __pfx_setup_net+0x10/0x10
[  899.067564][   T31]  ? down_read_killable+0x1bb/0x3b0
[  899.067594][   T31]  ? __ns_common_init+0x2fc/0x4a0
[  899.067630][   T31]  copy_net_ns+0x53b/0x780
[  899.067660][   T31]  create_new_namespaces+0x3f0/0x6b0
[  899.067691][   T31]  ? security_capable+0x7e/0x2c0
[  899.067727][   T31]  unshare_nsproxy_namespaces+0x149/0x190
[  899.067760][   T31]  ksys_unshare+0x5a7/0x950
[  899.067797][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  899.067843][   T31]  __x64_sys_unshare+0x38/0x50
[  899.067873][   T31]  do_syscall_64+0x166/0x520
[  899.067898][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.067922][   T31]  ? clear_bhb_loop+0x70/0xc0
[  899.067958][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.067980][   T31] RIP: 0033:0x7f052799f427
[  899.068001][   T31] RSP: 002b:00007f0527d4ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  899.068025][   T31] RAX: ffffffffffffffda RBX: 00007f0527a360f5 RCX: 00007f052799f427
[  899.068041][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  899.068056][   T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  899.068069][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  899.068082][   T31] R13: 0000000000000003 R14: 00007ffd0d7431f8 R15: 0000000000000000
[  899.068116][   T31]  </TASK>
[  899.068127][   T31] 
[  899.068127][   T31] Showing all locks held in the system:
[  899.068137][   T31] locks held by kthreadd/2: 1, last CPU#0:
[  899.068208][   T31]  #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  899.068346][   T31] locks held by kworker/0:0/9: 4, last CPU#0:
[  899.068361][   T31]  #0: ffff888058951d40 ((wq_completion)wg-kex-wg2#18){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.068435][   T31]  #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.068506][   T31]  #2: ffff88803610d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0
[  899.068628][   T31]  #3: ffff88807c57b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0
[  899.068690][   T31] locks held by kworker/u8:0/12: 3, last CPU#0:
[  899.068706][   T31]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.068765][   T31]  #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.068825][   T31]  #2: ffff88807ac84258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  899.068959][   T31] locks held by kworker/u8:1/13: 3, last CPU#0:
[  899.068975][   T31]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.069033][   T31]  #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.069090][   T31]  #2: ffff88807d523258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  899.069151][   T31] locks held by kworker/1:0/25: 2, last CPU#1:
[  899.069167][   T31]  #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.069226][   T31]  #1: ffffc900001f7c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.069286][   T31] locks held by khungtaskd/31: 1, last CPU#0:
[  899.069300][   T31]  #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  899.069364][   T31] locks held by kworker/u8:2/34: 4, last CPU#0:
[  899.069379][   T31]  #0: ffff888033801940 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.069442][   T31]  #1: ffffc90000aa7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.069499][   T31]  #2: ffff888034059440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  899.069563][   T31]  #3: ffff88807f640330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  899.069627][   T31] locks held by kworker/u8:3/49: 3, last CPU#0:
[  899.069642][   T31]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.069699][   T31]  #1: ffffc90000ba7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.069758][   T31]  #2: ffff888058c2c258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  899.069825][   T31] locks held by kworker/u8:4/59: 4, last CPU#0:
[  899.069840][   T31]  #0: ffff888058ded940 ((wq_completion)wg-kex-wg1#21){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.069903][   T31]  #1: ffffc9000200fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.069970][   T31]  #2: ffff888051dcd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  899.070032][   T31]  #3: ffff888076f02ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  899.070095][   T31] locks held by kworker/u8:5/82: 3, last CPU#0:
[  899.070110][   T31]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.070167][   T31]  #1: ffffc9000202fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.070227][   T31]  #2: ffff888029541258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  899.070296][   T31] locks held by kworker/u8:6/153: 2, last CPU#0:
[  899.070312][   T31]  #0: ffff88802f834940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.070366][   T31]  #1: ffffc90002edfc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.070424][   T31] locks held by kworker/u8:7/678: 3, on CPU#0:
[  899.070439][   T31]  #0: ffff888032821140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.070496][   T31]  #1: ffffc90003d5fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  899.070554][   T31]  #2: ffffffff90254080 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  899.070638][   T31] locks held by kworker/u8:8/690: 2, last CPU#0:
[  899.070654][   T31]  #0: ffff88807873f940 ((wq_completion)wg-kex-wg0#17){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630