last executing test programs:

6m38.175121412s ago: executing program 0 (id=3932):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1028, 0x5, 0x11, r5, 0x83000000)
userfaultfd(0x80001)

6m37.099095467s ago: executing program 0 (id=3936):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862)
pwritev(r0, &(0x7f0000000500), 0x0, 0x85, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000043f000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7fffff7a, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x19})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000cb46000007000000e000000100000000120000000000000084"], 0x30, 0x4}, 0x4040814)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1ef8ff0000e8ffbea100000000000007010000f8ffffffb702000008000000b70300000000000085000000b900000095"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r8, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f00000012c0)={r9, 0x8002, 0x7fff, 0x0, 0x0, [<r10=>0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8], [0x0, 0x20000000000]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, <r11=>0xffffffffffffffff})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0xa00}, 0x20)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000100)='rose0\x00')
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11})

6m30.564126033s ago: executing program 0 (id=3946):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)

6m30.499365929s ago: executing program 32 (id=3906):
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f00000003c0)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x0, 0x4, 0x6, 0x40})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x7, 0x7})
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c80)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x1d4}, 0x8844)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f091ccf68a710300f23c58140000ffffffffffffffdf00", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
shutdown(r6, 0x1)

6m29.005590138s ago: executing program 0 (id=3950):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000080)=0xfffffffd)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r3=>0xffffffffffffffff}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x87}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000100))
r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x40084149, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f000000c940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x2, 0x8010)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1ad863, 0x0)
r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r12, &(0x7f0000002380)={0x2020}, 0x2020)
sendmsg$NL802154_CMD_GET_SEC_KEY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="579f29bd70005f6a650b160000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYRESOCT=r6, @ANYRES32=r1, @ANYBLOB="00000000000000009500007b00000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500eebf3a750085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

6m28.614418262s ago: executing program 0 (id=3953):
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
openat$cgroup_int(r0, 0x0, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x12f0c0)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1028, 0x5, 0x11, 0xffffffffffffffff, 0x83000000)

6m27.537398986s ago: executing program 0 (id=3954):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x101, 0x70bd26, 0x25dfdbfe, {0xa, 0x38, 0x78, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x15}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c051}, 0x4)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2040, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0xfffffff9, 0x101, 0xffeffbfd, 0x80000003, 0x1a, "5dd20003000077bd7cf8c7ce83b9ff00"})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003100)=@newtaction={0x210, 0x30, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0xd0, 0x1, [@m_skbedit={0xcc, 0xf, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x8}}]}, {0x95, 0x6, "a89c8d3290a687e42ac4510ada767e9fb80ad6dff828eb5e6235c0c180479ec7c252323f8806574cdea774aed480d74752401c70bcfa6a70f5f7ffd9584800d99985f8e4095a90bc5a93c017dcc4b882739e87a473d22f19bd7ec680e8040455fbbf38be0e400ab35968726851a3a616582e7f39c02f72bc6f97df830a7a59275c0c55dfd92ed888aeee722c4f3c7f689a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x12c, 0x1, [@m_skbmod={0xfc, 0x1d, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x20000000, 0xd04, 0x8}, 0x7}}]}, {0x7a, 0x6, "f81782037c8e1f7fce7d04f75d2d01876efef68b43bf9d7429e02add52bbc63558b0e66dedf8acc979dd8b9447688285bceab64aea3c8eb6e322349d54cf03a098a41d902f8a3750d12c17b057bb5e5cc95da9f4101b041a8d70a1e6490ff3b3715a4dc862523bb903f3fc527d325623204dc2bb9f94"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x2c, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
rmdir(&(0x7f0000000240)='./file1\x00')
chdir(&(0x7f0000000000)='./bus\x00')
unlink(&(0x7f00000004c0)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0)

6m27.288432835s ago: executing program 33 (id=3954):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x101, 0x70bd26, 0x25dfdbfe, {0xa, 0x38, 0x78, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x15}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c051}, 0x4)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2040, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0xfffffff9, 0x101, 0xffeffbfd, 0x80000003, 0x1a, "5dd20003000077bd7cf8c7ce83b9ff00"})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003100)=@newtaction={0x210, 0x30, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0xd0, 0x1, [@m_skbedit={0xcc, 0xf, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x8}}]}, {0x95, 0x6, "a89c8d3290a687e42ac4510ada767e9fb80ad6dff828eb5e6235c0c180479ec7c252323f8806574cdea774aed480d74752401c70bcfa6a70f5f7ffd9584800d99985f8e4095a90bc5a93c017dcc4b882739e87a473d22f19bd7ec680e8040455fbbf38be0e400ab35968726851a3a616582e7f39c02f72bc6f97df830a7a59275c0c55dfd92ed888aeee722c4f3c7f689a"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x12c, 0x1, [@m_skbmod={0xfc, 0x1d, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x20000000, 0xd04, 0x8}, 0x7}}]}, {0x7a, 0x6, "f81782037c8e1f7fce7d04f75d2d01876efef68b43bf9d7429e02add52bbc63558b0e66dedf8acc979dd8b9447688285bceab64aea3c8eb6e322349d54cf03a098a41d902f8a3750d12c17b057bb5e5cc95da9f4101b041a8d70a1e6490ff3b3715a4dc862523bb903f3fc527d325623204dc2bb9f94"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x2c, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
rmdir(&(0x7f0000000240)='./file1\x00')
chdir(&(0x7f0000000000)='./bus\x00')
unlink(&(0x7f00000004c0)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0)

5m59.977255354s ago: executing program 3 (id=3992):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)

5m59.316816571s ago: executing program 3 (id=3994):
set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6)
set_mempolicy(0x0, &(0x7f0000019080)=0x10001, 0x24e8feed)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c000c80080002"], 0x44}}, 0x2000800)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400108006000a00240000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r7, 0x8, 0x4a5ac7f1577263be}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x2c048040}, 0x0)
set_mempolicy(0x8000, &(0x7f0000002100)=0x4, 0x7)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r2, &(0x7f0000000ac0), 0x0}, 0x20)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x3, '\x00', r7, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000002380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x3, [@datasec={0x6, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x1, 0x4ee}, {0x3, 0xd, 0x1}, {0x1, 0x7, 0x1000}], "a7d7"}]}, {0x0, [0x3e]}}, &(0x7f0000002400)=""/231, 0x4f, 0xe7, 0x0, 0xe6}, 0x28)
r11 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00')
write$smackfs_cipsonum(0xffffffffffffffff, &(0x7f0000000200)=0x6, 0x14)
pread64(r11, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002640)={0x18, 0x25, &(0x7f0000019100)=ANY=[@ANYBLOB="18000000000000690000e300000018110000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018530000000000000000000000000000185a000003000000000000000000000085100000010000001511d8fff0ffffff8510000006000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000003d950600ffffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000002300)='GPL\x00', 0x5, 0x20, &(0x7f0000002340)=""/32, 0x41100, 0xc, '\x00', r7, 0x0, r10, 0x8, &(0x7f0000002540)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002580)={0x0, 0xe, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000025c0)=[r2, 0x1, r11, r2, r2, r2, r2], &(0x7f0000002600)=[{0x5, 0x1, 0xe, 0x2}, {0x4, 0x4, 0xa, 0x8}, {0x5, 0x4, 0x9, 0x5}, {0x3, 0x5, 0x5, 0xb}], 0x10, 0x4}, 0x94)
write$FUSE_GETXATTR(r0, &(0x7f00000020c0)={0x18, 0x0, r1, {0x8}}, 0x18)

5m58.969592423s ago: executing program 3 (id=3995):
r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0}, 0x0)

5m57.170653621s ago: executing program 3 (id=3996):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1ad863, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

5m57.030547855s ago: executing program 3 (id=3998):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/15, 0xf}, 0x800}], 0x1, 0x10102, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x22c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x218, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x1e, 0x6, 0x1, 0x0, "e72e85ff38db05de9e5273864566f3ee67522aea7306d1639a9c"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}, {0x19c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8b}, @NFTA_SET_ELEM_EXPRESSIONS={0x180, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x80, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xaf6}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf33}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffff0000}]}}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xad}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xf}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xb4}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}]}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20048040)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4)
socket$inet6(0xa, 0x2, 0x0)
mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x2004000, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r7, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40004141, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa91, 0x86c, 0x1, 0x1, 0xd59f80, 0x19f2, 0x1be0, 0x19ef, 0x3, 0x3, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xb}, 0xd0, 0x9}})
sendmmsg$inet6(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

5m56.232796138s ago: executing program 3 (id=4000):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

5m55.965297221s ago: executing program 34 (id=4000):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

5m24.528085193s ago: executing program 5 (id=4082):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80c01, 0x0)
ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000240)={0x42d8, 0x1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r5], 0x0)
ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @remote, 'geneve0\x00'}})
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0)
ioctl$NBD_SET_SIZE(r6, 0xab02, 0x2)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa3865)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r7, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90)
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000002c0)={0xc0000010})
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2d, 0xcc7, 0x7fffffee, 0x5c952398, 0x800d5f, 0x3ff, 0x2, 0x4, 0x1, 0x5, 0x9, 0x0, 0x40400, 0x8, 0xfffffff9, 0x1fc, 0x80000089, 0xa, 0x1402000, 0xeeea, 0x108, 0x3, 0x3f, 0x8, 0x8, 0x8000000, 0x485b]})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r0, 0xbc7ae000)

5m23.204898114s ago: executing program 1 (id=4086):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, &(0x7f0000000700))
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201e8d8c44e5a10450c"], 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102392, 0x18ff8)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000080)={'bond0\x00', @ifru_settings={0x7f, 0x10000, @sync=0x0}})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sync()
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
renameat(r2, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r2, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00')
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000040)={{@local, 0x2}, @local, 0x4, 0x80000, 0x5e, 0x200000000000, 0x100000000000006})

5m21.727350002s ago: executing program 4 (id=4092):
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
sync_file_range(0xffffffffffffffff, 0x6, 0x200, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x80400, 0x0)
keyctl$setperm(0x5, 0x0, 0x11880100)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000001bc0)=@vmx={0x2, 0x0, 0x2080, {0xc000, 0xdddd0000, {}, 0x1, 0xfffffffffffffbff}, {"c16fe42e4cfa6878499e70d7092002c228ccdbcf7d73916a2b095c297600a35707ad7db9135b09fd1f26c0e93697afed19d35e6e8cb724a0128d36bfef859156dfeef1648700caa62c919a56ab509cf7b84d8cbea05cd21c5cac886b7d0cc8306f44fa13817179fb30bbd1ae9cb4c45a8d0edb87f4a8daacef3f61d1107308e06d6551dc6dc05ce6c013547d1bab2cb5575444cf2591c6f9e5fbbf97e6b2e045e518569b1b53a5efbb6997af776e04c5fcdbd4329ab4ad5a5652b7bda92c67140f0b64671fa2b71da2c059ea1a5d554aa18f630368440153acf6b7015f164a7b6fb8b757c3abcc5fee54dbb12efd1800d411ef5ffb61ee015ed738d063c5a5fd4db015645afe0886b18fcfe92f3900a9c22a72c0827053ddda1168030611c06b6b2215ddf55f4e89c4b87cc32ee4720d82f2c11417fa02b5785d4a225d1bf0ccf48674ad0a10e540b0f0d88827989268ca5f2ca2f2280a8054e3ea589f9ed93e2e688d8dc36d5d5ec0cfd5142e44eebdfc060a99943be23caac95236cfeb279f93b07454c3d77378350eb7c108aca46a544fb0149b348080b0e03a5b995da7caa943ffc3e61251cec02dd2247a4b83976f211a1693aee8d86547a6e580b9c4fcb95e1113852eb178ff9d3706d37212a57ef780f92ae1eb63c91bae33639b7e1f285a3e96d7207ec9d6a0e424a99fd01c239e98e5a1c364b576d1498afad50f69f9733b2cffc378c409698c1e5097fb3b17349549bd88fb88eefeb906119b0a6c67268b8e4d2f21dc2a4a5e91db9e7bc51d000bbda20a9671edef19bc92e7f89fdcabcd1b5990fdbb88312f89fce01cd6598462840a78c5b70fb1ecc23fe13954d8af8d789d5aa1531ec5baf379a260020a0a380b0154d888681df94b14d19bf56a79c01ef59e3801626ab289ce7ed84172f21e000be87786056ccea6479902845946b3381566dbad124b36e5ac36545f1735029f20b92fad7b48994f31427cf3dc69359b880ca9199336f643994513510a95e505bb5fdaa0b8616f477adb53800bcfd3eeb987c7ac761d99c9df8f50d5736c2a64289e1963c59637cad78ae4b5357a3ab43846b3201f0d81c0f9fe9a0c45cda5d5e0ac1ece16c126354bb7ab0a477c9bb4eb74a59e4847e8d46367e6acfbcb29f4d34f82cdd3e14bbda82619eb7dd458cf686f6a85c5c8a048baabe7cdb1cc0bc97c47915c92c102934fa1dd6a876fe9bd8213ff7646df9b1cfc3f8afc7e4a700fe9f0377b6586c8c0053a0dcc2420e82d6a4fdd9c41e4e0273087df1ee82c8ed818f754b15ead8c10a5bf4bcdc8e69f2811f1282876def4f63fda01cde385e9a6601fe63090fca3d584857483c7a5c3c50d7e17ef7c505dc7931f0079fae703cad66a4954e2e66dc52ec1e4a7017fe9a9dd2fd710af6f2377f31e45a8cfbce46f223a07788cb1793226865af91972301077796cda9197bab1165a2154d64f91cd62211e1867c6f3027abdfb546a56e02b0491251e6c4ec8f9a85e5d2901c776c695d7d76ebaf77b4b6fe1860e06396201145218596db706f45c79433d8916baf993cc24e0570e539b1dca15e040ecf80a8df50c9bc51fdf522a4addf59e1cb8a7467e9ced7500e5acb706acf2220ad9bd3e0acd61c5c318a45e80ff2acd30dd8b3801c0ca8b5ba1730f2827bbcab647e76816b2dde28e3789f0c296a5512b6aaaa1d6a837da63a134d7782eda7c70fe8600017305f54bf01d78e5887f8e00b0c41ae507800c769c72982f156af2ba05f8680f6cabbe94703c43060356991f7ff59155b5dd7c7d166a10f6a29eee83f4f9d5fee81ac3c39626687be5722f1c1250caa626e7232ae6ecf4934efebd0cea19da0c3ab24f5d098d478e0e05e9505c9c8ade32dd7fdb9542d5fcde68f9d4b52f4d5d844e8c53c05adbc0b7f97a309e8a9f2eb5ddefa582dd7e412e78b8c4caf24046ed43eed8cf4c99b8d65aade6c2d9b7abc4235dec552b0ad655247139d0a41ceb1ce4355ed448139db3a7be4cfead0cc0d7a0431181c1ca786b7cff250046faa28786932ca35b1ef6f5d887d57fc32ffa72459ee421862bce2c1d143be8edbda14def16757f9d746175ad25ed80e776377dd88cbe0bf55785b1ac9f762d1b14f7824865ed9dcdfa774efd9781921df0bcc0cb594ba515fb8fd3cc3d384891e6b97e2bbb7174554412c48624d7295519bc2e791767991babddffad17f3e120cee296a33880f17a0cf40c48e6c1d6c18423601c99bd23374f2b351084d3f939cb62efe24ca35289601ba4ae24dd44d86a55d610ff0685e7e036b9d16cab4115030c084774aa579838a09505c749912d145f5f540ae1da490a950c40b08e11c66bddc9307125e6fe89670056ebe700667bf45ad7dbb0aa442a9aabb9e1204d13ff241a45574906dd3a0db5f593b91e93131f82de94e6c7c12533d736c580e00cb83c9537657e374cd108c3ca39cce22f6c5a8fc2effc2136a4205498b7ffaabff24399439ca562697557b07edd7d01661dd4c20da40660adf5213318b3de68fa34a39aa35990d495d7913425f7a7e3ea678ff1588f5ca54bce73ec41f7235d29578dc124c407851100335c8eadc8b7fb05d562a319d4f38aaa215fff02ebb93ed1f1cf1fb109f9673e5282ce3004c88a8f81406b60630d628003ba923219d719d7526f99d4962cee63c5a8e9ed7efc0bbb2af42b715b964b2b869f5312b2626c3a4e11aeb2136f21d7199af6910c2b9ca59dba490b0767bbfa68d0f92ba1174dc4ff42e72a9c0b8504e19326ea7faaed41b50209ebda27841f69866db95eac5fd9006371b66433617afb8d851c885998b87c5ff224baaa4122262d35040a71fe1a893ec420c44435d457c712e4b5acb780cae3dc541d662de1e1d4afa3ddc3fc08a45a553a48627ea3ebfabbee33a198f4a6e838887b17ff6403af4860e095a18bb47e08ce0efa19ac4420122e770ad461d4654ee2cffddc96b2e0fc04dbe4cbf3871ec790b7a1ed02f81ff6809409aafb92bc286a571ef4f6121ebf077896af440dadfbddd4b95275448ade6a5b6ef0d605cb86016db1d7cb6373c0dcce9fcbed52cd2cac63d5a24037ce8514e874e7909a6bab6bd54bbe4d0c291fc98a46f7fe957f07ec5d91c8d69e17f4d66f7a81a29a1042edb084ebbbbeb2ffd22b94aef94afc77b342725f25b56f4db64b8bc0be38546d5290ae3df6873c3e132d4ec47582acd0170ab833a8227c191c0471ecf275601a75ca096fcf7f11a83231c8abdc9a0f3b255afba13a97d66768c270d71b8b82ef3c010988b27a22c03bce405ad48ade4db6bfc7e80827cee915430f01fb1a776e04ef459e3901dcd711d836fc17fa1702f3443972344630be79064101a0b595c2cef064970e3511d3d4e98f3d4d953616b93eedf5862a371667ea63fd3e35663c58821f87c562868102c885c57d97298f8e867eb20b27f1208894caa4a050f5e7019fed7fc4a036d170ce2746d85fba1db4653c8910cfdb5a249114d5783e00df6afac011cc9131490dad8951d41234e4d9199fe7b164a7a07ece3750d8ed766ed2498e9ee6c508810019b7c50fd0e70780c1b28657907dcd4b3fc9f4622fccb7d87fc6b39c791ca8ba335136ec355c8bb780500e5163a6fb28dd1e0a61dea3fb154ddf1a0ac0058fc515224ad77ffc39546f62838440ff3e489466f8d6337c03086001e90f355dd2f387412a8a39df9832482519f60013c08dbd90b6c6fad66b1f59711b5408f6d49b3d034aa6fb0bcf0a306f088309f0ff06768184e435cebe91d03e51f9357398f6fc8beeb2bd3d344a529ccbcbe674b4f90c9ce699e3e50b5f8b631564ec23f5fc6d60be2cbf17869fa38cef77e396b7667a7822d995882474d259339b2f8ee2d3ba4158e3253adeb3234d355656709ba57c9e5f56a09835528bf16a4a2524836f1d9925a3a61a22d1a7ecced6b54a1d69750047607b7b52ddcb80ff9381b046589136c889e237b91569479d51b36df31735b5f4d0fd78493b3c6c0ccc04637827bc8c17545d56563d88ad05cf790ebcdb51d5e0822cec4fc902ad580ac07e136b9759dc7b8304940dc194aa0c8b4f79d66573349feb5454623cb8f59907a946f156696c50d636fcc61afbacb22a6f5f970c141fd629ea47d014b92283a5c92ccd46d0560ec383847e58b84779c71e89db05fe8609292c412490f1d5cca8be858c3009b3e1b1e5d95098fe975c95aa9dfc3d6f0074c181e577033b9b2588b66ba0f6b8c6b80fab416362c8e05ed346f5cc36b87f8e4a619360d2ab1397dcd872632a411cf7803027bbd03dfd923b45ad1739c23a75988d1bc1be27b06e0c86bbeb90bcd9a71a9830b71a5590ce6edbd4d86d67af068ac2a1b3d57a142e83fc7ba1a086890604e25162db231e7074a4e2465e0d6405cacb28a0cb2693cad8fb0fd59217e4b16a346d117b8804e9888ec953358bbc0c473bdc14d474312329340aad289b6069fb760cd4b34a09594003d1231060ca4bf4d14c49a535056db8ba3574b957ec9ed3623eb733983d6283e411c1343fa6898bc68be57f42c87dd69a12101d3088c0e8c15f8a4aaae8d6e0684b431de7d0aeb71d0533c2b3529f526946db008815fb7f908c16e60cbfa51688bde1217a9dfc86ce3d11a2b3c215d16b3cf257246a3dcb7eace6fc9e77f90c90d17f0011db00dc8c8fb21fe6a1e9b631421a77f8eef98d1f2cbf4eae9f9405c4ed3664b3956e2f3f0d02114df1c05d50ae8e19c64ad4416875c5010bd16a9e1fa2f73fffdd2a9f3a34dc54456e4395f71300e084b00b1fed9cd08c9afc4814f56485d6da785f2dbc1138917b1b8699cee65b89fd159e430150455b71c6e4901c4b3f621d6c5ee145b24841c0160dbcb82b8eaf28b528a14a0fd4f6aa057f7b7495864a9ada198a222b41648ca2fee1964fa81a10bb2a8e20d44c7a294f53cc5071788451cf74153d249b423f43f080265aa1ad8938a6e4b4e3202e6e667d0fb10152f01f5e3fe6c761a0cf098f656e425604b27789607f0b4c96cae92d89345b4742f0dd2e94690da33dd7d26b1fb7921d0288b3f28ce6b6dd28b1b6423794532e8089786caf7b729630faead3284b7064e3ee2b6ba41a70a36fcbf1abc406521de54699549536d4c9487114a3ae431183cc395cf65e5ac6f6051951d8aa89420f4dc21af949993baf5bf73c0809cfd0e1f541af8192f85d742b8e224a8a616ea753c239049f60e5b525c0709f49e10cbdecc5ec23714033a88d6c5f318bb19eff899c142d7ff4c9eadafb8a75dd7a8b49289e2f4b444df734a7c969752b8caae98434d61c03656b34a8c1ac4c7888d6fd9914e5bbcbea2112d8e54b9983f4514a6a0278d52c7830fd895533db1e384526baaadcbd31a1257e95380d6b124980048a43590115270bf1cbd992660324476c6572799d1656c898ede7c0a84c8803d53be95961aaa9ebe99fdb035695a1da2f2f089f74ec4007897d3cba8feab00852865d8b27f172588245238d077d304344740ab1d62013e3bac6e7e80eaf3e159083de145cd3eae97915ebbb3a8edccb5d8745b0148768c6fafd0997d00ecdbc0646a8d61eb0d2066086787fe3a7da10fdc0190d0e4508d6aab63191da3e688304fdeca316c3ab740ffcd3daa2c682c49ee00e4c1f4d6c919a7774f8d28ad2df102002168e79015e30c623e5ef0ff97306738249756004b5b090198791dd94d31560b680439d119c695399fc59553c1fe0fa92b7a076768705f4345ab35792cdcb705484f64854cd66e321db0b4ca99929", "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"}})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000090000000000000000000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r7 = syz_open_pts(r5, 0x141601)
ioctl$TCSETS(r7, 0x5402, &(0x7f0000000680)={0x80000001, 0xfffffffd, 0xf4e6, 0x7fff, 0xfe, "f8b954dc87a7b159489d7fcca7e17519ba9ce3"})
write(r7, &(0x7f0000000000)="d5", 0xfffffedf)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x0, 0x4)

5m20.62207778s ago: executing program 1 (id=4093):
set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6)
set_mempolicy(0x0, &(0x7f0000019080)=0x10001, 0x24e8feed)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c000c80080002"], 0x44}}, 0x2000800)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400108006000a00240000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r7, 0x8, 0x4a5ac7f1577263be}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x2c048040}, 0x0)
set_mempolicy(0x8000, &(0x7f0000002100)=0x4, 0x7)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r2, &(0x7f0000000ac0), 0x0}, 0x20)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x3, '\x00', r7, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
r10 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00')
r11 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
write$smackfs_cipsonum(r11, &(0x7f0000000200)=0x6, 0x14)
pread64(r10, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002640)={0x18, 0x25, &(0x7f0000019100)=ANY=[@ANYBLOB="18000000000000690000e300000018110000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018530000000000000000000000000000185a000003000000000000000000000085100000010000001511d8fff0ffffff8510000006000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000003d950600ffffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000002300)='GPL\x00', 0x5, 0x20, &(0x7f0000002340)=""/32, 0x41100, 0xc, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002540)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002580)={0x0, 0xe, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000025c0)=[r2, 0x1, r10, r2, r2, r2, r2], &(0x7f0000002600)=[{0x5, 0x1, 0xe, 0x2}, {0x4, 0x4, 0xa, 0x8}, {0x5, 0x4, 0x9, 0x5}, {0x3, 0x5, 0x5, 0xb}], 0x10, 0x4}, 0x94)
write$FUSE_GETXATTR(r0, &(0x7f00000020c0)={0x18, 0x0, r1, {0x8}}, 0x18)

5m20.620711255s ago: executing program 4 (id=4094):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x11, 0x1ae, 0x15, &(0x7f0000000a40)="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", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x4}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x2, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl730\x00', [0x4fa7, 0x105, 0x2, 0x2, 0x2000001, 0xcc7, 0x7ffffffb, 0x5c952398, 0x5, 0x3fe, 0x2, 0x40, 0x1, 0x1, 0x9, 0x2, 0xfffff801, 0x8, 0x48f3, 0x2000008, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x403, 0x3d, 0x8, 0x0, 0x7ffffff, 0x200485b]})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
getpid()
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r3 = fanotify_init(0x40, 0x40000)
readv(r3, &(0x7f00000003c0), 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x96)
fanotify_mark(r3, 0x1, 0x40001019, r4, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480)=0x1000)
close_range(r0, 0xffffffffffffffff, 0x0)
getdents64(r4, &(0x7f0000000680)=""/146, 0x92)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0)
r5 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
timer_create(0x1700, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-neon\x00'}, 0x58)
epoll_create(0x2)
read$FUSE(r5, &(0x7f0000000d00)={0x2020}, 0x2020)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)

5m20.119697612s ago: executing program 1 (id=4097):
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2745], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x5f}, 0x94)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="40061700007c4caf5e7fb086eeb4001706b4516803a95c28657f7f35be599c2dae4df5bc7649"], 0x0, 0x0, 0x0, 0x0}, 0x0)

5m19.845613559s ago: executing program 5 (id=4099):
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2)
ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000000)=@raw={0xc, 0x1, "47657964741c"})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
openat$cgroup_int(r0, 0x0, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x12f0c0)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1028, 0x5, 0x11, 0xffffffffffffffff, 0x83000000)

5m19.296694239s ago: executing program 1 (id=4100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000080)=0xfffffffd)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000400001040000000000000000010000000c00d6000500000000000000100001800c00108008000100050000000800020008000000d90592585f36b5622e9c0ef37497174512823b15e62ec625837e793bb158c9e403a4ffffffffffff3e569b554b6cc6843f6f4e443598c1c666c8260303ee79b067029b32735b3efcea95bbc8b8ffda3ecc9b3c0b739b2b2026a1394a120f6300000000ce466108ee6f8f5e62d0ec6a9ae4de0e7a3640d80b33a5273fa9f736b41e66226b5497f05b0b8edcd65f9f44a8ef0d73244c3740db8d3e92741943c9b2704282e041b10c27e265f493bc849a4a228872197ae22ee10598bd2cdf6251daa64588ec6847044d995e3f7fd9f804bab1ae9e29b798580e4b077a300cbce3d3c2592dab785378033c7bec61fbbda36440e7531ee5deb551136b44a3e67463733f04bb70e65c4ac7b4e52a348dd21f95a8b77055d6021e"], 0x87}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100))
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f000000c940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x2, 0x8010)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r8, &(0x7f0000002380)={0x2020}, 0x2020)

5m19.08640293s ago: executing program 1 (id=4102):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f00000002c0)=""/102400, 0x19000)
userfaultfd(0x801)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f00000001c0))
r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6)
creat(0x0, 0x1a2)
unshare(0x22060600)
ftruncate(r2, 0x2000000)
fcntl$addseals(r2, 0x409, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x8931, 0xffffffffffffffff, 0x29a71000)
socket$nl_generic(0x10, 0x3, 0x10)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

5m17.473551371s ago: executing program 1 (id=4107):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)

5m17.436343313s ago: executing program 4 (id=4109):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x9, 0x5324cb1f58981411, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xc}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4c000)
syz_usb_connect(0x1, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
r2 = socket$unix(0x1, 0x2, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x11)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006be000/0x4000)=nil, &(0x7f00006be000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000721000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0xfc6b}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0x453d, 0x800, 0x8, 0x2000c1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
fgetxattr(r1, &(0x7f0000000100)=@random={'trusted.', '&\x00'}, &(0x7f0000000140)=""/146, 0x92)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000a4899105bab5997e96b79a1b1f66be489a1fbd361ebe0100000034c485cd73ea2351", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4, <r5=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x1004, &(0x7f00000008c0)=""/4100, 0x0, 0x6b}, 0x94)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5m16.950201535s ago: executing program 35 (id=4107):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
preadv(r1, 0x0, 0x0, 0x0, 0x0)

5m16.892199572s ago: executing program 5 (id=4111):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101583, 0x0)
ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000040)=0x6) (async)
close_range(r0, r0, 0x0) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x10001, 0x880)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000000c0)) (async, rerun: 64)
r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async, rerun: 64)
readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/7, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', <r4=>0x0})
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000300)={@initdev, <r5=>0x0}, &(0x7f0000000340)=0x14) (async, rerun: 32)
getsockopt$inet_mreqn(r2, 0x0, 0x7, &(0x7f0000000380)={@remote, @rand_addr, <r6=>0x0}, &(0x7f00000003c0)=0xc) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', <r7=>0x0, 0x29, 0xc7, 0xce, 0xea, 0x3c, @private2, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x700, 0x85ec, 0x1000}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'erspan0\x00', &(0x7f00000004c0)={'tunl0\x00', <r8=>0x0, 0x8, 0x10, 0x6c, 0x0, {{0x21, 0x4, 0x2, 0x6, 0x84, 0x68, 0x0, 0x81, 0x29, 0x0, @private=0xa010102, @loopback, {[@ssrr={0x89, 0x2b, 0xf2, [@empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x12}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @loopback, @rand_addr=0x64010102, @loopback]}, @timestamp_addr={0x44, 0x24, 0x85, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x5}, {@private=0xa010100, 0x3}, {@empty, 0x4}, {@rand_addr=0x64010100, 0x7}]}, @noop, @noop, @noop, @noop, @cipso={0x86, 0x1a, 0x2, [{0x1, 0x4, "e785"}, {0x6, 0x10, "327811f9936e1d599204d895791b"}]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', <r9=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'team_slave_1\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2100010}, 0xc, &(0x7f0000000a40)={&(0x7f0000000640)={0x3f4, 0x0, 0x5e8e95bfa0748c1a, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1f4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fb2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x59fdf32b}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '--+[\x93+\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'blkio.bfq.dequeue\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_VALUE={0x27, 0x4, "63bcc5feb0d261dc61dff7ae636d70745bb476ac8cc4ef9d70be3961aa6ae3eee85452"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vcs#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'blkio.bfq.dequeue\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffbcdb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '({}%.+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'blkio.bfq.dequeue\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/ppp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-*(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '-&\'{\\{\xe1-\b,+-/!\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x6a, 0x5, "dbcad5141303487babf15549663b2cb1953cf5570ad4c9a94adc871162ceff73ea2c5d07df6b56cb18cf4771bd45cfae62918703c069925fcd97cf3329ce4a4986782a85257958067d053ef37dd251d08e1f9a92708968d8975243c343d7a08c324e10240d3f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd1}, @ETHTOOL_A_BITSET_MASK={0x34, 0x5, "775682bf54f9fa47ae5e4859585e802cdc535f814c67e9fc28f050f4959adfb2434c2cc270d140de1d2c2be3eed5307b"}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x40000}, 0x4840)
r11 = socket$isdn_base(0x22, 0x3, 0x0) (async, rerun: 32)
write$cgroup_devices(r1, &(0x7f0000000ac0)={'c', ' *:* ', 'r\x00'}, 0x8) (rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000b00)={'gre0\x00', r8, 0x20, 0x10, 0x18b, 0x1, {{0x16, 0x4, 0x1, 0x0, 0x58, 0x64, 0x0, 0x2, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x50, 0x1, 0xf, [{@multicast1}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x1}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010101, 0x3}, {@empty, 0x400}, {@empty, 0x8}]}, @rr={0x7, 0x7, 0xd8, [@remote]}, @noop]}}}}}) (async)
r12 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r12, 0xc0206434, &(0x7f0000000c00)={0x1000000000000000, 0x0, 0x10001}) (async)
ioctl$OCFS2_IOC_INFO(r11, 0x80106f05, &(0x7f0000008140)={&(0x7f0000007f80)=[&(0x7f0000000c40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000000c80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000000cc0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x180000000}}, &(0x7f0000000e00)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x180000000}, [{0x7, 0x3}, {0x0, 0xffffffffffff8001}, {0x1c3, 0xf593}, {0x7, 0x728}, {0x3, 0x5}, {0x8, 0x7fff}, {0x2, 0x42}, {0x2, 0xffff}, {0xc, 0x59}, {0xa, 0x8}, {0x30, 0x3}, {0xbbd, 0x8}, {0x4, 0x1}, {0x6, 0x23ad9a4b}, {0x800, 0x4}, {0x9, 0x4}, {0x100, 0x6}, {0x10, 0x5}, {0xc6, 0x5}, {0xfffffffffffffffa, 0xe02}, {0x3, 0x9}, {0x0, 0x9}, {0x9, 0xffffffff}, {0x710, 0xa}, {0x3, 0x2}, {0x64, 0x7fffffffffffffff}, {0x8001, 0x1ff}, {0x2, 0x40000}, {0x8, 0x3}, {0xc, 0x7}, {0x2, 0x5}, {0x0, 0xfffffffffffffffc}, {0x0, 0x10}, {0x3, 0x8001}, {0x7, 0x8}, {0x3, 0x81}, {0xffffffffffff7fff, 0x5}, {0xf5, 0xfffffffffffffffb}, {0x1, 0x135a}, {0x0, 0x1}, {0x2, 0xffff}, {0x101, 0x9}, {0x7, 0x8}, {0x29f0, 0x6}, {0x7, 0x7}, {0xd4, 0x7}, {0x5, 0xff}, {0x3, 0x8}, {0x5, 0x6}, {0x87, 0x1}, {0x647, 0x8000000000000000}, {0xfffffffffffffff7, 0x4}, {0x5a, 0x8}, {0x0, 0x3786}, {0x9, 0x8000}, {0x9, 0x8}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x1}, {0x6, 0xfffffffffffff000}, {0x8001, 0x80000001}, {0x2000000000000, 0x1}, {0x500000, 0xc8d}, {0x38, 0x23f7c00000000000}, {0x2, 0x2}, {0xda72, 0xee5}, {0x8000000000000000}, {0x4, 0x9}, {0x6, 0x8}, {0x3, 0x101}, {0x9ff7, 0xe6}, {0x0, 0x7}, {0x9, 0x800}, {0x2, 0xf}, {0x80000000, 0x5}, {0x8, 0x10}, {0x5, 0xfffffffffffffff8}, {0x7, 0x10001}, {0x401b, 0x8}, {0x401, 0x10000}, {0xc, 0x1}, {0xfffffffffffffe00, 0x5}, {0x7, 0x6}, {0x9, 0x3}, {0x80000001, 0x2}, {0xb, 0x9}, {0x7, 0x5}, {0x57, 0x6}, {0x5, 0xd411}, {0x8, 0x4}, {0x6, 0x1000}, {0xfffffffffffffffb, 0x8}, {0x32, 0x8000}, {0x6, 0x323}, {0x2, 0xfffffffffffffffe}, {0xffff, 0x8}, {0x200, 0x8}, {0xffffffffffffff81, 0x7ff}, {0xffffffff80000001, 0x5}, {0x2, 0xfffffffffffffff9}, {0x2, 0x4}, {0x2, 0xc}, {0x0, 0x8}, {0x100000000, 0x40}, {0x6, 0x6}, {0x8001, 0xfffffffffffffffb}, {0x10, 0x2}, {0x1ff, 0x7ff}, {0x6, 0x200}, {0x0, 0x1}, {0xf, 0x9}, {0xbf0, 0x6e}, {0x1, 0x3fe000000}, {0x5, 0x5}, {0x2, 0x4}, {0xa2, 0x3f}, {0x0, 0x6}, {0x6f81, 0x2}, {0x4, 0xed6d}, {0x78, 0xffff}, {0x5, 0x5}, {0x3, 0xa}, {0x5, 0x3}, {0x6, 0xfffffffffffffffb}, {0xffffffffffffff1c, 0xef}, {0x3, 0x4}, {0xf, 0x6}, {0x6, 0x9}, {0x7ff, 0x8f}, {0x1, 0x7fffffffffffffff}, {0x81, 0xe}, {0x5f65c00c, 0x9}, {0x57f, 0xd}, {0x6, 0x1}, {0x2f, 0x2}, {0x3ff, 0x5}, {0x8, 0x1}, {0x6, 0x2}, {0x5, 0x4}, {0x8000000000000000, 0x81}, {0x1d, 0xbe4}, {0xfffffffffffffffa, 0x5}, {0x30b1, 0x446}, {0x100}, {0xd000000000, 0xa9dc}, {0x8, 0x6}, {0x7, 0x1000}, {0x9, 0x7}, {0x10000, 0x4}, {0x1ff, 0x9}, {0x41, 0x4}, {0xfff, 0x3}, {0x7, 0x10000}, {0xfff, 0xd25cda6}, {0x5, 0x6}, {0x4, 0x2b}, {0x5, 0x5}, {0x1f5, 0x401}, {0x4, 0x7}, {0x9, 0x9}, {0x890a000, 0x9}, {0x7, 0x5}, {0x0, 0x80000001}, {0x35bd, 0x8001}, {0x8001, 0x1}, {0x6224b73f, 0x400000000000}, {0x7, 0x9}, {0x0, 0x2}, {0x7}, {0x9, 0x4}, {0x7, 0xffffffffffffffff}, {0xb95a, 0x4}, {0x0, 0xf}, {0x3, 0x8}, {0x7fffffffffffffff, 0x4}, {0xfffffffffffffffb, 0x4}, {0x8000000000000000, 0x4}, {0x0, 0x189}, {0xffff, 0x1}, {0x9, 0xfffffffffffffff8}, {0x400}, {0x4, 0x4}, {0xfffffffffffffc00, 0x3}, {0xff, 0xf2}, {0xffffffff, 0x4}, {0xfffffffffffffff9, 0x8001}, {0xd4e, 0x3}, {0x8000, 0x10}, {0x8, 0x5}, {0x8, 0x1}, {0xb, 0x5}, {0x5, 0x40}, {0x9, 0x7}, {0x100000001, 0x8}, {0x2, 0x4f8}, {0xcb5, 0x5}, {0x3, 0x3}, {0x125, 0xffffffffffffffff}, {0x200, 0xffffffffffffffb4}, {0x4, 0xe}, {0x5, 0x7}, {0xc, 0x8}, {0xbc, 0x6}, {0xffff, 0xffffffff}, {0x76, 0x40}, {0x21, 0x2}, {0xfffffffffffffff8, 0x1}, {0x2, 0xabe}, {0x8, 0x2}, {0x8000000000000001, 0x7}, {0x0, 0xffffffff}, {0x7fffffff, 0xfffffffffffffffb}, {0x75, 0x1}, {0xfffffffffffffffe, 0x5}, {0xfffffffffffffffd, 0x8}, {0x1400, 0x9}, {0x1, 0x1}, {0x1, 0x6}, {0x8, 0x200}, {0x167e, 0x1}, {0x40}, {0x0, 0xffff}, {0xae, 0x7}, {0x6, 0xffffffffffffff7e}, {0x4, 0x6c4}, {0x0, 0x8000000000000001}, {0x8, 0x1}, {0x80000000, 0xd4}, {0x1, 0x4}, {0x800, 0x8}, {0xfffffffffffffffb, 0xf}, {0x4, 0x4}, {0x0, 0xa}, {0x6, 0xfffffffffffffffc}, {0x8, 0x2}, {0x101, 0x3}, {0x1, 0x40}, {0x5, 0x800}, {0x1, 0x1000}, {0x9, 0x9}, {0x1, 0x6}, {0x6, 0xffffffffffffffff}, {0x3, 0x9}, {0x47f7}, {0xb, 0xc04}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0xfffffffffffffff8}, {0x6}, {0x2e19}, {0x400, 0x9}, {0x53e0, 0x2}, {0x3ff, 0x9}, {0xa, 0x9}, {0x3}]}, &(0x7f0000001e40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x4}, &(0x7f0000001f80)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000001fc0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x4a1, 0x10}, {0x2, 0x5}, {0x8000, 0xd542}, {0x3, 0x6}, {0x1, 0x3a1}, {0x800, 0xcc44}, {0x2, 0x8}, {0x9, 0x1}, {0x800, 0x5e31}, {0x3, 0x3}, {0x3, 0xf6d}, {0xffffffff, 0xe6}, {0x3, 0x7}, {0x5, 0x80000000}, {0x4, 0x7}, {0x8, 0x3}, {0x9, 0x8}, {0x3, 0x4aa0000}, {0x1, 0x9}, {0xee8, 0xffffffffffffffff}, {0xf8, 0x280000}, {0x80000000, 0x80}, {0x4c6, 0xf23b}, {0xfffffffffffffff8, 0x7}, {0x8, 0x5}, {0x7, 0x93}, {0x3, 0x80000000}, {0x3, 0x80}, {0x309, 0x9}, {0x8, 0xffffffffffffffff}, {0x8, 0x2}, {0x100000001, 0xc}, {0x5, 0x2a52}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x80000001}, {0xd01c}, {0x2, 0x80000000}, {0x4, 0x2}, {0x1000, 0x7fff}, {0x2, 0x8bc}, {0x3, 0xd}, {0x3, 0xfffffffffffff000}, {0x8, 0x8000000000000001}, {0x47a, 0xfbd}, {0x2, 0x7f}, {0x8000, 0x10001}, {0x6, 0x4}, {0x7ff}, {0x7ff, 0x7}, {0x0, 0x81}, {0x2, 0xcf8}, {0x1, 0x3}, {0x8001, 0x8}, {0xfffffffffffffff4, 0x6}, {0x14, 0x2}, {0xfffffffffffffffb, 0x1000}, {0x4, 0x1000}, {0x5, 0x10}, {0x3, 0x8}, {0x2, 0xe}, {0x80000001, 0x1}, {0x2, 0x7}, {0x7, 0x400}, {0xa58, 0x9}, {0x5, 0x8000000000000001}, {0xfffffffffffffc00, 0x5}, {0x3686, 0x8001}, {0x5, 0x800}, {0x3, 0x5}, {0x6, 0x800}, {0x5, 0x80000000}, {0x2, 0xa5}, {0x4, 0xfffffffffffffff1}, {0x100, 0x8}, {0x100000000, 0x800}, {0x25b, 0x1}, {0x7ff, 0x80000001}, {0xffffffff, 0x2}, {0x8be6}, {0x8, 0xeb5a}, {0x5, 0x9}, {0x8, 0x8b}, {0x2, 0xfffffffffffffffa}, {0xfff, 0x4b}, {0x80000000000000}, {0x3, 0x3029}, {0x4, 0x80000000}, {0x5e56, 0x8}, {0x16, 0xb}, {0x478, 0x9}, {0x5, 0xfff}, {0x5, 0x1}, {0x73, 0x5}, {0x7, 0x1800}, {0x8aa, 0x3}, {0x200, 0x43}, {0x4, 0x4}, {0x1, 0x7}, {0x7, 0x7}, {0x1000, 0xe09}, {0x1ff}, {0xfffffffffffff0fb, 0x9}, {0x1, 0x109}, {0x3, 0x8001}, {0x7fffffff, 0xffffffffffffff10}, {0x0, 0x40f9ea0f}, {0x6, 0x40}, {0x58, 0xed}, {0x1, 0x3ff0004}, {0xd, 0x1000}, {0x3, 0x7}, {0x8000000000000000, 0x6}, {0xd, 0x6}, {0x5, 0xfffffffffffffffa}, {0x6, 0xd8cd}, {0xffffffffffffffff, 0x3ff}, {0x0, 0x849}, {0xffffffffffffffc8}, {0x8, 0x6}, {0x0, 0x7ff}, {0x8, 0x1}, {0x1, 0xb9}, {0x4, 0x100000001}, {0xfff, 0x101}, {0x3}, {0x800, 0x14000000000}, {0x4}, {0x1, 0x4}, {0x100000000, 0xd}, {0xffffffffffffffff, 0x4}, {0x8}, {0xc78}, {0x3, 0x600}, {0x8000000000000000, 0x7a}, {0x7ff, 0x6}, {0xffffffffffffffff, 0x100000001}, {0x6, 0xb}, {0x7fffffffffffffff, 0x8}, {0x7, 0x6}, {0x80, 0x8000}, {0x1, 0x2c025135}, {0x4, 0x4}, {0x2, 0x2}, {0x9, 0x665}, {0x1, 0x6}, {0xce, 0x7}, {0x7f, 0x4}, {0xc2}, {0x5, 0x1}, {0xd, 0x2000200000000}, {0x0, 0xb9f}, {0x1ff, 0x1}, {0x38, 0x4}, {0x0, 0x6}, {0x8, 0x8001}, {0x1c, 0xb}, {0x7f, 0x5}, {0x9, 0xffffffff}, {0x800, 0x3}, {0x9d8, 0xf9}, {0x5, 0x2}, {0x9, 0x2}, {0x100, 0x1ff}, {0x0, 0x7fffffff}, {0x5, 0x81}, {0x3, 0x3}, {0x9, 0xba6}, {0x10001, 0x80000000}, {0x23}, {0xe, 0x1}, {0x6, 0x8}, {0x40, 0x8}, {0x7fffffff, 0x7}, {0x1, 0xffffffffffff8000}, {0x7fff, 0xffffffffffffffff}, {0x7fff, 0x6}, {0x7fff, 0x8}, {0x8, 0x5}, {0x3, 0x5}, {0x3a, 0x7}, {0x8, 0x5}, {0x0, 0x81}, {0xffffffff00000001, 0xc00000000000}, {0x4, 0xfffffffffffffff7}, {0x1, 0x3}, {0x9, 0x1}, {0x100, 0xfa9}, {0xffffffff, 0x2}, {0x7ff, 0x1}, {0x2, 0x16332853}, {0x3fe, 0x7f}, {0x5, 0x2388}, {0x1, 0x3}, {0x5, 0x6}, {0x1, 0x6558ca01}, {0x80}, {0x8, 0xffffffffffffffc0}, {0xa8e, 0x7fffffff}, {0x5, 0x7}, {0x7, 0x10000}, {0xaa, 0x3}, {0x4, 0x7}, {0xffff, 0xfffffffffffffffc}, {0x200, 0x531}, {0x100000001, 0x1}, {0x5, 0x9}, {0x9, 0x2}, {0x1, 0xc}, {0x9, 0x2}, {0x800, 0xfffffffffffffffe}, {0x10001}, {0x80000001, 0x3}, {0x3, 0x5b5fffe3}, {0x8000, 0x9}, {0x3, 0x81}, {0xdae, 0x6b}, {0x6, 0x2}, {0xf713}, {0x100, 0x7a}, {0x40, 0x6}, {0x81}, {0x200, 0x2}, {0x1, 0x2}, {0x1, 0xfffffffffffffffe}, {0xfffffffffffffffa, 0x6}, {0x0, 0x80000001}, {0xfffffffffffffffd, 0x8}, {0x5, 0xff}, {0x0, 0x4ced}, {0xa}, {0x2, 0x2}, {0x10001, 0x800}, {0x2, 0x7}, {0x0, 0x3}, {0x7d, 0x100000000}, {0x8, 0x3}, {0x10000}, {0x6, 0x1000}, {0xb9, 0x4}, {0x7fff, 0x80}, {0x4000000000000, 0x1}, {0x9, 0xc}, {0x9, 0x3}, {0xffffffffffffffff, 0x8}, {0x1430, 0x7fffffffffffffff}, {0x7, 0x6}, {0x80000001, 0x5}, {0x4, 0xfc5}, {0x20, 0xf707}, {0x200, 0x89c}, {0x2, 0x2}, {0x7fffffff, 0xffff}, {0xfffffffffffffffe, 0x3}, {0x5, 0x7f}]}, &(0x7f0000003000)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000003080)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x3125d8b3147e295f}}, &(0x7f00000030c0)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000003100)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000003140)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xaa0be9e499c49bb3}}, &(0x7f0000003180)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0xfffffffffffffffe, 0x26}, {0x7, 0x40}, {0x4, 0xbf2}, {0x8000, 0x1}, {0x4, 0x4}, {0x3, 0x8000000000000001}, {0x2, 0xffffffffffffffff}, {0x6, 0x5275bfee}, {0x8, 0x61b}, {0x4, 0x5}, {0xf9, 0x5}, {0x7fff, 0xb3}, {0x0, 0x2}, {0x5ac0, 0x6}, {0xfff, 0x15}, {0x6, 0x6}, {0x100000001, 0x4c97}, {0x9}, {0x7e03000000000000, 0x8}, {0x3a6d, 0x6}, {0x2, 0x3}, {0x4f, 0x100000000}, {0x8000000000000001, 0x7}, {0x3827, 0x3}, {0xf1e, 0x100000000}, {}, {0x3, 0x6}, {0x0, 0x81}, {0x774, 0x7ff}, {0xc7}, {0xfff}, {0xae36, 0x1}, {0x0, 0x6}, {0x5, 0x7}, {0xa0000000, 0x7fff}, {0x4, 0x1000}, {0x9, 0x200}, {0x2, 0x9}, {0x7, 0x13}, {0x7, 0x4}, {0x9, 0x80000000}, {0x12, 0x11}, {0x0, 0xf}, {0x7, 0x5}, {0x200, 0x2}, {0x316, 0x6dc}, {0x6, 0x100000000}, {0x9, 0x7}, {0x17bf, 0x5}, {0x2, 0xd6b}, {0x2000000000000, 0x5}, {0x9, 0x6}, {0x1, 0x10001}, {0x8000000000000000, 0x4}, {0x36a, 0x6}, {0x5, 0x759}, {0xf86, 0x5}, {0x76d, 0xfffffffffffffffb}, {0x7, 0xfffffffffffffff7}, {0xfffffffffffffff8, 0x1}, {0x5, 0x2}, {0x6, 0x660}, {0x6, 0x7d571c71}, {0x2, 0xa3d7}, {0x53b9, 0x8}, {0x80000001, 0x7}, {0x5, 0x3}, {0x7, 0x7}, {0x4, 0x7}, {0x7, 0x6}, {0xe2, 0x6}, {0x8000, 0x74ded676}, {0x7, 0xfffffffffffff2ca}, {0x7, 0x1}, {0x0, 0x8}, {0xe1, 0x2}, {0x1, 0x6}, {0x6c61, 0xffffffff80000000}, {0x3, 0x5}, {0x7fffffffffffffff, 0xff}, {0x2, 0x14}, {0x6, 0x8}, {0x0, 0x8001}, {0x8, 0x7}, {0x1, 0x6}, {0x3}, {0xfde4, 0x9}, {0x7, 0xc}, {0x36793cb9, 0x8}, {0x8, 0x71eb}, {0x6, 0x1f46}, {0x8}, {0x6, 0x8}, {0x2, 0x911b}, {0xff, 0x7}, {0x1, 0x1}, {0x2, 0x4}, {0x6, 0x5}, {}, {0x9, 0xa}, {0x8000000000000000, 0x7}, {0x9, 0x3d}, {0x8, 0x100000001}, {0x7, 0x6}, {0x7ff, 0x8}, {0x7ff, 0x4}, {0x4c6, 0xcd2}, {0x5, 0xc0c}, {0x7, 0x1}, {0xfffffffffffffffe, 0xa4}, {0x6d, 0x8}, {0x1, 0x4}, {0xac5c, 0x10}, {0x66, 0x100}, {0x1, 0xf9}, {0x401, 0x6}, {0x8, 0x10}, {0x3, 0x5}, {0x5, 0xfffffffffffffffe}, {0x8, 0xfffffffffffffffc}, {0x3, 0xe11}, {0x80, 0xc60a}, {0xffffffff, 0x10000}, {0x6, 0xfffffffffffffff8}, {0x4445, 0x400}, {0xd}, {0x0, 0x2}, {0x1, 0x800}, {0x1, 0x7}, {0x6, 0x5}, {0xfffffffffffffff7}, {0x2, 0x3}, {0x9, 0x4}, {0x6, 0xade}, {0xbc, 0x5}, {0x6, 0x8}, {0x120, 0x7}, {0xfff, 0xff}, {0x3, 0x8}, {0x4e, 0x200}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0xef}, {0x800, 0x8}, {0x8000000000000000, 0xc6f3}, {0x65, 0x1000}, {0x2, 0x6b76}, {0x5, 0x101}, {0xfff, 0x4}, {0x7e, 0xe}, {0x3, 0x9}, {0x9, 0x7fff}, {0x3fe0, 0x7}, {0x10, 0x1d}, {0x8}, {0x6, 0x5}, {0x6, 0x7b}, {0x5, 0x4}, {0x3, 0x6}, {0x3, 0x2}, {0x10000, 0x10}, {0x8000000000000001, 0x100000001}, {0x39c, 0x100}, {0xfffffffffffffffe, 0x3}, {0x117, 0x4}, {0x4, 0x8}, {0xffffffffffffff8f}, {0x401, 0x7}, {0xa, 0x7}, {0x6, 0x4}, {0xddfa, 0x7}, {0x100, 0x100000000}, {0x6, 0x7}, {0x6f, 0x3}, {0x401, 0x6}, {0x10, 0x2}, {0x6, 0xe281}, {0x7fffffffffffffff, 0x8}, {0x10001, 0x7}, {0x0, 0x6}, {0x400, 0xfffffffffffffff9}, {0x7}, {0xffffffffffffffff}, {0x7, 0x6}, {0xfffffffffffffffd, 0x4}, {0x100000001, 0x10001}, {0x1, 0x765}, {0x6, 0x2}, {0x9, 0x7}, {0x7cc3f7f1, 0x5}, {0x9}, {0x8}, {0x800, 0x5}, {0x5a, 0x480000000000000}, {0x0, 0x7}, {0x612, 0x1}, {0x0, 0xffff}, {0x3, 0x9}, {0x4, 0x8}, {0x7, 0xb40}, {0x4, 0xe}, {0x1, 0x40}, {0xffffffffffffff01, 0x128}, {0x4}, {0x7, 0x6}, {0x8000000000000001, 0x7ff}, {0x0, 0x2cc}, {0xff, 0x4}, {0xfff, 0x8}, {0x1, 0x4}, {0x5, 0x4a5}, {0x100000001, 0x6}, {0x100000000, 0x3}, {0x8, 0x4}, {0x1, 0x9}, {0xfff, 0x2}, {0xdd9, 0x1}, {0x7fffffffffffffff, 0x1}, {0xdaf, 0x6}, {0x74ac, 0x7}, {0x423, 0x8}, {0x4e, 0x5}, {0xffffffff80000000, 0x5}, {0x8, 0x5}, {0x1200000000000, 0x4}, {0x3, 0x1}, {0x2bf9, 0x9}, {0x1, 0xfffffffffffffff8}, {0x9, 0xfffffffffffffff9}, {0x7, 0xf51}, {}, {0x4, 0x5}, {0x6, 0x7}, {0x5}, {0x8000000000000000, 0x7}, {0x6, 0x3}, {0x1000, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x6c8f5664}, {0x4, 0x7}, {0xc, 0x8}, {0x3, 0x1}, {0x4, 0xe}, {0xfff, 0x7}, {0x2f, 0x6}, {0x4, 0x8}, {0x4, 0x5}, {0xffff, 0x2}, {0x100, 0x1}, {0x3, 0xb}, {0xff, 0x9}, {0x6, 0x807}, {0xcc2, 0x6}, {0x100, 0x8}]}, &(0x7f00000041c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000000}}, &(0x7f0000004200)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000004280)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f00000042c0)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000004300)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000004340)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000004380)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000004400)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x100000001, 0x15}, {0x4}, {0x80000001, 0x2}, {0x6, 0x22}, {0x6, 0xe}, {0x4, 0xff}, {0x5, 0xfffffffffffffffe}, {0x6, 0x10001}, {0x5, 0x6}, {0xfffffffffffffff9, 0xb9}, {0x2, 0x7fff}, {0x7, 0xffffffff}, {0x0, 0x7}, {0x4, 0xe}, {0xf, 0x6}, {0x0, 0x3}, {0x3, 0xffffffff}, {0x4, 0x80000000}, {0x4a, 0x3}, {0x6, 0x4}, {0x2, 0x5}, {0x8, 0x1ff}, {0x6c, 0x6}, {0x471, 0x2}, {0x1, 0x9}, {0x0, 0x6a7}, {0x10000, 0x5}, {0xfffffffffffffffc, 0x10}, {0x9, 0x8}, {0x6ba216cb}, {0xffffffff, 0x3}, {0x8, 0x10000}, {0x4, 0x6}, {0x5, 0x2}, {0x3926}, {0xbc, 0x8}, {0x1ff, 0x8}, {0xb, 0x9}, {0x0, 0x6}, {0xfff, 0x80000001}, {0x1000, 0x7e}, {0x9, 0x65dd}, {0xffffffff, 0x7}, {0x7ff, 0xfffffffffffffff8}, {0x1, 0x6}, {0x0, 0xd}, {0x7, 0x6}, {0x9, 0xfe}, {0x1}, {0x3, 0x8000000000000000}, {0x401, 0x1}, {0x81, 0x100000000}, {0xff, 0x7}, {0x4, 0x1}, {0x6, 0x8}, {0x8, 0x3cd6}, {0x1, 0x927}, {0xece, 0x1}, {0x1, 0x7}, {0x3, 0x4}, {0x9, 0x1}, {0x516, 0x1}, {0x9, 0x4}, {0x8, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x3}, {0x4, 0xb}, {0xd6, 0xdd19}, {0xffffffffffff635d, 0x801}, {0x0, 0x8}, {0x6, 0x7}, {0x80000000, 0x7}, {0x5fcd, 0x3}, {0x5, 0x82}, {0x7, 0x7fffffff}, {0x9, 0x10}, {0x6721, 0x1}, {0x3}, {0x10001, 0x80000001}, {0x7d, 0xfffffffffffffffe}, {0x2}, {0xf90, 0x4}, {0x7, 0x7}, {0x1, 0x99}, {0xfffffffffffffffa, 0x4}, {0x4, 0x52}, {0x7, 0x3}, {0x7}, {0x1, 0x6}, {0xfffffffffffffffc, 0x40}, {0x3, 0x1}, {0x1, 0x2}, {0x5, 0x80000000}, {0x100000001, 0x7}, {0x2, 0x4}, {0x40, 0x6}, {0x10, 0x2}, {0x9, 0x6}, {0x3, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x6e8, 0x5}, {0x6, 0x1}, {0x80}, {0x5, 0x8}, {0x9, 0x8001}, {0x6, 0x8}, {0xfffffffffffffffe, 0x9}, {0x4}, {0x8000000000000000, 0x6}, {0x2, 0xfffffffffffffffc}, {0x7, 0x100}, {0xa0, 0x81}, {0x0, 0xffffffffffffffff}, {0xf, 0x6}, {0x100, 0x11b3}, {0xd34, 0x79fe363f}, {0xed3, 0xffff}, {0xfffffffffffff6ea, 0x5}, {0x101, 0x3}, {0xd, 0x8}, {0xd2f, 0xa4}, {0x0, 0xfffffffffffffff0}, {0x2c78, 0x5}, {0xffffffffffffffff, 0x2}, {0x57, 0xb}, {0xffffffff00000000, 0x3}, {0xd, 0x8}, {0xffffffffffffbe51, 0x1}, {0x7, 0x81}, {0x9, 0x100}, {0x6, 0x8}, {0x0, 0x52}, {0x5, 0x8000}, {0x0, 0xfffffffffffffffb}, {0x400, 0x76}, {0x80000000, 0xc}, {0xa11, 0x9}, {0x9, 0x7fff}, {0x8, 0x8}, {0x2, 0x400}, {0xed, 0x78}, {0x7fffffffffffffff, 0x7}, {0x1800000000000000, 0x1}, {0xfffffffffffffffa, 0x3}, {0xc0, 0x40}, {0xcb09, 0xffffffff}, {0x400, 0x8}, {0xd8a8, 0xfffffffffffffffa}, {0x9, 0x800}, {0x4, 0x3}, {0x5, 0x3}, {0x8, 0x9}, {0x4, 0x3}, {0x9, 0x7}, {0x1, 0x7fffffff}, {0x2, 0x3d72}, {0x29, 0x6}, {0xfe00, 0xfff}, {0x4, 0x2}, {0x7, 0x5}, {0xffffffffffffffff, 0x61}, {0x7, 0x2}, {0x7fffffffffffffff, 0x7}, {0xb92, 0x7}, {0x3, 0xffffffffffffffff}, {0x2, 0x6}, {0x4, 0x2000}, {0x1, 0x81}, {0x7fffffff, 0x3}, {0x8a62, 0x8}, {0x9, 0x3}, {0xf, 0x9f}, {0x1, 0x5}, {0x2, 0x8000000000000000}, {0x7ff, 0x9}, {0x5, 0x7}, {0x0, 0x8000000000000000}, {0x4, 0x5}, {0x8, 0xd771}, {0x3, 0xfffffffffffffffb}, {0xa, 0x2}, {0x10000, 0x8}, {0x0, 0xb1c}, {0xd, 0x2}, {0xfffffffffffff1fe, 0x71eac553}, {0x18, 0x4}, {0xa}, {0x101, 0xff}, {0x97, 0xfffffffffffffbff}, {0x2, 0x1}, {0x5}, {0x2, 0x7fffffff}, {0x1, 0x4905}, {0x7fffffff, 0x2}, {0x7, 0x7}, {0x8, 0xf}, {0x2, 0x34ff}, {0xfffffffffffffffd}, {0x3, 0x5889}, {0x8, 0x5}, {0x5, 0x80000001}, {0x4, 0x6}, {0x844, 0x1}, {0x5, 0x6}, {0xe6, 0xde0}, {0x4b, 0x6}, {0x81, 0x94}, {0xc, 0x8}, {0x6, 0x400000000000000}, {0x4, 0xeae}, {0x4ef, 0x581}, {0x40, 0x3}, {0x8, 0x9}, {0x6a, 0x80000000}, {0x5, 0x18}, {0x6573, 0xa308}, {0x4, 0x3}, {0x3, 0x7}, {0xa, 0x6}, {0x6, 0x1000}, {}, {0x4, 0x80000001}, {0x3, 0x77ae}, {0x8, 0x7fffffff}, {0x7, 0x9}, {0x400, 0xd0b2}, {0x2, 0xa}, {0x7, 0x97}, {0x2, 0x6}, {0x1, 0x10000}, {0xa28, 0x80000000}, {0x8000000000000000, 0x5}, {0x3, 0x5}, {0x3, 0x2}, {0x6, 0x9}, {0x9, 0x2}, {0x7, 0xffff}, {0x1, 0x5}, {0x400, 0x114c}, {0x3, 0xa022}, {0x2, 0x3}, {0xfffe000000000000, 0x5}, {0xedd, 0x1}, {0x887}, {0x75, 0x80000001}, {0x8, 0x8}, {0x1}, {0x6, 0x4}, {0x6, 0x4}, {0xddae, 0x8000000000000001}, {0x6, 0x12}, {0x6, 0x7}, {0x5, 0x7875}]}, &(0x7f0000005440)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000005480)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f00000054c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000005500)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x2}, &(0x7f0000005640)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f00000056c0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000005700)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x2}, [{0x100000000, 0x4}, {0x8, 0x4}, {0xd, 0x100000001}, {0x80, 0x2}, {0x2, 0x5}, {0x700000000000000, 0x5}, {0x5}, {0xe, 0x4a0}, {0x7, 0x100000000000000}, {0x8b, 0x8001}, {0x49a6c93, 0xfffffffffffffb0f}, {0xfffffffffffffda2, 0x2}, {0x200, 0xb1d8}, {0xfffffffffffff34c, 0xb}, {0xffffffff, 0x2}, {0x0, 0x3}, {0x3a, 0xc13}, {0x9, 0x1}, {0x7, 0x1}, {0xb, 0x81}, {0xfffffffffffffffd, 0x7}, {0xf, 0x80}, {0x6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0xee}, {0x8, 0xfffffffffffffffa}, {0x10000, 0x7}, {0x1, 0x7fff}, {0x9, 0x8001}, {0xd6ae, 0x9}, {0xffff, 0x6}, {0x8, 0x2}, {0x7fff, 0x2}, {0x3, 0x7}, {0x8, 0xff}, {0x6, 0x3}, {0x8, 0x9}, {0x6, 0x9}, {0x6, 0xfe7}, {0xfffffffffffffffa, 0x3}, {0x2, 0x7}, {0x0, 0x7}, {0x2d, 0x6}, {0xfe, 0x5}, {0x8, 0x9}, {0x80000000, 0xff}, {0xe, 0x13}, {0x4, 0x5}, {0x7e, 0x6}, {0x222c, 0x80000001}, {0x1, 0x4042}, {0x300000000000000, 0xc}, {0x7, 0x200}, {0x5, 0x33}, {0x823, 0x1e9ad569}, {0x7, 0x3}, {0x10, 0x3f6950a1}, {0x681e, 0x3}, {0x8, 0x8}, {0x4}, {0x7fff, 0x4f8}, {0x2, 0x8}, {0x9}, {0x0, 0x2}, {0x0, 0xb}, {0xb8}, {0x0, 0x3}, {0x2, 0x6}, {0x6ab8, 0x80}, {0x5, 0x9}, {0x0, 0x3}, {0x1ff, 0x1000}, {0x6, 0x3}, {0x8000000000000000, 0xe}, {0x0, 0x7}, {0x8000000000000001, 0x764c}, {0x4, 0x5}, {0x3, 0x768d}, {0x100, 0x2}, {0x1, 0xefb6}, {0x3b7, 0xab8}, {0x1, 0xfff}, {0x6, 0x1}, {0x2}, {0x9, 0x4306}, {0x8001, 0x7}, {0x1, 0x9}, {0xae, 0x6}, {0xa, 0x3}, {0x4, 0x4}, {0xe5, 0x3a74b75d}, {0x77}, {0x10000, 0x5c94}, {0x8000000000000000, 0xabb1}, {0x101, 0x5}, {0x8, 0x800}, {0x6, 0x7fff}, {0x8000000000000001, 0x2}, {0x9, 0x8}, {0xfffffffffffffe00, 0xfffffffffffffffa}, {0x3, 0x10001}, {0x6, 0xa20}, {0xfffffffffffffffb, 0x80000000}, {0x3, 0x5}, {0x80}, {0x9, 0x400}, {0x9, 0x3}, {0x4}, {0x1, 0x9}, {0x8cf, 0x10}, {0xfffffffffffff025, 0x5}, {0x9, 0x6ea0}, {0x7fffffffffffffff, 0x7}, {0x9, 0x6d}, {0x1, 0x2}, {0xffffffffffff8001, 0x5fd}, {0x7, 0xd}, {0x77c, 0x6}, {0xc23f, 0x7fffffffffffffff}, {0x3, 0x2}, {0x2, 0x3f}, {0x0, 0x51bb}, {0x9, 0xfd}, {0x26, 0x1ce}, {0x4, 0xffffffffffffffff}, {0x2, 0x5}, {0x9, 0x2}, {0x5, 0x5}, {0x4, 0x7fffffffffffffff}, {0x4, 0x5}, {0x5, 0x4}, {0x2, 0xd}, {0x0, 0x10000}, {0x5, 0x2}, {0x2, 0x5}, {0x3, 0x2}, {0x9, 0x5}, {0x9, 0x6}, {0x3, 0x101}, {0x5, 0x635d}, {0xffffffffffffffff, 0x6}, {0x4, 0x3}, {0x9, 0xa}, {0x4, 0x100}, {0xe63}, {0x40, 0x401}, {0x401, 0x2}, {0x81, 0x9}, {0x26, 0x8}, {0x37, 0x1ff}, {0x100, 0xf}, {0x5, 0x6}, {0x8, 0x9}, {0x3, 0x5}, {0x932, 0x10000}, {0x4, 0xdfb}, {0x8, 0x6}, {0x10001, 0x8000000000000001}, {0x17, 0x7}, {0x8, 0x2}, {0x400, 0x3}, {0x4, 0x1}, {0x9}, {0xff, 0x8}, {0x0, 0x6}, {0x0, 0x200}, {0x1, 0x6}, {0x42, 0xfffffffffffffffe}, {0x7, 0x8}, {0x6, 0xfffffffffffffff4}, {0x9, 0x4}, {0xffffffffffffffff, 0x3adca1ee}, {0x3, 0xd99}, {0x0, 0x18e5}, {0x8, 0x80}, {0x2, 0x1}, {0x7, 0xe}, {0x3, 0x9}, {0x2, 0x3}, {0x2, 0x5}, {0x4, 0x100000001}, {0x0, 0x2}, {0xe, 0x7}, {0x8, 0x5}, {0xffffffffffffffff, 0x4}, {0x7, 0xf}, {0x7, 0x200}, {0x1, 0xa6}, {0x1, 0x79f}, {0x4, 0x3}, {0x209fd8ce, 0x7861}, {0x8, 0x8}, {0x4, 0x3}, {0x4, 0x40}, {0x7, 0x719b}, {0x9b, 0x1}, {0x7, 0x9}, {0xfffffffffffffff2, 0x81}, {0x101, 0x1}, {0x80000000, 0x4}, {0x0, 0x5}, {0x67, 0x4}, {0xba}, {0x6, 0x5}, {0x1000, 0x7fff}, {0x1, 0x9}, {0x8, 0x7}, {0x7f, 0x4}, {0x1, 0x6}, {0x8, 0x8}, {0x7, 0x10000000}, {0x8754, 0x7}, {0x7, 0x401}, {0x9, 0x7ff}, {0x6, 0x7}, {0x9}, {0x1, 0x1}, {0xa4d3, 0x2}, {0x4, 0x5}, {0x8000000000000001, 0x9}, {0x0, 0x7}, {0x2, 0x7fff}, {0xfffffffffffffff7}, {0x0, 0xfffffffffffffffd}, {0xffffffffffffffff, 0x4}, {0x800, 0x1000}, {0x8, 0xbef}, {0x100, 0x2}, {0x1, 0x9}, {0xffffffffffffffff, 0x1}, {0xefe, 0x8000000000000000}, {0x2, 0x3}, {0xffffffff, 0x4}, {0x4, 0x200}, {0x2000000, 0xc466}, {0xb1, 0x22}, {0x5, 0x2}, {0x1, 0x5}, {0x8, 0x7}, {0x35, 0xcd}, {0xf8e, 0x3}, {0xffffffffffffffee, 0xffff}, {0x6, 0x20c}, {0x8, 0x4fce}, {0x71bd8b17, 0xa}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x6, 0x5}, {0x200, 0x4}, {0x0, 0x6}, {0x5}, {0x7fff, 0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x6, 0x8}]}, &(0x7f0000006740)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000006780)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f00000067c0)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0xffffffff}, &(0x7f0000006900)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xa0000000}, {}, 0x7}, &(0x7f0000006a40)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000006a80)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000006b00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000006b40)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000006b80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000006bc0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000006c00)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000006c40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000006c80)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000006cc0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000006d00)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000006d80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000006dc0)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000006e00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000006e40)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x19, 0x2}, {0x401, 0x1000}, {0xe64, 0x8}, {0x3, 0x1}, {0x75, 0x9}, {0x196, 0x80}, {0x9, 0x4}, {0x1, 0xff}, {0x6, 0xffffffff}, {0x80000001, 0x5}, {0xffffffff, 0x5}, {0x1, 0x1}, {0x4, 0x8}, {0x4, 0x2}, {0x60, 0xa}, {0x4, 0x10}, {0x1ff}, {0x6, 0x8}, {0x1, 0xffffffff}, {0x8000000000000000, 0x800}, {0x400, 0x60}, {0x9, 0x15971e66}, {0x5}, {0x3, 0x4}, {0x5, 0x1ff}, {0x80000000, 0x7ff}, {0x8, 0xfffffffffffffff2}, {0x5, 0x8000000000000000}, {0x5, 0x8000000000000000}, {0x9, 0xd}, {0x80a, 0x4}, {0xebb9, 0xffffffffffffffff}, {0x100000001, 0x8}, {0x91f4, 0x800}, {0xf73, 0x81}, {0x8, 0x10000}, {0x3ff, 0x9}, {}, {0x0, 0x3ff}, {0xffffffffffffffff, 0x8}, {0x2}, {0x4, 0x80}, {0x3, 0x7ff}, {0x200, 0x8}, {0x2, 0x5}, {0x4, 0x97}, {0x4, 0xa4}, {0x6, 0xf}, {0x6, 0x7}, {0x40, 0x4}, {0x41, 0x39d5}, {0x4, 0x6}, {0xd7d, 0xfa14}, {0x9673, 0x8}, {0x86, 0x877}, {0x9, 0xfffffffffffffffb}, {0x8, 0x80000001}, {0x3, 0x80000000}, {0x1, 0xac1}, {0x6, 0xb}, {0xff, 0x8}, {0x3, 0xfffffffffffffffe}, {0x6, 0xed25}, {0x5, 0x7ff}, {0x4a7e, 0x4}, {0x8, 0xfffffffffffffffa}, {0x1ae, 0xfffffffffffeffff}, {0x1, 0xe8e}, {0x4, 0x9}, {0x4, 0x5}, {0x0, 0x10001}, {0xffffffffae2213b4}, {0x7fff, 0x10001}, {0x3, 0x87d}, {0xfffffffffffffffa, 0x3}, {0x9, 0xfffffffffffffffd}, {0x100, 0xf4ef}, {0x3, 0x401}, {0x400, 0x4}, {0x5b7, 0x7}, {0xb010, 0x200}, {0xff, 0xfff}, {0x9, 0x8}, {0xffff}, {0x401, 0x6}, {0x3ff, 0x3}, {0x8000, 0x5}, {0x200, 0x9}, {0xfffffffffffff000, 0x200}, {0x1, 0x9}, {0x3ff, 0x10}, {0x0, 0x4}, {0x9, 0xa8d}, {0x9734, 0x2}, {0x0, 0x12}, {0x2, 0x7}, {0x7, 0x57}, {0x5, 0x80000000}, {0x0, 0x2}, {0x8, 0xfffffffffffffff6}, {0x1, 0x8a3}, {0xff, 0x7}, {0x8, 0x9}, {0x346, 0x2}, {0x200, 0xffffffffffff0001}, {0xdd, 0xf4e}, {0x6, 0xa}, {0x9, 0x200}, {0xde, 0x100}, {0xea24, 0x1}, {0x80000000, 0x6}, {0x7e7e, 0x4}, {0x6503, 0x7}, {0x5, 0x10}, {0x8001, 0x4}, {0x1ff, 0x8}, {0x800, 0x7fff}, {0x6}, {0xfffffffffffffc01, 0x3}, {0x2000000000000, 0x9}, {0x5f4, 0x8}, {0xc, 0x12d}, {0x10001, 0xff}, {0x0, 0x6}, {0x289caca4, 0x3}, {0x7, 0xea}, {0x2, 0x8}, {0x5, 0x4}, {0x6, 0x3}, {0x8, 0xffffffff00000001}, {0x40, 0xae01}, {0x7ff, 0xfffffffffffffff8}, {0xffffffffffff4136, 0x31}, {0xd5, 0x7}, {0xc68, 0x6}, {0x9ad, 0x3e1}, {0x81, 0x4}, {0x6, 0x80000000}, {0x9}, {0xfff, 0x9}, {0x100, 0x2}, {0x5, 0xe000000000000000}, {0x3, 0x8000000000000001}, {0x2, 0x2}, {0x3, 0x2}, {0x7f, 0x7}, {0x3ff, 0x7ff}, {0x8, 0x7fffffff}, {0xa5f3, 0x6}, {0x3, 0xa}, {0x4, 0x777}, {0x1941aae5}, {0x7, 0xd}, {0x26e6, 0x5e}, {0x2, 0xe}, {0xa6, 0x9}, {0x2a1f, 0x63c}, {0x100000000, 0x6}, {0x5, 0x200}, {}, {0x8386803, 0x7}, {0x2, 0x1}, {0x4, 0x3}, {0xa8a, 0x9}, {0x2ff4, 0x1}, {0x9961, 0x3}, {0x9, 0x3}, {0x200, 0x9}, {0xa74, 0x7fff}, {0x5000, 0x3}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0xfffffffffffffffc}, {0x9}, {0x2, 0x9}, {0x1, 0x1000}, {0x2, 0x7}, {0x1, 0x4}, {0x1, 0x6}, {0x3}, {0x0, 0x6}, {0x8, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x3, 0x10}, {0x101, 0x6}, {0x7fffffff}, {0x9, 0x5}, {0x4, 0x6}, {0xfffffffffffffff7, 0x100}, {0x7, 0x1}, {0x100, 0x7c41}, {0x5, 0xec69}, {0xf, 0x3}, {0x6, 0x400}, {0x2, 0x7}, {0x0, 0x5}, {0x6}, {0x8000000000000000, 0xffffffffffff0001}, {0x2, 0x8}, {0x8000000000000000, 0x4}, {0x7, 0x1}, {0x4, 0x2}, {0x2, 0x3}, {0xbd, 0x57}, {0x8, 0x9}, {0x3989721a000000, 0x100000001}, {0x3, 0x5}, {0x5, 0x7fffffff}, {0x6, 0x8b}, {0xfffffffffffffffd, 0x9}, {0xb309, 0x498a}, {0x200, 0x2}, {0x9000, 0xfffffffffffffff0}, {0x5f10}, {0x9, 0x4}, {0x0, 0x1}, {0x3, 0xe4e}, {0x5, 0x28}, {0x7fffffffffffffff, 0xffff}, {0x337f, 0xcdd}, {0x4, 0x2}, {0x3, 0x4}, {0x4, 0xbc13}, {0x494b, 0x67}, {0x55, 0x3eedef96}, {0x80000001, 0xa47f}, {0x1ff, 0x3}, {0x4, 0xffffffffffffff81}, {0x1, 0x2}, {0x8, 0xd3c6}, {0xc3, 0x8}, {0x2, 0x10000}, {0x10001, 0x9}, {0x6, 0x4}, {0x6, 0x6}, {0x100000001, 0x1}, {0x8}, {0x4, 0x8}, {0x5, 0x18000000000}, {0xd, 0x8103}, {0xffffffffffffffff, 0x7}, {0x800, 0xac9a}, {0xffffffffffffffff, 0x10a}, {0xaf, 0xf538}, {0x7f}, {0xfffffffffffffffc, 0x1}, {0x9, 0x5}, {0x122, 0x36}, {0x7fff}, {0x8, 0x8}, {0x8}, {0x7fffffff, 0xf}, {0xa, 0xffffffffffff96c8}, {0x9, 0xfb}]}, &(0x7f0000007e80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000007ec0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000007f00)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}], 0x32}) (async)
r13 = accept4$rose(r2, &(0x7f0000008180)=@short={0xb, @remote, @default, 0x1, @rose}, &(0x7f00000081c0)=0x1c, 0x800)
fcntl$notify(r13, 0x402, 0xa) (async)
r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r14, &(0x7f00000082c0)={&(0x7f0000008200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000008280)={&(0x7f0000008240)={0x30, 0x140a, 0x20, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f0000008300), &(0x7f0000008340)=0x4) (async)
sendto$inet(r1, &(0x7f0000008380), 0x0, 0x8040, &(0x7f00000083c0)={0x2, 0x4e24, @multicast1}, 0x10)
ioctl$sock_inet_SIOCSIFNETMASK(r11, 0x891c, &(0x7f0000008400)={'veth0_to_bridge\x00', {0x2, 0x4e20, @broadcast}}) (async)
setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000008440)=0x2, 0x4)

5m16.751408716s ago: executing program 5 (id=4112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000080)=0xfffffffd)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000400001040000000000000000010000000c00d6000500000000000000100001800c00108008000100050000000800020008000000d90592585f36b5622e9c0ef37497174512823b15e62ec625837e793bb158c9e403a4ffffffffffff3e569b554b6cc6843f6f4e443598c1c666c8260303ee79b067029b32735b3efcea95bbc8b8ffda3ecc9b3c0b739b2b2026a1394a120f6300000000ce466108ee6f8f5e62d0ec6a9ae4de0e7a3640d80b33a5273fa9f736b41e66226b5497f05b0b8edcd65f9f44a8ef0d73244c3740db8d3e92741943c9b2704282e041b10c27e265f493bc849a4a228872197ae22ee10598bd2cdf6251daa64588ec6847044d995e3f7fd9f804bab1ae9e29b798580e4b077a300cbce3d3c2592dab785378033c7bec61fbbda36440e7531ee5deb551136b44a3e67463733f04bb70e65c4ac7b4e52a348dd21f95a8b77055d6021e"], 0x87}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100))
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f000000c940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x2, 0x8010)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r8, &(0x7f0000002380)={0x2020}, 0x2020)

5m16.540707997s ago: executing program 5 (id=4113):
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="0000000000000000180012800b00010065727370606e000008000280f2040012000a"], 0x44}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), 0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32, @ANYBLOB="000000fb6fd3a019621ef3"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000048000000009aaa000018150000", @ANYRES32=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)

5m15.154121591s ago: executing program 5 (id=4118):
landlock_create_ruleset(0x0, 0x0, 0x2)

5m14.819863446s ago: executing program 36 (id=4118):
landlock_create_ruleset(0x0, 0x0, 0x2)

5m14.304067391s ago: executing program 4 (id=4122):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000080)=0xfffffffd)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x87}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000100))
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f000000c940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x2, 0x8010)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r8, &(0x7f0000002380)={0x2020}, 0x2020)

5m14.197830201s ago: executing program 4 (id=4123):
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002f6904b0819155204d5b60102030109022200010400106c090404cc01542cffc4ea0625010c070105"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000060a0b0400000000000000000200000028000480240001800a00010071756575650000001400028008000440cef0ad73690585ff000000000900010073797a30000000000900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000000})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='GZ', 0x2, 0xfffffffffffffffb)
keyctl$update(0x2, r3, &(0x7f0000000000)="11868a0fceae284c000000", 0xb)
r4 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x1, 0x7)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c000100"], 0x34}}, 0x0)

5m12.981097836s ago: executing program 4 (id=4124):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="4f11bfaff08bdd141b49ace66075be59bb75a12125c209930e49a17d985e44234c59d386faf4eaa37a2434d935a062d30c0232d0e39fc0c60510cc32821fc62a15fdc36a992f687f931dac2ec0ce7d2500bffd48581175a5ce0c5c62f3cbbbc544d5936a9b040832993c5e8c42c0f306ff5883816e4491f6b379d25b619d70dbd8150b6949b6f7d05a388de40c2166fa54189c8a7ff09f140d93fcb7a25dc2caf0b81a085c30de78639c0616d432807490147817fd572262", 0xb8}], 0x1, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18}, @assoc={0x18}], 0x48}], 0x1, 0x40800)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x70000000, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x80006, 0x1, 0x5, 0xffffffff, 0xe661, 0x2, 0x7, 0x5, 0xa, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0xaf6, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x9, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x3, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x1ff, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x1, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x10005, 0x5, 0x8, 0x30b1d68f, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

5m12.533083244s ago: executing program 37 (id=4124):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="4f11bfaff08bdd141b49ace66075be59bb75a12125c209930e49a17d985e44234c59d386faf4eaa37a2434d935a062d30c0232d0e39fc0c60510cc32821fc62a15fdc36a992f687f931dac2ec0ce7d2500bffd48581175a5ce0c5c62f3cbbbc544d5936a9b040832993c5e8c42c0f306ff5883816e4491f6b379d25b619d70dbd8150b6949b6f7d05a388de40c2166fa54189c8a7ff09f140d93fcb7a25dc2caf0b81a085c30de78639c0616d432807490147817fd572262", 0xb8}], 0x1, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18}, @assoc={0x18}], 0x48}], 0x1, 0x40800)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x70000000, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x80006, 0x1, 0x5, 0xffffffff, 0xe661, 0x2, 0x7, 0x5, 0xa, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0xaf6, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x9, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x3, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x1ff, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x1, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x10005, 0x5, 0x8, 0x30b1d68f, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

10.942501236s ago: executing program 9 (id=5116):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000003c0)={0x57, 0x3})

10.767354402s ago: executing program 9 (id=5118):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000000)="ac7fbd6fb0b283880aef061532e6a94a631372deee8bf68841da9d65fb86981b73", 0x21}, {&(0x7f0000000040)="8acd6e9e21b34440612adb92edbed1738e98acf1e53b1619f38a2fbb509f3e8b2ff8cbaed074d3cde511effc7957091fac0c040c8e696a68b30d2c927adf0f98143e118184e37d56b7c4a04e033cc71dab33aaf547c2a47c", 0x58}, {&(0x7f0000000100)}], 0x3}, 0x4000000)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001200050928bd7000fedbdf2521090b004e224e26fcffffff23090000000000000600000001040000040000000300000002000000", @ANYRES32=0x0, @ANYBLOB="0000030005201b0031000000040000001400010007"], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000)

10.534666037s ago: executing program 9 (id=5122):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc)
ioctl$EVIOCGBITSW(r0, 0x80404525, 0x0)

10.251351029s ago: executing program 9 (id=5126):
syz_open_dev$sg(&(0x7f0000000100), 0x900000001, 0x8041)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2})
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)

9.412929635s ago: executing program 7 (id=5127):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9, 0x0, 0x1}}, 0x40)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

7.52386575s ago: executing program 7 (id=5131):
syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32)
r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) (rerun: 32)
r1 = dup(r0)
write$nbd(r1, &(0x7f0000002080)=ANY=[], 0x1010) (async)
copy_file_range(r0, &(0x7f0000000100)=0xb76, r1, 0x0, 0x5, 0x0) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) (rerun: 32)
ioctl$LOOP_CLR_FD(r3, 0x4c01)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) (async)
r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r2, 0x0}])

6.043968153s ago: executing program 6 (id=5133):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000400)=""/158, 0x9e}], 0x1}, 0x4}], 0x1, 0x40000120, &(0x7f0000001640))

5.97866368s ago: executing program 6 (id=5134):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x24000000)

5.812794024s ago: executing program 6 (id=5135):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0)
ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000500)={0x0, 0x30000, 0x40, 0xf, 0x100, 0x0, 0x10, 0x5, 0x10, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x1}}, 0x18)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x60000, 0x718bb647156ec2b7)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x42})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000010701010000000010000000010000091400078008000140000000e7070002"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080)
r7 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x8, "", [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x9, 0x19, 0x1, {0x22, 0x430}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0x4, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x4}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x2, 0x7, 0x4, 0x8, 0x69}, 0x27, &(0x7f0000000380)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e54f419e6be3698e125637d170321c15"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x58, 0x40, 0x3, 0xa0, 0x1}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x436}}, {0x3e, &(0x7f0000000400)=@string={0x3e, 0x3, "cbeee6462f3cc7cac0fc9115c1d46ca9a14e6b9d704de98efb84fd59b0ff717d2f91e8c41b6fb3174e16699cfbfd6acfad434388217522ee342fce77"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x446}}, {0xef, &(0x7f0000000480)=@string={0xef, 0x3, "3a58be90216ab45852074a535d97428f51ad28ae78c5e9817f5f9581dfee823b471947a0a8d3e31e9d9d67dbd645ed932972565a25d2cff7bab9525c43a5a64fd3ccfa9cebd86d10f8f0d29126abe324179ff0c2dd8729801494bb89c2031370d5db5524e09e9867b93f6b5cbb24cdc4d2462d9878059ddb95c7442dfc342521b05b030a52198e0a6f20b9693e391b3b4400e3eb769f99efdcc91cddf06e4bb4a3bb18b6d4cb907cd514f2c0a3551ab72858734a1412861a3a3e4faafc9fc135eb79866421492f686157c092d724d2b2e59de814efdee242b8492aeba16e579022044d5451589923ad6695a714"}}]})
syz_usb_control_io$hid(r7, &(0x7f00000007c0)={0x24, &(0x7f0000000600)={0x40, 0x24, 0xae, {0xae, 0x21, "0556509017005fab3638d132c9078cd46ccfa79459d8f89bb3f3344936edc7a426307d6e510998c6fc1b17d28a49e6a775b913460ec047ae4e608b86e1db13af594ca9b3966e864a3b4aa5268a7c8992ae2687eb935b70d8f209cdf1ca570c634d3e27849ba753dd40131a8f28de60312914540525642a322ef402a9d3ef242d64bad97f4600d5a126a4bc89c23d5206a4142f8ce113b84189ac92049300b2b286864e9cca2abafd6e85fffe"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4f4}}, &(0x7f0000000740)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0xb, "0144fd85"}, @global=@item_012={0x2, 0x1, 0xa, "5bd2"}, @main=@item_4={0x3, 0x0, 0xa, "df9de502"}]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3279, 0x6, 0x1, {0x22, 0x38a}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000800)={0x20, 0xcd66e83e76696216, 0x64, "bd72114aafa5d69d20b04ebb1133996890eaeeba6f1f9dd697a18b37f110bf79f24f6248c56e984664720d021629d1625d785d42acb93038c9246434257b3adde265e6e9e6c0a9f4825ec0e1cc06e5170dfe10c92af954214f61999bb4fa66d6fd6191d4"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000900)={0x20, 0x1, 0x5, "cfcb5bde7f"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x4d}})
linkat(r5, &(0x7f0000000100)='./file1\x00', r5, 0x0, 0x1000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='Q'], 0x0)
preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/236, 0xec}], 0x2, 0xc72, 0xae0)
r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r9, 0x80845663, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000000c0)=""/92)

5.778470963s ago: executing program 9 (id=5136):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (fail_nth: 4)

4.483825095s ago: executing program 9 (id=5137):
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000002580)={@desc={0x1, 0x0, @desc3}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
timer_create(0x2, 0x0, 0x0)
timer_create(0x7, 0x0, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x5ca0, 0x1c080, 0xa, 0x20002f7})
syz_usb_connect$printer(0x5, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "18be292a946ff161c5af186bb33a88c2209b66ecb7ff42e963f39f6cb61696920940e002c130a9e5e05823745902e89f4b9f1ff1ccbc9fcba52085bfac494d48"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3409}}]})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x238, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0xb0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}]}, @CTA_NAT_SRC={0x84, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x32}}]}, @CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8001}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x94}}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000}, 0x24040001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x22, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0)

4.243495037s ago: executing program 7 (id=5138):
r0 = socket$inet6(0xa, 0x2, 0x9)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="1612020300000000ff010000000000000000000000000001fc020000000000000000000000000001fc020000000000000000000000000001fc010000000000000000000000000000fe80000000000000000000000000001afe800000000000000000000000000015ff010000000000000000000000007801fe8000000000000000000000000000aaff010000000000000000000000000001"], 0x98)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005a00)=ANY=[@ANYBLOB], 0x3c8c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
getpid()
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000005480)={0x0, 0x1dc, 0x3cdb, {0x0, 0x10000}})
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
sendto$inet(r4, 0x0, 0x0, 0x20008004, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
sendmmsg$inet(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0}}], 0x2, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2})
fdatasync(r2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregset(0x4205, r5, 0x202, &(0x7f0000000000)={0x0})
setrlimit(0xc, &(0x7f0000000080)={0x5, 0x1})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

3.808590432s ago: executing program 7 (id=5139):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 4)
socket$unix(0x1, 0x1, 0x0)

3.142943997s ago: executing program 7 (id=5142):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYBLOB="aa48173d42b3db40dd676e3864f890e1e91b0045fec7f87430a0550876c3fe1596ba48dd8bc77274319004470800efda3851c384f35233f3b47bb6c8ceb940d503069a28620423e27565b233e0eb7147ec1120c37461def57b5e8972092a5ca8", @ANYRES64=r0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESOCT=r0])
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.731842617s ago: executing program 8 (id=5145):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4c", 0x5}], 0x1}}], 0x3, 0x20000044)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x7, &(0x7f0000000340)={0x1, 0x0, 0x2, 0x80000001})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000240)={0x1, 0x0, 0x200000002, 0xfffffffffffffff8})
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00')
pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0)
unshare(0x8000400)
ioctl$DVB_DEMUX_DMX_DQBUF(r0, 0xc0186f40, &(0x7f00000006c0)={0x1c, 0x6, 0x0, 0x29, 0x12, 0x7f})
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x82001, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201)
fcntl$setpipe(r5, 0x407, 0xc)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc8c1}], 0x1, 0x4040810)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0x26, 0x1, 0x8000, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0xe, 0xfffffffffffffd94, &(0x7f0000000100)="e80a7355fd93b6f6000000000000", 0x0, 0x2, 0x0, 0xffffffffffffff8f, 0x0, 0x0, 0x0, 0x4}, 0x50)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x2b)
fallocate(r8, 0x0, 0x1000000, 0x3)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@fallback=r1, r7, 0x20, 0x200c, 0x0, @value=r8, @void, @void, @void, r6}, 0x20)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r11=>0x0})
ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2.730761156s ago: executing program 2 (id=5146):
set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6)
set_mempolicy(0x0, &(0x7f0000019080)=0x10001, 0x24e8feed)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="0000000010000000"], 0x44}}, 0x2000800)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400108006000a00240000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r7, 0x8, 0x4a5ac7f1577263be}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x2c048040}, 0x0)
set_mempolicy(0x8000, &(0x7f0000002100)=0x4, 0x7)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r2, &(0x7f0000000ac0), 0x0}, 0x20)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x3, '\x00', r7, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000002380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x3, [@datasec={0x6, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x1, 0x4ee}, {0x3, 0xd, 0x1}, {0x1, 0x7, 0x1000}], "a7d7"}]}, {0x0, [0x3e]}}, &(0x7f0000002400)=""/231, 0x4f, 0xe7, 0x0, 0xe6}, 0x28)
r11 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00')
r12 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
write$smackfs_cipsonum(r12, &(0x7f0000000200)=0x6, 0x14)
pread64(r11, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002640)={0x18, 0x25, &(0x7f0000019100)=ANY=[@ANYBLOB="18000000000000690000e300000018110000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018530000000000000000000000000000185a000003000000000000000000000085100000010000001511d8fff0ffffff8510000006000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000003d950600ffffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000002300)='GPL\x00', 0x5, 0x20, &(0x7f0000002340)=""/32, 0x41100, 0xc, '\x00', r7, 0x0, r10, 0x8, &(0x7f0000002540)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002580)={0x0, 0xe, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000025c0)=[r2, 0x1, r11, r2, r2, r2, r2], &(0x7f0000002600)=[{0x5, 0x1, 0xe, 0x2}, {0x4, 0x4, 0xa, 0x8}, {0x5, 0x4, 0x9, 0x5}, {0x3, 0x5, 0x5, 0xb}], 0x10, 0x4}, 0x94)
write$FUSE_GETXATTR(r0, &(0x7f00000020c0)={0x18, 0x0, r1, {0x8}}, 0x18)

2.66944768s ago: executing program 6 (id=5147):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (async)
fcntl$dupfd(r1, 0x0, r1) (async)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async)
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000000c0)) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) (async)

2.558542584s ago: executing program 2 (id=5148):
syz_open_dev$sg(&(0x7f0000000100), 0x900000001, 0x8041)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x141005)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2})
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)

2.313725437s ago: executing program 8 (id=5149):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (fail_nth: 4)
open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
rmdir(&(0x7f0000000140)='./file1\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
chdir(&(0x7f0000000200)='./file0\x00')
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000140), 0x0)
readv(0xffffffffffffffff, &(0x7f0000000980), 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

2.229361248s ago: executing program 6 (id=5150):
unshare(0x24020400)
ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
ioprio_get$pid(0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1)
fcntl$lock(r1, 0x6, &(0x7f0000000300)={0x1, 0x0, 0x1, 0x2})
ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f00000003c0)={0x57, 0x3})

1.483880799s ago: executing program 6 (id=5151):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@raw={0xc, 0x1, "47657964741c"})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x12f0c0)
mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1028, 0x5, 0x11, 0xffffffffffffffff, 0x83000000)

1.358637365s ago: executing program 8 (id=5152):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file1'}, 0xb)
close(r3)
uname(0xfffffffffffffffc)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2, 0x28, 0x65, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x853, 0x0, 0x2}}}}}}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

1.191653036s ago: executing program 2 (id=5153):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r0=>0xffffffffffffffff}, 0x104, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r0, 0x1c, 0x0, @ib={0x1b, 0x7, 0x100, {"8b1d23413dcdceb992a6f4b274819cf0"}, 0x1, 0x0, 0x7fff}}}, 0x90)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x14, 0x1a, 0x4, 0x80000000, 0x25dfdbfb, {0xa}}, 0x14}}, 0x40)

1.101382842s ago: executing program 2 (id=5154):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8)
r2 = dup(r1)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20)
sendto$inet6(r2, &(0x7f00000003c0)="87869fe61a0597a434191560dee90f8e1cf31f7e8ad592ecdd72e5736ba4c9", 0x1f, 0x4000, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7)
r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x7, 0x1)
ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r3, 0x800c6f40, &(0x7f0000000140)={""/4, 0x4})

1.053942715s ago: executing program 8 (id=5155):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}}, 0x24008004)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)

843.454933ms ago: executing program 8 (id=5156):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000400)=""/158, 0x9e}, {0x0}], 0x2}, 0x4}], 0x1, 0x40000120, &(0x7f0000001640))

779.551177ms ago: executing program 8 (id=5157):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0)
ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000500)={0x0, 0x30000, 0x40, 0xf, 0x100, 0x0, 0x10, 0x5, 0x10, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x1}}, 0x18)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r5 = open(&(0x7f0000000240)='./file1\x00', 0x60000, 0x718bb647156ec2b7)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x42})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000010701010000000010000000010000091400078008000140000000e7070002"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080)
r7 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x20, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x8, "", [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x9, 0x19, 0x1, {0x22, 0x430}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0x4, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x4}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x2, 0x7, 0x4, 0x8, 0x69}, 0x27, &(0x7f0000000380)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e54f419e6be3698e125637d170321c15"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x58, 0x40, 0x3, 0xa0, 0x1}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x436}}, {0x3e, &(0x7f0000000400)=@string={0x3e, 0x3, "cbeee6462f3cc7cac0fc9115c1d46ca9a14e6b9d704de98efb84fd59b0ff717d2f91e8c41b6fb3174e16699cfbfd6acfad434388217522ee342fce77"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x446}}, {0xef, &(0x7f0000000480)=@string={0xef, 0x3, "3a58be90216ab45852074a535d97428f51ad28ae78c5e9817f5f9581dfee823b471947a0a8d3e31e9d9d67dbd645ed932972565a25d2cff7bab9525c43a5a64fd3ccfa9cebd86d10f8f0d29126abe324179ff0c2dd8729801494bb89c2031370d5db5524e09e9867b93f6b5cbb24cdc4d2462d9878059ddb95c7442dfc342521b05b030a52198e0a6f20b9693e391b3b4400e3eb769f99efdcc91cddf06e4bb4a3bb18b6d4cb907cd514f2c0a3551ab72858734a1412861a3a3e4faafc9fc135eb79866421492f686157c092d724d2b2e59de814efdee242b8492aeba16e579022044d5451589923ad6695a714"}}]})
syz_usb_control_io$hid(r7, &(0x7f00000007c0)={0x24, &(0x7f0000000600)={0x40, 0x24, 0xae, {0xae, 0x21, "0556509017005fab3638d132c9078cd46ccfa79459d8f89bb3f3344936edc7a426307d6e510998c6fc1b17d28a49e6a775b913460ec047ae4e608b86e1db13af594ca9b3966e864a3b4aa5268a7c8992ae2687eb935b70d8f209cdf1ca570c634d3e27849ba753dd40131a8f28de60312914540525642a322ef402a9d3ef242d64bad97f4600d5a126a4bc89c23d5206a4142f8ce113b84189ac92049300b2b286864e9cca2abafd6e85fffe"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4f4}}, &(0x7f0000000740)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0xb, "0144fd85"}, @global=@item_012={0x2, 0x1, 0xa, "5bd2"}, @main=@item_4={0x3, 0x0, 0xa, "df9de502"}]}}, &(0x7f0000000780)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3279, 0x6, 0x1, {0x22, 0x38a}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000800)={0x20, 0xcd66e83e76696216, 0x64, "bd72114aafa5d69d20b04ebb1133996890eaeeba6f1f9dd697a18b37f110bf79f24f6248c56e984664720d021629d1625d785d42acb93038c9246434257b3adde265e6e9e6c0a9f4825ec0e1cc06e5170dfe10c92af954214f61999bb4fa66d6fd6191d4"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000900)={0x20, 0x1, 0x5, "cfcb5bde7f"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x4d}})
linkat(r5, &(0x7f0000000100)='./file1\x00', r5, 0x0, 0x1000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='Q'], 0x0)
preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/236, 0xec}], 0x2, 0xc72, 0xae0)
r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r9, 0x80845663, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000000c0)=""/92)

661.29693ms ago: executing program 2 (id=5158):
set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6)
set_mempolicy(0x0, &(0x7f0000019080)=0x10001, 0x24e8feed)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="0000000010000000"], 0x44}}, 0x2000800)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400108006000a00240000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r7, 0x8, 0x4a5ac7f1577263be}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x28}, 0x1, 0x1000000, 0x0, 0x2c048040}, 0x0)
set_mempolicy(0x8000, &(0x7f0000002100)=0x4, 0x7)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r2, &(0x7f0000000ac0), 0x0}, 0x20)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x3, '\x00', r7, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002500)={&(0x7f0000002380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x3, [@datasec={0x6, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x1, 0x4ee}, {0x3, 0xd, 0x1}, {0x1, 0x7, 0x1000}], "a7d7"}]}, {0x0, [0x3e]}}, &(0x7f0000002400)=""/231, 0x4f, 0xe7, 0x0, 0xe6}, 0x28)
r11 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00')
r12 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
write$smackfs_cipsonum(r12, &(0x7f0000000200)=0x6, 0x14)
pread64(r11, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002640)={0x18, 0x25, &(0x7f0000019100)=ANY=[@ANYBLOB="18000000000000690000e300000018110000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018530000000000000000000000000000185a000003000000000000000000000085100000010000001511d8fff0ffffff8510000006000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000003d950600ffffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000002300)='GPL\x00', 0x5, 0x20, &(0x7f0000002340)=""/32, 0x41100, 0xc, '\x00', r7, 0x0, r10, 0x8, &(0x7f0000002540)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002580)={0x0, 0xe, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000025c0)=[r2, 0x1, r11, r2, r2, r2, r2], &(0x7f0000002600)=[{0x5, 0x1, 0xe, 0x2}, {0x4, 0x4, 0xa, 0x8}, {0x5, 0x4, 0x9, 0x5}, {0x3, 0x5, 0x5, 0xb}], 0x10, 0x4}, 0x94)
write$FUSE_GETXATTR(r0, &(0x7f00000020c0)={0x18, 0x0, r1, {0x8}}, 0x18)

403.816276ms ago: executing program 2 (id=5159):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001580)={0x20, r1, 0xe03, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000080) (fail_nth: 1)

0s ago: executing program 7 (id=5160):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)

kernel console output (not intermixed with test programs):

b+0x27d/0x7d0
[ 1247.411206][ T8620]  ? netlink_sendmsg+0x650/0xb40
[ 1247.411228][ T8620]  ? skb_put+0x11b/0x210
[ 1247.411246][ T8620]  netlink_sendmsg+0x6c0/0xb40
[ 1247.411278][ T8620]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1247.411303][ T8620]  ? unwind_get_return_address+0x4d/0x90
[ 1247.411325][ T8620]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1247.411352][ T8620]  ____sys_sendmsg+0x94c/0x9c0
[ 1247.411378][ T8620]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1247.411406][ T8620]  ? import_iovec+0x73/0xa0
[ 1247.411426][ T8620]  ___sys_sendmsg+0x2a5/0x360
[ 1247.411450][ T8620]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1247.411502][ T8620]  ? __fget_files+0x2a/0x420
[ 1247.411522][ T8620]  ? __fget_files+0x3a6/0x420
[ 1247.411552][ T8620]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1247.411573][ T8620]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1247.411601][ T8620]  ? __pfx_ksys_write+0x10/0x10
[ 1247.411637][ T8620]  do_syscall_64+0x14d/0xf80
[ 1247.411655][ T8620]  ? trace_irq_disable+0x3b/0x150
[ 1247.411674][ T8620]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1247.411692][ T8620]  ? clear_bhb_loop+0x40/0x90
[ 1247.411719][ T8620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1247.411736][ T8620] RIP: 0033:0x7f152acbc819
[ 1247.411752][ T8620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1247.411766][ T8620] RSP: 002b:00007f1528f16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1247.411786][ T8620] RAX: ffffffffffffffda RBX: 00007f152af35fa0 RCX: 00007f152acbc819
[ 1247.411798][ T8620] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004
[ 1247.411810][ T8620] RBP: 00007f1528f16090 R08: 0000000000000000 R09: 0000000000000000
[ 1247.411821][ T8620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1247.411832][ T8620] R13: 00007f152af36038 R14: 00007f152af35fa0 R15: 00007ffc4e0fd618
[ 1247.411858][ T8620]  </TASK>
[ 1248.265995][ T7864] Bluetooth: hci4: unexpected event for opcode 0x1009
[ 1248.269792][ T8629] netlink: 'syz.8.4683': attribute type 2 has an invalid length.
[ 1248.269811][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4683'.
[ 1248.278230][ T8629] openvswitch: netlink: IPv4 tun info is not correct
[ 1248.279778][ T8629] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1248.750373][ T7243] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 1248.889577][ T7243] usb 9-1: device descriptor read/64, error -71
[ 1249.047261][ T8645] FAULT_INJECTION: forcing a failure.
[ 1249.047261][ T8645] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1249.047297][ T8645] CPU: 1 UID: 0 PID: 8645 Comm: syz.7.4691 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1249.047323][ T8645] Tainted: [L]=SOFTLOCKUP
[ 1249.047330][ T8645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1249.047341][ T8645] Call Trace:
[ 1249.047349][ T8645]  <TASK>
[ 1249.047358][ T8645]  dump_stack_lvl+0xe8/0x150
[ 1249.047388][ T8645]  should_fail_ex+0x46b/0x600
[ 1249.047418][ T8645]  _copy_from_user+0x2d/0xb0
[ 1249.047438][ T8645]  ppp_ioctl+0xb11/0x1b80
[ 1249.047458][ T8645]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1249.047487][ T8645]  ? __pfx_ppp_ioctl+0x10/0x10
[ 1249.047510][ T8645]  ? __fget_files+0x2a/0x420
[ 1249.047531][ T8645]  ? __fget_files+0x3a6/0x420
[ 1249.047551][ T8645]  ? __fget_files+0x2a/0x420
[ 1249.047576][ T8645]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1249.047595][ T8645]  ? __pfx_ppp_ioctl+0x10/0x10
[ 1249.047614][ T8645]  __se_sys_ioctl+0xff/0x170
[ 1249.047635][ T8645]  do_syscall_64+0x14d/0xf80
[ 1249.047654][ T8645]  ? trace_irq_disable+0x3b/0x150
[ 1249.047675][ T8645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1249.047693][ T8645]  ? clear_bhb_loop+0x40/0x90
[ 1249.047715][ T8645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1249.047733][ T8645] RIP: 0033:0x7f9955e0c819
[ 1249.047751][ T8645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1249.047772][ T8645] RSP: 002b:00007f9954066028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1249.047792][ T8645] RAX: ffffffffffffffda RBX: 00007f9956085fa0 RCX: 00007f9955e0c819
[ 1249.047806][ T8645] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003
[ 1249.047818][ T8645] RBP: 00007f9954066090 R08: 0000000000000000 R09: 0000000000000000
[ 1249.047829][ T8645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1249.047840][ T8645] R13: 00007f9956086038 R14: 00007f9956085fa0 R15: 00007ffd4ed10428
[ 1249.047871][ T8645]  </TASK>
[ 1249.129194][  T808] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1249.130282][ T7243] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 1249.279142][  T808] usb 3-1: device descriptor read/64, error -71
[ 1249.279208][ T7243] usb 9-1: device descriptor read/64, error -71
[ 1249.399343][ T7243] usb usb9-port1: attempt power cycle
[ 1249.529203][  T808] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1249.679864][  T808] usb 3-1: device descriptor read/64, error -71
[ 1249.749191][ T7243] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 1249.769961][ T7243] usb 9-1: device descriptor read/8, error -71
[ 1249.795568][  T808] usb usb3-port1: attempt power cycle
[ 1249.903972][ T8655] netlink: 'syz.9.4697': attribute type 2 has an invalid length.
[ 1249.903993][ T8655] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4697'.
[ 1249.905211][ T8655] openvswitch: netlink: IPv4 tun info is not correct
[ 1249.905651][ T8655] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1250.017341][ T7243] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 1250.064567][ T7243] usb 9-1: device descriptor read/8, error -71
[ 1250.169919][ T7243] usb usb9-port1: unable to enumerate USB device
[ 1250.171006][  T808] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1250.191368][  T808] usb 3-1: device descriptor read/8, error -71
[ 1250.432181][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4700'.
[ 1250.469187][  T808] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1250.490216][  T808] usb 3-1: device descriptor read/8, error -71
[ 1250.599414][  T808] usb usb3-port1: unable to enumerate USB device
[ 1251.890184][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88805f5abc00: rx timeout, send abort
[ 1251.895886][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805f5abc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1252.228624][ T8682] FAULT_INJECTION: forcing a failure.
[ 1252.228624][ T8682] name failslab, interval 1, probability 0, space 0, times 0
[ 1252.228680][ T8682] CPU: 1 UID: 0 PID: 8682 Comm: syz.2.4704 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1252.228706][ T8682] Tainted: [L]=SOFTLOCKUP
[ 1252.228713][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1252.228725][ T8682] Call Trace:
[ 1252.228733][ T8682]  <TASK>
[ 1252.228742][ T8682]  dump_stack_lvl+0xe8/0x150
[ 1252.228773][ T8682]  should_fail_ex+0x46b/0x600
[ 1252.228804][ T8682]  should_failslab+0xa8/0x100
[ 1252.228826][ T8682]  kmem_cache_alloc_noprof+0x87/0x680
[ 1252.228852][ T8682]  ? skb_clone+0x212/0x3a0
[ 1252.228878][ T8682]  skb_clone+0x212/0x3a0
[ 1252.228902][ T8682]  __netlink_deliver_tap+0x404/0x850
[ 1252.228941][ T8682]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1252.228971][ T8682]  netlink_deliver_tap+0x19c/0x1b0
[ 1252.228993][ T8682]  netlink_unicast+0x805/0x9f0
[ 1252.229021][ T8682]  ? __pfx_netlink_unicast+0x10/0x10
[ 1252.229047][ T8682]  ? netlink_sendmsg+0x650/0xb40
[ 1252.229069][ T8682]  ? skb_put+0x11b/0x210
[ 1252.229092][ T8682]  netlink_sendmsg+0x813/0xb40
[ 1252.229126][ T8682]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1252.229158][ T8682]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1252.229188][ T8682]  ____sys_sendmsg+0x94c/0x9c0
[ 1252.229216][ T8682]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1252.229245][ T8682]  ? import_iovec+0x73/0xa0
[ 1252.229266][ T8682]  ___sys_sendmsg+0x2a5/0x360
[ 1252.229292][ T8682]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1252.229317][ T8682]  ? __schedule+0x1569/0x5240
[ 1252.229365][ T8682]  ? __fget_files+0x2a/0x420
[ 1252.229386][ T8682]  ? __fget_files+0x3a6/0x420
[ 1252.229418][ T8682]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1252.229442][ T8682]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1252.229486][ T8682]  do_syscall_64+0x14d/0xf80
[ 1252.229507][ T8682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.229533][ T8682]  ? clear_bhb_loop+0x40/0x90
[ 1252.229555][ T8682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1252.229573][ T8682] RIP: 0033:0x7f152acbc819
[ 1252.229591][ T8682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1252.229606][ T8682] RSP: 002b:00007f1528ed4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1252.229626][ T8682] RAX: ffffffffffffffda RBX: 00007f152af36180 RCX: 00007f152acbc819
[ 1252.229640][ T8682] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[ 1252.229652][ T8682] RBP: 00007f1528ed4090 R08: 0000000000000000 R09: 0000000000000000
[ 1252.229665][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1252.229676][ T8682] R13: 00007f152af36218 R14: 00007f152af36180 R15: 00007ffc4e0fd618
[ 1252.229707][ T8682]  </TASK>
[ 1253.071112][   T36] kauditd_printk_skb: 1 callbacks suppressed
[ 1253.071131][   T36] audit: type=1326 audit(1775642572.658:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1253.073820][   T36] audit: type=1326 audit(1775642572.668:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1253.076711][   T36] audit: type=1326 audit(1775642572.668:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1253.076983][   T36] audit: type=1326 audit(1775642572.668:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9dc4a3d04e code=0x7ffc0000
[ 1253.079821][ T8687] netlink: 'syz.2.4708': attribute type 2 has an invalid length.
[ 1253.079839][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4708'.
[ 1253.080143][   T36] audit: type=1326 audit(1775642572.668:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9dc4a7db17 code=0x7ffc0000
[ 1253.081077][   T36] audit: type=1326 audit(1775642572.678:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1253.083487][   T36] audit: type=1326 audit(1775642572.678:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1253.083530][   T36] audit: type=1326 audit(1775642572.678:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9dc4a7db17 code=0x7ffc0000
[ 1253.084234][ T8687] openvswitch: netlink: IPv4 tun info is not correct
[ 1253.084679][   T36] audit: type=1326 audit(1775642572.678:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9dc4a3d04e code=0x7ffc0000
[ 1253.085017][   T36] audit: type=1326 audit(1775642572.678:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8685 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1253.086303][ T8687] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1253.121400][ T8688] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[ 1254.077641][ T8703] FAULT_INJECTION: forcing a failure.
[ 1254.077641][ T8703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1254.077694][ T8703] CPU: 0 UID: 0 PID: 8703 Comm: syz.7.4715 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1254.077722][ T8703] Tainted: [L]=SOFTLOCKUP
[ 1254.077729][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1254.077740][ T8703] Call Trace:
[ 1254.077747][ T8703]  <TASK>
[ 1254.077755][ T8703]  dump_stack_lvl+0xe8/0x150
[ 1254.077776][ T8703]  should_fail_ex+0x46b/0x600
[ 1254.077793][ T8703]  strncpy_from_user+0x36/0x2b0
[ 1254.077808][ T8703]  do_getname+0x77/0x250
[ 1254.077821][ T8703]  __se_sys_mknodat+0x27/0x150
[ 1254.077833][ T8703]  do_syscall_64+0x14d/0xf80
[ 1254.077845][ T8703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.077856][ T8703]  ? clear_bhb_loop+0x40/0x90
[ 1254.077868][ T8703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1254.077878][ T8703] RIP: 0033:0x7f9955e0c819
[ 1254.077888][ T8703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1254.077897][ T8703] RSP: 002b:00007f9954045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[ 1254.077909][ T8703] RAX: ffffffffffffffda RBX: 00007f9956086090 RCX: 00007f9955e0c819
[ 1254.077916][ T8703] RDX: 00000000000021c0 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 1254.077923][ T8703] RBP: 00007f9954045090 R08: 0000000000000000 R09: 0000000000000000
[ 1254.077930][ T8703] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001
[ 1254.077942][ T8703] R13: 00007f9956086128 R14: 00007f9956086090 R15: 00007ffd4ed10428
[ 1254.077958][ T8703]  </TASK>
[ 1254.979138][T22899] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[ 1255.027133][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4713'.
[ 1255.129592][T22899] usb 7-1: Using ep0 maxpacket: 8
[ 1255.135911][T22899] usb 7-1: config 0 has no interfaces?
[ 1255.140673][T22899] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1255.140701][T22899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1255.140718][T22899] usb 7-1: Product: syz
[ 1255.140731][T22899] usb 7-1: Manufacturer: syz
[ 1255.140743][T22899] usb 7-1: SerialNumber: syz
[ 1255.191859][T22899] usb 7-1: config 0 descriptor??
[ 1255.324724][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4719'.
[ 1255.614578][  T808] usb 7-1: USB disconnect, device number 47
[ 1255.722049][ T8714] netlink: 'syz.9.4721': attribute type 2 has an invalid length.
[ 1255.722070][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4721'.
[ 1255.723202][ T8714] openvswitch: netlink: IPv4 tun info is not correct
[ 1255.723649][ T8714] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1256.079175][  T808] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1256.432198][  T808] usb 3-1: Using ep0 maxpacket: 16
[ 1256.546052][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888032668c00: rx timeout, send abort
[ 1256.563981][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888032668c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1256.906642][  T808] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1256.907940][  T808] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1256.933583][  T808] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[ 1256.933611][  T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1256.933629][  T808] usb 3-1: Product: syz
[ 1256.933641][  T808] usb 3-1: Manufacturer: syz
[ 1256.933653][  T808] usb 3-1: SerialNumber: syz
[ 1257.301647][  T808] usb 3-1: Audio class v2/v3 interfaces need an interface association
[ 1257.301915][  T808] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1257.503266][  T808] usb 3-1: 2:1 : can't get High Capability descriptor
[ 1257.522607][ T8743] tmpfs: Bad value for 'mpol'
[ 1257.657856][ T8748] netlink: 'syz.7.4734': attribute type 2 has an invalid length.
[ 1257.657878][ T8748] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4734'.
[ 1257.679423][ T8748] openvswitch: netlink: IPv4 tun info is not correct
[ 1257.681737][ T8748] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1258.071035][ T8764] FAULT_INJECTION: forcing a failure.
[ 1258.071035][ T8764] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1258.071071][ T8764] CPU: 0 UID: 0 PID: 8764 Comm: syz.6.4741 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1258.071097][ T8764] Tainted: [L]=SOFTLOCKUP
[ 1258.071103][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1258.071114][ T8764] Call Trace:
[ 1258.071122][ T8764]  <TASK>
[ 1258.071130][ T8764]  dump_stack_lvl+0xe8/0x150
[ 1258.071167][ T8764]  should_fail_ex+0x46b/0x600
[ 1258.071195][ T8764]  _copy_from_iter+0x1d3/0x1670
[ 1258.071228][ T8764]  ? trace_kmem_cache_alloc+0x29/0xf0
[ 1258.071252][ T8764]  ? __alloc_skb+0x27d/0x7d0
[ 1258.071269][ T8764]  ? __pfx__copy_from_iter+0x10/0x10
[ 1258.071290][ T8764]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[ 1258.071314][ T8764]  ? __alloc_skb+0x27d/0x7d0
[ 1258.071336][ T8764]  ? netlink_sendmsg+0x650/0xb40
[ 1258.071358][ T8764]  ? skb_put+0x11b/0x210
[ 1258.071379][ T8764]  netlink_sendmsg+0x6c0/0xb40
[ 1258.071411][ T8764]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1258.071436][ T8764]  ? unwind_get_return_address+0x4d/0x90
[ 1258.071459][ T8764]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1258.071487][ T8764]  ____sys_sendmsg+0x94c/0x9c0
[ 1258.071512][ T8764]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1258.071541][ T8764]  ? import_iovec+0x73/0xa0
[ 1258.071562][ T8764]  ___sys_sendmsg+0x2a5/0x360
[ 1258.071587][ T8764]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1258.071641][ T8764]  ? __fget_files+0x2a/0x420
[ 1258.071661][ T8764]  ? __fget_files+0x3a6/0x420
[ 1258.071692][ T8764]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1258.071716][ T8764]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1258.071745][ T8764]  ? __pfx_ksys_write+0x10/0x10
[ 1258.071781][ T8764]  do_syscall_64+0x14d/0xf80
[ 1258.071801][ T8764]  ? trace_irq_disable+0x3b/0x150
[ 1258.071821][ T8764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1258.071839][ T8764]  ? clear_bhb_loop+0x40/0x90
[ 1258.071860][ T8764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1258.071879][ T8764] RIP: 0033:0x7f9dc4a7c819
[ 1258.071895][ T8764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1258.071911][ T8764] RSP: 002b:00007f9dc2cd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1258.071931][ T8764] RAX: ffffffffffffffda RBX: 00007f9dc4cf5fa0 RCX: 00007f9dc4a7c819
[ 1258.071944][ T8764] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1258.071956][ T8764] RBP: 00007f9dc2cd6090 R08: 0000000000000000 R09: 0000000000000000
[ 1258.071968][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1258.071979][ T8764] R13: 00007f9dc4cf6038 R14: 00007f9dc4cf5fa0 R15: 00007ffcc3902a98
[ 1258.072009][ T8764]  </TASK>
[ 1258.972417][T22899] usb 3-1: USB disconnect, device number 2
[ 1259.067284][ T8780] netlink: 'syz.2.4746': attribute type 2 has an invalid length.
[ 1259.067305][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4746'.
[ 1259.116761][ T8780] openvswitch: netlink: IPv4 tun info is not correct
[ 1259.468406][ T8780] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1259.709506][ T8783] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1262.449114][ T5913] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 1262.602892][ T5913] usb 9-1: Using ep0 maxpacket: 16
[ 1262.605327][ T5913] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1262.605351][ T5913] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1262.607956][ T5913] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1262.607982][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1262.608001][ T5913] usb 9-1: Product: syz
[ 1262.608015][ T5913] usb 9-1: Manufacturer: syz
[ 1262.608028][ T5913] usb 9-1: SerialNumber: syz
[ 1262.895844][ T5913] usb 9-1: 0:2 : does not exist
[ 1262.895912][ T5913] usb 9-1: unit 6 not found!
[ 1263.294158][ T8835] netlink: 'syz.6.4764': attribute type 2 has an invalid length.
[ 1263.294211][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4764'.
[ 1263.297583][ T8835] openvswitch: netlink: IPv4 tun info is not correct
[ 1263.299159][ T8835] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1264.222728][ T8840] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4767'.
[ 1264.300740][ T8842] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4768'.
[ 1264.329173][ T5913] usb 9-1: USB disconnect, device number 46
[ 1264.352942][ T8837] uprobe: syz.2.4766:8837 failed to unregister, leaking uprobe
[ 1264.585213][ T8377] udevd[8377]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1264.695035][ T8846] FAULT_INJECTION: forcing a failure.
[ 1264.695035][ T8846] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1264.695079][ T8846] CPU: 1 UID: 0 PID: 8846 Comm: syz.6.4769 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1264.695103][ T8846] Tainted: [L]=SOFTLOCKUP
[ 1264.695110][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1264.695120][ T8846] Call Trace:
[ 1264.695127][ T8846]  <TASK>
[ 1264.695135][ T8846]  dump_stack_lvl+0xe8/0x150
[ 1264.695165][ T8846]  should_fail_ex+0x46b/0x600
[ 1264.695192][ T8846]  _copy_from_iter+0x1d3/0x1670
[ 1264.695224][ T8846]  ? trace_kmem_cache_alloc+0x29/0xf0
[ 1264.695246][ T8846]  ? __alloc_skb+0x27d/0x7d0
[ 1264.695262][ T8846]  ? __pfx__copy_from_iter+0x10/0x10
[ 1264.695283][ T8846]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[ 1264.695305][ T8846]  ? __alloc_skb+0x27d/0x7d0
[ 1264.695326][ T8846]  ? netlink_sendmsg+0x650/0xb40
[ 1264.695348][ T8846]  ? skb_put+0x11b/0x210
[ 1264.695368][ T8846]  netlink_sendmsg+0x6c0/0xb40
[ 1264.695398][ T8846]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1264.695427][ T8846]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1264.695453][ T8846]  ____sys_sendmsg+0x94c/0x9c0
[ 1264.695476][ T8846]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1264.695502][ T8846]  ? import_iovec+0x73/0xa0
[ 1264.695520][ T8846]  ___sys_sendmsg+0x2a5/0x360
[ 1264.695543][ T8846]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1264.695567][ T8846]  ? kstrtouint+0x6e/0xe0
[ 1264.695611][ T8846]  ? __fget_files+0x2a/0x420
[ 1264.695639][ T8846]  ? __fget_files+0x3a6/0x420
[ 1264.695669][ T8846]  __sys_sendmmsg+0x282/0x4e0
[ 1264.695695][ T8846]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1264.695723][ T8846]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1264.695760][ T8846]  ? ksys_write+0x248/0x270
[ 1264.695787][ T8846]  ? __pfx_ksys_write+0x10/0x10
[ 1264.695817][ T8846]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1264.695840][ T8846]  do_syscall_64+0x14d/0xf80
[ 1264.695859][ T8846]  ? trace_irq_disable+0x3b/0x150
[ 1264.695879][ T8846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1264.695897][ T8846]  ? clear_bhb_loop+0x40/0x90
[ 1264.695918][ T8846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1264.695936][ T8846] RIP: 0033:0x7f9dc4a7c819
[ 1264.695954][ T8846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1264.695970][ T8846] RSP: 002b:00007f9dc2cd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1264.695990][ T8846] RAX: ffffffffffffffda RBX: 00007f9dc4cf5fa0 RCX: 00007f9dc4a7c819
[ 1264.696003][ T8846] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[ 1264.696016][ T8846] RBP: 00007f9dc2cd6090 R08: 0000000000000000 R09: 0000000000000000
[ 1264.696027][ T8846] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001
[ 1264.696039][ T8846] R13: 00007f9dc4cf6038 R14: 00007f9dc4cf5fa0 R15: 00007ffcc3902a98
[ 1264.696068][ T8846]  </TASK>
[ 1264.962876][ T5913] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 1265.125922][ T5913] usb 9-1: Using ep0 maxpacket: 8
[ 1265.141736][ T5913] usb 9-1: config 0 has no interfaces?
[ 1265.150935][ T5913] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1265.150962][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1265.150981][ T5913] usb 9-1: Product: syz
[ 1265.150994][ T5913] usb 9-1: Manufacturer: syz
[ 1265.151007][ T5913] usb 9-1: SerialNumber: syz
[ 1265.191192][ T5913] usb 9-1: config 0 descriptor??
[ 1267.377454][ T5913] usb 9-1: USB disconnect, device number 47
[ 1267.602263][ T8869] netlink: 'syz.8.4779': attribute type 2 has an invalid length.
[ 1267.602285][ T8869] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4779'.
[ 1267.605822][ T8869] openvswitch: netlink: IPv4 tun info is not correct
[ 1267.606264][ T8869] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1267.789428][ T6054] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1267.959298][ T7243] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[ 1267.959842][ T6054] usb 3-1: Using ep0 maxpacket: 16
[ 1267.961964][ T6054] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1267.961986][ T6054] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1267.964142][ T6054] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1267.964167][ T6054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.964183][ T6054] usb 3-1: Product: syz
[ 1267.964190][ T6054] usb 3-1: Manufacturer: syz
[ 1267.964198][ T6054] usb 3-1: SerialNumber: syz
[ 1268.119172][ T7243] usb 7-1: Using ep0 maxpacket: 16
[ 1268.121040][ T7243] usb 7-1: config 0 has an invalid interface number: 104 but max is 1
[ 1268.121063][ T7243] usb 7-1: config 0 has an invalid interface number: 104 but max is 1
[ 1268.121081][ T7243] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1268.121099][ T7243] usb 7-1: config 0 has no interface number 0
[ 1268.121180][ T7243] usb 7-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7
[ 1268.121204][ T7243] usb 7-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 1279, setting to 1024
[ 1268.121228][ T7243] usb 7-1: config 0 interface 104 has no altsetting 1
[ 1268.124197][ T7243] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[ 1268.124214][ T7243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1268.124224][ T7243] usb 7-1: Product: syz
[ 1268.124267][ T7243] usb 7-1: Manufacturer: syz
[ 1268.124274][ T7243] usb 7-1: SerialNumber: syz
[ 1268.218419][ T6054] usb 3-1: 0:2 : does not exist
[ 1268.218479][ T6054] usb 3-1: unit 6 not found!
[ 1268.260559][ T7243] usb 7-1: config 0 descriptor??
[ 1268.274768][ T7243] asix 7-1:0.104: probe with driver asix failed with error -22
[ 1268.316629][ T6054] usb 3-1: USB disconnect, device number 3
[ 1268.415095][ T8377] udevd[8377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1268.639121][ T5913] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[ 1268.658489][ T6054] usb 7-1: USB disconnect, device number 48
[ 1268.765871][ T8882] FAULT_INJECTION: forcing a failure.
[ 1268.765871][ T8882] name failslab, interval 1, probability 0, space 0, times 0
[ 1268.765894][ T8882] CPU: 0 UID: 0 PID: 8882 Comm: syz.8.4784 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1268.765909][ T8882] Tainted: [L]=SOFTLOCKUP
[ 1268.765912][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1268.765919][ T8882] Call Trace:
[ 1268.765923][ T8882]  <TASK>
[ 1268.765928][ T8882]  dump_stack_lvl+0xe8/0x150
[ 1268.765947][ T8882]  should_fail_ex+0x46b/0x600
[ 1268.765964][ T8882]  should_failslab+0xa8/0x100
[ 1268.765977][ T8882]  __kvmalloc_node_noprof+0x170/0x8e0
[ 1268.765989][ T8882]  ? traverse+0xde/0x580
[ 1268.766003][ T8882]  traverse+0xde/0x580
[ 1268.766012][ T8882]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1268.766026][ T8882]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1268.766037][ T8882]  ? seq_read_iter+0xb8/0xe20
[ 1268.766049][ T8882]  seq_read_iter+0xd09/0xe20
[ 1268.766065][ T8882]  ? __asan_memset+0x22/0x50
[ 1268.766081][ T8882]  seq_read+0x36a/0x490
[ 1268.766091][ T8882]  ? kstrtouint+0x6e/0xe0
[ 1268.766106][ T8882]  ? __pfx_seq_read+0x10/0x10
[ 1268.766122][ T8882]  ? rw_verify_area+0x2ac/0x4e0
[ 1268.766139][ T8882]  vfs_readv+0x597/0x850
[ 1268.766152][ T8882]  ? __pfx_seq_read+0x10/0x10
[ 1268.766164][ T8882]  ? __pfx_vfs_readv+0x10/0x10
[ 1268.766182][ T8882]  ? __fget_files+0x2a/0x420
[ 1268.766197][ T8882]  ? __fget_files+0x3a6/0x420
[ 1268.766209][ T8882]  ? __fget_files+0x2a/0x420
[ 1268.766226][ T8882]  __x64_sys_preadv+0x1a2/0x2b0
[ 1268.766237][ T8882]  ? __pfx___x64_sys_preadv+0x10/0x10
[ 1268.766253][ T8882]  do_syscall_64+0x14d/0xf80
[ 1268.766265][ T8882]  ? trace_irq_disable+0x3b/0x150
[ 1268.766276][ T8882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1268.766287][ T8882]  ? clear_bhb_loop+0x40/0x90
[ 1268.766299][ T8882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1268.766309][ T8882] RIP: 0033:0x7fdc3aa1c819
[ 1268.766319][ T8882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1268.766328][ T8882] RSP: 002b:00007fdc38c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1268.766340][ T8882] RAX: ffffffffffffffda RBX: 00007fdc3ac95fa0 RCX: 00007fdc3aa1c819
[ 1268.766347][ T8882] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1268.766354][ T8882] RBP: 00007fdc38c76090 R08: 0000000000000005 R09: 0000000000000000
[ 1268.766360][ T8882] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001
[ 1268.766366][ T8882] R13: 00007fdc3ac96038 R14: 00007fdc3ac95fa0 R15: 00007fffb43d9b88
[ 1268.766390][ T8882]  </TASK>
[ 1268.804171][ T5913] usb 10-1: config 0 has an invalid interface number: 35 but max is 0
[ 1268.804197][ T5913] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1268.804215][ T5913] usb 10-1: config 0 has no interface number 0
[ 1268.804256][ T5913] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[ 1268.804280][ T5913] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1268.804301][ T5913] usb 10-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1268.806628][ T5913] usb 10-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[ 1268.806655][ T5913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1268.806673][ T5913] usb 10-1: Product: syz
[ 1268.806686][ T5913] usb 10-1: Manufacturer: syz
[ 1268.806698][ T5913] usb 10-1: SerialNumber: syz
[ 1268.852645][ T5913] usb 10-1: config 0 descriptor??
[ 1268.861383][ T5913] cypress_m8 10-1:0.35: Nokia CA-42 V2 Adapter converter detected
[ 1268.879985][ T5913] nokiaca42v2 ttyUSB0: required endpoint is missing
[ 1269.098288][ T5913] usb 10-1: USB disconnect, device number 17
[ 1269.102184][ T5913] cypress_m8 10-1:0.35: device disconnected
[ 1271.425152][ T8925] FAULT_INJECTION: forcing a failure.
[ 1271.425152][ T8925] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1271.425187][ T8925] CPU: 0 UID: 0 PID: 8925 Comm: syz.6.4799 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1271.425213][ T8925] Tainted: [L]=SOFTLOCKUP
[ 1271.425219][ T8925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1271.425231][ T8925] Call Trace:
[ 1271.425239][ T8925]  <TASK>
[ 1271.425247][ T8925]  dump_stack_lvl+0xe8/0x150
[ 1271.425276][ T8925]  should_fail_ex+0x46b/0x600
[ 1271.425305][ T8925]  _copy_from_user+0x2d/0xb0
[ 1271.425324][ T8925]  do_sock_getsockopt+0x165/0x3f0
[ 1271.425347][ T8925]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1271.425370][ T8925]  ? ksys_write+0x202/0x270
[ 1271.425399][ T8925]  __x64_sys_getsockopt+0x1aa/0x250
[ 1271.425426][ T8925]  do_syscall_64+0x14d/0xf80
[ 1271.425448][ T8925]  ? trace_irq_disable+0x3b/0x150
[ 1271.425467][ T8925]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1271.425484][ T8925]  ? clear_bhb_loop+0x40/0x90
[ 1271.425504][ T8925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1271.425521][ T8925] RIP: 0033:0x7f9dc4a7c819
[ 1271.425537][ T8925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1271.425550][ T8925] RSP: 002b:00007f9dc2cd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1271.425569][ T8925] RAX: ffffffffffffffda RBX: 00007f9dc4cf5fa0 RCX: 00007f9dc4a7c819
[ 1271.425583][ T8925] RDX: 000000000000000a RSI: 0000000000000084 RDI: 0000000000000003
[ 1271.425593][ T8925] RBP: 00007f9dc2cd6090 R08: 0000000000000000 R09: 0000000000000000
[ 1271.425603][ T8925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1271.425614][ T8925] R13: 00007f9dc4cf6038 R14: 00007f9dc4cf5fa0 R15: 00007ffcc3902a98
[ 1271.425642][ T8925]  </TASK>
[ 1271.599405][ T6054] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1271.769272][ T6054] usb 10-1: Using ep0 maxpacket: 32
[ 1271.772577][ T6054] usb 10-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1271.772609][ T6054] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1271.775155][ T6054] usb 10-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40
[ 1271.775181][ T6054] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1271.775199][ T6054] usb 10-1: Product: ц
[ 1271.775212][ T6054] usb 10-1: Manufacturer: 䛦㰯쫇ﳀᖑ퓁ꥬ亡鵫䵰軩蓻姽ﾰ統鄯쓨漛ឳᙎ鱩ﷻ콪䎭衃甡⼴矎
[ 1271.775230][ T6054] usb 10-1: SerialNumber: 堺邾模墴ݒ半靝轂굑긨앸臩彿膕㮂᥇ꁇ펨ợ鶝䗖鏭爩婖툥릺屒ꕃ侦쳓鳺ၭ釒ꬦⓣ鼗싰蟝耩鐔覻ς瀓⑕黠枘㾹屫Ⓕ쓍䛒頭ո잕ⵄ㓼℥宰ਃᥒ઎榹㤾㬛D齶짜滰둋뮣똘쯔粐ᓕ샲喣뜚堨䩳ሔ᪆㸺꩏鿼㗁秫撆䤡栯坡鋀ⓗ닒鷥ᓨ䋢䦸溡遗Т呍塑⎙暭ꞕ
[ 1271.827221][ T8935] FAULT_INJECTION: forcing a failure.
[ 1271.827221][ T8935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1271.827256][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.8.4803 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1271.827284][ T8935] Tainted: [L]=SOFTLOCKUP
[ 1271.827291][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1271.827302][ T8935] Call Trace:
[ 1271.827309][ T8935]  <TASK>
[ 1271.827317][ T8935]  dump_stack_lvl+0xe8/0x150
[ 1271.827347][ T8935]  should_fail_ex+0x46b/0x600
[ 1271.827374][ T8935]  _copy_from_iter+0x1d3/0x1670
[ 1271.827405][ T8935]  ? trace_kmem_cache_alloc+0x29/0xf0
[ 1271.827430][ T8935]  ? __alloc_skb+0x27d/0x7d0
[ 1271.827447][ T8935]  ? __pfx__copy_from_iter+0x10/0x10
[ 1271.827468][ T8935]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[ 1271.827492][ T8935]  ? __alloc_skb+0x27d/0x7d0
[ 1271.827513][ T8935]  ? netlink_sendmsg+0x650/0xb40
[ 1271.827536][ T8935]  ? skb_put+0x11b/0x210
[ 1271.827556][ T8935]  netlink_sendmsg+0x6c0/0xb40
[ 1271.827588][ T8935]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1271.827613][ T8935]  ? unwind_get_return_address+0x4d/0x90
[ 1271.827635][ T8935]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1271.827661][ T8935]  ____sys_sendmsg+0x94c/0x9c0
[ 1271.827686][ T8935]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1271.827714][ T8935]  ? import_iovec+0x73/0xa0
[ 1271.827735][ T8935]  ___sys_sendmsg+0x2a5/0x360
[ 1271.827760][ T8935]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1271.827810][ T8935]  ? __fget_files+0x2a/0x420
[ 1271.827830][ T8935]  ? __fget_files+0x3a6/0x420
[ 1271.827860][ T8935]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1271.827884][ T8935]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1271.827911][ T8935]  ? __pfx_ksys_write+0x10/0x10
[ 1271.827945][ T8935]  do_syscall_64+0x14d/0xf80
[ 1271.827963][ T8935]  ? trace_irq_disable+0x3b/0x150
[ 1271.827983][ T8935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1271.828001][ T8935]  ? clear_bhb_loop+0x40/0x90
[ 1271.828022][ T8935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1271.828039][ T8935] RIP: 0033:0x7fdc3aa1c819
[ 1271.828057][ T8935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1271.828072][ T8935] RSP: 002b:00007fdc38c76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1271.828091][ T8935] RAX: ffffffffffffffda RBX: 00007fdc3ac95fa0 RCX: 00007fdc3aa1c819
[ 1271.828103][ T8935] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1271.828114][ T8935] RBP: 00007fdc38c76090 R08: 0000000000000000 R09: 0000000000000000
[ 1271.828126][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1271.828137][ T8935] R13: 00007fdc3ac96038 R14: 00007fdc3ac95fa0 R15: 00007fffb43d9b88
[ 1271.828196][ T8935]  </TASK>
[ 1272.429490][ T6054] usbhid 10-1:1.0: can't add hid device: -71
[ 1272.429607][ T6054] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[ 1272.434933][ T6054] usb 10-1: USB disconnect, device number 18
[ 1273.478881][ T8946] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4808'.
[ 1273.533451][ T8948] FAULT_INJECTION: forcing a failure.
[ 1273.533451][ T8948] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1273.533485][ T8948] CPU: 1 UID: 0 PID: 8948 Comm: syz.8.4807 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1273.533508][ T8948] Tainted: [L]=SOFTLOCKUP
[ 1273.533515][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1273.533526][ T8948] Call Trace:
[ 1273.533534][ T8948]  <TASK>
[ 1273.533542][ T8948]  dump_stack_lvl+0xe8/0x150
[ 1273.533573][ T8948]  should_fail_ex+0x46b/0x600
[ 1273.533602][ T8948]  _copy_to_user+0x31/0xb0
[ 1273.533622][ T8948]  simple_read_from_buffer+0xe1/0x170
[ 1273.533649][ T8948]  proc_fail_nth_read+0x1be/0x230
[ 1273.533674][ T8948]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1273.533698][ T8948]  ? rw_verify_area+0x2ac/0x4e0
[ 1273.533722][ T8948]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1273.533751][ T8948]  vfs_read+0x212/0xa80
[ 1273.533783][ T8948]  ? __pfx_vfs_read+0x10/0x10
[ 1273.533812][ T8948]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1273.533834][ T8948]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1273.533854][ T8948]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1273.533873][ T8948]  ? mutex_lock_nested+0x152/0x1d0
[ 1273.533895][ T8948]  ? fdget_pos+0x252/0x320
[ 1273.533924][ T8948]  ksys_read+0x156/0x270
[ 1273.533950][ T8948]  ? __pfx_ksys_read+0x10/0x10
[ 1273.533985][ T8948]  do_syscall_64+0x14d/0xf80
[ 1273.534004][ T8948]  ? trace_irq_disable+0x3b/0x150
[ 1273.534023][ T8948]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1273.534042][ T8948]  ? clear_bhb_loop+0x40/0x90
[ 1273.534064][ T8948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1273.534082][ T8948] RIP: 0033:0x7fdc3a9dd04e
[ 1273.534099][ T8948] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1273.534114][ T8948] RSP: 002b:00007fdc38c75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1273.534134][ T8948] RAX: ffffffffffffffda RBX: 00007fdc38c766c0 RCX: 00007fdc3a9dd04e
[ 1273.534148][ T8948] RDX: 000000000000000f RSI: 00007fdc38c760a0 RDI: 0000000000000005
[ 1273.534159][ T8948] RBP: 00007fdc38c76090 R08: 0000000000000000 R09: 0000000000000000
[ 1273.534171][ T8948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1273.534182][ T8948] R13: 00007fdc3ac96038 R14: 00007fdc3ac95fa0 R15: 00007fffb43d9b88
[ 1273.534213][ T8948]  </TASK>
[ 1273.960899][ T8961] sctp: [Deprecated]: syz.8.4813 (pid 8961) Use of int in maxseg socket option.
[ 1273.960899][ T8961] Use struct sctp_assoc_value instead
[ 1274.038223][ T8964] binder: 8963:8964 ioctl c0306201 200000000640 returned -22
[ 1276.244655][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4820'.
[ 1276.244671][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4820'.
[ 1278.727395][ T5913] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1278.890897][ T5913] usb 3-1: Using ep0 maxpacket: 32
[ 1278.892826][ T5913] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[ 1278.892850][ T5913] usb 3-1: config 0 has no interface number 0
[ 1278.892892][ T5913] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1278.892916][ T5913] usb 3-1: config 0 interface 85 has no altsetting 0
[ 1278.895219][ T5913] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1278.895243][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1278.895258][ T5913] usb 3-1: Product: syz
[ 1278.895266][ T5913] usb 3-1: Manufacturer: syz
[ 1278.895272][ T5913] usb 3-1: SerialNumber: syz
[ 1278.903518][ T5913] usb 3-1: config 0 descriptor??
[ 1278.908020][ T5913] appletouch 3-1:0.85: Could not find int-in endpoint
[ 1278.908055][ T5913] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[ 1278.923343][ T5913] usbhid 3-1:0.85: couldn't find an input interrupt endpoint
[ 1279.170269][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4833'.
[ 1279.170291][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4833'.
[ 1279.368153][ T9027] Bluetooth: hci0: invalid length 0, exp 2 for type 8
[ 1279.589119][ T5913] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1279.741697][ T5913] usb 10-1: Using ep0 maxpacket: 8
[ 1279.743901][ T5913] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1279.743934][ T5913] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1279.743945][ T5913] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1279.743957][ T5913] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1279.743969][ T5913] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1279.743991][ T5913] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1279.744003][ T5913] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.976551][ T5913] usb 10-1: usb_control_msg returned -32
[ 1279.976601][ T5913] usbtmc 10-1:16.0: can't read capabilities
[ 1281.836658][   T31] usb 3-1: USB disconnect, device number 4
[ 1281.993334][ T9059] FAULT_INJECTION: forcing a failure.
[ 1281.993334][ T9059] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1281.993358][ T9059] CPU: 1 UID: 0 PID: 9059 Comm: syz.2.4847 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1281.993373][ T9059] Tainted: [L]=SOFTLOCKUP
[ 1281.993377][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1281.993384][ T9059] Call Trace:
[ 1281.993388][ T9059]  <TASK>
[ 1281.993393][ T9059]  dump_stack_lvl+0xe8/0x150
[ 1281.993413][ T9059]  should_fail_ex+0x46b/0x600
[ 1281.993430][ T9059]  _copy_from_iter+0x1d3/0x1670
[ 1281.993453][ T9059]  ? trace_kmem_cache_alloc+0x29/0xf0
[ 1281.993469][ T9059]  ? __alloc_skb+0x27d/0x7d0
[ 1281.993480][ T9059]  ? __pfx__copy_from_iter+0x10/0x10
[ 1281.993493][ T9059]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[ 1281.993507][ T9059]  ? __alloc_skb+0x27d/0x7d0
[ 1281.993519][ T9059]  ? netlink_sendmsg+0x650/0xb40
[ 1281.993533][ T9059]  ? skb_put+0x11b/0x210
[ 1281.993545][ T9059]  netlink_sendmsg+0x6c0/0xb40
[ 1281.993567][ T9059]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1281.993582][ T9059]  ? unwind_get_return_address+0x4d/0x90
[ 1281.993594][ T9059]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1281.993611][ T9059]  ____sys_sendmsg+0x94c/0x9c0
[ 1281.993626][ T9059]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1281.993642][ T9059]  ? import_iovec+0x73/0xa0
[ 1281.993653][ T9059]  ___sys_sendmsg+0x2a5/0x360
[ 1281.993668][ T9059]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1281.993696][ T9059]  ? __fget_files+0x2a/0x420
[ 1281.993709][ T9059]  ? __fget_files+0x3a6/0x420
[ 1281.993726][ T9059]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1281.993739][ T9059]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1281.993755][ T9059]  ? __pfx_ksys_write+0x10/0x10
[ 1281.993776][ T9059]  do_syscall_64+0x14d/0xf80
[ 1281.993787][ T9059]  ? trace_irq_disable+0x3b/0x150
[ 1281.993799][ T9059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1281.993809][ T9059]  ? clear_bhb_loop+0x40/0x90
[ 1281.993821][ T9059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1281.993831][ T9059] RIP: 0033:0x7f152acbc819
[ 1281.993842][ T9059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1281.993850][ T9059] RSP: 002b:00007f1528f16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1281.993862][ T9059] RAX: ffffffffffffffda RBX: 00007f152af35fa0 RCX: 00007f152acbc819
[ 1281.993869][ T9059] RDX: 0000000004000040 RSI: 0000200000000000 RDI: 0000000000000003
[ 1281.993876][ T9059] RBP: 00007f1528f16090 R08: 0000000000000000 R09: 0000000000000000
[ 1281.993882][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1281.993888][ T9059] R13: 00007f152af36038 R14: 00007f152af35fa0 R15: 00007ffc4e0fd618
[ 1281.993903][ T9059]  </TASK>
[ 1282.417231][ T5913] usb 10-1: USB disconnect, device number 19
[ 1283.035704][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4854'.
[ 1283.035726][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4854'.
[ 1283.141545][ T9088] binder: 9087:9088 ioctl c0306201 200000000640 returned -22
[ 1284.749168][ T5799] usb 9-1: new full-speed USB device number 48 using dummy_hcd
[ 1284.901675][ T5799] usb 9-1: config 150 has an invalid interface number: 204 but max is 1
[ 1284.901703][ T5799] usb 9-1: config 150 has no interface number 0
[ 1284.901746][ T5799] usb 9-1: config 150 interface 204 has no altsetting 0
[ 1284.905310][ T5799] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[ 1284.905337][ T5799] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1284.905356][ T5799] usb 9-1: Product: syz
[ 1284.905370][ T5799] usb 9-1: Manufacturer: syz
[ 1284.905384][ T5799] usb 9-1: SerialNumber: syz
[ 1285.348279][ T9109] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4864'.
[ 1285.536736][ T5799] xr_serial 9-1:150.204: xr_serial converter detected
[ 1285.573908][ T9098] netlink: 'syz.8.4858': attribute type 10 has an invalid length.
[ 1285.573930][ T9098] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4858'.
[ 1285.582849][ T9098] vlan1: entered promiscuous mode
[ 1285.590358][ T9098] batman_adv: batadv0: Adding interface: vlan1
[ 1285.590375][ T9098] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1285.594540][ T9098] batman_adv: batadv0: Interface activated: vlan1
[ 1285.765512][ T6054] usb 7-1: new full-speed USB device number 49 using dummy_hcd
[ 1285.898547][ T5799] xr_serial ttyUSB0: Failed to set reg 0x0c: -71
[ 1285.898619][ T5799] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[ 1285.933507][ T6054] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1285.933534][ T6054] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1285.934652][ T6054] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1285.934677][ T6054] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1285.934695][ T6054] usb 7-1: SerialNumber: syz
[ 1286.001494][ T5799] usb 9-1: USB disconnect, device number 48
[ 1286.042010][ T6054] usb 7-1: 0:2 : does not exist
[ 1286.042500][ T5799] xr_serial 9-1:150.204: device disconnected
[ 1286.090118][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4867'.
[ 1286.090139][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4867'.
[ 1286.102847][ T9121] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4869'.
[ 1286.164333][ T9125] binder: 9123:9125 ioctl c0306201 200000000640 returned -22
[ 1286.381201][   T10] usb 7-1: USB disconnect, device number 49
[ 1286.688763][ T9138] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4875'.
[ 1286.983368][ T9147] binder: 9145:9147 ioctl c0306201 200000000640 returned -22
[ 1287.051987][ T9146] kernel read not supported for file /file1 (pid: 9146 comm: syz.8.4878)
[ 1287.059427][   T36] kauditd_printk_skb: 19 callbacks suppressed
[ 1287.059447][   T36] audit: type=1800 audit(1775642606.648:1868): pid=9146 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.4878" name="file1" dev="mqueue" ino=78257 res=0 errno=0
[ 1287.178092][ T9156] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4882'.
[ 1287.178122][ T9156] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4882'.
[ 1287.574168][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4886'.
[ 1287.574199][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4886'.
[ 1288.778711][ T9218] binder: 9215:9218 ioctl c0306201 200000000640 returned -22
[ 1288.991278][  T808] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1289.090292][   T36] audit: type=1326 audit(1775642608.678:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1289.091815][   T36] audit: type=1326 audit(1775642608.688:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1289.092083][   T36] audit: type=1326 audit(1775642608.688:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1289.092341][   T36] audit: type=1326 audit(1775642608.688:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1289.092885][   T36] audit: type=1326 audit(1775642608.688:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1289.094942][   T36] audit: type=1326 audit(1775642608.688:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1289.095335][   T36] audit: type=1326 audit(1775642608.688:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1289.109845][   T36] audit: type=1326 audit(1775642608.688:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1289.110117][   T36] audit: type=1326 audit(1775642608.708:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9224 comm="syz.6.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a7c819 code=0x7ffc0000
[ 1289.151426][  T808] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1289.151451][  T808] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1289.152850][  T808] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1289.152874][  T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1289.152892][  T808] usb 3-1: SerialNumber: syz
[ 1289.359432][ T9227] FAULT_INJECTION: forcing a failure.
[ 1289.359432][ T9227] name failslab, interval 1, probability 0, space 0, times 0
[ 1289.359470][ T9227] CPU: 0 UID: 0 PID: 9227 Comm: syz.9.4897 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1289.359496][ T9227] Tainted: [L]=SOFTLOCKUP
[ 1289.359503][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1289.359514][ T9227] Call Trace:
[ 1289.359521][ T9227]  <TASK>
[ 1289.359530][ T9227]  dump_stack_lvl+0xe8/0x150
[ 1289.359558][ T9227]  should_fail_ex+0x46b/0x600
[ 1289.359622][ T9227]  should_failslab+0xa8/0x100
[ 1289.359643][ T9227]  __kvmalloc_node_noprof+0x170/0x8e0
[ 1289.359665][ T9227]  ? bpf_test_run_xdp_live+0x1f2/0x1cf0
[ 1289.359695][ T9227]  bpf_test_run_xdp_live+0x1f2/0x1cf0
[ 1289.359719][ T9227]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1289.359752][ T9227]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1289.359772][ T9227]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1289.359792][ T9227]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1289.359811][ T9227]  ? rt_mutex_slowunlock+0x1cb/0x300
[ 1289.359834][ T9227]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1289.359860][ T9227]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[ 1289.359902][ T9227]  ? 0xffffffffa0201a50
[ 1289.359942][ T9227]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[ 1289.359969][ T9227]  ? _copy_from_user+0x94/0xb0
[ 1289.359994][ T9227]  ? bpf_test_init+0x113/0x150
[ 1289.360019][ T9227]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1289.360045][ T9227]  bpf_prog_test_run_xdp+0x81c/0x1160
[ 1289.360083][ T9227]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1289.360111][ T9227]  ? __fget_files+0x2a/0x420
[ 1289.360138][ T9227]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1289.360163][ T9227]  bpf_prog_test_run+0x2cd/0x340
[ 1289.360190][ T9227]  __sys_bpf+0x643/0x950
[ 1289.360213][ T9227]  ? __pfx___sys_bpf+0x10/0x10
[ 1289.360232][ T9227]  ? rt_mutex_slowunlock+0x1cb/0x300
[ 1289.360279][ T9227]  ? rcu_is_watching+0x15/0xb0
[ 1289.360308][ T9227]  __x64_sys_bpf+0x7c/0x90
[ 1289.360329][ T9227]  do_syscall_64+0x14d/0xf80
[ 1289.360355][ T9227]  ? trace_irq_disable+0x3b/0x150
[ 1289.360377][ T9227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1289.360396][ T9227]  ? clear_bhb_loop+0x40/0x90
[ 1289.360417][ T9227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1289.360436][ T9227] RIP: 0033:0x7f2c727cc819
[ 1289.360453][ T9227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1289.360469][ T9227] RSP: 002b:00007f2c70a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1289.360489][ T9227] RAX: ffffffffffffffda RBX: 00007f2c72a45fa0 RCX: 00007f2c727cc819
[ 1289.360502][ T9227] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[ 1289.360514][ T9227] RBP: 00007f2c70a26090 R08: 0000000000000000 R09: 0000000000000000
[ 1289.360525][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1289.360536][ T9227] R13: 00007f2c72a46038 R14: 00007f2c72a45fa0 R15: 00007ffd1e795418
[ 1289.360565][ T9227]  </TASK>
[ 1289.506449][  T808] usb 3-1: 0:2 : does not exist
[ 1289.562669][  T808] usb 3-1: USB disconnect, device number 5
[ 1289.759789][ T8377] udevd[8377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1290.075904][ T9242] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1290.300061][  T808] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1292.473305][  T808] usb 7-1: Using ep0 maxpacket: 32
[ 1292.475575][  T808] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[ 1292.475599][  T808] usb 7-1: config 0 has no interface number 0
[ 1292.475639][  T808] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1292.475659][  T808] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1292.475671][  T808] usb 7-1: config 0 interface 85 has no altsetting 0
[ 1292.533727][  T808] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1292.533755][  T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1292.533774][  T808] usb 7-1: Product: syz
[ 1292.533787][  T808] usb 7-1: Manufacturer: syz
[ 1292.533800][  T808] usb 7-1: SerialNumber: syz
[ 1292.692853][  T808] usb 7-1: config 0 descriptor??
[ 1293.116075][  T808] appletouch 7-1:0.85: Geyser mode initialized.
[ 1293.132151][  T808] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input94
[ 1293.336128][  T808] usb 7-1: USB disconnect, device number 50
[ 1293.474493][  T808] appletouch 7-1:0.85: input: appletouch disconnected
[ 1293.689620][ T6054] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1293.725817][ T9274] Bluetooth: hci0: unsupported parameter 255
[ 1293.725839][ T9274] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[ 1293.824059][ T9278] __nla_validate_parse: 3 callbacks suppressed
[ 1293.824079][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4917'.
[ 1293.824769][ T9278] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 1293.999100][ T6054] usb 10-1: Using ep0 maxpacket: 32
[ 1294.008288][ T6054] usb 10-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1294.008321][ T6054] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1294.039750][ T6054] usb 10-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40
[ 1294.039782][ T6054] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1294.039801][ T6054] usb 10-1: Product: ц
[ 1294.039814][ T6054] usb 10-1: Manufacturer: 䛦㰯쫇ﳀᖑ퓁ꥬ亡鵫䵰軩蓻姽ﾰ統鄯쓨漛ឳᙎ鱩ﷻ콪䎭衃甡⼴矎
[ 1294.039831][ T6054] usb 10-1: SerialNumber: 堺邾模墴ݒ半靝轂굑긨앸臩彿膕㮂᥇ꁇ펨ợ鶝䗖鏭爩婖툥릺屒ꕃ侦쳓鳺ၭ釒ꬦⓣ鼗싰蟝耩鐔覻ς瀓⑕黠枘㾹屫Ⓕ쓍䛒頭ո잕ⵄ㓼℥宰ਃᥒ઎榹㤾㬛D齶짜滰둋뮣똘쯔粐ᓕ샲喣뜚堨䩳ሔ᪆㸺꩏鿼㗁秫撆䤡栯坡鋀ⓗ닒鷥ᓨ䋢䦸溡遗Т呍塑⎙暭ꞕ
[ 1296.731337][ T6054] usbhid 10-1:1.0: can't add hid device: -71
[ 1296.731458][ T6054] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[ 1296.762393][ T6054] usb 10-1: USB disconnect, device number 20
[ 1296.965673][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4925'.
[ 1297.338474][ T9311] Bluetooth: hci0: unsupported parameter 255
[ 1297.338499][ T9311] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[ 1297.691574][ T9317] FAULT_INJECTION: forcing a failure.
[ 1297.691574][ T9317] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1297.691609][ T9317] CPU: 0 UID: 0 PID: 9317 Comm: syz.9.4930 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1297.691634][ T9317] Tainted: [L]=SOFTLOCKUP
[ 1297.691641][ T9317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1297.691653][ T9317] Call Trace:
[ 1297.691661][ T9317]  <TASK>
[ 1297.691669][ T9317]  dump_stack_lvl+0xe8/0x150
[ 1297.691699][ T9317]  should_fail_ex+0x46b/0x600
[ 1297.691727][ T9317]  _copy_from_iter+0x1d3/0x1670
[ 1297.691759][ T9317]  ? trace_kmem_cache_alloc+0x29/0xf0
[ 1297.691784][ T9317]  ? __alloc_skb+0x27d/0x7d0
[ 1297.691803][ T9317]  ? __pfx__copy_from_iter+0x10/0x10
[ 1297.691825][ T9317]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[ 1297.691849][ T9317]  ? __alloc_skb+0x27d/0x7d0
[ 1297.691871][ T9317]  ? __alloc_skb+0x4e5/0x7d0
[ 1297.691887][ T9317]  ? skb_put+0x11b/0x210
[ 1297.691909][ T9317]  pfkey_sendmsg+0x265/0x1120
[ 1297.691941][ T9317]  ? smack_socket_sendmsg+0x1a9/0x590
[ 1297.691964][ T9317]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1297.692047][ T9317]  ? __lock_acquire+0x6b5/0x2cf0
[ 1297.692069][ T9317]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1297.692094][ T9317]  ? __kernel_text_address+0xd/0x30
[ 1297.692114][ T9317]  ? unwind_get_return_address+0x4d/0x90
[ 1297.692136][ T9317]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1297.692164][ T9317]  ____sys_sendmsg+0x94c/0x9c0
[ 1297.692190][ T9317]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1297.692218][ T9317]  ? import_iovec+0x73/0xa0
[ 1297.692239][ T9317]  ___sys_sendmsg+0x2a5/0x360
[ 1297.692264][ T9317]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1297.692317][ T9317]  ? __fget_files+0x2a/0x420
[ 1297.692337][ T9317]  ? __fget_files+0x3a6/0x420
[ 1297.692365][ T9317]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1297.692387][ T9317]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1297.692415][ T9317]  ? __pfx_ksys_write+0x10/0x10
[ 1297.692450][ T9317]  do_syscall_64+0x14d/0xf80
[ 1297.692469][ T9317]  ? trace_irq_disable+0x3b/0x150
[ 1297.692488][ T9317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.692505][ T9317]  ? clear_bhb_loop+0x40/0x90
[ 1297.692525][ T9317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.692542][ T9317] RIP: 0033:0x7f2c727cc819
[ 1297.692559][ T9317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1297.692575][ T9317] RSP: 002b:00007f2c70a26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1297.692594][ T9317] RAX: ffffffffffffffda RBX: 00007f2c72a45fa0 RCX: 00007f2c727cc819
[ 1297.692606][ T9317] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 1297.692617][ T9317] RBP: 00007f2c70a26090 R08: 0000000000000000 R09: 0000000000000000
[ 1297.692628][ T9317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1297.692638][ T9317] R13: 00007f2c72a46038 R14: 00007f2c72a45fa0 R15: 00007ffd1e795418
[ 1297.692665][ T9317]  </TASK>
[ 1297.899172][ T5913] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1298.069106][ T5913] usb 7-1: Using ep0 maxpacket: 32
[ 1298.074951][ T5913] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[ 1298.074979][ T5913] usb 7-1: config 0 has no interface number 0
[ 1298.075020][ T5913] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1298.075044][ T5913] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1298.075065][ T5913] usb 7-1: config 0 interface 85 has no altsetting 0
[ 1298.078007][ T5913] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1298.078036][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1298.078055][ T5913] usb 7-1: Product: syz
[ 1298.078068][ T5913] usb 7-1: Manufacturer: syz
[ 1298.078082][ T5913] usb 7-1: SerialNumber: syz
[ 1298.090405][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4933'.
[ 1298.139757][ T9326] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4932'.
[ 1298.154903][ T9326] [U] 
[ 1298.154937][ T9326] [U] 
[ 1298.154974][ T9326] [U] 
[ 1298.155004][ T9326] [U] 
[ 1298.155128][ T9326] [U] 
[ 1298.155158][ T9326] [U] 
[ 1298.155188][ T9326] [U] 
[ 1298.155217][ T9326] [U] 
[ 1298.155358][ T9326] [U] 
[ 1298.155388][ T9326] [U] 
[ 1298.155419][ T9326] [U] 
[ 1298.155449][ T9326] [U] 
[ 1298.155564][ T9326] [U] 
[ 1298.155593][ T9326] [U] 
[ 1298.155633][ T9326] [U] 
[ 1298.155662][ T9326] [U] 
[ 1298.155794][ T9326] [U] 
[ 1298.155824][ T9326] [U] 
[ 1298.155854][ T9326] [U] 
[ 1298.155883][ T9326] [U] 
[ 1298.156003][ T9326] [U] 
[ 1298.156032][ T9326] [U] 
[ 1298.156061][ T9326] [U] 
[ 1298.156090][ T9326] [U] 
[ 1298.156219][ T9326] [U] 
[ 1298.156248][ T9326] [U] 
[ 1298.156276][ T9326] [U] 
[ 1298.156305][ T9326] [U] 
[ 1298.156416][ T9326] [U] 
[ 1298.156444][ T9326] [U] 
[ 1298.156474][ T9326] [U] 
[ 1298.156502][ T9326] [U] 
[ 1298.156626][ T9326] [U] 
[ 1298.156656][ T9326] [U] 
[ 1298.156684][ T9326] [U] 
[ 1298.156712][ T9326] [U] 
[ 1298.156817][ T9326] [U] 
[ 1298.156846][ T9326] [U] 
[ 1298.156874][ T9326] [U] 
[ 1298.156903][ T9326] [U] 
[ 1298.157038][ T9326] [U] 
[ 1298.157068][ T9326] [U] 
[ 1298.157098][ T9326] [U] 
[ 1298.157127][ T9326] [U] 
[ 1298.157240][ T9326] [U] 
[ 1298.157267][ T9326] [U] 
[ 1298.157297][ T9326] [U] 
[ 1298.157325][ T9326] [U] 
[ 1298.157451][ T9326] [U] 
[ 1298.157479][ T9326] [U] 
[ 1298.157508][ T9326] [U] 
[ 1298.157536][ T9326] [U] 
[ 1298.157647][ T9326] [U] 
[ 1298.157675][ T9326] [U] 
[ 1298.157703][ T9326] [U] 
[ 1298.157732][ T9326] [U] 
[ 1298.157858][ T9326] [U] 
[ 1298.157887][ T9326] [U] 
[ 1298.157914][ T9326] [U] 
[ 1298.157943][ T9326] [U] 
[ 1298.158064][ T9326] [U] 
[ 1298.158094][ T9326] [U] 
[ 1298.158123][ T9326] [U] 
[ 1298.158153][ T9326] [U] 
[ 1298.158280][ T9326] [U] 
[ 1298.158308][ T9326] [U] 
[ 1298.158336][ T9326] [U] 
[ 1298.158365][ T9326] [U] 
[ 1298.158482][ T9326] [U] 
[ 1298.158510][ T9326] [U] 
[ 1298.158538][ T9326] [U] 
[ 1298.158570][ T9326] [U] 
[ 1298.158698][ T9326] [U] 
[ 1298.158727][ T9326] [U] 
[ 1298.158755][ T9326] [U] 
[ 1298.158783][ T9326] [U] 
[ 1298.158896][ T9326] [U] 
[ 1298.158925][ T9326] [U] 
[ 1298.195111][ T9326] [U] 
[ 1298.195150][ T9326] [U] 
[ 1298.195315][ T9326] [U] 
[ 1298.195346][ T9326] [U] 
[ 1298.195373][ T9326] [U] 
[ 1298.195401][ T9326] [U] 
[ 1298.195512][ T9326] [U] 
[ 1298.195542][ T9326] [U] 
[ 1298.195570][ T9326] [U] 
[ 1298.195599][ T9326] [U] 
[ 1298.195725][ T9326] [U] 
[ 1298.195753][ T9326] [U] 
[ 1298.195780][ T9326] [U] 
[ 1298.195808][ T9326] [U] 
[ 1298.195920][ T9326] [U] 
[ 1298.195958][ T9326] [U] 
[ 1298.195988][ T9326] [U] 
[ 1298.196018][ T9326] [U] 
[ 1298.198525][ T9326] [U] 
[ 1298.198560][ T9326] [U] 
[ 1298.198591][ T9326] [U] 
[ 1298.198621][ T9326] [U] 
[ 1298.198740][ T9326] [U] 
[ 1298.198770][ T9326] [U] 
[ 1298.198800][ T9326] [U] 
[ 1298.198829][ T9326] [U] 
[ 1298.208712][ T9326] [U] 
[ 1298.208746][ T9326] [U] 
[ 1298.208778][ T9326] [U] 
[ 1298.208806][ T9326] [U] 
[ 1298.208930][ T9326] [U] 
[ 1298.209644][ T9326] [U] 
[ 1298.216787][ T9326] [U] 
[ 1298.216823][ T9326] [U] 
[ 1298.217000][ T9326] [U] 
[ 1298.217032][ T9326] [U] 
[ 1298.217062][ T9326] [U] 
[ 1298.217092][ T9326] [U] 
[ 1298.217204][ T9326] [U] 
[ 1298.217232][ T9326] [U] 
[ 1298.217262][ T9326] [U] 
[ 1298.217291][ T9326] [U] 
[ 1298.217418][ T9326] [U] 
[ 1298.217448][ T9326] [U] 
[ 1298.217477][ T9326] [U] 
[ 1298.217506][ T9326] [U] 
[ 1298.222209][ T9326] [U] 
[ 1298.222245][ T9326] [U] 
[ 1298.222275][ T9326] [U] 
[ 1298.311148][ T5913] usb 7-1: config 0 descriptor??
[ 1298.746461][ T5913] appletouch 7-1:0.85: Geyser mode initialized.
[ 1298.758608][ T5913] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input95
[ 1298.858428][ T9344] openvswitch: netlink: IPv4 tun info is not correct
[ 1298.866107][ T9344] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1298.894036][ T9321] [U] 
[ 1298.951124][ T5807] usb 7-1: USB disconnect, device number 51
[ 1299.191595][ T9350] Bluetooth: hci0: unsupported parameter 255
[ 1299.191617][ T9350] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[ 1299.215840][ T5807] appletouch 7-1:0.85: input: appletouch disconnected
[ 1299.374185][ T9352] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4941'.
[ 1299.406162][ T9353] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4941'.
[ 1299.696846][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.377489][ T9379] lo speed is unknown, defaulting to 1000
[ 1300.380793][ T9379] lo speed is unknown, defaulting to 1000
[ 1300.459743][ T9379] lo speed is unknown, defaulting to 1000
[ 1300.578043][ T9379] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1300.775986][ T9379] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1301.500443][ T9387] netlink: 11 bytes leftover after parsing attributes in process `syz.7.4952'.
[ 1301.532321][   T10] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1301.676424][ T9379] lo speed is unknown, defaulting to 1000
[ 1301.697713][ T9379] lo speed is unknown, defaulting to 1000
[ 1301.716500][ T9379] lo speed is unknown, defaulting to 1000
[ 1301.731918][ T9379] lo speed is unknown, defaulting to 1000
[ 1301.739157][   T10] usb 7-1: Using ep0 maxpacket: 16
[ 1301.741906][   T10] usb 7-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1301.741936][   T10] usb 7-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[ 1301.741960][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1301.741991][   T10] usb 7-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00
[ 1301.742010][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1301.758123][   T10] usb 7-1: config 0 descriptor??
[ 1301.919700][ T9379] lo speed is unknown, defaulting to 1000
[ 1302.345525][   T10] lenovo 0003:04B3:3105.0027: unknown main item tag 0x0
[ 1302.345570][   T10] lenovo 0003:04B3:3105.0027: unknown main item tag 0x0
[ 1302.345605][   T10] lenovo 0003:04B3:3105.0027: unknown main item tag 0x0
[ 1302.345639][   T10] lenovo 0003:04B3:3105.0027: unknown main item tag 0x0
[ 1302.345672][   T10] lenovo 0003:04B3:3105.0027: unknown main item tag 0x0
[ 1302.345702][   T10] lenovo 0003:04B3:3105.0027: unknown main item tag 0x0
[ 1302.345726][   T10] lenovo 0003:04B3:3105.0027: unknown main item tag 0x0
[ 1302.346845][   T10] lenovo 0003:04B3:3105.0027: unknown main item tag 0x0
[ 1302.346876][   T10] lenovo 0003:04B3:3105.0027: unknown main item tag 0x0
[ 1302.346901][   T10] lenovo 0003:04B3:3105.0027: unknown main item tag 0x0
[ 1302.353190][   T10] lenovo 0003:04B3:3105.0027: hidraw0: USB HID v0.0b Device [HID 04b3:3105] on usb-dummy_hcd.6-1/input0
[ 1302.816376][ T7243] usb 7-1: USB disconnect, device number 52
[ 1303.594516][ T9397] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4955'.
[ 1304.825155][ T9403] fido_id[9403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1304.979707][ T9413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1304.979726][ T9413] IPv6: NLM_F_CREATE should be set when creating new route
[ 1304.979878][ T9413] IPv6: NLM_F_CREATE should be set when creating new route
[ 1304.979908][ T9413] IPv6: NLM_F_CREATE should be set when creating new route
[ 1305.359166][T22899] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1305.377289][   T10] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1305.509114][T22899] usb 3-1: Using ep0 maxpacket: 16
[ 1305.511075][T22899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1305.511123][T22899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1305.511148][T22899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1305.511168][T22899] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1305.511189][T22899] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1305.512297][T22899] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1305.512322][T22899] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1305.512340][T22899] usb 3-1: Manufacturer: syz
[ 1305.543795][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4964'.
[ 1305.543822][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4964'.
[ 1305.579136][   T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1305.579169][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1305.579192][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1305.579212][   T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1305.579253][   T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1305.579274][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1305.687841][T22899] usb 3-1: config 0 descriptor??
[ 1305.698747][   T10] usb 10-1: config 0 descriptor??
[ 1305.721140][ T5872] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 1305.945464][ T5872] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1305.945493][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1305.945512][ T5872] usb 7-1: Product: syz
[ 1305.945525][ T5872] usb 7-1: Manufacturer: syz
[ 1305.945538][ T5872] usb 7-1: SerialNumber: syz
[ 1305.998075][ T5872] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1306.020846][ T6054] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1306.352622][T22899] rc_core: IR keymap rc-hauppauge not found
[ 1306.352642][T22899] Registered IR keymap rc-empty
[ 1306.352813][T22899] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1306.387099][T22899] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1306.400741][T22899] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1306.437278][T22899] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input96
[ 1306.485777][T22899] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1306.503988][T22899] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1306.521881][T22899] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1306.540414][T22899] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1306.559253][T22899] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1306.579127][T22899] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1306.599253][T22899] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1306.602614][   T10] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1306.635010][T22899] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1306.652981][T22899] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1306.669241][T22899] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1306.701356][T22899] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[ 1306.701386][T22899] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1306.769441][T22899] usb 3-1: USB disconnect, device number 6
[ 1307.435529][ T6054] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 1307.435657][ T6054] ath9k_htc: Failed to initialize the device
[ 1307.917626][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4970'.
[ 1308.469976][ T5872] usb 7-1: USB disconnect, device number 53
[ 1308.860268][ T5872] usb 7-1: ath9k_htc: USB layer deinitialized
[ 1309.071693][   T10] usb 10-1: USB disconnect, device number 21
[ 1309.579082][T22899] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1309.669281][ T5872] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1309.730098][T22899] usb 7-1: Using ep0 maxpacket: 32
[ 1309.732182][T22899] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[ 1309.732208][T22899] usb 7-1: config 0 has no interface number 0
[ 1309.732250][T22899] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1309.732274][T22899] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1309.732295][T22899] usb 7-1: config 0 interface 85 has no altsetting 0
[ 1309.734853][T22899] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1309.734879][T22899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1309.734896][T22899] usb 7-1: Product: syz
[ 1309.734908][T22899] usb 7-1: Manufacturer: syz
[ 1309.734921][T22899] usb 7-1: SerialNumber: syz
[ 1309.803288][T22899] usb 7-1: config 0 descriptor??
[ 1309.856082][ T5872] usb 10-1: Using ep0 maxpacket: 32
[ 1309.876724][ T5872] usb 10-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1309.876759][ T5872] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1309.921608][ T5872] usb 10-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40
[ 1309.921630][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1309.921640][ T5872] usb 10-1: Product: ц
[ 1309.921648][ T5872] usb 10-1: Manufacturer: 䛦㰯쫇ﳀᖑ퓁ꥬ亡鵫䵰軩蓻姽ﾰ統鄯쓨漛ឳᙎ鱩ﷻ콪䎭衃甡⼴矎
[ 1309.921658][ T5872] usb 10-1: SerialNumber: 堺邾模墴ݒ半靝轂굑긨앸臩彿膕㮂᥇ꁇ펨ợ鶝䗖鏭爩婖툥릺屒ꕃ侦쳓鳺ၭ釒ꬦⓣ鼗싰蟝耩鐔覻ς瀓⑕黠枘㾹屫Ⓕ쓍䛒頭ո잕ⵄ㓼℥宰ਃᥒ઎榹㤾㬛D齶짜滰둋뮣똘쯔粐ᓕ샲喣뜚堨䩳ሔ᪆㸺꩏鿼㗁秫撆䤡栯坡鋀ⓗ닒鷥ᓨ䋢䦸溡遗Т呍塑⎙暭ꞕ
[ 1310.247358][T22899] appletouch 7-1:0.85: Geyser mode initialized.
[ 1310.279327][T22899] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input98
[ 1310.451576][   T10] usb 7-1: USB disconnect, device number 54
[ 1310.531646][ T5872] usbhid 10-1:1.0: can't add hid device: -71
[ 1310.531764][ T5872] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[ 1310.553662][ T5872] usb 10-1: USB disconnect, device number 22
[ 1310.700217][   T10] appletouch 7-1:0.85: input: appletouch disconnected
[ 1311.029122][ T5807] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1311.189078][ T5807] usb 3-1: Using ep0 maxpacket: 8
[ 1311.198904][ T5807] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1311.200158][ T5807] usb 3-1: config 7 has an invalid interface number: 83 but max is 0
[ 1311.200181][ T5807] usb 3-1: config 7 has no interface number 0
[ 1311.200209][ T5807] usb 3-1: config 7 interface 83 has no altsetting 0
[ 1311.204885][ T5807] usb 3-1: New USB device found, idVendor=046d, idProduct=08c5, bcdDevice=cb.ab
[ 1311.204911][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1311.204977][ T5807] usb 3-1: Product: syz
[ 1311.204991][ T5807] usb 3-1: Manufacturer: syz
[ 1311.205004][ T5807] usb 3-1: SerialNumber: syz
[ 1311.457021][ T5807] uvcvideo 3-1:7.83: Found multiple Units with ID 1
[ 1311.457879][ T5807] uvcvideo 3-1:7.83: Found UVC 0.00 device syz (046d:08c5)
[ 1311.457907][ T5807] uvcvideo 3-1:7.83: No valid video chain found.
[ 1311.458368][ T9484] FAULT_INJECTION: forcing a failure.
[ 1311.458368][ T9484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1311.458399][ T9484] CPU: 0 UID: 0 PID: 9484 Comm: syz.9.4986 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1311.458424][ T9484] Tainted: [L]=SOFTLOCKUP
[ 1311.458430][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1311.458441][ T9484] Call Trace:
[ 1311.458448][ T9484]  <TASK>
[ 1311.458457][ T9484]  dump_stack_lvl+0xe8/0x150
[ 1311.458486][ T9484]  should_fail_ex+0x46b/0x600
[ 1311.458513][ T9484]  _copy_to_user+0x31/0xb0
[ 1311.458533][ T9484]  generic_map_lookup_batch+0xa39/0xeb0
[ 1311.458563][ T9484]  ? __pfx_generic_map_lookup_batch+0x10/0x10
[ 1311.458581][ T9484]  ? __fget_files+0x2a/0x420
[ 1311.458604][ T9484]  ? __pfx_generic_map_lookup_batch+0x10/0x10
[ 1311.458624][ T9484]  bpf_map_do_batch+0x28e/0x630
[ 1311.458646][ T9484]  ? security_bpf+0x7e/0x2d0
[ 1311.458667][ T9484]  __sys_bpf+0x6b4/0x950
[ 1311.458690][ T9484]  ? __pfx___sys_bpf+0x10/0x10
[ 1311.458709][ T9484]  ? rt_mutex_slowunlock+0x1cb/0x300
[ 1311.458745][ T9484]  ? ksys_write+0x248/0x270
[ 1311.458772][ T9484]  ? __pfx_ksys_write+0x10/0x10
[ 1311.458801][ T9484]  __x64_sys_bpf+0x7c/0x90
[ 1311.458820][ T9484]  do_syscall_64+0x14d/0xf80
[ 1311.458837][ T9484]  ? trace_irq_disable+0x3b/0x150
[ 1311.458855][ T9484]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1311.458874][ T9484]  ? clear_bhb_loop+0x40/0x90
[ 1311.458895][ T9484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1311.458913][ T9484] RIP: 0033:0x7f2c727cc819
[ 1311.458930][ T9484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1311.458949][ T9484] RSP: 002b:00007f2c70a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1311.458967][ T9484] RAX: ffffffffffffffda RBX: 00007f2c72a45fa0 RCX: 00007f2c727cc819
[ 1311.458979][ T9484] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018
[ 1311.458991][ T9484] RBP: 00007f2c70a26090 R08: 0000000000000000 R09: 0000000000000000
[ 1311.459002][ T9484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1311.459011][ T9484] R13: 00007f2c72a46038 R14: 00007f2c72a45fa0 R15: 00007ffd1e795418
[ 1311.459036][ T9484]  </TASK>
[ 1311.468554][ T5807] usb 3-1: USB disconnect, device number 7
[ 1311.649096][T22899] usb 9-1: new full-speed USB device number 49 using dummy_hcd
[ 1311.829206][T22899] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1311.829231][T22899] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1311.829250][T22899] usb 9-1: config 1 has no interface number 0
[ 1311.829288][T22899] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1311.829312][T22899] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1311.829338][T22899] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1311.835372][T22899] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1311.835400][T22899] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1311.835418][T22899] usb 9-1: Product: syz
[ 1311.835431][T22899] usb 9-1: Manufacturer: syz
[ 1311.835443][T22899] usb 9-1: SerialNumber: syz
[ 1311.899435][ T9482] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1312.269109][ T5913] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 1312.419164][ T5913] usb 7-1: Using ep0 maxpacket: 32
[ 1312.419453][ T9504] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1312.424728][ T5913] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[ 1312.424752][ T5913] usb 7-1: config 0 has no interface number 0
[ 1312.424845][ T5913] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1312.424871][ T5913] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1312.424891][ T5913] usb 7-1: config 0 interface 85 has no altsetting 0
[ 1312.485656][ T5913] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1312.485894][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1312.485914][ T5913] usb 7-1: Product: syz
[ 1312.485958][ T5913] usb 7-1: Manufacturer: syz
[ 1312.485973][ T5913] usb 7-1: SerialNumber: syz
[ 1312.527289][ T5913] usb 7-1: config 0 descriptor??
[ 1312.609117][   T10] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1312.779274][   T10] usb 10-1: Using ep0 maxpacket: 32
[ 1312.788496][   T10] usb 10-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1312.788596][   T10] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1312.824518][   T10] usb 10-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40
[ 1312.824578][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1312.824589][   T10] usb 10-1: Product: ц
[ 1312.824597][   T10] usb 10-1: Manufacturer: 䛦㰯쫇ﳀᖑ퓁ꥬ亡鵫䵰軩蓻姽ﾰ統鄯쓨漛ឳᙎ鱩ﷻ콪䎭衃甡⼴矎
[ 1312.824606][   T10] usb 10-1: SerialNumber: 堺邾模墴ݒ半靝轂굑긨앸臩彿膕㮂᥇ꁇ펨ợ鶝䗖鏭爩婖툥릺屒ꕃ侦쳓鳺ၭ釒ꬦⓣ鼗싰蟝耩鐔覻ς瀓⑕黠枘㾹屫Ⓕ쓍䛒頭ո잕ⵄ㓼℥宰ਃᥒ઎榹㤾㬛D齶짜滰둋뮣똘쯔粐ᓕ샲喣뜚堨䩳ሔ᪆㸺꩏鿼㗁秫撆䤡栯坡鋀ⓗ닒鷥ᓨ䋢䦸溡遗Т呍塑⎙暭ꞕ
[ 1312.902395][T22899] cdc_ncm 9-1:1.1: bind() failure
[ 1312.947694][ T5913] appletouch 7-1:0.85: Geyser mode initialized.
[ 1313.087349][ T5913] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input99
[ 1314.307526][ T5799] usb 9-1: USB disconnect, device number 49
[ 1315.789626][ T5913] usb 7-1: USB disconnect, device number 55
[ 1315.941152][   T10] usbhid 10-1:1.0: can't add hid device: -71
[ 1315.941266][   T10] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[ 1315.992477][   T10] usb 10-1: USB disconnect, device number 23
[ 1317.449557][ T5913] appletouch 7-1:0.85: input: appletouch disconnected
[ 1317.529119][   T10] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1317.539419][   T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1317.679537][   T10] usb 10-1: Using ep0 maxpacket: 8
[ 1317.700183][   T10] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1317.702021][   T10] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1317.702264][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1317.702284][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1317.703993][   T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1317.704017][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1317.704036][   T31] usb 3-1: SerialNumber: syz
[ 1317.728163][   T10] usb 10-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[ 1317.728192][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1317.728210][   T10] usb 10-1: Product: syz
[ 1317.728224][   T10] usb 10-1: Manufacturer: syz
[ 1317.728236][   T10] usb 10-1: SerialNumber: syz
[ 1317.948497][   T31] usb 3-1: 0:2 : does not exist
[ 1318.047241][   T10] snd-ua101 10-1:1.1: sample format descriptor not found
[ 1318.047267][   T10] snd-ua101 10-1:1.0: invalid num_altsetting
[ 1318.069762][   T31] usb 3-1: USB disconnect, device number 8
[ 1318.141588][ T8377] udevd[8377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1318.148468][   T10] usb 10-1: USB disconnect, device number 24
[ 1318.419111][ T6054] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 1318.589174][ T6054] usb 7-1: Using ep0 maxpacket: 32
[ 1318.591662][ T6054] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[ 1318.591687][ T6054] usb 7-1: config 0 has no interface number 0
[ 1318.591720][ T6054] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1318.591733][ T6054] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1318.591744][ T6054] usb 7-1: config 0 interface 85 has no altsetting 0
[ 1318.594143][ T6054] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1318.594166][ T6054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1318.594176][ T6054] usb 7-1: Product: syz
[ 1318.594183][ T6054] usb 7-1: Manufacturer: syz
[ 1318.594190][ T6054] usb 7-1: SerialNumber: syz
[ 1318.607523][ T6054] usb 7-1: config 0 descriptor??
[ 1318.969223][   T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1319.049283][ T5872] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1319.069801][ T6054] appletouch 7-1:0.85: Geyser mode initialized.
[ 1319.071708][ T6054] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input100
[ 1319.149169][   T31] usb 3-1: Using ep0 maxpacket: 32
[ 1319.155408][   T31] usb 3-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1319.155428][   T31] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1319.158786][   T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40
[ 1319.158813][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1319.158823][   T31] usb 3-1: Product: ц
[ 1319.158831][   T31] usb 3-1: Manufacturer: 䛦㰯쫇ﳀᖑ퓁ꥬ亡鵫䵰軩蓻姽ﾰ統鄯쓨漛ឳᙎ鱩ﷻ콪䎭衃甡⼴矎
[ 1319.158840][   T31] usb 3-1: SerialNumber: 堺邾模墴ݒ半靝轂굑긨앸臩彿膕㮂᥇ꁇ펨ợ鶝䗖鏭爩婖툥릺屒ꕃ侦쳓鳺ၭ釒ꬦⓣ鼗싰蟝耩鐔覻ς瀓⑕黠枘㾹屫Ⓕ쓍䛒頭ո잕ⵄ㓼℥宰ਃᥒ઎榹㤾㬛D齶짜滰둋뮣똘쯔粐ᓕ샲喣뜚堨䩳ሔ᪆㸺꩏鿼㗁秫撆䤡栯坡鋀ⓗ닒鷥ᓨ䋢䦸溡遗Т呍塑⎙暭ꞕ
[ 1319.190321][ T5872] usb 10-1: device descriptor read/64, error -71
[ 1319.275644][ T5799] usb 7-1: USB disconnect, device number 56
[ 1319.372546][ T5799] appletouch 7-1:0.85: input: appletouch disconnected
[ 1319.439738][ T5872] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1319.480071][ T9560] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5017'.
[ 1319.480101][ T9560] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5017'.
[ 1319.483929][ T9560] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[ 1319.549504][ T9559] lo speed is unknown, defaulting to 1000
[ 1319.579196][ T5872] usb 10-1: device descriptor read/64, error -71
[ 1319.660113][   T31] usbhid 3-1:1.0: can't add hid device: -71
[ 1319.660186][   T31] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[ 1319.685562][   T31] usb 3-1: USB disconnect, device number 9
[ 1319.693131][ T5872] usb usb10-port1: attempt power cycle
[ 1320.049109][ T5872] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1320.071310][ T5872] usb 10-1: device descriptor read/8, error -71
[ 1320.318740][ T5872] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1320.339740][ T5872] usb 10-1: device descriptor read/8, error -71
[ 1320.455894][ T5872] usb usb10-port1: unable to enumerate USB device
[ 1320.491266][ T5799] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1320.650980][ T5799] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1320.651171][ T5799] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1320.651214][ T5799] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[ 1320.651235][ T5799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1320.716341][ T5799] usb 7-1: config 0 descriptor??
[ 1321.036187][ T9572] netlink: 'syz.6.5022': attribute type 1 has an invalid length.
[ 1321.036208][ T9572] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5022'.
[ 1321.036223][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5022'.
[ 1321.082931][ T5799] usb 7-1: string descriptor 0 read error: -71
[ 1321.110527][ T5799] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1321.113251][ T5799] usb 7-1: USB disconnect, device number 57
[ 1321.165506][ T9582] tmpfs: Bad value for 'mpol'
[ 1321.165747][ T9582] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5026'.
[ 1321.474579][ T9588] syz.7.5026 (9588): drop_caches: 2
[ 1321.559090][ T5799] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1321.709166][ T5799] usb 3-1: Using ep0 maxpacket: 32
[ 1321.713061][ T5799] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1321.713089][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1321.713113][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1321.713134][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1321.713157][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1321.715724][ T5799] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1321.715748][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.715766][ T5799] usb 3-1: Product: syz
[ 1321.715779][ T5799] usb 3-1: Manufacturer: syz
[ 1321.715792][ T5799] usb 3-1: SerialNumber: syz
[ 1321.728849][ T5799] usb 3-1: config 0 descriptor??
[ 1322.047625][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.050528][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.053615][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.057754][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.058195][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.058622][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.063847][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.064164][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.075329][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.079261][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.079714][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.080145][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.081193][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.082162][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.082739][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.083177][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.084610][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.085035][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.085476][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.085907][ T5799] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1322.085957][ T5799] input input101: Timeout waiting for response from device.
[ 1322.121706][ T5799] usb 3-1: USB disconnect, device number 10
[ 1322.404612][ T9603] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5033'.
[ 1322.750395][   T10] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1323.675025][   T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1323.675398][   T10] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1323.675444][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1324.051562][   T10] usb 10-1: config 0 descriptor??
[ 1324.108509][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[ 1324.312702][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5041'.
[ 1324.485372][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1324.486019][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[ 1324.486727][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1324.487372][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[ 1324.515414][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[ 1324.516297][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[ 1324.804056][   T10] pwc: recv_control_msg error -71 req 02 val 2100
[ 1324.804552][   T10] pwc: recv_control_msg error -71 req 04 val 1500
[ 1324.806831][   T10] pwc: recv_control_msg error -71 req 02 val 2500
[ 1324.807571][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[ 1324.808099][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[ 1324.808573][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[ 1324.854535][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[ 1324.855751][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[ 1324.856215][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[ 1324.885108][   T10] pwc: Registered as video103.
[ 1324.896041][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input102
[ 1324.925676][   T10] usb 10-1: USB disconnect, device number 29
[ 1325.875493][ T6054] IPVS: starting estimator thread 0...
[ 1325.964116][ T9644] IPVS: using max 9 ests per chain, 21600 per kthread
[ 1326.979064][ T5799] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 1327.066794][ T9680] comedi comedi2: pcl730: I/O port conflict (0x4fa7,4)
[ 1327.129084][ T5799] usb 7-1: Using ep0 maxpacket: 32
[ 1327.160851][ T5799] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[ 1327.160878][ T5799] usb 7-1: config 0 has no interface number 0
[ 1327.160922][ T5799] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1327.160950][ T5799] usb 7-1: config 0 interface 85 has no altsetting 0
[ 1327.164805][ T5799] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1327.164846][ T5799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1327.164879][ T5799] usb 7-1: Product: syz
[ 1327.164910][ T5799] usb 7-1: Manufacturer: syz
[ 1327.164939][ T5799] usb 7-1: SerialNumber: syz
[ 1327.244596][ T5799] usb 7-1: config 0 descriptor??
[ 1327.379321][ T6054] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1327.457296][ T5799] appletouch 7-1:0.85: Failed to read mode from device.
[ 1327.457649][ T5799] appletouch 7-1:0.85: probe with driver appletouch failed with error -5
[ 1327.531870][ T6054] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1327.531933][ T6054] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1327.531955][ T6054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1327.546271][ T6054] usb 3-1: config 0 descriptor??
[ 1327.568014][ T6054] pwc: Askey VC010 type 2 USB webcam detected.
[ 1327.680680][ T5799] usb 7-1: USB disconnect, device number 58
[ 1327.953135][ T6054] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1327.969248][ T6054] pwc: recv_control_msg error -32 req 02 val 2700
[ 1327.972251][ T6054] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1327.979814][ T6054] pwc: recv_control_msg error -32 req 04 val 1000
[ 1328.003443][ T6054] pwc: recv_control_msg error -32 req 04 val 1300
[ 1328.008189][ T6054] pwc: recv_control_msg error -32 req 04 val 1400
[ 1328.159859][ T9691] openvswitch: netlink: IPv4 tun info is not correct
[ 1328.160948][ T9691] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1328.259116][ T6054] pwc: recv_control_msg error -71 req 02 val 2100
[ 1328.259584][ T6054] pwc: recv_control_msg error -71 req 04 val 1500
[ 1328.260042][ T6054] pwc: recv_control_msg error -71 req 02 val 2500
[ 1328.260487][ T6054] pwc: recv_control_msg error -71 req 02 val 2400
[ 1328.266489][ T6054] pwc: recv_control_msg error -71 req 02 val 2600
[ 1328.266966][ T6054] pwc: recv_control_msg error -71 req 02 val 2900
[ 1328.269149][ T6054] pwc: recv_control_msg error -71 req 02 val 2800
[ 1328.279669][ T6054] pwc: recv_control_msg error -71 req 04 val 1100
[ 1328.282087][ T6054] pwc: recv_control_msg error -71 req 04 val 1200
[ 1328.289683][ T6054] pwc: Registered as video103.
[ 1328.292814][ T6054] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input104
[ 1328.355775][ T6054] usb 3-1: USB disconnect, device number 11
[ 1328.712638][ T9703] FAULT_INJECTION: forcing a failure.
[ 1328.712638][ T9703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1328.712731][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.8.5065 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1328.712757][ T9703] Tainted: [L]=SOFTLOCKUP
[ 1328.712763][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1328.712773][ T9703] Call Trace:
[ 1328.712780][ T9703]  <TASK>
[ 1328.712789][ T9703]  dump_stack_lvl+0xe8/0x150
[ 1328.712818][ T9703]  should_fail_ex+0x46b/0x600
[ 1328.712844][ T9703]  _copy_from_user+0x2d/0xb0
[ 1328.712863][ T9703]  __se_sys_mount+0x18b/0x420
[ 1328.712890][ T9703]  ? __pfx___se_sys_mount+0x10/0x10
[ 1328.712917][ T9703]  ? __x64_sys_mount+0x20/0xc0
[ 1328.712940][ T9703]  do_syscall_64+0x14d/0xf80
[ 1328.712960][ T9703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1328.712977][ T9703]  ? clear_bhb_loop+0x40/0x90
[ 1328.712996][ T9703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1328.713013][ T9703] RIP: 0033:0x7fdc3aa1c819
[ 1328.713029][ T9703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1328.713045][ T9703] RSP: 002b:00007fdc38c55028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1328.713071][ T9703] RAX: ffffffffffffffda RBX: 00007fdc3ac96090 RCX: 00007fdc3aa1c819
[ 1328.713084][ T9703] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1328.713096][ T9703] RBP: 00007fdc38c55090 R08: 00002000000001c0 R09: 0000000000000000
[ 1328.713109][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1328.713119][ T9703] R13: 00007fdc3ac96128 R14: 00007fdc3ac96090 R15: 00007fffb43d9b88
[ 1328.713146][ T9703]  </TASK>
[ 1329.167724][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5069'.
[ 1329.168761][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5069'.
[ 1329.177765][ T9708] veth1_macvtap: left promiscuous mode
[ 1329.177791][ T9708] macsec0: entered promiscuous mode
[ 1329.177807][ T9708] macsec0: entered allmulticast mode
[ 1329.854936][   T10] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1329.893794][ T9719] ubi16: attaching mtd0
[ 1329.911865][ T5799] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[ 1329.944524][ T9719] ubi16: scanning is finished
[ 1329.944550][ T9719] ubi16: empty MTD device detected
[ 1330.002660][   T10] usb 10-1: config index 0 descriptor too short (expected 8192, got 36)
[ 1330.002687][   T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1330.002705][   T10] usb 10-1: config 0 has no interfaces?
[ 1330.002731][   T10] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1330.002743][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1330.006216][   T10] usb 10-1: config 0 descriptor??
[ 1330.072042][ T5799] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1330.072067][ T5799] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1330.073123][ T5799] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1330.073147][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1330.073165][ T5799] usb 3-1: SerialNumber: syz
[ 1330.105326][ T5799] usb 3-1: 0:2 : does not exist
[ 1330.211809][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1330.212389][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1330.217480][   T10] usb 10-1: USB disconnect, device number 30
[ 1330.538186][ T9719] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1330.538214][ T9719] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1330.538223][ T9719] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1330.538232][ T9719] ubi16: VID header offset: 64 (aligned 64), data offset: 128
[ 1330.538240][ T9719] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1330.538248][ T9719] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1330.538257][ T9719] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2494281388
[ 1330.538267][ T9719] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1330.552773][ T9728] ubi16: background thread "ubi_bgt16d" started, PID 9728
[ 1330.557280][ T5799] usb 3-1: USB disconnect, device number 12
[ 1330.657921][ T6700] udevd[6700]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1330.689121][ T6054] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1330.713209][ T9730] syz.8.5074 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1330.719640][   T36] kauditd_printk_skb: 56 callbacks suppressed
[ 1330.719657][   T36] audit: type=1326 audit(1775642650.308:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.8.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3aa1c819 code=0x7ffc0000
[ 1330.719706][   T36] audit: type=1326 audit(1775642650.308:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.8.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3aa1c819 code=0x7ffc0000
[ 1330.729119][   T36] audit: type=1326 audit(1775642650.308:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.8.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3aa1c819 code=0x7ffc0000
[ 1330.729818][   T36] audit: type=1326 audit(1775642650.308:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.8.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3aa1c819 code=0x7ffc0000
[ 1330.729855][   T36] audit: type=1326 audit(1775642650.308:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.8.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fdc3aa1c819 code=0x7ffc0000
[ 1330.755834][   T36] audit: type=1326 audit(1775642650.308:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.8.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3aa1c819 code=0x7ffc0000
[ 1330.755880][   T36] audit: type=1326 audit(1775642650.308:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.8.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3aa1c819 code=0x7ffc0000
[ 1330.755918][   T36] audit: type=1326 audit(1775642650.308:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.8.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3aa1c819 code=0x7ffc0000
[ 1330.756027][   T36] audit: type=1326 audit(1775642650.308:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.8.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc3aa1c819 code=0x7ffc0000
[ 1330.756137][   T36] audit: type=1326 audit(1775642650.308:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.8.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdc3aa1c819 code=0x7ffc0000
[ 1330.839837][ T6054] usb 10-1: Using ep0 maxpacket: 16
[ 1330.861310][ T6054] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1330.861341][ T6054] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1330.861363][ T6054] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1330.861394][ T6054] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1330.861414][ T6054] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1331.073509][ T6054] usb 10-1: config 0 descriptor??
[ 1331.334338][ T9732] openvswitch: netlink: IPv4 tun info is not correct
[ 1331.335122][ T9732] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1331.520764][ T6054] hid_parser_main: 28 callbacks suppressed
[ 1331.520797][ T6054] nzxt-smart2 0003:1E71:2009.0029: unknown main item tag 0x0
[ 1331.520827][ T6054] nzxt-smart2 0003:1E71:2009.0029: unknown main item tag 0x0
[ 1331.520852][ T6054] nzxt-smart2 0003:1E71:2009.0029: unknown main item tag 0x0
[ 1331.520877][ T6054] nzxt-smart2 0003:1E71:2009.0029: unknown main item tag 0x0
[ 1331.520899][ T6054] nzxt-smart2 0003:1E71:2009.0029: unknown main item tag 0x0
[ 1331.583822][ T6054] nzxt-smart2 0003:1E71:2009.0029: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0
[ 1331.716736][ T9724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1331.717248][ T9724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1331.722445][ T5799] usb 10-1: USB disconnect, device number 31
[ 1336.699726][ T9744] uprobe: syz.6.5079:9744 failed to unregister, leaking uprobe
[ 1338.290700][ T9773] openvswitch: netlink: IPv4 tun info is not correct
[ 1338.291149][ T9773] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1338.539201][ T6054] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[ 1338.569302][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5092'.
[ 1338.699115][ T6054] usb 9-1: Using ep0 maxpacket: 32
[ 1338.704610][ T6054] usb 9-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1338.704644][ T6054] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1338.707776][ T6054] usb 9-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40
[ 1338.707803][ T6054] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1338.707822][ T6054] usb 9-1: Product: ц
[ 1338.707836][ T6054] usb 9-1: Manufacturer: 䛦㰯쫇ﳀᖑ퓁ꥬ亡鵫䵰軩蓻姽ﾰ統鄯쓨漛ឳᙎ鱩ﷻ콪䎭衃甡⼴矎
[ 1338.707852][ T6054] usb 9-1: SerialNumber: 堺邾模墴ݒ半靝轂굑긨앸臩彿膕㮂᥇ꁇ펨ợ鶝䗖鏭爩婖툥릺屒ꕃ侦쳓鳺ၭ釒ꬦⓣ鼗싰蟝耩鐔覻ς瀓⑕黠枘㾹屫Ⓕ쓍䛒頭ո잕ⵄ㓼℥宰ਃᥒ઎榹㤾㬛D齶짜滰둋뮣똘쯔粐ᓕ샲喣뜚堨䩳ሔ᪆㸺꩏鿼㗁秫撆䤡栯坡鋀ⓗ닒鷥ᓨ䋢䦸溡遗Т呍塑⎙暭ꞕ
[ 1339.059344][ T5872] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 1339.119141][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1339.164867][ T6054] usbhid 9-1:1.0: can't add hid device: -71
[ 1339.164982][ T6054] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[ 1339.172646][ T6054] usb 9-1: USB disconnect, device number 50
[ 1339.219972][ T5872] usb 10-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[ 1339.220000][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1339.220019][ T5872] usb 10-1: Product: syz
[ 1339.220032][ T5872] usb 10-1: Manufacturer: syz
[ 1339.220045][ T5872] usb 10-1: SerialNumber: syz
[ 1339.284320][   T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1339.284350][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1339.284368][   T10] usb 3-1: Product: syz
[ 1339.284381][   T10] usb 3-1: Manufacturer: syz
[ 1339.284394][   T10] usb 3-1: SerialNumber: syz
[ 1339.331621][   T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1339.364605][ T5799] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1339.482126][ T5872] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1339.496120][ T5872] usb 10-1: USB disconnect, device number 32
[ 1339.938168][ T5872] usb 3-1: USB disconnect, device number 13
[ 1340.421895][ T5799] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1340.427051][ T5799] ath9k_htc: Failed to initialize the device
[ 1340.880969][ T5872] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1342.380397][ T9808] openvswitch: netlink: IPv4 tun info is not correct
[ 1342.380847][ T9808] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1342.420482][ T9812] program syz.6.5102 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1342.420532][ T9812] FAULT_INJECTION: forcing a failure.
[ 1342.420532][ T9812] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1342.420561][ T9812] CPU: 1 UID: 0 PID: 9812 Comm: syz.6.5102 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1342.420587][ T9812] Tainted: [L]=SOFTLOCKUP
[ 1342.420593][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1342.420605][ T9812] Call Trace:
[ 1342.420613][ T9812]  <TASK>
[ 1342.420622][ T9812]  dump_stack_lvl+0xe8/0x150
[ 1342.420653][ T9812]  should_fail_ex+0x46b/0x600
[ 1342.420683][ T9812]  _copy_from_user+0x2d/0xb0
[ 1342.420703][ T9812]  scsi_ioctl+0x17f4/0x2130
[ 1342.420733][ T9812]  ? __pfx_scsi_ioctl+0x10/0x10
[ 1342.420786][ T9812]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1342.420819][ T9812]  ? tomoyo_path_number_perm+0x219/0x630
[ 1342.420841][ T9812]  ? tomoyo_path_number_perm+0x219/0x630
[ 1342.420862][ T9812]  ? do_vfs_ioctl+0x117b/0x1540
[ 1342.420884][ T9812]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1342.420920][ T9812]  sg_ioctl+0x1600/0x21a0
[ 1342.420948][ T9812]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1342.420973][ T9812]  ? __pfx_sg_ioctl+0x10/0x10
[ 1342.421001][ T9812]  ? __fget_files+0x2a/0x420
[ 1342.421027][ T9812]  ? __fget_files+0x3a6/0x420
[ 1342.421048][ T9812]  ? __fget_files+0x2a/0x420
[ 1342.421072][ T9812]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1342.421091][ T9812]  ? __pfx_sg_ioctl+0x10/0x10
[ 1342.421112][ T9812]  __se_sys_ioctl+0xff/0x170
[ 1342.421132][ T9812]  do_syscall_64+0x14d/0xf80
[ 1342.421153][ T9812]  ? trace_irq_disable+0x3b/0x150
[ 1342.421173][ T9812]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1342.421192][ T9812]  ? clear_bhb_loop+0x40/0x90
[ 1342.421213][ T9812]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1342.421231][ T9812] RIP: 0033:0x7f9dc4a7c819
[ 1342.421249][ T9812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1342.421265][ T9812] RSP: 002b:00007f9dc2cb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1342.421284][ T9812] RAX: ffffffffffffffda RBX: 00007f9dc4cf6090 RCX: 00007f9dc4a7c819
[ 1342.421298][ T9812] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003
[ 1342.421310][ T9812] RBP: 00007f9dc2cb5090 R08: 0000000000000000 R09: 0000000000000000
[ 1342.421321][ T9812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1342.421332][ T9812] R13: 00007f9dc4cf6128 R14: 00007f9dc4cf6090 R15: 00007ffcc3902a98
[ 1342.421362][ T9812]  </TASK>
[ 1343.721247][ T9807] trusted_key: encrypted_key: insufficient parameters specified
[ 1344.134379][ T5872] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[ 1344.678052][ T5872] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1344.678225][ T5872] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[ 1344.678268][ T5872] usb 9-1: Product: syz
[ 1344.678314][ T5872] usb 9-1: Manufacturer: syz
[ 1344.678350][ T5872] usb 9-1: SerialNumber: syz
[ 1344.974207][ T5872] usb 9-1: config 0 descriptor??
[ 1344.977718][ T5872] ch341 9-1:0.0: ch341-uart converter detected
[ 1345.183773][ T5872] usb 9-1: failed to receive control message: -121
[ 1345.183827][ T5872] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[ 1345.267829][ T9838] openvswitch: netlink: IPv4 tun info is not correct
[ 1345.268301][ T9838] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1345.400663][ T5872] usb 9-1: USB disconnect, device number 51
[ 1345.424428][ T5872] ch341 9-1:0.0: device disconnected
[ 1350.504557][ T9874] uprobe: syz.9.5126:9874 failed to unregister, leaking uprobe
[ 1350.689102][ T5872] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1350.859073][ T5872] usb 3-1: Using ep0 maxpacket: 8
[ 1350.867136][ T5872] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1350.867166][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1350.867185][ T5872] usb 3-1: Product: syz
[ 1350.867197][ T5872] usb 3-1: Manufacturer: syz
[ 1350.867209][ T5872] usb 3-1: SerialNumber: syz
[ 1350.881145][ T5872] usb 3-1: config 0 descriptor??
[ 1351.509029][ T9912] FAULT_INJECTION: forcing a failure.
[ 1351.509029][ T9912] name failslab, interval 1, probability 0, space 0, times 0
[ 1351.509088][ T9912] CPU: 0 UID: 0 PID: 9912 Comm: syz.9.5136 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1351.509115][ T9912] Tainted: [L]=SOFTLOCKUP
[ 1351.509123][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1351.509134][ T9912] Call Trace:
[ 1351.509142][ T9912]  <TASK>
[ 1351.509150][ T9912]  dump_stack_lvl+0xe8/0x150
[ 1351.509174][ T9912]  should_fail_ex+0x46b/0x600
[ 1351.509192][ T9912]  should_failslab+0xa8/0x100
[ 1351.509204][ T9912]  __kvmalloc_node_noprof+0x170/0x8e0
[ 1351.509216][ T9912]  ? __se_sys_add_key+0x289/0x420
[ 1351.509227][ T9912]  ? memdup_user+0x99/0xd0
[ 1351.509242][ T9912]  __se_sys_add_key+0x289/0x420
[ 1351.509254][ T9912]  ? __pfx___se_sys_add_key+0x10/0x10
[ 1351.509268][ T9912]  ? __x64_sys_add_key+0x20/0xc0
[ 1351.509279][ T9912]  do_syscall_64+0x14d/0xf80
[ 1351.509291][ T9912]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1351.509301][ T9912]  ? clear_bhb_loop+0x40/0x90
[ 1351.509313][ T9912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1351.509323][ T9912] RIP: 0033:0x7f2c727cc819
[ 1351.509334][ T9912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1351.509343][ T9912] RSP: 002b:00007f2c70a05028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1351.509355][ T9912] RAX: ffffffffffffffda RBX: 00007f2c72a46090 RCX: 00007f2c727cc819
[ 1351.509369][ T9912] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140
[ 1351.509376][ T9912] RBP: 00007f2c70a05090 R08: fffffffffffffffe R09: 0000000000000000
[ 1351.509383][ T9912] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001
[ 1351.509389][ T9912] R13: 00007f2c72a46128 R14: 00007f2c72a46090 R15: 00007ffd1e795418
[ 1351.509404][ T9912]  </TASK>
[ 1352.121925][ T5872] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1352.924876][ T9925] FAULT_INJECTION: forcing a failure.
[ 1352.924876][ T9925] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1352.924911][ T9925] CPU: 0 UID: 0 PID: 9925 Comm: syz.7.5139 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1352.924936][ T9925] Tainted: [L]=SOFTLOCKUP
[ 1352.924943][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1352.924954][ T9925] Call Trace:
[ 1352.924961][ T9925]  <TASK>
[ 1352.924970][ T9925]  dump_stack_lvl+0xe8/0x150
[ 1352.924999][ T9925]  should_fail_ex+0x46b/0x600
[ 1352.925027][ T9925]  _copy_from_iter+0x1d3/0x1670
[ 1352.925059][ T9925]  ? trace_kmem_cache_alloc+0x29/0xf0
[ 1352.925082][ T9925]  ? __alloc_skb+0x27d/0x7d0
[ 1352.925109][ T9925]  ? __pfx__copy_from_iter+0x10/0x10
[ 1352.925129][ T9925]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[ 1352.925151][ T9925]  ? __alloc_skb+0x27d/0x7d0
[ 1352.925174][ T9925]  ? netlink_sendmsg+0x650/0xb40
[ 1352.925197][ T9925]  ? skb_put+0x11b/0x210
[ 1352.925218][ T9925]  netlink_sendmsg+0x6c0/0xb40
[ 1352.925248][ T9925]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1352.925272][ T9925]  ? unwind_get_return_address+0x4d/0x90
[ 1352.925294][ T9925]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1352.925320][ T9925]  ____sys_sendmsg+0x94c/0x9c0
[ 1352.925346][ T9925]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1352.925375][ T9925]  ? import_iovec+0x73/0xa0
[ 1352.925396][ T9925]  ___sys_sendmsg+0x2a5/0x360
[ 1352.925421][ T9925]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1352.925473][ T9925]  ? __fget_files+0x2a/0x420
[ 1352.925493][ T9925]  ? __fget_files+0x3a6/0x420
[ 1352.925524][ T9925]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1352.925546][ T9925]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1352.925574][ T9925]  ? __pfx_ksys_write+0x10/0x10
[ 1352.925609][ T9925]  do_syscall_64+0x14d/0xf80
[ 1352.925628][ T9925]  ? trace_irq_disable+0x3b/0x150
[ 1352.925647][ T9925]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1352.925665][ T9925]  ? clear_bhb_loop+0x40/0x90
[ 1352.925687][ T9925]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1352.925705][ T9925] RIP: 0033:0x7f9955e0c819
[ 1352.925722][ T9925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1352.925737][ T9925] RSP: 002b:00007f9954066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1352.925760][ T9925] RAX: ffffffffffffffda RBX: 00007f9956085fa0 RCX: 00007f9955e0c819
[ 1352.925773][ T9925] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[ 1352.925785][ T9925] RBP: 00007f9954066090 R08: 0000000000000000 R09: 0000000000000000
[ 1352.925796][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1352.925806][ T9925] R13: 00007f9956086038 R14: 00007f9956085fa0 R15: 00007ffd4ed10428
[ 1352.925835][ T9925]  </TASK>
[ 1353.470018][ T5872] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[ 1353.567243][ T9931] netlink: 80 bytes leftover after parsing attributes in process `syz.8.5141'.
[ 1353.699821][T22899] usb 3-1: USB disconnect, device number 14
[ 1353.909996][ T9943] openvswitch: netlink: IPv4 tun info is not correct
[ 1353.910494][ T9943] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1354.576106][ T9959] FAULT_INJECTION: forcing a failure.
[ 1354.576106][ T9959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1354.576165][ T9959] CPU: 1 UID: 0 PID: 9959 Comm: syz.8.5149 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1354.576192][ T9959] Tainted: [L]=SOFTLOCKUP
[ 1354.576198][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1354.576209][ T9959] Call Trace:
[ 1354.576217][ T9959]  <TASK>
[ 1354.576226][ T9959]  dump_stack_lvl+0xe8/0x150
[ 1354.576256][ T9959]  should_fail_ex+0x46b/0x600
[ 1354.576286][ T9959]  _copy_from_user+0x2d/0xb0
[ 1354.576306][ T9959]  __se_sys_mount+0x18b/0x420
[ 1354.576335][ T9959]  ? __pfx___se_sys_mount+0x10/0x10
[ 1354.576363][ T9959]  ? __x64_sys_mount+0x20/0xc0
[ 1354.576388][ T9959]  do_syscall_64+0x14d/0xf80
[ 1354.576408][ T9959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1354.576427][ T9959]  ? clear_bhb_loop+0x40/0x90
[ 1354.576449][ T9959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1354.576467][ T9959] RIP: 0033:0x7fdc3aa1c819
[ 1354.576485][ T9959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1354.576500][ T9959] RSP: 002b:00007fdc38c34028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1354.576520][ T9959] RAX: ffffffffffffffda RBX: 00007fdc3ac96180 RCX: 00007fdc3aa1c819
[ 1354.576534][ T9959] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1354.576547][ T9959] RBP: 00007fdc38c34090 R08: 0000200000000400 R09: 0000000000000000
[ 1354.576559][ T9959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1354.576571][ T9959] R13: 00007fdc3ac96218 R14: 00007fdc3ac96180 R15: 00007fffb43d9b88
[ 1354.576602][ T9959]  </TASK>
[ 1355.666693][ T9972] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5155'.
[ 1355.702867][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1355.703943][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1356.006347][ T9981] openvswitch: netlink: IPv4 tun info is not correct
[ 1356.006618][ T9981] bridge: RTM_NEWNEIGH with invalid state 0x8
[ 1356.199070][ T5872] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[ 1356.226706][ T9984] FAULT_INJECTION: forcing a failure.
[ 1356.226706][ T9984] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1356.226730][ T9984] CPU: 0 UID: 0 PID: 9984 Comm: syz.2.5159 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1356.226745][ T9984] Tainted: [L]=SOFTLOCKUP
[ 1356.226748][ T9984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1356.226755][ T9984] Call Trace:
[ 1356.226760][ T9984]  <TASK>
[ 1356.226764][ T9984]  dump_stack_lvl+0xe8/0x150
[ 1356.226783][ T9984]  should_fail_ex+0x46b/0x600
[ 1356.226808][ T9984]  _copy_from_user+0x2d/0xb0
[ 1356.226819][ T9984]  ___sys_sendmsg+0x1c6/0x360
[ 1356.226835][ T9984]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1356.226863][ T9984]  ? __fget_files+0x2a/0x420
[ 1356.226876][ T9984]  ? __fget_files+0x3a6/0x420
[ 1356.226893][ T9984]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1356.226906][ T9984]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1356.226922][ T9984]  ? __pfx_ksys_write+0x10/0x10
[ 1356.226943][ T9984]  do_syscall_64+0x14d/0xf80
[ 1356.226954][ T9984]  ? trace_irq_disable+0x3b/0x150
[ 1356.226966][ T9984]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.226976][ T9984]  ? clear_bhb_loop+0x40/0x90
[ 1356.226989][ T9984]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.226998][ T9984] RIP: 0033:0x7f152acbc819
[ 1356.227010][ T9984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1356.227019][ T9984] RSP: 002b:00007f1528f16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1356.227030][ T9984] RAX: ffffffffffffffda RBX: 00007f152af35fa0 RCX: 00007f152acbc819
[ 1356.227037][ T9984] RDX: 0000000020000080 RSI: 00002000000017c0 RDI: 0000000000000004
[ 1356.227044][ T9984] RBP: 00007f1528f16090 R08: 0000000000000000 R09: 0000000000000000
[ 1356.227050][ T9984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1356.227056][ T9984] R13: 00007f152af36038 R14: 00007f152af35fa0 R15: 00007ffc4e0fd618
[ 1356.227071][ T9984]  </TASK>
[ 1356.369070][ T5872] usb 9-1: Using ep0 maxpacket: 32
[ 1356.371858][ T5872] usb 9-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1356.371878][ T5872] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1356.374114][ T5872] usb 9-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40
[ 1356.374129][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1356.374139][ T5872] usb 9-1: Product: ц
[ 1356.374146][ T5872] usb 9-1: Manufacturer: 䛦㰯쫇ﳀᖑ퓁ꥬ亡鵫䵰軩蓻姽ﾰ統鄯쓨漛ឳᙎ鱩ﷻ콪䎭衃甡⼴矎
[ 1356.374155][ T5872] usb 9-1: SerialNumber: 堺邾模墴ݒ半靝轂굑긨앸臩彿膕㮂᥇ꁇ펨ợ鶝䗖鏭爩婖툥릺屒ꕃ侦쳓鳺ၭ釒ꬦⓣ鼗싰蟝耩鐔覻ς瀓⑕黠枘㾹屫Ⓕ쓍䛒頭ո잕ⵄ㓼℥宰ਃᥒ઎榹㤾㬛D齶짜滰둋뮣똘쯔粐ᓕ샲喣뜚堨䩳ሔ᪆㸺꩏鿼㗁秫撆䤡栯坡鋀ⓗ닒鷥ᓨ䋢䦸溡遗Т呍塑⎙暭ꞕ
[ 1356.653174][ T6244] ==================================================================
[ 1356.653190][ T6244] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60
[ 1356.653219][ T6244] Read of size 1 at addr ffff88803e3a7728 by task syz-executor/6244
[ 1356.653235][ T6244] 
[ 1356.653249][ T6244] CPU: 0 UID: 0 PID: 6244 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1356.653275][ T6244] Tainted: [L]=SOFTLOCKUP
[ 1356.653282][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1356.653293][ T6244] Call Trace:
[ 1356.653301][ T6244]  <TASK>
[ 1356.653310][ T6244]  dump_stack_lvl+0xe8/0x150
[ 1356.653336][ T6244]  print_report+0xba/0x230
[ 1356.653357][ T6244]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1356.653375][ T6244]  kasan_report+0x117/0x150
[ 1356.653394][ T6244]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1356.653420][ T6244]  __kasan_check_byte+0x2a/0x40
[ 1356.653440][ T6244]  lock_acquire+0x79/0x2e0
[ 1356.653463][ T6244]  ? rcu_is_watching+0x15/0xb0
[ 1356.653487][ T6244]  _raw_spin_lock_irqsave+0x40/0x60
[ 1356.653505][ T6244]  ? rt_mutex_slowunlock+0xbf/0x8b0
[ 1356.653527][ T6244]  rt_mutex_slowunlock+0xbf/0x8b0
[ 1356.653552][ T6244]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1356.653575][ T6244]  ? __rcu_read_unlock+0x83/0xe0
[ 1356.653598][ T6244]  ? rt_spin_unlock+0x160/0x200
[ 1356.653621][ T6244]  shrink_dentry_list+0x2e3/0x5e0
[ 1356.653646][ T6244]  shrink_dcache_tree+0xcf/0x310
[ 1356.653668][ T6244]  ? __pfx_select_collect+0x10/0x10
[ 1356.653686][ T6244]  ? __pfx_shrink_dcache_tree+0x10/0x10
[ 1356.653711][ T6244]  ? rt_spin_unlock+0x160/0x200
[ 1356.653734][ T6244]  d_invalidate+0xde/0x210
[ 1356.653753][ T6244]  ? __pfx_d_invalidate+0x10/0x10
[ 1356.653774][ T6244]  ? rt_spin_unlock+0x160/0x200
[ 1356.653798][ T6244]  proc_invalidate_siblings_dcache+0x3d3/0x6c0
[ 1356.653821][ T6244]  ? proc_invalidate_siblings_dcache+0x2b/0x6c0
[ 1356.653845][ T6244]  release_task+0x1207/0x16f0
[ 1356.653867][ T6244]  ? wait_consider_task+0x1966/0x2e30
[ 1356.653889][ T6244]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1356.653911][ T6244]  ? __pfx_release_task+0x10/0x10
[ 1356.653930][ T6244]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1356.653957][ T6244]  ? rt_spin_unlock+0x160/0x200
[ 1356.653980][ T6244]  wait_consider_task+0x1966/0x2e30
[ 1356.654017][ T6244]  ? __do_wait+0x155/0x740
[ 1356.654034][ T6244]  ? __pfx_wait_consider_task+0x10/0x10
[ 1356.654053][ T6244]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1356.654078][ T6244]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1356.654102][ T6244]  __do_wait+0x155/0x740
[ 1356.654121][ T6244]  ? rt_spin_unlock+0x160/0x200
[ 1356.654144][ T6244]  do_wait+0x1e7/0x540
[ 1356.654162][ T6244]  ? do_wait+0x17d/0x540
[ 1356.654183][ T6244]  kernel_wait4+0x232/0x2b0
[ 1356.654201][ T6244]  ? count_memcg_event_mm+0x21/0x260
[ 1356.654225][ T6244]  ? __pfx_kernel_wait4+0x10/0x10
[ 1356.654246][ T6244]  ? __pfx_child_wait_callback+0x10/0x10
[ 1356.654268][ T6244]  ? handle_mm_fault+0xe7/0x13c0
[ 1356.654294][ T6244]  __x64_sys_wait4+0x166/0x240
[ 1356.654315][ T6244]  ? __pfx___x64_sys_wait4+0x10/0x10
[ 1356.654342][ T6244]  ? do_user_addr_fault+0xc6f/0x1340
[ 1356.654369][ T6244]  do_syscall_64+0x14d/0xf80
[ 1356.654387][ T6244]  ? trace_irq_disable+0x3b/0x150
[ 1356.654407][ T6244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.654426][ T6244]  ? clear_bhb_loop+0x40/0x90
[ 1356.654444][ T6244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.654462][ T6244] RIP: 0033:0x7f152ac7d04e
[ 1356.654480][ T6244] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1356.654496][ T6244] RSP: 002b:00007ffc4e0fd918 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[ 1356.654515][ T6244] RAX: ffffffffffffffda RBX: 0000555594896500 RCX: 00007f152ac7d04e
[ 1356.654529][ T6244] RDX: 0000000040000001 RSI: 00007ffc4e0fd9bc RDI: ffffffffffffffff
[ 1356.654542][ T6244] RBP: 00007ffc4e0fd9bc R08: 0000000000000000 R09: 0000000000000000
[ 1356.654554][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 1356.654563][ T6244] R13: 00000000000927c0 R14: 000000000014b42b R15: 00007ffc4e0fda10
[ 1356.654574][ T6244]  </TASK>
[ 1356.654579][ T6244] 
[ 1356.654581][ T6244] Allocated by task 9984:
[ 1356.654586][ T6244]  kasan_save_track+0x3e/0x80
[ 1356.654602][ T6244]  __kasan_slab_alloc+0x6c/0x80
[ 1356.654621][ T6244]  kmem_cache_alloc_lru_noprof+0x33c/0x680
[ 1356.654643][ T6244]  __d_alloc+0x37/0x6f0
[ 1356.654662][ T6244]  d_alloc_parallel+0xe6/0x1610
[ 1356.654683][ T6244]  __lookup_slow+0x152/0x440
[ 1356.654701][ T6244]  lookup_slow+0x53/0x70
[ 1356.654718][ T6244]  link_path_walk+0x1273/0x18d0
[ 1356.654737][ T6244]  path_openat+0x2d5/0x38a0
[ 1356.654755][ T6244]  do_file_open+0x23e/0x4a0
[ 1356.654773][ T6244]  do_sys_openat2+0x113/0x200
[ 1356.654789][ T6244]  __x64_sys_openat+0x138/0x170
[ 1356.654807][ T6244]  do_syscall_64+0x14d/0xf80
[ 1356.654823][ T6244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.654839][ T6244] 
[ 1356.654844][ T6244] Freed by task 20:
[ 1356.654853][ T6244]  kasan_save_track+0x3e/0x80
[ 1356.654872][ T6244]  kasan_save_free_info+0x46/0x50
[ 1356.654890][ T6244]  __kasan_slab_free+0x5c/0x80
[ 1356.654908][ T6244]  kmem_cache_free+0x185/0x6b0
[ 1356.654917][ T6244]  rcu_cpu_kthread+0x99e/0x1470
[ 1356.654925][ T6244]  smpboot_thread_fn+0x541/0xa50
[ 1356.654939][ T6244]  kthread+0x388/0x470
[ 1356.654948][ T6244]  ret_from_fork+0x51e/0xb90
[ 1356.654966][ T6244]  ret_from_fork_asm+0x1a/0x30
[ 1356.654982][ T6244] 
[ 1356.654986][ T6244] Last potentially related work creation:
[ 1356.655015][ T6244]  kasan_save_stack+0x3e/0x60
[ 1356.655035][ T6244]  kasan_record_aux_stack+0xbd/0xd0
[ 1356.655053][ T6244]  call_rcu+0xee/0x890
[ 1356.655068][ T6244]  __dentry_kill+0x469/0x5e0
[ 1356.655077][ T6244]  finish_dput+0xc9/0x480
[ 1356.655089][ T6244]  proc_invalidate_siblings_dcache+0x3db/0x6c0
[ 1356.655109][ T6244]  release_task+0x1207/0x16f0
[ 1356.655124][ T6244]  do_exit+0x1674/0x23c0
[ 1356.655139][ T6244]  do_group_exit+0x21b/0x2d0
[ 1356.655155][ T6244]  get_signal+0x125c/0x1310
[ 1356.655172][ T6244]  arch_do_signal_or_restart+0xbc/0x830
[ 1356.655191][ T6244]  exit_to_user_mode_loop+0x86/0x480
[ 1356.655213][ T6244]  do_syscall_64+0x32d/0xf80
[ 1356.655229][ T6244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.655244][ T6244] 
[ 1356.655247][ T6244] The buggy address belongs to the object at ffff88803e3a7658
[ 1356.655247][ T6244]  which belongs to the cache dentry of size 376
[ 1356.655256][ T6244] The buggy address is located 208 bytes inside of
[ 1356.655256][ T6244]  freed 376-byte region [ffff88803e3a7658, ffff88803e3a77d0)
[ 1356.655268][ T6244] 
[ 1356.655273][ T6244] The buggy address belongs to the physical page:
[ 1356.655290][ T6244] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3e3a6
[ 1356.655308][ T6244] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1356.655323][ T6244] memcg:ffff88803b8f2c01
[ 1356.655332][ T6244] flags: 0x80000000000040(head|node=0|zone=1)
[ 1356.655347][ T6244] page_type: f5(slab)
[ 1356.655363][ T6244] raw: 0080000000000040 ffff88801b2a43c0 dead000000000100 dead000000000122
[ 1356.655379][ T6244] raw: 0000000000000000 0000000800120012 00000000f5000000 ffff88803b8f2c01
[ 1356.655391][ T6244] head: 0080000000000040 ffff88801b2a43c0 dead000000000100 dead000000000122
[ 1356.655400][ T6244] head: 0000000000000000 0000000800120012 00000000f5000000 ffff88803b8f2c01
[ 1356.655408][ T6244] head: 0080000000000001 ffffea0000f8e981 00000000ffffffff 00000000ffffffff
[ 1356.655415][ T6244] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 1356.655421][ T6244] page dumped because: kasan: bad access detected
[ 1356.655431][ T6244] page_owner tracks the page as allocated
[ 1356.655436][ T6244] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5462, tgid 5462 (dhcpcd), ts 48991785634, free_ts 0
[ 1356.655466][ T6244]  post_alloc_hook+0x231/0x280
[ 1356.655488][ T6244]  get_page_from_freelist+0x28bb/0x2950
[ 1356.655505][ T6244]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1356.655519][ T6244]  allocate_slab+0x77/0x660
[ 1356.655536][ T6244]  refill_objects+0x334/0x3c0
[ 1356.655550][ T6244]  __pcs_replace_empty_main+0x35c/0x710
[ 1356.655568][ T6244]  kmem_cache_alloc_lru_noprof+0x433/0x680
[ 1356.655589][ T6244]  __d_alloc+0x37/0x6f0
[ 1356.655606][ T6244]  d_alloc_parallel+0xe6/0x1610
[ 1356.655627][ T6244]  __lookup_slow+0x152/0x440
[ 1356.655645][ T6244]  lookup_slow+0x53/0x70
[ 1356.655661][ T6244]  path_lookupat+0x3f5/0x8c0
[ 1356.655678][ T6244]  filename_lookup+0x256/0x5d0
[ 1356.655693][ T6244]  do_readlinkat+0xe3/0x510
[ 1356.655710][ T6244]  __x64_sys_readlink+0x7f/0x90
[ 1356.655727][ T6244]  do_syscall_64+0x14d/0xf80
[ 1356.655743][ T6244] page_owner free stack trace missing
[ 1356.655749][ T6244] 
[ 1356.655753][ T6244] Memory state around the buggy address:
[ 1356.655763][ T6244]  ffff88803e3a7600: fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb
[ 1356.655775][ T6244]  ffff88803e3a7680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1356.655786][ T6244] >ffff88803e3a7700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1356.655796][ T6244]                                   ^
[ 1356.655804][ T6244]  ffff88803e3a7780: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc
[ 1356.655815][ T6244]  ffff88803e3a7800: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1356.655823][ T6244] ==================================================================
[ 1356.655846][ T6244] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1356.655860][ T6244] CPU: 0 UID: 0 PID: 6244 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1356.655883][ T6244] Tainted: [L]=SOFTLOCKUP
[ 1356.655889][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1356.655899][ T6244] Call Trace:
[ 1356.655905][ T6244]  <TASK>
[ 1356.655913][ T6244]  vpanic+0x56c/0xa60
[ 1356.655938][ T6244]  ? __pfx_vpanic+0x10/0x10
[ 1356.655964][ T6244]  panic+0xc5/0xd0
[ 1356.655986][ T6244]  ? __pfx_panic+0x10/0x10
[ 1356.656019][ T6244]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1356.656037][ T6244]  ? rcu_is_watching+0x15/0xb0
[ 1356.656057][ T6244]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1356.656074][ T6244]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1356.656092][ T6244]  check_panic_on_warn+0x89/0xb0
[ 1356.656111][ T6244]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1356.656129][ T6244]  end_report+0x73/0x180
[ 1356.656145][ T6244]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1356.656162][ T6244]  kasan_report+0x128/0x150
[ 1356.656179][ T6244]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 1356.656201][ T6244]  __kasan_check_byte+0x2a/0x40
[ 1356.656217][ T6244]  lock_acquire+0x79/0x2e0
[ 1356.656233][ T6244]  ? rcu_is_watching+0x15/0xb0
[ 1356.656251][ T6244]  _raw_spin_lock_irqsave+0x40/0x60
[ 1356.656269][ T6244]  ? rt_mutex_slowunlock+0xbf/0x8b0
[ 1356.656291][ T6244]  rt_mutex_slowunlock+0xbf/0x8b0
[ 1356.656317][ T6244]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1356.656342][ T6244]  ? __rcu_read_unlock+0x83/0xe0
[ 1356.656363][ T6244]  ? rt_spin_unlock+0x160/0x200
[ 1356.656377][ T6244]  shrink_dentry_list+0x2e3/0x5e0
[ 1356.656392][ T6244]  shrink_dcache_tree+0xcf/0x310
[ 1356.656405][ T6244]  ? __pfx_select_collect+0x10/0x10
[ 1356.656420][ T6244]  ? __pfx_shrink_dcache_tree+0x10/0x10
[ 1356.656445][ T6244]  ? rt_spin_unlock+0x160/0x200
[ 1356.656468][ T6244]  d_invalidate+0xde/0x210
[ 1356.656490][ T6244]  ? __pfx_d_invalidate+0x10/0x10
[ 1356.656513][ T6244]  ? rt_spin_unlock+0x160/0x200
[ 1356.656534][ T6244]  proc_invalidate_siblings_dcache+0x3d3/0x6c0
[ 1356.656547][ T6244]  ? proc_invalidate_siblings_dcache+0x2b/0x6c0
[ 1356.656560][ T6244]  release_task+0x1207/0x16f0
[ 1356.656572][ T6244]  ? wait_consider_task+0x1966/0x2e30
[ 1356.656590][ T6244]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1356.656613][ T6244]  ? __pfx_release_task+0x10/0x10
[ 1356.656632][ T6244]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1356.656659][ T6244]  ? rt_spin_unlock+0x160/0x200
[ 1356.656682][ T6244]  wait_consider_task+0x1966/0x2e30
[ 1356.656703][ T6244]  ? __do_wait+0x155/0x740
[ 1356.656713][ T6244]  ? __pfx_wait_consider_task+0x10/0x10
[ 1356.656724][ T6244]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1356.656741][ T6244]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1356.656764][ T6244]  __do_wait+0x155/0x740
[ 1356.656782][ T6244]  ? rt_spin_unlock+0x160/0x200
[ 1356.656806][ T6244]  do_wait+0x1e7/0x540
[ 1356.656824][ T6244]  ? do_wait+0x17d/0x540
[ 1356.656844][ T6244]  kernel_wait4+0x232/0x2b0
[ 1356.656862][ T6244]  ? count_memcg_event_mm+0x21/0x260
[ 1356.656876][ T6244]  ? __pfx_kernel_wait4+0x10/0x10
[ 1356.656887][ T6244]  ? __pfx_child_wait_callback+0x10/0x10
[ 1356.656899][ T6244]  ? handle_mm_fault+0xe7/0x13c0
[ 1356.656918][ T6244]  __x64_sys_wait4+0x166/0x240
[ 1356.656939][ T6244]  ? __pfx___x64_sys_wait4+0x10/0x10
[ 1356.656965][ T6244]  ? do_user_addr_fault+0xc6f/0x1340
[ 1356.657000][ T6244]  do_syscall_64+0x14d/0xf80
[ 1356.657019][ T6244]  ? trace_irq_disable+0x3b/0x150
[ 1356.657034][ T6244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.657044][ T6244]  ? clear_bhb_loop+0x40/0x90
[ 1356.657064][ T6244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.657081][ T6244] RIP: 0033:0x7f152ac7d04e
[ 1356.657096][ T6244] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1356.657112][ T6244] RSP: 002b:00007ffc4e0fd918 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[ 1356.657131][ T6244] RAX: ffffffffffffffda RBX: 0000555594896500 RCX: 00007f152ac7d04e
[ 1356.657144][ T6244] RDX: 0000000040000001 RSI: 00007ffc4e0fd9bc RDI: ffffffffffffffff
[ 1356.657157][ T6244] RBP: 00007ffc4e0fd9bc R08: 0000000000000000 R09: 0000000000000000
[ 1356.657169][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 1356.657181][ T6244] R13: 00000000000927c0 R14: 000000000014b42b R15: 00007ffc4e0fda10
[ 1356.657202][ T6244]  </TASK>
[ 1356.657544][ T6244] Kernel Offset: disabled