last executing test programs:

8m36.978150353s ago: executing program 3 (id=793):
r0 = fsopen(&(0x7f0000000040)='pstore\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

8m36.852519042s ago: executing program 3 (id=795):
readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/144, 0x90)

8m36.668038891s ago: executing program 3 (id=798):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000700)={0x28, r1, 0x1, 0x70ad26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x20000080)

8m36.502492614s ago: executing program 3 (id=803):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
shmget$private(0x0, 0x4000, 0x78000400, &(0x7f0000ffb000/0x4000)=nil)
truncate(0x0, 0x400000000000001)

8m36.324124227s ago: executing program 3 (id=808):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}], 0x1, 0x404c851)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="cce63b152f4f235135cd164df5cbec6929499dd14d101c2ebfea774d7fc9c6352470a4041e7eefa0af59e82c6cc79a432584707b31324753e034b9e62156ef937610325daa0c7a215ed52b9418c16d0ffd7be7f9e66e8b069e1c06085244d4444b42b6371837677a7caca2aeba263a67f228fb9be53428b7de8d165754f5fd2a4192a22ffd351f3336edbe0cf7dc299385e9593d5c7f0714378cf083f72e26a5bd1e8a8d08ee0bec243ceacf2582908a00cac0d83ce3062b1e0752126a1bd945ce2680f3c9519795d9876988f2a32943d1ab821b69b1cbcb2b9e0edb3a3368abaefd34103585f5a2ea10867a73354246e2d44a1c358c73b260d1f57f0cd5e4b0cc2e3de70e388c201cd23d0a59e44d031604895b81d25c9ca35c2837e83a0d89e7d8735029566a933ad82c49993843767ec4856d48c12df87ba099c9b7e77b211a277a8e8d3def4fe7e2b1c6e5fa7bdde283881faedbca089d0156cbcc70cd365547d1a917d73c145b6f3ab45ab5ed187a15b6b86e8d6d1f4a637f2aea028d46e4148e4c70803b367c0435fb5f3d450e3eb93e1c752ab28ce7baa89d309341ed1e3767b9bc082cbc8a024d16e5538a3612432a9864198d7a20e45c67460b3ea869cf667fc48614925104ce05bcc5260cd3e2fdb8ee9bbeb69db6aedb22b31cfb808e7147af7ac7e4c41918645ac9e0d3e9aa6ecdd957bef547e8d4fc1329e9494308b2739cf4d7926bfce3474de8795844a2d61ad43af119c0ae2b7e0dfd0077720f364cdd46d21722e87fecb5c2c0e0d93325d7d3e8f7dc8373ac493fd5119f3d0760951b0b2fa4ac7fa2e8f56af2cb20fc7cbe57c7166ca4c15aeae7ec8348c41d98b76fd12cffd5b34f4b97b9daf780f3191eba3306fcfed2bcba7e21ea12881f1ad4365d2e1c783290ecf18545b2ca5490bf7eb7d41c6b35ea56524fd1bb1e7116e828ef4b1062124ec15e9ea23f6905314d27480fcbd9900aa05aba98d679c97a43d0cb940927c292178e817330d0656b4cb4ed3df31f685b23fab9ef679f7512fbed0dcef4a35cc3a6b84c46a2e5dacccdc7b78ffe71b49c1093816f9df2743777bbe443e33132b7f97ea4b4ea1404e1ef56a220f699be0e4e63272e477ec4969f6c6cd0cba029361d223640d123f42b9ffda812feb630c3b91f1d6e6fdd0e435a5cc88ae2ed0aed207e811bf374872496218ebe8f76a1feafbdda1bbefa5ee48bf6e4e7323ee2cbb4ce35ef994c4e781a89cb6ed05cfeeb3885a443c1d0f344427524c640d42b1b56f2c19869d60d8c63956456aabd12fc47d46ca660d945e31dfd6e07bbfe1cfbd051ce2db33ea691c5c4f3f8e912b8de1b312bd5f7873aaf4924645c6a3b1445655548d212ec3081e8d13eebdf6da7ed7c191bc758455fb1dbccef24baf75564bb603fc72e21dd9187259f9ab6ae4cf9f439f93a65da4c9389d6f3731901beca82631eb781e01c0d9c91495f63c78e99fe05bc4c1eb97a84a5756b3572fa68c3cb148933012a7c7c853b2a226d814f0559d13f32c060943cda1ac58cd617cf951e83fff0581a4cdc1db11bbdd2cac106004968cb5ffc26fac08af9212a8c59e94c9736325f61d179b9c5e8fea7e06a61d8b1cfad62a9839a56615be390b9dceaa0fa46841df5f5cb172a6c014ab380745a2b0461d57137a2a86ec508022960faf2b2c638c75c56043be513daab7d5907e3bcd416f1d0d75e0096f1f3ce9c620375d40b2355eaa059697c2a615b3cf8cec387405a5a320605b846ff5b6311fd93df025ece92add51e3092a10b8ff0e1abb60b32fae6a037c6ba7771b0fdc8fd0d5792db39a36b0b99bbd1e5bf4caa0c5e253cfbf4314b5b60dd682653862659a5277f79ed1d8324c63893b35e55da568bbe8404f1d2763c776a930a1fc6c945f5bda517e1179a2c610392a9c4fe8bb3df289ff29de2cc52c49701f4feef0481bb84a5fd52df64dd165163aaefbae89ba84d73c57eb123f771e52596b49ed11687830ff1a1d056d42298fe73599ac07c950abe68b6622c394f27e0b54eee55a1a0f3dc47f8d55d95cdc4372d547ea3280fb7cccd85332541e1fb20cc45198e480ed518ac6e634049f2e7cb05c150cc889a891a18cdf3492fe2ce8d436b3586584ec0851faa3168be699b1c9caa18760e45674ca8bea7d891f31b9e995c0aacecb2fd8439e5398d31fc8aae6f5ac2b5a6183f8368d3c0de1a55be202e4ffa60ef71b46e0e0ee061cc43311c5305c02d14d6be4347d2327c35ff9328b76d55aa3f11ecfd4c3213b008c49d0a2dc0ce12c2392eb6df7cbc632db538f706c3c5bc5635434657747dffd9ee56e16058c67e9e80c141f11b0b5ae8838cbc981ce923ac66bcd6a6c7a92d9f7cad10480336edd67058c241b2016592af3c5e8b4a7069559b190aafc0d0af085601439e8819b05ba2ea5ba8a7f4fc585657bd5857e1d88d74a7eeff2ce6049efaa7e41e742583ef20c0a5c60e18e6da9f5342ae957a2cb62994cf9f35c3e914460d3b8e8e1fb6fbb37ac5e6f51b680a67d760259ed3797001f72e85701bfedcccd82e7945da63b3cf6ed19b2bb611eb31937ca13df724b81cec4ba6bdbe603783d1e9818a8cf22fb2f9f4c96940e667848a3177b617bec1f3d81d11da80079b65923434475e3756f51d1ef833d24a77c33b0eba2a89cb2019cc0af083e7c8fde8871db6536dd11b7c713f3a88c0d85fb7567d34e77e1f23c5ff3b2e0f9f302021163f1aeef73faf6bebc0c8783ee5a50a0fb72f0ecc7be3931570a4584c2ec79642e62289d524497e3a0ca7928d2273a057f6428d8c9b6ce047e8ad880bd212a9b902ac13407c80dae76d6db04fde7584203d98bd453c0b722fb2469665ed09739dc79c4856f7c2c1e7fd860161fc393b26c38a7de3c056ef8fc1bdbb53b136cf9e04b5a342fb8828cec4b3b8955cdfd8eda47492d4227289e81a40ff6bff03d3fc983df2097fbe413605189a06ed4305101555b611e541f037189ffad1ff5002a126db8f2d2504294081dbb9b211fbb6042c913ff34ae9537a560432c104470271aa687de030e3609c34ddb061011dbc08b66db1b45c43cfea804d1bea8c1c91d3a982f51593f5e209470d618cd430b44acead709936519b6937f3db2946a942153d78fe218eb4114af5ed60bc79e4ff8d48a9e8462b598cc4918124926711ca81b84e080b2a1b2d213904b9e2f3559f66521f9636ede23db18e3416ddef5a22956840ceab1bac6435716448fcf89d45d129120cb2ac92dbcb97be56b169523a7fc44ba32d3f62414b3868b1b8ab078d8cf65c967bcf702f16cdf099bd345787bc0b189a15c343322eae2958e6469f5715ab2eb81ec0a85311d53adb831a3350419ea4746c0d98bbb51d0eba63db662762c6c4af089d26fb57c5f1f7b78fded3e57d726ba3a61a57241681ba43ac35da7e13e860a1984cd0ab43f29b119885eea68941faa4e30f3cc4b3e98e015111a6c24a609ab4d686ceff1b218d68273ac3e87f150ca7ef2c6fba616bc626a009e551cf6801c942a8801c3a78d428ba626c1d449c17b962a7cbccff1a41fdf21e6847b6a0cd272ff01b685048a3ea03156bdf804016d6e558cdfd790772fc82f96adac5770d4a8eafc2d4d9cab076c38edf2cf4b3e830fb2acde872294b79250aaa30c152d83e991faa29f9c07483cb54c08f39099c12fca9579d847e3f7733b978c454c85ed6213673e475458e45f0b93d1eb1f484b0e181905097d79cd8bc565a14cb1c8835c3fc287d72d9616b99aa042c186a06aa91c5f4c00a7d86549767cb785a0f468d153003726516ecba477f3173bb05f2df60da83d5c4ddf889549e9504fb4052dfe5d3465563aeba8e5253b3cc9eda8dc0b8ffc74fdbd4d49e64de3eef79be08569042a7c5bf942cca6da27b90ba4c4832ada245b4f9ebdad645776b238af65073fd31924c1a1a04cd1a83f212caabb5601d11fa6375b1d4781ab75f398cf1d94d2881c105f15530b9a5c50fa852c3999cfea0f9b7c13a862a5bc21c28d6dcf9148a88ef5e6997bbb28aef8b637fc95e0359c741e32db2a267d96aba13aed03f89f5395ae5d19a5c2fd2564ee10523737a83856be448bd4186e2368b6631bea63142bc4d270fee89062bf7d61e5f6e49c798054760e624910c732737fb89aee6d51ac1dcc2b0a43bbbac1e23d691f42509d1475fb29cbdfd32599e95dda27424b288b3ec59109f6113bca5df34a870ad5f78a18864641e1196f47ab679914de32be7b4568c40d28c637c37c4bc61e561af71e867bd477ad8d8ff48208e781aeee17f7e4e89a795fc725b341df564859a33823af64535a81c56dfc0463d7264608be7eb101584031afcb2dd9fde4e9898c979973c2370b87cd0c28b16de10548ddc457fbc34309663418dc7df60c4ed965bbc5655ee79aa95aed1f33742034cf18df47530912cd19da57d44493b54c5a625e2c237d4ec4496df293d301359126d0129465a45aef9340515c2627f1919efa25c0fa5bf515a67ae10d527977138ade3e7422e41215aa75d6133b7710426c1e27f725e6040f01c6e7524e3789fefcb4640442cd4f72a03edec97bd47d12624053419048431ac781e6a17b9ab5030a5705ca11efb3dc58aaa41f9a6cfe397f774f0dc74610ac72624ca48af1ecba87376df745bccd434351f5831bcdc946bfa4ebb025412679f1e5011f1391935b6648007c98f5af3f0366eaa928de4180024188bae3aecea59a27edaf0cd199c57ef290c205dfbb89c82e9733d1bd12b59863a7f8a34b51f0a6da8b8f8ea6a571460938d4ea26f097e78af31c40501eeb8ad0f9feed8a6430149b85cdd7ed62c2e12cfa6a3c7292a1dfd3ca438e583d7f3af6ca123fe1c80352490c831ea385b132d792b4b6e0e570d0df29d9b39a761cf3b07ab29255cf4c3c281c71c47654144b0b61cda5830fa9d1feec4c305e89b12694fccab28759239b1e52377fdee05785867c281411372bab2a315403519199af83e75a402051fcfd2fdd179f4307ec96d1236cd9e24054582d242ed1e4113f1b244be3e26f78ad1668fbeee0e5e51b81d8302a85c64b2c8b3dbf6f126e289e216dd22902df37905872be8610c1e31fb2b0bcce23b7bbe76bc1eb69fac2ffffe06601273dda4769075823293cc94eb1a3a06b8cd13db4b1c7dc9ddd6ed4eeff148e3cd8494d81826d4586f780177664e4495fbb0045da95dfdfb96fcbbcd6ec5f78b66e2c738e1a6edc0c7bb17f5d764cff4eb5d572fb2e376b258a891ae25f16ee9d0803ae7b9ecbbdfe6d5de3cf4535d2f7cdbbb522d91693fc511589b2be769927954ae4574917c492bf4d75ffb0914939526f1d76fc73fc6a785f71707f41bb4766741926eda68c2783dd8a651c67edf80a4e5235fc72c343189eaf9563faced85942ddf1521b3f8f72565bd30de38f289ea131e228dbe53267b35e08575bd529c062c8d102ae61ef2af9c76132f53727e418c6bb903b0c8258f30f0b629701ce741434542e59a866766bd78d77274e6d56d40b2d8abb0cdb4ee7060ffe569f6080ddf7a7b696d8fba17ef2305547250ad5cde88c94f957febfd5c1a788b67d044369ceeb64bdcd8ec631658245eee03acc3de7fd4649060fde28c424f5e9f4f7f2013773a208c2faa4212e8c38685fc3773f04466329beca3ebd6ccf4a162fc1e5481fe537649c61c44e784c93db71036417dd96271cd21811178af52aa76b5b69342710c935707f792be532a346e47ffe576999f7ccd065eb1e439768cce2908a600d9e62148f4", 0x1000}], 0x1}}], 0x1, 0x4004004)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40)

8m35.628409882s ago: executing program 3 (id=823):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8)
bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffff1, @empty, 0x2}, 0x1c)

8m35.300919405s ago: executing program 32 (id=823):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8)
bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffff1, @empty, 0x2}, 0x1c)

7m31.299466392s ago: executing program 4 (id=1383):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDDELIO(r2, 0x4b34, 0x3bf)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400df0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074000000001040006"], 0x98}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001130500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fc00000000000000000000000000000108000740000000002c00068014000500fe80000000000000000000000000003114000400"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x4)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xfff, @any, 0x7}, 0xe)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, 0x0, 0x40080c0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00000425bd7000fcdbdf250700", @ANYRES32=r6, @ANYBLOB="040004000000080004000400000014000300de00000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x8, @any, 0xfdff}, 0xe)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x40)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

7m30.820425261s ago: executing program 4 (id=1384):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0)
mprotect(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x1)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1})

7m30.772028815s ago: executing program 4 (id=1385):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r0, 0xa0044d07, &(0x7f0000000040)) (fail_nth: 3)

7m30.076006773s ago: executing program 4 (id=1387):
socket(0x14, 0x80805, 0x400)
r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x200, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0xe, 0x3, {0x2, @pix_mp={0x6e, 0xffffffff, 0x4f565559, 0x7, 0x2, [{0x6, 0x4}, {0x9, 0x8}, {0x5, 0xd00}, {0xffff8001, 0xd460}, {0x1, 0x401}, {0x4}, {0x0, 0x5690c427}, {0x0, 0x4}], 0x8, 0x6, 0x0, 0x3, 0x1}}, 0x800})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x48f}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x802}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0xe, 0xfa, &(0x7f00000005c0)=""/250, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

7m30.052908635s ago: executing program 4 (id=1388):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xd8}}, 0x80)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc)

7m30.003393861s ago: executing program 4 (id=1389):
syz_emit_ethernet(0x27, &(0x7f00000000c0)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0xa, 0x19, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}, "cc"}}}}, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0xf, 0x2)
write$binfmt_script(r2, &(0x7f0000001800)={'#! ', './file0', [{0x20, 'm\xf6\\O\xfb\x05\xe3>#Y@x\xb4f\xfeD<\x97!\xddd\x10\x03\xd0Mt\v\xca\x9f\x9d\x0eJ\x00_\xd0\xef'}, {}, {0x20, 'cgr/up\xe7i\r\xb1t\x00'}, {0x20, '/!'}, {0x20, '*@\xb1'}, {0x20, 'syz2 '}, {0x20, 'cgroup.stat\x00'}, {}], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd55d363d326932a5f3d7222391730900000000000000c99c85359d2227cd7d204190a2fb32ae3e7e4f3d839bd6a4e6f411c6ef855e6c53241f34f14773c4c19ab0fad88abad96a214f2ed56b6bb53eb28029fb01bd"}, 0xd2)
write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}})
getsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0xcad5, 0x1, 0x1, 0x0, 0x8})
syz_emit_ethernet(0x27, &(0x7f00000000c0)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0xa, 0x19, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}, "cc"}}}}, 0x0) (async)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) (async)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0xf, 0x2) (async)
write$binfmt_script(r2, &(0x7f0000001800)={'#! ', './file0', [{0x20, 'm\xf6\\O\xfb\x05\xe3>#Y@x\xb4f\xfeD<\x97!\xddd\x10\x03\xd0Mt\v\xca\x9f\x9d\x0eJ\x00_\xd0\xef'}, {}, {0x20, 'cgr/up\xe7i\r\xb1t\x00'}, {0x20, '/!'}, {0x20, '*@\xb1'}, {0x20, 'syz2 '}, {0x20, 'cgroup.stat\x00'}, {}], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd55d363d326932a5f3d7222391730900000000000000c99c85359d2227cd7d204190a2fb32ae3e7e4f3d839bd6a4e6f411c6ef855e6c53241f34f14773c4c19ab0fad88abad96a214f2ed56b6bb53eb28029fb01bd"}, 0xd2) (async)
write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf0e3a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f92b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b17941c4c4fbfac18c8b74e5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c73405baf9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746063d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7b0e000f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c5169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f59d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d00bf58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a60000564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9de9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2c77c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f0000000000000006b050e9319fe88033f830a8490917a9c0572ebbc549000000000000000015a34abef947b5b9a950e780662de18873e55899c92db3ad00437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb00800000000000000ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c040000002b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400", 0x1000}}, 0x1006) (async)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) (async)
getsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0xcad5, 0x1, 0x1, 0x0, 0x8}) (async)

7m14.894362773s ago: executing program 33 (id=1389):
syz_emit_ethernet(0x27, &(0x7f00000000c0)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0xa, 0x19, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}, "cc"}}}}, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0xf, 0x2)
write$binfmt_script(r2, &(0x7f0000001800)={'#! ', './file0', [{0x20, 'm\xf6\\O\xfb\x05\xe3>#Y@x\xb4f\xfeD<\x97!\xddd\x10\x03\xd0Mt\v\xca\x9f\x9d\x0eJ\x00_\xd0\xef'}, {}, {0x20, 'cgr/up\xe7i\r\xb1t\x00'}, {0x20, '/!'}, {0x20, '*@\xb1'}, {0x20, 'syz2 '}, {0x20, 'cgroup.stat\x00'}, {}], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd55d363d326932a5f3d7222391730900000000000000c99c85359d2227cd7d204190a2fb32ae3e7e4f3d839bd6a4e6f411c6ef855e6c53241f34f14773c4c19ab0fad88abad96a214f2ed56b6bb53eb28029fb01bd"}, 0xd2)
write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf0e3a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f92b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b17941c4c4fbfac18c8b74e5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c73405baf9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746063d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7b0e000f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c5169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f59d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d00bf58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a60000564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9de9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2c77c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f0000000000000006b050e9319fe88033f830a8490917a9c0572ebbc549000000000000000015a34abef947b5b9a950e780662de18873e55899c92db3ad00437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb00800000000000000ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c040000002b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}})
getsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0xcad5, 0x1, 0x1, 0x0, 0x8})
syz_emit_ethernet(0x27, &(0x7f00000000c0)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0xa, 0x19, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0x2}]}}, "cc"}}}}, 0x0) (async)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) (async)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0xf, 0x2) (async)
write$binfmt_script(r2, &(0x7f0000001800)={'#! ', './file0', [{0x20, 'm\xf6\\O\xfb\x05\xe3>#Y@x\xb4f\xfeD<\x97!\xddd\x10\x03\xd0Mt\v\xca\x9f\x9d\x0eJ\x00_\xd0\xef'}, {}, {0x20, 'cgr/up\xe7i\r\xb1t\x00'}, {0x20, '/!'}, {0x20, '*@\xb1'}, {0x20, 'syz2 '}, {0x20, 'cgroup.stat\x00'}, {}], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd55d363d326932a5f3d7222391730900000000000000c99c85359d2227cd7d204190a2fb32ae3e7e4f3d839bd6a4e6f411c6ef855e6c53241f34f14773c4c19ab0fad88abad96a214f2ed56b6bb53eb28029fb01bd"}, 0xd2) (async)
write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) (async)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) (async)
getsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0xcad5, 0x1, 0x1, 0x0, 0x8}) (async)

6m41.200066813s ago: executing program 6 (id=1460):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x20050800)
r3 = memfd_create(&(0x7f0000000080)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)m\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1a3(\xd3\x14\xdb\xc7Sg\xccU\x83xi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0\x04\x00\x00\x00c\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3\x97\x15\x8d\xe9\xd0\f\x1c\nu0U\xc6\x95\xef\xdd\xa1\x8d\x00r\xf2\x06\xb16\x1e|\xd0\x85\x05\xed\xf3n\x0f\x8f\x11P\xf4\xcfX\x90\xeds\xf6GBtzr1\xf8\b\xc0@\x1a\xb4[t\xa6\x9c\x1f\xe593\xb8\x0e\xd8\xdex\xd0J\xc4}\x13\x14\xa0\xc2]\x1b\xb3\b\x1b}\x15\x8b^\xe3\xec\xb0\xbf\x1a\x83\x86C\x8dB\xac\\\x7f\xe7\xf4A%\xda\x04\xb7l\xb9&\xe1\x89\xa72*\xce\x91\\\x81LUv\xcb\xc9\x90\xb0nu\xa3*\x15BV\xf0\xdb\xf4\x15\x10', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080))
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@hyper, 0xffffffff}, @host, 0x0, 0x7, 0x1, 0x4, 0x0, 0x9})
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vivid(&(0x7f0000000100), 0x2, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0)
close(0x4)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000180)=0x3)

6m26.074931536s ago: executing program 34 (id=1460):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x20050800)
r3 = memfd_create(&(0x7f0000000080)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)m\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1a3(\xd3\x14\xdb\xc7Sg\xccU\x83xi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0\x04\x00\x00\x00c\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3\x97\x15\x8d\xe9\xd0\f\x1c\nu0U\xc6\x95\xef\xdd\xa1\x8d\x00r\xf2\x06\xb16\x1e|\xd0\x85\x05\xed\xf3n\x0f\x8f\x11P\xf4\xcfX\x90\xeds\xf6GBtzr1\xf8\b\xc0@\x1a\xb4[t\xa6\x9c\x1f\xe593\xb8\x0e\xd8\xdex\xd0J\xc4}\x13\x14\xa0\xc2]\x1b\xb3\b\x1b}\x15\x8b^\xe3\xec\xb0\xbf\x1a\x83\x86C\x8dB\xac\\\x7f\xe7\xf4A%\xda\x04\xb7l\xb9&\xe1\x89\xa72*\xce\x91\\\x81LUv\xcb\xc9\x90\xb0nu\xa3*\x15BV\xf0\xdb\xf4\x15\x10', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080))
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@hyper, 0xffffffff}, @host, 0x0, 0x7, 0x1, 0x4, 0x0, 0x9})
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vivid(&(0x7f0000000100), 0x2, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0)
close(0x4)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000180)=0x3)

2m46.015299433s ago: executing program 0 (id=3430):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
getpriority(0x2, 0xffffffffffffffff)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x2, 0x5001)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_ts_info={0x4a}})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)='\\\\\xe9\x83\a\x00<\f\x91\b\xab\xe6\xfc\xf8~\x1d/\xd0\x12\xf5\xb1\a\xd4$\xae$\x91>6n @\xf4\xaa\xb1d\xe3\xd0\xb2e\x86KB\x1c\x8dCJd\x8bM\xbar<\xd6@\xdb\xd7\x01yd\xc5\x00G\x81<\xb8\xa5\xb3?\xb3>B\xc5\x13@\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\f\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xeaQ\x17\n\f\xcd\xd5\x00\x00\x00\x00\x00\x00\x00j\xa4v\xefw\x96\\\\//\xcd4g+\xbd\xd1\xe0R{\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8cW\xee\xaer\xcb\xda\xfa\xaby\x80#', 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000003c0)=0x4)

2m45.425871054s ago: executing program 0 (id=3432):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0x6, 0x5, 0x8}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]})
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
r5 = userfaultfd(0x801)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4)
ioctl$SIOCAX25OPTRT(r7, 0x89e7, &(0x7f0000000080)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x44})

2m45.011095708s ago: executing program 0 (id=3435):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x18, r4, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0xc0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x62, 0xf, [@peer_mgmt={0x75, 0x8, {0x0, 0x40, @val=0x4, @val=0x1, @void}}, @fast_bss_trans={0x37, 0x52, {0xc0, 0x0, "d7b0f40d7f1b3b7bbffabb7eaac5b93a", "82a39ea0cb3668e3f68e5cf5f69bd762d881c8fbfe340581d796699693623e7d", "49ed31689ec88c41dbf176afd2eafb51273b68f31e64392afdf9a44af809d475"}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xc0}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', <r5=>0x0, 0x20, 0x1, 0xd, 0x8001, {{0xd, 0x4, 0x3, 0x1c, 0x34, 0x67, 0x0, 0x6, 0x2f, 0x0, @multicast2, @private=0xa010102, {[@ssrr={0x89, 0xb, 0x1c, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0xc6, 0x3, 0x7, [{@multicast1, 0x4}]}, @timestamp={0x44, 0x8, 0x6, 0x0, 0x1, [0x9]}]}}}}})
pipe2(&(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
tee(r6, r7, 0xfffffffffffffc01, 0x0)
tee(r6, r7, 0x60000000000, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8000, 0x6e04b25a, 0x2, 0x20, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0xe}, 0x50)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00')
recvmsg$can_bcm(r9, 0x0, 0x0)
r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x540c2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x15, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x86}, @exit, @map_idx_val={0x18, 0xb644bc6850ae2c14, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x83}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x14, 0x0, 0x0, 0x41000, 0x2, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x5, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r8, r9, r10]}, 0x94)

2m44.696699219s ago: executing program 0 (id=3442):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
getpriority(0x2, 0xffffffffffffffff)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x2, 0x5001)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_ts_info={0x4a}})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)='\\\\\xe9\x83\a\x00<\f\x91\b\xab\xe6\xfc\xf8~\x1d/\xd0\x12\xf5\xb1\a\xd4$\xae$\x91>6n @\xf4\xaa\xb1d\xe3\xd0\xb2e\x86KB\x1c\x8dCJd\x8bM\xbar<\xd6@\xdb\xd7\x01yd\xc5\x00G\x81<\xb8\xa5\xb3?\xb3>B\xc5\x13@\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\f\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xeaQ\x17\n\f\xcd\xd5\x00\x00\x00\x00\x00\x00\x00j\xa4v\xefw\x96\\\\//\xcd4g+\xbd\xd1\xe0R{\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8cW\xee\xaer\xcb\xda\xfa\xaby\x80#', 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000003c0)=0x4)

2m44.109324949s ago: executing program 0 (id=3445):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0)
r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10)
accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r3, 0x0, 0xee01)
io_uring_setup(0xf53, &(0x7f0000000300)={0x0, 0x28b, 0x1012, 0x0, 0x2ae, 0x0, r3})
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000180), 0x4)

2m43.24397516s ago: executing program 0 (id=3451):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x200, 0x210803)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0x9, 0x1, '\x00', 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe7, 0x402, 0xfffffffe, 0x0, [{0x2, 0x4, 0x83, '\x00', 0x4}, {0x8, 0xc, 0x8, '\x00', 0xf}, {0xfb, 0xff, 0x3, '\x00', 0x69}, {0x0, 0xfa, 0x0, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0x5, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0xff}, {0x7c, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x6}, {0xd7, 0xd, 0x0, '\x00', 0x6}, {0x20, 0x28, 0x8, '\x00', 0xdc}, {0xfc, 0x58, 0x2, '\x00', 0xff}, {0xfe, 0x1, 0x8}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xe, 0xea, 0x8, '\x00', 0x3}, {0x39, 0x42, 0x3, '\x00', 0xe}, {0xb, 0x6, 0xc0, '\x00', 0x9}, {0x31, 0xc, 0x5, '\x00', 0x4}, {0x9, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x4d, 0xc, 0x5, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x8f, 0x7e, '\x00', 0x5}, {0x7, 0x6, 0x1, '\x00', 0x9}]}})

2m43.068910117s ago: executing program 35 (id=3451):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x200, 0x210803)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0x9, 0x1, '\x00', 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe7, 0x402, 0xfffffffe, 0x0, [{0x2, 0x4, 0x83, '\x00', 0x4}, {0x8, 0xc, 0x8, '\x00', 0xf}, {0xfb, 0xff, 0x3, '\x00', 0x69}, {0x0, 0xfa, 0x0, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0x5, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0xff}, {0x7c, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x6}, {0xd7, 0xd, 0x0, '\x00', 0x6}, {0x20, 0x28, 0x8, '\x00', 0xdc}, {0xfc, 0x58, 0x2, '\x00', 0xff}, {0xfe, 0x1, 0x8}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xe, 0xea, 0x8, '\x00', 0x3}, {0x39, 0x42, 0x3, '\x00', 0xe}, {0xb, 0x6, 0xc0, '\x00', 0x9}, {0x31, 0xc, 0x5, '\x00', 0x4}, {0x9, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x4d, 0xc, 0x5, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x8f, 0x7e, '\x00', 0x5}, {0x7, 0x6, 0x1, '\x00', 0x9}]}})

1m14.112012921s ago: executing program 1 (id=3820):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}], 0x1}], 0x1, 0x40800)
setuid(0xee01)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$media(0x0, 0x1d51, 0x0)
kcmp(r1, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m13.372627068s ago: executing program 1 (id=3827):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffff9, 0x0, &(0x7f0000006680))
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1200000, 0x10}, &(0x7f0000000140)=0xc)

1m13.031229764s ago: executing program 1 (id=3830):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, 0x84)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x2]}, 0x8, 0x800)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x12)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xfff9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054)
bind$nfc_llcp(r1, &(0x7f0000000200)={0x27, r7, 0x0, 0x7, 0xfc, 0x53, "dbc67f4a127b06db71ca03fde81d71b5889232c5fe56b96047bafb002add5021602571fd55ffbe42cda404c396f10a8c671d64d6e43e6e9761ec8f58c6f9bd", 0x3d}, 0x60)
io_setup(0x1, &(0x7f0000000b80)=<r8=>0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0)
r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r11, 0x50009405, &(0x7f00000000c0))
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r10, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
signalfd4(r1, &(0x7f0000000000), 0x8, 0x800)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00db3c", @ANYRES16=r12, @ANYBLOB="01002ebd7000001000001400000018000180140002006e657464657673696d3000000000000005001800010000000500190001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20005880)

1m11.783961539s ago: executing program 1 (id=3835):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2e, 0x10, 0x1}}}}}}, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x9fc1a, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r1})

1m11.585381485s ago: executing program 1 (id=3836):
r0 = openat$rfkill(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
readv(r0, 0x0, 0x0) (fail_nth: 1)

1m10.676552595s ago: executing program 1 (id=3844):
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
mlock2(&(0x7f0000dc6000/0x1000)=nil, 0x1000, 0x0)
gettimeofday(&(0x7f00000010c0), &(0x7f0000001100))

1m9.428175789s ago: executing program 36 (id=3844):
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
mlock2(&(0x7f0000dc6000/0x1000)=nil, 0x1000, 0x0)
gettimeofday(&(0x7f00000010c0), &(0x7f0000001100))

15.089872401s ago: executing program 5 (id=4036):
r0 = fanotify_init(0x40, 0x80000)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/175, 0xaf}, {0x0}], 0x2)
r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x6)
fchdir(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r3, 0x1, 0x1)
getdents64(r3, 0x0, 0x22)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r0, 0x1, 0x40001019, r4, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000016}, 0x4048004)
close_range(r4, 0xffffffffffffffff, 0x0)
fanotify_init(0x40, 0x80000) (async)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/175, 0xaf}, {0x0}], 0x2) (async)
fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r1, 0x0, 0x6) (async)
fchdir(r2) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
lseek(r3, 0x1, 0x1) (async)
getdents64(r3, 0x0, 0x22) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) (async)
fanotify_mark(r0, 0x1, 0x40001019, r4, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000016}, 0x4048004) (async)
close_range(r4, 0xffffffffffffffff, 0x0) (async)

14.747975727s ago: executing program 7 (id=4037):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1)
unshare(0x6020400)
acct(&(0x7f0000000040)='./file0\x00')
unshare(0x22020400)
pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0xffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x10000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010d21f076000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'hsr0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000002c0)="12042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309000008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES16=r4], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000b40)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="0009e200"], 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)

14.279618278s ago: executing program 5 (id=4040):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r5, @ANYRES64=0x0], 0x20)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0xfff1, 0x10}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x3404c050}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c"], 0x50}}, 0x4000000)

12.924683515s ago: executing program 5 (id=4043):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000080))
pselect6(0x40, &(0x7f0000000100)={0x40}, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000f40)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0x0, 0x0)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
shmget(0x3, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = dup2(r2, r1)
close_range(r3, 0xffffffffffffffff, 0x0)

11.960040426s ago: executing program 5 (id=4045):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)=ANY=[@ANYBLOB="140100002300010003000000fcdbdf250101f2800f0018007d3a2e9c5bc85c23277d0000140002"], 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x400)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x24000000)
socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x9, 0xef, 0xfffff000, 0x20000, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x4, 0x0, 0x4, 0xd}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r6, 0x0, &(0x7f0000000440)=""/130}, 0x20)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000092000000160a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010067656e6576653000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530000000000000000000140000001000010000000033260000000000000a"], 0xe8}}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r8)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)={0x30, r10, 0x3e69df1e54a9d8cf, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xc730}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xc0, r10, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xd, 0x67}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_MESH_SETUP={0x70, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_IE={0x39, 0x3, "bfa775ce32f2823923a6e1f0f9aa979a568fdafcf371be78dff373d9eef0d23915123d808c9fba6331f032dbd0169c363ab9d72050"}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x80}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4c040}, 0x20004004)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@alu={0x7, 0x1, 0x7, 0x5, 0x7, 0x0, 0xffffffffffffffff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
sendmsg$nl_xfrm(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@flushpolicy={0x18, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@proto={0x5, 0x19, 0xff}]}, 0x18}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})

11.822576061s ago: executing program 7 (id=4047):
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x4602c3, 0x125)
ftruncate(r0, 0x8800000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "6947accc5a9d91a8", "698d7e4ff1fc054344b881598e00", "5483b130", "e11700"}, 0x28)
write$binfmt_aout(r1, 0x0, 0xfdef)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0xffffffb7, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xd)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53)
mount$fuse(0x0, 0x0, 0x0, 0xa1420, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10)
r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0)
read(r6, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r9, 0xc048aeca, &(0x7f0000000340)={0x1, 0x0, [{0x320, 0x0, 0x6}]})
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendfile(r3, r0, 0x0, 0x578410ed)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0)

11.526894428s ago: executing program 7 (id=4049):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x8000000080, 0x3, 0xfffffffc, 0xfffffffc}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x2000000040, 0x1e0862)
sendfile(r0, r0, 0x0, 0x200)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001600)=@svm={0x3, 0x1, 0x1080, {0xeeee8000}, {"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"}})
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x7ff, 0x401, 0x5, 0x3ff, 0x1b, "31ca84752de91cef"})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(0xffffffffffffffff, 0x80)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c)
listen(r2, 0x5)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0x200, 0x5, 0x4, 0x1}, 0x14)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xffff}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x3}, 0x9c)
socket$packet(0x11, 0x2, 0x300)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x5, 0x30}, 0xc)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0xca01, 0x8f)
mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0xe2)
r5 = dup3(r1, 0xffffffffffffffff, 0x80000)
read$FUSE(r5, &(0x7f0000004200)={0x2020}, 0x2020)
r6 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r6, 0x107, 0xc, 0x0, &(0x7f0000001940))
read$watch_queue(r5, &(0x7f0000002d40)=""/4095, 0x105b)

11.357193954s ago: executing program 5 (id=4050):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00')
openat(r2, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe2342, 0x16b) (fail_nth: 1)

10.999868897s ago: executing program 5 (id=4051):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000a003000005"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1800, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r0, &(0x7f0000000080), 0x0}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c004}, 0x80)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4000000}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0xc0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
read$FUSE(r7, &(0x7f00000037c0)={0x2020}, 0x2020)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800c000)
ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000340))

10.173220112s ago: executing program 8 (id=4054):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0))
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18)
openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f00000003c0)={0x7fff, 0x6, 0x8, {0xf, 0x6}, 0x8, 0x1ff})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000480)={0x37b, @time={0x7}, 0xfc, {}, 0x0, 0x0, 0x9})
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0)

10.161906821s ago: executing program 7 (id=4056):
syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0xfffffffffffffffe, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6a}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4004000)

8.947131242s ago: executing program 2 (id=4058):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0))
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f00000003c0)={0x7fff, 0x6, 0x8, {0xf, 0x6}, 0x8, 0x1ff})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000480)={0x37b, @time={0x7}, 0xfc, {}, 0x0, 0x0, 0x9})
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0)

7.019697918s ago: executing program 2 (id=4059):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x80000)
poll(&(0x7f0000000240)=[{r2, 0x1500}], 0x1, 0x6)

6.859203547s ago: executing program 7 (id=4061):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0xd6}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x49)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x800)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30)

6.459874317s ago: executing program 9 (id=4062):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)

6.402492397s ago: executing program 2 (id=4063):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40000010)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x9, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x1, 0x5, 0x8, 0xffff, 0x1, "c8ea3023ea186bb8"})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x8d, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
r4 = inotify_init()
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
close_range(r4, 0xffffffffffffffff, 0x0)

6.09035222s ago: executing program 8 (id=4064):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="00000400000076003e70"], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmmsg(r1, &(0x7f0000004040)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000540)=""/89, 0x59}, {&(0x7f0000000600)=""/172, 0xac}, {&(0x7f00000006c0)=""/112, 0x70}, {&(0x7f0000000740)=""/222, 0xde}], 0x6, &(0x7f00000008c0)=""/136, 0x88}, 0x7fffffff}, {{&(0x7f0000000980)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000001d00)=""/4096, 0x1000}], 0x1, &(0x7f0000002d00)=""/4096, 0x1000}, 0x101}, {{&(0x7f0000000a40)=@tipc, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000bc0)=""/181, 0xb5}, {&(0x7f0000003d00)=""/98, 0x62}, {&(0x7f0000003d80)=""/251, 0xfb}, {&(0x7f0000000c80)=""/25, 0x19}, {&(0x7f0000003e80)=""/58, 0x3a}], 0x6, &(0x7f0000003f40)=""/204, 0xcc}, 0x3}], 0x3, 0x23616263cb5274a5, &(0x7f0000004100))
r3 = syz_open_pts(0xffffffffffffffff, 0x80)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x863, 0xff, 0x4f65, 0xd, 0x16}})
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r5, 0x80015b1a, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000080)=0xfffffffb, 0x4)
semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1f4, &(0x7f0000000140)={0x0, 0x3938700})
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)

5.606999058s ago: executing program 9 (id=4065):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="e0b9540db7f96a7ed38703e9ab02", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd0})
r1 = syz_io_uring_setup(0x2b06, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000ffd000), &(0x7f0000ffe000))
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90)
io_uring_register$IORING_REGISTER_FILES(r1, 0x14, &(0x7f00000003c0), 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x110}, 0xc000)
r3 = socket$kcm(0x2, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='rootfs\x00', 0x2018f1, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
syz_usb_connect(0x5, 0x1b, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x88, 0xcd, 0x9d, 0x8, 0x2100, 0x9e55, 0xe1a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x6, 0x8f, 0x60, 0x5}}]}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)
ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000100)={0x7, 0x32315659, 0x2, @stepwise={0x0, 0x2, 0x7, 0x0, 0x40000000, 0x5}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000002c40), r6)
sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002c80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r8 = fanotify_init(0x200, 0x0)
fanotify_mark(r8, 0x1, 0x4800003e, r7, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="1a", 0x1}], 0x1000000000000300}, 0x20040080)

5.465387013s ago: executing program 2 (id=4066):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x1d, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000009a06001b010f01d7ba4100ec", 0x31}], 0x28e, 0x4498bda7e2139f37, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.515954381s ago: executing program 2 (id=4067):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x28000000)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r3 = semget$private(0x0, 0x20000000102, 0x140)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80), 0x0, 0x8000)
semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000040)=""/70)
listen(r2, 0x3)
sendmsg$inet6(r1, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
bind$can_j1939(r9, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
close_range(r0, 0xffffffffffffffff, 0x0)

4.515732409s ago: executing program 8 (id=4068):
unshare(0x2c020400)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mq_notify(r0, 0x0)

4.023795887s ago: executing program 9 (id=4069):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0))
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f00000003c0)={0x7fff, 0x6, 0x8, {0xf, 0x6}, 0x8, 0x1ff})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000480)={0x37b, @time={0x7}, 0xfc, {}, 0x0, 0x0, 0x9})
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0)

3.734281987s ago: executing program 8 (id=4070):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x10, 0x0, 0x9, 0xe, 0x380})
syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x64, 0x0, 0xfc, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x1, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @rand_addr, {[@lsrr={0x83, 0x3}, @ssrr={0x89, 0x3, 0xf1}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010104, 0x1}, {@multicast1, 0x1}, {@dev}, {@loopback}, {@private=0xa010100, 0x1}, {@multicast1, 0x4}, {@empty, 0xffffff0a}]}]}}}}}}}, 0x0)

2.799882254s ago: executing program 2 (id=4071):
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '})

2.756457715s ago: executing program 9 (id=4072):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0))
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18)
openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f00000003c0)={0x7fff, 0x6, 0x8, {0xf, 0x6}, 0x8, 0x1ff})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

2.39008425s ago: executing program 8 (id=4073):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, 0x0}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x0, 0xfffffffffffff800}}], 0x90}, 0x0)

1.367745187s ago: executing program 9 (id=4074):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x6, 0x7, 0x6, 0x4, 0x53, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x78c0, 0x2, 0xdd}})
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1, 0x4}, 0x1c)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000000140)="0b49bb61261591141b8a68729c718e3c28856e8a59042d1c070d25a131c4a21b88c10f7a3fd4ce896f", 0x29}], 0x1}}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x6, 0xfa, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x66, 0x0, 0x2, 0x4, 0x0, @remote, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0xc6, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x639}, {@remote, 0x6}, {@private=0xa010101, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0x9c, 0x3, 0x8, [{@empty, 0x6}]}, @timestamp={0x44, 0x8, 0xf3, 0x0, 0x5, [0x8]}]}}}}})
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

276.931547ms ago: executing program 9 (id=4075):
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x9, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="050000007f0000004300000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000001c0), 0x71, r0}, 0x38)
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000002c0)={r0, 0xe0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x8, 0xfffffffffffffd95, 0x0}}, 0x10)
syz_io_uring_setup(0x18a, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1)
syz_usbip_server_init(0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00')
pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
lseek(r3, 0x101, 0x2)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0xd, 0x6f, 0x3, 0x80, 0x40, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0xd8, 0xb, 0x3, 0xc0}, {0xdddd1000, 0x10000, 0xe, 0x9, 0x3, 0x8, 0xfe, 0x2, 0x6, 0xab, 0x5, 0x81}, {0x3000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0xd, 0x2, 0x7, 0x7, 0xab, 0x7f, 0x9e, 0x9, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x11, 0x40}, {0xeeed4004, 0x2, 0x0, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0x5000, 0x1000, 0x8, 0x5, 0xf, 0x7, 0xff, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x4000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x70000, 0x242101, 0xb, 0x0, 0xa000, [0x6840000000000000, 0x4, 0x5a, 0x100]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="2000230c1100"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x45, 0x0, 0x0)

63.138136ms ago: executing program 8 (id=4076):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
dup3(r1, r0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffeffffffffffffe)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, 0x0)
r6 = socket$inet(0x2, 0x1, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000080)
setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TCFLSH(r2, 0x540b, 0x2)

0s ago: executing program 7 (id=4077):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x1, @pix={0x203, 0x807c2, 0x32314d59, 0x32315659, 0xffffffff, 0x10004, 0xa, 0x807, 0xfeedcafe, 0x3, 0x2, 0x3}}) (fail_nth: 3)

kernel console output (not intermixed with test programs):

oogle Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  674.966959][T15958] Call Trace:
[  674.966972][T15958]  <TASK>
[  674.966983][T15958]  dump_stack_lvl+0xe8/0x150
[  674.967023][T15958]  should_fail_ex+0x46b/0x600
[  674.967058][T15958]  should_failslab+0xa8/0x100
[  674.967085][T15958]  kmem_cache_alloc_noprof+0x87/0x680
[  674.967121][T15958]  ? sctp_get_port_local+0x748/0x1770
[  674.967160][T15958]  sctp_get_port_local+0x748/0x1770
[  674.967202][T15958]  ? sctp_get_port_local+0x525/0x1770
[  674.967235][T15958]  ? __pfx_sctp_get_port_local+0x10/0x10
[  674.967271][T15958]  ? sctp_bind_addr_match+0x28b/0x2b0
[  674.967303][T15958]  sctp_do_bind+0x4f1/0x9d0
[  674.967355][T15958]  sctp_connect_new_asoc+0x270/0x6b0
[  674.967392][T15958]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  674.967428][T15958]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  674.967461][T15958]  ? lockdep_hardirqs_on+0x7a/0x110
[  674.967495][T15958]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  674.967519][T15958]  ? security_sctp_bind_connect+0x7e/0x2c0
[  674.967571][T15958]  sctp_sendmsg+0x14c0/0x2990
[  674.967617][T15958]  ? __pfx_sctp_sendmsg+0x10/0x10
[  674.967651][T15958]  ? __lock_acquire+0x6b5/0x2cf0
[  674.967690][T15958]  ? sock_rps_record_flow+0x19/0x400
[  674.967747][T15958]  ? inet_sendmsg+0x2f4/0x370
[  674.967784][T15958]  ____sys_sendmsg+0x7da/0x9c0
[  674.967816][T15958]  ? __pfx_____sys_sendmsg+0x10/0x10
[  674.967862][T15958]  ? import_iovec+0x73/0xa0
[  674.967917][T15958]  ___sys_sendmsg+0x2a5/0x360
[  674.967946][T15958]  ? __pfx____sys_sendmsg+0x10/0x10
[  674.967977][T15958]  ? kstrtouint+0x6e/0xe0
[  674.968036][T15958]  ? __fget_files+0x2a/0x420
[  674.968064][T15958]  ? __fget_files+0x3a6/0x420
[  674.968106][T15958]  __sys_sendmmsg+0x282/0x4e0
[  674.968136][T15958]  ? __pfx___sys_sendmmsg+0x10/0x10
[  674.968172][T15958]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  674.968218][T15958]  ? ksys_write+0x248/0x270
[  674.968254][T15958]  ? __pfx_ksys_write+0x10/0x10
[  674.968295][T15958]  __x64_sys_sendmmsg+0xa0/0xc0
[  674.968322][T15958]  do_syscall_64+0x14d/0xf80
[  674.968364][T15958]  ? trace_irq_disable+0x3b/0x150
[  674.968391][T15958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.968415][T15958]  ? clear_bhb_loop+0x40/0x90
[  674.968444][T15958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.968467][T15958] RIP: 0033:0x7fef8953c799
[  674.968489][T15958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  674.968509][T15958] RSP: 002b:00007fef8778e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  674.968532][T15958] RAX: ffffffffffffffda RBX: 00007fef897b5fa0 RCX: 00007fef8953c799
[  674.968549][T15958] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003
[  674.968563][T15958] RBP: 00007fef8778e090 R08: 0000000000000000 R09: 0000000000000000
[  674.968577][T15958] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000001
[  674.968591][T15958] R13: 00007fef897b6038 R14: 00007fef897b5fa0 R15: 00007ffcfc996cc8
[  674.968629][T15958]  </TASK>
[  675.122551][T15962] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  676.242972][T15969] overlayfs: failed to resolve './file2': -2
[  676.288625][   T36] kauditd_printk_skb: 103 callbacks suppressed
[  676.288644][   T36] audit: type=1326 audit(1773734611.541:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15973 comm="syz.2.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cff9c799 code=0x7ffc0000
[  676.288982][   T36] audit: type=1326 audit(1773734611.541:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15973 comm="syz.2.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cff9c799 code=0x7ffc0000
[  676.289228][   T36] audit: type=1326 audit(1773734611.541:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15973 comm="syz.2.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cff9c799 code=0x7ffc0000
[  676.299295][   T36] audit: type=1326 audit(1773734611.541:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15973 comm="syz.2.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fd2cff9c799 code=0x7ffc0000
[  676.304951][   T36] audit: type=1326 audit(1773734611.562:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15973 comm="syz.2.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cff9c799 code=0x7ffc0000
[  676.363797][   T36] audit: type=1326 audit(1773734611.625:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15973 comm="syz.2.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2cff9c799 code=0x7ffc0000
[  676.363847][   T36] audit: type=1326 audit(1773734611.625:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15973 comm="syz.2.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd2cff9c799 code=0x7ffc0000
[  676.500708][   T36] audit: type=1326 audit(1773734611.772:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15973 comm="syz.2.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd2cff9c799 code=0x7ffc0000
[  676.567936][   T36] audit: type=1326 audit(1773734611.846:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15976 comm="syz.7.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa05c799 code=0x7ffc0000
[  676.568410][   T36] audit: type=1326 audit(1773734611.846:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15976 comm="syz.7.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa05c799 code=0x7ffc0000
[  676.763567][T15983] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3639'.
[  678.852878][T16015] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  680.354185][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  680.354274][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  682.270361][T16061] vlan2: entered promiscuous mode
[  682.270534][T16061] vlan2: entered allmulticast mode
[  682.270550][T16061] hsr_slave_1: entered allmulticast mode
[  682.316911][T16061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3657'.
[  682.421310][T16065] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3656'.
[  682.568962][T16069] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3659'.
[  684.604359][T16109] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3670'.
[  684.663345][ T5877] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  684.818510][ T5877] usb 6-1: unable to get BOS descriptor or descriptor too short
[  684.820934][ T5877] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  684.820977][ T5877] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7
[  684.827980][ T5877] usb 6-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[  684.828080][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.828101][ T5877] usb 6-1: Product: syz
[  684.828115][ T5877] usb 6-1: Manufacturer: syz
[  684.828129][ T5877] usb 6-1: SerialNumber: syz
[  685.077372][T16119] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3675'.
[  687.545582][T16149] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3683'.
[  688.767033][ T5877] usb 6-1: Can't get UAC3 power state for id 10
[  688.791804][ T5877] usb 6-1: BAAD HEADSET c_chmask mismatch
[  688.920550][ T5877] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  688.929620][T16162] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3688'.
[  689.407991][ T5877] usb 6-1: USB disconnect, device number 51
[  689.551072][T10259] udevd[10259]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  689.614729][T16171] FAULT_INJECTION: forcing a failure.
[  689.614729][T16171] name failslab, interval 1, probability 0, space 0, times 0
[  689.614766][T16171] CPU: 1 UID: 0 PID: 16171 Comm: syz.7.3690 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  689.614799][T16171] Tainted: [L]=SOFTLOCKUP
[  689.614807][T16171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  689.614821][T16171] Call Trace:
[  689.614845][T16171]  <TASK>
[  689.614856][T16171]  dump_stack_lvl+0xe8/0x150
[  689.614897][T16171]  should_fail_ex+0x46b/0x600
[  689.614932][T16171]  should_failslab+0xa8/0x100
[  689.614958][T16171]  kmem_cache_alloc_noprof+0x87/0x680
[  689.614993][T16171]  ? anon_vma_clone+0x412/0xa00
[  689.615031][T16171]  anon_vma_clone+0x412/0xa00
[  689.615078][T16171]  __split_vma+0x3a5/0xa30
[  689.615114][T16171]  ? __lock_acquire+0x6b5/0x2cf0
[  689.615143][T16171]  ? __pfx___split_vma+0x10/0x10
[  689.615171][T16171]  ? __lock_acquire+0x6b5/0x2cf0
[  689.615201][T16171]  ? __lock_acquire+0x6b5/0x2cf0
[  689.615235][T16171]  ? can_vma_merge_left+0x191/0x3e0
[  689.615266][T16171]  vma_modify+0xa49/0x1f00
[  689.615310][T16171]  vma_modify_flags+0x24b/0x330
[  689.615341][T16171]  ? __pfx_vma_modify_flags+0x10/0x10
[  689.615392][T16171]  ? mas_next_slot+0xc23/0xd00
[  689.615432][T16171]  mlock_fixup+0x29e/0x440
[  689.615469][T16171]  ? __pfx_mlock_fixup+0x10/0x10
[  689.615500][T16171]  ? mas_find+0xb0e/0xd30
[  689.615540][T16171]  apply_vma_lock_flags+0x2af/0x3e0
[  689.615578][T16171]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[  689.615625][T16171]  ? do_mlock+0x173/0x750
[  689.615657][T16171]  do_mlock+0x558/0x750
[  689.615696][T16171]  ? __pfx_do_mlock+0x10/0x10
[  689.615725][T16171]  ? fput+0xa0/0xd0
[  689.615753][T16171]  ? ksys_write+0x248/0x270
[  689.615789][T16171]  ? __pfx_ksys_write+0x10/0x10
[  689.615832][T16171]  __x64_sys_mlock+0x60/0x70
[  689.615861][T16171]  do_syscall_64+0x14d/0xf80
[  689.615894][T16171]  ? trace_irq_disable+0x3b/0x150
[  689.615922][T16171]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.615946][T16171]  ? clear_bhb_loop+0x40/0x90
[  689.615975][T16171]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.615998][T16171] RIP: 0033:0x7f30aa05c799
[  689.616020][T16171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  689.616040][T16171] RSP: 002b:00007f30a82ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  689.616063][T16171] RAX: ffffffffffffffda RBX: 00007f30aa2d5fa0 RCX: 00007f30aa05c799
[  689.616080][T16171] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
[  689.616095][T16171] RBP: 00007f30a82ae090 R08: 0000000000000000 R09: 0000000000000000
[  689.616110][T16171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  689.616123][T16171] R13: 00007f30aa2d6038 R14: 00007f30aa2d5fa0 R15: 00007ffdb7819458
[  689.616162][T16171]  </TASK>
[  690.043399][T16178] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3691'.
[  690.124732][T16182] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3695'.
[  690.245202][T16190] FAULT_INJECTION: forcing a failure.
[  690.245202][T16190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  690.245237][T16190] CPU: 0 UID: 0 PID: 16190 Comm: syz.7.3698 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  690.245265][T16190] Tainted: [L]=SOFTLOCKUP
[  690.245272][T16190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  690.245284][T16190] Call Trace:
[  690.245292][T16190]  <TASK>
[  690.245301][T16190]  dump_stack_lvl+0xe8/0x150
[  690.245334][T16190]  should_fail_ex+0x46b/0x600
[  690.245364][T16190]  _copy_to_user+0x31/0xb0
[  690.245395][T16190]  simple_read_from_buffer+0xe1/0x170
[  690.245442][T16190]  proc_fail_nth_read+0x1be/0x230
[  690.245473][T16190]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  690.245505][T16190]  ? rw_verify_area+0x2ac/0x4e0
[  690.245538][T16190]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  690.245568][T16190]  vfs_read+0x212/0xa80
[  690.245611][T16190]  ? __pfx_vfs_read+0x10/0x10
[  690.245647][T16190]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  690.245684][T16190]  ? lockdep_hardirqs_on+0x7a/0x110
[  690.245718][T16190]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  690.245752][T16190]  ? mutex_lock_nested+0x152/0x1d0
[  690.245779][T16190]  ? fdget_pos+0x252/0x320
[  690.245818][T16190]  ksys_read+0x156/0x270
[  690.245854][T16190]  ? __pfx_ksys_read+0x10/0x10
[  690.245899][T16190]  do_syscall_64+0x14d/0xf80
[  690.245932][T16190]  ? trace_irq_disable+0x3b/0x150
[  690.245959][T16190]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.245984][T16190]  ? clear_bhb_loop+0x40/0x90
[  690.246013][T16190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.246037][T16190] RIP: 0033:0x7f30aa01cfce
[  690.246059][T16190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  690.246084][T16190] RSP: 002b:00007f30a828cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  690.246107][T16190] RAX: ffffffffffffffda RBX: 00007f30a828d6c0 RCX: 00007f30aa01cfce
[  690.246124][T16190] RDX: 000000000000000f RSI: 00007f30a828d0a0 RDI: 0000000000000003
[  690.246139][T16190] RBP: 00007f30a828d090 R08: 0000000000000000 R09: 0000000000000000
[  690.246162][T16190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  690.246176][T16190] R13: 00007f30aa2d6128 R14: 00007f30aa2d6090 R15: 00007ffdb7819458
[  690.246213][T16190]  </TASK>
[  690.675679][T16197] netlink: 'syz.2.3701': attribute type 10 has an invalid length.
[  690.693195][T16197] bond0: (slave dummy0): Releasing backup interface
[  690.730994][T16199] netlink: 'syz.2.3701': attribute type 10 has an invalid length.
[  690.735365][T16197] dummy0: entered promiscuous mode
[  690.736438][T16197] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  690.736545][T16197] team0: Failed to send options change via netlink (err -105)
[  690.736557][T16197] team0: Port device dummy0 added
[  690.741651][T16199] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  690.748677][T16199] dummy0: left promiscuous mode
[  690.812485][T16199] team0: Failed to send options change via netlink (err -105)
[  690.812718][T16199] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  690.813242][T16199] team0: Port device dummy0 removed
[  690.886108][T16199] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  691.384925][T16214] netlink: 15 bytes leftover after parsing attributes in process `syz.7.3703'.
[  692.048992][T16229] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3712'.
[  692.092710][ T5811] usb 2-1: new full-speed USB device number 71 using dummy_hcd
[  692.435806][ T5811] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping
[  692.435900][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  692.435954][ T5811] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  692.436239][ T5811] usb 2-1: New USB device found, idVendor=0f6a, idProduct=5000, bcdDevice= 0.00
[  692.436331][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.731692][ T5811] usb 2-1: config 0 descriptor??
[  692.931757][T15461] usb 2-1: USB disconnect, device number 71
[  693.226122][ T5877] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  693.388105][ T5877] usb 9-1: Using ep0 maxpacket: 32
[  693.391492][ T5877] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  693.391516][ T5877] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  693.395233][ T5877] usb 9-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40
[  693.395259][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.395278][ T5877] usb 9-1: Product: syz
[  693.395292][ T5877] usb 9-1: Manufacturer: syz
[  693.395306][ T5877] usb 9-1: SerialNumber: syz
[  693.615269][T15461] IPVS: starting estimator thread 0...
[  693.645932][ T5877] usb 9-1: unable to issue vendor read request (ret = -71)
[  693.646661][ T5877] usb 9-1: unable to issue vendor read request (ret = -71)
[  693.647235][ T5877] usb 9-1: unable to issue vendor read request (ret = -71)
[  693.648283][ T5877] usb 9-1: unable to issue vendor read request (ret = -71)
[  693.651609][ T5877] usb 9-1: unable to issue vendor read request (ret = -71)
[  693.652561][ T5877] usb 9-1: unable to issue vendor read request (ret = -71)
[  693.655261][ T5877] usb 9-1: unable to issue vendor read request (ret = -71)
[  693.656180][ T5877] usb 9-1: unable to issue vendor read request (ret = -71)
[  693.723530][T16256] IPVS: using max 8 ests per chain, 19200 per kthread
[  693.809896][ T5877] usb 9-1: USB disconnect, device number 4
[  693.861125][ T8141] udevd[8141]: setting mode of /dev/bus/usb/009/004 to 020664 failed: No such file or directory
[  693.861267][ T8141] udevd[8141]: setting owner of /dev/bus/usb/009/004 to uid=0, gid=0 failed: No such file or directory
[  693.912458][ T8141] udevd[8141]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  694.021073][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3726'.
[  694.059624][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'.
[  694.241745][T16263] netlink: 'syz.2.3727': attribute type 5 has an invalid length.
[  694.432842][T16265] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3728'.
[  694.936161][T16287] FAULT_INJECTION: forcing a failure.
[  694.936161][T16287] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  694.936201][T16287] CPU: 1 UID: 0 PID: 16287 Comm: syz.2.3737 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  694.936233][T16287] Tainted: [L]=SOFTLOCKUP
[  694.936241][T16287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  694.936255][T16287] Call Trace:
[  694.936264][T16287]  <TASK>
[  694.936274][T16287]  dump_stack_lvl+0xe8/0x150
[  694.936314][T16287]  should_fail_ex+0x46b/0x600
[  694.936357][T16287]  _copy_from_user+0x2d/0xb0
[  694.936392][T16287]  snd_ctl_ioctl+0x6df/0x1dc0
[  694.936520][T16287]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  694.936546][T16287]  ? vsnprintf+0xee0/0xee0
[  694.936625][T16287]  ? kasan_save_track+0x4f/0x80
[  694.936655][T16287]  ? kasan_save_track+0x3e/0x80
[  694.936692][T16287]  ? kasan_save_free_info+0x46/0x50
[  694.936714][T16287]  ? __kasan_slab_free+0x5c/0x80
[  694.936741][T16287]  ? kfree+0x1c1/0x6c0
[  694.936764][T16287]  ? tomoyo_path_number_perm+0x501/0x630
[  694.936793][T16287]  ? security_file_ioctl+0xc3/0x2a0
[  694.936821][T16287]  ? __se_sys_ioctl+0x47/0x170
[  694.936849][T16287]  ? do_syscall_64+0x14d/0xf80
[  694.936877][T16287]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.936932][T16287]  ? kasan_quarantine_put+0xbb/0x1f0
[  694.936965][T16287]  ? tomoyo_path_number_perm+0x219/0x630
[  694.936995][T16287]  ? tomoyo_path_number_perm+0x219/0x630
[  694.937026][T16287]  ? do_vfs_ioctl+0x117b/0x1540
[  694.937053][T16287]  ? smk_access+0x14c/0x4e0
[  694.937082][T16287]  ? smk_tskacc+0x311/0x3a0
[  694.937110][T16287]  ? smack_file_ioctl+0x263/0x360
[  694.937139][T16287]  ? __pfx_smack_file_ioctl+0x10/0x10
[  694.937174][T16287]  ? __fget_files+0x2a/0x420
[  694.937197][T16287]  ? __fget_files+0x3a6/0x420
[  694.937219][T16287]  ? __fget_files+0x2a/0x420
[  694.937245][T16287]  ? bpf_lsm_file_ioctl+0x9/0x20
[  694.937265][T16287]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  694.937287][T16287]  __se_sys_ioctl+0xff/0x170
[  694.937319][T16287]  do_syscall_64+0x14d/0xf80
[  694.937354][T16287]  ? trace_irq_disable+0x3b/0x150
[  694.937375][T16287]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.937395][T16287]  ? clear_bhb_loop+0x40/0x90
[  694.937418][T16287]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.937437][T16287] RIP: 0033:0x7fd2cff9c799
[  694.937455][T16287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  694.937473][T16287] RSP: 002b:00007fd2ce1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  694.937493][T16287] RAX: ffffffffffffffda RBX: 00007fd2d0215fa0 RCX: 00007fd2cff9c799
[  694.937508][T16287] RDX: 00002000000003c0 RSI: 0000000040405514 RDI: 0000000000000003
[  694.937521][T16287] RBP: 00007fd2ce1f6090 R08: 0000000000000000 R09: 0000000000000000
[  694.937533][T16287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  694.937545][T16287] R13: 00007fd2d0216038 R14: 00007fd2d0215fa0 R15: 00007ffe3fd47828
[  694.937576][T16287]  </TASK>
[  695.448654][T16295] FAULT_INJECTION: forcing a failure.
[  695.448654][T16295] name failslab, interval 1, probability 0, space 0, times 0
[  695.448689][T16295] CPU: 0 UID: 0 PID: 16295 Comm: syz.8.3739 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  695.448716][T16295] Tainted: [L]=SOFTLOCKUP
[  695.448724][T16295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  695.448736][T16295] Call Trace:
[  695.448743][T16295]  <TASK>
[  695.448752][T16295]  dump_stack_lvl+0xe8/0x150
[  695.448797][T16295]  should_fail_ex+0x46b/0x600
[  695.448828][T16295]  should_failslab+0xa8/0x100
[  695.448850][T16295]  __kmalloc_noprof+0xdf/0x7b0
[  695.448882][T16295]  ? tomoyo_encode+0x28b/0x550
[  695.448910][T16295]  tomoyo_encode+0x28b/0x550
[  695.448938][T16295]  tomoyo_realpath_from_path+0x58d/0x5d0
[  695.448972][T16295]  ? tomoyo_path_number_perm+0x219/0x630
[  695.449002][T16295]  tomoyo_path_number_perm+0x246/0x630
[  695.449034][T16295]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  695.449067][T16295]  ? __lock_acquire+0x6b5/0x2cf0
[  695.449119][T16295]  ? __fget_files+0x2a/0x420
[  695.449149][T16295]  ? __fget_files+0x2a/0x420
[  695.449172][T16295]  ? __fget_files+0x3a6/0x420
[  695.449196][T16295]  ? __fget_files+0x2a/0x420
[  695.449225][T16295]  security_file_ioctl+0xc3/0x2a0
[  695.449259][T16295]  __se_sys_ioctl+0x47/0x170
[  695.449292][T16295]  do_syscall_64+0x14d/0xf80
[  695.449320][T16295]  ? trace_irq_disable+0x3b/0x150
[  695.449343][T16295]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.449367][T16295]  ? clear_bhb_loop+0x40/0x90
[  695.449385][T16295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.449399][T16295] RIP: 0033:0x7f097565c799
[  695.449412][T16295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  695.449424][T16295] RSP: 002b:00007f09738b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  695.449439][T16295] RAX: ffffffffffffffda RBX: 00007f09758d5fa0 RCX: 00007f097565c799
[  695.449449][T16295] RDX: 0000200000000280 RSI: 0000000000000720 RDI: 0000000000000003
[  695.449459][T16295] RBP: 00007f09738b6090 R08: 0000000000000000 R09: 0000000000000000
[  695.449468][T16295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  695.449477][T16295] R13: 00007f09758d6038 R14: 00007f09758d5fa0 R15: 00007fff074543a8
[  695.449499][T16295]  </TASK>
[  695.451269][T16295] ERROR: Out of memory at tomoyo_realpath_from_path.
[  695.741325][T15461] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  695.883887][T15461] usb 3-1: Using ep0 maxpacket: 16
[  695.890276][T15461] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  695.900245][T15461] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  695.900273][T15461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.900295][T15461] usb 3-1: Product: syz
[  695.900310][T15461] usb 3-1: Manufacturer: syz
[  695.900325][T15461] usb 3-1: SerialNumber: syz
[  695.960379][T15461] usb 3-1: config 0 descriptor??
[  695.966404][T15461] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  695.966439][T15461] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  696.112384][ T5808] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  696.255238][ T5808] usb 9-1: device descriptor read/64, error -71
[  696.369801][    T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  696.483875][ T5808] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  696.512367][    T9] usb 6-1: Using ep0 maxpacket: 8
[  696.514806][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  696.514851][    T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  696.514874][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.520752][    T9] usb 6-1: config 0 descriptor??
[  696.562596][T15461] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  696.626735][ T5808] usb 9-1: device descriptor read/64, error -71
[  696.730936][    T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  696.744209][ T5808] usb usb9-port1: attempt power cycle
[  697.052262][ T5811] usb 6-1: USB disconnect, device number 52
[  697.259852][ T5808] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  697.341461][ T5808] usb 9-1: device descriptor read/8, error -71
[  697.351591][T15461] em28xx 3-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65)
[  697.351660][T15461] em28xx 3-1:0.0: board has no eeprom
[  697.575131][ T5808] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  697.594977][T16318] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3749'.
[  697.606289][ T5808] usb 9-1: device descriptor read/8, error -71
[  697.614191][T15461] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  697.614217][T15461] em28xx 3-1:0.0: dvb set to bulk mode.
[  697.615579][   T31] em28xx 3-1:0.0: Binding DVB extension
[  697.655948][T15461] usb 3-1: USB disconnect, device number 91
[  697.658178][T15461] em28xx 3-1:0.0: Disconnecting em28xx
[  697.704810][ T5808] usb usb9-port1: unable to enumerate USB device
[  697.737919][   T36] kauditd_printk_skb: 6 callbacks suppressed
[  697.737939][   T36] audit: type=1326 audit(1773734634.070:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16320 comm="syz.1.3750" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e265bc799 code=0x0
[  697.774405][   T31] em28xx 3-1:0.0: Registering input extension
[  697.778211][T15461] em28xx 3-1:0.0: Closing input extension
[  697.836350][T15461] em28xx 3-1:0.0: Freeing device
[  698.173072][ T5877] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  698.258074][T16333] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[  698.322417][ T5877] usb 2-1: Using ep0 maxpacket: 32
[  698.338293][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  698.338339][ T5877] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  698.338362][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.354783][ T5877] usb 2-1: config 0 descriptor??
[  698.377789][ T5877] hub 2-1:0.0: USB hub found
[  698.552851][ T5877] hub 2-1:0.0: 1 port detected
[  699.090343][ T5878] IPVS: starting estimator thread 0...
[  699.162629][T16349] veth1_macvtap: mtu greater than device maximum
[  699.170555][T16351] IPVS: using max 11 ests per chain, 26400 per kthread
[  699.560786][   T31] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  699.704141][   T31] usb 9-1: Using ep0 maxpacket: 16
[  699.722184][   T31] usb 9-1: config 254 has an invalid interface number: 235 but max is 0
[  699.722211][   T31] usb 9-1: config 254 has no interface number 0
[  699.722252][   T31] usb 9-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  699.722275][   T31] usb 9-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  699.722301][   T31] usb 9-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  699.722325][   T31] usb 9-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0
[  699.722347][   T31] usb 9-1: config 254 interface 235 has no altsetting 0
[  699.733470][   T31] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  699.733519][   T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.733540][   T31] usb 9-1: Product: syz
[  699.733554][   T31] usb 9-1: Manufacturer: syz
[  699.733584][   T31] usb 9-1: SerialNumber: syz
[  699.822475][T16353] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  699.920682][T16359] nftables ruleset with unbound set
[  700.024773][ T5877] hub 2-1:0.0: hub_ext_port_status failed (err = -32)
[  700.025011][T16353] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  700.042336][   T31] usbtest 9-1:254.235: Linux gadget zero
[  700.042388][   T31] usbtest 9-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt)
[  700.221032][T16364] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3766'.
[  700.244511][   T31] usb 9-1: USB disconnect, device number 9
[  700.351881][T16369] FAULT_INJECTION: forcing a failure.
[  700.351881][T16369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  700.351920][T16369] CPU: 0 UID: 0 PID: 16369 Comm: syz.5.3769 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  700.351952][T16369] Tainted: [L]=SOFTLOCKUP
[  700.351960][T16369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  700.351974][T16369] Call Trace:
[  700.351983][T16369]  <TASK>
[  700.351993][T16369]  dump_stack_lvl+0xe8/0x150
[  700.352032][T16369]  should_fail_ex+0x46b/0x600
[  700.352066][T16369]  _copy_to_user+0x31/0xb0
[  700.352102][T16369]  simple_read_from_buffer+0xe1/0x170
[  700.352136][T16369]  proc_fail_nth_read+0x1be/0x230
[  700.352168][T16369]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  700.352199][T16369]  ? rw_verify_area+0x2ac/0x4e0
[  700.352230][T16369]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  700.352259][T16369]  vfs_read+0x212/0xa80
[  700.352300][T16369]  ? __pfx_vfs_read+0x10/0x10
[  700.352336][T16369]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  700.352371][T16369]  ? lockdep_hardirqs_on+0x7a/0x110
[  700.352404][T16369]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  700.352446][T16369]  ? mutex_lock_nested+0x152/0x1d0
[  700.352472][T16369]  ? fdget_pos+0x252/0x320
[  700.352511][T16369]  ksys_read+0x156/0x270
[  700.352544][T16369]  ? __pfx_ksys_read+0x10/0x10
[  700.352588][T16369]  do_syscall_64+0x14d/0xf80
[  700.352619][T16369]  ? trace_irq_disable+0x3b/0x150
[  700.352645][T16369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.352668][T16369]  ? clear_bhb_loop+0x40/0x90
[  700.352695][T16369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.352718][T16369] RIP: 0033:0x7fef894fcfce
[  700.352738][T16369] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  700.352758][T16369] RSP: 002b:00007fef8778dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  700.352782][T16369] RAX: ffffffffffffffda RBX: 00007fef8778e6c0 RCX: 00007fef894fcfce
[  700.352799][T16369] RDX: 000000000000000f RSI: 00007fef8778e0a0 RDI: 0000000000000005
[  700.352813][T16369] RBP: 00007fef8778e090 R08: 0000000000000000 R09: 0000000000000000
[  700.352827][T16369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  700.352840][T16369] R13: 00007fef897b6038 R14: 00007fef897b5fa0 R15: 00007ffcfc996cc8
[  700.352875][T16369]  </TASK>
[  700.809004][   T31] usb 2-1: USB disconnect, device number 72
[  702.557067][T16399] netlink: 'syz.5.3780': attribute type 22 has an invalid length.
[  702.559299][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3780'.
[  702.726047][T16406] FAULT_INJECTION: forcing a failure.
[  702.726047][T16406] name failslab, interval 1, probability 0, space 0, times 0
[  702.726088][T16406] CPU: 1 UID: 0 PID: 16406 Comm: syz.8.3778 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  702.726120][T16406] Tainted: [L]=SOFTLOCKUP
[  702.726130][T16406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  702.726144][T16406] Call Trace:
[  702.726155][T16406]  <TASK>
[  702.726165][T16406]  dump_stack_lvl+0xe8/0x150
[  702.726208][T16406]  should_fail_ex+0x46b/0x600
[  702.726253][T16406]  should_failslab+0xa8/0x100
[  702.726280][T16406]  kmem_cache_alloc_noprof+0x87/0x680
[  702.726318][T16406]  ? create_new_namespaces+0x33/0x6a0
[  702.726357][T16406]  create_new_namespaces+0x33/0x6a0
[  702.726391][T16406]  ? __pfx_vfs_write+0x10/0x10
[  702.726436][T16406]  __se_sys_setns+0x2c3/0x1bb0
[  702.726470][T16406]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  702.726513][T16406]  ? __pfx___se_sys_setns+0x10/0x10
[  702.726574][T16406]  do_syscall_64+0x14d/0xf80
[  702.726609][T16406]  ? trace_irq_disable+0x3b/0x150
[  702.726644][T16406]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.726666][T16406]  ? clear_bhb_loop+0x40/0x90
[  702.726691][T16406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.726713][T16406] RIP: 0033:0x7f097565c799
[  702.726732][T16406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  702.726749][T16406] RSP: 002b:00007f09738b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[  702.726771][T16406] RAX: ffffffffffffffda RBX: 00007f09758d5fa0 RCX: 00007f097565c799
[  702.726785][T16406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  702.726797][T16406] RBP: 00007f09738b6090 R08: 0000000000000000 R09: 0000000000000000
[  702.726810][T16406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  702.726822][T16406] R13: 00007f09758d6038 R14: 00007f09758d5fa0 R15: 00007fff074543a8
[  702.726853][T16406]  </TASK>
[  703.053451][T16414] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3785'.
[  703.176989][T16419] FAULT_INJECTION: forcing a failure.
[  703.176989][T16419] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  703.177022][T16419] CPU: 1 UID: 0 PID: 16419 Comm: syz.1.3786 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  703.177049][T16419] Tainted: [L]=SOFTLOCKUP
[  703.177056][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  703.177068][T16419] Call Trace:
[  703.177075][T16419]  <TASK>
[  703.177084][T16419]  dump_stack_lvl+0xe8/0x150
[  703.177118][T16419]  should_fail_ex+0x46b/0x600
[  703.177147][T16419]  prepare_alloc_pages+0x22a/0x6b0
[  703.177178][T16419]  __alloc_frozen_pages_noprof+0x12f/0x380
[  703.177205][T16419]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  703.177240][T16419]  ? __pfx_policy_nodemask+0x10/0x10
[  703.177260][T16419]  ? __lock_acquire+0x6b5/0x2cf0
[  703.177287][T16419]  alloc_pages_mpol+0xd1/0x380
[  703.177312][T16419]  vma_alloc_folio_noprof+0xea/0x290
[  703.177336][T16419]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  703.177366][T16419]  do_pte_missing+0x7f9/0x29e0
[  703.177403][T16419]  handle_mm_fault+0xd0a/0x13c0
[  703.177438][T16419]  ? handle_mm_fault+0xe7/0x13c0
[  703.177470][T16419]  ? __pfx_handle_mm_fault+0x10/0x10
[  703.177517][T16419]  ? lock_mm_and_find_vma+0xa7/0x340
[  703.177542][T16419]  do_user_addr_fault+0x75b/0x1340
[  703.177585][T16419]  exc_page_fault+0x6a/0xc0
[  703.177615][T16419]  asm_exc_page_fault+0x26/0x30
[  703.177635][T16419] RIP: 0010:__put_user_4+0xd/0x20
[  703.177663][T16419] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[  703.177681][T16419] RSP: 0018:ffffc900055bfe30 EFLAGS: 00050202
[  703.177698][T16419] RAX: 0000000000020012 RBX: 0000000000000000 RCX: 0000200000001a80
[  703.177710][T16419] RDX: 0000000000000000 RSI: ffffffff8d7bd351 RDI: ffffffff8ba66700
[  703.177724][T16419] RBP: 0000000080044100 R08: ffffffff8212442f R09: ffff888038af83b0
[  703.177737][T16419] R10: 0000000000000100 R11: 00000000c2604111 R12: 1ffff110062dac00
[  703.177749][T16419] R13: 0000200000001a80 R14: 0000200000001a80 R15: ffff88803c250200
[  703.177770][T16419]  ? __might_fault+0xaf/0x130
[  703.177805][T16419]  snd_pcm_common_ioctl+0x83e/0xb80
[  703.177952][T16419]  ? __pfx_snd_pcm_ioctl+0x10/0x10
[  703.177977][T16419]  snd_pcm_ioctl+0x8e/0xb0
[  703.178003][T16419]  __se_sys_ioctl+0xff/0x170
[  703.178038][T16419]  do_syscall_64+0x14d/0xf80
[  703.178066][T16419]  ? trace_irq_disable+0x3b/0x150
[  703.178090][T16419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.178111][T16419]  ? clear_bhb_loop+0x40/0x90
[  703.178136][T16419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.178157][T16419] RIP: 0033:0x7f0e265bc799
[  703.178176][T16419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  703.178193][T16419] RSP: 002b:00007f0e2480e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  703.178221][T16419] RAX: ffffffffffffffda RBX: 00007f0e26835fa0 RCX: 00007f0e265bc799
[  703.178236][T16419] RDX: 0000200000001a80 RSI: 0000000080044100 RDI: 0000000000000003
[  703.178249][T16419] RBP: 00007f0e2480e090 R08: 0000000000000000 R09: 0000000000000000
[  703.178262][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  703.178274][T16419] R13: 00007f0e26836038 R14: 00007f0e26835fa0 R15: 00007ffda94ccfd8
[  703.178304][T16419]  </TASK>
[  703.780476][ T5808] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  703.923448][ T5808] usb 9-1: Using ep0 maxpacket: 8
[  703.926223][ T5808] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  703.926317][ T5808] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  703.926344][ T5808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.936110][ T5808] usb 9-1: config 0 descriptor??
[  703.985557][ T5808] gspca_main: vc032x-2.14.0 probing 046d:0892
[  704.989106][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3795'.
[  704.989121][T16439] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3795'.
[  704.989136][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3795'.
[  705.028322][    T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  705.111082][T16421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.144148][T16421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  705.151941][ T5808] gspca_vc032x: reg_w err -71
[  705.155507][ T5808] vc032x 9-1:0.0: probe with driver vc032x failed with error -71
[  705.171390][    T9] usb 6-1: Using ep0 maxpacket: 32
[  705.182628][ T5808] usb 9-1: USB disconnect, device number 10
[  705.188913][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  705.207230][    T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  705.207255][    T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  705.207274][    T9] usb 6-1: Product: syz
[  705.207287][    T9] usb 6-1: Manufacturer: syz
[  705.207300][    T9] usb 6-1: SerialNumber: syz
[  705.265413][    T9] usb 6-1: config 0 descriptor??
[  705.266267][T16436] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  705.282915][    T9] hub 6-1:0.0: bad descriptor, ignoring hub
[  705.282938][    T9] hub 6-1:0.0: probe with driver hub failed with error -5
[  705.742970][T16453] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3800'.
[  705.879498][    T9] usb 2-1: new full-speed USB device number 73 using dummy_hcd
[  706.000388][    T9] usb 2-1: device descriptor read/64, error -71
[  706.230188][    T9] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[  706.352417][    T9] usb 2-1: device descriptor read/64, error -71
[  706.457906][    T9] usb usb2-port1: attempt power cycle
[  706.481812][   T41] raw-gadget.1 gadget.5: failed to queue suspend event
[  706.544690][T16436] raw-gadget.1 gadget.5: failed to queue resume event
[  706.564673][   T41] raw-gadget.1 gadget.5: failed to queue suspend event
[  706.630176][T16436] raw-gadget.1 gadget.5: failed to queue resume event
[  706.653381][   T41] raw-gadget.1 gadget.5: failed to queue suspend event
[  706.718275][ T5803] Bluetooth: hci1: command 0x0406 tx timeout
[  706.720550][T16436] raw-gadget.1 gadget.5: failed to queue resume event
[  706.763765][   T41] raw-gadget.1 gadget.5: failed to queue suspend event
[  706.791508][    T9] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  706.810118][    T9] usb 2-1: device descriptor read/8, error -71
[  706.847927][T16436] raw-gadget.1 gadget.5: failed to queue resume event
[  706.888076][  T147] raw-gadget.1 gadget.5: failed to queue suspend event
[  706.952798][T16436] raw-gadget.1 gadget.5: failed to queue resume event
[  707.021942][ T3534] raw-gadget.1 gadget.5: failed to queue suspend event
[  707.038475][    T9] usb 2-1: new full-speed USB device number 76 using dummy_hcd
[  707.073336][    T9] usb 2-1: device descriptor read/8, error -71
[  707.095543][T16436] raw-gadget.1 gadget.5: failed to queue resume event
[  707.115944][   T41] raw-gadget.1 gadget.5: failed to queue suspend event
[  707.172623][    T9] usb usb2-port1: unable to enumerate USB device
[  707.182428][T16436] raw-gadget.1 gadget.5: failed to queue resume event
[  707.202639][ T3534] raw-gadget.1 gadget.5: failed to queue suspend event
[  707.271989][T16436] raw-gadget.1 gadget.5: failed to queue resume event
[  707.323773][   T41] raw-gadget.1 gadget.5: failed to queue suspend event
[  707.400546][T16436] raw-gadget.1 gadget.5: failed to queue resume event
[  707.435162][  T158] raw-gadget.1 gadget.5: failed to queue suspend event
[  707.495606][T16436] raw-gadget.1 gadget.5: failed to queue resume event
[  707.555034][  T147] raw-gadget.1 gadget.5: failed to queue suspend event
[  707.572490][T16475] FAULT_INJECTION: forcing a failure.
[  707.572490][T16475] name failslab, interval 1, probability 0, space 0, times 0
[  707.572526][T16475] CPU: 0 UID: 0 PID: 16475 Comm: syz.7.3810 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  707.572573][T16475] Tainted: [L]=SOFTLOCKUP
[  707.572581][T16475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  707.572594][T16475] Call Trace:
[  707.572604][T16475]  <TASK>
[  707.572613][T16475]  dump_stack_lvl+0xe8/0x150
[  707.572653][T16475]  should_fail_ex+0x46b/0x600
[  707.572688][T16475]  should_failslab+0xa8/0x100
[  707.572714][T16475]  __kmalloc_noprof+0xdf/0x7b0
[  707.572748][T16475]  ? tomoyo_encode+0x28b/0x550
[  707.572791][T16475]  tomoyo_encode+0x28b/0x550
[  707.572820][T16475]  tomoyo_realpath_from_path+0x58d/0x5d0
[  707.572861][T16475]  ? tomoyo_path_number_perm+0x219/0x630
[  707.572893][T16475]  tomoyo_path_number_perm+0x246/0x630
[  707.572935][T16475]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  707.572969][T16475]  ? __lock_acquire+0x6b5/0x2cf0
[  707.573025][T16475]  ? __fget_files+0x2a/0x420
[  707.573054][T16475]  ? __fget_files+0x2a/0x420
[  707.573079][T16475]  ? __fget_files+0x3a6/0x420
[  707.573104][T16475]  ? __fget_files+0x2a/0x420
[  707.573135][T16475]  security_file_ioctl+0xc3/0x2a0
[  707.573171][T16475]  __se_sys_ioctl+0x47/0x170
[  707.573207][T16475]  do_syscall_64+0x14d/0xf80
[  707.573237][T16475]  ? trace_irq_disable+0x3b/0x150
[  707.573260][T16475]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.573281][T16475]  ? clear_bhb_loop+0x40/0x90
[  707.573305][T16475]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.573327][T16475] RIP: 0033:0x7f30aa05c799
[  707.573346][T16475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.573363][T16475] RSP: 002b:00007f30a82ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  707.573386][T16475] RAX: ffffffffffffffda RBX: 00007f30aa2d5fa0 RCX: 00007f30aa05c799
[  707.573401][T16475] RDX: 0000200000000040 RSI: 0000000040085112 RDI: 0000000000000004
[  707.573415][T16475] RBP: 00007f30a82ae090 R08: 0000000000000000 R09: 0000000000000000
[  707.573428][T16475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  707.573440][T16475] R13: 00007f30aa2d6038 R14: 00007f30aa2d5fa0 R15: 00007ffdb7819458
[  707.573472][T16475]  </TASK>
[  707.573711][T16475] ERROR: Out of memory at tomoyo_realpath_from_path.
[  707.636391][T16436] raw-gadget.1 gadget.5: failed to queue resume event
[  707.661499][ T1450] raw-gadget.1 gadget.5: failed to queue suspend event
[  707.877905][T16436] raw-gadget.1 gadget.5: failed to queue disconnect event
[  707.983639][T15461] usb 6-1: USB disconnect, device number 53
[  708.236101][T16485] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3813'.
[  708.500057][T16494] FAULT_INJECTION: forcing a failure.
[  708.500057][T16494] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  708.500091][T16494] CPU: 0 UID: 0 PID: 16494 Comm: syz.1.3819 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  708.500118][T16494] Tainted: [L]=SOFTLOCKUP
[  708.500125][T16494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  708.500137][T16494] Call Trace:
[  708.500145][T16494]  <TASK>
[  708.500153][T16494]  dump_stack_lvl+0xe8/0x150
[  708.500188][T16494]  should_fail_ex+0x46b/0x600
[  708.500218][T16494]  _copy_from_user+0x2d/0xb0
[  708.500247][T16494]  ___sys_recvmsg+0x175/0x590
[  708.500267][T16494]  ? __lock_acquire+0x6b5/0x2cf0
[  708.500292][T16494]  ? __pfx____sys_recvmsg+0x10/0x10
[  708.500348][T16494]  do_recvmmsg+0x33a/0x800
[  708.500377][T16494]  ? __pfx_do_recvmmsg+0x10/0x10
[  708.500413][T16494]  ? rt_mutex_slowunlock+0x1cb/0x300
[  708.500452][T16494]  __x64_sys_recvmmsg+0x198/0x250
[  708.500476][T16494]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  708.500508][T16494]  do_syscall_64+0x14d/0xf80
[  708.500536][T16494]  ? trace_irq_disable+0x3b/0x150
[  708.500559][T16494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.500579][T16494]  ? clear_bhb_loop+0x40/0x90
[  708.500604][T16494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.500624][T16494] RIP: 0033:0x7f0e265bc799
[  708.500642][T16494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  708.500659][T16494] RSP: 002b:00007f0e2480e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  708.500679][T16494] RAX: ffffffffffffffda RBX: 00007f0e26835fa0 RCX: 00007f0e265bc799
[  708.500693][T16494] RDX: 04000000000001e9 RSI: 0000200000000d80 RDI: 0000000000000003
[  708.500706][T16494] RBP: 00007f0e2480e090 R08: 0000000000000000 R09: 0000000000000000
[  708.500719][T16494] R10: 0000000000010162 R11: 0000000000000246 R12: 0000000000000001
[  708.500731][T16494] R13: 00007f0e26836038 R14: 00007f0e26835fa0 R15: 00007ffda94ccfd8
[  708.500762][T16494]  </TASK>
[  708.973677][T16501] FAULT_INJECTION: forcing a failure.
[  708.973677][T16501] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  708.973716][T16501] CPU: 0 UID: 0 PID: 16501 Comm: syz.5.3821 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  708.973759][T16501] Tainted: [L]=SOFTLOCKUP
[  708.973766][T16501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  708.973779][T16501] Call Trace:
[  708.973787][T16501]  <TASK>
[  708.973795][T16501]  dump_stack_lvl+0xe8/0x150
[  708.973826][T16501]  should_fail_ex+0x46b/0x600
[  708.973867][T16501]  _copy_from_user+0x2d/0xb0
[  708.973891][T16501]  smc_setsockopt+0x3c5/0xac0
[  708.973990][T16501]  ? __pfx_smc_setsockopt+0x10/0x10
[  708.974010][T16501]  ? __pfx_smc_setsockopt+0x10/0x10
[  708.974042][T16501]  ? do_sock_setsockopt+0x15e/0x1b0
[  708.974067][T16501]  ? __pfx_smc_setsockopt+0x10/0x10
[  708.974088][T16501]  do_sock_setsockopt+0x17c/0x1b0
[  708.974114][T16501]  __x64_sys_setsockopt+0x143/0x1b0
[  708.974140][T16501]  do_syscall_64+0x14d/0xf80
[  708.974163][T16501]  ? trace_irq_disable+0x3b/0x150
[  708.974181][T16501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.974197][T16501]  ? clear_bhb_loop+0x40/0x90
[  708.974216][T16501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.974232][T16501] RIP: 0033:0x7fef8953c799
[  708.974246][T16501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  708.974260][T16501] RSP: 002b:00007fef8778e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  708.974277][T16501] RAX: ffffffffffffffda RBX: 00007fef897b5fa0 RCX: 00007fef8953c799
[  708.974296][T16501] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000004
[  708.974306][T16501] RBP: 00007fef8778e090 R08: 0000000000000044 R09: 0000000000000000
[  708.974316][T16501] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[  708.974326][T16501] R13: 00007fef897b6038 R14: 00007fef897b5fa0 R15: 00007ffcfc996cc8
[  708.974349][T16501]  </TASK>
[  709.836540][T16526] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3825'.
[  710.756237][T16535] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3831'.
[  711.266040][T16541] syz.5.3834 (16541) used greatest stack depth: 15496 bytes left
[  712.015807][T16561] FAULT_INJECTION: forcing a failure.
[  712.015807][T16561] name failslab, interval 1, probability 0, space 0, times 0
[  712.015847][T16561] CPU: 0 UID: 0 PID: 16561 Comm: syz.8.3841 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  712.015879][T16561] Tainted: [L]=SOFTLOCKUP
[  712.015887][T16561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  712.015901][T16561] Call Trace:
[  712.015910][T16561]  <TASK>
[  712.015921][T16561]  dump_stack_lvl+0xe8/0x150
[  712.015961][T16561]  should_fail_ex+0x46b/0x600
[  712.015995][T16561]  should_failslab+0xa8/0x100
[  712.016019][T16561]  __kmalloc_noprof+0xdf/0x7b0
[  712.016058][T16561]  ? tomoyo_encode+0x28b/0x550
[  712.016090][T16561]  tomoyo_encode+0x28b/0x550
[  712.016131][T16561]  tomoyo_realpath_from_path+0x58d/0x5d0
[  712.016169][T16561]  ? tomoyo_path_number_perm+0x219/0x630
[  712.016204][T16561]  tomoyo_path_number_perm+0x246/0x630
[  712.016243][T16561]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  712.016282][T16561]  ? __lock_acquire+0x6b5/0x2cf0
[  712.016345][T16561]  ? __fget_files+0x2a/0x420
[  712.016379][T16561]  ? __fget_files+0x2a/0x420
[  712.016406][T16561]  ? __fget_files+0x3a6/0x420
[  712.016434][T16561]  ? __fget_files+0x2a/0x420
[  712.016469][T16561]  security_file_ioctl+0xc3/0x2a0
[  712.016509][T16561]  __se_sys_ioctl+0x47/0x170
[  712.016549][T16561]  do_syscall_64+0x14d/0xf80
[  712.016585][T16561]  ? trace_irq_disable+0x3b/0x150
[  712.016613][T16561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.016649][T16561]  ? clear_bhb_loop+0x40/0x90
[  712.016677][T16561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.016711][T16561] RIP: 0033:0x7f097565c799
[  712.016730][T16561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.016748][T16561] RSP: 002b:00007f09738b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  712.016769][T16561] RAX: ffffffffffffffda RBX: 00007f09758d5fa0 RCX: 00007f097565c799
[  712.016784][T16561] RDX: 0000200000000040 RSI: 000000004020aed2 RDI: 0000000000000004
[  712.016797][T16561] RBP: 00007f09738b6090 R08: 0000000000000000 R09: 0000000000000000
[  712.016809][T16561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  712.016820][T16561] R13: 00007f09758d6038 R14: 00007f09758d5fa0 R15: 00007fff074543a8
[  712.016852][T16561]  </TASK>
[  712.031622][T16561] ERROR: Out of memory at tomoyo_realpath_from_path.
[  712.578200][T16567] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3842'.
[  713.733875][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  713.752057][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  713.756788][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  713.774080][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  713.791286][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  714.086956][   T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.301100][T16601] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3852'.
[  714.525810][ T5808] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  714.562375][   T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.633659][T16607] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3857'.
[  714.677984][ T5808] usb 6-1: Using ep0 maxpacket: 32
[  714.680150][ T5808] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  714.680174][ T5808] usb 6-1: config 0 has no interface number 0
[  714.682530][ T5808] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  714.682554][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.682571][ T5808] usb 6-1: Product: syz
[  714.682586][ T5808] usb 6-1: Manufacturer: syz
[  714.682595][ T5808] usb 6-1: SerialNumber: syz
[  714.694143][ T5808] usb 6-1: config 0 descriptor??
[  714.704225][ T5808] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  715.258152][T16614] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3858'.
[  716.151154][ T5813] Bluetooth: hci0: command tx timeout
[  716.182545][   T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  716.728319][ T5808] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  716.886365][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  716.950309][ T5808] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  716.979118][ T5808] usb 6-1: USB disconnect, device number 54
[  716.994714][ T5808] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  717.000121][ T5808] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  717.001106][ T5808] quatech2 6-1:0.51: device disconnected
[  717.320560][   T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.713938][T16586] chnl_net:caif_netlink_parms(): no params data found
[  719.354132][ T5813] Bluetooth: hci0: command tx timeout
[  719.644585][T16652] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3868'.
[  719.773668][T16586] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.774050][T16586] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.774227][T16586] bridge_slave_0: entered allmulticast mode
[  719.776814][T16586] bridge_slave_0: entered promiscuous mode
[  719.785695][T16586] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.786235][T16586] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.786754][T16586] bridge_slave_1: entered allmulticast mode
[  719.828704][T16586] bridge_slave_1: entered promiscuous mode
[  719.849443][T16662] CIFS: iocharset name too long
[  720.187689][T16586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  720.199068][T16666] bridge0: entered promiscuous mode
[  720.199247][T16666] macvlan2: entered allmulticast mode
[  720.199262][T16666] bridge0: entered allmulticast mode
[  720.201264][T16666] bridge0: port 3(macvlan2) entered blocking state
[  720.201479][T16666] bridge0: port 3(macvlan2) entered disabled state
[  720.369457][T16674] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3871'.
[  720.426695][T16666] bridge0: left allmulticast mode
[  720.431195][T16666] bridge0: left promiscuous mode
[  721.031939][T16678] FAULT_INJECTION: forcing a failure.
[  721.031939][T16678] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  721.031964][T16678] CPU: 1 UID: 0 PID: 16678 Comm: syz.7.3873 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  721.031983][T16678] Tainted: [L]=SOFTLOCKUP
[  721.031989][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  721.031997][T16678] Call Trace:
[  721.032003][T16678]  <TASK>
[  721.032009][T16678]  dump_stack_lvl+0xe8/0x150
[  721.032034][T16678]  should_fail_ex+0x46b/0x600
[  721.032055][T16678]  _copy_to_user+0x31/0xb0
[  721.032077][T16678]  simple_read_from_buffer+0xe1/0x170
[  721.032098][T16678]  proc_fail_nth_read+0x1be/0x230
[  721.032118][T16678]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  721.032140][T16678]  ? rw_verify_area+0x2ac/0x4e0
[  721.032160][T16678]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  721.032177][T16678]  vfs_read+0x212/0xa80
[  721.032203][T16678]  ? __pfx_vfs_read+0x10/0x10
[  721.032224][T16678]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  721.032246][T16678]  ? lockdep_hardirqs_on+0x7a/0x110
[  721.032267][T16678]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  721.032288][T16678]  ? mutex_lock_nested+0x152/0x1d0
[  721.032304][T16678]  ? fdget_pos+0x252/0x320
[  721.032327][T16678]  ksys_read+0x156/0x270
[  721.032349][T16678]  ? __pfx_ksys_read+0x10/0x10
[  721.032367][T16678]  ? fput+0xa0/0xd0
[  721.032390][T16678]  do_syscall_64+0x14d/0xf80
[  721.032410][T16678]  ? trace_irq_disable+0x3b/0x150
[  721.032427][T16678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.032441][T16678]  ? clear_bhb_loop+0x40/0x90
[  721.032464][T16678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.032478][T16678] RIP: 0033:0x7f30aa01cfce
[  721.032492][T16678] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  721.032503][T16678] RSP: 002b:00007f30a82adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  721.032518][T16678] RAX: ffffffffffffffda RBX: 00007f30a82ae6c0 RCX: 00007f30aa01cfce
[  721.032529][T16678] RDX: 000000000000000f RSI: 00007f30a82ae0a0 RDI: 0000000000000004
[  721.032538][T16678] RBP: 00007f30a82ae090 R08: 0000000000000000 R09: 0000000000000000
[  721.032547][T16678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  721.032556][T16678] R13: 00007f30aa2d6038 R14: 00007f30aa2d5fa0 R15: 00007ffdb7819458
[  721.032577][T16678]  </TASK>
[  721.271479][ T5813] Bluetooth: hci0: command tx timeout
[  721.308880][T16586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  721.649288][T16586] team0: Port device team_slave_0 added
[  721.662674][T16586] team0: Port device team_slave_1 added
[  721.824141][T16586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  721.824158][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  721.824182][T16586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  721.826180][T16586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  721.826195][T16586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  721.826224][T16586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  721.957826][T16692] comedi: No check for data length of config insn id 3 is implemented
[  721.957864][T16692] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  721.957916][T16692] comedi: Assuming n=15 is correct
[  722.863127][   T41] bridge_slave_1: left allmulticast mode
[  722.863158][   T41] bridge_slave_1: left promiscuous mode
[  722.863403][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.908780][ T5878] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  722.940759][   T41] bridge_slave_0: left allmulticast mode
[  722.940787][   T41] bridge_slave_0: left promiscuous mode
[  722.941060][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.971833][T16699] overlayfs: overlapping lowerdir path
[  723.050746][ T5878] usb 9-1: Using ep0 maxpacket: 16
[  723.053608][ T5878] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  723.053636][ T5878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.088902][ T5878] usb 9-1: config 0 descriptor??
[  723.103781][ T5878] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  723.231748][ T5858] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  723.251780][ T5813] Bluetooth: hci0: command tx timeout
[  723.374640][ T5858] usb 3-1: Using ep0 maxpacket: 8
[  723.440468][ T5878] usb 9-1: Detected FT232B
[  723.532767][T16707] 9p: Bad value for 'rfdno'
[  724.308611][ T5811] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  724.454971][ T5878] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  724.482991][ T5878] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  724.485595][ T5811] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  724.485652][ T5811] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  724.485682][ T5811] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  724.485734][ T5811] usb 8-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  724.485761][ T5811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  724.609571][ T5811] usb 8-1: config 0 descriptor??
[  724.625058][ T5878] usb 9-1: USB disconnect, device number 11
[  724.692864][ T5878] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  724.695494][ T5878] ftdi_sio 9-1:0.0: device disconnected
[  724.829142][ T5858] usb 3-1: unable to get BOS descriptor or descriptor too short
[  724.830130][ T5858] usb 3-1: unable to read config index 0 descriptor/start: -71
[  724.830166][ T5858] usb 3-1: can't read configurations, error -71
[  724.925901][T16715] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3883'.
[  725.016305][ T5811] hid-rmi 0003:0461:4E72.000F: unknown main item tag 0x6
[  725.016346][ T5811] hid-rmi 0003:0461:4E72.000F: item fetching failed at offset 9/11
[  725.017070][ T5811] hid-rmi 0003:0461:4E72.000F: parse failed
[  725.017161][ T5811] hid-rmi 0003:0461:4E72.000F: probe with driver hid-rmi failed with error -22
[  725.178710][T16717] netlink: 'syz.8.3884': attribute type 10 has an invalid length.
[  725.235672][T16718] netlink: 'syz.8.3884': attribute type 10 has an invalid length.
[  725.491579][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  725.712716][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  725.749609][T16723] openvswitch: netlink: IP tunnel dst address not specified
[  725.846171][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3885'.
[  725.846243][T16724] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3885'.
[  726.528889][   T41] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  726.570725][   T41] bond0 (unregistering): Released all slaves
[  726.899426][ T5858] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  726.938166][T16717] bond0: (slave dummy0): Releasing backup interface
[  726.965881][ T5808] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  726.989163][T16717] team0: Port device dummy0 added
[  727.012400][ T5811] usb 8-1: USB disconnect, device number 34
[  727.039380][T16718] team0: Port device dummy0 removed
[  727.059479][T16718] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  727.127740][ T5808] usb 6-1: Using ep0 maxpacket: 32
[  727.132343][ T5808] usb 6-1: unable to get BOS descriptor or descriptor too short
[  727.133570][ T5808] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  727.160504][ T5808] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  727.160530][ T5808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.160551][ T5808] usb 6-1: Product: syz
[  727.160565][ T5808] usb 6-1: Manufacturer: syz
[  727.160580][ T5808] usb 6-1: SerialNumber: syz
[  727.243907][T16743] openvswitch: netlink: IP tunnel dst address not specified
[  727.410246][   T36] audit: type=1326 audit(1773734665.217:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16746 comm="syz.8.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097565c799 code=0x7ffc0000
[  727.410304][   T36] audit: type=1326 audit(1773734665.217:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16746 comm="syz.8.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097565c799 code=0x7ffc0000
[  727.410832][   T36] audit: type=1326 audit(1773734665.217:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16746 comm="syz.8.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097565c799 code=0x7ffc0000
[  727.410885][   T36] audit: type=1326 audit(1773734665.217:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16746 comm="syz.8.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f097565c799 code=0x7ffc0000
[  727.411323][   T36] audit: type=1326 audit(1773734665.217:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16746 comm="syz.8.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097565c799 code=0x7ffc0000
[  727.411729][   T36] audit: type=1326 audit(1773734665.217:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16746 comm="syz.8.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f097565c799 code=0x7ffc0000
[  727.411828][   T36] audit: type=1326 audit(1773734665.217:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16746 comm="syz.8.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097565c799 code=0x7ffc0000
[  727.436916][   T36] audit: type=1326 audit(1773734665.249:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16746 comm="syz.8.3891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f097565c799 code=0x7ffc0000
[  727.709086][ T5808] usb 6-1: Cannot retrieve CPort count: -110
[  727.709132][ T5808] usb 6-1: Cannot retrieve CPort count: -110
[  727.709165][ T5808] es2_ap_driver 6-1:7.0: probe with driver es2_ap_driver failed with error -110
[  727.821713][T16732] netlink: 'syz.5.3888': attribute type 62 has an invalid length.
[  727.847413][T16756] overlayfs: overlapping lowerdir path
[  727.967853][T16586] hsr_slave_0: entered promiscuous mode
[  727.973814][T16586] hsr_slave_1: entered promiscuous mode
[  727.988168][T16586] debugfs: 'hsr0' already exists in 'hsr'
[  727.988187][T16586] Cannot create hsr debugfs directory
[  728.145640][ T5878] usb 6-1: USB disconnect, device number 55
[  728.147848][ T5858] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  728.299057][T16764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3894'.
[  728.299689][ T5858] usb 9-1: Using ep0 maxpacket: 8
[  728.318488][ T7997] usb 8-1: new full-speed USB device number 35 using dummy_hcd
[  728.463522][ T7997] usb 8-1: config 0 has no interfaces?
[  728.466008][ T7997] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  728.466083][ T7997] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.466100][ T7997] usb 8-1: Product: syz
[  728.466112][ T7997] usb 8-1: Manufacturer: syz
[  728.466124][ T7997] usb 8-1: SerialNumber: syz
[  728.554942][ T7997] usb 8-1: config 0 descriptor??
[  728.804041][   T41] hsr_slave_0: left promiscuous mode
[  728.821848][T16761] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3893'.
[  728.834480][   T41] hsr_slave_1: left promiscuous mode
[  728.836211][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  728.836239][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[  728.894703][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  728.894729][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[  728.970456][ T5858] usb 9-1: unable to get BOS descriptor or descriptor too short
[  728.971534][ T5858] usb 9-1: unable to read config index 0 descriptor/start: -71
[  728.971571][ T5858] usb 9-1: can't read configurations, error -71
[  729.027568][   T41] veth1_macvtap: left promiscuous mode
[  729.027680][   T41] veth0_macvtap: left promiscuous mode
[  729.027947][   T41] veth1_vlan: left promiscuous mode
[  729.051964][   T41] veth0_vlan: left promiscuous mode
[  729.459644][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3897'.
[  729.459712][T16778] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3897'.
[  730.769602][T16786] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3896'.
[  730.769628][T16786] openvswitch: netlink: Flow key attr not present in new flow.
[  731.304886][   T41] team0 (unregistering): Port device team_slave_1 removed
[  731.339511][   T41] team0 (unregistering): Port device team_slave_0 removed
[  731.669131][T16761] vlan2: entered promiscuous mode
[  731.669153][T16761] dummy0: entered promiscuous mode
[  731.672639][T16791] netlink: 'syz.8.3899': attribute type 10 has an invalid length.
[  731.723785][T16792] netlink: 'syz.8.3899': attribute type 10 has an invalid length.
[  731.844787][T16791] bond0: (slave dummy0): Releasing backup interface
[  731.911968][T16791] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  731.912130][T16791] team0: Failed to send options change via netlink (err -105)
[  731.912148][T16791] team0: Port device dummy0 added
[  731.958365][T16792] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  732.018353][T16792] team0: Failed to send options change via netlink (err -105)
[  732.018540][T16792] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  732.033132][T16792] team0: Port device dummy0 removed
[  732.061762][T16792] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  732.083114][   T36] audit: type=1326 audit(1773734670.131:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16793 comm="syz.5.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8953c799 code=0x7ffc0000
[  732.083161][   T36] audit: type=1326 audit(1773734670.131:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16793 comm="syz.5.3901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8953c799 code=0x7ffc0000
[  732.279015][    T9] usb 8-1: USB disconnect, device number 35
[  732.804133][T16808] overlayfs: overlapping lowerdir path
[  732.894684][T16814] netlink: 'syz.8.3907': attribute type 1 has an invalid length.
[  732.894741][T16814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  732.949137][    T9] usb 6-1: new full-speed USB device number 56 using dummy_hcd
[  733.131686][    T9] usb 6-1: config 0 has no interfaces?
[  733.133851][    T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  733.133878][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.133898][    T9] usb 6-1: Product: syz
[  733.133912][    T9] usb 6-1: Manufacturer: syz
[  733.133927][    T9] usb 6-1: SerialNumber: syz
[  733.176997][ T5878] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  733.215048][    T9] usb 6-1: config 0 descriptor??
[  733.254171][T16586] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  733.280406][T16586] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  733.354781][ T5878] usb 3-1: Using ep0 maxpacket: 8
[  733.378960][T16823] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3910'.
[  733.512552][T16586] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  733.623793][T16806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3905'.
[  733.921149][T16806] vlan2: entered promiscuous mode
[  734.016988][ T5878] usb 3-1: unable to get BOS descriptor or descriptor too short
[  734.018036][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -71
[  734.018070][ T5878] usb 3-1: can't read configurations, error -71
[  734.057129][   T36] kauditd_printk_skb: 8 callbacks suppressed
[  734.057146][   T36] audit: type=1326 audit(1773734672.157:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16830 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa05c799 code=0x7ffc0000
[  734.057190][   T36] audit: type=1326 audit(1773734672.199:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16830 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa05c799 code=0x7ffc0000
[  734.057232][   T36] audit: type=1326 audit(1773734672.199:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16830 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa05c799 code=0x7ffc0000
[  734.058231][   T36] audit: type=1326 audit(1773734672.199:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16830 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa05c799 code=0x7ffc0000
[  734.058275][   T36] audit: type=1326 audit(1773734672.199:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16830 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa05c799 code=0x7ffc0000
[  734.058317][   T36] audit: type=1326 audit(1773734672.199:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16830 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f30aa05c799 code=0x7ffc0000
[  734.101204][   T36] audit: type=1326 audit(1773734672.230:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16830 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa05c799 code=0x7ffc0000
[  734.101329][   T36] audit: type=1326 audit(1773734672.230:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16830 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa05c799 code=0x7ffc0000
[  734.101426][   T36] audit: type=1326 audit(1773734672.230:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16830 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f30aa05c799 code=0x7ffc0000
[  734.101537][   T36] audit: type=1326 audit(1773734672.230:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16830 comm="syz.7.3912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f30aa05c799 code=0x7ffc0000
[  734.394402][T16586] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  734.579459][ T5808] usb 6-1: USB disconnect, device number 56
[  734.852121][T16852] FAULT_INJECTION: forcing a failure.
[  734.852121][T16852] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  734.852157][T16852] CPU: 0 UID: 0 PID: 16852 Comm: syz.2.3915 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  734.852184][T16852] Tainted: [L]=SOFTLOCKUP
[  734.852192][T16852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  734.852205][T16852] Call Trace:
[  734.852212][T16852]  <TASK>
[  734.852221][T16852]  dump_stack_lvl+0xe8/0x150
[  734.852257][T16852]  should_fail_ex+0x46b/0x600
[  734.852288][T16852]  _copy_from_user+0x2d/0xb0
[  734.852319][T16852]  get_user_ifreq+0x6b/0x180
[  734.852346][T16852]  sock_ioctl+0x707/0x7f0
[  734.852371][T16852]  ? __pfx_sock_ioctl+0x10/0x10
[  734.852397][T16852]  ? __fget_files+0x3a6/0x420
[  734.852422][T16852]  ? __fget_files+0x2a/0x420
[  734.852451][T16852]  ? bpf_lsm_file_ioctl+0x9/0x20
[  734.852479][T16852]  ? __pfx_sock_ioctl+0x10/0x10
[  734.852502][T16852]  __se_sys_ioctl+0xff/0x170
[  734.852536][T16852]  do_syscall_64+0x14d/0xf80
[  734.852563][T16852]  ? trace_irq_disable+0x3b/0x150
[  734.852586][T16852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.852607][T16852]  ? clear_bhb_loop+0x40/0x90
[  734.852631][T16852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.852650][T16852] RIP: 0033:0x7fd2cff9c799
[  734.852669][T16852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  734.852687][T16852] RSP: 002b:00007fd2ce1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  734.852709][T16852] RAX: ffffffffffffffda RBX: 00007fd2d0215fa0 RCX: 00007fd2cff9c799
[  734.852723][T16852] RDX: 0000200000000040 RSI: 00000000000089fb RDI: 0000000000000003
[  734.852735][T16852] RBP: 00007fd2ce1f6090 R08: 0000000000000000 R09: 0000000000000000
[  734.852747][T16852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  734.852759][T16852] R13: 00007fd2d0216038 R14: 00007fd2d0215fa0 R15: 00007ffe3fd47828
[  734.852789][T16852]  </TASK>
[  735.133155][T16586] 8021q: adding VLAN 0 to HW filter on device bond0
[  735.268134][T16586] 8021q: adding VLAN 0 to HW filter on device team0
[  735.379270][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.379488][ T7106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  735.421353][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.421531][ T7106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  735.567458][ T5878] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  735.770173][ T5878] usb 3-1: Using ep0 maxpacket: 16
[  735.772786][ T5878] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  735.772811][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  735.800615][ T5878] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  735.800644][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.800665][ T5878] usb 3-1: Product: syz
[  735.800679][ T5878] usb 3-1: Manufacturer: syz
[  735.800694][ T5878] usb 3-1: SerialNumber: syz
[  736.072772][ T5878] usb 3-1: cannot find UAC_HEADER
[  736.198529][ T5878] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  736.267308][ T5814] usb 3-1: USB disconnect, device number 97
[  736.383628][ T8141] udevd[8141]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  736.487154][T16883] overlayfs: overlapping lowerdir path
[  736.613101][T16586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  736.749779][ T5808] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  736.911068][ T5808] usb 8-1: Using ep0 maxpacket: 8
[  737.513461][ T5808] usb 8-1: unable to get BOS descriptor or descriptor too short
[  737.514423][ T5808] usb 8-1: unable to read config index 0 descriptor/start: -71
[  737.514457][ T5808] usb 8-1: can't read configurations, error -71
[  737.750834][T16586] veth0_vlan: entered promiscuous mode
[  737.878044][T16923] overlayfs: missing 'lowerdir'
[  738.178248][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3929'.
[  738.178316][T16929] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3929'.
[  738.849587][T16586] veth1_vlan: entered promiscuous mode
[  738.915793][T16586] veth0_macvtap: entered promiscuous mode
[  738.933273][T16586] veth1_macvtap: entered promiscuous mode
[  738.958636][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  738.958704][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  739.123642][T16586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  739.164634][T16586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  739.250222][ T7110] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  739.250716][ T7110] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  739.251112][ T7110] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  739.256128][ T7110] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  740.002390][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  740.002411][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  740.129988][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  740.130018][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  740.227034][T16956] overlayfs: overlapping lowerdir path
[  740.520716][ T6026] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  740.692407][ T6026] usb 9-1: Using ep0 maxpacket: 8
[  740.934888][ T5813] Bluetooth: hci2: command 0x0406 tx timeout
[  741.511079][T16977] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  741.554117][ T6026] usb 9-1: unable to get BOS descriptor or descriptor too short
[  741.555257][ T6026] usb 9-1: unable to read config index 0 descriptor/start: -71
[  741.555294][ T6026] usb 9-1: can't read configurations, error -71
[  741.826975][T16984] overlayfs: missing 'lowerdir'
[  741.903206][T16991] FAULT_INJECTION: forcing a failure.
[  741.903206][T16991] name failslab, interval 1, probability 0, space 0, times 0
[  741.909068][T16991] CPU: 0 UID: 0 PID: 16991 Comm: syz.2.3946 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  741.909105][T16991] Tainted: [L]=SOFTLOCKUP
[  741.909114][T16991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  741.909129][T16991] Call Trace:
[  741.909138][T16991]  <TASK>
[  741.909149][T16991]  dump_stack_lvl+0xe8/0x150
[  741.909191][T16991]  should_fail_ex+0x46b/0x600
[  741.909228][T16991]  should_failslab+0xa8/0x100
[  741.909254][T16991]  kmem_cache_alloc_lru_noprof+0x8b/0x680
[  741.909290][T16991]  ? __d_alloc+0x37/0x6f0
[  741.909328][T16991]  __d_alloc+0x37/0x6f0
[  741.909368][T16991]  d_alloc+0x4b/0x190
[  741.909397][T16991]  ? lookup_one_qstr_excl+0xc8/0x360
[  741.909429][T16991]  lookup_one_qstr_excl+0xdc/0x360
[  741.909465][T16991]  start_dirop+0x5c/0x90
[  741.909495][T16991]  simple_start_creating+0xcc/0x110
[  741.909528][T16991]  ? __pfx_simple_start_creating+0x10/0x10
[  741.909573][T16991]  ? mntput+0x65/0xc0
[  741.909603][T16991]  debugfs_start_creating+0xdb/0x1a0
[  741.909639][T16991]  __debugfs_create_file+0x6f/0x400
[  741.909676][T16991]  debugfs_create_file_full+0x3f/0x60
[  741.909713][T16991]  ref_tracker_dir_debugfs+0x19d/0x370
[  741.909744][T16991]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  741.909804][T16991]  ? __kvmalloc_node_noprof+0x3df/0x8e0
[  741.909840][T16991]  alloc_netdev_mqs+0x277/0x11b0
[  741.909960][T16991]  ? __pfx_reg_vif_setup+0x10/0x10
[  741.910077][T16991]  vif_add+0x5b3/0x16c0
[  741.910126][T16991]  ? __pfx_vif_add+0x10/0x10
[  741.910147][T16991]  ? unwind_get_return_address+0x4d/0x90
[  741.910169][T16991]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  741.910233][T16991]  ip_mroute_setsockopt+0xeb4/0xff0
[  741.910268][T16991]  ? __pfx_ip_mroute_setsockopt+0x10/0x10
[  741.910316][T16991]  do_ip_setsockopt+0xf1e/0x2ea0
[  741.910408][T16991]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  741.910442][T16991]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  741.910477][T16991]  ? lockdep_hardirqs_on+0x7a/0x110
[  741.910526][T16991]  ? __fget_files+0x2a/0x420
[  741.910560][T16991]  ip_setsockopt+0x66/0x110
[  741.910600][T16991]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  741.910634][T16991]  do_sock_setsockopt+0x17c/0x1b0
[  741.910675][T16991]  __x64_sys_setsockopt+0x143/0x1b0
[  741.910716][T16991]  do_syscall_64+0x14d/0xf80
[  741.910748][T16991]  ? trace_irq_disable+0x3b/0x150
[  741.910786][T16991]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.910809][T16991]  ? clear_bhb_loop+0x40/0x90
[  741.910835][T16991]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  741.910858][T16991] RIP: 0033:0x7fd2cff9c799
[  741.910878][T16991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  741.910896][T16991] RSP: 002b:00007fd2ce1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  741.910919][T16991] RAX: ffffffffffffffda RBX: 00007fd2d0215fa0 RCX: 00007fd2cff9c799
[  741.910934][T16991] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003
[  741.910947][T16991] RBP: 00007fd2ce1f6090 R08: 0000000000000010 R09: 0000000000000000
[  741.910960][T16991] R10: 0000200000002080 R11: 0000000000000246 R12: 0000000000000001
[  741.910973][T16991] R13: 00007fd2d0216038 R14: 00007fd2d0215fa0 R15: 00007ffe3fd47828
[  741.911006][T16991]  </TASK>
[  742.347206][T16991] pimreg: entered allmulticast mode
[  742.512767][T16996] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3944'.
[  742.512835][T16996] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3944'.
[  743.808413][T17012] FAULT_INJECTION: forcing a failure.
[  743.808413][T17012] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  743.808448][T17012] CPU: 0 UID: 0 PID: 17012 Comm: syz.7.3950 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  743.808475][T17012] Tainted: [L]=SOFTLOCKUP
[  743.808483][T17012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  743.808494][T17012] Call Trace:
[  743.808502][T17012]  <TASK>
[  743.808511][T17012]  dump_stack_lvl+0xe8/0x150
[  743.808545][T17012]  should_fail_ex+0x46b/0x600
[  743.808574][T17012]  _copy_from_user+0x2d/0xb0
[  743.808624][T17012]  ___sys_recvmsg+0x175/0x590
[  743.808664][T17012]  ? __lock_acquire+0x6b5/0x2cf0
[  743.808693][T17012]  ? __pfx____sys_recvmsg+0x10/0x10
[  743.808758][T17012]  do_recvmmsg+0x33a/0x800
[  743.808792][T17012]  ? __pfx_do_recvmmsg+0x10/0x10
[  743.808831][T17012]  ? rt_mutex_slowunlock+0x1cb/0x300
[  743.808877][T17012]  __x64_sys_recvmmsg+0x198/0x250
[  743.808916][T17012]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  743.808955][T17012]  do_syscall_64+0x14d/0xf80
[  743.808987][T17012]  ? trace_irq_disable+0x3b/0x150
[  743.809015][T17012]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.809040][T17012]  ? clear_bhb_loop+0x40/0x90
[  743.809069][T17012]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.809093][T17012] RIP: 0033:0x7f30aa05c799
[  743.809115][T17012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  743.809135][T17012] RSP: 002b:00007f30a82ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  743.809159][T17012] RAX: ffffffffffffffda RBX: 00007f30aa2d5fa0 RCX: 00007f30aa05c799
[  743.809176][T17012] RDX: 0000000000000300 RSI: 0000200000000440 RDI: 0000000000000003
[  743.809190][T17012] RBP: 00007f30a82ae090 R08: 0000000000000000 R09: 0000000000000000
[  743.809205][T17012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  743.809219][T17012] R13: 00007f30aa2d6038 R14: 00007f30aa2d5fa0 R15: 00007ffdb7819458
[  743.809254][T17012]  </TASK>
[  744.217238][ T6026] usb 3-1: new full-speed USB device number 98 using dummy_hcd
[  744.603769][ T6026] usb 3-1: config 0 has no interfaces?
[  744.689884][ T6026] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  744.689915][ T6026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.689935][ T6026] usb 3-1: Product: syz
[  744.689949][ T6026] usb 3-1: Manufacturer: syz
[  744.689963][ T6026] usb 3-1: SerialNumber: syz
[  744.728816][ T6026] usb 3-1: config 0 descriptor??
[  745.180394][T17008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3949'.
[  745.589309][T17008] vlan2: entered promiscuous mode
[  745.589335][T17008] dummy0: entered promiscuous mode
[  745.728007][ T7997] usb 3-1: USB disconnect, device number 98
[  747.207589][T17046] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3959'.
[  747.484163][ T5808] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  747.815312][T17048] binder: 17047:17048 ioctl 4018620d 0 returned -22
[  748.132634][ T5808] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  748.132665][ T5808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.315421][ T5808] usb 8-1: config 0 descriptor??
[  748.436496][ T6026] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  748.502303][T17053] overlayfs: missing 'lowerdir'
[  748.539726][ T5808] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  748.589043][ T6026] usb 9-1: Using ep0 maxpacket: 16
[  748.592996][ T6026] usb 9-1: config 0 has an invalid descriptor of length 241, skipping remainder of the config
[  748.593047][ T6026] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 39163, setting to 1024
[  748.593105][ T6026] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  748.593122][ T6026] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  748.594548][ T6026] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  748.594610][ T6026] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  748.594626][ T6026] usb 9-1: Manufacturer: syz
[  748.620638][ T6026] usb 9-1: config 0 descriptor??
[  748.648734][T17048] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  748.877489][ T5803] Bluetooth: hci2: unexpected event for opcode 0x080b
[  748.932579][ T6026] usb 9-1: USB disconnect, device number 16
[  749.839483][ T5808] [drm:udl_init] *ERROR* Selecting channel failed
[  750.379263][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3968'.
[  750.379463][T17080] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3968'.
[  750.503493][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3967'.
[  750.503835][T17081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3967'.
[  750.874247][ T5808] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2
[  750.874271][ T5808] [drm] Initialized udl on minor 2
[  751.866392][ T5808] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  751.869714][ T5808] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  752.277421][ T6026] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  752.359143][ T5808] usb 8-1: USB disconnect, device number 38
[  752.378086][ T6026] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  752.378655][ T6026] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  752.607071][   T36] audit: type=1326 audit(1773734691.668:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17089 comm="syz.5.3971" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef8953c799 code=0x0
[  752.705618][T17098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3973'.
[  752.748168][ T5803] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  752.748348][ T5803] Bluetooth: hci2: Injecting HCI hardware error event
[  752.751164][ T5803] Bluetooth: hci2: hardware error 0x00
[  753.790591][T17105] overlayfs: missing 'lowerdir'
[  754.097989][T17109] netlink: 'syz.8.3976': attribute type 10 has an invalid length.
[  754.148225][T17112] netlink: 'syz.8.3976': attribute type 10 has an invalid length.
[  754.166669][T17109] bond0: (slave dummy0): Releasing backup interface
[  754.233501][T17109] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  754.233690][T17109] team0: Failed to send options change via netlink (err -105)
[  754.233710][T17109] team0: Port device dummy0 added
[  754.261425][T17112] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  754.304861][T17112] team0: Failed to send options change via netlink (err -105)
[  754.305068][T17112] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  754.305762][T17112] team0: Port device dummy0 removed
[  754.310585][T17112] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  754.607196][T17117] overlayfs: overlapping lowerdir path
[  754.895708][ T5878] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  755.037972][ T5878] usb 8-1: Using ep0 maxpacket: 8
[  755.223906][T17131] FAULT_INJECTION: forcing a failure.
[  755.223906][T17131] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  755.223946][T17131] CPU: 1 UID: 0 PID: 17131 Comm: syz.2.3982 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  755.223980][T17131] Tainted: [L]=SOFTLOCKUP
[  755.224002][T17131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  755.224016][T17131] Call Trace:
[  755.224026][T17131]  <TASK>
[  755.224035][T17131]  dump_stack_lvl+0xe8/0x150
[  755.224074][T17131]  should_fail_ex+0x46b/0x600
[  755.224118][T17131]  _copy_from_user+0x2d/0xb0
[  755.224154][T17131]  media_device_ioctl+0x224/0x4c0
[  755.224280][T17131]  ? __pfx_media_device_ioctl+0x10/0x10
[  755.224340][T17131]  ? __fget_files+0x3a6/0x420
[  755.224368][T17131]  ? __fget_files+0x2a/0x420
[  755.224395][T17131]  ? __pfx_media_device_ioctl+0x10/0x10
[  755.224429][T17131]  ? media_ioctl+0x101/0x120
[  755.224462][T17131]  ? __pfx_media_ioctl+0x10/0x10
[  755.224507][T17131]  __se_sys_ioctl+0xff/0x170
[  755.224542][T17131]  do_syscall_64+0x14d/0xf80
[  755.224571][T17131]  ? trace_irq_disable+0x3b/0x150
[  755.224596][T17131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.224618][T17131]  ? clear_bhb_loop+0x40/0x90
[  755.224644][T17131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  755.224666][T17131] RIP: 0033:0x7fd2cff9c799
[  755.224687][T17131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  755.224705][T17131] RSP: 002b:00007fd2ce1b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  755.224726][T17131] RAX: ffffffffffffffda RBX: 00007fd2d0216180 RCX: 00007fd2cff9c799
[  755.224742][T17131] RDX: 0000200000000280 RSI: 00000000c0487c04 RDI: 0000000000000005
[  755.224755][T17131] RBP: 00007fd2ce1b4090 R08: 0000000000000000 R09: 0000000000000000
[  755.224768][T17131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  755.224781][T17131] R13: 00007fd2d0216218 R14: 00007fd2d0216180 R15: 00007ffe3fd47828
[  755.224814][T17131]  </TASK>
[  755.591554][T17133] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3984'.
[  755.720294][ T5803] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  755.833285][ T5878] usb 8-1: unable to get BOS descriptor or descriptor too short
[  755.836978][ T5878] usb 8-1: unable to read config index 0 descriptor/start: -71
[  755.837002][ T5878] usb 8-1: can't read configurations, error -71
[  756.547447][T17153] FAULT_INJECTION: forcing a failure.
[  756.547447][T17153] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  756.547490][T17153] CPU: 1 UID: 0 PID: 17153 Comm: syz.7.3989 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  756.547516][T17153] Tainted: [L]=SOFTLOCKUP
[  756.547524][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  756.547536][T17153] Call Trace:
[  756.547544][T17153]  <TASK>
[  756.547553][T17153]  dump_stack_lvl+0xe8/0x150
[  756.547587][T17153]  should_fail_ex+0x46b/0x600
[  756.547617][T17153]  _copy_from_iter+0x1d3/0x1670
[  756.547650][T17153]  ? trace_kmem_cache_alloc+0x29/0xf0
[  756.547678][T17153]  ? __alloc_skb+0x27d/0x7d0
[  756.547717][T17153]  ? __pfx__copy_from_iter+0x10/0x10
[  756.547760][T17153]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  756.547793][T17153]  ? __alloc_skb+0x27d/0x7d0
[  756.547829][T17153]  ? netlink_sendmsg+0x650/0xb40
[  756.547859][T17153]  ? skb_put+0x11b/0x210
[  756.547894][T17153]  netlink_sendmsg+0x6c0/0xb40
[  756.547933][T17153]  ? __pfx_netlink_sendmsg+0x10/0x10
[  756.547966][T17153]  ? unwind_get_return_address+0x4d/0x90
[  756.547994][T17153]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  756.548031][T17153]  ____sys_sendmsg+0x94c/0x9c0
[  756.548060][T17153]  ? __pfx_____sys_sendmsg+0x10/0x10
[  756.548092][T17153]  ? import_iovec+0x73/0xa0
[  756.548128][T17153]  ___sys_sendmsg+0x2a5/0x360
[  756.548156][T17153]  ? __pfx____sys_sendmsg+0x10/0x10
[  756.548215][T17153]  ? __fget_files+0x2a/0x420
[  756.548249][T17153]  ? __fget_files+0x3a6/0x420
[  756.548288][T17153]  __x64_sys_sendmsg+0x1c3/0x2a0
[  756.548314][T17153]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  756.548347][T17153]  ? __pfx_ksys_write+0x10/0x10
[  756.548392][T17153]  do_syscall_64+0x14d/0xf80
[  756.548423][T17153]  ? trace_irq_disable+0x3b/0x150
[  756.548454][T17153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.548478][T17153]  ? clear_bhb_loop+0x40/0x90
[  756.548506][T17153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  756.548530][T17153] RIP: 0033:0x7f30aa05c799
[  756.548551][T17153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  756.548571][T17153] RSP: 002b:00007f30a82ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  756.548595][T17153] RAX: ffffffffffffffda RBX: 00007f30aa2d5fa0 RCX: 00007f30aa05c799
[  756.548612][T17153] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  756.548626][T17153] RBP: 00007f30a82ae090 R08: 0000000000000000 R09: 0000000000000000
[  756.548641][T17153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  756.548654][T17153] R13: 00007f30aa2d6038 R14: 00007f30aa2d5fa0 R15: 00007ffdb7819458
[  756.548688][T17153]  </TASK>
[  757.690400][T17157] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  758.401444][    T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  758.552993][    T9] usb 10-1: Using ep0 maxpacket: 8
[  758.570145][    T9] usb 10-1: config index 0 descriptor too short (expected 30, got 18)
[  758.610253][    T9] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  758.610282][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.610302][    T9] usb 10-1: Product: syz
[  758.610325][    T9] usb 10-1: Manufacturer: syz
[  758.610339][    T9] usb 10-1: SerialNumber: syz
[  758.622351][    T9] usb 10-1: config 0 descriptor??
[  758.661072][    T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  758.661204][    T9] usb 10-1: setting power ON
[  758.662733][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  758.693540][T17172] FAULT_INJECTION: forcing a failure.
[  758.693540][T17172] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  758.693573][T17172] CPU: 1 UID: 0 PID: 17172 Comm: syz.8.3994 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  758.693600][T17172] Tainted: [L]=SOFTLOCKUP
[  758.693607][T17172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  758.693619][T17172] Call Trace:
[  758.693628][T17172]  <TASK>
[  758.693637][T17172]  dump_stack_lvl+0xe8/0x150
[  758.693676][T17172]  should_fail_ex+0x46b/0x600
[  758.693707][T17172]  _copy_to_user+0x31/0xb0
[  758.693738][T17172]  simple_read_from_buffer+0xe1/0x170
[  758.693768][T17172]  proc_fail_nth_read+0x1be/0x230
[  758.693796][T17172]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  758.693831][T17172]  ? rw_verify_area+0x2ac/0x4e0
[  758.693859][T17172]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  758.693884][T17172]  vfs_read+0x212/0xa80
[  758.693919][T17172]  ? __pfx_vfs_read+0x10/0x10
[  758.693949][T17172]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  758.693979][T17172]  ? lockdep_hardirqs_on+0x7a/0x110
[  758.694009][T17172]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  758.694039][T17172]  ? mutex_lock_nested+0x152/0x1d0
[  758.694067][T17172]  ? fdget_pos+0x252/0x320
[  758.694101][T17172]  ksys_read+0x156/0x270
[  758.694132][T17172]  ? __pfx_ksys_read+0x10/0x10
[  758.694159][T17172]  ? fput+0xa0/0xd0
[  758.694192][T17172]  do_syscall_64+0x14d/0xf80
[  758.694221][T17172]  ? trace_irq_disable+0x3b/0x150
[  758.694244][T17172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.694265][T17172]  ? clear_bhb_loop+0x40/0x90
[  758.694290][T17172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  758.694311][T17172] RIP: 0033:0x7f097561cfce
[  758.694330][T17172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  758.694349][T17172] RSP: 002b:00007f0973894fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  758.694370][T17172] RAX: ffffffffffffffda RBX: 00007f09738956c0 RCX: 00007f097561cfce
[  758.694385][T17172] RDX: 000000000000000f RSI: 00007f09738950a0 RDI: 0000000000000006
[  758.694398][T17172] RBP: 00007f0973895090 R08: 0000000000000000 R09: 0000000000000000
[  758.694410][T17172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  758.694422][T17172] R13: 00007f09758d6128 R14: 00007f09758d6090 R15: 00007fff074543a8
[  758.694453][T17172]  </TASK>
[  758.882631][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  758.925622][    T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  758.925792][    T9] usb 10-1: media controller created
[  759.235354][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  759.300994][T17166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  759.314263][T17166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  759.355489][T17177] overlayfs: overlapping lowerdir path
[  759.443653][    T9] usb 10-1: selecting invalid altsetting 6
[  759.443678][    T9] usb 10-1: digital interface selection failed (-22)
[  759.443696][    T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  759.445716][    T9] usb 10-1: setting power OFF
[  759.446115][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  759.446137][    T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  759.446153][    T9] (NULL device *): no alternate interface
[  759.639108][   T31] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  759.689336][    T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  759.719920][    T9] usb 10-1: USB disconnect, device number 2
[  759.791171][   T31] usb 9-1: Using ep0 maxpacket: 8
[  759.876972][T15461] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  760.048324][T15461] usb 6-1: Using ep0 maxpacket: 8
[  760.067470][    T9] usb 8-1: new full-speed USB device number 41 using dummy_hcd
[  760.215141][    T9] usb 8-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  760.215172][    T9] usb 8-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[  760.217582][    T9] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  760.217609][    T9] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  760.217631][    T9] usb 8-1: Manufacturer: syz
[  760.217647][    T9] usb 8-1: SerialNumber: syz
[  760.506968][    T9] usb 8-1: USB disconnect, device number 41
[  760.534810][   T31] usb 9-1: unable to get BOS descriptor or descriptor too short
[  760.535979][   T31] usb 9-1: unable to read config index 0 descriptor/start: -71
[  760.536012][   T31] usb 9-1: can't read configurations, error -71
[  760.683437][T15461] usb 6-1: unable to get BOS descriptor or descriptor too short
[  760.684451][T15461] usb 6-1: unable to read config index 0 descriptor/start: -71
[  760.684486][T15461] usb 6-1: can't read configurations, error -71
[  760.982002][    T9] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[  761.296599][T15461] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  761.328814][    T9] usb 8-1: config index 0 descriptor too short (expected 49, got 18)
[  761.328873][    T9] usb 8-1: config 0 has an invalid descriptor of length 215, skipping remainder of the config
[  761.328926][    T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  761.368153][    T9] usb 8-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=eb.c7
[  761.368186][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.368209][    T9] usb 8-1: Product: syz
[  761.368225][    T9] usb 8-1: Manufacturer: syz
[  761.368243][    T9] usb 8-1: SerialNumber: syz
[  761.996499][T17217] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  762.080711][    T9] usb 8-1: config 0 descriptor??
[  762.258645][T15461] usb 6-1: Using ep0 maxpacket: 8
[  762.262613][T15461] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  762.265779][T15461] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  762.265811][T15461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.265835][T15461] usb 6-1: Product: syz
[  762.265852][T15461] usb 6-1: Manufacturer: syz
[  762.265868][T15461] usb 6-1: SerialNumber: syz
[  762.468173][T15461] usb 6-1: config 0 descriptor??
[  762.476581][T15461] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  762.476644][T15461] usb 6-1: setting power ON
[  762.476665][T15461] dvb-usb: bulk message failed: -22 (2/0)
[  762.517759][T15461] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  762.519894][T15461] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  762.519947][T15461] usb 6-1: media controller created
[  762.627626][T15461] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  762.657124][T17239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  762.657656][T17239] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  762.737290][T17207] dvb-usb: bulk message failed: -22 (3/0)
[  762.774801][T15461] usb 6-1: selecting invalid altsetting 6
[  762.774843][T15461] usb 6-1: digital interface selection failed (-22)
[  762.774860][T15461] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  762.788866][T15461] usb 6-1: setting power OFF
[  762.788921][T15461] dvb-usb: bulk message failed: -22 (2/0)
[  762.788964][T15461] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  762.788992][T15461] (NULL device *): no alternate interface
[  762.929793][T17243] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4010'.
[  762.957245][T17241] overlayfs: overlapping lowerdir path
[  762.988426][T15461] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  763.066300][T17245] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode
[  763.086568][T15461] usb 6-1: USB disconnect, device number 58
[  763.204200][T17245] macvlan2: entered promiscuous mode
[  763.270651][T17246] macvlan3: entered promiscuous mode
[  763.306505][   T31] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  763.477697][   T31] usb 3-1: Using ep0 maxpacket: 8
[  764.046011][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[  764.068664][   T31] usb 3-1: unable to read config index 0 descriptor/start: -71
[  764.068701][   T31] usb 3-1: can't read configurations, error -71
[  764.169755][T17306] sg_write: data in/out 988/98 bytes for SCSI command 0x0-- guessing data in;
[  764.169755][T17306]    program syz.9.4017 not setting count and/or reply_len properly
[  764.426280][T17314] netlink: 'syz.5.4018': attribute type 10 has an invalid length.
[  764.523337][T17317] netlink: 'syz.5.4018': attribute type 10 has an invalid length.
[  764.578876][T17314] bond0: (slave dummy0): Releasing backup interface
[  764.698646][T17314] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  764.698803][T17314] team0: Failed to send options change via netlink (err -105)
[  764.698820][T17314] team0: Port device dummy0 added
[  764.700001][T17317] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  764.858348][T17317] team0: Failed to send options change via netlink (err -105)
[  764.868679][T17317] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  764.869106][T17317] team0: Port device dummy0 removed
[  764.872255][T17317] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  764.890447][ T5808] usb 8-1: USB disconnect, device number 42
[  765.421140][ T5858] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[  765.525327][T17346] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4028'.
[  765.567783][ T5858] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  765.571401][ T5858] usb 8-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice= 0.40
[  765.571429][ T5858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.571449][ T5858] usb 8-1: Product: Е
[  765.571463][ T5858] usb 8-1: Manufacturer: 㓶ᖫ岶鋾䟟※匐⺶警枙⾓孊↏庄흲壉嗭鬀뿒看᫣韪㈝ﲢự蔄エﲍ흈쏵팊隱讉䪷ᴞꃏﶯ簌뒺ꞟꁜ㔈閔뗥嘭Ꙓ⾪ᕾ拙멵㖀闳᷂㚃踎蘽嵯覱线玗䙌毇Ⓙꇳ잤㯐姞띔Ტ햵ኣ㙥ꐀ㗗ᦙ딨盩ㇷ쐛雰辐妪ᜍݐ瑬⬥압菿Ӈ䝼僦뙆蘜칣ᨺ숥뙑穎ⵍ췊䮡ḢἏ먴Ꭶ쎣顝펏뻱
[  765.571495][ T5858] usb 8-1: SerialNumber: 䀊
[  766.753291][T17330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.753809][T17330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.761741][T17330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.762534][T17330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.833280][ T5858] usb 8-1: cannot setup if 1: error -71
[  766.833745][ T5858] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71
[  766.867413][ T5858] usb 8-1: cannot setup if 1: error -71
[  766.867891][ T5858] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -71
[  766.892989][ T5858] usb 8-1: cannot setup if 1: error -71
[  766.894036][T17344] Bluetooth: MGMT ver 1.23
[  766.922693][T17362] overlayfs: missing 'lowerdir'
[  766.968590][ T5858] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -71
[  766.984145][ T5858] usb 8-1: USB disconnect, device number 43
[  767.022552][T17363] overlayfs: overlapping lowerdir path
[  767.072117][ T8141] udevd[8141]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  767.183352][ T5808] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  767.244043][T17370] FAULT_INJECTION: forcing a failure.
[  767.244043][T17370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  767.244068][T17370] CPU: 1 UID: 0 PID: 17370 Comm: syz.9.4033 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  767.244088][T17370] Tainted: [L]=SOFTLOCKUP
[  767.244093][T17370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  767.244102][T17370] Call Trace:
[  767.244107][T17370]  <TASK>
[  767.244113][T17370]  dump_stack_lvl+0xe8/0x150
[  767.244138][T17370]  should_fail_ex+0x46b/0x600
[  767.244160][T17370]  _copy_from_user+0x2d/0xb0
[  767.244181][T17370]  do_pagemap_cmd+0x13d/0xc50
[  767.244201][T17370]  ? __pfx_do_pagemap_cmd+0x10/0x10
[  767.244229][T17370]  ? __fget_files+0x2a/0x420
[  767.244247][T17370]  ? __fget_files+0x3a6/0x420
[  767.244263][T17370]  ? __fget_files+0x2a/0x420
[  767.244290][T17370]  ? bpf_lsm_file_ioctl+0x9/0x20
[  767.244305][T17370]  ? __pfx_do_pagemap_cmd+0x10/0x10
[  767.244319][T17370]  __se_sys_ioctl+0xff/0x170
[  767.244342][T17370]  do_syscall_64+0x14d/0xf80
[  767.244362][T17370]  ? trace_irq_disable+0x3b/0x150
[  767.244378][T17370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.244392][T17370]  ? clear_bhb_loop+0x40/0x90
[  767.244409][T17370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.244423][T17370] RIP: 0033:0x7fd8477ac799
[  767.244436][T17370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  767.244448][T17370] RSP: 002b:00007fd845a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  767.244463][T17370] RAX: ffffffffffffffda RBX: 00007fd847a25fa0 RCX: 00007fd8477ac799
[  767.244473][T17370] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000003
[  767.244483][T17370] RBP: 00007fd845a06090 R08: 0000000000000000 R09: 0000000000000000
[  767.244491][T17370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  767.244500][T17370] R13: 00007fd847a26038 R14: 00007fd847a25fa0 R15: 00007ffe8eb4c778
[  767.244521][T17370]  </TASK>
[  767.278857][    T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  767.351537][ T5808] usb 9-1: Using ep0 maxpacket: 32
[  767.462239][ T5808] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  767.462379][ T5808] usb 9-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  767.462458][ T5808] usb 9-1: config 0 interface 0 has no altsetting 0
[  767.462548][ T5808] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  767.462609][ T5808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.479252][    T9] usb 3-1: Using ep0 maxpacket: 8
[  767.546771][ T5808] usb 9-1: config 0 descriptor??
[  767.653967][T17372] FAULT_INJECTION: forcing a failure.
[  767.653967][T17372] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  767.654366][T17372] CPU: 0 UID: 0 PID: 17372 Comm: syz.9.4034 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  767.654394][T17372] Tainted: [L]=SOFTLOCKUP
[  767.654401][T17372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  767.654414][T17372] Call Trace:
[  767.654422][T17372]  <TASK>
[  767.654430][T17372]  dump_stack_lvl+0xe8/0x150
[  767.654469][T17372]  should_fail_ex+0x46b/0x600
[  767.654500][T17372]  strncpy_from_user+0x36/0x2b0
[  767.654526][T17372]  do_getname+0x77/0x250
[  767.654553][T17372]  do_fchownat+0xe3/0x250
[  767.654578][T17372]  ? __pfx_do_fchownat+0x10/0x10
[  767.654600][T17372]  ? __pfx_ksys_write+0x10/0x10
[  767.654638][T17372]  __x64_sys_lchown+0x85/0xa0
[  767.654674][T17372]  do_syscall_64+0x14d/0xf80
[  767.654704][T17372]  ? trace_irq_disable+0x3b/0x150
[  767.654728][T17372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.654749][T17372]  ? clear_bhb_loop+0x40/0x90
[  767.654774][T17372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.654794][T17372] RIP: 0033:0x7fd8477ac799
[  767.654813][T17372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  767.654830][T17372] RSP: 002b:00007fd845a06028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[  767.654851][T17372] RAX: ffffffffffffffda RBX: 00007fd847a25fa0 RCX: 00007fd8477ac799
[  767.654865][T17372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[  767.654877][T17372] RBP: 00007fd845a06090 R08: 0000000000000000 R09: 0000000000000000
[  767.654889][T17372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  767.654903][T17372] R13: 00007fd847a26038 R14: 00007fd847a25fa0 R15: 00007ffe8eb4c778
[  767.654934][T17372]  </TASK>
[  768.092301][ T5808] corsair-psu 0003:1B1C:1C09.0010: unknown main item tag 0x0
[  768.092337][ T5808] corsair-psu 0003:1B1C:1C09.0010: unknown main item tag 0x0
[  768.130862][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  768.132202][    T9] usb 3-1: unable to read config index 0 descriptor/start: -71
[  768.132233][    T9] usb 3-1: can't read configurations, error -71
[  768.189717][ T5877] Process accounting resumed
[  768.202813][ T5808] corsair-psu 0003:1B1C:1C09.0010: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0
[  768.358225][ T5808] corsair-psu 0003:1B1C:1C09.0010: unable to initialize device (-38)
[  768.465105][ T5808] corsair-psu 0003:1B1C:1C09.0010: probe with driver corsair-psu failed with error -38
[  768.482697][ T5808] usb 9-1: USB disconnect, device number 19
[  768.933215][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4040'.
[  768.933262][T17394] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4040'.
[  769.706680][T17396] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4041'.
[  770.778108][T17407] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4045'.
[  770.782831][T17407] netlink: 58 bytes leftover after parsing attributes in process `syz.5.4045'.
[  771.031281][T17414] overlayfs: missing 'lowerdir'
[  771.120716][T17416] overlayfs: overlapping lowerdir path
[  771.374373][ T5808] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  771.451063][T17424] FAULT_INJECTION: forcing a failure.
[  771.451063][T17424] name failslab, interval 1, probability 0, space 0, times 0
[  771.451099][T17424] CPU: 0 UID: 0 PID: 17424 Comm: syz.5.4050 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  771.451126][T17424] Tainted: [L]=SOFTLOCKUP
[  771.451133][T17424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  771.451144][T17424] Call Trace:
[  771.451152][T17424]  <TASK>
[  771.451162][T17424]  dump_stack_lvl+0xe8/0x150
[  771.451197][T17424]  should_fail_ex+0x46b/0x600
[  771.451227][T17424]  should_failslab+0xa8/0x100
[  771.451249][T17424]  kmem_cache_alloc_noprof+0x87/0x680
[  771.451278][T17424]  ? lockdep_hardirqs_on+0x7a/0x110
[  771.451306][T17424]  ? do_getname+0x2e/0x250
[  771.451333][T17424]  do_getname+0x2e/0x250
[  771.451353][T17424]  ? getname_flags+0x11/0x20
[  771.451376][T17424]  do_sys_openat2+0xca/0x200
[  771.451411][T17424]  ? __pfx_do_sys_openat2+0x10/0x10
[  771.451437][T17424]  ? ksys_write+0x248/0x270
[  771.451467][T17424]  ? __pfx_ksys_write+0x10/0x10
[  771.451500][T17424]  __x64_sys_openat+0x138/0x170
[  771.451529][T17424]  do_syscall_64+0x14d/0xf80
[  771.451557][T17424]  ? trace_irq_disable+0x3b/0x150
[  771.451582][T17424]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.451603][T17424]  ? clear_bhb_loop+0x40/0x90
[  771.451628][T17424]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.451648][T17424] RIP: 0033:0x7fef8953c799
[  771.451670][T17424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  771.451689][T17424] RSP: 002b:00007fef8778e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  771.451711][T17424] RAX: ffffffffffffffda RBX: 00007fef897b5fa0 RCX: 00007fef8953c799
[  771.451726][T17424] RDX: 00000000000e2342 RSI: 0000200000000740 RDI: 0000000000000005
[  771.451738][T17424] RBP: 00007fef8778e090 R08: 0000000000000000 R09: 0000000000000000
[  771.451751][T17424] R10: 000000000000016b R11: 0000000000000246 R12: 0000000000000001
[  771.451763][T17424] R13: 00007fef897b6038 R14: 00007fef897b5fa0 R15: 00007ffcfc996cc8
[  771.451793][T17424]  </TASK>
[  771.539436][ T5808] usb 10-1: Using ep0 maxpacket: 8
[  772.209384][T17433] netlink: 'syz.2.4053': attribute type 4 has an invalid length.
[  772.209405][T17433] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4053'.
[  772.451021][ T5808] usb 10-1: unable to get BOS descriptor or descriptor too short
[  772.454678][ T5808] usb 10-1: unable to read config index 0 descriptor/start: -71
[  772.454713][ T5808] usb 10-1: can't read configurations, error -71
[  772.937694][ T5858] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[  773.081970][ T5858] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  773.082001][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.154357][ T5858] usb 8-1: config 0 descriptor??
[  773.511045][ T5858] ath6kl: Failed to submit usb control message: -71
[  773.511094][ T5858] ath6kl: unable to send the bmi data to the device: -71
[  773.511110][ T5858] ath6kl: Unable to send get target info: -71
[  773.546692][ T5858] ath6kl: Failed to init ath6kl core: -71
[  773.548502][ T5858] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71
[  773.602320][ T5858] usb 8-1: USB disconnect, device number 44
[  773.816634][T17478] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4057'.
[  775.903625][T17494] binder: 17492:17494 ioctl c0306201 0 returned -14
[  775.919516][T17495] FAULT_INJECTION: forcing a failure.
[  775.919516][T17495] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  775.919552][T17495] CPU: 1 UID: 0 PID: 17495 Comm: syz.9.4060 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  775.919579][T17495] Tainted: [L]=SOFTLOCKUP
[  775.919586][T17495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  775.919598][T17495] Call Trace:
[  775.919606][T17495]  <TASK>
[  775.919614][T17495]  dump_stack_lvl+0xe8/0x150
[  775.919648][T17495]  should_fail_ex+0x46b/0x600
[  775.919686][T17495]  _copy_from_iter+0x1d3/0x1670
[  775.919720][T17495]  ? trace_kmem_cache_alloc+0x29/0xf0
[  775.919749][T17495]  ? __alloc_skb+0x27d/0x7d0
[  775.919776][T17495]  ? __pfx__copy_from_iter+0x10/0x10
[  775.919800][T17495]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  775.919828][T17495]  ? __alloc_skb+0x27d/0x7d0
[  775.919859][T17495]  ? __alloc_skb+0x4e5/0x7d0
[  775.919884][T17495]  ? skb_put+0x11b/0x210
[  775.919915][T17495]  pfkey_sendmsg+0x265/0x1120
[  775.919947][T17495]  ? smack_socket_sendmsg+0x1a9/0x590
[  775.919971][T17495]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  775.920004][T17495]  ? __lock_acquire+0x6b5/0x2cf0
[  775.920026][T17495]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  775.920053][T17495]  ? __kernel_text_address+0xd/0x30
[  775.920076][T17495]  ? unwind_get_return_address+0x4d/0x90
[  775.920100][T17495]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  775.920131][T17495]  ____sys_sendmsg+0x94c/0x9c0
[  775.920156][T17495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  775.920184][T17495]  ? import_iovec+0x73/0xa0
[  775.920214][T17495]  ___sys_sendmsg+0x2a5/0x360
[  775.920239][T17495]  ? __pfx____sys_sendmsg+0x10/0x10
[  775.920291][T17495]  ? __fget_files+0x2a/0x420
[  775.920315][T17495]  ? __fget_files+0x3a6/0x420
[  775.920348][T17495]  __x64_sys_sendmsg+0x1c3/0x2a0
[  775.920371][T17495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  775.920399][T17495]  ? __pfx_ksys_write+0x10/0x10
[  775.920438][T17495]  do_syscall_64+0x14d/0xf80
[  775.920468][T17495]  ? trace_irq_disable+0x3b/0x150
[  775.920490][T17495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.920510][T17495]  ? clear_bhb_loop+0x40/0x90
[  775.920533][T17495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.920552][T17495] RIP: 0033:0x7fd8477ac799
[  775.920570][T17495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  775.920587][T17495] RSP: 002b:00007fd845a06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  775.920606][T17495] RAX: ffffffffffffffda RBX: 00007fd847a25fa0 RCX: 00007fd8477ac799
[  775.920620][T17495] RDX: 0000000004040840 RSI: 0000200000000040 RDI: 0000000000000003
[  775.920633][T17495] RBP: 00007fd845a06090 R08: 0000000000000000 R09: 0000000000000000
[  775.920644][T17495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  775.920656][T17495] R13: 00007fd847a26038 R14: 00007fd847a25fa0 R15: 00007ffe8eb4c778
[  775.920692][T17495]  </TASK>
[  776.419225][T17502] overlayfs: missing 'lowerdir'
[  776.918584][   T31] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  777.095292][   T31] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  777.095313][   T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.095327][   T31] usb 9-1: Product: syz
[  777.095336][   T31] usb 9-1: Manufacturer: syz
[  777.095346][   T31] usb 9-1: SerialNumber: syz
[  777.114288][   T31] r8152-cfgselector 9-1: Unknown version 0x0000
[  777.114361][   T31] r8152-cfgselector 9-1: config 0 descriptor??
[  777.359874][T17509] overlayfs: overlapping lowerdir path
[  777.564913][T17507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  777.587803][T17507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  777.618129][    T9] r8152-cfgselector 9-1: USB disconnect, device number 20
[  777.661517][ T5808] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  777.804463][ T5808] usb 10-1: Using ep0 maxpacket: 8
[  778.441611][ T5808] usb 10-1: unable to get BOS descriptor or descriptor too short
[  778.443093][ T5808] usb 10-1: unable to read config index 0 descriptor/start: -71
[  778.443133][ T5808] usb 10-1: can't read configurations, error -71
[  779.703874][T17526] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  781.243977][T17538] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  781.245590][    T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  781.725217][    T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  781.725252][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.725267][    T9] usb 3-1: Product: syz
[  781.725278][    T9] usb 3-1: Manufacturer: syz
[  781.725289][    T9] usb 3-1: SerialNumber: syz
[  782.526844][    T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  782.782442][    T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  783.029247][T17549] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8)
[  783.030521][T17549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  783.081366][T17549] vhci_hcd vhci_hcd.0: Device attached
[  788.093588][ T5858] usb 51-1: new low-speed USB device number 2 using vhci_hcd
[  790.616490][ T1353] ------------[ cut here ]------------
[  790.616506][ T1353] in_task() && kcov_mode_enabled(mode)
[  790.616526][ T1353] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/u8:8/1353
[  790.616588][ T1353] Modules linked in:
[  790.616612][ T1353] CPU: 1 UID: 0 PID: 1353 Comm: kworker/u8:8 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  790.616656][ T1353] Tainted: [L]=SOFTLOCKUP
[  790.616666][ T1353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  790.616681][ T1353] Workqueue: events_unbound cfg80211_wiphy_work
[  790.616797][ T1353] RIP: 0010:kcov_remote_start+0x5d8/0x710
[  790.616823][ T1353] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 7b d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e
[  790.616841][ T1353] RSP: 0018:ffffc9000615f9d8 EFLAGS: 00010202
[  790.616859][ T1353] RAX: 0000000000000002 RBX: ffff888029463d00 RCX: 0000000000000000
[  790.616873][ T1353] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0
[  790.616887][ T1353] RBP: ffff8880206d5140 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980
[  790.616903][ T1353] R10: dffffc0000000000 R11: fffffbfff1ed4797 R12: ffff88809d431d08
[  790.616919][ T1353] R13: ffff88805b7307c0 R14: 0000000000000000 R15: ffff88809d431d20
[  790.616934][ T1353] FS:  0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000
[  790.616951][ T1353] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  790.616965][ T1353] CR2: 0000200000009000 CR3: 0000000032632000 CR4: 00000000003526f0
[  790.616982][ T1353] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  790.616997][ T1353] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  790.617011][ T1353] Call Trace:
[  790.617020][ T1353]  <TASK>
[  790.617034][ T1353]  ieee80211_iface_work+0x211/0x1340
[  790.617095][ T1353]  cfg80211_wiphy_work+0x2ab/0x4a0
[  790.617119][ T1353]  ? process_scheduled_works+0xa8d/0x18c0
[  790.617152][ T1353]  process_scheduled_works+0xb6e/0x18c0
[  790.617230][ T1353]  ? __pfx_process_scheduled_works+0x10/0x10
[  790.617266][ T1353]  ? assign_work+0x3d5/0x5e0
[  790.617301][ T1353]  worker_thread+0xa53/0xfc0
[  790.617357][ T1353]  kthread+0x388/0x470
[  790.617380][ T1353]  ? __pfx_worker_thread+0x10/0x10
[  790.617407][ T1353]  ? __pfx_kthread+0x10/0x10
[  790.617430][ T1353]  ret_from_fork+0x51e/0xb90
[  790.617464][ T1353]  ? __pfx_ret_from_fork+0x10/0x10
[  790.617491][ T1353]  ? __switch_to+0xc7d/0x1450
[  790.617523][ T1353]  ? __pfx_kthread+0x10/0x10
[  790.617569][ T1353]  ret_from_fork_asm+0x1a/0x30
[  790.617607][ T1353]  </TASK>
[  790.617625][ T1353] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  790.617642][ T1353] CPU: 1 UID: 0 PID: 1353 Comm: kworker/u8:8 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  790.617668][ T1353] Tainted: [L]=SOFTLOCKUP
[  790.617676][ T1353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  790.617689][ T1353] Workqueue: events_unbound cfg80211_wiphy_work
[  790.617711][ T1353] Call Trace:
[  790.617720][ T1353]  <TASK>
[  790.617728][ T1353]  vpanic+0x56c/0xa60
[  790.617771][ T1353]  ? __pfx__printk+0x10/0x10
[  790.617793][ T1353]  ? __pfx_vpanic+0x10/0x10
[  790.617821][ T1353]  ? is_bpf_text_address+0x292/0x2b0
[  790.617849][ T1353]  ? is_bpf_text_address+0x26/0x2b0
[  790.617886][ T1353]  panic+0xc5/0xd0
[  790.617915][ T1353]  ? __pfx_panic+0x10/0x10
[  790.617954][ T1353]  ? ret_from_fork_asm+0x1a/0x30
[  790.617980][ T1353]  __warn+0x315/0x4f0
[  790.618008][ T1353]  ? kcov_remote_start+0x5d8/0x710
[  790.618033][ T1353]  ? kcov_remote_start+0x5d8/0x710
[  790.618059][ T1353]  __report_bug+0x29a/0x540
[  790.618139][ T1353]  ? kcov_remote_start+0x5d8/0x710
[  790.618164][ T1353]  ? __pfx___report_bug+0x10/0x10
[  790.618194][ T1353]  ? do_raw_spin_lock+0x12b/0x2f0
[  790.618222][ T1353]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[  790.618252][ T1353]  ? do_raw_spin_lock+0x12b/0x2f0
[  790.618287][ T1353]  ? kcov_remote_start+0x5d8/0x710
[  790.618312][ T1353]  report_bug+0x16a/0x220
[  790.618341][ T1353]  ? kcov_remote_start+0x5d8/0x710
[  790.618363][ T1353]  ? kcov_remote_start+0x5da/0x710
[  790.618387][ T1353]  handle_bug+0x9c/0x200
[  790.618411][ T1353]  exc_invalid_op+0x1a/0x50
[  790.618432][ T1353]  asm_exc_invalid_op+0x1a/0x20
[  790.618454][ T1353] RIP: 0010:kcov_remote_start+0x5d8/0x710
[  790.618478][ T1353] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 7b d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e
[  790.618496][ T1353] RSP: 0018:ffffc9000615f9d8 EFLAGS: 00010202
[  790.618513][ T1353] RAX: 0000000000000002 RBX: ffff888029463d00 RCX: 0000000000000000
[  790.618528][ T1353] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0
[  790.618548][ T1353] RBP: ffff8880206d5140 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980
[  790.618564][ T1353] R10: dffffc0000000000 R11: fffffbfff1ed4797 R12: ffff88809d431d08
[  790.618579][ T1353] R13: ffff88805b7307c0 R14: 0000000000000000 R15: ffff88809d431d20
[  790.618601][ T1353]  ? rt_spin_lock+0x1e0/0x400
[  790.618633][ T1353]  ? kcov_remote_start+0xe0/0x710
[  790.618660][ T1353]  ieee80211_iface_work+0x211/0x1340
[  790.618695][ T1353]  cfg80211_wiphy_work+0x2ab/0x4a0
[  790.618720][ T1353]  ? process_scheduled_works+0xa8d/0x18c0
[  790.618750][ T1353]  process_scheduled_works+0xb6e/0x18c0
[  790.618809][ T1353]  ? __pfx_process_scheduled_works+0x10/0x10
[  790.618845][ T1353]  ? assign_work+0x3d5/0x5e0
[  790.618879][ T1353]  worker_thread+0xa53/0xfc0
[  790.618935][ T1353]  kthread+0x388/0x470
[  790.618957][ T1353]  ? __pfx_worker_thread+0x10/0x10
[  790.618984][ T1353]  ? __pfx_kthread+0x10/0x10
[  790.619009][ T1353]  ret_from_fork+0x51e/0xb90
[  790.619040][ T1353]  ? __pfx_ret_from_fork+0x10/0x10
[  790.619067][ T1353]  ? __switch_to+0xc7d/0x1450
[  790.619097][ T1353]  ? __pfx_kthread+0x10/0x10
[  790.619121][ T1353]  ret_from_fork_asm+0x1a/0x30
[  790.619158][ T1353]  </TASK>
[  790.619756][ T1353] Kernel Offset: disabled