last executing test programs:

12.700219075s ago: executing program 1 (id=2):
r0 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a0300000000000000000007000000090001"], 0xbc}}, 0x48004)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800008, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,fmask=00000000000000000000000,utf8,iocharset=cp864,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d6575632d6a702c646973636172642c757466382c757466382c008436c347234c72f484fd178b1c8d7ea215ae342808e535131d538f9218d74dc4d659f7eda036041a1459f46a31a0a3a2b437507865405dfc9cb0023cd59b0b89739c830edf77b2"], 0x1, 0x154a, &(0x7f0000001bc0)="$eJzs3AuYTlX7MPD7XmvtMSSeJjkMa6178ySHRZLkkCSHJEmSJKfklCZ5JSExhCQNSUgOQxJDSA4Tk8b5fD4kJEmTJCE5Jeu7Jlze3uqr/1fv6/+9c/+ua1/W/ex9r732c+9nP2tvPN90HVqzca1qDYkI/hK88EciAMQCwEAAyA0AAQCUiysXl7k+u8TEv7YT9vd6MOVKj4BdSVz/rI3rn7Vx/bM2rn/WxvXP2rj+WRvXP2vj+jOWlW2aVuAaXrLu8u99/q/4+f+/W+xfSebv//8iGaXGfrGm1HXdAGL+xNbZgeuf5XH9/2sFf2Yjrn/WxvXPqv7StJH9f+DpP7ENf/6zgmy/u4brn7Vx/RnLyq708+c/vyAA/P39QuR/2XtwJPuFwvyH9nelzz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nDaX+ZAoBL7Ss9LsYYY4wxxhhjjP19fLYrPQLGGGOMMcYYY4z9+yEIkKAggBjIBrGQHXKAAICrIRfkhghcA3FwLeSB6yAv5IP8UADioSAUAg0GLBCEUBiKQBSuh6JwAxSD4lACSoKDUlAaboQycBOUhZuhHNwC5eFWqAAVoRJUhtugCtwOVeEOqAZ3QnWoATWhFtwFteFuqAP3QF24F+rBfVAf7ocG8AA0hAehETwEjeFhaAKPQFNoBs2hBbT8/fx2CPA7+c9BT3geekFvSIQ+0BdegH7QHwbAizAQXoJB8DIMhlcgCYbAUHgVhsFrMBxehxEwEkbBGzAa3oQxMBbGwXhIhgkwEd6CSfA2TIZ3YApMhRSYBtPhXZgBM2EWvAez4X2YA3NhHsyHVPgAFsBCSIMPYRF8BOmwGJbAUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2AbbYQd8DDvhE9gFu2EPfAp74bP/Yf6pf8nvhoCAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGId5MA/mxbyYH/NjPMZjISyEBg0SEhbGwhjFKBbFolgMi2EJLIEOHZbG0lgGb8KyWBbLYTksj+WxAlbEilgZK2MVrIJVsSpWw2pYHatjTayJd+Fd2AfrYB2si3WxHta79HgKG2JDbISNsDE2xibYBJtiU2yOzbEltsRW2ApbY2tsi22xPbbHDtgBEzABO2JH7ISdsDN2xi7YBbtiV+yG3bF7xnPZAJ/H57E3Vhd9sC/2xX6YlG0Avogv4ks4CF/Gl/EVTMIhOBRfxVfxNRyOJ3EEjsRROAqriDdxDI5FEuMxGZNxIk7ESTgp83SDd3AqpuA0nI7TcQbOxJn4Hs7G9/F9nItzcT6mYiouwIWYhmm4CE9hOi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjh+jAsBPcDfuxiTci3txH+7D/bgfD+ABzMAMPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hM/FeNPi6+OglEJiWUiBExIlbEihwih8gpcopcIpeIiIiIE3Eij8gj8oq8Ir/IL+JFvCgkCgkjjCARxgCAiIqoKCqKimKimCghSggnnCgtSosyoowoK8qKcuIWUV7cKiqIiqKNqywqiyqirasq7hDVRDVRXdQQNUUtUUvUFrVFHVFH1BV1RT1RT9QX94sGog8OwAdFZmUaiyHYRAzFpqKZkBevYK3EcGwt2oi2op0YiSOwg2jlEsSToqMYg53EP8RYfFp0EeOxq3hWdBPdRQ/xnOgpWrteoreYjH1EXzEV+4n+YoB4UczAGuI9nJ29pnhFJIkhYqh4VczH18Rw8boYIUaKUeKN7KPFm2KMGCvGifEiWUzIvFjCJPG2mCzeEVPEVJEiponp4l0xQ8wUs8R7YrZ4X8wRc8U8MV+kig/EArFQpIkPxSLxkUgXi8USsVQsE8vFCrFSrBKrxRqxVqwT68UGsVFsEpvFFrFVbBPbxQ7xsdgpPhG7xG6xR3wq9orPxD7xudgvvhAHxJciQ3wlDoqvxSHxjTgsvhVHxHfiqDgmjovvxQnxgzgpTonT4ow4K34U58RP4rzwAiRKIaVUMpAxMpuMldllDnmVzCmDi+/uNTJOXivzyOtkXplP5pcFZLwsKAtJLY20kmQoC8siMiqvl0XlDbKYLC5LyJLSyVKytLxRlpE3ybLyZllO3iLLy1tlBVlRVpKV5W2yirxdQuTCPqrLGrKmrCXvkolwt6wj75F15b2ynrxP1pf3ywbyAdlQPigbyYdkY/mwbCIfkU1lM9lctpAt5aOylXxMtpZtZFvZTraXj8sO8gmZIJ+UHaW/eIo8LbvIZ2RX+azsJrvLHvIneV562Uv2ltAHZF/5guwn+8sBsQAgX5KD5MtysHxFJskhcqh8VQ6Tr8nh8nU5Qo6Uo+QbcrR8U46RY+U4OV4mywlyonxLTpJvy8nyHTlFTpUpcpocIAf+3NMsKf8w/63fyB/88943yk1ys9wit8ptcrvcIT+WO+VOuUvuknvkHrlX7pX75D65X+6XB+QBmSEz5EF5UB6Sh+RheVgekUfkUXlMnpHfyxPyB3lSnpKn5Bl5Vp6V5y6+B6BQCSWVUoGKUdlUrMqucqirVE51tcqlcquIukbFZV6F1XUqr8qn8qsCKl4VVIWUVkZZRSpUhVURFVXX48UTRpVQJZVTpVRpdeOFfHWtyvPH+aqoukEVU8V/kX9pfIm/M76WqqVqpVqp1qq1aqvaqvaqveqgOqgElaA6qo6qk+qkOqvOqovqorqqrqqb6qZ6qB6qp+qpeqleKlElqr7qBdVP9VcD1ItqoHpJDVKD1GA1WCWpJDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVrJLVRDVRTVKT1GQ1WU1RU1SKSlHT1XQ1Q81Qs9QsNVvNVnPUHDVPzVOpKlUtUAtUmkpTi9Qila4Wq8VqqVqqlqvlaqVaqVar1WqtWqvWq/UqXW1Sm9QWtUVtU9vUDrVD7VQ71S61S+1Re9RetVftU/vUfrVfHVAHVIbKUAfVQXVIHVKH1WF1RB1RR9VRdVwdVyfUCXVSnVSn1Wl1Vp1V59Q5dV6dz5z2BSIQgQpUEBPEBLFBbJAjyBHkDHIGuYJcQSSIBHFBXJAnuC7IG+QL8gcFgvigYFAo0IEJbCAuFj0aXB8UDW4IigXFgxJBycAFpYLSwY1BmeCmoGxwc1AuuCUoH9waVAgqBpWCysFtQZXg9qBqcEdQLbgzqB7UCGoGtYK7gtrB3UGd4J6gbnBvUC+4L6gf3B80CB4IGgYPBo2Ch4LGwcNBk+CRoGnQLGgetAha/q39e38y32Oul+6tE3Uf3Ve/oPvp/nqAflEP1C/pQfplPVi/opP0ED1Uv6qH6df0cP26HqFH6lH6DT1av6nH6LF6nB6vk/UEPVG/pSfpt/Vk/Y6eoqfqFD1NT9fv6hl6pp6l39Oz9ft6jp6r5+n5OlV/oBfohTpNf6gX6Y90ul6sl+ileplerlfolXqVXq3X6LV6nV6vQG/Um/RmvUVv1dv0dr1Df6x36k/0Lr1b79Gf6r36M71Pf6736y/0Af2lztBf6YP6a31If6MP62/1Ef2dPqqP6eP6e31C/6BP6lP6tD6jz+of9Tn9kz6vfebkPvPr3SijTIyJMbEm1uQwOUxOk9PkMrlMxERMnIkzeUwek9fkNflNfhNv4k0hU8hkIkOmsClsoiZqipqippgpZkqYEsYZZ0qb0qaMKWPKmrKmnClnypvypoKpYCqZSuY2c5u53dxu7jB3mDvNnaaGqWFqmVqmtqlt6pg6pq6pa+qZeqa+qW8amAamoWloGplGprFpbJqYJqapaWqam+ampWlpWplWprVpbdqatqa9aW86mA4mwSSYjqaj6WQ6mc6ms+liupiupqvpZrqZHqaH6Wl6ml6ml0k0iaav6Wv6mX5mgBlgBpqBZpAZZAabwSbJJJmhZqgZZoaZ4Wa4GWFGmlGZE1XzphljxppxZrxJNslmoploJplJZrKZbKaYKSbFpJjpZrqZYWaYWWaWmW1mmzlmjpln5plUk2oWmAUmzaSZRWaRSTfpZolZYpaZZWaFWWFWmVVmjVlj1sE6s8FsMJvMJrPFbDHbzDazw+wwO81Os8vsMnvMHrPX7PUIYPab/eaAOWAyTIY5aA6aQ+aQOWwOmyPmiDlqjprj5rg5YU6Yk+akOW1Om7Mm38XvS29ibXabw15lc9qrbS6b2/5rnN8WsPG2oC1ktc1r8/0iNtbaYra4LWFLWmdL2dL2xl/FFWxFW8lWtrfZKvZ2W/VXcW17t61j77F17b22lr3rF3E9e5+tbx+2DRABbDPbyLawje3Dtol9xDa1zWxz28K2t4/bDvYJm2CftB3tU7+KF9iFdpVdbdfYtXaX3W1P2zP2kP3GnrU/2l62tx1oX7KD7Mt2sH3FJtkhv4pH2TfsaPumHWPH2nF2/K/iKXaqTbHT7HT7rp1hZ/4qTrUf2Nk2zc6xc+08O//nOHNMafZDu8h+ZNNtAEvsUrvMLrcr7MpLY/W57Xq7wW60O+0ndovdarfZ7XbHpYmw3W332E/tXvuZPWi/tvvtF/aAPWwz7Fc/x5nHd9h+a4/Y7+xRe8wet9/bE/YHdSk789i/tz/Z89ZbICQgSYoCiqFsFEvZKQddRTnpaspFuSlC11AcXUt56DrKS/koPxWgeCpIhUiTIUtEIRWmIhSl6+nS8EpQSXJUikrTjVSGbqKydDOVo1uoPN1KFagiVaLKdBtVodupKt1B1ehOqk41qCbVoruoNt1Ndegeqkv3Uj26j+rT/dSAHqCG9CA1ooeoMT1MTegRakrNqDm1oJb0KLWix6g1taG21I7a0+PUgZ6gBHqSOtJT1In+QZ3paepCz1BXepa6UXfqQc9RT3qeelFvSqQ+1JdeoH7UnwbQizSQXqJB9DINplcoiYbQUHqVhtFrNJxepxE0kkbRGzSa3qQxNJbG0XhKpgk0kd6iSfQ2TaZ3aApNpRSaRtPpXZpBM2kWvUez6X2aQ3NpHs2nVPqAFtBCSqMPaRF9ROm0mJbQUlpGy2kFraRVtJrW0FpaR+tpA22kTbSZttBW2kbbaQd9TDvpE9pFu2kPfUp76TPaR5/TfvqCDtCXlEFf0UH6mg7RN3SYvvW96Ts6SsfoOH1PJ+gHOkmn6DSdobP0I52jn+g8eYIQQxHKUIVBGBNmC2PD7GGO8KowZ3h1mCvMHUbCa8K48NowT3hdmDfMF+YPC4TxYcGwUKhDE9qQwjAsHBYJo+H1YdHwhrBYWDwsEZYMXVgqLB3eGJYJbwrLhjeH5cJbwvLhrWGFsGL48L2Vw9vCKuHtYdXwjrBaeGdYPawR1gxrhXeFtcO7wzrhPWHd8N6wbHhfWD+8P2wQPhA2DB8MG4UPhY3Dh8Mm4SNh07BZ2DxsEbYMHw1bhY+FrcM2YduwXdg+fDzsED4RJoRPhh3Dp35ef9/C31+fGPYJ+4YvhC+E3t8j50XnR1OjH0QXRBdG06IfRhdFP4qmRxdHl0SXRpdFl0dXRFdGV0VXR9dE10bXRddHN0Q3Rr2vlQ0cOuGkUy5wMS6bi3XZXQ53lcvprna5XG4Xcde4OHety+Ouc3ldPpffFXDxrqAr5LQzzjpyoSvsiriou94VdTe4Yq64K+FKOudKudKuhWvpWrpW7jHX2rVxbV0718497h53T7gn3JOuo3vKdXL/cJ3d066Le8Y945513Vx318M953q6CbkufCYTXV/X1/Vz/dwAN8ANdAPdIDfIDXaDXZJLckPdUDfMDXPD3XA3wo1wo9woN9qNdmPcGDfOjXPJLtlNdBPdJDfJTXaT3RQ3xaW4FDfdTXcz3AxXZeaFvcxxc9w8N8+lulS3wGXOGdPcIrfIpbt0t8QtccvcMrfCrXCr3Cq3xq1x69w6t8FtcJvcJrfFbXHb3Da3w+1wO91Ot8vnvtCp2+v2uX1uv9vvDrgvXYb7yh10X7tD7ht32H3rjrjv3FF3zB1337sT7gd30p1yp90Zd9b96M65n9x5511yZEJkYuStyKTI25HJkXciUyJTIymRaZHpkXcjMyIzI7Mi70VmR96PzInMjcyLzI+kRj6ILIgsjKRFPowsinwUSY8sjiyJLI0siyyPeF9wS+gL+yI+6q/3Rf0Nvpgv7kv4kt75Ur60v9GX8Tf5sv5mX87f4sv7W30FX9FX8o/4pr6Zb+5b+Jb+Ud/KP+Zb+za+rW/n2/vHfQf/hE/wT/qO/infyf/Dd/ZP+y7+Gd/VP+u7+e6+h3/O9/TP+16+t0/0fXxf/4Lv5/v7Af5FP9C/5Af5l/1g/4pP8kP8UP+qH+Zf88P9636EH+lHxbzhR1+6RYbxPtlP8BP9W36Sf9tP9u/4KX6qT/HT/HT/rp/hZ/pZ/j0/27/v5/i5fp6f71P9B36BX+jT/Id+kf/Ip/vFlx4q+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mt/sd/mO/03/id/ndfo//1O/1n/l9/nO/33/hD/gvfYb/yh/0X/tD/ht/2H/rj/jv/FF/zB/33/sT/gd/0p/yp/0Zf9b/6M/5n/x5/j9rjDHGGGN/yoTLTfHLNRce5/f5jRzxTxv3BYCrtxbI+Of1mTPKdXkvtPuL+PYRAHiyd9cHLy3VqycmJl7cNl1CUGQuwKW/CcoUA5fjxdAWHocEaANlfnP8/UX3s/QH/UdvAcjxTzmxcDm+3P/nAJj4G/0/2m7UgvLh6bj/S/9zAYoVuZyTHS7Hi6Htz89X2kDZ3xl/vlZ/MP7sXyQDtP6nnJxwKT548dcaMsdfGh6DpyDhF1syxhhjjDHGGGMX9BeVOl+6/7z0Lz5/6/48Xl3OyQaX4z+6P2eMMcYYY4wxxtiV93T3Hk88mpDQpvP/vFH1/ynrTzeawL+rZ278ZsN7gEuvKAD4ix0CZDbkf/IoNv9H9pV08aPzr6uWnfEB/O8o5d/RuMIXJsYYY4wxxtjf7vKk/5evqys1IMYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLAv6T/yc2JU+RsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xK+z8BAAD//zWzAWg=")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000240)=0x1000)
r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff0007058102000200070502020002"], 0x0)
syz_usb_ep_read(r4, 0x2, 0xc, &(0x7f0000000100)=""/12)
syz_usb_ep_write(r4, 0x81, 0x0, 0x0)
syz_usb_ep_read(r4, 0x2, 0x0, 0x0)
syz_usb_ep_write(r4, 0x81, 0x0, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0x9, 0x1, 0x1, 0x3, 0x6, 0x7, 0x4, 0x9, 0x1, 0xff, 0x6, 0x7, 0x1, 0x2, 0x1, 0x39, {0x0, 0x8}, 0x6, 0x6}})
r5 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, &(0x7f0000000300))
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x34324152, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1, 0xfdfdffff}, {0xfffffffb, 0x8e}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}})

9.852352844s ago: executing program 3 (id=17):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"})

8.615464533s ago: executing program 1 (id=23):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x6889, 0x1f280, 0xfffffffd, 0x399})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000713000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffff78}, 0x0)
io_uring_enter(r2, 0x8ae, 0xfbb9, 0xbf, 0x0, 0x60)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f})

8.432017342s ago: executing program 3 (id=24):
epoll_create1(0x0)
socket$unix(0x1, 0x1, 0x0)
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x8, 0x2, 0x10, 0xffffffffffffffff, 0x20000000)
mmap$IORING_OFF_SQES(0x0, 0x0, 0x2000000, 0x1010, 0xffffffffffffffff, 0x10000000)
syz_open_procfs(0x0, &(0x7f0000000140)='net/udplite6\x00')
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="ea0d0e033d1bed31179b"], 0x1, 0x17a, &(0x7f0000000240)="$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")
add_key$keyring(&(0x7f0000000140), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@abort}, {@auto_da_alloc}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x51d, &(0x7f00000014c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ptrace$setsig(0x4203, r0, 0xc, &(0x7f0000000080)={0x19, 0x6d9a, 0x8})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x195a420, &(0x7f0000000280)=ANY=[])
mkdirat(0xffffffffffffffff, &(0x7f0000000700)='./file1\x00', 0x21)
syz_open_procfs(r0, &(0x7f0000000540)='attr/keycreate\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b800000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.176218518s ago: executing program 4 (id=26):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3fdd, @broadcast, 'vlan0\x00'}}, 0x1e)
syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa7dd3f7902"}}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x1)
r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x7, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000240)={0x0, 0x5, 0x3010})
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='macvlan0\x00'})
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0x0, 0x6, 0x2, 0x5, 0x2, 0x5}, {0x0, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x2, @in=@remote, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc)

7.836653317s ago: executing program 4 (id=27):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x74)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)

7.375896615s ago: executing program 1 (id=29):
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xaa, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x208, 0x8, 0x7, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x200, 0x1a, 0x61, 0x1, 0xff, 0x7}, 0x69, &(0x7f0000000880)={0x5, 0xf, 0x69, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x6, 0x4493}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x7, 0xf000, 0xf, [0xf, 0x3fc0, 0x0, 0xff0000, 0xff3f00]}, @generic={0x30, 0x10, 0x3, "594e115baf33e2165d7bf428703e51833df38182271a89f9156ba77c60752ab10ea0c9063ab31db5ee3ff9bfbd"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0xd5, 0x8b, 0x4}]}, 0x9, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xe20}}, {0x3f, &(0x7f0000000940)=@string={0x3f, 0x3, "383c065665015b25310f4b4045f9425bec6cc42e14f40dbe9df0a6a57eb646830b6023b7a655be41fbdfa3c05e2b5710247dcdaafd4d0c7ab490a829d6"}}, {0x66, &(0x7f0000000980)=@string={0x66, 0x3, "b325cdc6b3128d4154f88efa404de459b00b19f66064d90cdd1403b83e26a70dc4dd7aefb5a44d3dded3885cf220bac0cb93f2ec675ff3da15687b41b5658534cda4d702761c1be0f8958f566cc2a5fa57dc7cdf19a0364efcd30c80415a0a50584c3350"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1007}}, {0x2a, &(0x7f0000000ac0)=@string={0x2a, 0x3, "e3656556347029f4b0ab4cbdb83530508a7d804100e468f4ab74d87e1317adee54e0a7420d0a9af1"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x1c56}}, {0xdc, &(0x7f0000000b40)=@string={0xdc, 0x3, "13f24801c2997dc25e286de03c85cb4592dbc581d98001df610248ee6244d7f82a9612a7619fde5ced69ebb60bff68d581c1bd34d5900107cb1188565ff9f5ff4ee957b04fdbe302c5099875d0a40707f50b465421fb90bc89fa8c27c98ffd4a4380e1acc47bc710c32ed99758da00710f7f8f1f2ec7a63056cfa16943191f8bdcb453cfa7bfa7b6872a6779572cfe1fe2fab051e25de5218b3498158c5c5cfd18f21ce67499f53633321f72f84165b2d2cb4c39f52924a981ffb8ca1d77528bbdc15fb9ccace620d23783bf9978dbe4d9d3fa85c35ce76ca2bd"}}]})
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r0, 0xfffff000)
r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0})
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000f80)=ANY=[@ANYBLOB="20250100000034a47391644e233b3892a0c39142225fbf978af641f80fd5050035916db64b09840dbf6a8a6cd64bb78874d062edcd1d90dac281a34bff40a42441572f23fa061f5bc8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_clone3(&(0x7f0000000200)={0x1000000, &(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0), {0x2f}, &(0x7f0000000100)=""/28, 0x1c, &(0x7f0000000140)=""/11, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r0}}, 0x58)
process_vm_writev(r2, &(0x7f0000000780)=[{&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f0000000340)=""/15, 0xf}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000540)=""/119, 0x77}, {&(0x7f00000006c0)=""/146, 0x92}], 0x8, &(0x7f0000000800), 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, r4, 0x100ffff}}, 0x48)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0xc61}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r4}}, 0x18)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

7.145522346s ago: executing program 3 (id=30):
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x20, 0x2, 0x158}, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000000d00), 0x0, 0x10022, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240)=0x5, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
sendfile(r2, r2, 0x0, 0x200623)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r3, &(0x7f0000000180)='r:s/p ./file0:0', 0xf)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x6, 0x0, 0x8100, 0x0, {0x1577, 0x3}, {0x3}, {0xe, 0x14}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x80}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x2, 0x0, 0x0, 0x0, 0x1000000, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x40f4)

6.915950009s ago: executing program 2 (id=31):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
fstat(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchown(r4, r5, 0xffffffffffffffff)
ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000400)=@multiplanar_overlay={0xe5a5, 0xc, 0x4, 0x200, 0x5, {0x77359400}, {0x4, 0x2, 0x5, 0x5, 0x9, 0x3, "fb86ce0e"}, 0x1, 0x3, {&(0x7f0000000280)=[{0x807, 0x7, {0xc}, 0x9}, {0x5fdd4dc0, 0x37, {0x2}, 0x6a06}]}, 0x101, 0x0, r4})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
execve(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000840)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde6\xfd\vQM`\x8f\xec\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0e}\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13?\x87\'S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']})

4.686277384s ago: executing program 3 (id=32):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000380)={[{@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@test_dummy_encryption}, {@errors_continue}, {@test_dummy_encryption_v1}, {@usrquota}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d752c6e6f696e746567726974792c696f636861727365743d69736f383835392d31342c6572726f72733d636f6e74696e75652c646973636172642c6572726f72733d72656d6f756e742d726f2c696e746567726974792c6e6f71756f74612c696e746567726974792c6572726f72733d636f6e74696e75652c67727071756f74612c00cef10ddd2aadfb7750b4c40e11a3323235d4e234e9fb972e6ddad1"], 0x24, 0x628f, &(0x7f00000065c0)="$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")
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="4673c875ca4d9c60679ed38f62fc1ef5e0d7c20bf64791a98a614276cb951854000000", 0x23}, {&(0x7f00000003c0)="e146ba06000001000000008ab8", 0xd}], 0x2)
write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183e9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e425a4146056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423d27f7b78fafa060000006eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f87d2a1a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a42010e24f69de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc46f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4670b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400000000000000000000000000000001df00", 0x1000}}, 0x1006)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="a4ad7cd35a3eaebccbcce42ae1827c7be5775753946345bd248b8901509b19f9ab00"], 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001800)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0xc, "fee8a2ab78fc5e3ee60080b8785d96000100", "131dfac11d875397bdb22d007ee886b309c80300000000000000000000000000000000000000000000000000000000000000000000ffffffff00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}})
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001940))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100))
rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

4.471707654s ago: executing program 4 (id=33):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3, <r4=>0xffffffffffffffff})
ppoll(&(0x7f0000000380)=[{r3, 0x1308}, {r4, 0x40}, {r3, 0x612}], 0x3, 0x0, 0x0, 0x0)
close(r0) (fail_nth: 1)

4.264454457s ago: executing program 0 (id=34):
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0x6}, 0x3d, [0x6, 0xc95b, 0x9, 0x8, 0x81, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0xd1, 0x6, 0x4, 0x100, 0x7, 0x7, 0x7, 0x3, 0x3c57, 0x1, 0x24, 0x2adc, 0x222, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8000, 0x642, 0xa5a, 0x6, 0x0, 0x71, 0x1, 0xe, 0x103, 0x0, 0x5, 0x8000, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x9, 0x0, 0x80, 0x8, 0x4, 0x6, 0x8c0, 0x4, 0x1, 0x40], [0x10080007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0x2d, 0x2bf, 0x6c8, 0x1ff, 0x0, 0x3, 0x0, 0x7, 0x2, 0x1c, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0xd, 0x4, 0x410, 0x1, 0x6, 0x400401, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x103, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x1, 0x0, 0x7, 0x5, 0x0, 0x10006, 0x7, 0x5e0176bd, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x6, 0x8, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x5, 0x1, 0x5, 0x64e, 0xfffffdfa, 0x7fffffff, 0x56e5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x5, 0x5, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x1000400b, 0x3e6, 0xb, 0x5, 0x2, 0x60002, 0xf, 0x7, 0x84, 0x6d01, 0x5, 0x3b, 0x6, 0x200, 0x80, 0x3, 0x4, 0x2, 0xffffffff, 0xa5, 0x4007, 0x6, 0x8, 0x4, 0x54fe12da, 0x5, 0x5, 0x3, 0x20ffff, 0xfff7fff9, 0x10000000, 0x1, 0x5, 0x8, 0x6, 0xfffffffb, 0x120000, 0x6, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x6, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x4051bf, 0x5, 0xce7, 0x201, 0x6, 0x87, 0x5, 0x7, 0x104, 0x4, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x2, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xfffffffe, 0x80000000, 0x405, 0x8, 0xff, 0x103, 0xfffffff1, 0x10002, 0xa, 0x8, 0x100, 0x9602, 0xb, 0x2, 0x800, 0x6, 0x101, 0x10000, 0x2, 0x8, 0x2b91, 0xffffffff, 0x8, 0x9, 0x1, 0x6c0b, 0x83a3, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0xfff, 0xffffffff]}, 0x45c)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x18, 0x1412, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x44851}, 0x40000d0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}, 0x0, {0x0, r5}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)

4.184498089s ago: executing program 0 (id=35):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x7e, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000f40)={[{@part={'part', 0x3d, 0xa0}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@gid}, {@codepage={'codepage', 0x3d, 'iso8859-5'}}, {@dir_umask={'dir_umask', 0x3d, 0x8}}, {@session={'session', 0x3d, 0x5}}]}, 0x9, 0x344, &(0x7f0000000980)="$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") (async)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f0000000100))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value=0xf6}, 0x28)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x20}, 0x80) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket(0x200000000000011, 0x2, 0xfffffffd)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r3, <r9=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%+9llu \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x5, &(0x7f0000000400)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f00000005c0)='syzkaller\x00', 0x91, 0xc3, &(0x7f0000000600)=""/195, 0x41100, 0x18, '\x00', r8, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0x6, 0x9, 0xdb8}, 0x10, 0xffffffffffffffff, r4, 0x4, &(0x7f0000000800)=[r9], &(0x7f0000000840)=[{0x0, 0x5, 0xf, 0xa}, {0x0, 0x4, 0xf, 0x3}, {0x4, 0x3, 0x10, 0xa}, {0x1, 0x5, 0xc}]}, 0x94)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0xfc83) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590)
r10 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async)
sendmsg(r10, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f210000060001000700000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

3.898055561s ago: executing program 0 (id=36):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x179)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
close(r0)
sendmsg$NFT_BATCH(r0, 0x0, 0x4000004)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r1, 0x0, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000240)="01e03d37ec88626da09acf7e6fbee471abd792229af6d486b14ca26c0087c9285cb2f8491be5caff8714d509b9106a9be9afb19844dbc002a7cf69e92272755fd1109adac74ec745c804ddfb8fc1a5edb17040e9", 0x54, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x3, 0x3, 0x3, 0x3, 0x2, 0x7fff, 0x8343d33, 0x1}, &(0x7f0000000080)={0x4, 0x2, 0x7, 0x7, 0x6, 0x4, 0x4, 0x7}, &(0x7f0000000140)={0xa08, 0x6, 0x2, 0x1, 0x6, 0x4, 0x95, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8})
write(r2, &(0x7f0000000700)='1\n', 0x2)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x2, 0x0)
write(r3, &(0x7f0000000b00)='1\n', 0x2)

3.327867601s ago: executing program 4 (id=37):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L'], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r2 = fanotify_init(0x81, 0x40000)
read(r2, &(0x7f0000000000)=""/84, 0x54)
fanotify_mark(r2, 0x105, 0x800101b, r1, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r3 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0)
ioctl$EVIOCSCLOCKID(r3, 0x40084504, &(0x7f0000ffcffc)=0x400)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0xdf4, &(0x7f0000000040)={0x0, 0x985b, 0xc000, 0x9, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r5 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x48840)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.313772233s ago: executing program 1 (id=38):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x50, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/344], 0x4, 0x5525, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
write$cgroup_freezer_state(r0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0xc2c80, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf519, 0x0)

3.267825202s ago: executing program 2 (id=39):
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x40, 0x8, 0x1000c1}) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
lseek(0xffffffffffffffff, 0x4, 0x1) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) (async)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 32)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = fsmount(r2, 0x0, 0x0) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', <r4=>0x0, 0x89, 0x40, 0x401, 0x7, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x66, 0x0, 0x0, 0x29, 0x0, @loopback, @local}}}}) (rerun: 64)
sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d002000011000000000000", @ANYRES32=r4, @ANYBLOB="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"], 0x2d0}}, 0x24040010) (async, rerun: 64)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) (rerun: 64)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r1}) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000028c0), 0x0, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) (async)
close(0xffffffffffffffff) (async)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16)

3.0941222s ago: executing program 0 (id=40):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000600, 0x0, 0x1, 0x9, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000600, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0xdd4, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x1, @loopback}}}, 0x108)
syz_usb_control_io(r1, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1)

3.024647807s ago: executing program 2 (id=41):
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x200050, &(0x7f0000001940)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="8f885045210635adb7e6436894228db3ca307a6a34ed8bcac81952ee0bd544cd7508b41348803558a5fce3ce459f0520b79b93828d78bdefc834dd46e379d43441d36a2175580482bac07e9f8e36e0c0ed7665883da3c4307fcec811da2a770ebeb360ee9f7feab5696ff3736fc5d0299fd2f93ce9c0f30bd2a0a63219479f0f06d6f5c5c3efe112e0b6f4968d88ad0095457ca2847daf624d643e11daf40e9e8953f2eda4e319da17d99f30c215919c5ffed73a4a908ea9829108fc04e3666f7cf793825539f06254d0cad1dc084027bc029ba42e450b3592f440145b3b4b12f076472702", @ANYRESOCT=0x0], 0x1, 0x1d2, &(0x7f00000003c0)="$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")
truncate(0x0, 0x2fffffd)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

2.76639491s ago: executing program 4 (id=42):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x4}, {0x1}, {0x300, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xffe0}}]}}]}, 0x48}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c010000060a010400000000000000000a0000030900010073797a310000000028000480240001800a000100717565756500000014000280060001400008000006000240000000000900020073797a32"], 0x144}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000380)="4860b0d2bc8fb21051aff7e0628ee60ade61be51c3d0cee9aebe807f17a95d928f95bb7cbc3e564cbfd262bfdfb805f86b232cbe3793b78ce168a188eca6d5f308dfb9db4d7dd8fa4223778f96bf8a47f635fc987599af087044840cd846f25b2321021e2189b498", 0x68)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10)
syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x6e, 0x150, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x6, [], [{{0x9, 0x5, 0x8, 0x4, 0x200, 0x3, 0xff, 0x81, {0x0, 0x25, 0x1, 0x0, "2871d52ea97f39500147d3ede9c4"}}}]}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="1a03"]}, {0xfffffe6d, 0x0}, {0x17, &(0x7f0000000340)=@lang_id={0x0, 0x3, 0x200a}}, {0x0, &(0x7f00000000c0)=@lang_id={0x0, 0x3, 0xfcff}}, {0x0, &(0x7f00000001c0)=@lang_id={0x0, 0x3, 0x423}}]})
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00')
ioctl$NS_GET_PARENT(r2, 0x8004b709, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x8000, 0x5c, @private0, @mcast2={0xff, 0x5}, 0x8, 0x20, 0xe3e1, 0x1fb}})

2.63006927s ago: executing program 2 (id=43):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
chdir(&(0x7f0000000100)='./file0\x00')
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000031c0)={0x2020}, 0x2020)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2008052, &(0x7f00000001c0)={[{@bsdgroups}]}, 0x3, 0x4de, &(0x7f0000000200)="$eJzs3E1sVNUeAPD/nba0fD36eDzeA1GLaGwktlBQWJgYjCYuNDHiQpdNWwhSqGlLIgTNkBhcGhL3xqVbF27VDTGuTNzi0sSQEMMGMDFec2fudKbDnSltpx2b/n7JMOfcr3POnHvunA86AWxaQ9k/STV8KyJ2RUSp+YCh6tv9u1cnHty9OhHlND39e1I57V4Wz+WXie15ZLgUUfokqe9oMHf5yvnx6emp2Tw+On/hg9G5y1eeP3dh/OzU2amLYydPHj929MSLYy8sv1AF6WXlurf/45kD+15/78abE7217QP5e2M5OmUohoqyUvFMpxPrsp0N4aS3ixlhWbL7P6uuvkr73xU9ofJgs0jTNO1vvbucNrv20BZgw0qi2zkAuqP2RZ+Nf2uvoo7AlrXpfnTdnVPVAVBW7vv5K+LJysbaPEhf0/i2k4Yi4t3yH19kr1ijeQgAgEbfnar1BJv6f4PVlZE/L918OXv/V76GMhgR/46I3RHxn4jYExH/jYi9EfG/iPh/0/V7IiJtk/5QU3wh/YVFqNLtDhW1UNb/eylf26r3/xZlYLAnj+2MqHWYp47kn8lw9PWfOTc9dbRNGt+/+vNnrfY19v+yV5Z+rS+Y5+N2b9ME3eT4/PiKC9zkzrWI/b3N5U96I5KFlYAkIvZFxP5lXHewIXzuua8OLET6Fh+3dPkr0sJ1tA4sVaRfRjxbrf9yLKr/eopJ+/XJ0YGYnjoymt0FRwrT+PGn62+1Sn/J8n/za/Mpr5349nTeslYvq/9tDfd/1NZv6+UfTCKShfXaueWncf2XT1uOaVZ6/29J3qmEa+PSD8fn52ePRmxJ3nh4+1j93Fo8e49ytfzDh4rb/+78nOyTeCwispv48Yh4IqojxCzvByPiqYg41Kb8P7zy9PsrL//ayso/Wfj8W1T/9fX6VoGkXD26YFfP+YO3HrR4eDxa/R+vhIbzLcXPv2TRI6JVTmvfdtmWv1b74QEAAMAGUYqIHQ1zSTuiVBoZqc4B7YltpemZufnDZ2YuXZzM9kUMRl+pNtNVnQ/uS2rzn4MN8bGm+LF83vjznq2V+MjEzPRkV0sObK+0+aQ0svAsqLb/zG+dmWIG/sn8yQ9sXu3af9aJ33tjHTMDrKtH//6/+dGaZgRYdw3tv9zikPIK/t8XsAEY/wN1rboBdZ4ZsPGl2jJsak3tv/2y/+Gl+wbAxtEbby+ES13NCbDe9P9hU1ry7/pXFUj7i3cNxMMHx0D7C/bEyrKxtSCtrgSynlVXUt86O3e5P5Z5Vu3XFFoeE6XlXbA/OlOnZ1b5aZRn587uXfHN/yBN08LflcgHzZ2uwa/XpZ0WBbryOAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi4vwMAAP//jNbkHg==")

1.535142042s ago: executing program 3 (id=44):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0x3)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002240)={@map=0x1, 0x2e, 0x1, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000002180)=[0x0, 0x0, 0x0], &(0x7f00000021c0)=[0x0], &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000022c0), 0x40000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r3, 0xc138fd0d, &(0x7f0000002000)="040000000000000000000000a101")
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002280)={@map=r2, r0, 0x1d, 0x201c, 0x0, @value=r3, @void, @void, @void, r1}, 0x20)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x184)
write(r5, &(0x7f0000000180)='1', 0x1)
ioctl$UBLK_U_IO_FETCH_REQ(r5, 0xc0107520, &(0x7f0000003500)={0x3, 0xd1d, 0x0, &(0x7f0000002500)=@buf_max_buf="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"})
read$FUSE(r4, &(0x7f0000000140)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f0000002340)=ANY=[@ANYBLOB="98010000000000ea", @ANYRES64=r6, @ANYBLOB="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"], 0x198)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@float={0x7, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x2e, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4079, 0x2a, 0xfef}, 0x28)

1.511854343s ago: executing program 2 (id=45):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x4000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x7fffffb, 0x2, 0xffffffff, 0x1, 0x9b9})
openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x3)

1.370102922s ago: executing program 0 (id=46):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@private0, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x8, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74bc}, 0xfffffffe, 0x1a0b0}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x40)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000010900010073797a31000000002400048020000180070001007274000014000280080001400000001608000200000000140000001100010000000000000000000100000a00"/120], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)

920.486918ms ago: executing program 0 (id=47):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040))

824.222579ms ago: executing program 4 (id=48):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 1)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x22f, &(0x7f0000000140)={0x0, 0x1a75, 0x100, 0x0, 0x25c}, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)

623.40046ms ago: executing program 2 (id=49):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02)
syz_usb_disconnect(r0)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/128, 0x80}, {0x0}], 0x2) (fail_nth: 1)

262.78825ms ago: executing program 1 (id=50):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x179)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
close(r0)
sendmsg$NFT_BATCH(r0, 0x0, 0x4000004)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r1, 0x0, 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000240)="01e03d37ec88626da09acf7e6fbee471abd792229af6d486b14ca26c0087c9285cb2f8491be5caff8714d509b9106a9be9afb19844dbc002a7cf69e92272755fd1109adac74ec745c804ddfb8fc1a5edb17040e9", 0x54, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x3, 0x3, 0x3, 0x3, 0x2, 0x7fff, 0x8343d33, 0x1}, &(0x7f0000000080)={0x4, 0x2, 0x7, 0x7, 0x6, 0x4, 0x4, 0x7}, &(0x7f0000000140)={0xa08, 0x6, 0x2, 0x1, 0x6, 0x4, 0x95, 0x8}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8})
write(r2, &(0x7f0000000700)='1\n', 0x2)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x2, 0x0)
write(r3, &(0x7f0000000b00)='1\n', 0x2)

0s ago: executing program 3 (id=51):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x1, 0x5, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts.
[   79.344653][ T5605] cgroup: Unknown subsys name 'net'
[   79.461891][ T5605] cgroup: Unknown subsys name 'cpuset'
[   79.471693][ T5605] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.117580][ T5605] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.631338][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.632516][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.652337][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.663819][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.664238][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.664625][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.671799][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.672101][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   83.673054][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.679422][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.682176][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   83.686138][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.695565][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.696202][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   83.697853][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.713052][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.724654][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   83.733631][ T4933] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.738119][ T4933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   83.740765][ T4933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   83.748774][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.753008][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   83.759942][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   83.766477][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.767427][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.663500][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.664657][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.665122][ T5617] bridge_slave_0: entered allmulticast mode
[   85.674775][ T5617] bridge_slave_0: entered promiscuous mode
[   85.749293][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.749799][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.750279][ T5617] bridge_slave_1: entered allmulticast mode
[   85.755480][ T5617] bridge_slave_1: entered promiscuous mode
[   85.789300][ T5625] Bluetooth: hci2: command tx timeout
[   85.868343][   T52] Bluetooth: hci0: command tx timeout
[   85.868532][   T52] Bluetooth: hci1: command tx timeout
[   85.868656][   T52] Bluetooth: hci4: command tx timeout
[   85.874440][ T5625] Bluetooth: hci3: command tx timeout
[   85.874545][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.874924][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.877896][ T5619] bridge_slave_0: entered allmulticast mode
[   85.884536][ T5619] bridge_slave_0: entered promiscuous mode
[   85.920612][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.921884][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.922167][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.929102][ T5618] bridge_slave_0: entered allmulticast mode
[   85.934417][ T5618] bridge_slave_0: entered promiscuous mode
[   85.978974][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.979239][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.980332][ T5619] bridge_slave_1: entered allmulticast mode
[   85.985389][ T5619] bridge_slave_1: entered promiscuous mode
[   86.002650][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.003317][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.003583][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.003921][ T5618] bridge_slave_1: entered allmulticast mode
[   86.013000][ T5618] bridge_slave_1: entered promiscuous mode
[   86.097276][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.158125][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.202992][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.213300][ T5617] team0: Port device team_slave_0 added
[   86.240332][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.240555][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.240917][ T5629] bridge_slave_0: entered allmulticast mode
[   86.246597][ T5629] bridge_slave_0: entered promiscuous mode
[   86.265997][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.276308][ T5617] team0: Port device team_slave_1 added
[   86.284179][ T5618] team0: Port device team_slave_0 added
[   86.284946][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.286982][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.287422][ T5629] bridge_slave_1: entered allmulticast mode
[   86.294348][ T5629] bridge_slave_1: entered promiscuous mode
[   86.348272][ T5618] team0: Port device team_slave_1 added
[   86.363443][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.363571][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.363713][ T5616] bridge_slave_0: entered allmulticast mode
[   86.366822][ T5616] bridge_slave_0: entered promiscuous mode
[   86.399840][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.399882][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.399925][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.457377][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.457615][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.458643][ T5616] bridge_slave_1: entered allmulticast mode
[   86.463977][ T5616] bridge_slave_1: entered promiscuous mode
[   86.493657][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.493801][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.493885][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.505625][ T5619] team0: Port device team_slave_0 added
[   86.553261][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.584489][ T5619] team0: Port device team_slave_1 added
[   86.587089][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.587132][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.587211][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.613116][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.651783][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.671322][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.671367][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.671413][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.718333][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.768233][ T5629] team0: Port device team_slave_0 added
[   86.796201][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.796234][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.796578][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.809418][ T5629] team0: Port device team_slave_1 added
[   86.852505][ T5616] team0: Port device team_slave_0 added
[   86.861458][ T5616] team0: Port device team_slave_1 added
[   86.875380][ T5617] hsr_slave_0: entered promiscuous mode
[   86.881750][ T5617] hsr_slave_1: entered promiscuous mode
[   86.888561][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.888600][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.888628][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.998949][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.999011][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.999039][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.027494][ T5618] hsr_slave_0: entered promiscuous mode
[   87.031834][ T5618] hsr_slave_1: entered promiscuous mode
[   87.032934][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[   87.033039][ T5618] Cannot create hsr debugfs directory
[   87.105110][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.105170][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.105214][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.116773][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.116835][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.116900][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.137111][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.137165][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.137234][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.384935][ T5619] hsr_slave_0: entered promiscuous mode
[   87.392219][ T5619] hsr_slave_1: entered promiscuous mode
[   87.394393][ T5619] debugfs: 'hsr0' already exists in 'hsr'
[   87.394456][ T5619] Cannot create hsr debugfs directory
[   87.559560][ T5629] hsr_slave_0: entered promiscuous mode
[   87.562464][ T5629] hsr_slave_1: entered promiscuous mode
[   87.564379][ T5629] debugfs: 'hsr0' already exists in 'hsr'
[   87.564439][ T5629] Cannot create hsr debugfs directory
[   87.596027][ T5616] hsr_slave_0: entered promiscuous mode
[   87.598955][ T5616] hsr_slave_1: entered promiscuous mode
[   87.601192][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   87.601245][ T5616] Cannot create hsr debugfs directory
[   87.868830][ T5625] Bluetooth: hci2: command tx timeout
[   87.948966][ T5625] Bluetooth: hci3: command tx timeout
[   87.949231][ T5625] Bluetooth: hci1: command tx timeout
[   87.949327][ T5625] Bluetooth: hci0: command tx timeout
[   87.954521][ T5621] Bluetooth: hci4: command tx timeout
[   88.092861][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.106061][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.120966][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.135168][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.140853][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.154550][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.162359][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.173676][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.263787][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   88.276028][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.284089][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   88.293886][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.303058][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   88.318893][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.321495][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.333967][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.451686][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.461841][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.464583][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.477274][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.496227][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.506615][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.522879][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.533686][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.652129][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.663740][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.680067][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.692077][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.697588][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.712103][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.727940][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.737435][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.789208][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.803111][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.886540][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.899355][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.916603][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   88.920019][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.932801][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.940307][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.951845][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.966128][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.976436][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.987021][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[   89.025189][ T3351] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.025620][ T3351] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.053542][ T3351] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.053764][ T3351] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.080177][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.080400][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.120679][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.120791][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.182496][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.281719][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   89.313315][ T3351] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.313451][ T3351] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.363179][  T808] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.363307][  T808] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.402160][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.511856][ T5629] 8021q: adding VLAN 0 to HW filter on device team0
[   89.552081][ T1385] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.552326][ T1385] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.595364][  T808] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.595588][  T808] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.650651][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.771277][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   89.834255][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.834477][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.897579][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.897762][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.948571][ T5621] Bluetooth: hci2: command tx timeout
[   90.029111][ T5621] Bluetooth: hci0: command tx timeout
[   90.029167][ T5621] Bluetooth: hci1: command tx timeout
[   90.029223][ T5621] Bluetooth: hci3: command tx timeout
[   90.029300][ T5621] Bluetooth: hci4: command tx timeout
[   90.472390][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.734864][ T5617] veth0_vlan: entered promiscuous mode
[   90.791730][ T5617] veth1_vlan: entered promiscuous mode
[   90.814086][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.965851][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.979767][ T5617] veth0_macvtap: entered promiscuous mode
[   91.041483][ T5617] veth1_macvtap: entered promiscuous mode
[   91.135359][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.194795][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.232923][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.283393][ T5629] veth0_vlan: entered promiscuous mode
[   91.354019][ T5629] veth1_vlan: entered promiscuous mode
[   91.380600][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.520411][ T3367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.520460][ T3367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.555541][ T5629] veth0_macvtap: entered promiscuous mode
[   91.572368][ T5619] veth0_vlan: entered promiscuous mode
[   91.605931][ T5629] veth1_macvtap: entered promiscuous mode
[   91.634606][ T3303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.634667][ T3303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.672790][ T5618] veth0_vlan: entered promiscuous mode
[   91.678703][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.678973][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.679016][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.720716][   T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.722464][ T5619] veth1_vlan: entered promiscuous mode
[   91.770342][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.786341][ T5616] veth0_vlan: entered promiscuous mode
[   91.793970][ T5618] veth1_vlan: entered promiscuous mode
[   91.829227][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.839892][ T5617] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   91.890376][ T5616] veth1_vlan: entered promiscuous mode
[   91.929505][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.929605][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.929798][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.963310][   T10] cfg80211: failed to load regulatory.db
[   92.028681][   T52] Bluetooth: hci2: command tx timeout
[   92.036299][ T5618] veth0_macvtap: entered promiscuous mode
[   92.049100][ T5619] veth0_macvtap: entered promiscuous mode
[   92.080678][ T5619] veth1_macvtap: entered promiscuous mode
[   92.101445][ T5618] veth1_macvtap: entered promiscuous mode
[   92.108837][   T52] Bluetooth: hci4: command tx timeout
[   92.108891][   T52] Bluetooth: hci3: command tx timeout
[   92.108949][   T52] Bluetooth: hci1: command tx timeout
[   92.109025][   T52] Bluetooth: hci0: command tx timeout
[   92.651433][ T5815] cgroup: No subsys list or none specified
[   94.399091][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.399138][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.434881][ T5616] veth0_macvtap: entered promiscuous mode
[   94.476267][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.485014][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.489441][   T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.531565][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.540606][ T5616] veth1_macvtap: entered promiscuous mode
[   94.559607][ T1385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.559657][ T1385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.581654][ T5820] FAULT_INJECTION: forcing a failure.
[   94.581654][ T5820] name failslab, interval 1, probability 0, space 0, times 1
[   94.595123][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) 
[   94.595152][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.595175][ T5820] Call Trace:
[   94.595188][ T5820]  <TASK>
[   94.595197][ T5820]  dump_stack_lvl+0xe8/0x150
[   94.595244][ T5820]  should_fail_ex+0x410/0x560
[   94.595282][ T5820]  should_failslab+0xa8/0x100
[   94.595317][ T5820]  __kmalloc_noprof+0xfe/0x720
[   94.595345][ T5820]  ? rcu_is_watching+0x16/0xb0
[   94.595372][ T5820]  ? tomoyo_realpath_from_path+0xef/0x640
[   94.595398][ T5820]  ? tomoyo_realpath_from_path+0xef/0x640
[   94.595430][ T5820]  tomoyo_realpath_from_path+0xef/0x640
[   94.595466][ T5820]  ? tomoyo_path_number_perm+0x219/0x5f0
[   94.595501][ T5820]  tomoyo_path_number_perm+0x246/0x5f0
[   94.595539][ T5820]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   94.595571][ T5820]  ? __lock_acquire+0x6df/0x2e50
[   94.595609][ T5820]  ? hook_file_ioctl+0x1f2/0x600
[   94.595652][ T5820]  ? __fget_files+0x2a/0x420
[   94.595679][ T5820]  ? __fget_files+0x2a/0x420
[   94.595700][ T5820]  ? __fget_files+0x3a2/0x420
[   94.595722][ T5820]  ? __fget_files+0x2a/0x420
[   94.595749][ T5820]  security_file_ioctl+0xc3/0x2a0
[   94.595784][ T5820]  __se_sys_ioctl+0x47/0x170
[   94.595816][ T5820]  do_syscall_64+0x166/0x520
[   94.595843][ T5820]  ? trace_irq_disable+0x3b/0x140
[   94.595865][ T5820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.595893][ T5820]  ? clear_bhb_loop+0x70/0xc0
[   94.595920][ T5820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.595943][ T5820] RIP: 0033:0x7fceaad9e0d9
[   94.595971][ T5820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   94.595989][ T5820] RSP: 002b:00007fceabbab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   94.596027][ T5820] RAX: ffffffffffffffda RBX: 00007fceab025fa0 RCX: 00007fceaad9e0d9
[   94.596043][ T5820] RDX: 00002000000003c0 RSI: 0000000000003b84 RDI: 0000000000000003
[   94.596057][ T5820] RBP: 00007fceabbab090 R08: 0000000000000000 R09: 0000000000000000
[   94.596071][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.596084][ T5820] R13: 00007fceab026038 R14: 00007fceab025fa0 R15: 00007ffd635d3788
[   94.596119][ T5820]  </TASK>
[   94.634217][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.734371][ T5820] ERROR: Out of memory at tomoyo_realpath_from_path.
[   94.812987][ T1385] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.813180][ T1385] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.833338][   T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.836120][ T3367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.934445][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.015282][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.070029][ T5826] Invalid ELF header magic: != ELF
[   95.078267][ T5826] Invalid ELF header magic: != ELF
[   95.084301][ T5826] Invalid ELF header magic: != ELF
[   95.085631][ T5826] Invalid ELF header magic: != ELF
[   95.094922][ T5826] Invalid ELF header magic: != ELF
[   95.101472][ T5826] Invalid ELF header magic: != ELF
[   95.127642][ T5826] Invalid ELF header magic: != ELF
[   95.358289][   T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.443222][ T5829] loop2: detected capacity change from 0 to 32768
[   95.471303][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.471343][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.490932][ T1385] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.491300][ T1385] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.506773][ T1385] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.506899][ T1385] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.506995][ T1385] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.507088][ T1385] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.507192][ T1385] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.562295][ T5829] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   95.614537][ T5829] XFS (loop2): Ending clean mount
[   95.640840][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.640881][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.904378][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.904418][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.301112][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.301151][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.442712][ T5844] loop0: detected capacity change from 0 to 512
[   96.475029][  T808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.490043][  T808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.510442][ T5629] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   96.594950][  T808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.603405][  T808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.679971][ T5844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.680127][ T5844] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.256967][ T5853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   97.269018][ T5850] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   97.369490][ T5850] kvm: MWAIT instruction emulated as NOP!
[   97.402966][ T5854] loop1: detected capacity change from 0 to 256
[   97.448438][ T5854] exfat: Deprecated parameter 'utf8'
[   97.448617][ T5854] exfat: Deprecated parameter 'utf8'
[   97.448682][ T5854] exfat: Deprecated parameter 'utf8'
[   97.503454][ T5858] loop4: detected capacity change from 0 to 64
[   97.515151][ T5858] =======================================================
[   97.515151][ T5858] WARNING: The mand mount option has been deprecated and
[   97.515151][ T5858]          and is ignored by this kernel. Remove the mand
[   97.515151][ T5858]          option from the mount to silence this warning.
[   97.515151][ T5858] =======================================================
[   97.553838][ T5854] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7bade8ae, utbl_chksum : 0xe619d30d)
[   97.750861][ T5858] syz.4.13: attempt to access beyond end of device
[   97.750861][ T5858] loop4: rw=8388608, sector=412, nr_sectors = 2 limit=64
[   97.751059][ T5858] Buffer I/O error on dev loop4, logical block 206, async page read
[   97.852523][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.902953][   T31] audit: type=1804 audit(1786843758.346:2): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.13" name="/newroot/1/file2/file1" dev="loop4" ino=5 res=1 errno=0
[   97.927961][ T5858] syz.4.13: attempt to access beyond end of device
[   97.927961][ T5858] loop4: rw=8388608, sector=412, nr_sectors = 2 limit=64
[   97.928025][ T5858] Buffer I/O error on dev loop4, logical block 206, async page read
[   97.935799][   T31] audit: type=1800 audit(1786843758.376:3): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13" name="file1" dev="loop4" ino=5 res=0 errno=0
[   97.970725][ T1225] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   97.985046][ T5859] syz.4.13: attempt to access beyond end of device
[   97.985046][ T5859] loop4: rw=8390657, sector=412, nr_sectors = 2 limit=64
[   97.999207][ T5859] Buffer I/O error on dev loop4, logical block 206, lost async page write
[   98.013441][ T5849] loop3: detected capacity change from 0 to 32768
[   98.079013][ T5849] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   98.185854][ T1225] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[   98.557876][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   99.334243][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.334299][ T1225] usb 2-1: Product: syz
[   99.334336][ T1225] usb 2-1: Manufacturer: syz
[   99.334418][ T1225] usb 2-1: SerialNumber: syz
[   99.338104][ T5849] XFS (loop3): Ending clean mount
[   99.605245][ T5849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'.
[   99.716835][ T5879] FAULT_INJECTION: forcing a failure.
[   99.716835][ T5879] name failslab, interval 1, probability 0, space 0, times 0
[   99.719258][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) 
[   99.719288][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   99.719363][ T5879] Call Trace:
[   99.719392][ T5879]  <TASK>
[   99.719429][ T5879]  dump_stack_lvl+0xe8/0x150
[   99.719545][ T5879]  should_fail_ex+0x410/0x560
[   99.719649][ T5879]  should_failslab+0xa8/0x100
[   99.719741][ T5879]  __kmalloc_noprof+0xfe/0x720
[   99.719806][ T5879]  ? rcu_is_watching+0x16/0xb0
[   99.719877][ T5879]  ? tomoyo_realpath_from_path+0xef/0x640
[   99.719949][ T5879]  ? tomoyo_realpath_from_path+0xef/0x640
[   99.720033][ T5879]  tomoyo_realpath_from_path+0xef/0x640
[   99.720127][ T5879]  ? tomoyo_path_number_perm+0x219/0x5f0
[   99.720228][ T5879]  tomoyo_path_number_perm+0x246/0x5f0
[   99.720324][ T5879]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   99.720406][ T5879]  ? __lock_acquire+0x6df/0x2e50
[   99.720502][ T5879]  ? hook_file_ioctl+0x1f2/0x600
[   99.720607][ T5879]  ? __fget_files+0x2a/0x420
[   99.720688][ T5879]  ? __fget_files+0x2a/0x420
[   99.720742][ T5879]  ? __fget_files+0x3a2/0x420
[   99.720803][ T5879]  ? __fget_files+0x2a/0x420
[   99.720883][ T5879]  security_file_ioctl+0xc3/0x2a0
[   99.720981][ T5879]  __se_sys_ioctl+0x47/0x170
[   99.721063][ T5879]  do_syscall_64+0x166/0x520
[   99.721129][ T5879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.721193][ T5879]  ? clear_bhb_loop+0x70/0xc0
[   99.721265][ T5879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.721327][ T5879] RIP: 0033:0x7fceaad9e0d9
[   99.721380][ T5879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.721430][ T5879] RSP: 002b:00007fceabbab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   99.721494][ T5879] RAX: ffffffffffffffda RBX: 00007fceab025fa0 RCX: 00007fceaad9e0d9
[   99.721537][ T5879] RDX: 0000200000000440 RSI: 00000000c0306201 RDI: 0000000000000005
[   99.721578][ T5879] RBP: 00007fceabbab090 R08: 0000000000000000 R09: 0000000000000000
[   99.721612][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.721662][ T5879] R13: 00007fceab026038 R14: 00007fceab025fa0 R15: 00007ffd635d3788
[   99.721748][ T5879]  </TASK>
[   99.754585][ T5879] ERROR: Out of memory at tomoyo_realpath_from_path.
[   99.984283][ T5619] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  100.123581][ T1225] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0
[  100.330898][ T1225] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0
[  100.333548][ T1225] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0
[  100.477565][ T1225] kalmia 2-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.1-1, Samsung Kalmia LTE USB dongle, 32:b2:ad:07:7e:f1
[  100.606791][ T1225] usb 2-1: USB disconnect, device number 2
[  100.638946][   T31] audit: type=1800 audit(1786843761.086:4): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19" name="zoned" dev="configfs" ino=9316 res=0 errno=0
[  100.661378][   T31] audit: type=1800 audit(1786843761.106:5): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.19" name="power" dev="configfs" ino=9317 res=0 errno=0
[  100.688906][ T5885] null_blk: nullb1: using native zone append
[  100.704485][ T1225] kalmia 2-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.1-1, Samsung Kalmia LTE USB dongle
[  100.827077][ T5890] FAULT_INJECTION: forcing a failure.
[  100.827077][ T5890] name failslab, interval 1, probability 0, space 0, times 0
[  100.846403][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: syz.0.21 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  100.846441][ T5890] Tainted: [L]=SOFTLOCKUP
[  100.846449][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  100.846462][ T5890] Call Trace:
[  100.846472][ T5890]  <TASK>
[  100.846482][ T5890]  dump_stack_lvl+0xe8/0x150
[  100.846521][ T5890]  should_fail_ex+0x410/0x560
[  100.846561][ T5890]  should_failslab+0xa8/0x100
[  100.846597][ T5890]  __kmalloc_noprof+0xfe/0x720
[  100.846625][ T5890]  ? rcu_is_watching+0x16/0xb0
[  100.846652][ T5890]  ? tomoyo_realpath_from_path+0xef/0x640
[  100.846678][ T5890]  ? tomoyo_realpath_from_path+0xef/0x640
[  100.846711][ T5890]  tomoyo_realpath_from_path+0xef/0x640
[  100.846755][ T5890]  ? tomoyo_path_number_perm+0x219/0x5f0
[  100.846791][ T5890]  tomoyo_path_number_perm+0x246/0x5f0
[  100.846829][ T5890]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  100.846863][ T5890]  ? __lock_acquire+0x6df/0x2e50
[  100.846901][ T5890]  ? hook_file_ioctl+0x1f2/0x600
[  100.846944][ T5890]  ? __fget_files+0x2a/0x420
[  100.846970][ T5890]  ? __fget_files+0x2a/0x420
[  100.846992][ T5890]  ? __fget_files+0x3a2/0x420
[  100.847013][ T5890]  ? __fget_files+0x2a/0x420
[  100.847041][ T5890]  security_file_ioctl+0xc3/0x2a0
[  100.847076][ T5890]  __se_sys_ioctl+0x47/0x170
[  100.847109][ T5890]  do_syscall_64+0x166/0x520
[  100.847135][ T5890]  ? trace_irq_disable+0x3b/0x140
[  100.847157][ T5890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.847180][ T5890]  ? clear_bhb_loop+0x70/0xc0
[  100.847208][ T5890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.847237][ T5890] RIP: 0033:0x7fceaad9e0d9
[  100.847258][ T5890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.847277][ T5890] RSP: 002b:00007fceabbab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  100.847301][ T5890] RAX: ffffffffffffffda RBX: 00007fceab025fa0 RCX: 00007fceaad9e0d9
[  100.847318][ T5890] RDX: 00002000000002c0 RSI: 0000000040045701 RDI: 0000000000000004
[  100.847333][ T5890] RBP: 00007fceabbab090 R08: 0000000000000000 R09: 0000000000000000
[  100.847347][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.847360][ T5890] R13: 00007fceab026038 R14: 00007fceab025fa0 R15: 00007ffd635d3788
[  100.847395][ T5890]  </TASK>
[  100.853753][ T5890] ERROR: Out of memory at tomoyo_realpath_from_path.
[  101.133892][ T5885] null_blk: disk nullb1 created
[  101.545324][ T5899] loop3: detected capacity change from 0 to 16
[  101.552734][ T5899] erofs: Unknown parameter '�'
[  101.635139][ T5899] loop3: detected capacity change from 0 to 512
[  101.652510][ T5899] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  101.708903][ T5899] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  101.749539][ T5899] EXT4-fs (loop3): mount failed
[  102.522915][ T5912] FAULT_INJECTION: forcing a failure.
[  102.522915][ T5912] name failslab, interval 1, probability 0, space 0, times 0
[  102.536014][ T5912] CPU: 1 UID: 0 PID: 5912 Comm: syz.2.20 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  102.536050][ T5912] Tainted: [L]=SOFTLOCKUP
[  102.536059][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  102.536073][ T5912] Call Trace:
[  102.536082][ T5912]  <TASK>
[  102.536092][ T5912]  dump_stack_lvl+0xe8/0x150
[  102.536131][ T5912]  should_fail_ex+0x410/0x560
[  102.536170][ T5912]  should_failslab+0xa8/0x100
[  102.536203][ T5912]  ? do_getname+0x2e/0x250
[  102.536237][ T5912]  kmem_cache_alloc_noprof+0xa1/0x600
[  102.536266][ T5912]  ? do_getname+0x2e/0x250
[  102.536306][ T5912]  do_getname+0x2e/0x250
[  102.536337][ T5912]  ? getname_flags+0x11/0x20
[  102.536372][ T5912]  do_sys_openat2+0xcc/0x200
[  102.536410][ T5912]  ? __pfx_do_sys_openat2+0x10/0x10
[  102.536445][ T5912]  ? ksys_write+0x242/0x270
[  102.536471][ T5912]  ? __pfx_ksys_write+0x10/0x10
[  102.536500][ T5912]  __x64_sys_openat+0x138/0x170
[  102.536541][ T5912]  do_syscall_64+0x166/0x520
[  102.536574][ T5912]  ? trace_irq_disable+0x3b/0x140
[  102.536597][ T5912]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.536620][ T5912]  ? clear_bhb_loop+0x70/0xc0
[  102.536649][ T5912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.536671][ T5912] RIP: 0033:0x7fae8555e90e
[  102.536692][ T5912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  102.536711][ T5912] RSP: 002b:00007fae86395b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  102.536735][ T5912] RAX: ffffffffffffffda RBX: 00007fae863966c0 RCX: 00007fae8555e90e
[  102.536752][ T5912] RDX: 0000000000101301 RSI: 00007fae86395c00 RDI: ffffffffffffff9c
[  102.536768][ T5912] RBP: 00007fae86395c00 R08: 0000000000000000 R09: 0000000000000000
[  102.536782][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  102.536797][ T5912] R13: 00007fae85826038 R14: 00007fae85825fa0 R15: 00007ffec3b79808
[  102.536837][ T5912]  </TASK>
[  102.914317][ T5916] capability: warning: `syz.0.28' uses 32-bit capabilities (legacy support in use)
[  103.131853][ T5923] netlink: 'syz.3.30': attribute type 17 has an invalid length.
[  103.458851][ T5921] loop0: detected capacity change from 0 to 512
[  103.641896][ T5811] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  103.643160][    C1] raw-gadget.0 gadget.1: ignoring, device is not running
[  104.221748][ T5921] FAT-fs (loop0): data area starts beyond volume (199892 > 45184)
[  104.221795][ T5921] FAT-fs (loop0): Can't find a valid FAT filesystem
[  104.251334][ T5925] process 'syz.2.31' launched './file0' with NULL argv: empty string added
[  104.397317][ T5811] usb 2-1: device descriptor read/64, error -32
[  104.979216][ T5921] jffs2: notice: (5921) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  105.077801][ T5811] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  105.236754][ T5932] loop3: detected capacity change from 0 to 128
[  105.243583][ T5932] EXT4-fs: Conflicting test_dummy_encryption options
[  105.283778][ T5811] usb 2-1: not running at top speed; connect to a high speed hub
[  105.283867][ T5811] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  105.285179][ T5811] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 520, setting to 64
[  105.285315][ T5811] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  105.285418][ T5811] usb 2-1: config 1 interface 0 has no altsetting 0
[  105.291992][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.292064][ T5811] usb 2-1: Product: △웍ኳ䆍搜䵀姤ர摠೙ᓝ렃☾ට꒵㵍폞岈⃲삺鏋彧栕䅻斵㒅꓍˗ᱶ闸嚏쉬瘟ꀙ丶폼而婁倊䱘倳
[  105.292120][ T5811] usb 2-1: Manufacturer: 㰸嘆ť╛༱䁋聾孂泬⻄븍ꖦ뙾荆怋뜣喦䆾삣⭞ၗ紤꫍䷽稌邴⦨
[  105.292183][ T5811] usb 2-1: SerialNumber: ࠚ
[  105.413577][ T5920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  105.426984][ T5920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  105.687374][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.702069][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.819253][ T5942] loop0: detected capacity change from 0 to 66
[  105.990783][ T5811] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 1 proto 1 vid 0x04B8 pid 0x0202
[  106.018809][ T5811] usb 2-1: USB disconnect, device number 4
[  106.092773][ T5811] usblp0: removed
[  106.103011][ T5932] loop3: detected capacity change from 0 to 32768
[  106.146366][   T31] audit: type=1800 audit(1786843766.596:6): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.36" name="zoned" dev="configfs" ino=8724 res=0 errno=0
[  106.164773][   T31] audit: type=1800 audit(1786843766.596:7): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.36" name="power" dev="configfs" ino=8725 res=0 errno=0
[  106.557770][ T5732] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  106.699335][ T5732] usb 4-1: device descriptor read/64, error -71
[  106.850505][ T5960] loop2: detected capacity change from 0 to 64
[  106.947790][ T5732] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  106.995498][   T31] audit: type=1804 audit(1786843767.436:8): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.41" name="/newroot/5/file2/file1" dev="loop2" ino=5 res=1 errno=0
[  107.038495][ T5960] Trying to free block not in datazone
[  107.039033][ T5960] syz.2.41: attempt to access beyond end of device
[  107.039033][ T5960] loop2: rw=8390657, sector=412, nr_sectors = 2 limit=64
[  107.039118][ T5960] Buffer I/O error on dev loop2, logical block 206, lost async page write
[  107.087781][ T5732] usb 4-1: device descriptor read/64, error -71
[  107.198177][ T5732] usb usb4-port1: attempt power cycle
[  107.218551][   T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  107.341562][ T5964] netlink: 200 bytes leftover after parsing attributes in process `syz.4.42'.
[  107.377822][   T25] usb 1-1: Using ep0 maxpacket: 8
[  107.380781][   T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  107.400801][   T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  107.400880][   T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  107.400973][   T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  107.401059][   T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  107.401166][   T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  107.401289][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.538051][ T5732] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  107.558541][ T5732] usb 4-1: device descriptor read/8, error -71
[  107.697946][   T25] usb 1-1: usb_control_msg returned -32
[  107.698032][   T25] usbtmc 1-1:16.0: can't read capabilities
[  107.734602][ T5811] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  107.778571][   T25] usb 1-1: USB disconnect, device number 2
[  107.797800][ T5732] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  107.819416][ T5732] usb 4-1: device descriptor read/8, error -71
[  107.832766][ T5966] loop2: detected capacity change from 0 to 512
[  107.913041][ T5811] usb 5-1: unable to get BOS descriptor or descriptor too short
[  107.925078][ T5811] usb 5-1: not running at top speed; connect to a high speed hub
[  107.925164][ T5811] usb 5-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  107.933761][ T5732] usb usb4-port1: unable to enumerate USB device
[  107.943496][ T5811] usb 5-1: language id specifier not provided by device, defaulting to English
[  107.965319][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.965365][ T5811] usb 5-1: Product: syz
[  107.965398][ T5811] usb 5-1: Manufacturer: syz
[  107.965419][ T5811] usb 5-1: SerialNumber: syz
[  108.104001][ T5966] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem
[  108.116541][ T5966] loop2: lost filesystem error report for type 5 error -117
[  108.118313][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  108.118369][    C1] EXT4-fs (loop2): initial error at time 1786843768: ext4_process_orphan:346
[  108.118399][    C1] EXT4-fs (loop2): last error at time 1786843768: ext4_process_orphan:346
[  108.164321][ T5966] EXT4-fs (loop2): 2 truncates cleaned up
[  108.194516][ T5966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.392994][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.402298][ T5956] loop1: detected capacity change from 0 to 40427
[  108.462952][ T5956] F2FS-fs (loop1): Invalid log blocks per segment (1)
[  108.463008][ T5956] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  108.463287][ T5956] F2FS-fs (loop1): Image doesn't support compression
[  108.463354][ T5956] F2FS-fs (loop1): build fault injection rate: 690
[  108.463397][ T5956] F2FS-fs (loop1): build fault injection type: 0x35f7
[  108.522102][ T5956] F2FS-fs (loop1): invalid crc value
[  108.791852][ T5974] netlink: 48 bytes leftover after parsing attributes in process `syz.0.46'.
[  108.842206][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'.
[  108.991244][ T5975] kvm: apic: phys broadcast and lowest prio
[  109.155005][ T5956] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  109.203568][ T5956] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  109.252879][ T5956] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  109.280691][ T5811] usb 5-1: USB disconnect, device number 2
[  109.305485][ T5956] F2FS-fs (loop1): Start checkpoint disabled!
[  109.426558][ T5956] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  109.441025][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  109.443207][ T5956] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  109.445327][ T5956] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  109.635347][   T62] kworker/u8:5: attempt to access beyond end of device
[  109.635347][   T62] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  109.660816][   T62] CPU: 1 UID: 0 PID: 62 Comm: kworker/u8:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  109.660857][   T62] Tainted: [L]=SOFTLOCKUP
[  109.660866][   T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  109.660883][   T62] Workqueue: writeback wb_workfn (flush-7:1)
[  109.660928][   T62] Call Trace:
[  109.660937][   T62]  <TASK>
[  109.660947][   T62]  dump_stack_lvl+0xe8/0x150
[  109.660983][   T62]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  109.661017][   T62]  f2fs_write_end_bio+0x1211/0x16e0
[  109.661053][   T62]  ? blkg_put+0x22/0x240
[  109.661095][   T62]  __submit_merged_bio+0x258/0x6a0
[  109.661122][   T62]  ? rcu_is_watching+0x16/0xb0
[  109.661155][   T62]  __submit_merged_write_cond+0x3c9/0x4e0
[  109.661192][   T62]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  109.661244][   T62]  f2fs_write_data_pages+0x2a27/0x36f0
[  109.661315][   T62]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.661361][   T62]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  109.661432][   T62]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  109.661480][   T62]  ? __lock_acquire+0x6df/0x2e50
[  109.661520][   T62]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  109.661544][   T62]  ? f2fs_update_inode+0x146f/0x25c0
[  109.661600][   T62]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.661633][   T62]  do_writepages+0x338/0x560
[  109.661672][   T62]  ? reacquire_held_locks+0x117/0x1a0
[  109.661698][   T62]  ? writeback_sb_inodes+0x450/0x1b00
[  109.661727][   T62]  __writeback_single_inode+0x136/0x1220
[  109.661754][   T62]  ? do_raw_spin_unlock+0xf5/0x200
[  109.661790][   T62]  writeback_sb_inodes+0x9de/0x1b00
[  109.661810][   T62]  ? __lock_acquire+0x6df/0x2e50
[  109.661849][   T62]  ? lock_acquire+0x115/0x350
[  109.661885][   T62]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  109.661953][   T62]  ? rcu_is_watching+0x16/0xb0
[  109.661980][   T62]  ? queue_io+0x2d3/0x470
[  109.662006][   T62]  wb_writeback+0x41c/0xad0
[  109.662045][   T62]  ? queue_io+0x1f1/0x470
[  109.662073][   T62]  ? __pfx_wb_writeback+0x10/0x10
[  109.662106][   T62]  ? do_raw_spin_lock+0x12b/0x2f0
[  109.662155][   T62]  wb_workfn+0x431/0x10f0
[  109.662205][   T62]  ? __pfx_wb_workfn+0x10/0x10
[  109.662238][   T62]  ? rcu_is_watching+0x16/0xb0
[  109.662265][   T62]  ? trace_hrtimer_start+0x82/0x200
[  109.662305][   T62]  ? do_raw_spin_lock+0x12b/0x2f0
[  109.662346][   T62]  ? lock_acquire+0x115/0x350
[  109.662379][   T62]  ? rcu_is_watching+0x16/0xb0
[  109.662406][   T62]  ? process_scheduled_works+0x97a/0x1630
[  109.662436][   T62]  process_scheduled_works+0xc3d/0x1630
[  109.662499][   T62]  ? __pfx_process_scheduled_works+0x10/0x10
[  109.662536][   T62]  ? assign_work+0x3cf/0x5d0
[  109.662579][   T62]  worker_thread+0xa47/0xfb0
[  109.662626][   T62]  ? __kthread_parkme+0x71/0x1f0
** replaying previous printk message **
[  109.662626][   T62]  ? __kthread_parkme+0x71/0x1f0
[  109.662671][   T62]  kthread+0x38b/0x480
[  109.662694][   T62]  ? __pfx_worker_thread+0x10/0x10
[  109.662723][   T62]  ? __pfx_kthread+0x10/0x10
[  109.662747][   T62]  ret_from_fork+0x514/0xb70
[  109.662773][   T62]  ? __pfx_ret_from_fork+0x10/0x10
[  109.662808][   T62]  ? __switch_to+0xc89/0x1420
[  109.662843][   T62]  ? __pfx_kthread+0x10/0x10
[  109.662867][   T62]  ret_from_fork_asm+0x1a/0x30
[  109.662919][   T62]  </TASK>
[  109.688023][   T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  109.688321][   T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  109.946808][ T5616] 
[  110.015581][ T5616] =============================
[  110.020666][ T5616] WARNING: suspicious RCU usage
[  110.026137][ T5616] syzkaller #0 Tainted: G             L     
[  110.032653][ T5616] -----------------------------
[  110.037552][ T5616] ./include/linux/radix-tree.h:179 suspicious rcu_dereference_check() usage!
[  110.046440][ T5616] 
[  110.046440][ T5616] other info that might help us debug this:
[  110.046440][ T5616] 
[  110.057077][ T5616] 
[  110.057077][ T5616] rcu_scheduler_active = 2, debug_locks = 1
[  110.065298][ T5616] locks held by syz-executor/5616: 2, last CPU#1:
[  110.071803][ T5616]  #0: ffff88802b0900e8 (&type->s_umount_key#64){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0
[  110.082124][ T5616]  #1: ffff88807eab08c8 (&im->ino_lock){+.+.}-{3:3}, at: f2fs_remove_ino_entry+0x18d/0x3f0
[  110.092264][ T5616] 
[  110.092264][ T5616] stack backtrace:
[  110.098573][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  110.109649][ T5616] Tainted: [L]=SOFTLOCKUP
[  110.114013][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  110.124110][ T5616] Call Trace:
[  110.127433][ T5616]  <TASK>
[  110.130405][ T5616]  dump_stack_lvl+0xe8/0x150
[  110.135052][ T5616]  lockdep_rcu_suspicious+0x140/0x1d0
[  110.140508][ T5616]  f2fs_remove_ino_entry+0x3ae/0x3f0
[  110.145847][ T5616]  f2fs_evict_inode+0x83d/0x21f0
[  110.150825][ T5616]  ? add_lock_to_list+0xc7/0x100
[  110.155819][ T5616]  ? __pfx_f2fs_evict_inode+0x10/0x10
[  110.161233][ T5616]  ? do_raw_spin_lock+0x12b/0x2f0
[  110.166305][ T5616]  ? do_raw_spin_unlock+0xf5/0x200
[  110.171488][ T5616]  ? __pfx_f2fs_evict_inode+0x10/0x10
[  110.176920][ T5616]  evict+0x624/0xb50
[  110.180887][ T5616]  ? __pfx_evict+0x10/0x10
[  110.185353][ T5616]  ? do_raw_spin_unlock+0xf5/0x200
[  110.190519][ T5616]  ? _raw_spin_unlock+0x28/0x50
[  110.195414][ T5616]  ? iput+0xb84/0xf00
[  110.199452][ T5616]  f2fs_evict_inode+0x20f/0x21f0
[  110.204466][ T5616]  ? inode_wait_for_writeback+0x16d/0x3b0
[  110.210281][ T5616]  ? __pfx_f2fs_evict_inode+0x10/0x10
[  110.215708][ T5616]  ? do_raw_spin_lock+0x12b/0x2f0
[  110.220805][ T5616]  ? do_raw_spin_unlock+0xf5/0x200
[  110.225975][ T5616]  ? __pfx_f2fs_evict_inode+0x10/0x10
[  110.231433][ T5616]  evict+0x624/0xb50
[  110.235395][ T5616]  ? __pfx_evict+0x10/0x10
[  110.239873][ T5616]  ? do_raw_spin_lock+0x12b/0x2f0
[  110.244971][ T5616]  evict_inodes+0x7e3/0x870
[  110.249521][ T5616]  ? __pfx_cgroup_writeback_umount+0x10/0x10
[  110.255565][ T5616]  ? __pfx_evict_inodes+0x10/0x10
[  110.260648][ T5616]  ? sync_filesystem+0x1f9/0x240
[  110.265645][ T5616]  generic_shutdown_super+0xaa/0x2d0
[  110.270974][ T5616]  kill_block_super+0x44/0xa0
[  110.275702][ T5616]  kill_f2fs_super+0x3b3/0x700
[  110.280532][ T5616]  ? __pfx_kill_f2fs_super+0x10/0x10
[  110.285888][ T5616]  ? call_rcu+0x64d/0x8b0
[  110.290268][ T5616]  ? lockdep_hardirqs_on+0x7b/0x110
[  110.295532][ T5616]  deactivate_locked_super+0xbc/0x110
[  110.300950][ T5616]  cleanup_mnt+0x3d3/0x460
[  110.305427][ T5616]  task_work_run+0x1d9/0x270
[  110.310067][ T5616]  ? __pfx_task_work_run+0x10/0x10
[  110.315232][ T5616]  exit_to_user_mode_loop+0x204/0x770
[  110.320656][ T5616]  ? rcu_is_watching+0x16/0xb0
[  110.325485][ T5616]  do_syscall_64+0x328/0x520
[  110.330134][ T5616]  ? trace_irq_disable+0x3b/0x140
[  110.335208][ T5616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.341328][ T5616]  ? clear_bhb_loop+0x70/0xc0
[  110.346062][ T5616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.352050][ T5616] RIP: 0033:0x7fe3cdb9f317
[  110.356514][ T5616] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  110.376172][ T5616] RSP: 002b:00007ffe2adef4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  110.384640][ T5616] RAX: 0000000000000000 RBX: 00007fe3cdc34474 RCX: 00007fe3cdb9f317
[  110.392651][ T5616] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2adef5b0
[  110.400661][ T5616] RBP: 00007ffe2adef5b0 R08: 00007ffe2adf05b0 R09: 00000000ffffffff
[  110.408682][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2adf0640
[  110.416701][ T5616] R13: 00007fe3cdc34474 R14: 000000000001abd1 R15: 00007ffe2adf0680
[  110.424736][ T5616]  </TASK>
[  110.458006][   T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  110.479508][   T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  110.479563][   T25] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  110.479624][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.523370][ T5987] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  110.568793][   T25] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  110.931523][ T5987] FAULT_INJECTION: forcing a failure.
[  110.931523][ T5987] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  110.931580][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.2.49 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  110.931610][ T5987] Tainted: [L]=SOFTLOCKUP
[  110.931619][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  110.931632][ T5987] Call Trace:
[  110.931641][ T5987]  <TASK>
[  110.931650][ T5987]  dump_stack_lvl+0xe8/0x150
[  110.931692][ T5987]  should_fail_ex+0x410/0x560
[  110.931731][ T5987]  _copy_to_user+0x31/0xb0
[  110.931758][ T5987]  simple_read_from_buffer+0xe1/0x170
[  110.931788][ T5987]  proc_fail_nth_read+0x1bb/0x230
[  110.931814][ T5987]  ? common_file_perm+0x20e/0x2b0
[  110.931848][ T5987]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  110.931880][ T5987]  ? rw_verify_area+0x24a/0x4c0
[  110.931907][ T5987]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  110.931952][ T5987]  vfs_read+0x213/0xa80
[  110.931982][ T5987]  ? __pfx___mutex_lock+0x10/0x10
[  110.932010][ T5987]  ? __pfx_vfs_read+0x10/0x10
[  110.932051][ T5987]  ? __fget_files+0x2a/0x420
[  110.932079][ T5987]  ? __fget_files+0x3a2/0x420
[  110.932100][ T5987]  ? __fget_files+0x2a/0x420
[  110.932132][ T5987]  ksys_read+0x150/0x270
[  110.932160][ T5987]  ? __pfx_ksys_read+0x10/0x10
[  110.932197][ T5987]  do_syscall_64+0x166/0x520
[  110.932223][ T5987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.932246][ T5987]  ? clear_bhb_loop+0x70/0xc0
[  110.932274][ T5987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.932297][ T5987] RIP: 0033:0x7fae8555e90e
[  110.932318][ T5987] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  110.932336][ T5987] RSP: 002b:00007fae86395fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  110.932360][ T5987] RAX: ffffffffffffffda RBX: 00007fae863966c0 RCX: 00007fae8555e90e
[  110.932377][ T5987] RDX: 000000000000000f RSI: 00007fae863960a0 RDI: 0000000000000003
[  110.932391][ T5987] RBP: 00007fae86396090 R08: 0000000000000000 R09: 0000000000000000
[  110.932405][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.932418][ T5987] R13: 00007fae85826038 R14: 00007fae85825fa0 R15: 00007ffec3b79808
[  110.932452][ T5987]  </TASK>
[  111.053105][   T25] usb 3-1: USB disconnect, device number 2
[  111.509665][   T31] audit: type=1800 audit(1786843771.956:9): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.50" name="zoned" dev="configfs" ino=8860 res=0 errno=0
[  111.515079][   T31] audit: type=1800 audit(1786843771.956:10): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.50" name="power" dev="configfs" ino=8861 res=0 errno=0