last executing test programs:

11m38.651691191s ago: executing program 3 (id=515):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)

11m35.604416999s ago: executing program 3 (id=520):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d2, &(0x7f0000000e80)="$eJzs3c1vHGcdB/DvrNeuN1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitELgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/b6LS9rGz6faDLPzDPPM7/5zTMzu2utNsD/ravn0nyQIlfPvXG/XF5fm2+vr82/UFe3k5TlRtLszlLcToqHyUJZXwxMGZhv8fHylbc+e7T+eXepWU/V9hM7tRthxLar9ZTZur/ZkS0n97qL1Tq8vJjkWj0fNrXXvoY2LJN2tp7Dgetssbqf5vu5boFDpvd0KrrPzS1mkmNJpuvXAanvDo3xRfh87OsuBwAAAEfAqI+9P71zAIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAEVf//n9RT416ntkUvd//n+qtq8uH0MKet3zwXOMAAAAAAAAAgPH4+uM8zv0c7y13iupv/meqhZP5opN8Ke/nXpZyN+dzP4tZyUru5mKSmYGOpu4vrqzcvdhvWRrd8tLIlpfGdcQAAAAAAAAA8D/pl2lt/P0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgyKZ6M6q6WQ9z0wazWzUZTX5Z5Kpg453H4pRKx+MPw4AAAB4KtNP0ObLj/M493O8t9wpqvf8X6neL0/n/dzOSpazknaWcr1+D12+62+sr82319fmb5VTuTzc7/f/va8wpuoeJqqlUXs+XW3Ryo0sV2vO51oVzPU0uvs+m5zuxTMQ14CPypiK79X2GFmzTmu5s99v9ynCMzH8UURjhy1bG8El/YzM1bGVLU90M1BUH9QkmzOx69lpDi3NVL1O9vd0MY3+Jz8nnybnq6P3fqyel8fzm+ea8/3qZ6KRKhOXeqOvvGZ2zkTyjb/+6e2b7dvv3rxx79zhOaRdTGyzfvOYmB/IxCtHOhPNfW4/V2XiVH/5an6Un+RcZvNm7mY5P81iVrKUTl2/WI/n8v+ZnTO1MLT05m6RTNXnpXvO9hLTbH5YlRZzpmp7PMspcifXs5TXq3+XcjHfzuVczpWBM3xq27irY6uu+sbmq753pv82Mviz36wL5d3ttxt3uYWdjni70fmsdO/9ZV5PDOS1O+of9bc6MXAdzA1k6aVediZHdv4kz6PmV+tCuY9f7fKcGK+ZOhPlBdR7SvSie7mbiWb1LNo6zv/QKdulfbvTubn43jb9b35YvFbPy2G19rXdtu4ZfSqerXK8vJTp+k4yPDrKupf7d5mBus7GWO7WDT9xy3anqrqi6F2pP86dagBsvVKn6tdwW3u6VNW9MrJuvqo7PVA39Hord9LO9THkD4An8Y+3+8WZHJtq/av1aeuT1q9bN1tvTP/ghe+88OpUJv8++d3m3MRrjVeLv+ST/Hzj/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDk7n3w4buL7fbS3dGFxvZVQ4VWNq/ZredNhaL+QZ/9tTq8hekkQ2uq3zkaexitzWFsKXR+kYw9P70fERy9ze/KQnPLiBpVWBha8+etHX60zwiLvV0Xz7HQyHh3OpHRA+AAb0rAWFxYufXehXsffPit5VuL7yy9s3R78vLlK3NXLr8+f+HGcntprvv/QUcJPA9DLwMAAAAAAAAAAACAI2HUFwPOvLjbl0b29B2P/pqDPkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgaLt6Ls0HKXJx7vxcuby+Nt8up155Y8tmkkYjKX6WFA+ThXSnzAx0V+SPD9MZsZ+Pl6+89dmj9c83+mp2t08a9Xx7O9cmWa2nzCaZqOdPYai/a0/dX/Gf3jGUCfui0+ksPF188Gz8NwAA//9jrvUm")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
getdents64(r1, 0x0, 0x22)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000040)=0x52, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x39b3)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f0000000040), &(0x7f0000004880)=@udp=r4}, 0x20)
recvmmsg(r4, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$inet6(r4, &(0x7f0000001180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c)

11m32.567272391s ago: executing program 3 (id=523):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000013c0)={@hyper})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x10fe8, "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"}, 0x11000})

11m31.093176375s ago: executing program 3 (id=527):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000100), 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$nci(r2, &(0x7f00000005c0)=ANY=[], 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)

11m28.82652156s ago: executing program 3 (id=531):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0xc031, 0xffffffffffffffff, 0xd9e7d000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
readv(r6, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1)
fcntl$setsig(r5, 0xa, 0x12)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
dup2(r5, r6)
fcntl$setown(r6, 0x8, 0x0)
tkill(0x0, 0x13)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0x39ac, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xf300, 0xffffffff, 0xffffffff, 0xe8e0, 0xffffffff, 0xffffffff]], '\x00', [{0x2, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x9, 0x8, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0xffc, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x4})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)

11m26.996953904s ago: executing program 3 (id=533):
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xbf)
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r1 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000000), 0x75)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000940)={r1})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @exit]}, &(0x7f00000002c0)='GPL\x00', 0x97153d4a, 0xb8, &(0x7f0000000480)=""/184, 0x40f00, 0x44, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x2}, 0x10, 0x3c5e, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[r2, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x1, 0x6, 0x2}], 0x10, 0x80000000}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
connect$inet(r3, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x1, 0x3, 0xb, 0x3, r0})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)

11m21.411750068s ago: executing program 4 (id=543):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0xa6d2000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x71)
kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x4})
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r4 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r4, &(0x7f00000004c0)=""/102392, 0x18ff8)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
openat(0xffffffffffffffff, 0x0, 0x60040, 0x0)
getsockopt$SO_NETNS_COOKIE(0xffffffffffffffff, 0x1, 0x47, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)

11m21.23801232s ago: executing program 32 (id=519):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000100), 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$nci(r2, &(0x7f00000005c0)=ANY=[], 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, 0x0, 0x0)

11m18.998531894s ago: executing program 4 (id=546):
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r2=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054)
socket$kcm(0x2, 0xa, 0x2)

11m18.131589379s ago: executing program 4 (id=549):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x803, 0x0)

11m16.817835344s ago: executing program 4 (id=552):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x32, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
open(&(0x7f0000000880)='./dev/gnss0\x00', 0x0, 0xfc559a7289ff8d5e)
openat(r0, &(0x7f00000004c0)='./dev/gnss0\x00', 0x4001, 0xc0)

11m10.323171543s ago: executing program 33 (id=533):
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xbf)
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
sched_setattr(r0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r1 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000000), 0x75)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000940)={r1})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @exit]}, &(0x7f00000002c0)='GPL\x00', 0x97153d4a, 0xb8, &(0x7f0000000480)=""/184, 0x40f00, 0x44, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x2}, 0x10, 0x3c5e, 0xffffffffffffffff, 0x1, &(0x7f0000000680)=[r2, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x1, 0x6, 0x2}], 0x10, 0x80000000}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
connect$inet(r3, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x1, 0x3, 0xb, 0x3, r0})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)

11m10.29965506s ago: executing program 4 (id=558):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0xa6d2000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x71)
kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={r3, 0xffffffffffffffff, 0x4})
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r4 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r4, &(0x7f00000004c0)=""/102392, 0x18ff8)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
openat(0xffffffffffffffff, 0x0, 0x60040, 0x0)
getsockopt$SO_NETNS_COOKIE(0xffffffffffffffff, 0x1, 0x47, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)

11m8.460448088s ago: executing program 4 (id=560):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffbff9, 0x0, 0x0, 0x2, 0x23, 0x3, 0x401}, {0x5, 0xb}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x640100fd}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xf9, 0x3, 0x0, 0xffffffff}}, 0xe8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x40082)
mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0)
listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)

10m51.782256061s ago: executing program 34 (id=560):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffbff9, 0x0, 0x0, 0x2, 0x23, 0x3, 0x401}, {0x5, 0xb}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x640100fd}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xf9, 0x3, 0x0, 0xffffffff}}, 0xe8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x40082)
mq_timedsend(r4, 0x0, 0x0, 0x4, 0x0)
listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)

5m48.966396973s ago: executing program 8 (id=1421):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0), 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0xa4}}, 0x4)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401"], 0x18}}, 0x2000481c)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
read$FUSE(r6, &(0x7f0000003380)={0x2020}, 0x2020)

5m45.729744994s ago: executing program 8 (id=1425):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)='.\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28)
r1 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000000c0)=@base={0x14, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x40, r3, 0x400, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x6048800)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES64=r1, @ANYBLOB="080001000100000008000100010000000800010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xf7, 0x80, 0x5, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0xb, 0x67, 0xff}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x41, 0x44}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0xfe, 0x6}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x4, 0x5, 0x5, 0xff, 0x1}, 0x31, &(0x7f00000000c0)={0x5, 0xf, 0x31, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0x7f, 0x1}, @generic={0x3, 0x10, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xf8, 0x2e, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "373a935e676dd6e010b2300aa8fa67e4"}]}})
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/rnbd-client/ctl/map_device\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000000040)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r5, &(0x7f0000000080), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r5, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r5, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r5, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000214)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000220)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000224)={0x2, 0xfa}, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0)='psmouse\x00', 0x8)
r6 = landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x6, 0x0, 0x1c06, 0x8, 0x1}, 0x30, 0x0)
landlock_restrict_self(r6, 0xa)
landlock_restrict_self(0xffffffffffffffff, 0xc)

5m41.924872799s ago: executing program 8 (id=1444):
getpid()
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x0, 0x0})
syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082)
close_range(r0, 0xffffffffffffffff, 0x0)

5m40.719109807s ago: executing program 8 (id=1451):
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
socket(0x400000000010, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$random(0xffffff9c, &(0x7f00000000c0), 0x400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

5m39.354728406s ago: executing program 8 (id=1459):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000002200)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0)

5m38.778879186s ago: executing program 8 (id=1463):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000004c0)={{0x2, 0x3, 0x8, 0x72a, 0x7fff, 0x7}, 0x5a, [0xfffe0000, 0x0, 0xc62, 0x6, 0x8, 0x7, 0x2, 0x2, 0x5a1, 0x5, 0x2, 0xb88, 0x6, 0x7, 0x8001, 0xf, 0x4b, 0x101, 0x7, 0x6, 0x0, 0x9, 0x4, 0x8000, 0x9, 0x4, 0xf, 0xde, 0x101, 0x9, 0x9, 0x8, 0x200, 0x4, 0x8, 0x6, 0x8, 0x3, 0x7fff, 0x1ff, 0x8001, 0xfffffffb, 0xfaa1, 0x7, 0x1, 0x3d3, 0x3ff, 0x8, 0x8, 0x3, 0x6, 0x9, 0x7, 0x90f2, 0x9, 0xff, 0x57, 0x2, 0x4, 0x1, 0xfffffffa, 0x6, 0xb759, 0x40, 0x8001, 0x8000, 0x7, 0x0, 0xc4b2, 0x25d, 0x1000, 0x3, 0x5, 0x1, 0x4, 0x1, 0x6, 0x83, 0x1, 0x5, 0x7fff, 0x10000, 0x227, 0x8, 0x9, 0x1, 0x401, 0x5, 0x9, 0x9, 0x3d, 0x8, 0x7fffffff, 0xfffffffe, 0x4, 0xac9ea37, 0xf934, 0x10, 0x7fffffff, 0x1e, 0x7, 0x10001, 0x1, 0x4, 0xc96b, 0x1ff, 0x9, 0x9, 0x4, 0x5, 0x401, 0x2f3289cd, 0x7, 0x2, 0x7fffffff, 0xfffffff7, 0xd, 0xffff8000, 0x0, 0x2, 0x9, 0x3, 0x9, 0xffffffff, 0x1, 0xcb3, 0x0, 0x1000, 0x9, 0x2, 0x101, 0xe2da, 0x101, 0x8, 0x0, 0xfffff001, 0x8, 0x6, 0xff, 0x200, 0x4, 0x8, 0x3, 0x5, 0x1, 0x3, 0xe, 0x2, 0x6, 0x42, 0x1ff, 0xa, 0x1, 0x4, 0x8, 0x10, 0x4277, 0x3, 0x8001, 0xba7b, 0xc0, 0x6, 0xa, 0xfff, 0x4, 0xf9b, 0x5, 0x400, 0x9, 0x3, 0xa1ed, 0x1, 0x1000, 0xffffffff, 0x8001, 0x4, 0x6, 0x0, 0x1, 0x8, 0x10001, 0x4, 0x3, 0x5, 0x7, 0xfffffffc, 0x7f, 0x401, 0x9, 0x6, 0x9, 0x4, 0x101, 0x0, 0x2, 0x7, 0xbff, 0x9aa, 0x200, 0x3, 0x1000, 0x1, 0x7, 0x5, 0x8, 0x8, 0x6, 0xfffeffff, 0x2, 0x6, 0x80000000, 0x10000, 0x6, 0x400, 0x1, 0x2daf, 0x3, 0x3, 0x3, 0x4, 0xd9b3, 0x3, 0x2, 0x80000000, 0x67e9, 0x70, 0x6, 0x3, 0x7f, 0x9, 0x1189a640, 0x7ff, 0x4, 0x81, 0xe43, 0x9, 0x40, 0x8, 0x1, 0x7, 0x7ff, 0x7, 0x8, 0x1, 0x0, 0x4, 0x6f7, 0x3, 0xfff, 0x7f, 0x140, 0x4c8, 0xfffffffc, 0x0, 0x7fff, 0x7ff, 0x6, 0xbe3, 0x80000000, 0x1ce0000, 0x8, 0x7, 0xb, 0x2, 0x7f, 0xc, 0x6, 0x2, 0xfffffff9, 0x3, 0x30, 0x80, 0x31, 0x6a5dc3c6, 0x0, 0x3, 0x0, 0x1, 0x8, 0x1, 0x3, 0x5, 0xf62c, 0xfffffffc, 0x0, 0x5, 0x1, 0xea, 0x7f, 0x2, 0x9, 0xf, 0x4, 0x6, 0x0, 0x4, 0x94c1, 0x9, 0xffffff40, 0x10001, 0x4, 0x0, 0xffffffff, 0x18c9, 0x6, 0x4, 0x1, 0x2, 0x9, 0x5, 0x1, 0x6, 0x2, 0x548d, 0x2, 0x7, 0xffffffff, 0x0, 0x7f, 0x7, 0x2, 0x20008001, 0x8, 0x9, 0xffffffff, 0x10000, 0xcf9f, 0x0, 0x3ae, 0x0, 0x2, 0x8000, 0x800, 0x2, 0x14000000, 0x80000000, 0xfffffffc, 0xffffffff, 0x40, 0x4, 0x8, 0xcf, 0x2, 0x4b, 0x7f, 0x6, 0x0, 0x0, 0x5, 0x85, 0x6, 0xea7a, 0x1d4, 0x5, 0x6db3996, 0x8, 0x3, 0x5, 0x3, 0x82, 0xf0d6, 0x8, 0x401, 0x6, 0x6, 0x2, 0x4, 0x0, 0xfffffffb, 0x0, 0xfffffffa, 0x7f, 0x10, 0x33a, 0x1, 0x41, 0x7ff, 0xfffffe01, 0x2, 0x1, 0xde, 0x6000, 0x8000, 0xfffffff8, 0x7, 0x44, 0x1ae5, 0xb93, 0x0, 0x81, 0xffff, 0x4, 0x6, 0x1ff, 0x3ff, 0x6, 0x6, 0x1, 0x23fd, 0xdb91, 0x6, 0x8, 0x2, 0x9, 0x7fff, 0x7, 0xb5c, 0xa9, 0x4, 0x9, 0x1, 0x7, 0x80000000, 0x8001, 0x0, 0x8, 0x5, 0x1000, 0x0, 0xfffffaf2, 0x6, 0x101, 0xfff, 0x1, 0x3e8, 0xfffffff8, 0x2, 0x4c0, 0x0, 0x2, 0x40000000, 0x80000000, 0x5658, 0x7, 0x81, 0x5e, 0x7ff, 0x32, 0x9, 0xf1d0, 0x4, 0x6, 0x78d4, 0x80, 0x2000, 0x4, 0x60, 0x80000000, 0x0, 0x1, 0x6, 0x183c, 0xf3, 0x1, 0x4, 0x4, 0x8, 0x2, 0x6, 0x200, 0x95, 0xe, 0x7, 0x9, 0xe12, 0x5, 0x4, 0x5, 0xdf4, 0x10000, 0x9, 0x8000, 0x5, 0x6, 0x0, 0x800, 0x7, 0x2, 0x700000, 0xe881, 0x7, 0x1ff, 0x1, 0x1, 0x3, 0x7, 0x8, 0x4, 0x6, 0x10001, 0x4, 0xfffffffa, 0x1, 0x0, 0x10001, 0x8e, 0x40, 0x3, 0x8, 0xfffffffd, 0x800, 0x1, 0x0, 0xfffffffc, 0x2, 0x2, 0x0, 0x7, 0x7, 0x9, 0x4, 0x4ce1, 0x5, 0x2, 0x6, 0x8000, 0x1000, 0xff, 0x2, 0x5, 0x2e0, 0x8000, 0x5f1, 0x7, 0x3ff, 0x1, 0x22, 0x8000, 0x3, 0xe, 0x8a5, 0x3, 0x41, 0x0, 0xa2d, 0xaf, 0x5, 0xb3fa, 0xe, 0x0, 0x1, 0x4, 0x9, 0x3f, 0x401, 0xc, 0x6, 0xc, 0x6, 0x0, 0x5, 0x3, 0x6, 0x8, 0xffffffff, 0x2, 0x9, 0x1, 0xd4, 0x5, 0xffffffff, 0x0, 0x1, 0x5, 0x1000, 0x9, 0x1ff, 0x6, 0xfcee, 0x7fff, 0x3ff, 0x40, 0xfffffffe, 0x6, 0x9f, 0x0, 0x80000001, 0xc, 0x1f, 0x1, 0x7f, 0x7, 0xdac, 0xff, 0x80, 0xf21, 0xffff, 0x4, 0x7, 0x1, 0xac9, 0x1, 0x7, 0x1ff, 0x3, 0x6, 0xfffffffd, 0x4, 0x80000001, 0x9, 0x7ff, 0x3, 0x9, 0x7fe8, 0x10000, 0x1, 0xf7, 0x10, 0x3, 0x800, 0x2, 0xfffffffc, 0x1000, 0x86, 0x81, 0x0, 0x0, 0x9bb1, 0x3, 0xb, 0x3, 0x9b0, 0x8, 0x9b, 0x10001, 0x4, 0x3835, 0x7ff, 0x4, 0x8, 0x7ff, 0x10001, 0x5f0, 0x4, 0x1, 0xd, 0x1, 0x8000, 0x2, 0x800, 0x60, 0x6, 0x5, 0x51, 0x5, 0x7, 0x3, 0x8, 0xff, 0x5, 0x4, 0x7, 0x8, 0x9, 0x1, 0x9, 0x7, 0x26d, 0x8001, 0x0, 0x5, 0x9, 0x5e25, 0x0, 0x3, 0x81, 0x1, 0x3, 0x80000001, 0x2, 0x0, 0x6, 0x5, 0x2, 0x0, 0x7, 0xef74, 0x7f, 0x7, 0x6f9d0a6b, 0x9, 0xe, 0x5, 0x2, 0x7, 0x3, 0x7, 0x6, 0x3, 0x81, 0x80000001, 0x3f80, 0x0, 0x1000, 0x10001, 0xebc2, 0x2a2, 0x4, 0xb, 0x762, 0x7, 0x1, 0x5, 0xff, 0x1, 0x8000, 0x5, 0x6, 0x5, 0x81, 0xc4f0, 0x2, 0x3, 0x1, 0x7, 0xfffffffc, 0x2, 0x5, 0xe, 0x4, 0x8000, 0x8, 0x5, 0xb3, 0xa, 0x9, 0x1000, 0x2, 0x1, 0x10, 0x1, 0x8, 0x12c1fb67, 0x3, 0x274b, 0x1, 0xfffffffc, 0x8, 0x0, 0x656580, 0x0, 0x7, 0x5, 0x9, 0xfffffff6, 0x7, 0x5cf, 0xbd, 0x7, 0x6e, 0x2, 0xc, 0x10000, 0x2, 0x4, 0x60, 0x7f, 0x1, 0x4, 0x0, 0x3, 0xf, 0x3, 0xb4c, 0xb, 0x5, 0x1, 0x7f, 0x0, 0x7, 0xc7, 0x3, 0x2, 0x5, 0x81, 0x5, 0x40, 0x400, 0x6, 0x6, 0x0, 0xfffffffa, 0xf, 0xf57d, 0x3ff, 0x7, 0xe1, 0x8, 0x0, 0xbc, 0x1, 0x7, 0x6, 0x0, 0x8000, 0x3, 0x1, 0x9, 0xe6, 0x8, 0x3, 0x7, 0x1, 0x101, 0x8001, 0x6, 0x39, 0x9, 0xe, 0x3, 0x9, 0x3, 0x5, 0x5, 0x7, 0x2, 0x80, 0x8d, 0xffffffff, 0x6, 0x6, 0x8000, 0x3, 0x1, 0x2, 0xff, 0x6280, 0xd82, 0x6, 0x0, 0x4, 0xfffffff7, 0xe2, 0x0, 0x0, 0xf, 0x9, 0x7, 0x81, 0x10, 0x2, 0x4, 0x7fff, 0x7, 0x0, 0xffff, 0xffffffff, 0x5, 0x4, 0x5, 0xdd13c0cc, 0x81, 0x14, 0x800000, 0x5, 0x8, 0x6, 0x3, 0x2, 0x401, 0x593d, 0x9, 0x0, 0x6, 0x9, 0x860b, 0x1, 0xfffffffb, 0x6, 0x2, 0x2, 0xd2, 0x8000, 0x3ff, 0x7, 0x8, 0x1, 0x3, 0x5, 0x2, 0xffffff7f, 0xd8fc, 0x7ff, 0x40, 0x6, 0x2, 0x8, 0x40000000, 0x5e27, 0x4, 0xf6, 0x6, 0xffffffff, 0x7f, 0x6, 0x6, 0x3, 0xa, 0x8, 0x1, 0xfffffff8, 0x3, 0xfffffffb, 0x101, 0x0, 0xcff3, 0x1, 0xb78, 0x6, 0x22, 0x200, 0x3, 0x4, 0x0, 0x7f, 0xe, 0x2, 0x7, 0x4a4c, 0x3, 0xed, 0x80, 0x80000001, 0x3ff, 0x5, 0x158000, 0x58, 0x66a, 0x0, 0x7, 0x7, 0x0, 0x4, 0x3, 0x1, 0x4, 0x0, 0x7ff, 0x470, 0x59fc, 0x9c4, 0x4, 0x18d, 0xb, 0x3, 0x9, 0x8, 0x6, 0x4, 0xb, 0x6, 0x6, 0xe5f3, 0xfffffff8, 0x4, 0x9, 0x9, 0x3, 0xb0a, 0x2, 0x4, 0x200, 0x6, 0x0, 0x3, 0x100, 0x2, 0x5, 0x2, 0x1, 0x7, 0x5574, 0x3, 0x5, 0x0, 0x1, 0x22, 0x1e64d565, 0x242, 0x3, 0x9, 0x8, 0x2d, 0x4, 0x7a, 0xb7, 0xd2a, 0x531c, 0x5, 0xc6, 0x0, 0xfffffffe, 0x8001, 0x1000, 0x7, 0x3, 0x8001, 0x4, 0x5, 0x10, 0x1, 0x5, 0x9a7c, 0x3ff, 0x9, 0x80000000, 0x1, 0x5, 0x7, 0x7, 0x6, 0x0, 0x2, 0x5, 0x8, 0x3, 0x1, 0x5, 0x9, 0xff, 0x12000, 0x7fffffff, 0x7, 0x7]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0)

5m19.952928776s ago: executing program 35 (id=1463):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000004c0)={{0x2, 0x3, 0x8, 0x72a, 0x7fff, 0x7}, 0x5a, [0xfffe0000, 0x0, 0xc62, 0x6, 0x8, 0x7, 0x2, 0x2, 0x5a1, 0x5, 0x2, 0xb88, 0x6, 0x7, 0x8001, 0xf, 0x4b, 0x101, 0x7, 0x6, 0x0, 0x9, 0x4, 0x8000, 0x9, 0x4, 0xf, 0xde, 0x101, 0x9, 0x9, 0x8, 0x200, 0x4, 0x8, 0x6, 0x8, 0x3, 0x7fff, 0x1ff, 0x8001, 0xfffffffb, 0xfaa1, 0x7, 0x1, 0x3d3, 0x3ff, 0x8, 0x8, 0x3, 0x6, 0x9, 0x7, 0x90f2, 0x9, 0xff, 0x57, 0x2, 0x4, 0x1, 0xfffffffa, 0x6, 0xb759, 0x40, 0x8001, 0x8000, 0x7, 0x0, 0xc4b2, 0x25d, 0x1000, 0x3, 0x5, 0x1, 0x4, 0x1, 0x6, 0x83, 0x1, 0x5, 0x7fff, 0x10000, 0x227, 0x8, 0x9, 0x1, 0x401, 0x5, 0x9, 0x9, 0x3d, 0x8, 0x7fffffff, 0xfffffffe, 0x4, 0xac9ea37, 0xf934, 0x10, 0x7fffffff, 0x1e, 0x7, 0x10001, 0x1, 0x4, 0xc96b, 0x1ff, 0x9, 0x9, 0x4, 0x5, 0x401, 0x2f3289cd, 0x7, 0x2, 0x7fffffff, 0xfffffff7, 0xd, 0xffff8000, 0x0, 0x2, 0x9, 0x3, 0x9, 0xffffffff, 0x1, 0xcb3, 0x0, 0x1000, 0x9, 0x2, 0x101, 0xe2da, 0x101, 0x8, 0x0, 0xfffff001, 0x8, 0x6, 0xff, 0x200, 0x4, 0x8, 0x3, 0x5, 0x1, 0x3, 0xe, 0x2, 0x6, 0x42, 0x1ff, 0xa, 0x1, 0x4, 0x8, 0x10, 0x4277, 0x3, 0x8001, 0xba7b, 0xc0, 0x6, 0xa, 0xfff, 0x4, 0xf9b, 0x5, 0x400, 0x9, 0x3, 0xa1ed, 0x1, 0x1000, 0xffffffff, 0x8001, 0x4, 0x6, 0x0, 0x1, 0x8, 0x10001, 0x4, 0x3, 0x5, 0x7, 0xfffffffc, 0x7f, 0x401, 0x9, 0x6, 0x9, 0x4, 0x101, 0x0, 0x2, 0x7, 0xbff, 0x9aa, 0x200, 0x3, 0x1000, 0x1, 0x7, 0x5, 0x8, 0x8, 0x6, 0xfffeffff, 0x2, 0x6, 0x80000000, 0x10000, 0x6, 0x400, 0x1, 0x2daf, 0x3, 0x3, 0x3, 0x4, 0xd9b3, 0x3, 0x2, 0x80000000, 0x67e9, 0x70, 0x6, 0x3, 0x7f, 0x9, 0x1189a640, 0x7ff, 0x4, 0x81, 0xe43, 0x9, 0x40, 0x8, 0x1, 0x7, 0x7ff, 0x7, 0x8, 0x1, 0x0, 0x4, 0x6f7, 0x3, 0xfff, 0x7f, 0x140, 0x4c8, 0xfffffffc, 0x0, 0x7fff, 0x7ff, 0x6, 0xbe3, 0x80000000, 0x1ce0000, 0x8, 0x7, 0xb, 0x2, 0x7f, 0xc, 0x6, 0x2, 0xfffffff9, 0x3, 0x30, 0x80, 0x31, 0x6a5dc3c6, 0x0, 0x3, 0x0, 0x1, 0x8, 0x1, 0x3, 0x5, 0xf62c, 0xfffffffc, 0x0, 0x5, 0x1, 0xea, 0x7f, 0x2, 0x9, 0xf, 0x4, 0x6, 0x0, 0x4, 0x94c1, 0x9, 0xffffff40, 0x10001, 0x4, 0x0, 0xffffffff, 0x18c9, 0x6, 0x4, 0x1, 0x2, 0x9, 0x5, 0x1, 0x6, 0x2, 0x548d, 0x2, 0x7, 0xffffffff, 0x0, 0x7f, 0x7, 0x2, 0x20008001, 0x8, 0x9, 0xffffffff, 0x10000, 0xcf9f, 0x0, 0x3ae, 0x0, 0x2, 0x8000, 0x800, 0x2, 0x14000000, 0x80000000, 0xfffffffc, 0xffffffff, 0x40, 0x4, 0x8, 0xcf, 0x2, 0x4b, 0x7f, 0x6, 0x0, 0x0, 0x5, 0x85, 0x6, 0xea7a, 0x1d4, 0x5, 0x6db3996, 0x8, 0x3, 0x5, 0x3, 0x82, 0xf0d6, 0x8, 0x401, 0x6, 0x6, 0x2, 0x4, 0x0, 0xfffffffb, 0x0, 0xfffffffa, 0x7f, 0x10, 0x33a, 0x1, 0x41, 0x7ff, 0xfffffe01, 0x2, 0x1, 0xde, 0x6000, 0x8000, 0xfffffff8, 0x7, 0x44, 0x1ae5, 0xb93, 0x0, 0x81, 0xffff, 0x4, 0x6, 0x1ff, 0x3ff, 0x6, 0x6, 0x1, 0x23fd, 0xdb91, 0x6, 0x8, 0x2, 0x9, 0x7fff, 0x7, 0xb5c, 0xa9, 0x4, 0x9, 0x1, 0x7, 0x80000000, 0x8001, 0x0, 0x8, 0x5, 0x1000, 0x0, 0xfffffaf2, 0x6, 0x101, 0xfff, 0x1, 0x3e8, 0xfffffff8, 0x2, 0x4c0, 0x0, 0x2, 0x40000000, 0x80000000, 0x5658, 0x7, 0x81, 0x5e, 0x7ff, 0x32, 0x9, 0xf1d0, 0x4, 0x6, 0x78d4, 0x80, 0x2000, 0x4, 0x60, 0x80000000, 0x0, 0x1, 0x6, 0x183c, 0xf3, 0x1, 0x4, 0x4, 0x8, 0x2, 0x6, 0x200, 0x95, 0xe, 0x7, 0x9, 0xe12, 0x5, 0x4, 0x5, 0xdf4, 0x10000, 0x9, 0x8000, 0x5, 0x6, 0x0, 0x800, 0x7, 0x2, 0x700000, 0xe881, 0x7, 0x1ff, 0x1, 0x1, 0x3, 0x7, 0x8, 0x4, 0x6, 0x10001, 0x4, 0xfffffffa, 0x1, 0x0, 0x10001, 0x8e, 0x40, 0x3, 0x8, 0xfffffffd, 0x800, 0x1, 0x0, 0xfffffffc, 0x2, 0x2, 0x0, 0x7, 0x7, 0x9, 0x4, 0x4ce1, 0x5, 0x2, 0x6, 0x8000, 0x1000, 0xff, 0x2, 0x5, 0x2e0, 0x8000, 0x5f1, 0x7, 0x3ff, 0x1, 0x22, 0x8000, 0x3, 0xe, 0x8a5, 0x3, 0x41, 0x0, 0xa2d, 0xaf, 0x5, 0xb3fa, 0xe, 0x0, 0x1, 0x4, 0x9, 0x3f, 0x401, 0xc, 0x6, 0xc, 0x6, 0x0, 0x5, 0x3, 0x6, 0x8, 0xffffffff, 0x2, 0x9, 0x1, 0xd4, 0x5, 0xffffffff, 0x0, 0x1, 0x5, 0x1000, 0x9, 0x1ff, 0x6, 0xfcee, 0x7fff, 0x3ff, 0x40, 0xfffffffe, 0x6, 0x9f, 0x0, 0x80000001, 0xc, 0x1f, 0x1, 0x7f, 0x7, 0xdac, 0xff, 0x80, 0xf21, 0xffff, 0x4, 0x7, 0x1, 0xac9, 0x1, 0x7, 0x1ff, 0x3, 0x6, 0xfffffffd, 0x4, 0x80000001, 0x9, 0x7ff, 0x3, 0x9, 0x7fe8, 0x10000, 0x1, 0xf7, 0x10, 0x3, 0x800, 0x2, 0xfffffffc, 0x1000, 0x86, 0x81, 0x0, 0x0, 0x9bb1, 0x3, 0xb, 0x3, 0x9b0, 0x8, 0x9b, 0x10001, 0x4, 0x3835, 0x7ff, 0x4, 0x8, 0x7ff, 0x10001, 0x5f0, 0x4, 0x1, 0xd, 0x1, 0x8000, 0x2, 0x800, 0x60, 0x6, 0x5, 0x51, 0x5, 0x7, 0x3, 0x8, 0xff, 0x5, 0x4, 0x7, 0x8, 0x9, 0x1, 0x9, 0x7, 0x26d, 0x8001, 0x0, 0x5, 0x9, 0x5e25, 0x0, 0x3, 0x81, 0x1, 0x3, 0x80000001, 0x2, 0x0, 0x6, 0x5, 0x2, 0x0, 0x7, 0xef74, 0x7f, 0x7, 0x6f9d0a6b, 0x9, 0xe, 0x5, 0x2, 0x7, 0x3, 0x7, 0x6, 0x3, 0x81, 0x80000001, 0x3f80, 0x0, 0x1000, 0x10001, 0xebc2, 0x2a2, 0x4, 0xb, 0x762, 0x7, 0x1, 0x5, 0xff, 0x1, 0x8000, 0x5, 0x6, 0x5, 0x81, 0xc4f0, 0x2, 0x3, 0x1, 0x7, 0xfffffffc, 0x2, 0x5, 0xe, 0x4, 0x8000, 0x8, 0x5, 0xb3, 0xa, 0x9, 0x1000, 0x2, 0x1, 0x10, 0x1, 0x8, 0x12c1fb67, 0x3, 0x274b, 0x1, 0xfffffffc, 0x8, 0x0, 0x656580, 0x0, 0x7, 0x5, 0x9, 0xfffffff6, 0x7, 0x5cf, 0xbd, 0x7, 0x6e, 0x2, 0xc, 0x10000, 0x2, 0x4, 0x60, 0x7f, 0x1, 0x4, 0x0, 0x3, 0xf, 0x3, 0xb4c, 0xb, 0x5, 0x1, 0x7f, 0x0, 0x7, 0xc7, 0x3, 0x2, 0x5, 0x81, 0x5, 0x40, 0x400, 0x6, 0x6, 0x0, 0xfffffffa, 0xf, 0xf57d, 0x3ff, 0x7, 0xe1, 0x8, 0x0, 0xbc, 0x1, 0x7, 0x6, 0x0, 0x8000, 0x3, 0x1, 0x9, 0xe6, 0x8, 0x3, 0x7, 0x1, 0x101, 0x8001, 0x6, 0x39, 0x9, 0xe, 0x3, 0x9, 0x3, 0x5, 0x5, 0x7, 0x2, 0x80, 0x8d, 0xffffffff, 0x6, 0x6, 0x8000, 0x3, 0x1, 0x2, 0xff, 0x6280, 0xd82, 0x6, 0x0, 0x4, 0xfffffff7, 0xe2, 0x0, 0x0, 0xf, 0x9, 0x7, 0x81, 0x10, 0x2, 0x4, 0x7fff, 0x7, 0x0, 0xffff, 0xffffffff, 0x5, 0x4, 0x5, 0xdd13c0cc, 0x81, 0x14, 0x800000, 0x5, 0x8, 0x6, 0x3, 0x2, 0x401, 0x593d, 0x9, 0x0, 0x6, 0x9, 0x860b, 0x1, 0xfffffffb, 0x6, 0x2, 0x2, 0xd2, 0x8000, 0x3ff, 0x7, 0x8, 0x1, 0x3, 0x5, 0x2, 0xffffff7f, 0xd8fc, 0x7ff, 0x40, 0x6, 0x2, 0x8, 0x40000000, 0x5e27, 0x4, 0xf6, 0x6, 0xffffffff, 0x7f, 0x6, 0x6, 0x3, 0xa, 0x8, 0x1, 0xfffffff8, 0x3, 0xfffffffb, 0x101, 0x0, 0xcff3, 0x1, 0xb78, 0x6, 0x22, 0x200, 0x3, 0x4, 0x0, 0x7f, 0xe, 0x2, 0x7, 0x4a4c, 0x3, 0xed, 0x80, 0x80000001, 0x3ff, 0x5, 0x158000, 0x58, 0x66a, 0x0, 0x7, 0x7, 0x0, 0x4, 0x3, 0x1, 0x4, 0x0, 0x7ff, 0x470, 0x59fc, 0x9c4, 0x4, 0x18d, 0xb, 0x3, 0x9, 0x8, 0x6, 0x4, 0xb, 0x6, 0x6, 0xe5f3, 0xfffffff8, 0x4, 0x9, 0x9, 0x3, 0xb0a, 0x2, 0x4, 0x200, 0x6, 0x0, 0x3, 0x100, 0x2, 0x5, 0x2, 0x1, 0x7, 0x5574, 0x3, 0x5, 0x0, 0x1, 0x22, 0x1e64d565, 0x242, 0x3, 0x9, 0x8, 0x2d, 0x4, 0x7a, 0xb7, 0xd2a, 0x531c, 0x5, 0xc6, 0x0, 0xfffffffe, 0x8001, 0x1000, 0x7, 0x3, 0x8001, 0x4, 0x5, 0x10, 0x1, 0x5, 0x9a7c, 0x3ff, 0x9, 0x80000000, 0x1, 0x5, 0x7, 0x7, 0x6, 0x0, 0x2, 0x5, 0x8, 0x3, 0x1, 0x5, 0x9, 0xff, 0x12000, 0x7fffffff, 0x7, 0x7]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0)

4m11.619613294s ago: executing program 0 (id=1666):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000100, 0x0, 0x1, 0x1}, 0x20)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r2, &(0x7f00000059c0)={0x2020}, 0x2020)
r3 = socket$inet6(0xa, 0x800, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20)
read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020)

4m9.942635356s ago: executing program 0 (id=1671):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write(0xffffffffffffffff, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401"], 0x18}}, 0x2000481c)

4m8.750007743s ago: executing program 0 (id=1672):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]})
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

4m7.433405739s ago: executing program 0 (id=1675):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r2, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)
socket$nl_route(0x10, 0x3, 0x0)

4m3.617620796s ago: executing program 0 (id=1683):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000600)=ANY=[], 0x1, 0x284, &(0x7f0000001000)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000700), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x290c471, 0x0, 0x1, 0x0, &(0x7f0000000740))
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x80)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2824004, 0x0, 0x5, 0x0, &(0x7f0000000000))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))

4m1.986545119s ago: executing program 0 (id=1688):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000340)={{0x0, @broadcast, 0x4e22, 0x0, 'none\x00', 0x1c, 0x4, 0x35}, {@loopback, 0x4e22, 0x4, 0x6, 0x380, 0x9ba}}, 0x44)
fsopen(0x0, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x56)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000580)={[{@grpjquota}, {@dioread_lock}, {@delalloc}, {@commit}]}, 0xfe, 0x258, &(0x7f0000000c40)="$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")
getpriority(0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84)
rt_sigqueueinfo(r0, 0x34, &(0x7f00000000c0)={0x21, 0xfff, 0xe})
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280))
openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000bc0)={{r6, &(0x7f0000000180)='%@:\\*\x00', 0x400000, &(0x7f0000000280)={@_ha_fsid={[0x80000001, 0x886c]}, {0x5, 0x4, 0x9, 0x6}}, 0x1, 0x0, &(0x7f0000000400)}, {[0x67, 0x56c, 0x3, 0x3]}, 0x4, 0xe5, &(0x7f0000000ac0)=""/229})
syz_usb_disconnect(0xffffffffffffffff)

3m46.649100812s ago: executing program 36 (id=1688):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000340)={{0x0, @broadcast, 0x4e22, 0x0, 'none\x00', 0x1c, 0x4, 0x35}, {@loopback, 0x4e22, 0x4, 0x6, 0x380, 0x9ba}}, 0x44)
fsopen(0x0, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x56)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000580)={[{@grpjquota}, {@dioread_lock}, {@delalloc}, {@commit}]}, 0xfe, 0x258, &(0x7f0000000c40)="$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")
getpriority(0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84)
rt_sigqueueinfo(r0, 0x34, &(0x7f00000000c0)={0x21, 0xfff, 0xe})
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280))
openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000bc0)={{r6, &(0x7f0000000180)='%@:\\*\x00', 0x400000, &(0x7f0000000280)={@_ha_fsid={[0x80000001, 0x886c]}, {0x5, 0x4, 0x9, 0x6}}, 0x1, 0x0, &(0x7f0000000400)}, {[0x67, 0x56c, 0x3, 0x3]}, 0x4, 0xe5, &(0x7f0000000ac0)=""/229})
syz_usb_disconnect(0xffffffffffffffff)

18.428002328s ago: executing program 2 (id=2277):
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000940)=[{}, {}, {}, {}, {}], &(0x7f0000000180))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
futex$unlock_wake_list32(&(0x7f0000000280)=0x9, 0x681, 0x0, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)=0x3, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}], 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r1, &(0x7f0000000100)=""/9, 0xfffffd87)
write$tun(r1, &(0x7f00000001c0)=ANY=[], 0xffe)

16.8875867s ago: executing program 2 (id=2282):
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap,'])
r1 = syz_open_procfs(0x0, 0x0)
read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000700), 0x1, 0x2)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

15.272196335s ago: executing program 2 (id=2284):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2481, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0x4}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x890)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

15.209871783s ago: executing program 6 (id=2286):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904"], 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x281841d, 0x0)

15.085680245s ago: executing program 9 (id=2287):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1195, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0xa4}}, 0x4)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401"], 0x18}}, 0x2000481c)
read$FUSE(0xffffffffffffffff, &(0x7f0000003380)={0x2020}, 0x2020)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x20000090}, 0x20048883)

12.22715026s ago: executing program 2 (id=2289):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, 0x0}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0xb6e}, 0x8)
sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000000180)="4fdf7a6f6ddc7befbb26d3f66f9de47c996a", 0x12}, {&(0x7f0000001580)="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", 0xef4}], 0x2}}], 0x1, 0x90)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0xffff, 0x2)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x4040000)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffffb, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffa9, 0x4c}, 0x9c)

11.153631107s ago: executing program 1 (id=2290):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4)
read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)

10.988066103s ago: executing program 5 (id=2291):
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xe0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r4, 0x8924, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x40000003)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

10.895531593s ago: executing program 6 (id=2292):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000100), 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$nci(r2, &(0x7f00000005c0)=ANY=[], 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)
socket$nl_route(0x10, 0x3, 0x0)

10.809695037s ago: executing program 7 (id=2293):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fe00, 0x80000100008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300))
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180))
memfd_secret(0x0)
io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0xfffffc9e)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750})
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000)

10.610134356s ago: executing program 9 (id=2294):
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
io_getevents(0x0, 0x5, 0x5, &(0x7f0000000940)=[{}, {}, {}, {}, {}], &(0x7f0000000180))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
futex$unlock_wake_list32(&(0x7f0000000280)=0x9, 0x681, 0x0, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)=0x3, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}], 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r1, &(0x7f0000000100)=""/9, 0xfffffd87)
write$tun(r1, &(0x7f00000001c0)=ANY=[], 0xffe)

9.747018061s ago: executing program 2 (id=2295):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)='.\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f00000000c0)=@base={0x14, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x40, r2, 0x400, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x6048800)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804)
socket$packet(0x11, 0x3, 0x300)
syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xf7, 0x80, 0x5, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0xb, 0x67, 0xff}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x41, 0x44}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0xfe, 0x6}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x4, 0x5, 0x5, 0xff, 0x1}, 0x31, &(0x7f00000000c0)={0x5, 0xf, 0x31, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x4, 0x7f, 0x1}, @generic={0x3, 0x10, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xf8, 0x2e, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "373a935e676dd6e010b2300aa8fa67e4"}]}})
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/rnbd-client/ctl/map_device\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r4, &(0x7f0000000080), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000214)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000220)={0x2, 0xfa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000224)={0x2, 0xfa}, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0)
write(r5, &(0x7f00000001c0)='psmouse\x00', 0x8)
r6 = landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x6, 0x0, 0x1c06, 0x8, 0x1}, 0x30, 0x0)
landlock_restrict_self(r6, 0xa)
landlock_restrict_self(0xffffffffffffffff, 0xc)

9.666177217s ago: executing program 6 (id=2296):
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap,'])
r1 = syz_open_procfs(0x0, 0x0)
read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000700), 0x1, 0x2)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

9.569549372s ago: executing program 1 (id=2297):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000100), 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)
socket$nl_route(0x10, 0x3, 0x0)

9.452520451s ago: executing program 5 (id=2298):
r0 = syz_create_resource$binfmt(0x0)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x7f)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0)
read$proc_mixer(r1, &(0x7f0000000300)=""/253, 0xfd)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0xffffffa2)
socket$vsock_stream(0x28, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2000000, 0x46, 0x0, 0x0, 0x0, 0x3}, 0xe)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

9.277550333s ago: executing program 9 (id=2299):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)={0x28, r0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0xde, 0x0, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/75, 0x4b)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0)
ppoll(&(0x7f0000000040)=[{r2, 0x23}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x1a)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x7, 0x6, 0x8, 0x10000, 0x17, "9cbecf7e982e4b98c96ffb8248ebd8aa24425b"})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r3}, 0x8)
close(0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000040)='0\x00', 0x2)

8.603854763s ago: executing program 7 (id=2300):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x1}})
io_uring_enter(r1, 0x4, 0x1, 0x1, 0x0, 0x0)
getsockname$packet(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x36, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6c9, 0x2f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x15}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x1)
write(r5, &(0x7f00000001c0)='1', 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000280)={0xf0f022})

8.416059149s ago: executing program 6 (id=2301):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x1, 0x7ffffffd, 0x1, 0xfa11, 0xffffffff}, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28)
recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x317, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000f00000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d3227e7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x408c0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='w\x00\x00\x00'], 0x8)

8.214982745s ago: executing program 5 (id=2302):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2481, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0x4}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x890)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

7.927546782s ago: executing program 1 (id=2303):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

7.212980634s ago: executing program 9 (id=2304):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904"], 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x281841d, 0x0)

7.150736965s ago: executing program 7 (id=2305):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
creat(0x0, 0x175)
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
acct(&(0x7f0000000000)='./bus\x00')
syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
acct(0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
r3 = open(0x0, 0x66842, 0x21)
syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r2}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x2000, 0x1, 0x321, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @empty}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c90035b5200900000000000000e3df911ecb254f020127326a6db6554156814d17b46fe345be823f828bc881de014c2d245fdd8b457f8512"], 0x39)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)

6.790415502s ago: executing program 1 (id=2306):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1195, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0xa4}}, 0x4)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401"], 0x18}}, 0x2000481c)
read$FUSE(0xffffffffffffffff, &(0x7f0000003380)={0x2020}, 0x2020)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x20000090}, 0x20048883)

6.327655775s ago: executing program 7 (id=2307):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, 0x0}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0xb6e}, 0x8)
sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000000180)="4fdf7a6f6ddc7befbb26d3f66f9de47c996a", 0x12}, {&(0x7f0000001580)="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", 0xef4}], 0x2}}], 0x1, 0x90)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0xffff, 0x2)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x4040000)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffffb, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffa9, 0x4c}, 0x9c)

5.608320448s ago: executing program 2 (id=2308):
socket$netlink(0x10, 0x3, 0x13)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0xc, 0x2005, 0x7, 0xc1, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001600), &(0x7f0000000100), 0x3f, r3}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, &(0x7f0000000000)="f805f34db52a0d61133bed5d", 0x0}, 0x20)

4.745351366s ago: executing program 1 (id=2309):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000100), 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$nci(r2, &(0x7f00000005c0)=ANY=[], 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{0x0}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r4, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)
socket$nl_route(0x10, 0x3, 0x0)

4.735085293s ago: executing program 5 (id=2310):
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xe0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r4, 0x8924, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x40000003)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

4.452088113s ago: executing program 6 (id=2311):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x5607, 0x30)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x4)
r1 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
ioctl$MEMWRITE(r1, 0xc0304d18, &(0x7f0000000100)={0x74, 0x0, 0x0, 0x0, 0x0, 0x2})
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x100}}, 0x40)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x11}, 0x0)
shmctl$SHM_LOCK(0x0, 0xb)
shmctl$IPC_RMID(0x0, 0x0)
r6 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r6, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20b00, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r7, 0x400455c8, 0x800000000000000)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000100)={0x1, 'bond0\x00', {}, 0x240})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc})

3.994673642s ago: executing program 9 (id=2312):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1fe00, 0x80000100008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300))
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ef, 0x100, 0x1, 0x11}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180))
memfd_secret(0x0)
io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0xfffffc9e)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b00280000000000000000000000ed00", 0x32435750})
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000)

3.914268s ago: executing program 5 (id=2313):
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap,'])
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r1, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$radio(&(0x7f0000000700), 0x1, 0x2)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

3.5534199s ago: executing program 7 (id=2314):
r0 = syz_create_resource$binfmt(0x0)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x7f)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0)
read$proc_mixer(r1, &(0x7f0000000300)=""/253, 0xfd)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0xffffffa2)
socket$vsock_stream(0x28, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2000000, 0x46, 0x0, 0x0, 0x0, 0x3}, 0xe)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

469.564156ms ago: executing program 6 (id=2315):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000100), 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)
socket$nl_route(0x10, 0x3, 0x0)

403.398605ms ago: executing program 5 (id=2316):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x24000880)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0xde, 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/75, 0x4b)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x23}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000200)=0x1a)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7, 0x6, 0x8, 0x10000, 0x17, "9cbecf7e982e4b98c96ffb8248ebd8aa24425b"})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r2=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x8)
close(0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f0000000040)='0\x00', 0x2)

240.172261ms ago: executing program 7 (id=2317):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x100}}, 0x40)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x11}, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
r1 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)

237.271088ms ago: executing program 1 (id=2318):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(0x0, r2, r3, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x1}})
io_uring_enter(r1, 0x4, 0x1, 0x1, 0x0, 0x0)
getsockname$packet(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x36, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6c9, 0x2f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x15}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x1)
write(r4, &(0x7f00000001c0)='1', 0x1)

0s ago: executing program 9 (id=2319):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
creat(0x0, 0x175)
mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02)
acct(&(0x7f0000000000)='./bus\x00')
syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
acct(0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
r3 = open(0x0, 0x66842, 0x21)
syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r2}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0x1, 0x3de, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0x1, 0x278, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x2000, 0x1, 0x321, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b94, 0x200, 0x3, 0xc4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @empty}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c90035b5200900000000000000e3df911ecb254f020127326a6db6554156814d17b46fe345be823f828bc881de014c2d245fdd8b457f8512"], 0x39)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)

kernel console output (not intermixed with test programs):

bled
[  692.638692][T11083] bond4: entered promiscuous mode
[  692.640740][T11083] 8021q: adding VLAN 0 to HW filter on device bond4
[  692.727755][T11087] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  692.856058][ T8315] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.161595][T11106] device-mapper: table: 248:0: multipath: not enough priority group arguments (-EINVAL)
[  693.161639][T11106] device-mapper: ioctl: error adding target to table
[  693.214682][T11109] loop8: detected capacity change from 0 to 256
[  693.295709][T11109] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  693.421989][T11109] exFAT-fs (loop8): valid_size(562949953421322) is greater than size(10)
[  697.703703][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1471'.
[  699.416789][T11155] loop1: detected capacity change from 0 to 512
[  699.867330][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1476'.
[  700.081488][T11155] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  700.082215][T11155] System zones: 1-12
[  700.876151][T11155] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.1478: missing EA_INODE flag
[  700.914920][T11155] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  700.923306][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  700.923342][    C1] EXT4-fs (loop1): initial error at time 1790742960: ext4_xattr_inode_iget:437: inode 12
[  700.923395][    C1] EXT4-fs (loop1): last error at time 1790742960: ext4_xattr_inode_iget:437: inode 12
[  701.222666][T11155] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: comm syz.1.1478: error while reading EA inode 12 err=-117
[  701.222736][T11155] loop1: lost filesystem error report for type 5 error -117
[  701.239726][T11155] EXT4-fs (loop1): 1 orphan inode deleted
[  701.319837][T11155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  702.025151][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  702.407959][T11181] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1483'.
[  702.454282][T11181] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.456084][T11181] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.684257][T11183] xt_hashlimit: size too large, truncated to 1048576
[  705.501061][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1487'.
[  705.807499][T11203] loop1: detected capacity change from 0 to 1024
[  705.825475][T11203] hfsplus: failed to load extents file
[  706.107368][T11206] fuse: Bad value for 'group_id'
[  706.107402][T11206] fuse: Bad value for 'group_id'
[  706.353371][ T3209] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  706.505558][ T3209] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  706.509537][ T3209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.572357][ T3209] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 008
[  706.799841][T11214] loop7: detected capacity change from 0 to 512
[  708.590380][T11214] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  709.591230][ T3209]  (null): error -EIO: failure setting delay to 10us
[  709.591344][ T3209] i2c-tiny-usb 1-1:1.0: probe with driver i2c-tiny-usb failed with error -5
[  711.627540][ T8148] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  712.270229][ T3209] usb 1-1: USB disconnect, device number 8
[  716.241111][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  716.244084][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  716.259164][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  716.274452][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  716.277807][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  718.403545][ T5628] Bluetooth: hci4: command tx timeout
[  718.440589][T11290] misc userio: Invalid payload size
[  718.442961][T11290] misc userio: Invalid payload size
[  718.458185][T11290] misc userio: Invalid payload size
[  719.406341][T11310] overlayfs: failed to clone lowerpath
[  720.052502][  T990] Bluetooth: hci7: Frame reassembly failed (-84)
[  720.407741][  T990] Bluetooth: hci7: Frame reassembly failed (-84)
[  720.486589][ T5623] Bluetooth: hci4: command tx timeout
[  721.673472][ T5628] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  722.553590][ T5628] Bluetooth: hci4: command tx timeout
[  723.446358][T11333] loop6: detected capacity change from 0 to 128
[  723.511660][T11253] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.511758][T11253] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.511906][T11253] bridge_slave_0: entered allmulticast mode
[  723.525672][T11253] bridge_slave_0: entered promiscuous mode
[  723.535848][T11333] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  723.539908][T11253] bridge0: port 2(bridge_slave_1) entered blocking state
[  723.540620][T11253] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.540831][T11253] bridge_slave_1: entered allmulticast mode
[  723.554342][T11253] bridge_slave_1: entered promiscuous mode
[  723.755991][T11253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  723.775068][T11253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  723.848836][T11253] team0: Port device team_slave_0 added
[  723.852175][T11253] team0: Port device team_slave_1 added
[  724.047992][T11335] netlink: 'syz.7.1524': attribute type 9 has an invalid length.
[  724.090564][T11253] batman_adv: batadv0: Adding interface: batadv_slave_0
[  724.090595][T11253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  724.090645][T11253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  724.117225][T11253] batman_adv: batadv0: Adding interface: batadv_slave_1
[  724.117252][T11253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  724.117301][T11253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  724.543132][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1531'.
[  724.643661][ T5628] Bluetooth: hci4: command tx timeout
[  724.820117][T11253] hsr_slave_0: entered promiscuous mode
[  724.851741][T11253] hsr_slave_1: entered promiscuous mode
[  724.885083][T11253] debugfs: 'hsr0' already exists in 'hsr'
[  724.885122][T11253] Cannot create hsr debugfs directory
[  725.468238][T11353] loop0: detected capacity change from 0 to 1024
[  725.496958][T11353] EXT4-fs (loop0): DAX unsupported by block device.
[  726.650758][ T3247] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.723585][T11192] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  726.999700][T11192] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  727.097683][T11192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.159471][  T144] Bluetooth: hci1: Frame reassembly failed (-84)
[  727.236278][  T144] Bluetooth: hci1: Frame reassembly failed (-84)
[  727.640456][T11192] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 003
[  728.873468][ T5628] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  729.125897][T11360] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd6": -EINTR
[  729.308224][T11192]  (null): error -EIO: failure setting delay to 10us
[  729.308316][T11192] i2c-tiny-usb 7-1:1.0: probe with driver i2c-tiny-usb failed with error -5
[  729.393104][T11192] usb 7-1: USB disconnect, device number 3
[  729.528593][ T3247] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.577477][T11373] FAULT_INJECTION: forcing a failure.
[  729.577477][T11373] name failslab, interval 1, probability 0, space 0, times 0
[  729.577537][T11373] CPU: 0 UID: 0 PID: 11373 Comm: syz.1.1538 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  729.577595][T11373] Tainted: [L]=SOFTLOCKUP
[  729.577609][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  729.577634][T11373] Call Trace:
[  729.577647][T11373]  <TASK>
[  729.577662][T11373]  dump_stack_lvl+0x100/0x190
[  729.577726][T11373]  should_fail_ex.cold+0x5/0xa
[  729.577773][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.577837][T11373]  should_failslab+0xc2/0x120
[  729.577884][T11373]  kmem_cache_alloc_noprof+0x92/0x6a0
[  729.577945][T11373]  ? __pfx_map_id_range_down+0x10/0x10
[  729.577989][T11373]  ? security_inode_alloc+0x3b/0x2c0
[  729.578082][T11373]  security_inode_alloc+0x3b/0x2c0
[  729.578144][T11373]  inode_init_always_gfp+0xc6f/0xfb0
[  729.578198][T11373]  alloc_inode+0x8e/0x250
[  729.578262][T11373]  new_inode+0x22/0x1c0
[  729.578323][T11373]  __debugfs_create_file+0xfb/0x500
[  729.578386][T11373]  debugfs_create_file_full+0x41/0x60
[  729.578446][T11373]  ref_tracker_dir_debugfs+0x19e/0x2e0
[  729.578490][T11373]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  729.578574][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.578621][T11373]  ? lockdep_init_map_type+0x5c/0x250
[  729.578667][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.578718][T11373]  ? __pfx_do_setup+0x10/0x10
[  729.578769][T11373]  alloc_netdev_mqs+0x314/0x15c0
[  729.578811][T11373]  ? ovs_vport_alloc+0x288/0x3b0
[  729.578865][T11373]  internal_dev_create+0x8a/0x520
[  729.578921][T11373]  ovs_vport_add+0x100/0x300
[  729.578971][T11373]  new_vport+0x16/0x1d0
[  729.579036][T11373]  ovs_dp_cmd_new+0x67e/0xe30
[  729.579095][T11373]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  729.579135][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.579182][T11373]  ? __nla_parse+0x40/0x60
[  729.579241][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.579287][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.579334][T11373]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  729.579390][T11373]  genl_family_rcv_msg_doit+0x214/0x300
[  729.579436][T11373]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  729.579475][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.579521][T11373]  ? genl_get_cmd+0x3e7/0x760
[  729.579596][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.579643][T11373]  ? security_capable+0x80/0x260
[  729.579699][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.579745][T11373]  ? ns_capable+0xd2/0xf0
[  729.579814][T11373]  genl_rcv_msg+0x560/0x800
[  729.579858][T11373]  ? __pfx_genl_rcv_msg+0x10/0x10
[  729.579895][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.579942][T11373]  ? __lock_acquire+0x5c0/0x1f40
[  729.579981][T11373]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  729.580031][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.580086][T11373]  netlink_rcv_skb+0x159/0x420
[  729.580146][T11373]  ? __pfx_genl_rcv_msg+0x10/0x10
[  729.580187][T11373]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  729.580271][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.580318][T11373]  ? netlink_deliver_tap+0x1ae/0xcc0
[  729.580383][T11373]  genl_rcv+0x28/0x40
[  729.580442][T11373]  netlink_unicast+0x585/0x850
[  729.580510][T11373]  ? __pfx_netlink_unicast+0x10/0x10
[  729.580583][T11373]  netlink_sendmsg+0x8b0/0xda0
[  729.580652][T11373]  ? __pfx_netlink_sendmsg+0x10/0x10
[  729.580717][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.580763][T11373]  ? apparmor_socket_sendmsg+0x165/0x280
[  729.580833][T11373]  __sys_sendto+0x48b/0x4e0
[  729.580890][T11373]  ? __pfx_netlink_sendmsg+0x10/0x10
[  729.580952][T11373]  ? __pfx___sys_sendto+0x10/0x10
[  729.581024][T11373]  ? fd_install+0x223/0x580
[  729.581064][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.581131][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.581177][T11373]  ? xfd_validate_state+0x129/0x190
[  729.581234][T11373]  __x64_sys_sendto+0xe0/0x1c0
[  729.581293][T11373]  ? do_syscall_64+0xae/0x790
[  729.581339][T11373]  ? srso_alias_return_thunk+0x5/0xfbef5
[  729.581386][T11373]  ? lockdep_hardirqs_on+0x7d/0x110
[  729.581433][T11373]  do_syscall_64+0x123/0x790
[  729.581485][T11373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.581528][T11373] RIP: 0033:0x7f4505b9e159
[  729.581559][T11373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.581599][T11373] RSP: 002b:00007f45069c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  729.581637][T11373] RAX: ffffffffffffffda RBX: 00007f4505e25fa0 RCX: 00007f4505b9e159
[  729.581664][T11373] RDX: 0000000000000034 RSI: 0000200000000200 RDI: 0000000000000004
[  729.581689][T11373] RBP: 00007f4505c3506b R08: 0000000000000000 R09: 0000000000000000
[  729.581714][T11373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  729.581739][T11373] R13: 00007f4505e26038 R14: 00007f4505e25fa0 R15: 00007fff20bdef48
[  729.581796][T11373]  </TASK>
[  729.582007][T11373] debugfs: out of free dentries, can not create file 'netdev@ffff8880534be700'
[  730.207190][ T3247] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.444175][T11386] netlink: 'syz.1.1543': attribute type 9 has an invalid length.
[  731.459871][T11397] loop6: detected capacity change from 0 to 512
[  731.482738][T11397] ext4: Unknown parameter 'nouser_xattr'
[  731.500603][ T3247] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.589785][T11400] loop1: detected capacity change from 0 to 512
[  731.618078][T11400] EXT4-fs (loop1): Test dummy encryption mode enabled
[  731.618113][T11400] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  731.662287][T11400] EXT4-fs (loop1): 1 truncate cleaned up
[  731.677976][T11400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  731.924774][T11400] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  732.053207][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1551'.
[  732.483619][ T5760] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  732.959802][T11410] Can't find ip_set type hash:ip,por
[  732.964154][ T5760] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  732.965541][ T5760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.008910][ T5760] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 004
[  733.105747][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  733.426714][ T5760]  (null): error -EIO: failure setting delay to 10us
[  733.426813][ T5760] i2c-tiny-usb 7-1:1.0: probe with driver i2c-tiny-usb failed with error -5
[  733.435940][ T5760] usb 7-1: USB disconnect, device number 4
[  733.588776][T11253] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  733.618466][T11253] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  733.687256][T11253] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  733.709106][T11253] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  733.721849][T11253] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  733.738525][T11253] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  733.761063][T11253] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  733.779889][T11253] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  733.817336][ T3247] bridge_slave_1: left allmulticast mode
[  733.817378][ T3247] bridge_slave_1: left promiscuous mode
[  733.817642][ T3247] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.862750][ T3247] bridge_slave_0: left allmulticast mode
[  733.862805][ T3247] bridge_slave_0: left promiscuous mode
[  733.863149][ T3247] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.581784][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'.
[  736.448875][ T3247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  736.482608][ T3247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  736.511902][ T3247] bond0 (unregistering): Released all slaves
[  736.671628][ T3247] tipc: Left network mode
[  736.742236][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'.
[  737.264474][T11455] loop6: detected capacity change from 0 to 40427
[  737.289040][T11455] F2FS-fs (loop6): Invalid segment count (6)
[  737.289075][T11455] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  737.309841][T11455] F2FS-fs (loop6): invalid crc value
[  737.709234][T11455] F2FS-fs (loop6): access invalid blkaddr:0
[  737.709283][T11455] CPU: 1 UID: 0 PID: 11455 Comm: syz.6.1563 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  737.709338][T11455] Tainted: [L]=SOFTLOCKUP
[  737.709352][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  737.709375][T11455] Call Trace:
[  737.709387][T11455]  <TASK>
[  737.709403][T11455]  dump_stack_lvl+0x100/0x190
[  737.709465][T11455]  __f2fs_is_valid_blkaddr+0xad0/0x13c0
[  737.709530][T11455]  ? sanity_check_extent_cache+0x23a/0x990
[  737.709597][T11455]  f2fs_is_valid_blkaddr+0xd0/0x2b0
[  737.709666][T11455]  sanity_check_extent_cache+0x23a/0x990
[  737.709739][T11455]  f2fs_iget+0x29a2/0x6b60
[  737.709821][T11455]  f2fs_fill_super+0x4536/0xaba0
[  737.709909][T11455]  ? __pfx_snprintf+0x10/0x10
[  737.709954][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.710007][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.710052][T11455]  ? do_raw_spin_lock+0x128/0x260
[  737.710102][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.710150][T11455]  ? find_held_lock+0x2b/0x80
[  737.710207][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.710265][T11455]  ? __pfx_f2fs_fill_super+0x10/0x10
[  737.710317][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.710365][T11455]  ? sb_set_blocksize+0x1f6/0x290
[  737.710420][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.710468][T11455]  ? setup_bdev_super+0x4e8/0x770
[  737.710535][T11455]  get_tree_bdev_flags+0x38c/0x620
[  737.710596][T11455]  ? __pfx_f2fs_fill_super+0x10/0x10
[  737.710646][T11455]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  737.710710][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.710764][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.710811][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.710859][T11455]  ? security_capable+0x80/0x260
[  737.710922][T11455]  vfs_get_tree+0x92/0x320
[  737.710971][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.711022][T11455]  path_mount+0x7d0/0x24c0
[  737.711083][T11455]  ? __pfx_path_mount+0x10/0x10
[  737.711133][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.711181][T11455]  ? lockdep_hardirqs_on+0x7d/0x110
[  737.711240][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.711288][T11455]  ? kmem_cache_free+0x127/0x6c0
[  737.711362][T11455]  ? __x64_sys_mount+0x293/0x310
[  737.711413][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.711461][T11455]  __x64_sys_mount+0x293/0x310
[  737.711516][T11455]  ? __pfx___x64_sys_mount+0x10/0x10
[  737.711575][T11455]  ? srso_alias_return_thunk+0x5/0xfbef5
[  737.711632][T11455]  do_syscall_64+0x123/0x790
[  737.711686][T11455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.711727][T11455] RIP: 0033:0x7f812a79f3ca
[  737.711758][T11455] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  737.711798][T11455] RSP: 002b:00007f812b610e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  737.711836][T11455] RAX: ffffffffffffffda RBX: 00007f812b610ee0 RCX: 00007f812a79f3ca
[  737.711864][T11455] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00007f812b610ea0
[  737.711891][T11455] RBP: 00002000000000c0 R08: 00007f812b610ee0 R09: 000000000080001a
[  737.711917][T11455] R10: 000000000080001a R11: 0000000000000246 R12: 0000200000000000
[  737.711943][T11455] R13: 00007f812b610ea0 R14: 0000000000005552 R15: 0000200000001480
[  737.711995][T11455]  </TASK>
[  737.728911][T11455] loop6: lost filesystem error report for type 5 error -117
[  737.728943][T11455] F2FS-fs (loop6): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 24244] is incorrect, run fsck to fix
[  737.729025][T11455] loop6: lost filesystem error report for type 5 error -117
[  737.729049][T11455] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  737.730463][T11455] F2FS-fs (loop6): Failed to read root inode
[  737.888790][T11473] bond5: entered promiscuous mode
[  738.163148][ T3247] hsr_slave_0: left promiscuous mode
[  738.186035][ T3247] hsr_slave_1: left promiscuous mode
[  738.187145][ T3247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  738.187177][ T3247] batman_adv: batadv0: Removing interface: batadv_slave_0
[  738.188575][ T3247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  738.188603][ T3247] batman_adv: batadv0: Removing interface: batadv_slave_1
[  738.197037][T11484] netlink: 'syz.7.1571': attribute type 1 has an invalid length.
[  738.221840][ T3247] veth1_macvtap: left promiscuous mode
[  738.221892][ T3247] veth0_macvtap: left promiscuous mode
[  738.222140][ T3247] veth1_vlan: left promiscuous mode
[  738.227942][ T3247] veth0_vlan: left promiscuous mode
[  738.862794][ T3247] team0 (unregistering): Port device team_slave_1 removed
[  738.885325][ T3247] team0 (unregistering): Port device team_slave_0 removed
[  739.942794][T11484] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  740.344379][ T5848] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  740.380069][T11253] 8021q: adding VLAN 0 to HW filter on device bond0
[  740.515060][ T5848] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  740.519138][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.611836][ T5848] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 005
[  741.082068][ T5848]  (null): error -EIO: failure setting delay to 10us
[  741.082158][ T5848] i2c-tiny-usb 7-1:1.0: probe with driver i2c-tiny-usb failed with error -5
[  741.184773][T11253] 8021q: adding VLAN 0 to HW filter on device team0
[  741.341766][ T3247] IPVS: stop unused estimator thread 0...
[  741.675004][ T5848] usb 7-1: USB disconnect, device number 5
[  741.809091][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1580'.
[  741.909255][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state
[  741.909391][ T3298] bridge0: port 1(bridge_slave_0) entered forwarding state
[  741.925761][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state
[  741.925905][ T3298] bridge0: port 2(bridge_slave_1) entered forwarding state
[  743.312616][T11546] bond3: entered promiscuous mode
[  743.500674][T11558] FAULT_INJECTION: forcing a failure.
[  743.500674][T11558] name failslab, interval 1, probability 0, space 0, times 0
[  743.500747][T11558] CPU: 0 UID: 0 PID: 11558 Comm: syz.1.1592 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  743.500804][T11558] Tainted: [L]=SOFTLOCKUP
[  743.500819][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  743.500845][T11558] Call Trace:
[  743.500858][T11558]  <TASK>
[  743.500873][T11558]  dump_stack_lvl+0x100/0x190
[  743.500939][T11558]  should_fail_ex.cold+0x5/0xa
[  743.500986][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.501043][T11558]  should_failslab+0xc2/0x120
[  743.501091][T11558]  __kmalloc_noprof+0xfc/0x840
[  743.501157][T11558]  ? ovs_vport_set_upcall_portids+0x15b/0x360
[  743.501224][T11558]  ovs_vport_set_upcall_portids+0x15b/0x360
[  743.501285][T11558]  ovs_vport_alloc+0x274/0x3b0
[  743.501342][T11558]  internal_dev_create+0x25/0x520
[  743.501401][T11558]  ovs_vport_add+0x100/0x300
[  743.501452][T11558]  new_vport+0x16/0x1d0
[  743.501519][T11558]  ovs_dp_cmd_new+0x67e/0xe30
[  743.501574][T11558]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  743.501614][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.501664][T11558]  ? __nla_parse+0x40/0x60
[  743.501725][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.501774][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.501824][T11558]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0
[  743.501881][T11558]  genl_family_rcv_msg_doit+0x214/0x300
[  743.501928][T11558]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  743.501968][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.502016][T11558]  ? genl_get_cmd+0x3e7/0x760
[  743.502091][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.502139][T11558]  ? security_capable+0x80/0x260
[  743.502199][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.502247][T11558]  ? ns_capable+0xd2/0xf0
[  743.502317][T11558]  genl_rcv_msg+0x560/0x800
[  743.502363][T11558]  ? __pfx_genl_rcv_msg+0x10/0x10
[  743.502401][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.502450][T11558]  ? __lock_acquire+0x5c0/0x1f40
[  743.502492][T11558]  ? __pfx_ovs_dp_cmd_new+0x10/0x10
[  743.502545][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.502603][T11558]  netlink_rcv_skb+0x159/0x420
[  743.502664][T11558]  ? __pfx_genl_rcv_msg+0x10/0x10
[  743.502708][T11558]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  743.502797][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.502846][T11558]  ? netlink_deliver_tap+0x1ae/0xcc0
[  743.502912][T11558]  genl_rcv+0x28/0x40
[  743.502974][T11558]  netlink_unicast+0x585/0x850
[  743.503042][T11558]  ? __pfx_netlink_unicast+0x10/0x10
[  743.503106][T11558]  ? aa_sk_perm+0x389/0xab0
[  743.503160][T11558]  netlink_sendmsg+0x8b0/0xda0
[  743.503230][T11558]  ? __pfx_netlink_sendmsg+0x10/0x10
[  743.503295][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.503344][T11558]  ? apparmor_socket_sendmsg+0x165/0x280
[  743.503415][T11558]  __sys_sendto+0x48b/0x4e0
[  743.503472][T11558]  ? __pfx_netlink_sendmsg+0x10/0x10
[  743.503534][T11558]  ? __pfx___sys_sendto+0x10/0x10
[  743.503606][T11558]  ? fd_install+0x223/0x580
[  743.503648][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.503715][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.503774][T11558]  ? xfd_validate_state+0x129/0x190
[  743.503826][T11558]  __x64_sys_sendto+0xe0/0x1c0
[  743.503885][T11558]  ? do_syscall_64+0xae/0x790
[  743.503933][T11558]  ? srso_alias_return_thunk+0x5/0xfbef5
[  743.503980][T11558]  ? lockdep_hardirqs_on+0x7d/0x110
[  743.504028][T11558]  do_syscall_64+0x123/0x790
[  743.504082][T11558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.504129][T11558] RIP: 0033:0x7f4505b9e159
[  743.504160][T11558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  743.504200][T11558] RSP: 002b:00007f45069c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  743.504238][T11558] RAX: ffffffffffffffda RBX: 00007f4505e25fa0 RCX: 00007f4505b9e159
[  743.504266][T11558] RDX: 0000000000000034 RSI: 0000200000000200 RDI: 0000000000000004
[  743.504292][T11558] RBP: 00007f4505c3506b R08: 0000000000000000 R09: 0000000000000000
[  743.504317][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  743.504342][T11558] R13: 00007f4505e26038 R14: 00007f4505e25fa0 R15: 00007fff20bdef48
[  743.504395][T11558]  </TASK>
[  743.686898][T11559] netlink: 'syz.2.1591': attribute type 3 has an invalid length.
[  744.199722][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1594'.
[  744.850014][T11564] Can't find ip_set type hash:ip,por
[  746.641562][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  746.671086][T11580] loop0: detected capacity change from 0 to 512
[  746.683897][T11580] EXT4-fs: Ignoring removed mblk_io_submit option
[  746.715567][T11580] EXT4-fs error (device loop0): ext4_iget_extra_inode:5209: inode #15: comm syz.0.1598: corrupted in-inode xattr: e_value size too large
[  746.715634][T11580] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  746.716140][T11580] EXT4-fs (loop0): Remounting filesystem read-only
[  746.796937][T11580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  746.930984][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  747.502795][T11253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  748.384643][T11613] overlayfs: failed to clone lowerpath
[  748.551939][T11585] loop7: detected capacity change from 0 to 40427
[  748.813320][T11618] ip_tables: iptables: counters copy to user failed while replacing table
[  749.532771][T11585] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  749.532822][T11585] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  749.572691][T11585] F2FS-fs (loop7): invalid crc value
[  749.958421][T11253] veth0_vlan: entered promiscuous mode
[  750.134439][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1610'.
[  750.209307][T11626] bond4: entered promiscuous mode
[  750.235639][T11585] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  750.314899][T11253] veth1_vlan: entered promiscuous mode
[  750.619747][T11253] veth0_macvtap: entered promiscuous mode
[  750.649823][T11253] veth1_macvtap: entered promiscuous mode
[  750.681473][T11253] batman_adv: batadv0: Interface activated: batadv_slave_0
[  750.718560][T11253] batman_adv: batadv0: Interface activated: batadv_slave_1
[  750.873833][ T3341] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  750.873907][ T3341] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  750.875431][ T3341] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  750.875499][ T3341] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  751.129419][ T3388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  751.129455][ T3388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  751.379860][ T3293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  751.379910][ T3293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  753.533207][T11647] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  754.221377][T11663] loop9: detected capacity change from 0 to 512
[  754.286586][T11663] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  754.472471][T11663] EXT4-fs error (device loop9): ext4_xattr_block_find:1885: inode #12: comm syz.9.1495: corrupted xattr block 8: invalid header
[  755.651939][T11667] EXT4-fs error (device loop9): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 67: padding at end of block bitmap is not set
[  755.703303][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'.
[  755.969357][T11253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  756.123873][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'.
[  756.171693][T11688] bond1: entered promiscuous mode
[  756.694141][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1623'.
[  757.590107][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1627'.
[  761.970820][T11732] netlink: 'syz.0.1635': attribute type 9 has an invalid length.
[  762.122869][T11739] loop6: detected capacity change from 0 to 16
[  762.145048][T11192] Process accounting resumed
[  762.305440][T11740] tipc: Started in network mode
[  762.305470][T11740] tipc: Node identity , cluster identity 4711
[  762.305496][T11740] tipc: Failed to set node id, please configure manually
[  762.305555][T11740] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  762.533458][T11745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1640'.
[  762.602177][T11739] erofs (device loop6): mounted with root inode @ nid 36.
[  763.117016][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'.
[  764.894145][T11745] Can't find ip_set type hash:ip,por
[  765.539877][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1641'.
[  769.127772][T11783] syzkaller0: entered promiscuous mode
[  769.127813][T11783] syzkaller0: entered allmulticast mode
[  774.045053][ T7174] Process accounting resumed
[  774.567369][T11815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1658'.
[  774.707395][T11820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1658'.
[  775.173351][T11815] Can't find ip_set type hash:ip,por
[  779.441568][T11804] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  779.974540][ T5848] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  780.124843][ T5848] usb 7-1: Using ep0 maxpacket: 8
[  780.126704][ T5848] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  780.447308][ T5848] usb 7-1: config index 0 descriptor too short (expected 5924, got 36)
[  780.447362][ T5848] usb 7-1: config 250 has an invalid interface number: 228 but max is -1
[  780.447406][ T5848] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0
[  780.447452][ T5848] usb 7-1: config 250 has no interface number 0
[  780.447519][ T5848] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  780.447578][ T5848] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  780.447631][ T5848] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36
[  780.447682][ T5848] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  780.447741][ T5848] usb 7-1: config 250 interface 228 has no altsetting 0
[  780.457399][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  780.457442][ T5848] usb 7-1: Product: syz
[  780.457468][ T5848] usb 7-1: SerialNumber: syz
[  780.500972][ T5848] hub 7-1:250.228: bad descriptor, ignoring hub
[  780.501016][ T5848] hub 7-1:250.228: probe with driver hub failed with error -5
[  781.150975][ T5848] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  781.473801][T11192] usb 7-1: USB disconnect, device number 6
[  781.495510][T11192] usblp0: removed
[  782.097797][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'.
[  783.114173][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'.
[  784.879907][T11868] Process accounting resumed
[  784.895819][T11872] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  789.127406][T11907] loop0: detected capacity change from 0 to 128
[  789.170088][T11903] loop9: detected capacity change from 0 to 128
[  789.200468][T11903] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  789.388515][T11903] loop9: detected capacity change from 0 to 512
[  789.596322][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'.
[  790.354836][T11903] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  790.491603][T11923] loop6: detected capacity change from 0 to 256
[  792.957801][T11935] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002
[  792.961116][T11935] loop0: detected capacity change from 0 to 128
[  793.109914][T11935] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  793.112800][T11935] ext4 filesystem being mounted at /330/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  793.211157][T11937] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  793.505106][ T5759] Process accounting resumed
[  793.557609][T11947] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  793.987862][T11253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  795.555026][T11960] loop6: detected capacity change from 0 to 512
[  795.642638][T11960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  795.642807][T11960] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  796.986458][T11972] EXT4-fs error (device loop6): ext4_find_dest_de:2051: inode #2: block 3: comm syz.6.1696: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0
[  797.531295][ T8668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  798.926068][T11994] syzkaller0: entered promiscuous mode
[  798.926107][T11994] syzkaller0: entered allmulticast mode
[  798.930355][T11994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  798.936432][T11994] tipc: Resetting bearer <eth:syzkaller0>
[  799.001574][T11993] tipc: Resetting bearer <eth:syzkaller0>
[  799.147621][T11993] tipc: Disabling bearer <eth:syzkaller0>
[  801.664279][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1710'.
[  802.300742][T12013] netlink: 'syz.1.1712': attribute type 9 has an invalid length.
[  802.936289][T12033] netlink: 'syz.9.1718': attribute type 1 has an invalid length.
[  805.903152][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  805.924404][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  805.931302][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  805.954068][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  805.959419][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  806.090517][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1728'.
[  806.115352][T11933] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  806.609994][T12072] loop6: detected capacity change from 0 to 256
[  806.625902][T12072] exfat: Deprecated parameter 'utf8'
[  806.625930][T12072] exfat: Deprecated parameter 'utf8'
[  806.626002][T12072] exfat: Deprecated parameter 'utf8'
[  806.787614][T12072] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  806.822547][T12078] loop7: detected capacity change from 0 to 1024
[  806.836776][T12078] hfsplus: failed to load extents file
[  808.385557][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  808.394605][ T5623] Bluetooth: hci1: command tx timeout
[  809.259900][T12099] netlink: 'syz.6.1738': attribute type 9 has an invalid length.
[  810.475013][ T5623] Bluetooth: hci1: command tx timeout
[  810.846440][ T3388] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  811.238216][T12122] overlayfs: failed to clone lowerpath
[  812.553380][ T5623] Bluetooth: hci1: command tx timeout
[  813.594360][T12130] loop1: detected capacity change from 0 to 256
[  814.640084][ T5623] Bluetooth: hci1: command tx timeout
[  815.132960][ T3388] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.521929][T12152] loop9: detected capacity change from 0 to 512
[  815.670142][ T3388] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.717065][T12152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  815.717222][T12152] System zones: 1-12
[  815.719125][T12152] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #12: comm syz.9.1751: missing EA_INODE flag
[  815.719172][T12152] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  815.721491][T12152] EXT4-fs error (device loop9): ext4_xattr_inode_iget:440: comm syz.9.1751: error while reading EA inode 12 err=-117
[  815.721530][T12152] loop9: lost filesystem error report for type 5 error -117
[  815.721800][T12152] EXT4-fs (loop9): 1 orphan inode deleted
[  815.732823][T12152] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  815.851878][T12151] netlink: 'syz.6.1752': attribute type 9 has an invalid length.
[  816.003775][T12161] loop7: detected capacity change from 0 to 512
[  816.073493][T12161] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  816.904852][ T3388] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.921754][T12161] loop7: detected capacity change from 0 to 1024
[  816.942682][T12161] EXT4-fs: Mount option(s) incompatible with ext3
[  819.115025][T12171] fuse: fd is not a fuse device
[  819.154793][T12167] FAULT_INJECTION: forcing a failure.
[  819.154793][T12167] name failslab, interval 1, probability 0, space 0, times 0
[  819.154853][T12167] CPU: 0 UID: 0 PID: 12167 Comm: syz.6.1756 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  819.154909][T12167] Tainted: [L]=SOFTLOCKUP
[  819.154924][T12167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  819.154947][T12167] Call Trace:
[  819.154961][T12167]  <TASK>
[  819.154975][T12167]  dump_stack_lvl+0x100/0x190
[  819.155036][T12167]  should_fail_ex.cold+0x5/0xa
[  819.155088][T12167]  should_failslab+0xc2/0x120
[  819.155135][T12167]  kmem_cache_alloc_noprof+0x92/0x6a0
[  819.155202][T12167]  ? skb_clone+0x190/0x400
[  819.155247][T12167]  skb_clone+0x190/0x400
[  819.155293][T12167]  netlink_deliver_tap+0xaed/0xcc0
[  819.155362][T12167]  netlink_unicast+0x6a5/0x850
[  819.155429][T12167]  ? __pfx_netlink_unicast+0x10/0x10
[  819.155487][T12167]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.155551][T12167]  netlink_ack+0x655/0xb80
[  819.155625][T12167]  netlink_rcv_skb+0x333/0x420
[  819.155684][T12167]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  819.155730][T12167]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  819.155806][T12167]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.155855][T12167]  ? netlink_deliver_tap+0x1ae/0xcc0
[  819.155922][T12167]  netlink_unicast+0x585/0x850
[  819.155989][T12167]  ? __pfx_netlink_unicast+0x10/0x10
[  819.156064][T12167]  netlink_sendmsg+0x8b0/0xda0
[  819.156133][T12167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.156199][T12167]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.156250][T12167]  ? apparmor_socket_sendmsg+0x165/0x280
[  819.156325][T12167]  ____sys_sendmsg+0xa4d/0xbe0
[  819.156371][T12167]  ? __pfx_netlink_sendmsg+0x10/0x10
[  819.156436][T12167]  ? __pfx_____sys_sendmsg+0x10/0x10
[  819.156507][T12167]  ___sys_sendmsg+0x190/0x1e0
[  819.156562][T12167]  ? __pfx____sys_sendmsg+0x10/0x10
[  819.156614][T12167]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.156659][T12167]  ? futex_wait+0x11e/0x370
[  819.156740][T12167]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.156786][T12167]  ? find_held_lock+0x2b/0x80
[  819.156874][T12167]  __sys_sendmsg+0x160/0x210
[  819.156944][T12167]  ? __pfx___sys_sendmsg+0x10/0x10
[  819.157026][T12167]  ? srso_alias_return_thunk+0x5/0xfbef5
[  819.157082][T12167]  do_syscall_64+0x123/0x790
[  819.157137][T12167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.157178][T12167] RIP: 0033:0x7f812a79e159
[  819.157208][T12167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  819.157248][T12167] RSP: 002b:00007f812b611028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  819.157340][T12167] RAX: ffffffffffffffda RBX: 00007f812aa25fa0 RCX: 00007f812a79e159
[  819.157366][T12167] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005
[  819.157391][T12167] RBP: 00007f812a83506b R08: 0000000000000000 R09: 0000000000000000
[  819.157416][T12167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  819.157441][T12167] R13: 00007f812aa26038 R14: 00007f812aa25fa0 R15: 00007fff1f990878
[  819.157493][T12167]  </TASK>
[  819.637276][T11253] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  819.791328][T12060] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.798323][T12060] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.798503][T12060] bridge_slave_0: entered allmulticast mode
[  819.804177][T12060] bridge_slave_0: entered promiscuous mode
[  819.818160][T12060] bridge0: port 2(bridge_slave_1) entered blocking state
[  819.818377][T12060] bridge0: port 2(bridge_slave_1) entered disabled state
[  819.818549][T12060] bridge_slave_1: entered allmulticast mode
[  819.836936][T12060] bridge_slave_1: entered promiscuous mode
[  820.968681][T12060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  820.972673][T12060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  821.421301][T12060] team0: Port device team_slave_0 added
[  821.449608][T12060] team0: Port device team_slave_1 added
[  822.692036][T12060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  822.692495][T12060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  822.692547][T12060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  822.750490][T12060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  822.750519][T12060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  822.750571][T12060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  822.915021][ T3388] bridge_slave_1: left allmulticast mode
[  822.915063][ T3388] bridge_slave_1: left promiscuous mode
[  822.915282][ T3388] bridge0: port 2(bridge_slave_1) entered disabled state
[  822.958857][ T3388] bridge_slave_0: left allmulticast mode
[  822.958899][ T3388] bridge_slave_0: left promiscuous mode
[  822.959173][ T3388] bridge0: port 1(bridge_slave_0) entered disabled state
[  822.963618][T12212] netlink: 'syz.2.1767': attribute type 9 has an invalid length.
[  825.612580][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1771'.
[  825.879479][ T3388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  825.916809][ T3388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  825.937402][ T3388] bond0 (unregistering): Released all slaves
[  825.958662][ T3388] bond1 (unregistering): Released all slaves
[  826.175022][ T3388] bond2 (unregistering): Released all slaves
[  826.517041][ T3388] bond3 (unregistering): Released all slaves
[  826.806626][ T3388] bond4 (unregistering): Released all slaves
[  826.960115][T12214] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  826.996984][T12235] FAULT_INJECTION: forcing a failure.
[  826.996984][T12235] name failslab, interval 1, probability 0, space 0, times 0
[  826.997048][T12235] CPU: 0 UID: 0 PID: 12235 Comm: syz.9.1772 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  826.997104][T12235] Tainted: [L]=SOFTLOCKUP
[  826.997119][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  826.997145][T12235] Call Trace:
[  826.997158][T12235]  <TASK>
[  826.997171][T12235]  dump_stack_lvl+0x100/0x190
[  826.997233][T12235]  should_fail_ex.cold+0x5/0xa
[  826.997287][T12235]  should_failslab+0xc2/0x120
[  826.997333][T12235]  kmem_cache_alloc_noprof+0x92/0x6a0
[  826.997399][T12235]  ? skb_clone+0x190/0x400
[  826.997445][T12235]  skb_clone+0x190/0x400
[  826.997487][T12235]  netlink_deliver_tap+0xaed/0xcc0
[  826.997557][T12235]  netlink_unicast+0x6a5/0x850
[  826.997628][T12235]  ? __pfx_netlink_unicast+0x10/0x10
[  826.997671][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  826.997719][T12235]  netlink_ack+0x655/0xb80
[  826.997774][T12235]  netlink_rcv_skb+0x333/0x420
[  826.997819][T12235]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  826.997855][T12235]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  826.997913][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  826.997948][T12235]  ? netlink_deliver_tap+0x1ae/0xcc0
[  826.997998][T12235]  netlink_unicast+0x585/0x850
[  826.998064][T12235]  ? __pfx_netlink_unicast+0x10/0x10
[  826.998124][T12235]  netlink_sendmsg+0x8b0/0xda0
[  826.998176][T12235]  ? __pfx_netlink_sendmsg+0x10/0x10
[  826.998224][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  826.998259][T12235]  ? apparmor_socket_sendmsg+0x165/0x280
[  826.998311][T12235]  ____sys_sendmsg+0xa4d/0xbe0
[  826.998345][T12235]  ? __pfx_netlink_sendmsg+0x10/0x10
[  826.998394][T12235]  ? __pfx_____sys_sendmsg+0x10/0x10
[  826.998447][T12235]  ___sys_sendmsg+0x190/0x1e0
[  826.998504][T12235]  ? __pfx____sys_sendmsg+0x10/0x10
[  826.998545][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  826.998580][T12235]  ? futex_wait+0x11e/0x370
[  826.998647][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  826.998719][T12235]  ? find_held_lock+0x2b/0x80
[  826.998786][T12235]  __sys_sendmsg+0x160/0x210
[  826.998836][T12235]  ? __pfx___sys_sendmsg+0x10/0x10
[  826.998898][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  826.998940][T12235]  do_syscall_64+0x123/0x790
[  826.998982][T12235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.999013][T12235] RIP: 0033:0x7fba58b9e159
[  826.999038][T12235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  826.999068][T12235] RSP: 002b:00007fba59ad7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  826.999097][T12235] RAX: ffffffffffffffda RBX: 00007fba58e25fa0 RCX: 00007fba58b9e159
[  826.999119][T12235] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005
[  826.999137][T12235] RBP: 00007fba58c3506b R08: 0000000000000000 R09: 0000000000000000
[  826.999156][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  826.999174][T12235] R13: 00007fba58e26038 R14: 00007fba58e25fa0 R15: 00007ffcef2206a8
[  826.999214][T12235]  </TASK>
[  827.460671][ T3388] ovs-dp0: left promiscuous mode
[  829.935868][T12060] hsr_slave_0: entered promiscuous mode
[  829.942766][T12060] hsr_slave_1: entered promiscuous mode
[  829.961998][T12060] debugfs: 'hsr0' already exists in 'hsr'
[  829.962031][T12060] Cannot create hsr debugfs directory
[  829.962314][ T3388] tipc: Left network mode
[  832.650506][T12297] FAULT_INJECTION: forcing a failure.
[  832.650506][T12297] name failslab, interval 1, probability 0, space 0, times 0
[  832.650599][T12297] CPU: 0 UID: 0 PID: 12297 Comm: syz.7.1786 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  832.650705][T12297] Tainted: [L]=SOFTLOCKUP
[  832.650765][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  832.650808][T12297] Call Trace:
[  832.650831][T12297]  <TASK>
[  832.650856][T12297]  dump_stack_lvl+0x100/0x190
[  832.650963][T12297]  should_fail_ex.cold+0x5/0xa
[  832.651050][T12297]  should_failslab+0xc2/0x120
[  832.651129][T12297]  kmem_cache_alloc_noprof+0x92/0x6a0
[  832.651239][T12297]  ? skb_clone+0x190/0x400
[  832.651314][T12297]  skb_clone+0x190/0x400
[  832.651383][T12297]  netlink_deliver_tap+0xaed/0xcc0
[  832.651505][T12297]  netlink_unicast+0x6a5/0x850
[  832.651625][T12297]  ? __pfx_netlink_unicast+0x10/0x10
[  832.651740][T12297]  ? srso_alias_return_thunk+0x5/0xfbef5
[  832.651854][T12297]  netlink_ack+0x655/0xb80
[  832.651955][T12297]  netlink_rcv_skb+0x333/0x420
[  832.652034][T12297]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  832.652095][T12297]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  832.652200][T12297]  ? srso_alias_return_thunk+0x5/0xfbef5
[  832.652259][T12297]  ? netlink_deliver_tap+0x1ae/0xcc0
[  832.652348][T12297]  netlink_unicast+0x585/0x850
[  832.652435][T12297]  ? __pfx_netlink_unicast+0x10/0x10
[  832.652534][T12297]  netlink_sendmsg+0x8b0/0xda0
[  832.652623][T12297]  ? __pfx_netlink_sendmsg+0x10/0x10
[  832.652716][T12297]  ? srso_alias_return_thunk+0x5/0xfbef5
[  832.652775][T12297]  ? apparmor_socket_sendmsg+0x165/0x280
[  832.652864][T12297]  ____sys_sendmsg+0xa4d/0xbe0
[  832.652921][T12297]  ? __pfx_netlink_sendmsg+0x10/0x10
[  832.652993][T12297]  ? __pfx_____sys_sendmsg+0x10/0x10
[  832.653074][T12297]  ___sys_sendmsg+0x190/0x1e0
[  832.653135][T12297]  ? __pfx____sys_sendmsg+0x10/0x10
[  832.653192][T12297]  ? srso_alias_return_thunk+0x5/0xfbef5
[  832.653242][T12297]  ? futex_wait+0x11e/0x370
[  832.653331][T12297]  ? srso_alias_return_thunk+0x5/0xfbef5
[  832.653383][T12297]  ? find_held_lock+0x2b/0x80
[  832.653482][T12297]  __sys_sendmsg+0x160/0x210
[  832.653557][T12297]  ? __pfx___sys_sendmsg+0x10/0x10
[  832.653649][T12297]  ? srso_alias_return_thunk+0x5/0xfbef5
[  832.653718][T12297]  do_syscall_64+0x123/0x790
[  832.653779][T12297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  832.653824][T12297] RIP: 0033:0x7fddf179e159
[  832.653861][T12297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  832.653904][T12297] RSP: 002b:00007fddf266c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  832.653944][T12297] RAX: ffffffffffffffda RBX: 00007fddf1a25fa0 RCX: 00007fddf179e159
[  832.653974][T12297] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005
[  832.654000][T12297] RBP: 00007fddf183506b R08: 0000000000000000 R09: 0000000000000000
[  832.654026][T12297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  832.654052][T12297] R13: 00007fddf1a26038 R14: 00007fddf1a25fa0 R15: 00007ffe2d7e33d8
[  832.654107][T12297]  </TASK>
[  832.726806][ T5759] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  832.875099][ T5759] usb 10-1: Using ep0 maxpacket: 32
[  832.878558][ T5759] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  832.887535][ T5759] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  832.887592][ T5759] usb 10-1: config 0 interface 0 has no altsetting 0
[  832.887643][ T5759] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.901807][ T5759] usb 10-1: config 0 descriptor??
[  833.541102][T12296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  833.541885][T12296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  833.595689][ T3388] hsr_slave_0: left promiscuous mode
[  833.602868][ T3388] hsr_slave_1: left promiscuous mode
[  833.607338][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  833.607371][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_0
[  833.649631][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  833.649684][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_1
[  833.814885][ T3388] veth1_macvtap: left promiscuous mode
[  833.814929][ T3388] veth0_macvtap: left promiscuous mode
[  833.815067][ T3388] veth1_vlan: left promiscuous mode
[  833.815162][ T3388] veth0_vlan: left promiscuous mode
[  833.970677][T12311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  833.971345][T12311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.004602][T12311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  834.005179][T12311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  835.206426][T12311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  835.207078][T12311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  835.251588][ T5759] hid_parser_main: 29 callbacks suppressed
[  835.251627][ T5759] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0
[  835.251672][ T5759] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0
[  835.251717][ T5759] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0
[  835.251757][ T5759] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0
[  835.251796][ T5759] corsair-psu 0003:1B1C:1C09.0003: unknown main item tag 0x0
[  835.322147][ T5759] corsair-psu 0003:1B1C:1C09.0003: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.9-1/input0
[  835.390008][T12324] loop1: detected capacity change from 0 to 256
[  835.453155][T12296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  835.475810][T12296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  835.694284][ T5759] corsair-psu 0003:1B1C:1C09.0003: unable to initialize device (-110)
[  835.753475][ T5759] corsair-psu 0003:1B1C:1C09.0003: probe with driver corsair-psu failed with error -110
[  835.759323][ T5759] usb 10-1: USB disconnect, device number 2
[  835.886863][ T3388] team0 (unregistering): Port device team_slave_1 removed
[  835.935083][ T3388] team0 (unregistering): Port device team_slave_0 removed
[  836.227033][T12316] 
: renamed from bond_slave_0 (while UP)
[  836.332087][T12319] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  836.608425][T12339] loop9: detected capacity change from 0 to 512
[  838.144542][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1798'.
[  840.495699][ T3388] IPVS: stop unused estimator thread 0...
[  840.873342][ T5628] Bluetooth: hci4: command 0x0405 tx timeout
[  841.023948][ T5759] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  841.196415][ T5759] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  841.200822][ T5759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.200866][ T5759] usb 7-1: Product: syz
[  841.200893][ T5759] usb 7-1: Manufacturer: syz
[  841.200919][ T5759] usb 7-1: SerialNumber: syz
[  841.520649][ T5739] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  841.743544][ T5739] usb 10-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[  841.801735][ T5739] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  841.801959][ T5739] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  841.802243][ T5739] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.224637][ T5739] idmouse 10-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  842.625385][ T5759] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  842.862337][T12060] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  842.882559][T12372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  842.883165][T12372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  842.907461][T12060] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  842.910397][T12060] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  842.947316][T12060] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  842.948508][T12060] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  842.972059][T12060] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  842.980944][T12060] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  843.670398][T12060] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  844.230870][T12060] 8021q: adding VLAN 0 to HW filter on device bond0
[  844.298873][T12060] 8021q: adding VLAN 0 to HW filter on device team0
[  844.329376][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  844.329504][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  844.369180][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  844.369314][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  845.723184][ T5848] usb 10-1: USB disconnect, device number 3
[  845.793860][ T5848] idmouse 10-1:1.0: disconnected
[  845.817936][ T5759] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  845.818234][ T5759] ath9k_htc: Failed to initialize the device
[  845.818387][ T3209] usb 7-1: USB disconnect, device number 7
[  845.882905][ T3209] usb 7-1: ath9k_htc: USB layer deinitialized
[  846.013663][T11192] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  846.280251][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1811'.
[  847.351573][T12060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  847.420048][ T9170] Bluetooth: hci3: Frame reassembly failed (-84)
[  847.421405][   T59] Bluetooth: hci3: Frame reassembly failed (-84)
[  849.444008][ T5628] Bluetooth: hci3: command 0x1003 tx timeout
[  849.468569][ T5623] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  852.061292][   T31] audit: type=1326 audit(1790743111.408:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.7.1823" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf179e159 code=0x7ffc0000
[  852.061382][   T31] audit: type=1326 audit(1790743111.408:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.7.1823" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf179e159 code=0x7ffc0000
[  852.091072][   T31] audit: type=1326 audit(1790743111.428:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.7.1823" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf179e159 code=0x7ffc0000
[  852.091173][   T31] audit: type=1326 audit(1790743111.428:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.7.1823" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf179e159 code=0x7ffc0000
[  852.091252][   T31] audit: type=1326 audit(1790743111.428:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.7.1823" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fddf179e159 code=0x7ffc0000
[  852.091330][   T31] audit: type=1326 audit(1790743111.438:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.7.1823" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf179e159 code=0x7ffc0000
[  852.091428][   T31] audit: type=1326 audit(1790743111.438:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.7.1823" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf179e159 code=0x7ffc0000
[  852.092678][   T31] audit: type=1326 audit(1790743111.438:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.7.1823" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf179e159 code=0x7ffc0000
[  852.108142][   T31] audit: type=1326 audit(1790743111.438:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.7.1823" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf179e159 code=0x7ffc0000
[  852.108233][   T31] audit: type=1326 audit(1790743111.448:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.7.1823" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fddf179e159 code=0x7ffc0000
[  852.551521][T12060] veth0_vlan: entered promiscuous mode
[  852.654569][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1825'.
[  853.540092][T12060] veth1_vlan: entered promiscuous mode
[  853.692549][T12060] veth0_macvtap: entered promiscuous mode
[  855.498501][T12060] veth1_macvtap: entered promiscuous mode
[  855.901993][T12060] batman_adv: batadv0: Interface activated: batadv_slave_0
[  855.937297][T12060] batman_adv: batadv0: Interface activated: batadv_slave_1
[  856.066784][ T9170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  856.066866][ T9170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  856.066940][ T9170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  856.067012][ T9170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  856.394513][ T3293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  856.394547][ T3293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  856.625545][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  856.630343][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  858.185110][T12503] bridge0: port 3(syz_tun) entered blocking state
[  858.185227][T12503] bridge0: port 3(syz_tun) entered disabled state
[  858.185407][T12503] syz_tun: entered allmulticast mode
[  858.249041][T12496] netlink: 'syz.9.1838': attribute type 9 has an invalid length.
[  858.308282][T12503] syz_tun: entered promiscuous mode
[  858.310158][T12503] bridge0: port 3(syz_tun) entered blocking state
[  858.310281][T12503] bridge0: port 3(syz_tun) entered forwarding state
[  858.432312][T12506] syzkaller0: entered promiscuous mode
[  858.432347][T12506] syzkaller0: entered allmulticast mode
[  858.468604][T12506] tipc: Started in network mode
[  858.468654][T12506] tipc: Node identity 26e30a47a0f4, cluster identity 4711
[  858.468854][T12506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  858.511071][T12506] tipc: Resetting bearer <eth:syzkaller0>
[  858.529446][T12505] tipc: Resetting bearer <eth:syzkaller0>
[  858.684130][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1842'.
[  859.413458][T12505] tipc: Disabling bearer <eth:syzkaller0>
[  859.506441][T12513] netlink: 'syz.1.1843': attribute type 9 has an invalid length.
[  860.913832][T11192] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  861.064136][T11192] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  861.065480][T11192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 111, changing to 10
[  861.065533][T11192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 26467, setting to 1024
[  861.065599][T11192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.070849][T11192] usb 2-1: config 0 descriptor??
[  861.073208][T12530] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  861.360922][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  861.374364][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  861.400509][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  861.401103][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  861.456163][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  861.486037][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  861.684091][ T5759] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  861.835533][ T5759] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  861.842382][ T5759] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[  861.842506][ T5759] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  861.854351][ T5759] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  861.854391][ T5759] usb 10-1: Manufacturer: syz
[  861.905906][ T5759] usb 10-1: config 0 descriptor??
[  862.198606][T12545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  862.207609][T12545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  862.233677][T11192] ath6kl: Failed to submit usb control message: -110
[  862.233748][T11192] ath6kl: unable to send the bmi data to the device: -110
[  862.233774][T11192] ath6kl: Unable to send get target info: -110
[  862.238839][T11192] ath6kl: Failed to init ath6kl core: -110
[  862.265340][T12545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  862.274110][T12545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  862.296647][T11192] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110
[  862.373628][ T5759] rc_core: IR keymap rc-hauppauge not found
[  862.373654][ T5759] Registered IR keymap rc-empty
[  862.869098][T12545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  863.010285][T12545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  863.100702][ T5759] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  863.104553][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1857'.
[  863.134587][ T5759] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input26
[  863.193189][T11192] usb 2-1: USB disconnect, device number 11
[  863.248017][ T5759] usb 10-1: USB disconnect, device number 4
[  863.985808][T12570] netlink: 'syz.7.1861': attribute type 9 has an invalid length.
[  864.046528][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'.
[  864.103676][ T5739] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  864.331999][ T5739] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  864.360592][ T5739] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  864.360626][ T5739] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  864.360652][ T5739] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  864.360702][ T5739] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  864.363077][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  864.363119][ T5739] usb 6-1: Product: syz
[  864.363147][ T5739] usb 6-1: Manufacturer: syz
[  864.460690][ T5739] cdc_wdm 6-1:1.0: skipping garbage
[  864.460730][ T5739] cdc_wdm 6-1:1.0: skipping garbage
[  864.476449][ T5739] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  864.476487][ T5739] cdc_wdm 6-1:1.0: Unknown control protocol
[  864.511282][T12578] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1864'.
[  864.754544][    T9] usb 6-1: USB disconnect, device number 6
[  864.924656][T12592] sctp: [Deprecated]: syz.6.1868 (pid 12592) Use of int in maxseg socket option.
[  864.924656][T12592] Use struct sctp_assoc_value instead
[  865.303936][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  865.506439][    T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  865.571473][    T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  865.571579][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  865.571626][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  865.572071][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  865.926006][    T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  865.926153][    T9] usb 6-1: Product: syz
[  865.926266][    T9] usb 6-1: Manufacturer: syz
[  866.371894][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  866.385494][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  866.390153][    T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  866.390177][    T9] cdc_wdm 6-1:1.0: Unknown control protocol
[  866.551532][T12606] syzkaller0: entered promiscuous mode
[  866.551568][T12606] syzkaller0: entered allmulticast mode
[  866.697774][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1875'.
[  867.595379][T12628] netlink: 'syz.1.1879': attribute type 10 has an invalid length.
[  868.815245][ T5739] usb 6-1: USB disconnect, device number 7
[  868.911049][T12628] team0 (unregistering): Port device team_slave_0 removed
[  868.956307][T12628] team0 (unregistering): Port device team_slave_1 removed
[  869.099990][T12641] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1884'.
[  869.286493][T12644] ip6erspan0: entered allmulticast mode
[  869.522763][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  869.568725][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1882'.
[  871.400843][T12655] fuse: Bad value for 'fd'
[  871.460947][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1891'.
[  871.594762][ T5739] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  871.754424][ T5739] usb 7-1: Using ep0 maxpacket: 8
[  871.755427][ T5739] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  871.756798][ T5739] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  871.756838][ T5739] usb 7-1: config 0 has no interface number 0
[  871.756893][ T5739] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  871.756961][ T5739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.773295][ T5739] usb 7-1: config 0 descriptor??
[  871.830501][ T5739] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  872.040269][ T5739] usb 7-1: USB disconnect, device number 8
[  872.603545][ T5739] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  872.753442][ T5848] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[  872.759276][ T5739] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  872.763014][ T5739] usb 7-1: config index 0 descriptor too short (expected 92, got 76)
[  872.763057][ T5739] usb 7-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config
[  872.763092][ T5739] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  872.763153][ T5739] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  872.782862][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.782905][ T5739] usb 7-1: Product: syz
[  872.782931][ T5739] usb 7-1: Manufacturer: syz
[  872.782958][ T5739] usb 7-1: SerialNumber: syz
[  872.914601][ T5848] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  872.916450][ T5848] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  872.916516][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  872.916597][ T5848] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  872.916644][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  872.916692][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  872.922113][ T5848] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  872.922204][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  872.922261][ T5848] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  872.922308][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  872.922387][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  872.926266][ T5848] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  872.926362][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  872.926410][ T5848] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  872.926486][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  872.926533][ T5848] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  872.943103][ T5848] usb 6-1: string descriptor 0 read error: -22
[  872.943834][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.066801][ T5848] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  873.090809][ T5739] usb 7-1: USB disconnect, device number 9
[  873.251331][ T5760] usb 6-1: USB disconnect, device number 8
[  873.393331][ T5848] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  873.577476][ T5848] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  873.578993][ T5848] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 111, changing to 10
[  873.579046][ T5848] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 26467, setting to 1024
[  873.579110][ T5848] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.589417][ T5848] usb 10-1: config 0 descriptor??
[  873.591738][T12690] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  873.785244][ T5760] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  873.809788][T12690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  873.810525][T12690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  873.817549][T12690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  873.818316][T12690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  873.826704][T12690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  873.829188][T12690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  873.933552][ T5760] usb 7-1: Using ep0 maxpacket: 8
[  873.936351][ T5760] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  873.944312][ T5760] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  873.944385][ T5760] usb 7-1: config 0 has no interface number 0
[  873.944442][ T5760] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  873.944535][ T5760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.965684][ T5760] usb 7-1: config 0 descriptor??
[  874.032319][ T5760] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  874.082958][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1906'.
[  874.464181][ T5848] ath6kl: Failed to submit usb control message: -71
[  874.464252][ T5848] ath6kl: unable to send the bmi data to the device: -71
[  874.464278][ T5848] ath6kl: Unable to send get target info: -71
[  874.520826][ T5848] ath6kl: Failed to init ath6kl core: -71
[  874.522925][ T5848] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71
[  874.563691][ T5848] usb 10-1: USB disconnect, device number 5
[  876.638173][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  876.638799][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  876.750809][ T5760] usb 7-1: USB disconnect, device number 10
[  877.000397][T12731] bond0: option arp_validate: invalid value (18446744071562100849)
[  877.245780][ T5760] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  877.657040][ T5760] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  877.898484][ T5760] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  877.898539][ T5760] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  877.898606][ T5760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.979812][ T5760] usb 7-1: probing VID:PID(0424:012C)   
[  877.982598][ T5760] usb 7-1: vub300 testing BULK IN EndPoint(0) 81
[  877.982637][ T5760] usb 7-1: vub300 testing BULK OUT EndPoint(1) 02
[  877.982684][ T5760] usb 7-1: vub300 testing BULK IN EndPoint(2) 83
[  877.982747][ T5760] usb 7-1: vub300 testing BULK OUT EndPoint(3) 04
[  877.982778][ T5760] usb 7-1: vub300 LARGE packets using EndPoints 02 81 04 83
[  878.447078][T12732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  878.479431][T12732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  878.502829][ T5760] usb 7-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[  878.704604][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1921'.
[  878.704671][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1921'.
[  878.717280][ T5760] usb 7-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[  878.744376][T12755] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  878.844960][T12751] bond1: entered promiscuous mode
[  879.910086][ T5760] usb 7-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[  879.935394][ T5760] usb 7-1: USB disconnect, device number 11
[  880.719930][ T3271] IPVS: starting estimator thread 0...
[  880.724306][T12747] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  880.825986][T12785] IPVS: using max 30 ests per chain, 72000 per kthread
[  881.160316][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'.
[  881.766280][ T3271] IPVS: stop unused estimator thread 0...
[  883.589410][T12811] loop6: detected capacity change from 0 to 512
[  883.946416][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1944'.
[  883.946451][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1944'.
[  884.638138][T12814] bond6: entered promiscuous mode
[  885.547005][T12838] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  885.547050][T12838] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  885.553155][T12838] vhci_hcd vhci_hcd.0: Device attached
[  885.605905][T12838] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  885.653953][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1948'.
[  885.700970][T12854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1953'.
[  885.824789][T11868] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[  885.976498][ T5739] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  886.258878][ T5739] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  886.770929][ T5739] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  886.771001][ T5739] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  886.771049][ T5739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  886.771096][ T5739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64
[  886.771144][ T5739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  886.771192][ T5739] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  886.771241][ T5739] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  887.045245][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1951'.
[  887.279219][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.279266][ T5739] usb 6-1: Product: syz
[  887.279293][ T5739] usb 6-1: Manufacturer: syz
[  887.279321][ T5739] usb 6-1: SerialNumber: syz
[  887.959278][ T5739] usb 6-1: config 0 descriptor??
[  887.962680][T12838] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  888.024054][ T5739] ati_remote 6-1:0.0: Initializing ati_remote hardware failed.
[  888.024362][ T5739] ati_remote 6-1:0.0: probe with driver ati_remote failed with error -5
[  888.291146][T12838] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  888.330248][ T5759] usb 6-1: USB disconnect, device number 9
[  888.347088][T12845] vhci_hcd: connection reset by peer
[  888.375268][ T3271] vhci_hcd vhci_hcd.5: stop threads
[  888.379553][ T3271] vhci_hcd vhci_hcd.5: release socket
[  888.386437][ T3271] vhci_hcd vhci_hcd.5: disconnect device
[  888.457801][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1957'.
[  891.025991][T11868] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  892.887748][T12920] overlayfs: failed to clone lowerpath
[  893.594670][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1974'.
[  894.845077][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'.
[  894.845122][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1976'.
[  894.967628][T12943] bond6: entered promiscuous mode
[  894.996209][T12954] loop1: detected capacity change from 0 to 512
[  897.905377][T12965] loop7: detected capacity change from 0 to 1024
[  897.910292][T12965] hfsplus: failed to load extents file
[  900.132221][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'.
[  901.216631][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1991'.
[  901.577681][T13005] tmpfs: Unknown parameter 'grpquota_inode'
[  901.856014][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1995'.
[  901.856050][T13015] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1995'.
[  901.858823][T13013] fuse: Bad value for 'fd'
[  901.987289][T13007] bond2: entered promiscuous mode
[  902.055191][T13014] FAULT_INJECTION: forcing a failure.
[  902.055191][T13014] name failslab, interval 1, probability 0, space 0, times 0
[  902.055256][T13014] CPU: 0 UID: 0 PID: 13014 Comm: syz.5.1998 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  902.055312][T13014] Tainted: [L]=SOFTLOCKUP
[  902.055327][T13014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  902.055351][T13014] Call Trace:
[  902.055363][T13014]  <TASK>
[  902.055379][T13014]  dump_stack_lvl+0x100/0x190
[  902.055439][T13014]  should_fail_ex.cold+0x5/0xa
[  902.055492][T13014]  should_failslab+0xc2/0x120
[  902.055538][T13014]  kmem_cache_alloc_noprof+0x92/0x6a0
[  902.055605][T13014]  ? skb_clone+0x190/0x400
[  902.055651][T13014]  skb_clone+0x190/0x400
[  902.055690][T13014]  netlink_deliver_tap+0xaed/0xcc0
[  902.055760][T13014]  netlink_unicast+0x6a5/0x850
[  902.055828][T13014]  ? __pfx_netlink_unicast+0x10/0x10
[  902.055887][T13014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  902.055952][T13014]  netlink_ack+0x655/0xb80
[  902.056027][T13014]  netlink_rcv_skb+0x333/0x420
[  902.056088][T13014]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  902.056137][T13014]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  902.056215][T13014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  902.056274][T13014]  ? netlink_deliver_tap+0x1ae/0xcc0
[  902.056341][T13014]  netlink_unicast+0x585/0x850
[  902.056408][T13014]  ? __pfx_netlink_unicast+0x10/0x10
[  902.056485][T13014]  netlink_sendmsg+0x8b0/0xda0
[  902.056560][T13014]  ? __pfx_netlink_sendmsg+0x10/0x10
[  902.056633][T13014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  902.056684][T13014]  ? apparmor_socket_sendmsg+0x165/0x280
[  902.056762][T13014]  ____sys_sendmsg+0xa4d/0xbe0
[  902.056813][T13014]  ? __pfx_netlink_sendmsg+0x10/0x10
[  902.056884][T13014]  ? __pfx_____sys_sendmsg+0x10/0x10
[  902.056968][T13014]  ___sys_sendmsg+0x190/0x1e0
[  902.057029][T13014]  ? __pfx____sys_sendmsg+0x10/0x10
[  902.057087][T13014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  902.057139][T13014]  ? futex_wait+0x11e/0x370
[  902.057234][T13014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  902.057288][T13014]  ? find_held_lock+0x2b/0x80
[  902.057386][T13014]  __sys_sendmsg+0x160/0x210
[  902.057460][T13014]  ? __pfx___sys_sendmsg+0x10/0x10
[  902.057552][T13014]  ? srso_alias_return_thunk+0x5/0xfbef5
[  902.057615][T13014]  do_syscall_64+0x123/0x790
[  902.057674][T13014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  902.057720][T13014] RIP: 0033:0x7f12e5d9e159
[  902.057751][T13014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  902.057795][T13014] RSP: 002b:00007f12e6beb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  902.057836][T13014] RAX: ffffffffffffffda RBX: 00007f12e6025fa0 RCX: 00007f12e5d9e159
[  902.057865][T13014] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005
[  902.057893][T13014] RBP: 00007f12e5e3506b R08: 0000000000000000 R09: 0000000000000000
[  902.057921][T13014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  902.057948][T13014] R13: 00007f12e6026038 R14: 00007f12e6025fa0 R15: 00007fffbab79768
[  902.058005][T13014]  </TASK>
[  906.689713][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2009'.
[  907.017631][T13056] tmpfs: Unknown parameter 'grpquota_inode'
[  907.887493][T13072] fuse: Invalid rootmode
[  908.125266][ T5739] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  908.676625][ T5739] usb 10-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  908.731382][ T5739] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.963510][ T5739] i2c-tiny-usb 10-1:1.0: version 1.00 found at bus 010 address 006
[  909.548018][ T5739]  (null): error -EIO: failure setting delay to 10us
[  909.548106][ T5739] i2c-tiny-usb 10-1:1.0: probe with driver i2c-tiny-usb failed with error -5
[  909.551755][ T5739] usb 10-1: USB disconnect, device number 6
[  910.989010][T13119] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2027'.
[  911.469626][T13124] trusted_key: encrypted_key: insufficient parameters specified
[  912.798420][T13140] bridge0: port 3(syz_tun) entered blocking state
[  912.798539][T13140] bridge0: port 3(syz_tun) entered disabled state
[  912.798740][T13140] syz_tun: entered allmulticast mode
[  912.850943][T13149] netlink: 'syz.6.2031': attribute type 9 has an invalid length.
[  912.866244][T13140] syz_tun: entered promiscuous mode
[  912.870586][T13140] bridge0: port 3(syz_tun) entered blocking state
[  912.870711][T13140] bridge0: port 3(syz_tun) entered forwarding state
[  913.099431][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2036'.
[  914.216709][T13164] fuse: Invalid rootmode
[  915.321076][ T7174] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  916.703130][ T7174] usb 10-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  916.714814][ T7174] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  916.848590][ T7174] i2c-tiny-usb 10-1:1.0: version 1.00 found at bus 010 address 007
[  917.108661][ T7174]  (null): error -EIO: failure setting delay to 10us
[  917.108787][ T7174] i2c-tiny-usb 10-1:1.0: probe with driver i2c-tiny-usb failed with error -5
[  917.136564][ T7174] usb 10-1: USB disconnect, device number 7
[  919.604425][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'.
[  920.041213][T13217] netlink: 'syz.6.2051': attribute type 9 has an invalid length.
[  921.858857][T13232] netlink: 'syz.2.2056': attribute type 9 has an invalid length.
[  922.380617][T13246] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  924.360722][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2062'.
[  924.820127][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'.
[  924.820163][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'.
[  924.862378][T13265] bond7: entered promiscuous mode
[  926.387767][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2070'.
[  926.889403][T13295] netlink: 'syz.7.2072': attribute type 9 has an invalid length.
[  927.141386][T13305] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  927.178957][T13306] loop9: detected capacity change from 0 to 1024
[  927.194091][T13306] hfsplus: failed to load extents file
[  927.509333][T13300] netlink: 'syz.6.2075': attribute type 9 has an invalid length.
[  927.721399][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2078'.
[  928.394309][ T5628] Bluetooth: hci1: command 0x0405 tx timeout
[  929.244407][T13323] fuse: Invalid rootmode
[  930.133327][T11868] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  930.377642][T11868] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  930.382009][T11868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.406900][T11868] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 010
[  930.566674][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'.
[  930.566718][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'.
[  930.594390][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2089'.
[  930.720614][T13335] bond8: entered promiscuous mode
[  930.750980][T11868]  (null): error -EIO: failure setting delay to 10us
[  930.751063][T11868] i2c-tiny-usb 6-1:1.0: probe with driver i2c-tiny-usb failed with error -5
[  930.763787][T11868] usb 6-1: USB disconnect, device number 10
[  930.897562][T13351] netlink: 'syz.7.2090': attribute type 9 has an invalid length.
[  930.923042][T13353] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  930.960651][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  932.150568][T13366] misc userio: Invalid payload size
[  932.150714][T13366] misc userio: Invalid payload size
[  932.150837][T13366] misc userio: Invalid payload size
[  932.180025][T13359] netlink: 'syz.5.2095': attribute type 9 has an invalid length.
[  932.274801][T11192] Process accounting resumed
[  932.444307][T13376] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  933.043343][ T5623] Bluetooth: hci1: command 0x0405 tx timeout
[  936.118221][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2102'.
[  937.161809][T13412] netlink: 'syz.1.2106': attribute type 9 has an invalid length.
[  938.085910][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2110'.
[  938.184918][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2112'.
[  938.550835][T13428] netlink: 'syz.9.2111': attribute type 9 has an invalid length.
[  939.277098][T11868] Process accounting resumed
[  939.337012][T13431] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  940.867230][T13453] misc userio: Invalid payload size
[  940.876741][T13453] misc userio: Invalid payload size
[  940.879272][T13453] misc userio: Invalid payload size
[  941.525456][ T5623] Bluetooth: hci1: command 0x0405 tx timeout
[  941.955269][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'.
[  943.257382][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2126'.
[  943.399026][T13477] netlink: 'syz.2.2127': attribute type 9 has an invalid length.
[  944.647269][T13489] fuse: Unknown parameter '00000000000000000000'
[  944.963459][ T5739] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  945.092563][  T112] Bluetooth: hci3: Frame reassembly failed (-84)
[  945.158322][ T5739] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  945.194707][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.506312][ T5739] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 011
[  946.269821][ T5739]  (null): error -EIO: failure setting delay to 10us
[  946.269909][ T5739] i2c-tiny-usb 6-1:1.0: probe with driver i2c-tiny-usb failed with error -5
[  946.322066][ T5739] usb 6-1: USB disconnect, device number 11
[  946.493549][T13514] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  947.113426][ T5623] Bluetooth: hci3: command 0x1003 tx timeout
[  947.122030][ T5628] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  950.014494][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2139'.
[  951.921255][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'.
[  952.448915][T13553] netlink: 'syz.1.2144': attribute type 9 has an invalid length.
[  953.447638][T13554] misc userio: Invalid payload size
[  953.449269][T13554] misc userio: Invalid payload size
[  953.449413][T13554] misc userio: Invalid payload size
[  953.743000][T13569] bond3: entered promiscuous mode
[  953.747296][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2150'.
[  953.747327][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2150'.
[  954.146122][T13576] overlayfs: failed to clone lowerpath
[  954.969042][T13579] fuse: Unknown parameter '00000000000000000000'
[  955.287681][T13581] netlink: 'syz.2.2153': attribute type 9 has an invalid length.
[  955.504888][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2155'.
[  957.292601][T13595] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  958.024108][ T3247] Bluetooth: hci3: Frame reassembly failed (-84)
[  959.686712][ T5623] Bluetooth: hci3: command 0x1003 tx timeout
[  959.731642][ T5628] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  960.932581][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'.
[  962.715440][T13629] overlayfs: failed to clone lowerpath
[  963.624112][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'.
[  963.821532][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2167'.
[  963.821566][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2167'.
[  964.594056][T13637] bond3: entered promiscuous mode
[  964.941841][T13650] netlink: 'syz.1.2171': attribute type 9 has an invalid length.
[  965.082514][T13654] misc userio: Invalid payload size
[  965.087685][T13654] misc userio: Invalid payload size
[  965.099347][T13654] misc userio: Invalid payload size
[  965.152986][T13660] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  965.386265][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'.
[  965.480807][T13672] fuse: Unknown parameter 'user00000000000000000000'
[  965.903528][ T1288] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  966.217397][ T1288] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  966.376979][ T1288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.398417][ T1288] i2c-tiny-usb 2-1:1.0: version 1.00 found at bus 002 address 012
[  967.428585][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2177'.
[  967.521235][ T1288]  (null): error -EIO: failure setting delay to 10us
[  967.521357][ T1288] i2c-tiny-usb 2-1:1.0: probe with driver i2c-tiny-usb failed with error -5
[  967.526615][ T1288] usb 2-1: USB disconnect, device number 12
[  968.726557][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2183'.
[  973.282823][T13715] netlink: 'syz.2.2188': attribute type 9 has an invalid length.
[  973.311568][T13723] bond9: entered promiscuous mode
[  973.321891][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2189'.
[  973.321928][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2189'.
[  974.728988][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2190'.
[  976.976317][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2194'.
[  976.987334][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2198'.
[  977.719487][T13753] fuse: fd is not a fuse device
[  978.466150][T13765] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  981.495598][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2205'.
[  981.495633][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2205'.
[  981.652841][T13791] bond5: entered promiscuous mode
[  981.703937][T13794] netlink: 'syz.2.2204': attribute type 9 has an invalid length.
[  981.949814][T13799] tipc: Cannot configure node identity twice
[  985.397672][T13812] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  986.634407][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'.
[  987.509656][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'.
[  987.540046][T13834] fuse: Unknown parameter 'user00000000000000000000'
[  987.793368][ T3209] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  987.986587][T13842] overlayfs: failed to clone lowerpath
[  988.009948][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2216'.
[  988.526106][ T3209] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[  988.527522][ T3209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.538381][ T3209] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 012
[  988.937839][T13859] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  989.045386][T13858] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  989.076592][ T3209]  (null): error -EIO: failure setting delay to 10us
[  989.076673][ T3209] i2c-tiny-usb 6-1:1.0: probe with driver i2c-tiny-usb failed with error -5
[  989.090894][ T3209] usb 6-1: USB disconnect, device number 12
[  990.398584][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2226'.
[  990.398620][T13892] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2226'.
[  990.787809][T13885] bond2: entered promiscuous mode
[  990.841081][T13896] tipc: Started in network mode
[  990.841108][T13896] tipc: Node identity , cluster identity 4711
[  990.841131][T13896] tipc: Failed to set node id, please configure manually
[  990.841183][T13896] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  992.424040][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  993.612091][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2230'.
[  995.483598][T13920] overlayfs: failed to clone lowerpath
[  995.824489][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2232'.
[  999.435509][T13943] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[ 1001.007475][T13965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2244'.
[ 1001.316358][T13972] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1003.644496][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'.
[ 1003.876050][T13985] tipc: Started in network mode
[ 1003.876075][T13985] tipc: Node identity , cluster identity 4711
[ 1003.876098][T13985] tipc: Failed to set node id, please configure manually
[ 1003.876151][T13985] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1005.535528][T13985] Process accounting resumed
[ 1005.549912][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2252'.
[ 1005.962506][T14008] tipc: Started in network mode
[ 1005.962535][T14008] tipc: Node identity 4, cluster identity 4711
[ 1005.962552][T14008] tipc: Node number set to 4
[ 1006.040919][T14008] tipc: Enabled bearer <eth:syz_tun>, priority 0
[ 1006.108519][T14008] tipc: Resetting bearer <eth:syz_tun>
[ 1006.203952][T14008] bridge0: port 3(syz_tun) entered disabled state
[ 1006.422023][T14008] syz_tun (unregistering): left allmulticast mode
[ 1006.422066][T14008] syz_tun (unregistering): left promiscuous mode
[ 1006.422170][T14008] bridge0: port 3(syz_tun) entered disabled state
[ 1006.964366][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2253'.
[ 1007.138319][T14008] tipc: Disabling bearer <eth:syz_tun>
[ 1008.461885][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2262'.
[ 1009.143841][T14050] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1009.715391][ T3209] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1009.875199][ T3209] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[ 1009.876553][ T3209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.939010][ T3209] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 013
[ 1010.462474][T14075] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1010.510001][ T3209]  (null): error -EIO: failure setting delay to 10us
[ 1010.510091][ T3209] i2c-tiny-usb 6-1:1.0: probe with driver i2c-tiny-usb failed with error -5
[ 1010.701248][ T7174] Process accounting resumed
[ 1010.702441][ T3209] usb 6-1: USB disconnect, device number 13
[ 1010.770536][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'.
[ 1010.866923][T14079] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1012.843700][T14088] netlink: 'syz.6.2271': attribute type 9 has an invalid length.
[ 1013.025766][T14101] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[ 1014.476640][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'.
[ 1015.389292][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2278'.
[ 1016.722844][T14151] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1016.745915][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2285'.
[ 1016.777162][T14150] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1020.525196][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2287'.
[ 1020.785481][T14169] Process accounting resumed
[ 1021.278586][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2291'.
[ 1021.278623][T14183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2291'.
[ 1021.832310][T14178] bond3: entered promiscuous mode
[ 1021.896876][T14191] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[ 1024.376628][T14225] bond10: entered promiscuous mode
[ 1024.377181][T14225] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1024.423982][T14225] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1024.424023][T14225] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address
[ 1024.424792][T14225] bond10: (slave ipvlan2): Error -95 calling set_mac_address
[ 1024.567667][T14234] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1024.597640][T14233] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1024.641458][T11192] Process accounting resumed
[ 1024.666377][T14236] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1024.815228][ T7174] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1024.965565][ T7174] usb 10-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00
[ 1024.967208][ T7174] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1025.001803][ T7174] i2c-tiny-usb 10-1:1.0: version 1.00 found at bus 010 address 008
[ 1025.506369][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2306'.
[ 1026.955220][ T7174]  (null): error -EIO: failure setting delay to 10us
[ 1026.955304][ T7174] i2c-tiny-usb 10-1:1.0: probe with driver i2c-tiny-usb failed with error -5
[ 1026.959918][ T7174] usb 10-1: USB disconnect, device number 8
[ 1027.139739][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2310'.
[ 1027.139774][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2310'.
[ 1027.209829][T14260] bond4: entered promiscuous mode
[ 1027.820150][T13607] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1029.833817][ T5623] Bluetooth: hci3: command 0x1003 tx timeout
[ 1029.835468][ T5628] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1030.906469][T14277] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[ 1032.116002][   T32] INFO: task kworker/1:6:5760 blocked for more than 143 seconds.
[ 1032.116102][   T32]       Tainted: G             L      syzkaller #0
[ 1032.116171][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1032.116226][   T32] task:kworker/1:6     state:D stack:22440 pid:5760  tgid:5760  ppid:2      task_flags:0x4288060 flags:0x00080000
[ 1032.116818][   T32] Workqueue: usb_hub_wq hub_event
[ 1032.116913][   T32] Call Trace:
[ 1032.116967][   T32]  <TASK>
[ 1032.117068][   T32]  __schedule+0x1259/0x6920
[ 1032.117320][   T32]  ? preempt_schedule_thunk+0x16/0x40
[ 1032.117537][   T32]  ? __pfx___schedule+0x10/0x10
[ 1032.117588][   T32]  ? find_held_lock+0x2b/0x80
[ 1032.117695][   T32]  ? schedule+0x225/0x2c0
[ 1032.117766][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.171360][   T32]  schedule+0xdd/0x2c0
[ 1032.171412][   T32]  schedule_timeout+0x1b2/0x280
[ 1032.171491][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[ 1032.171567][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.171615][   T32]  ? mark_held_locks+0x40/0x70
[ 1032.171665][   T32]  __wait_for_common+0x2e7/0x4c0
[ 1032.171711][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[ 1032.171782][   T32]  ? __pfx___wait_for_common+0x10/0x10
[ 1032.171882][   T32]  ? __flush_work+0x4ca/0xcb0
[ 1032.172037][   T32]  ? find_held_lock+0x2b/0x80
[ 1032.174732][   T32]  ? __flush_work+0x928/0xcb0
[ 1032.174840][   T32]  ? __flush_work+0x928/0xcb0
[ 1032.174943][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.175036][   T32]  ? __flush_work+0x4ca/0xcb0
[ 1032.175123][   T32]  __flush_work+0x7c7/0xcb0
[ 1032.177053][   T32]  ? __timer_delete+0x91/0x1b0
[ 1032.178556][   T32]  ? __pfx___flush_work+0x10/0x10
[ 1032.181406][   T32]  ? __pfx_wq_barrier_func+0x10/0x10
[ 1032.181619][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.181720][   T32]  ? __pfx___might_resched+0x10/0x10
[ 1032.189580][   T32]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1032.201356][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.214546][   T32]  ? usb_hcd_flush_endpoint+0x359/0x400
[ 1032.399247][   T32]  cancel_delayed_work_sync+0xd1/0xf0
[ 1032.399345][   T32]  mmc_stop_host+0xe9/0x400
[ 1032.399443][   T32]  mmc_remove_host+0x15/0x60
[ 1032.399555][   T32]  vub300_disconnect+0x12d/0x170
[ 1032.399665][   T32]  usb_unbind_interface+0x1dd/0x9e0
[ 1032.399811][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.399906][   T32]  ? __pfx_usb_unbind_interface+0x10/0x10
[ 1032.400006][   T32]  device_remove+0x12a/0x180
[ 1032.400120][   T32]  device_release_driver_internal+0x44e/0x620
[ 1032.400433][   T32]  ? __entry_text_end+0x102035/0x102039
[ 1032.400544][   T32]  bus_remove_device+0x2bc/0x560
[ 1032.400654][   T32]  ? __pfx_bus_remove_device+0x10/0x10
[ 1032.400720][   T32]  ? __pfx_device_remove_attrs+0x10/0x10
[ 1032.400870][   T32]  device_del+0x376/0x9b0
[ 1032.547787][T14295] overlayfs: overlapping lowerdir path
[ 1032.591179][   T32]  ? __pfx_device_del+0x10/0x10
[ 1032.591267][   T32]  ? kobject_put+0xb9/0x640
[ 1032.591413][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.591561][   T32]  usb_disable_device+0x367/0x810
[ 1032.591677][   T32]  usb_disconnect+0x2e2/0x9a0
[ 1032.591789][   T32]  hub_event+0x1bb1/0x4420
[ 1032.592042][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.592136][   T32]  ? __lock_acquire+0x5c0/0x1f40
[ 1032.592289][   T32]  ? __pfx_hub_event+0x10/0x10
[ 1032.592345][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.592498][   T32]  ? get_usage_chars+0x30/0xe0
[ 1032.592596][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.592722][   T32]  ? lock_acquire+0x1d1/0x380
[ 1032.592821][   T32]  ? process_one_work+0xa2c/0x1b10
[ 1032.592940][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.593044][   T32]  ? process_one_work+0x906/0x1b10
[ 1032.593191][   T32]  ? process_one_work+0x906/0x1b10
[ 1032.781672][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.781839][   T32]  process_one_work+0xac7/0x1b10
[ 1032.782051][   T32]  ? __pfx_process_one_work+0x10/0x10
[ 1032.782194][   T32]  ? lock_acquire+0x1d1/0x380
[ 1032.782349][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.782476][   T32]  worker_thread+0x5ef/0xe50
[ 1032.782733][   T32]  ? __pfx_worker_thread+0x10/0x10
[ 1032.912182][   T32]  ? kthread+0x13a/0x450
[ 1032.912291][   T32]  ? __pfx_worker_thread+0x10/0x10
[ 1032.912391][   T32]  kthread+0x373/0x450
[ 1032.912490][   T32]  ? __pfx_kthread+0x10/0x10
[ 1032.912609][   T32]  ret_from_fork+0x730/0xd60
[ 1032.912730][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1032.912830][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.912925][   T32]  ? __switch_to+0x800/0x10f0
[ 1032.913023][   T32]  ? __switch_to_asm+0x39/0x70
[ 1032.913074][   T32]  ? __pfx_kthread+0x10/0x10
[ 1032.913177][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1032.918221][   T32]  </TASK>
[ 1032.918478][   T32] INFO: task kworker/1:7:5848 blocked for more than 144 seconds.
[ 1032.918524][   T32]       Tainted: G             L      syzkaller #0
[ 1032.918632][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1032.918701][   T32] task:kworker/1:7     state:D stack:23704 pid:5848  tgid:5848  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1032.975376][   T32] Workqueue: events_freezable mmc_rescan
[ 1032.975434][   T32] Call Trace:
[ 1032.975446][   T32]  <TASK>
[ 1032.975467][   T32]  __schedule+0x1259/0x6920
[ 1032.975522][   T32]  ? preempt_schedule_thunk+0x16/0x40
[ 1032.975583][   T32]  ? __pfx___schedule+0x10/0x10
[ 1032.975621][   T32]  ? find_held_lock+0x2b/0x80
[ 1032.975686][   T32]  ? schedule+0x225/0x2c0
[ 1032.975723][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.975780][ 
** replaying previous printk message **
[ 1032.975780][   T32]  schedule+0xdd/0x2c0
[ 1032.975820][   T32]  schedule_timeout+0x1b2/0x280
[ 1032.975882][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[ 1032.975954][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.976001][   T32]  ? preempt_schedule_thunk+0x16/0x40
[ 1032.976058][   T32]  __wait_for_common+0x2e7/0x4c0
[ 1032.976103][   T32]  ? __pfx_schedule_timeout+0x10/0x10
[ 1032.976172][   T32]  ? __pfx___wait_for_common+0x10/0x10
[ 1032.976222][   T32]  ? led_trigger_write+0x2e0/0x300
[ 1032.976276][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.976324][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.976379][   T32]  mmc_wait_for_req_done+0xcd/0x3d0
[ 1032.976439][   T32]  mmc_wait_for_req+0x207/0x2c0
[ 1032.976489][   T32]  mmc_wait_for_cmd+0x154/0x200
[ 1032.976536][   T32]  ? __pfx_mmc_wait_for_cmd+0x10/0x10
[ 1032.976610][   T32]  ? __pfx_mmc_wait_done+0x10/0x10
[ 1032.976669][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.976715][   T32]  ? rpm_resume+0x7eb/0x1320
[ 1032.983975][   T32]  mmc_io_rw_direct_host+0x126/0x330
[ 1032.984036][   T32]  ? __pfx_mmc_io_rw_direct_host+0x10/0x10
[ 1032.984099][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.984146][   T32]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1032.984191][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.984236][   T32]  ? __pm_runtime_resume+0xc3/0x170
[ 1032.984275][   T32]  ? __mmc_claim_host+0x2e2/0x5f0
[ 1032.984322][   T32]  sdio_reset+0x92/0x240
[ 1032.984366][   T32]  ? __pfx_sdio_reset+0x10/0x10
[ 1032.984408][   T32]  ? mmc_sw_reset+0x60/0xd0
[ 1032.984444][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.984496][   T32]  ? __pfx_default_wake_function+0x10/0x10
[ 1032.984548][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.984595][   T32]  ? mmc_attach_sd_uhs2+0x2d0/0x590
[ 1032.984644][   T32]  mmc_rescan+0xba9/0x11c0
[ 1032.984735][   T32]  process_one_work+0xac7/0x1b10
[ 1032.984815][   T32]  ? __pfx_process_one_work+0x10/0x10
[ 1032.984877][   T32]  ? lock_acquire+0x1d1/0x380
[ 1032.984932][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.984987][   T32]  worker_thread+0x5ef/0xe50
[ 1032.985059][   T32]  ? __pfx_worker_thread+0x10/0x10
[ 1032.985119][   T32]  ? kthread+0x13a/0x450
[ 1032.985168][   T32]  ? __pfx_worker_thread+0x10/0x10
[ 1032.985223][   T32]  kthread+0x373/0x450
[ 1032.985274][   T32]  ? __pfx_kthread+0x10/0x10
[ 1032.985329][   T32]  ret_from_fork+0x730/0xd60
[ 1032.985374][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1032.998228][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.998287][   T32]  ? __switch_to+0x800/0x10f0
[ 1032.998340][   T32]  ? __switch_to_asm+0x39/0x70
[ 1032.998378][   T32]  ? __pfx_kthread+0x10/0x10
[ 1032.998435][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1032.998498][   T32]  </TASK>
[ 1032.998586][   T32] 
[ 1032.998586][   T32] Showing all locks held in the system:
[ 1032.998602][   T32] locks held by pr/ttyS0/16: 2, last CPU#0:
[ 1032.998630][   T32]  #0: ffffffff8edd88b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60
[ 1032.998754][   T32]  #1: ffffffff9bc68478 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0
[ 1032.998858][   T32] locks held by khungtaskd/32: 1, last CPU#1:
[ 1032.998885][   T32]  #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1032.998998][   T32] locks held by kworker/u8:2/34: 3, last CPU#0:
[ 1032.999025][   T32]  #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1032.999135][   T32]  #1: ffffc90000aa7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1032.999281][   T32]  #2: ffff88801c160258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20
[ 1032.999430][   T32] locks held by udevd/4986: 3, last CPU#0:
[ 1032.999457][   T32]  #0: ffff888036bfe460 (sb_writers#5){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730
[ 1032.999568][   T32]  #1: ffff888036c26308 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x262/0x730
[ 1033.011251][   T32]  #2: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090
[ 1033.011371][   T32] locks held by getty/5376: 2, on CPU#0:
[ 1033.011398][   T32]  #0: ffff8880357ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1033.011503][   T32]  #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[ 1033.011618][   T32] locks held by syz-executor/5618: 4, last CPU#1:
[ 1033.011653][   T32]  #0: ffffffff8ef3cef0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4816/0x8380
[ 1033.011744][   T32]  #1: ffff888036930f80 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370
[ 1033.011839][   T32]  #2: ffff88801c07d900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370
[ 1033.011941][   T32]  #3: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[ 1033.012060][   T32] locks held by kworker/1:6/5760: 5, on CPU#1:
[ 1033.012088][   T32]  #0: ffff8880202d8540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1033.012199][   T32]  #1: ffffc900041e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1033.015538][   T32]  #2: ffff88802a4361d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420
[ 1033.015638][   T32]  #3: ffff8880554b91d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0
[ 1033.015737][   T32]  #4: ffff888079a011a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[ 1033.029426][   T32] locks held by kworker/1:7/5848: 2, on CPU#1:
[ 1033.029459][   T32]  #0: ffff88801c05a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1033.029583][   T32]  #1: ffffc90004827d08 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1033.029710][   T32] locks held by kworker/0:2/11192: 2, last CPU#0:
[ 1033.029739][   T32]  #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1033.029853][   T32]  #1: ffffc90003347d08 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1033.029965][   T32] locks held by syz-executor/11253: 4, last CPU#1:
[ 1033.029993][   T32]  #0: ffffffff8ef3cef0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4816/0x8380
[ 1033.030102][   T32]  #1: ffff88801c083440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370
[ 1033.030196][   T32]  #2: ffff88801c07a800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370
[ 1033.030304][   T32]  #3: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310
[ 1033.030423][   T32] locks held by kworker/1:0/11868: 2, last CPU#1:
[ 1033.030491][   T32]  #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[ 1033.030609][   T32]  #1: ffffc90004c7fd08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[ 1033.030732][   T32] locks held by syz.2.2308/14273: 1, last CPU#1:
[ 1033.030763][   T32]  #0: ffff88802af14170 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30
[ 1033.046389][   T32] locks held by syz.6.2315/14295: 2, on CPU#1:
[ 1033.046455][   T32]  #0: ffff88802b98a0e8 (&type->s_umount_key#59/1){+.+.}-{4:4}, at: sget_fc+0x3c6/0x1f70
[ 1033.046592][   T32]  #1: ffffffff8edf84a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0
[ 1033.046694][   T32] locks held by syz.5.2316/14296: 1, on CPU#1:
[ 1033.046722][   T32]  #0: ffff888032f1c160 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_release+0x66/0x110
[ 1033.046830][   T32] locks held by syz.7.2317/14303: 1, on CPU#1:
[ 1033.046858][   T32]  #0: ffff888032f1c160 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_open+0x281/0xb90
[ 1033.046963][   T32] 
[ 1033.046972][   T32] =============================================
[ 1033.046972][   T32] 
[ 1033.046987][   T32] NMI backtrace for cpu 1
[ 1033.047012][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1033.047064][   T32] Tainted: [L]=SOFTLOCKUP
[ 1033.047078][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1033.047100][   T32] Call Trace:
[ 1033.047113][   T32]  <TASK>
[ 1033.047126][   T32]  dump_stack_lvl+0x100/0x190
[ 1033.047182][   T32]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1033.047240][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1033.047282][   T32]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[ 1033.047350][   T32]  sys_info+0x141/0x190
[ 1033.047404][   T32]  watchdog+0xcb1/0x1030
[ 1033.047456][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1033.047498][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1033.047539][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.047587][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.047632][   T32]  ? __kthread_parkme+0x18f/0x230
[ 1033.047689][   T32]  ? kthread+0x13a/0x450
[ 1033.047736][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1033.047776][   T32]  kthread+0x373/0x450
[ 1033.047824][   T32]  ? __pfx_kthread+0x10/0x10
[ 1033.047882][   T32]  ret_from_fork+0x730/0xd60
[ 1033.047923][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1033.047965][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.048010][   T32]  ? __switch_to+0x800/0x10f0
[ 1033.048060][   T32]  ? __switch_to_asm+0x39/0x70
[ 1033.048097][   T32]  ? __pfx_kthread+0x10/0x10
[ 1033.048151][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1033.048211][   T32]  </TASK>
[ 1033.048245][   T32] Sending NMI from CPU 1 to CPUs 0:
[ 1033.048277][    C0] NMI backtrace for cpu 0
[ 1033.048298][    C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1033.048343][    C0] Tainted: [L]=SOFTLOCKUP
[ 1033.048355][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1033.048375][    C0] RIP: 0010:io_serial_in+0x87/0xb0
[ 1033.048423][    C0] Code: 41 5b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 68 5e 5f fb e8 08 b3 cd fc eb a2 e8 91 b3
[ 1033.048458][    C0] RSP: 0018:ffffc90000157958 EFLAGS: 00000002
[ 1033.048483][    C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000
[ 1033.048505][    C0] RDX: 00000000000003fd RSI: ffffffff85b0e270 RDI: ffffffff9bc684a0
[ 1033.048527][    C0] RBP: ffffffff9bc68460 R08: 0000000000000001 R09: 000000000000001f
[ 1033.048548][    C0] R10: 0000000000000000 R11: 303478302f363f20 R12: 0000000000000000
[ 1033.048569][    C0] R13: 0000000000000020 R14: fffffbfff378d0e9 R15: dffffc0000000000
[ 1033.048594][    C0] FS:  0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000
[ 1033.048623][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1033.048644][    C0] CR2: 00007fba58def2f8 CR3: 0000000032d5b000 CR4: 0000000000350ef0
[ 1033.048666][    C0] Call Trace:
[ 1033.048675][    C0]  <TASK>
[ 1033.048688][    C0]  wait_for_lsr+0x13a/0x210
[ 1033.048745][    C0]  serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0
[ 1033.048803][    C0]  __serial8250_console_fifo_write+0xa5/0x290
[ 1033.048858][    C0]  ? __pfx_io_serial_out+0x10/0x10
[ 1033.048909][    C0]  serial8250_console_write+0xf46/0x1330
[ 1033.048952][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[ 1033.048991][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.049031][    C0]  ? __nbcon_context_update_unsafe+0x1b6/0x220
[ 1033.049089][    C0]  ? __pfx___nbcon_context_update_unsafe+0x10/0x10
[ 1033.049152][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.049193][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.049237][    C0]  nbcon_emit_next_record+0x8f7/0xa70
[ 1033.049296][    C0]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[ 1033.049351][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.049393][    C0]  ? nbcon_context_try_acquire+0x3a6/0xc60
[ 1033.049446][    C0]  ? do_raw_spin_lock+0xb0/0x260
[ 1033.049501][    C0]  ? __pfx___cant_migrate+0x10/0x10
[ 1033.049542][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.049584][    C0]  ? _raw_spin_lock_irqsave+0x42/0x60
[ 1033.049625][    C0]  nbcon_emit_one+0x1a8/0x2b0
[ 1033.049678][    C0]  ? __pfx_nbcon_emit_one+0x10/0x10
[ 1033.049733][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.049780][    C0]  nbcon_kthread_func+0x613/0x7d0
[ 1033.049815][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[ 1033.049846][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.049890][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.049930][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.049969][    C0]  ? __kthread_parkme+0x18f/0x230
[ 1033.050009][    C0]  ? kthread+0x13a/0x450
[ 1033.050050][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[ 1033.050080][    C0]  kthread+0x373/0x450
[ 1033.050122][    C0]  ? __pfx_kthread+0x10/0x10
[ 1033.050174][    C0]  ret_from_fork+0x730/0xd60
[ 1033.050210][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1033.050245][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1033.050284][    C0]  ? __switch_to+0x800/0x10f0
[ 1033.050327][    C0]  ? __switch_to_asm+0x39/0x70
[ 1033.050358][    C0]  ? __pfx_kthread+0x10/0x10
[ 1033.050404][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1033.050449][    C0]  </TASK>
[ 1033.076305][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[ 1034.310415][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1034.321365][   T32] Tainted: [L]=SOFTLOCKUP
[ 1034.325679][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1034.335729][   T32] Call Trace:
[ 1034.338997][   T32]  <TASK>
[ 1034.341915][   T32]  dump_stack_lvl+0x100/0x190
[ 1034.346609][   T32]  vpanic+0x553/0x970
[ 1034.350590][   T32]  ? __pfx_vpanic+0x10/0x10
[ 1034.355192][   T32]  panic+0xd1/0xe0
[ 1034.358958][   T32]  ? __pfx_panic+0x10/0x10
[ 1034.363388][   T32]  ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[ 1034.369611][   T32]  ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[ 1034.376097][   T32]  ? watchdog.cold+0x1ec/0x234
[ 1034.380994][   T32]  watchdog.cold+0x1fd/0x234
[ 1034.386124][   T32]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1034.392043][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1034.396734][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1034.402381][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1034.408123][   T32]  ? __kthread_parkme+0x18f/0x230
[ 1034.413156][   T32]  ? kthread+0x13a/0x450
[ 1034.417415][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1034.422097][   T32]  kthread+0x373/0x450
[ 1034.426193][   T32]  ? __pfx_kthread+0x10/0x10
[ 1034.430821][   T32]  ret_from_fork+0x730/0xd60
[ 1034.435416][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1034.440615][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1034.446372][   T32]  ? __switch_to+0x800/0x10f0
[ 1034.451076][   T32]  ? __switch_to_asm+0x39/0x70
[ 1034.456036][   T32]  ? __pfx_kthread+0x10/0x10
[ 1034.460663][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1034.465563][   T32]  </TASK>
[ 1034.468701][   T32] Kernel Offset: disabled
[ 1034.473044][   T32] Rebooting in 86400 seconds..