last executing test programs:

16m26.891830559s ago: executing program 2 (id=8):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)

16m23.609102888s ago: executing program 2 (id=9):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000032c0)=@newtaction={0xfc0, 0x30, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{0x4}, {0xfa8, 0x1, [@m_skbmod={0xfa4, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0xf75, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xfc0}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)})
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x0, 0x40000033, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000180)="c0789c3f1bfca8270c026e38f487dd0d2ba9a357ddc512c95fb513498c10a75e6e6a11deaeddc9783556480f86e101c4b9dc64cc417a6068bbd7b6ae227279a0f8e226c123ced4a6380dc861fbaeff12db8835e7eeef66744c1495ef085aaaec66648b64cf5505c2f175244f5c668a1d76b8daab128e5cf29c5fdb742f351a86d4a7f4832a36be99f8c016df9c4bd6bdc9eba58938f85aa1b0389b4473745b3ac306b76e32dce52ca3a270170273fb5a3e7945ea69b98af12c98dda7ab708e75f1493e4e29a0ee83132be4069cd6a0a4e06101040000a05106", 0xd9)
setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000900))
madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9)
syz_io_uring_setup(0x11a1, &(0x7f00000007c0)={0x0, 0xb649, 0x40000, 0x2, 0x145}, &(0x7f0000000840), &(0x7f0000000140), &(0x7f00000008c0))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8)
open_by_handle_at(r5, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x2241c2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="047bd59a676ed16b"], 0x4)
syz_emit_vhci(&(0x7f0000000b00)=ANY=[@ANYBLOB="04040a0000000000008a5ccda2"], 0xd)

16m23.497216033s ago: executing program 5 (id=6):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
fchown(r0, 0xee00, 0xee01)
fchown(r0, 0x0, 0x0)

16m19.137334927s ago: executing program 5 (id=13):
r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x10000000005)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001b080)=""/102400, 0x19000)
r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0xc8402)
r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0)
dup3(r5, r6, 0x0)
read$rfkill(r6, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, 0x0)

16m18.736449203s ago: executing program 2 (id=14):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13})
ioctl$UI_DEV_CREATE(r3, 0x5501)
socket$packet(0x11, 0x2, 0x300)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50)

16m18.377215234s ago: executing program 4 (id=5):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

16m17.355065805s ago: executing program 2 (id=16):
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mtdblock0\x00', 0x0, 0x22)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mtdblock0\x00', 0x101042, 0x1ff)
sendfile(r2, r1, 0x0, 0x20000)

16m15.461194544s ago: executing program 5 (id=17):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)

16m14.539561237s ago: executing program 2 (id=18):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20100, 0x120)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, &(0x7f0000000640))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x1, 0x158}, &(0x7f0000000100), &(0x7f00000006c0), &(0x7f0000000580))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000700)={0x0, 0x5dda, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11be, 0x8000, 0xfffffffe, 0x25e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x1000, 0x3, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x862c, 0x8200, 0x0, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2})

16m10.754124974s ago: executing program 2 (id=20):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
fchown(r0, 0xee00, 0xee01)
fchown(r0, 0x0, 0x0)

16m3.661003192s ago: executing program 4 (id=33):
pipe2(&(0x7f0000000140), 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0021010088fa0904030000010100000a240100010a0002"], 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x101000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl(r1, 0xc4c85513, &(0x7f0000000200))

15m57.229189162s ago: executing program 32 (id=17):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)

15m56.876391396s ago: executing program 4 (id=38):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$usbfs(0x0, 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20)
sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
sendmsg$NFT_BATCH(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x2000c080)

15m54.006131053s ago: executing program 33 (id=20):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0))
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8)
fchown(r0, 0xee00, 0xee01)
fchown(r0, 0x0, 0x0)

15m53.951880529s ago: executing program 4 (id=40):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
clock_gettime(0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4, 0x4002, @private0, 0x6}, 0x1c)
syz_open_dev$loop(0x0, 0x75f, 0xa382)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1)
write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
syz_pidfd_open(0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})

15m44.538513675s ago: executing program 4 (id=47):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300))
shutdown(0xffffffffffffffff, 0x0)
open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4)
recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0)

15m28.009108907s ago: executing program 34 (id=47):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))
write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300))
shutdown(0xffffffffffffffff, 0x0)
open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4)
recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0)

11m46.855236634s ago: executing program 0 (id=296):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600), 0x0)

11m46.352555853s ago: executing program 0 (id=298):
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4)
write(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0))
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

11m45.060992715s ago: executing program 0 (id=299):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x400, &(0x7f0000000240)=ANY=[], 0x0, 0x1b6, &(0x7f00000002c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x4, 0xf82, &(0x7f0000003080)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000200), 0xfea7)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
copy_file_range(r3, &(0x7f00000001c0), r2, 0x0, 0xa003e458, 0x700000000000000)

11m42.980071846s ago: executing program 0 (id=301):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
writev(r4, &(0x7f0000010b40)=[{&(0x7f0000000440)="b7", 0x1}], 0x1)
splice(r4, 0x0, r3, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24041091}, 0x844)

11m41.261631034s ago: executing program 0 (id=302):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ptrace$getsig(0x4202, r5, 0x6d4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

11m36.79071851s ago: executing program 0 (id=305):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000032c0)=@newtaction={0xfc0, 0x30, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{0x4}, {0xfa8, 0x1, [@m_skbmod={0xfa4, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0xf75, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xfc0}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)})
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x0, 0x40000033, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000180)="c0789c3f1bfca8270c026e38f487dd0d2ba9a357ddc512c95fb513498c10a75e6e6a11deaeddc9783556480f86e101c4b9dc64cc417a6068bbd7b6ae227279a0f8e226c123ced4a6380dc861fbaeff12db8835e7eeef66744c1495ef085aaaec66648b64cf5505c2f175244f5c668a1d76b8daab128e5cf29c5fdb742f351a86d4a7f4832a36be99f8c016df9c4bd6bdc9eba58938f85aa1b0389b4473745b3ac306b76e32dce52ca3a270170273fb5a3e7945ea69b98af12c98dda7ab708e75f1493e4e29a0ee83132be4069cd6a0a4e06101040000a05106", 0xd9)
setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000900))
syz_io_uring_setup(0x11a1, &(0x7f00000007c0)={0x0, 0xb649, 0x40000, 0x2, 0x145}, &(0x7f0000000840), &(0x7f0000000140), &(0x7f00000008c0))
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="047bd59a676ed16b"], 0x4)

11m21.435889115s ago: executing program 35 (id=305):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000032c0)=@newtaction={0xfc0, 0x30, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{0x4}, {0xfa8, 0x1, [@m_skbmod={0xfa4, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0xf75, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xfc0}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)})
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x0, 0x40000033, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000180)="c0789c3f1bfca8270c026e38f487dd0d2ba9a357ddc512c95fb513498c10a75e6e6a11deaeddc9783556480f86e101c4b9dc64cc417a6068bbd7b6ae227279a0f8e226c123ced4a6380dc861fbaeff12db8835e7eeef66744c1495ef085aaaec66648b64cf5505c2f175244f5c668a1d76b8daab128e5cf29c5fdb742f351a86d4a7f4832a36be99f8c016df9c4bd6bdc9eba58938f85aa1b0389b4473745b3ac306b76e32dce52ca3a270170273fb5a3e7945ea69b98af12c98dda7ab708e75f1493e4e29a0ee83132be4069cd6a0a4e06101040000a05106", 0xd9)
setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000900))
syz_io_uring_setup(0x11a1, &(0x7f00000007c0)={0x0, 0xb649, 0x40000, 0x2, 0x145}, &(0x7f0000000840), &(0x7f0000000140), &(0x7f00000008c0))
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="047bd59a676ed16b"], 0x4)

1m7.634001358s ago: executing program 8 (id=1067):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44)

1m6.463199526s ago: executing program 8 (id=1070):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x44)
fanotify_init(0x2, 0x1000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x24}, 0x94)
syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00')
r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r1, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r1, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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")
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1m1.220856859s ago: executing program 8 (id=1076):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13})
ioctl$UI_DEV_CREATE(r3, 0x5501)
syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50)

56.261856312s ago: executing program 8 (id=1085):
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20100, 0x120)
getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f0000000640))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x1, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f00000006c0)=<r7=>0x0, &(0x7f0000000580)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x111, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x891, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x104}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000700)={0x0, 0x5dda, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11be, 0x8000, 0xfffffffe, 0x25e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x1000, 0x3, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x862c, 0x8200, 0x0, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2})

54.149801432s ago: executing program 8 (id=1087):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x1ac, 0x65, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x180, 0x2, [@TCA_BPF_ACT={0x17c, 0x1, [@m_tunnel_key={0xd8, 0x8, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x81, 0x1, 0x5d0a30f5cb1efe95, 0x6, 0xffffffff}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x79, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0xa0, 0x13, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1ac}}, 0x20000080)
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

50.911992634s ago: executing program 8 (id=1092):
socket$kcm(0x11, 0x3, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r2, 0x0, 0x0)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0)
r3 = syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_disconnect(r3)

43.427023409s ago: executing program 9 (id=1105):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x44)
fanotify_init(0x2, 0x1000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000"], 0x48)
syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00')
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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")
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

40.186264562s ago: executing program 9 (id=1107):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1})
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e}}], 0x1c, 0x2400e044}, 0x6)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)

38.031573322s ago: executing program 9 (id=1110):
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4)
write(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0))
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r4 = syz_open_dev$vivid(0x0, 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0xfffffff7, 0x3, 0x4, 0x0, 0x7})
openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)

35.609349455s ago: executing program 36 (id=1092):
socket$kcm(0x11, 0x3, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
write(r2, 0x0, 0x0)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0)
r3 = syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_disconnect(r3)

34.861916835s ago: executing program 9 (id=1117):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x9316e6fb81c276de, 0xf4, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000002640)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x68442, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000000)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e010203010902120001000000000904"], 0x0)

28.30121814s ago: executing program 9 (id=1125):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20100, 0x120)
getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, &(0x7f0000000640))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7)
r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x1, 0x158}, &(0x7f0000000100)=<r7=>0x0, &(0x7f00000006c0)=<r8=>0x0, &(0x7f0000000580)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x111, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x891, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x104}}}, &(0x7f0000000480)=<r10=>0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = dup(r11)
syz_ublk_setup_queues(r12, r10, &(0x7f0000000700)={0x0, 0x5dda, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x2100, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11be, 0x8000, 0xfffffffe, 0x25e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x1000, 0x3, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x862c, 0x8200, 0x0, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)

25.457262619s ago: executing program 9 (id=1127):
write(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

20.93911503s ago: executing program 6 (id=1131):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(0x3)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_emit_vhci(0x0, 0x14)
socket(0x10, 0x3, 0x4)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

19.61326333s ago: executing program 1 (id=1135):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20100, 0x120)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, &(0x7f0000000640))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x1, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000006c0)=<r6=>0x0, &(0x7f0000000580)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x111, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x891, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x104}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000700)={0x0, 0x5dda, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11be, 0x8000, 0xfffffffe, 0x25e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x1000, 0x3, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x862c, 0x8200, 0x0, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

19.104709459s ago: executing program 1 (id=1137):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0xe4, 0x65, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xb8, 0x2, [@TCA_BPF_ACT={0xb4, 0x1, [@m_xt={0xb0, 0x13, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x81, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44f"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xe4}}, 0x20000080)
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

15.158576683s ago: executing program 3 (id=1138):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000032c0)=@newtaction={0xfbc, 0x30, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{0x4}, {0xfa4, 0x1, [@m_skbmod={0xfa0, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0xf74, 0x6, "dc475708602a6176e4a03007dcc13c00bfdc46ca07c306b15436990c69a2e3644aa13d66d917bbedac2b28a085503dadeac09c70fed302382f999212b2531c97e37a598d4fabca14e0b386f85f76b6ce7162d6c70397352de9d40e18730c7d46fbc5e0ce2216312042c10b612d37f3a0e619feee76e6a1eee890ae0ab51b0bb1de851d74817d552cd4e35131282af39d05b60fc1c9df4dfe68e4746ff2e9b976f529cc74aa1708a356615e18cbc0f3bc4ab163ced384aa75eb26982683af91fc8822ab04c31514ad03dc9f2ae8996d6cdfc04b1b1805431fe32eb74fcda6dc416f93ff38eb72182e851d8b2ca3d05f07e755bde3a74c3b73f32a0bb35bba4b179114e1cca7185e341d7f8edf76d7cb4e33c183520baf82e6c7dcd7dbfc628ffcae3d478f5f8bb2a9fcb6ed04269232b7b10d039c10d5f605f45b9de7914fb34481f3943a2d4f53bd871dbeda97079b3a47a20b88f0bde7882328b82c1d4eed53150cd39655bbedb8319a5c85c70876a371ca0746e57b0a67a0746d11e787e8c7f21f63984e64831d21ed555a53c38605a3eb70acbdd3691939b58c75dacd9e5174d76fccf8c40393f59aec101b97e6c02aed9d9da0917543c662452ad439c038622ad0f42a36b649b2aea8dc1facb6b9e48662dd88467f80fc1d9b8cce45ce24279f754ac3286d9a41f293523c53fe5b84263ccf4ea431bd6bf08ed7c3a023ec4ecbfd5df160e0e33350d3eae0122431da76fe29653689a3f93d606251ac869dc788c11231a0a2ad37a6653c1595636eb5a7404addd93ec583b3370db6ba9e7af9027a134eaa04e3763010ba9f450125e4c96419ef9eeb094c6a4b2883336c77819eaa6cb35233cc29543095ee5a4fac305cd7db5a5b6c42efcaa7c527ab6dc144ae30e05ea168b792c814f2622434d3888e90616c519cb2b7b3ff08ae705b6a7ffc78bf5788e749cdbfadebeb919b10b34b9e73632df1ec6803b25f1c98dde2850bbbbfb4d1b1b804d2c47361c8d9a652601846dbcc259fd960b95df82b5e953e02fbe45ade7254644e4ec3b6c1e2d4da37603e2a1027d67eb561863cf6c9f385519be6e65748881ec9095998b75d6e9db199d0e29cd6cc0acc77579a720fad54857bc13f79e48c7f986748fcbe18665d12a4d91875bf86dbeef633e2f1d6d302b4e02bbcf607c3e20ee0dbde15c285d0b7e52260891ef80e81e36c75ea5d9339c5960c324ed20988da4ac2ff4f819f3804f1b51c3638fba8002f2cf77e56fdea77eb36670c0469f8ddcecd585a631fce484b41b654a75d1330b0a6411669b6c61dc8bdb1bf0e24d0758e971049aaa20c8b85697c3f100b7285eccb3ad8e4b11c87e1f32f51e52387c5887a68923c4fac8d51a13abf39512c71e4abfb4a90ccc6b6f967ab5fea468d2fbb0c217e310280aeaeb9b7c4f7ab09f1c32990551357ac4a0358032ea41c706ac57d1d22b6f4e022ee3c785c9b0eea64f4de9358f0c0986ea6c40798e5887ab2a99603512bf333b7620308befae0aa1a25358ecbe24005d35d6702851000796e413286e04d5bfa3f842fd0eeb473b371e6a47c01021050cd14d782406d5248e26cc47e991c380a37eefb42bbf1cc46e83d9b6e85ec4928fa172356bee36fa10e3c44c15bec0ba52ac1c90fa5d2881c30ea8488f6d55c21495c99ebba381d8d23ea4fec433b4d802b37b85b9dc85a8f1b9d11ca7cc12b40b7f839bcb00b395fa21ada258a85140df3623b4f9b93d4ed2e8bb026d55380fedd6daf42a277cb1a416446d0301d185b571865b84711a1fa8c38697c7ce8b0fef86e06419f0ec46bb7ddaeba2c65c6a24abe6786f51b0d2023cae115fb043bff9ce1a30e2a15a0e1afd856a66dff4220b0b582902c38bfe8340fa1c262e66af62e9bbde17a125e2ff9dedcf7709fbd77651187782a5b8fb6dbf57d2850d4d2ac96266a861876d23dbdcb7f5bda6fa0c2ea9df673580c771ec03906368d4770bd85f92d7526487164ad31395987ec4a5bccd32f981645be5e97411e36982fefc085557ebf1768b596fd0cc89a4a7ca514076bbc2209b3479e7090603a4ad67513163769062ea75034d9de9d604b1cfa30326d156ff4abb3398ece11597c876f8cf92ac94853058bb1bcfce30b89f522c9491e2404e9ff8afccae7a65d39e6e4362414c925c76ce217882348b3261ef53c8462ea4551aa8049588217879fdd824d843eedb86b18a2d2a99e3274514ab1c9513d1c62477c4112c55bd3a03739c6f91a1860e17a73c5efa3403020f3646619a5e75381d9251c4ff2226f310ac84c087bbe14b51c46ccfa7b5812a0de44b4f49bd29ec722276137319b5ed84b9a080e69aea58f58e1872ac7563d5761817a27208902ec7007f38c89e3bf043cc7f11db934d5b5a916be2d9fcac7ff83f4292e44b4256d738a1c277da188ca9d5bcd7328deeefd905bfb290b340ffa5682e0ad02117a25f8faed3971754c234d9445f44755c3d352644dc276d3906c46882d994dc23a6f1adb22bc9c4184dae0e6166b25e309de3d068daee719d4e99987660f6ddc7067ed21fbfdb59aeec574525fac35bd1e9b508b0a236332a7a20cb3ea76b0c08e894c4006d05d59c407c8d2498e360180bfda139683760c2b04be50941d117fd0a8f31c6d52270dbdad09a4635f87ab28f28f9d91d32ca1dd9b97d06b97c6e2440ad12a67efc45d6e0da51a4451d63ee0c9dcc20811108842ccd88ebbb8c3ec3fd2c718cabb3a69199f3ecc78a8c3de6a7cffcf36ec6b65da30a4fa3f562f41ac001138cc99221df317d355a0c055af3b3de346c8daf2fdfc633a3d1eb8111f514709087abb63116b9d41c64066a73087a16e6a5f9b6aabced30f98f012c877eed91911c2e5039409299b3548b2efcc8151d8d0721fc865dbcf5786fa1ed7e206139285a5fd3e47541ec00f9b7d47d6e29f0e3e56d4dc52fa39e26f83911a4a2c134604c599f1758c242a7c40e4a07a08e18ed8f2c2cc41644dfdea9c93ad5a0569be640f616b1c6964eaa286b932dba49714d533f67670c0e4cbfee0e7c172f07a9c10e7e95544287d78191eefd6b39bb02273fc108ef6d1c05857e3958ef2a127451ed4cd6ce42979059f87d5d124cdba458d076dfc6b890c04a4e51d90165f44a21b1e290fda97e4f8f003ba1444f7c946dd3248f235bdd25c884a3b92f3775d64457ef97551d647fd424c8866b6afaa2891324212a069cd1ebbee60efa91df7a961f7e97e29af0b9b00b5a9469e2c97f0d73f62afca948c1dc5648d671539f5dcf4f7f0c0502f792b25f923fcc5df966f8dafb0324e41aaa1a1bc9d8fc2fbdb9afc77c849287548ce2763cbe7de1e7f7794c63b6c82e1d2ac57158ea6dbe923bdb0948f03511b45341355c276b73943704b12f67b3f0602ec51b2f395a34292b910d3e890643535372bab15a4e00d4105a7334b1cfde634306390cfaf643de7f12843596a52fe9a93a2e61a970eb17b3bdca14ad997e8e7c99abc9854a1ccc0d6b3df2e7bba1892b067036cc8b808efe133ee4bcaed762eb56387ca9c584ec8f3aecdf6a6604263eca1da207a73bd531f6d578e82b81daed6b8fb1074a68877c2f24d6dab2b40a8999664b13e5a261cc6e04e624f59595406da57e5ebf29e3dcfbd71617fa2e268e2bd85b93ca2531d3ba5cfeaedbdb46ab64add0a424e0ce99fe94912c29deb8271e10764ce16646945f997e27318fc84e0bf392b42d5b837903a79c9d076ab7c07f509055a282dc2f42fd05cf4df2073cb2f312ca47ccacbc91649513ecf5ec61187cefaca784251d10fe4af3b8b9e17a4babcc55fd0f35345ca4025c0a82111b07047314ab845cbc0e3eb109bcfa0fb842f3693759c7870e04a3d0c6743fcd28a4f53ef74f939e1960aa9569e3c9ee491904ec5dfb932a500c91c4490f26aef48d4535d7e3709713befbe5bed78209bbbd03768131c9b0272f33ac372ab31234d5d8ecc344260ce04c96049d83538444c7eb4f4c79e9ec838e5095e3de63d52440a946b29e2bbe41a020663963d743ff12cf918adb300b863b99e443bc304b1ad03d244c1f1f8357ad12b5cb22c6a0a3e5f42f60deb0e0ecb3ce3160c2324978596687fc96e6da90ecf9c28946403c8416c82701a931d09b6eb2090ad24584c98c5522ef283133a5978c77c9f7f79ff68ce245dbdc653dc4d49d82ed8b0d36c3f0885a3a47d506be80c05ada7a17acd68c6feee0c34db037c5472ee61b614d40fdaf1ac4aafe0e9bcf341b84b6d45e9243d43e992b78cf2f169f33abad471d50f3ca6f3a5ecfa384c3314384277279b52d8a302c1bb1ffa9a7f4929adeb12b33ea1ebce77c598d6df133e145b5a92fbbe0af6e26e01033781e4f8dc03f0c7e8ac50eb7caccf8e80fb2731d44bb315f3b6ccd431c478aaae93e8f9acc3d9a161e0cb4d748b6a071f25ba4821fc5972db6aa81347ea4968bb28c83fd788f3d403a1a21081513307d4ee199e326f65772b72dc7c547267ab3c667f311ccb77cde585c725bf136db159ae85d50d4d618e0f9675cf957cff6db223a38a891a8a02ebe16f32f374223099d6e52b4b47d435b42b7934c7795cb5e0a661d6d624521e82c371cb591639f6cf324cb167cd822ae00341079529157ba90006457f88aa345770f3380d62d5085d02d6182ec558ec168fcc0206c499403f038d58d5e06388d70c9a09edba0786dfdd858fe4f84ee796e37434616bf03578201c20a557582d1d4b12fa6bdca8e299422b3a9718a2d45879fb15ca35df748e49186bc1c6b6a25dc7092a5368cde9e69e5143e624e4755c3218346090266d79135f7ebacc2e7cc038f87547894b176d858912170cc03721825596d720effb3fbaf877dc19adb8bc350648a5362e4cc63f6de2c85940b7be127fdfd273132514124dca11d152133b1269ba90867535e7844f003db68495414a236640de8230fbd5bafb376f6c6cbb4a94f8fd35e605c3b0438a6b3a271a60ee45e2e6ed3343adbb52dc5f8b25cec2a5566ff9193d4fd522c782e4fe02a99c259551f5d3b5b156a7da05f1df98c42b1e156fa6841405284c083bff765b31f09e0b881521960a03345073f09b0d23f671d4217f114bdaf26b61d56c139d41525a8efb8c22699ad3033565f56b8977e49520eebbb72f18c1c25e51ad39ed51f5356a0bec0e87c88365e87bf1d23698b3fd1ee6ab2628fc4c8d5174da145f2a3bca2fdbe3498d8399527d651508d3a9e4716ed143a7ae6ff767ebccc3902ea06e890a380c1ee1dddfae3819a6a2faa2978960f36a3d7a324bcf5a6ec76a432d7ee425b1a5daef305db0c32689308a8836e35ba4b773e6571e1574ec6b9de797df97c6e86b65e1236c43e15f56e2070da0271305f5549e8cf23390602ac11a34653875ebecf886ef7379ac509c6f01ed8a0c5888c517034f883bd2264cc6154df0a452dce90239f4ac8922df5f5295ddf4626a649e4e17663d4fe6b84173c5ee2737786a4a958cf5daf8b0e15d1647f4b245939c5e612bc79daa1c632a4d579f07b09726b255f76f1b4e1b333111c1c55e8f3f58c6f39567a609f5cc733fbacd7b28327f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xfbc}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)})
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x0, 0x40000033, 0xffffffffffffffff, 0x0)
write(r0, &(0x7f0000000180)="c0789c3f1bfca8270c026e38f487dd0d2ba9a357ddc512c95fb513498c10a75e6e6a11deaeddc9783556480f86e101c4b9dc64cc417a6068bbd7b6ae227279a0f8e226c123ced4a6380dc861fbaeff12db8835e7eeef66744c1495ef085aaaec66648b64cf5505c2f175244f5c668a1d76b8daab128e5cf29c5fdb742f351a86d4a7f4832a36be99f8c016df9c4bd6bdc9eba58938f85aa1b0389b4473745b3ac306b7", 0xa3)
setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000900))
madvise(&(0x7f00001d1000/0x4000)=nil, 0x4000, 0x9)
syz_io_uring_setup(0x11a1, &(0x7f00000007c0)={0x0, 0xb649, 0x40000, 0x2, 0x145}, &(0x7f0000000840), &(0x7f0000000140), &(0x7f00000008c0))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8)
open_by_handle_at(r5, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x2241c2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="047bd59a676ed16b"], 0x4)
syz_emit_vhci(&(0x7f0000000b00)=ANY=[@ANYBLOB="04040a0000000000008a5ccda2"], 0xd)

15.070072446s ago: executing program 6 (id=1139):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)

15.020106372s ago: executing program 1 (id=1140):
setns(0xc9, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
read(r0, &(0x7f0000000100), 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000180)='ntfs3\x00', 0x2004043, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x0)
ioctl(r1, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff00")
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
r2 = socket(0x2d, 0x80000, 0x0)
bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x48}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="a4dbd43903d565340810f185e404c6977edeacfc816566c1b325442ed022b70cab9f14249a6e6563d4ebb181eead505bce0542a02b3703bf631ed37bc0", @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="3c1200b96a56e1e7ddcf6500fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a42904000000000008000a00", @ANYRES32=r5, @ANYBLOB="14003500776c616e3100"/20], 0x3c}}, 0x8000)
r6 = socket(0x2d, 0x2, 0x0)
bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(0x0)
pipe(&(0x7f00000000c0)={<r7=>0xffffffffffffffff})
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x88)
splice(r7, 0x0, r8, 0x0, 0x402000784853bb, 0x0)

12.00475136s ago: executing program 1 (id=1143):
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20100, 0x120)
getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f0000000640))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x1, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f00000006c0)=<r7=>0x0, &(0x7f0000000580)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x111, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x891, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x104}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000700)={0x0, 0x5dda, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11be, 0x8000, 0xfffffffe, 0x25e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x1000, 0x3, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x862c, 0x8200, 0x0, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2})

10.177910799s ago: executing program 37 (id=1127):
write(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

10.168496403s ago: executing program 1 (id=1145):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db", 0xa2}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b36e0236a31d63", 0x90}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f587996b7b7779762f30c", 0xf2}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e139dbd36b34c6a2b15fd05000e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e0878fe706cd0b6bcda", 0x86}, {&(0x7f0000000c00)="59a6ccfde72fa606722d721aada8234cd925b0c5b4b492432d79c736d25b702feb8b26ebb83614c28fd37b1df3d5", 0x2e}, {&(0x7f0000000c80)="9f9c29e5e85c1e9d55fbfaffee3d448faeb857fcc0f0036525836ae153f155331714de07483696ffacc1906cfad346b7cf08529f396b2afe8db4899c02bd3cc83e3ee673", 0x44}], 0x6, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)="135c15194fad5248c52ac1", 0xb}], 0x1)
write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba7", 0x333)

10.149832352s ago: executing program 6 (id=1146):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r5, 0x0, 0x3, 0xbe5, &(0x7f0000001400)="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", 0x5})

9.030719471s ago: executing program 6 (id=1147):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)

8.645793832s ago: executing program 7 (id=1148):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
r7 = syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}})
close_range(r0, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00783afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b"], 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8937, &(0x7f0000000640)={'tunl0\x00', 0x0})

8.16826881s ago: executing program 3 (id=1149):
setns(0xc9, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
read(r0, &(0x7f0000000100), 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000180)='ntfs3\x00', 0x2004043, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x0)
ioctl(r1, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000")
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
r2 = socket(0x2d, 0x80000, 0x0)
bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x48}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, 0x0, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="a4dbd43903d565340810f185e404c6977edeacfc816566c1b325442ed022b70cab9f14249a6e6563d4ebb181eead505bce0542a02b3703bf631ed37bc0", @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="3c1200b96a56e1e7ddcf6500fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a42904000000000008000a00", @ANYRES32=r5, @ANYBLOB="14003500776c616e3100"/20], 0x3c}}, 0x8000)
r6 = socket(0x2d, 0x2, 0x0)
bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(0x0)
pipe(&(0x7f00000000c0)={<r7=>0xffffffffffffffff})
r8 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x88)
splice(r7, 0x0, r8, 0x0, 0x402000784853bb, 0x0)

7.512291906s ago: executing program 7 (id=1150):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)

7.489433247s ago: executing program 3 (id=1151):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
r7 = syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}})
close_range(r0, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00783afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b"], 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8937, &(0x7f0000000640)={'tunl0\x00', 0x0})

7.026580512s ago: executing program 7 (id=1152):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13})
ioctl$UI_DEV_CREATE(r3, 0x5501)
syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50)

6.854994652s ago: executing program 6 (id=1153):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x160, 0x3, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x101}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0xfffffffb}, {0x8, 0x2, @loopback}}}]}, @CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private2}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_MARK_MASK={0x8}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x160}}, 0x0)
ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000880), 0x1003)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f00000008c0))
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4a0, 0x0, 0x0, 0xffffffff, 0x338, 0x290, 0x408, 0x408, 0xffffffff, 0x408, 0x408, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'veth1_vlan\x00', 'macvtap0\x00', 0x10, 0x1, 0x6, 0x10000, 0xc, 0x2, {0xfffffffffffffffc}, {0x6}}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@sg0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x15)

5.139602573s ago: executing program 3 (id=1154):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x24, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x20, 0x82, 0x1, "ce"}, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x1031, 0x106, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x9}}}}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)

5.13214391s ago: executing program 6 (id=1155):
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
syz_open_dev$dvb_demux(0x0, 0x0, 0x41)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
unshare(0x22020400)
fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5})
fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9})
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r3 = fsopen(&(0x7f0000000080)='9p\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0)

3.933630391s ago: executing program 7 (id=1156):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8)

2.792145357s ago: executing program 1 (id=1157):
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
syz_open_dev$dvb_demux(0x0, 0x0, 0x41)
gettid()
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9})
unshare(0x22020400)
fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5})
fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9})
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r3 = fsopen(&(0x7f0000000080)='9p\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000000)='posixacl\x00', 0x0, 0x0)

2.087049332s ago: executing program 7 (id=1158):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, r5, 0x0, 0x3, 0xf9d, &(0x7f0000001400)="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", 0x5})

867.177555ms ago: executing program 7 (id=1159):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)

758.048595ms ago: executing program 3 (id=1160):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)

0s ago: executing program 3 (id=1161):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r1)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x24008010)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00')
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000000c0)={0x0})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0, 0x1}, 0x8)

kernel console output (not intermixed with test programs):

6] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  849.922297][T11286] Memory cgroup stats for /syz1/test:
[  849.922439][T11286] cache 0
[  849.922450][T11286] rss 0
[  849.922459][T11286] rss_huge 0
[  849.922468][T11286] shmem 0
[  849.922476][T11286] mapped_file 0
[  849.922485][T11286] dirty 0
[  849.922494][T11286] writeback 0
[  849.922503][T11286] workingset_refault_anon 0
[  849.922513][T11286] workingset_refault_file 0
[  849.922523][T11286] swap 0
[  849.922532][T11286] swapcached 0
[  849.922541][T11286] pgpgin 0
[  849.922550][T11286] pgpgout 0
[  849.922559][T11286] pgfault 7
[  849.922568][T11286] pgmajfault 0
[  849.922577][T11286] inactive_anon 0
[  849.922586][T11286] active_anon 0
[  849.922595][T11286] inactive_file 0
[  849.922604][T11286] active_file 0
[  849.922613][T11286] unevictable 0
[  849.922622][T11286] hierarchical_memory_limit 0
[  849.922633][T11286] hierarchical_memsw_limit 9223372036854771712
[  849.922644][T11286] total_cache 0
[  849.922652][T11286] total_rss 0
[  849.922662][T11286] total_rss_huge 0
[  849.922671][T11286] total_shmem 0
[  849.922681][T11286] total_mapped_file 0
[  849.922690][T11286] total_dirty 0
[  849.922699][T11286] total_writeback 0
[  849.922708][T11286] total_workingset_refault_anon 0
[  849.922719][T11286] total_workingset_refault_file 0
[  849.922729][T11286] total_swap 0
[  849.922738][T11286] total_swapcached 0
[  849.922747][T11286] total_pgpgin 0
[  849.922756][T11286] total_pgpgout 0
[  849.922766][T11286] total_pgfault 7
[  849.922775][T11286] total_pgmajfault 0
[  849.922784][T11286] total_inactive_anon 0
[  849.922795][T11286] total_active_anon 0
[  849.922804][T11286] total_inactive_file 0
[  849.922814][T11286] total_active_file 0
[  849.922823][T11286] total_unevictable 0
[  849.922833][T11286] anon_cost 0
[  849.922842][T11286] file_cost 0
[  849.922852][T11286] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.783,pid=11284,uid=0
[  849.926655][T11286] Memory cgroup out of memory: Killed process 11284 (syz.1.783) total-vm:104432kB, anon-rss:1444kB, file-rss:23432kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[  850.010095][T10945] 8021q: adding VLAN 0 to HW filter on device bond0
[  850.091120][T11132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  850.091140][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  850.091171][T11132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  850.102112][T11132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  850.102128][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  850.102159][T11132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  850.340148][   T12] bridge_slave_1: left allmulticast mode
[  850.340179][   T12] bridge_slave_1: left promiscuous mode
[  850.340473][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.389072][   T12] bridge_slave_0: left allmulticast mode
[  850.389095][   T12] bridge_slave_0: left promiscuous mode
[  850.398035][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  850.884206][ T7836] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  851.061363][ T7836] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  851.062867][ T7836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.094164][ T7836] usb 4-1: config 0 descriptor??
[  851.670893][ T7836] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  851.673151][ T7836] [drm:udl_init] *ERROR* Selecting channel failed
[  852.522732][ T7836] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1
[  852.522762][ T7836] [drm] Initialized udl on minor 1
[  852.536225][ T7836] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  852.536655][ T7836] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  852.539766][ T7836] usb 4-1: USB disconnect, device number 38
[  852.577940][ T8937] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  852.732282][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  852.752292][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  852.767489][   T12] bond0 (unregistering): Released all slaves
[  852.909169][T11318] loop1: detected capacity change from 0 to 128
[  852.963111][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13
[  853.077904][ T7836] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  853.112203][   T12] hsr_slave_0: left promiscuous mode
[  853.120442][   T12] hsr_slave_1: left promiscuous mode
[  853.122513][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  853.138453][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  853.260507][ T7836] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  853.261903][ T7836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  853.292873][ T7836] usb 4-1: config 0 descriptor??
[  853.726195][   T12] team0 (unregistering): Port device team_slave_1 removed
[  853.759718][   T12] team0 (unregistering): Port device team_slave_0 removed
[  854.009080][ T7836] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  854.017653][ T7836] [drm:udl_init] *ERROR* Selecting channel failed
[  854.077696][T11330] MTD: Couldn't look up './dev/mtdblock0': -2
[  854.523692][ T7836] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1
[  854.525788][ T7836] [drm] Initialized udl on minor 1
[  854.613586][ T7836] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  854.694493][ T7836] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  854.916548][ T7836] usb 4-1: USB disconnect, device number 39
[  855.792880][T11132] hsr_slave_0: entered promiscuous mode
[  855.798906][T11132] hsr_slave_1: entered promiscuous mode
[  855.799753][T11132] debugfs: 'hsr0' already exists in 'hsr'
[  855.799773][T11132] Cannot create hsr debugfs directory
[  855.808287][T10945] 8021q: adding VLAN 0 to HW filter on device team0
[  855.922983][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  855.923163][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  856.092870][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  856.092983][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  856.174430][T10915] 8021q: adding VLAN 0 to HW filter on device batadv0
[  857.168044][T11100] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  857.182723][T11100] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  857.186711][T11100] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  857.221298][T11100] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  857.240508][T11100] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  857.258153][T11100] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  857.260986][T11100] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  857.272366][T11100] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  857.564399][T10915] veth0_vlan: entered promiscuous mode
[  857.665558][T10915] veth1_vlan: entered promiscuous mode
[  857.889223][T11378] syz.3.797 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  857.889266][T11378] CPU: 1 UID: 0 PID: 11378 Comm: syz.3.797 Not tainted syzkaller #0 PREEMPT(full) 
[  857.889295][T11378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  857.889311][T11378] Call Trace:
[  857.889321][T11378]  <TASK>
[  857.889332][T11378]  dump_stack_lvl+0xe8/0x150
[  857.889375][T11378]  dump_header+0xd3/0x4b0
[  857.889413][T11378]  oom_kill_process+0x3ab/0x9e0
[  857.889452][T11378]  out_of_memory+0x1064/0x1480
[  857.889484][T11378]  ? try_charge_memcg+0xc32/0x15e0
[  857.889516][T11378]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.889561][T11378]  ? __pfx_out_of_memory+0x10/0x10
[  857.889592][T11378]  ? do_raw_spin_unlock+0xf5/0x200
[  857.889641][T11378]  try_charge_memcg+0xcdf/0x15e0
[  857.889695][T11378]  ? __pfx_try_charge_memcg+0x10/0x10
[  857.889737][T11378]  ? percpu_ref_tryget+0x15/0x180
[  857.889777][T11378]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.889810][T11378]  ? __obj_cgroup_charge+0x36/0x2c0
[  857.889841][T11378]  __obj_cgroup_charge+0x1fd/0x2c0
[  857.889868][T11378]  ? __obj_cgroup_charge+0x36/0x2c0
[  857.889898][T11378]  __memcg_slab_post_alloc_hook+0x766/0xd90
[  857.889953][T11378]  kmem_cache_alloc_lru_noprof+0x351/0x5f0
[  857.889997][T11378]  ? kmem_cache_alloc_lru_noprof+0x153/0x5f0
[  857.890037][T11378]  ? shmem_alloc_inode+0x28/0x40
[  857.890075][T11378]  ? shmem_alloc_inode+0x28/0x40
[  857.890127][T11378]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  857.890166][T11378]  shmem_alloc_inode+0x28/0x40
[  857.890202][T11378]  alloc_inode+0x6a/0x1b0
[  857.890239][T11378]  new_inode+0x1f/0x170
[  857.890272][T11378]  ? shmem_get_inode+0x29a/0xfe0
[  857.890313][T11378]  shmem_get_inode+0x3a4/0xfe0
[  857.890363][T11378]  ? __pfx_shmem_get_inode+0x10/0x10
[  857.890415][T11378]  __shmem_file_setup+0x20b/0x370
[  857.890452][T11378]  ? __pfx___shmem_file_setup+0x10/0x10
[  857.890485][T11378]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.890515][T11378]  ? __rwlock_init+0x44/0x150
[  857.890552][T11378]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.890588][T11378]  drm_gem_object_init+0x8d/0xe0
[  857.890621][T11378]  __drm_gem_shmem_create+0x176/0x2e0
[  857.890668][T11378]  drm_gem_shmem_dumb_create+0x72/0x120
[  857.890712][T11378]  drm_mode_create_dumb_ioctl+0x211/0x2a0
[  857.890746][T11378]  drm_ioctl_kernel+0x2df/0x3b0
[  857.890786][T11378]  ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10
[  857.890812][T11378]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  857.890860][T11378]  drm_ioctl+0x70e/0xba0
[  857.890907][T11378]  ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10
[  857.890935][T11378]  ? __pfx_drm_ioctl+0x10/0x10
[  857.890985][T11378]  ? __fget_files+0x2a/0x420
[  857.891025][T11378]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.891055][T11378]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.891086][T11378]  ? __pfx_drm_ioctl+0x10/0x10
[  857.891128][T11378]  __se_sys_ioctl+0xfc/0x170
[  857.891159][T11378]  do_syscall_64+0x166/0x520
[  857.891191][T11378]  ? trace_irq_disable+0x3b/0x140
[  857.891218][T11378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.891250][T11378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.891276][T11378] RIP: 0033:0x7f595e59e159
[  857.891300][T11378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  857.891320][T11378] RSP: 002b:00007f595f40a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  857.891348][T11378] RAX: ffffffffffffffda RBX: 00007f595e825fa0 RCX: 00007f595e59e159
[  857.891369][T11378] RDX: 0000200000000140 RSI: 00000000c02064b2 RDI: 0000000000000007
[  857.891386][T11378] RBP: 00007f595e63506b R08: 0000000000000000 R09: 0000000000000000
[  857.891403][T11378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  857.891419][T11378] R13: 00007f595e826038 R14: 00007f595e825fa0 R15: 00007ffcf25a00b8
[  857.891459][T11378]  </TASK>
[  857.898292][T11378] memory: usage 0kB, limit 0kB, failcnt 19
[  857.898310][T11378] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  857.898327][T11378] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  857.898343][T11378] Memory cgroup stats for /syz3/test:
[  857.898485][T11378] cache 0
[  857.898495][T11378] rss 0
[  857.898504][T11378] rss_huge 0
[  857.898513][T11378] shmem 0
[  857.898523][T11378] mapped_file 0
[  857.898531][T11378] dirty 0
[  857.898540][T11378] writeback 0
[  857.898550][T11378] workingset_refault_anon 0
[  857.898559][T11378] workingset_refault_file 0
[  857.898569][T11378] swap 0
[  857.898578][T11378] swapcached 0
[  857.898587][T11378] pgpgin 0
[  857.898595][T11378] pgpgout 0
[  857.898605][T11378] pgfault 0
[  857.898613][T11378] pgmajfault 0
[  857.898623][T11378] inactive_anon 0
[  857.898632][T11378] active_anon 0
[  857.898642][T11378] inactive_file 0
[  857.898650][T11378] active_file 0
[  857.898660][T11378] unevictable 0
[  857.898669][T11378] hierarchical_memory_limit 0
[  857.898679][T11378] hierarchical_memsw_limit 9223372036854771712
[  857.898691][T11378] total_cache 0
[  857.898700][T11378] total_rss 0
[  857.898709][T11378] total_rss_huge 0
[  857.898719][T11378] total_shmem 0
[  857.898728][T11378] total_mapped_file 0
[  857.898738][T11378] total_dirty 0
[  857.898747][T11378] total_writeback 0
[  857.898756][T11378] total_workingset_refault_anon 0
[  857.898767][T11378] total_workingset_refault_file 0
[  857.898777][T11378] total_swap 0
[  857.898787][T11378] total_swapcached 0
[  857.898796][T11378] total_pgpgin 0
[  857.898805][T11378] total_pgpgout 0
[  857.898815][T11378] total_pgfault 0
[  857.898824][T11378] total_pgmajfault 0
[  857.898833][T11378] total_inactive_anon 0
[  857.898843][T11378] total_active_anon 0
[  857.898853][T11378] total_inactive_file 0
[  857.898862][T11378] total_active_file 0
[  857.898872][T11378] total_unevictable 0
[  857.898881][T11378] anon_cost 0
[  857.900922][T11378] file_cost 0
[  857.900934][T11378] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.797,pid=11377,uid=0
[  857.901107][T11378] Memory cgroup out of memory: Killed process 11377 (syz.3.797) total-vm:104300kB, anon-rss:1436kB, file-rss:24132kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[  858.539420][T10915] veth0_macvtap: entered promiscuous mode
[  858.612130][T10915] veth1_macvtap: entered promiscuous mode
[  858.718191][T11391] jffs2: notice: (11391) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  858.765832][    T9] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  858.941209][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  858.990468][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.990578][    T9] usb 2-1: Product: syz
[  858.990803][    T9] usb 2-1: Manufacturer: syz
[  858.990824][    T9] usb 2-1: SerialNumber: syz
[  859.098247][    T9] usb 2-1: config 0 descriptor??
[  859.723322][    T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  859.760730][T10915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  859.785156][T11100] 8021q: adding VLAN 0 to HW filter on device bond0
[  859.806837][T10915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  859.976475][T11132] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  859.990336][T11132] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  859.991310][T11132] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  860.018823][T11132] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  860.056110][T11132] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  860.066492][T11132] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  860.067649][T11132] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  860.082235][T11132] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  860.126843][T10945] 8021q: adding VLAN 0 to HW filter on device batadv0
[  860.132756][T11100] 8021q: adding VLAN 0 to HW filter on device team0
[  860.176778][T11398] syz.3.800 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  860.176819][T11398] CPU: 0 UID: 0 PID: 11398 Comm: syz.3.800 Not tainted syzkaller #0 PREEMPT(full) 
[  860.176851][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  860.176866][T11398] Call Trace:
[  860.176876][T11398]  <TASK>
[  860.176886][T11398]  dump_stack_lvl+0xe8/0x150
[  860.176927][T11398]  dump_header+0xd3/0x4b0
[  860.176963][T11398]  oom_kill_process+0x3ab/0x9e0
[  860.177003][T11398]  out_of_memory+0x1064/0x1480
[  860.177034][T11398]  ? try_charge_memcg+0xc32/0x15e0
[  860.177065][T11398]  ? srso_alias_return_thunk+0x5/0xfbef5
[  860.177110][T11398]  ? __pfx_out_of_memory+0x10/0x10
[  860.177139][T11398]  ? do_raw_spin_unlock+0xf5/0x200
[  860.177188][T11398]  try_charge_memcg+0xcdf/0x15e0
[  860.177242][T11398]  ? __pfx_try_charge_memcg+0x10/0x10
[  860.177279][T11398]  ? percpu_ref_tryget+0x15/0x180
[  860.177321][T11398]  ? srso_alias_return_thunk+0x5/0xfbef5
[  860.177354][T11398]  ? __obj_cgroup_charge+0x36/0x2c0
[  860.177386][T11398]  __obj_cgroup_charge+0x1fd/0x2c0
[  860.177412][T11398]  ? __obj_cgroup_charge+0x36/0x2c0
[  860.177442][T11398]  __memcg_slab_post_alloc_hook+0x766/0xd90
[  860.177493][T11398]  kmem_cache_alloc_lru_noprof+0x351/0x5f0
[  860.177534][T11398]  ? kmem_cache_alloc_lru_noprof+0x153/0x5f0
[  860.177574][T11398]  ? shmem_alloc_inode+0x28/0x40
[  860.177615][T11398]  ? shmem_alloc_inode+0x28/0x40
[  860.177661][T11398]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  860.177698][T11398]  shmem_alloc_inode+0x28/0x40
[  860.177736][T11398]  alloc_inode+0x6a/0x1b0
[  860.177771][T11398]  new_inode+0x1f/0x170
[  860.177803][T11398]  ? shmem_get_inode+0x29a/0xfe0
[  860.177843][T11398]  shmem_get_inode+0x3a4/0xfe0
[  860.177892][T11398]  ? __pfx_shmem_get_inode+0x10/0x10
[  860.177942][T11398]  __shmem_file_setup+0x20b/0x370
[  860.177977][T11398]  ? __pfx___shmem_file_setup+0x10/0x10
[  860.178009][T11398]  ? srso_alias_return_thunk+0x5/0xfbef5
[  860.178038][T11398]  ? __rwlock_init+0x44/0x150
[  860.178076][T11398]  ? srso_alias_return_thunk+0x5/0xfbef5
[  860.178110][T11398]  drm_gem_object_init+0x8d/0xe0
[  860.178140][T11398]  __drm_gem_shmem_create+0x176/0x2e0
[  860.178183][T11398]  drm_gem_shmem_dumb_create+0x72/0x120
[  860.178226][T11398]  drm_mode_create_dumb_ioctl+0x211/0x2a0
[  860.178258][T11398]  drm_ioctl_kernel+0x2df/0x3b0
[  860.178301][T11398]  ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10
[  860.178326][T11398]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  860.178372][T11398]  drm_ioctl+0x70e/0xba0
[  860.178416][T11398]  ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10
[  860.178444][T11398]  ? __pfx_drm_ioctl+0x10/0x10
[  860.178490][T11398]  ? __fget_files+0x2a/0x420
[  860.178530][T11398]  ? srso_alias_return_thunk+0x5/0xfbef5
[  860.178560][T11398]  ? srso_alias_return_thunk+0x5/0xfbef5
[  860.178590][T11398]  ? __pfx_drm_ioctl+0x10/0x10
[  860.178630][T11398]  __se_sys_ioctl+0xfc/0x170
[  860.178660][T11398]  do_syscall_64+0x166/0x520
[  860.178692][T11398]  ? trace_irq_disable+0x3b/0x140
[  860.178717][T11398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.178749][T11398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  860.178774][T11398] RIP: 0033:0x7f595e59e159
[  860.178797][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  860.178818][T11398] RSP: 002b:00007f595f40a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  860.178844][T11398] RAX: ffffffffffffffda RBX: 00007f595e825fa0 RCX: 00007f595e59e159
[  860.178863][T11398] RDX: 0000200000000140 RSI: 00000000c02064b2 RDI: 0000000000000007
[  860.178880][T11398] RBP: 00007f595e63506b R08: 0000000000000000 R09: 0000000000000000
[  860.178897][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  860.178912][T11398] R13: 00007f595e826038 R14: 00007f595e825fa0 R15: 00007ffcf25a00b8
[  860.178949][T11398]  </TASK>
[  860.179082][T11398] memory: usage 0kB, limit 0kB, failcnt 55
[  860.179099][T11398] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  860.179116][T11398] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  860.179160][T11398] Memory cgroup stats for /syz3/test:
[  860.179328][T11398] cache 0
[  860.179340][T11398] rss 0
[  860.179349][T11398] rss_huge 0
[  860.179358][T11398] shmem 0
[  860.179367][T11398] mapped_file 0
[  860.179376][T11398] dirty 0
[  860.179385][T11398] writeback 0
[  860.179394][T11398] workingset_refault_anon 0
[  860.179403][T11398] workingset_refault_file 0
[  860.179413][T11398] swap 0
[  860.179421][T11398] swapcached 0
[  860.179456][T11398] pgpgin 0
[  860.179465][T11398] pgpgout 0
[  860.179474][T11398] pgfault 4
[  860.179483][T11398] pgmajfault 0
[  860.179491][T11398] inactive_anon 0
[  860.179500][T11398] active_anon 0
[  860.179510][T11398] inactive_file 0
[  860.179519][T11398] active_file 0
[  860.179528][T11398] unevictable 0
[  860.179537][T11398] hierarchical_memory_limit 0
[  860.179547][T11398] hierarchical_memsw_limit 9223372036854771712
[  860.179559][T11398] total_cache 0
[  860.179569][T11398] total_rss 0
[  860.179610][T11398] total_rss_huge 0
[  860.179621][T11398] total_shmem 0
[  860.179630][T11398] total_mapped_file 0
[  860.179640][T11398] total_dirty 0
[  860.179649][T11398] total_writeback 0
[  860.179658][T11398] total_workingset_refault_anon 0
[  860.179668][T11398] total_workingset_refault_file 0
[  860.179678][T11398] total_swap 0
[  860.179687][T11398] total_swapcached 0
[  860.179697][T11398] total_pgpgin 0
[  860.179706][T11398] total_pgpgout 0
[  860.179716][T11398] total_pgfault 4
[  860.179725][T11398] total_pgmajfault 0
[  860.179761][T11398] total_inactive_anon 0
[  860.179772][T11398] total_active_anon 0
[  860.179782][T11398] total_inactive_file 0
[  860.179792][T11398] total_active_file 0
[  860.179801][T11398] total_unevictable 0
[  860.179810][T11398] anon_cost 0
[  860.179820][T11398] file_cost 0
[  860.179830][T11398] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.800,pid=11397,uid=0
[  860.180032][T11398] Memory cgroup out of memory: Killed process 11397 (syz.3.800) total-vm:104300kB, anon-rss:1436kB, file-rss:24100kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[  860.236701][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  860.236821][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  860.338570][   T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  860.344742][ T1143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  860.344791][ T1143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  860.375193][ T1288] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  860.401843][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[  860.401954][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[  861.221030][T11132] 8021q: adding VLAN 0 to HW filter on device bond0
[  861.282469][    T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  861.292651][T11132] 8021q: adding VLAN 0 to HW filter on device team0
[  861.319013][    T9] usb 2-1: USB disconnect, device number 28
[  861.365592][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  861.365708][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  861.459770][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.459885][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  861.848866][T10945] veth0_vlan: entered promiscuous mode
[  861.911908][T10945] veth1_vlan: entered promiscuous mode
[  862.242788][ T1288] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.539493][T10945] veth0_macvtap: entered promiscuous mode
[  864.617862][T10945] veth1_macvtap: entered promiscuous mode
[  864.633515][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  864.644895][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  864.646068][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  864.649930][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  864.653016][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  864.899183][ T1288] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.077798][T11100] 8021q: adding VLAN 0 to HW filter on device batadv0
[  865.207430][ T1288] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.350077][ T1288] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.858668][ T1288] bridge_slave_1: left allmulticast mode
[  865.858702][ T1288] bridge_slave_1: left promiscuous mode
[  865.858978][ T1288] bridge0: port 2(bridge_slave_1) entered disabled state
[  865.899236][ T1288] bridge_slave_0: left allmulticast mode
[  865.899267][ T1288] bridge_slave_0: left promiscuous mode
[  865.911065][ T1288] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.353615][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  866.362458][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  866.363255][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  866.381984][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  866.391713][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  866.480094][ T1288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  866.499439][ T1288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  866.513278][    T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  866.514289][ T1288] bond0 (unregistering): Released all slaves
[  866.706335][    T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  866.707983][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  866.708035][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  866.710460][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.710487][    T9] usb 4-1: Product: syz
[  866.710504][    T9] usb 4-1: Manufacturer: syz
[  866.710521][    T9] usb 4-1: SerialNumber: syz
[  866.754229][ T5624] Bluetooth: hci0: command tx timeout
[  866.776977][T11132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  867.028416][ T1288] hsr_slave_0: left promiscuous mode
[  867.033598][ T1288] hsr_slave_1: left promiscuous mode
[  867.054039][ T1288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  867.054065][ T1288] batman_adv: batadv0: Removing interface: batadv_slave_0
[  867.060601][ T1288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  867.060622][ T1288] batman_adv: batadv0: Removing interface: batadv_slave_1
[  867.152605][ T1288] veth1_macvtap: left promiscuous mode
[  867.152658][ T1288] veth0_macvtap: left promiscuous mode
[  867.152773][ T1288] veth1_vlan: left promiscuous mode
[  867.152850][ T1288] veth0_vlan: left promiscuous mode
[  867.458322][ T8528] usb 4-1: USB disconnect, device number 40
[  868.434079][ T5624] Bluetooth: hci3: command tx timeout
[  868.825026][ T5624] Bluetooth: hci0: command tx timeout
[  869.474370][ T1264] ieee802154 phy0 wpan0: encryption failed: -22
[  869.474439][ T1264] ieee802154 phy1 wpan1: encryption failed: -22
[  869.654281][ T7836] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  869.804941][ T7836] usb 4-1: Using ep0 maxpacket: 16
[  869.805725][ T7836] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  869.806896][ T7836] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  869.806928][ T7836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  869.810830][ T7836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.810857][ T7836] usb 4-1: Product: syz
[  869.810874][ T7836] usb 4-1: Manufacturer: syz
[  869.810892][ T7836] usb 4-1: SerialNumber: syz
[  869.877677][ T7836] usb 4-1: config 0 descriptor??
[  869.892968][ T7836] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  869.893004][ T7836] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  869.952591][ T1288] team0 (unregistering): Port device team_slave_1 removed
[  869.972367][ T1288] team0 (unregistering): Port device team_slave_0 removed
[  870.014522][    T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  870.144836][ T5273] 8021q: adding VLAN 0 to HW filter on device eth20
[  870.164297][    T9] usb 2-1: Using ep0 maxpacket: 16
[  870.165156][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  870.166680][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  870.166712][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  870.169893][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.169950][    T9] usb 2-1: Product: syz
[  870.169969][    T9] usb 2-1: Manufacturer: syz
[  870.169986][    T9] usb 2-1: SerialNumber: syz
[  870.245074][    T9] usb 2-1: config 0 descriptor??
[  870.265855][    T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  870.265892][    T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  870.508023][ T5624] Bluetooth: hci3: command tx timeout
[  870.519852][ T7836] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  870.522249][ T7836] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  870.663731][T11100] veth0_vlan: entered promiscuous mode
[  870.832795][T11100] veth1_vlan: entered promiscuous mode
[  870.898410][    T9] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  870.899380][    T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  870.908294][ T5624] Bluetooth: hci0: command tx timeout
[  871.033119][T11132] veth0_vlan: entered promiscuous mode
[  871.106649][T11132] veth1_vlan: entered promiscuous mode
[  871.157569][ T7836] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  871.158570][ T7836] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  871.267538][T11100] veth0_macvtap: entered promiscuous mode
[  871.360410][ T7836] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  871.360920][ T7836] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  871.361424][ T7836] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  871.364975][ T7836] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  871.416054][T11100] veth1_macvtap: entered promiscuous mode
[  871.422257][ T7836] usb 4-1: USB disconnect, device number 41
[  871.506514][    T9] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[  871.507312][    T9] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  871.666927][T11451] bridge0: port 1(bridge_slave_0) entered blocking state
[  871.667209][T11451] bridge0: port 1(bridge_slave_0) entered disabled state
[  871.667370][T11451] bridge_slave_0: entered allmulticast mode
[  871.669528][T11451] bridge_slave_0: entered promiscuous mode
[  871.673022][T11451] bridge0: port 2(bridge_slave_1) entered blocking state
[  871.673138][T11451] bridge0: port 2(bridge_slave_1) entered disabled state
[  871.673544][T11451] bridge_slave_1: entered allmulticast mode
[  871.675845][T11451] bridge_slave_1: entered promiscuous mode
[  871.732427][    T9] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  871.733061][    T9] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  871.733706][    T9] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  871.747317][    T9] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  871.765663][    T9] usb 2-1: USB disconnect, device number 29
[  871.794974][T11100] batman_adv: batadv0: Interface activated: batadv_slave_0
[  871.835449][T11451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  871.862453][T11100] batman_adv: batadv0: Interface activated: batadv_slave_1
[  871.874789][T11451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  871.902856][T11132] veth0_macvtap: entered promiscuous mode
[  872.054854][ T5935] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  872.106723][T11132] veth1_macvtap: entered promiscuous mode
[  872.126232][T11451] team0: Port device team_slave_0 added
[  872.129354][T11451] team0: Port device team_slave_1 added
[  872.384683][T11560] jffs2: notice: (11560) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  872.418698][T11451] batman_adv: batadv0: Adding interface: batadv_slave_0
[  872.418711][T11451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  872.418734][T11451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  872.419808][   T38] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  872.424436][ T1007] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  872.514186][ T9824] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  872.584642][ T5624] Bluetooth: hci3: command tx timeout
[  872.617404][T11451] batman_adv: batadv0: Adding interface: batadv_slave_1
[  872.617427][T11451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  872.617458][T11451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  872.702651][ T1288] bridge_slave_1: left allmulticast mode
[  872.702684][ T1288] bridge_slave_1: left promiscuous mode
[  872.702936][ T1288] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.721188][ T1288] bridge_slave_0: left allmulticast mode
[  872.721211][ T1288] bridge_slave_0: left promiscuous mode
[  872.721515][ T1288] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.958166][T11573] fuse: Unknown parameter '0x0000000000000007'
[  872.989887][ T5624] Bluetooth: hci0: command tx timeout
[  874.398249][ T1288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  874.422730][ T1288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  874.442815][ T1288] bond0 (unregistering): Released all slaves
[  874.502012][T11132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  874.663996][ T5624] Bluetooth: hci3: command tx timeout
[  874.721937][ T1288] hsr_slave_0: left promiscuous mode
[  874.725483][ T1288] hsr_slave_1: left promiscuous mode
[  874.726483][ T1288] batman_adv: batadv0: Removing interface: batadv_slave_0
[  874.752211][ T1288] batman_adv: batadv0: Removing interface: batadv_slave_1
[  874.767718][ T1288] veth1_macvtap: left promiscuous mode
[  874.767757][ T1288] veth0_macvtap: left promiscuous mode
[  874.767867][ T1288] veth1_vlan: left promiscuous mode
[  874.767941][ T1288] veth0_vlan: left promiscuous mode
[  875.185554][ T1288] team0 (unregistering): Port device team_slave_1 removed
[  875.234458][ T1288] team0 (unregistering): Port device team_slave_0 removed
[  875.622393][T11451] hsr_slave_0: entered promiscuous mode
[  875.629051][T11451] hsr_slave_1: entered promiscuous mode
[  875.664153][T11132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  875.732670][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13
[  875.918472][ T1007] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  875.926024][ T1007] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  876.112850][T11481] bridge0: port 1(bridge_slave_0) entered blocking state
[  876.117864][T11481] bridge0: port 1(bridge_slave_0) entered disabled state
[  876.118002][T11481] bridge_slave_0: entered allmulticast mode
[  876.121717][T11481] bridge_slave_0: entered promiscuous mode
[  876.132411][T11481] bridge0: port 2(bridge_slave_1) entered blocking state
[  876.132509][T11481] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.132631][T11481] bridge_slave_1: entered allmulticast mode
[  876.145898][T11481] bridge_slave_1: entered promiscuous mode
[  876.262036][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  876.262064][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  876.490880][T11481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  876.532476][T11481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  878.332192][T11481] team0: Port device team_slave_0 added
[  878.334864][ T6135] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  879.307385][ T1288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.307408][ T1288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.489863][T11481] team0: Port device team_slave_1 added
[  879.621570][ T5935] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  879.803626][T11481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  879.803801][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  879.803830][T11481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  879.910839][T11481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  879.910861][T11481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  879.910893][T11481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  880.179648][T11615] loop3: detected capacity change from 0 to 164
[  880.216723][T11617] loop9: detected capacity change from 0 to 8
[  880.278742][T11617] SQUASHFS error: zlib decompression failed, data probably corrupt
[  880.278776][T11617] SQUASHFS error: Failed to read block 0x9b: -5
[  880.278791][T11617] SQUASHFS error: Unable to read metadata cache entry [99]
[  880.278806][T11617] SQUASHFS error: Unable to read inode 0x127
[  880.311200][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  880.311221][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  880.485677][T11481] hsr_slave_0: entered promiscuous mode
[  880.492016][T11481] hsr_slave_1: entered promiscuous mode
[  880.507354][T11481] debugfs: 'hsr0' already exists in 'hsr'
[  880.507376][T11481] Cannot create hsr debugfs directory
[  880.663211][T11617] loop9: detected capacity change from 0 to 4096
[  880.712953][T11624] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  881.992943][ T6135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  881.992968][ T6135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  882.671900][T11652] jffs2: notice: (11652) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  885.563427][T11451] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  885.601221][T11451] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  885.610271][T11451] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  885.647916][T11451] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  885.655852][T11451] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  885.729994][T11451] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  885.737965][T11451] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  885.767778][T11451] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  886.188469][T11481] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  886.211866][T11481] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  886.223710][T11481] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  886.249116][T11481] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  886.250140][T11481] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  886.273189][T11481] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  886.292584][T11481] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  886.307760][T11481] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  886.628239][T11451] 8021q: adding VLAN 0 to HW filter on device bond0
[  886.712479][T11451] 8021q: adding VLAN 0 to HW filter on device team0
[  886.730372][T11481] 8021q: adding VLAN 0 to HW filter on device bond0
[  886.759982][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state
[  886.760063][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state
[  886.791717][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state
[  886.791820][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state
[  886.843094][T11481] 8021q: adding VLAN 0 to HW filter on device team0
[  886.882705][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  886.882791][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  886.947460][ T1288] bridge0: port 2(bridge_slave_1) entered blocking state
[  886.947571][ T1288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  887.025285][T11451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  887.300661][T11708] jffs2: notice: (11708) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  887.383784][T11481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  888.349156][T11736] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint
[  892.881507][T11761] loop8: detected capacity change from 0 to 128
[  893.461601][T11451] 8021q: adding VLAN 0 to HW filter on device batadv0
[  894.800974][T11769] loop3: detected capacity change from 0 to 164
[  894.876140][T11481] 8021q: adding VLAN 0 to HW filter on device batadv0
[  896.219490][T11796] loop8: detected capacity change from 0 to 128
[  897.659081][T11451] veth0_vlan: entered promiscuous mode
[  897.681036][T11451] veth1_vlan: entered promiscuous mode
[  898.798468][T11451] veth0_macvtap: entered promiscuous mode
[  898.824067][T11481] veth0_vlan: entered promiscuous mode
[  898.878579][T11451] veth1_macvtap: entered promiscuous mode
[  898.981532][T11481] veth1_vlan: entered promiscuous mode
[  899.143264][T11451] batman_adv: batadv0: Interface activated: batadv_slave_0
[  899.180631][T11451] batman_adv: batadv0: Interface activated: batadv_slave_1
[  899.255787][ T6137] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  899.256205][ T6137] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  899.256588][ T6137] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  899.256634][ T6137] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  902.151334][T11481] veth0_macvtap: entered promiscuous mode
[  902.205652][T11481] veth1_macvtap: entered promiscuous mode
[  903.550634][T11481] batman_adv: batadv0: Interface activated: batadv_slave_0
[  903.617093][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  903.617118][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  903.675337][T11481] batman_adv: batadv0: Interface activated: batadv_slave_1
[  903.766806][ T5880] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  903.766889][ T5880] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  903.848561][ T5880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  903.848579][ T5880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  903.854731][   T61] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  903.904056][   T61] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  904.323558][ T9824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  904.323583][ T9824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  906.124085][ T9824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  906.124110][ T9824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  906.910807][ T5624] Bluetooth: unknown link type 162
[  906.910963][ T5624] Bluetooth: hci1: connection err: -111
[  913.614805][T11909] IPVS: sed: FWM 3 0x00000003 - no destination available
[  914.289883][T11907] FAULT_INJECTION: forcing a failure.
[  914.289883][T11907] name failslab, interval 1, probability 0, space 0, times 0
[  914.289916][T11907] CPU: 0 UID: 0 PID: 11907 Comm: syz.3.855 Not tainted syzkaller #0 PREEMPT(full) 
[  914.289937][T11907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  914.289949][T11907] Call Trace:
[  914.289957][T11907]  <TASK>
[  914.289965][T11907]  dump_stack_lvl+0xe8/0x150
[  914.290004][T11907]  should_fail_ex+0x410/0x560
[  914.290041][T11907]  should_failslab+0xa8/0x100
[  914.290076][T11907]  ? skb_clone+0x212/0x3a0
[  914.290115][T11907]  kmem_cache_alloc_noprof+0xa1/0x600
[  914.290150][T11907]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.290174][T11907]  ? skb_clone+0x212/0x3a0
[  914.290222][T11907]  skb_clone+0x212/0x3a0
[  914.290264][T11907]  __netlink_deliver_tap+0x413/0x860
[  914.290320][T11907]  ? netlink_deliver_tap+0x2e/0x1b0
[  914.290359][T11907]  netlink_deliver_tap+0x19c/0x1b0
[  914.290390][T11907]  netlink_unicast+0x781/0x940
[  914.290428][T11907]  netlink_sendmsg+0x813/0xb40
[  914.290454][T11907]  ? __pfx_netlink_sendmsg+0x10/0x10
[  914.290483][T11907]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.290505][T11907]  ? apparmor_socket_sendmsg+0x18b/0x360
[  914.290527][T11907]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.290551][T11907]  ? __pfx_netlink_sendmsg+0x10/0x10
[  914.290569][T11907]  sock_sendmsg_nosec+0x13a/0x180
[  914.290592][T11907]  ____sys_sendmsg+0x54e/0x850
[  914.290623][T11907]  ? __pfx_____sys_sendmsg+0x10/0x10
[  914.290652][T11907]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.290679][T11907]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.290702][T11907]  ? import_iovec+0x73/0xa0
[  914.290729][T11907]  ___sys_sendmsg+0x2a5/0x360
[  914.290754][T11907]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.290776][T11907]  ? __lock_acquire+0x747/0x2de0
[  914.290800][T11907]  ? __pfx____sys_sendmsg+0x10/0x10
[  914.290830][T11907]  ? futex_wait+0x2a2/0x390
[  914.290885][T11907]  ? __fget_files+0x2a/0x420
[  914.290911][T11907]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.290933][T11907]  ? __fget_files+0x3a2/0x420
[  914.290968][T11907]  __x64_sys_sendmsg+0x1b1/0x290
[  914.290994][T11907]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.291034][T11907]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  914.291068][T11907]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.291101][T11907]  do_syscall_64+0x166/0x520
[  914.291125][T11907]  ? trace_irq_disable+0x3b/0x140
[  914.291148][T11907]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.291186][T11907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.291212][T11907] RIP: 0033:0x7f595e59e159
[  914.291235][T11907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  914.291257][T11907] RSP: 002b:00007f595f40a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  914.291285][T11907] RAX: ffffffffffffffda RBX: 00007f595e825fa0 RCX: 00007f595e59e159
[  914.291301][T11907] RDX: 000000002400c800 RSI: 0000200000000000 RDI: 0000000000000005
[  914.291314][T11907] RBP: 00007f595e63506b R08: 0000000000000000 R09: 0000000000000000
[  914.291326][T11907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  914.291338][T11907] R13: 00007f595e826038 R14: 00007f595e825fa0 R15: 00007ffcf25a00b8
[  914.291377][T11907]  </TASK>
[  914.297917][ T1288] IPVS: starting estimator thread 0...
[  914.394150][T11911] IPVS: using max 24 ests per chain, 57600 per kthread
[  914.946176][T11921] loop6: detected capacity change from 0 to 8
[  915.172391][T11924] jffs2: notice: (11924) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  915.330965][T11921] SQUASHFS error: zlib decompression failed, data probably corrupt
[  915.331097][T11921] SQUASHFS error: Failed to read block 0x9b: -5
[  915.331239][T11921] SQUASHFS error: Unable to read metadata cache entry [99]
[  915.331255][T11921] SQUASHFS error: Unable to read inode 0x127
[  916.042168][T11928] loop6: detected capacity change from 0 to 4096
[  916.110470][T11930] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  920.411507][T11946] jffs2: notice: (11946) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  921.162069][T11953] loop6: detected capacity change from 0 to 512
[  921.957200][T11953] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  921.993531][T11953] EXT4-fs (loop6): 1 truncate cleaned up
[  921.995820][T11953] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  922.285330][T11451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  923.451154][T11970] IPVS: sed: FWM 3 0x00000003 - no destination available
[  925.348108][T11974] loop3: detected capacity change from 0 to 164
[  925.576844][T11982] bridge_slave_0: left allmulticast mode
[  925.576874][T11982] bridge_slave_0: left promiscuous mode
[  925.582635][T11982] bridge0: port 1(bridge_slave_0) entered disabled state
[  925.643710][T11984] loop7: detected capacity change from 0 to 8
[  925.681114][T11982] bridge_slave_1: left allmulticast mode
[  925.681144][T11982] bridge_slave_1: left promiscuous mode
[  925.690344][T11982] bridge0: port 2(bridge_slave_1) entered disabled state
[  925.735562][T11984] SQUASHFS error: zlib decompression failed, data probably corrupt
[  925.735591][T11984] SQUASHFS error: Failed to read block 0x9b: -5
[  925.735603][T11984] SQUASHFS error: Unable to read metadata cache entry [99]
[  925.735614][T11984] SQUASHFS error: Unable to read inode 0x127
[  927.197488][T11990] loop7: detected capacity change from 0 to 4096
[  927.235765][T11991] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  927.271735][T11982] bond0: (slave bond_slave_0): Releasing backup interface
[  927.395078][T11982] bond0: (slave bond_slave_1): Releasing backup interface
[  927.450314][T11982] team0: Port device team_slave_0 removed
[  927.986902][    T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  928.008419][T11982] team0: Port device team_slave_1 removed
[  928.037094][T11982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  928.037119][T11982] batman_adv: batadv0: Removing interface: batadv_slave_0
[  928.083399][T11982] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  928.083425][T11982] batman_adv: batadv0: Removing interface: batadv_slave_1
[  928.118036][T11982] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  928.155605][    T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  928.156884][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  928.156940][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  928.156965][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  928.156992][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  928.157035][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.505930][T11998] jffs2: notice: (11998) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  929.233860][T12003] loop6: detected capacity change from 0 to 8
[  929.489301][T12003] SQUASHFS error: zlib decompression failed, data probably corrupt
[  929.489333][T12003] SQUASHFS error: Failed to read block 0x9b: -5
[  929.489346][T12003] SQUASHFS error: Unable to read metadata cache entry [99]
[  929.489359][T12003] SQUASHFS error: Unable to read inode 0x127
[  929.797369][    T9] [drm] Initialized gud 1.0.0 for 4-1:1.0 on minor 1
[  930.204854][    T9] gud 4-1:1.0: [drm] Cannot find any crtc or sizes
[  930.490143][T12011] netlink: 'syz.8.892': attribute type 10 has an invalid length.
[  930.512613][T12011] syz_tun: entered promiscuous mode
[  930.600182][T12011] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  930.926998][ T1264] ieee802154 phy0 wpan0: encryption failed: -22
[  930.927143][ T1264] ieee802154 phy1 wpan1: encryption failed: -22
[  930.952001][ T5751] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  931.770155][ T5751] usb 8-1: Using ep0 maxpacket: 32
[  931.772610][ T5751] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  931.779962][ T5751] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  931.779990][ T5751] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  931.780030][ T5751] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.832141][ T7836] usb 4-1: USB disconnect, device number 42
[  931.863779][ T5751] usb 8-1: config 0 descriptor??
[  932.126061][T12025] jffs2: notice: (12025) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  933.348288][ T5750] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[  933.444484][T12036] loop1: detected capacity change from 0 to 8
[  933.466676][T12036] SQUASHFS error: zlib decompression failed, data probably corrupt
[  933.466709][T12036] SQUASHFS error: Failed to read block 0x9b: -5
[  933.466725][T12036] SQUASHFS error: Unable to read metadata cache entry [99]
[  933.466740][T12036] SQUASHFS error: Unable to read inode 0x127
[  933.520348][ T5750] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  933.524166][ T5750] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  933.524191][ T5750] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  933.524239][ T5750] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  933.524279][ T5750] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.640354][ T5750] hub 9-1:1.0: bad descriptor, ignoring hub
[  933.640383][ T5750] hub 9-1:1.0: probe with driver hub failed with error -5
[  933.641085][ T5750] cdc_wdm 9-1:1.0: skipping garbage
[  933.641102][ T5750] cdc_wdm 9-1:1.0: skipping garbage
[  933.641444][ T5750] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[  934.739480][ T8528] usb 8-1: USB disconnect, device number 2
[  934.767606][  T982] usb 9-1: USB disconnect, device number 2
[  934.949468][T12042] jffs2: notice: (12042) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  936.403052][T12053] FAULT_INJECTION: forcing a failure.
[  936.403052][T12053] name failslab, interval 1, probability 0, space 0, times 0
[  936.403223][T12053] CPU: 1 UID: 0 PID: 12053 Comm: syz.8.906 Not tainted syzkaller #0 PREEMPT(full) 
[  936.403253][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  936.403269][T12053] Call Trace:
[  936.403279][T12053]  <TASK>
[  936.403293][T12053]  dump_stack_lvl+0xe8/0x150
[  936.403337][T12053]  should_fail_ex+0x410/0x560
[  936.403373][T12053]  ? __alloc_skb+0x1db/0x7a0
[  936.403404][T12053]  should_failslab+0xa8/0x100
[  936.403439][T12053]  ? __alloc_skb+0x1db/0x7a0
[  936.403470][T12053]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  936.403513][T12053]  ? __alloc_skb+0x18d/0x7a0
[  936.403550][T12053]  ? __alloc_skb+0x1db/0x7a0
[  936.403591][T12053]  __alloc_skb+0x1db/0x7a0
[  936.403629][T12053]  rtmsg_ifinfo_build_skb+0x7f/0x260
[  936.403658][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.403689][T12053]  ? ip6_route_dev_notify+0x9a/0x5b0
[  936.403724][T12053]  rtmsg_ifinfo+0x8c/0x1a0
[  936.403765][T12053]  netif_state_change+0x297/0x3a0
[  936.403799][T12053]  ? __pfx_netif_state_change+0x10/0x10
[  936.403826][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.403861][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.403891][T12053]  ? do_set_master+0x214/0x720
[  936.403926][T12053]  ? validate_linkmsg+0x765/0x950
[  936.403962][T12053]  do_setlink+0x3c57/0x4670
[  936.403997][T12053]  ? hrtimer_start_range_ns_common+0x7cd/0xb60
[  936.404037][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.404080][T12053]  ? __pfx_do_setlink+0x10/0x10
[  936.404115][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.404145][T12053]  ? lockdep_hardirqs_on+0x7b/0x110
[  936.404179][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.404209][T12053]  ? rcu_is_watching+0x16/0xb0
[  936.404241][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.404271][T12053]  ? trace_sched_exit_tp+0x3a/0x130
[  936.404342][T12053]  ? __pfx___schedule+0x10/0x10
[  936.404376][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.404406][T12053]  ? __mutex_lock+0x30b/0x1550
[  936.404449][T12053]  ? irqentry_exit+0x218/0x910
[  936.404481][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.404510][T12053]  ? lockdep_hardirqs_on+0x7b/0x110
[  936.404541][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.404571][T12053]  ? irqentry_exit+0x218/0x910
[  936.404602][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.404658][T12053]  rtnl_newlink+0x146f/0x1c30
[  936.404707][T12053]  ? __pfx_rtnl_newlink+0x10/0x10
[  936.404743][T12053]  ? do_syscall_64+0x166/0x520
[  936.404775][T12053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.404838][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.404872][T12053]  ? kasan_quarantine_put+0xbb/0x1f0
[  936.404898][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.404928][T12053]  ? lockdep_hardirqs_on+0x7b/0x110
[  936.404959][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.404994][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.405023][T12053]  ? kmem_cache_free+0x182/0x650
[  936.405062][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.405092][T12053]  ? __lock_acquire+0x747/0x2de0
[  936.405123][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.405160][T12053]  ? __local_bh_enable_ip+0xd6/0x140
[  936.405196][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.405226][T12053]  ? lockdep_hardirqs_on+0x7b/0x110
[  936.405258][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.405288][T12053]  ? __local_bh_enable_ip+0xd6/0x140
[  936.405321][T12053]  ? __dev_queue_xmit+0x29b/0x3820
[  936.405370][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.405400][T12053]  ? lock_acquire+0x115/0x350
[  936.405427][T12053]  ? __pfx_rtnl_newlink+0x10/0x10
[  936.405462][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.405504][T12053]  ? __pfx_rtnl_newlink+0x10/0x10
[  936.405536][T12053]  rtnetlink_rcv_msg+0x802/0xc00
[  936.405574][T12053]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  936.405607][T12053]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  936.405638][T12053]  ? ref_tracker_free+0x689/0x830
[  936.405675][T12053]  ? __pfx_ref_tracker_free+0x10/0x10
[  936.405719][T12053]  netlink_rcv_skb+0x226/0x4a0
[  936.405767][T12053]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  936.405803][T12053]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  936.405859][T12053]  ? netlink_deliver_tap+0x2e/0x1b0
[  936.405900][T12053]  ? netlink_deliver_tap+0x2e/0x1b0
[  936.405947][T12053]  netlink_unicast+0x7bd/0x940
[  936.405998][T12053]  netlink_sendmsg+0x813/0xb40
[  936.406035][T12053]  ? __pfx_netlink_sendmsg+0x10/0x10
[  936.406068][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.406098][T12053]  ? apparmor_socket_sendmsg+0x98/0x360
[  936.406126][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.406159][T12053]  ? __pfx_netlink_sendmsg+0x10/0x10
[  936.406183][T12053]  sock_sendmsg_nosec+0x13a/0x180
[  936.406215][T12053]  ____sys_sendmsg+0x54e/0x850
[  936.406258][T12053]  ? __pfx_____sys_sendmsg+0x10/0x10
[  936.406298][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.406334][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.406364][T12053]  ? import_iovec+0x73/0xa0
[  936.406403][T12053]  ___sys_sendmsg+0x2a5/0x360
[  936.406437][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.406467][T12053]  ? __lock_acquire+0x747/0x2de0
[  936.406499][T12053]  ? __pfx____sys_sendmsg+0x10/0x10
[  936.406541][T12053]  ? futex_wait+0x2a2/0x390
[  936.406615][T12053]  ? __fget_files+0x2a/0x420
[  936.406651][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.406680][T12053]  ? __fget_files+0x3a2/0x420
[  936.406729][T12053]  __x64_sys_sendmsg+0x1b1/0x290
[  936.406771][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.406805][T12053]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  936.406853][T12053]  ? srso_alias_return_thunk+0x5/0xfbef5
[  936.406898][T12053]  do_syscall_64+0x166/0x520
[  936.406931][T12053]  ? trace_irq_disable+0x3b/0x140
[  936.406958][T12053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.406991][T12053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.407018][T12053] RIP: 0033:0x7fa4f8d9e159
[  936.407042][T12053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  936.407064][T12053] RSP: 002b:00007fa4f6ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  936.407092][T12053] RAX: ffffffffffffffda RBX: 00007fa4f9025fa0 RCX: 00007fa4f8d9e159
[  936.407111][T12053] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  936.407128][T12053] RBP: 00007fa4f8e3506b R08: 0000000000000000 R09: 0000000000000000
[  936.407145][T12053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  936.407161][T12053] R13: 00007fa4f9026038 R14: 00007fa4f9025fa0 R15: 00007ffe8963e008
[  936.407201][T12053]  </TASK>
[  936.642980][T12055] jffs2: notice: (12055) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  937.719763][T12053] bond0: (slave syz_tun): Releasing backup interface
[  937.821568][T12053] bridge_slave_0: left allmulticast mode
[  937.821600][T12053] bridge_slave_0: left promiscuous mode
[  937.821860][T12053] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.907912][T12053] bridge_slave_1: left allmulticast mode
[  937.907942][T12053] bridge_slave_1: left promiscuous mode
[  937.908197][T12053] bridge0: port 2(bridge_slave_1) entered disabled state
[  938.017127][T12053] bond0: (slave bond_slave_0): Releasing backup interface
[  938.071863][T12053] bond0: (slave bond_slave_1): Releasing backup interface
[  938.281455][T12066] netlink: 'syz.9.908': attribute type 10 has an invalid length.
[  939.527897][T12053] team0: Port device team_slave_0 removed
[  939.593251][T12053] team0: Port device team_slave_1 removed
[  939.604302][T12053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  939.604322][T12053] batman_adv: batadv0: Removing interface: batadv_slave_0
[  939.607982][T12053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  939.607998][T12053] batman_adv: batadv0: Removing interface: batadv_slave_1
[  939.652372][T12053] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  939.735875][T12077] netlink: 'syz.6.911': attribute type 10 has an invalid length.
[  939.835659][T12066] syz_tun: entered promiscuous mode
[  940.066677][T12066] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  941.160216][T12077] syz_tun: entered promiscuous mode
[  941.267588][T12077] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  941.399457][T12086] vivid-002: disconnect
[  941.400366][T12083] vivid-002: reconnect
[  944.294202][T12109] loop8: detected capacity change from 0 to 8
[  944.338848][T12109] SQUASHFS error: zlib decompression failed, data probably corrupt
[  944.338882][T12109] SQUASHFS error: Failed to read block 0x9b: -5
[  944.338897][T12109] SQUASHFS error: Unable to read metadata cache entry [99]
[  944.338912][T12109] SQUASHFS error: Unable to read inode 0x127
[  945.578909][T12116] bridge_slave_0: left allmulticast mode
[  945.578938][T12116] bridge_slave_0: left promiscuous mode
[  945.579153][T12116] bridge0: port 1(bridge_slave_0) entered disabled state
[  945.637814][T12109] loop8: detected capacity change from 0 to 4096
[  945.665941][T12120] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  945.840073][T12116] bridge_slave_1: left allmulticast mode
[  945.840104][T12116] bridge_slave_1: left promiscuous mode
[  945.859637][T12116] bridge0: port 2(bridge_slave_1) entered disabled state
[  946.087254][T12116] bond0: (slave bond_slave_0): Releasing backup interface
[  946.121797][T12116] bond0: (slave bond_slave_1): Releasing backup interface
[  946.189237][T12116] team0: Port device team_slave_0 removed
[  946.263260][T12116] team0: Port device team_slave_1 removed
[  946.286293][T12116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  946.286318][T12116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  946.329478][T12116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  946.329506][T12116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  946.348081][T12116] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  946.383972][ T5751] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  946.536210][ T5751] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  946.537598][ T5751] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  946.537652][ T5751] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  946.537678][ T5751] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  946.537705][ T5751] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  946.537759][ T5751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.549239][T12131] loop1: detected capacity change from 0 to 128
[  946.973588][T12136] netlink: 'syz.3.931': attribute type 10 has an invalid length.
[  946.984869][T12136] syz_tun: entered promiscuous mode
[  947.022275][T12136] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  947.853376][ T5751] [drm] Initialized gud 1.0.0 for 7-1:1.0 on minor 1
[  948.014127][  T982] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  948.980139][ T5751] gud 7-1:1.0: [drm] Cannot find any crtc or sizes
[  949.034845][  T982] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  949.036488][  T982] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  949.036536][  T982] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  949.036561][  T982] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  949.036614][  T982] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  949.036659][  T982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.135558][T12154] loop1: detected capacity change from 0 to 128
[  949.177047][ T5751] usb 7-1: USB disconnect, device number 2
[  949.377527][ T8528] Console: switching to colour frame buffer device 128x48
[  949.395878][ T8528] gud 7-1:1.0: [drm] fb0: guddrmfb frame buffer device
[  949.507436][T12161] jffs2: notice: (12161) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  950.460411][ T5751] Console: switching to colour VGA+ 80x25
[  950.561120][  T982] [drm] Initialized gud 1.0.0 for 9-1:1.0 on minor 2
[  951.000768][T12174] MTD: Couldn't look up './dev/mtdblock0': -2
[  952.368853][ T8937] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  952.536806][ T8937] usb 10-1: device descriptor read/64, error -71
[  952.815969][ T8937] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  952.974290][ T8937] usb 10-1: device descriptor read/64, error -71
[  953.085295][ T8937] usb usb10-port1: attempt power cycle
[  953.464030][ T5624] Bluetooth: hci2: command 0x0406 tx timeout
[  953.614311][ T8937] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  953.648798][ T8937] usb 10-1: device descriptor read/8, error -71
[  953.894009][ T8937] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  953.898511][  T982] Console: switching to colour frame buffer device 128x48
[  953.912233][  T982] gud 9-1:1.0: [drm] fb0: guddrmfb frame buffer device
[  953.938371][  T982] usb 9-1: USB disconnect, device number 3
[  954.096653][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  954.125142][ T8937] usb 10-1: device not accepting address 5, error -71
[  954.127628][ T8937] usb usb10-port1: unable to enumerate USB device
[  954.323318][    T9] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  954.389421][    T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  954.391666][    T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  954.405233][    T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  954.405280][    T9] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  954.417191][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.188670][  T982] Console: switching to colour VGA+ 80x25
[  956.906527][    T9] [drm] Initialized gud 1.0.0 for 8-1:1.0 on minor 1
[  957.368533][T12204] jffs2: notice: (12204) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  958.607566][ T5624] Bluetooth: hci4: command 0x0406 tx timeout
[  960.327172][    T9] Console: switching to colour frame buffer device 128x48
[  960.356490][    T9] gud 8-1:1.0: [drm] fb0: guddrmfb frame buffer device
[  960.362021][T12211] FAULT_INJECTION: forcing a failure.
[  960.362021][T12211] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  960.362055][T12211] CPU: 1 UID: 0 PID: 12211 Comm: syz.1.956 Not tainted syzkaller #0 PREEMPT(full) 
[  960.362083][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  960.362098][T12211] Call Trace:
[  960.362108][T12211]  <TASK>
[  960.362122][T12211]  dump_stack_lvl+0xe8/0x150
[  960.362163][T12211]  should_fail_ex+0x410/0x560
[  960.362199][T12211]  strncpy_from_user+0x36/0x2c0
[  960.362231][T12211]  __se_sys_add_key+0xdb/0x420
[  960.362280][T12211]  ? __pfx___se_sys_add_key+0x10/0x10
[  960.362322][T12211]  ? srso_alias_return_thunk+0x5/0xfbef5
[  960.362360][T12211]  ? srso_alias_return_thunk+0x5/0xfbef5
[  960.362389][T12211]  ? __x64_sys_add_key+0x20/0xc0
[  960.362431][T12211]  do_syscall_64+0x166/0x520
[  960.362463][T12211]  ? trace_irq_disable+0x3b/0x140
[  960.362490][T12211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.362521][T12211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.362548][T12211] RIP: 0033:0x7f4a8319e159
[  960.362569][T12211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  960.362590][T12211] RSP: 002b:00007f4a813f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  960.362617][T12211] RAX: ffffffffffffffda RBX: 00007f4a83425fa0 RCX: 00007f4a8319e159
[  960.362636][T12211] RDX: 00002000000009c0 RSI: 0000000000000000 RDI: 0000000000000000
[  960.362652][T12211] RBP: 00007f4a8323506b R08: 0000000026e3dbc9 R09: 0000000000000000
[  960.362669][T12211] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  960.362685][T12211] R13: 00007f4a83426038 R14: 00007f4a83425fa0 R15: 00007ffe9f3b6278
[  960.362723][T12211]  </TASK>
[  960.560267][    T9] usb 8-1: USB disconnect, device number 3
[  960.600260][    T9] Console: switching to colour VGA+ 80x25
[  960.783282][T12217] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  960.875441][T12216] netlink: 'syz.7.958': attribute type 10 has an invalid length.
[  960.876642][T12216] syz_tun: entered promiscuous mode
[  960.906940][T12216] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  960.956374][T12222] loop3: detected capacity change from 0 to 164
[  962.498891][ T8528] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  962.674467][ T8528] usb 9-1: device descriptor read/64, error -71
[  962.965452][ T8528] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  963.124778][ T8528] usb 9-1: device descriptor read/64, error -71
[  963.245138][ T8528] usb usb9-port1: attempt power cycle
[  963.664318][ T8528] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  963.688712][ T8528] usb 9-1: device descriptor read/8, error -71
[  963.965947][ T8528] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  963.993956][ T8528] usb 9-1: device descriptor read/8, error -71
[  964.134675][ T8528] usb usb9-port1: unable to enumerate USB device
[  964.248768][T12235] FAULT_INJECTION: forcing a failure.
[  964.248768][T12235] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  964.248807][T12235] CPU: 0 UID: 0 PID: 12235 Comm: syz.1.965 Not tainted syzkaller #0 PREEMPT(full) 
[  964.248834][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  964.248849][T12235] Call Trace:
[  964.248858][T12235]  <TASK>
[  964.248869][T12235]  dump_stack_lvl+0xe8/0x150
[  964.248908][T12235]  should_fail_ex+0x410/0x560
[  964.248942][T12235]  prepare_alloc_pages+0x223/0x600
[  964.248975][T12235]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  964.249007][T12235]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  964.249038][T12235]  ? __pfx_policy_nodemask+0x10/0x10
[  964.249080][T12235]  alloc_pages_mpol+0x21e/0x390
[  964.249117][T12235]  folio_alloc_mpol_noprof+0x39/0x160
[  964.249151][T12235]  shmem_alloc_and_add_folio+0x43e/0xf60
[  964.249184][T12235]  ? filemap_get_entry+0xcd/0x3f0
[  964.249220][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.249255][T12235]  ? filemap_map_pages+0x1d1/0x2170
[  964.249294][T12235]  ? __pfx_filemap_get_entry+0x10/0x10
[  964.249325][T12235]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  964.249362][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.249389][T12235]  ? shmem_allowable_huge_orders+0x628/0x6c0
[  964.249427][T12235]  shmem_get_folio_gfp+0x5da/0x16d0
[  964.249476][T12235]  shmem_fault+0x179/0x390
[  964.249519][T12235]  __do_fault+0x138/0x2a0
[  964.249543][T12235]  ? do_pte_missing+0x140c/0x34b0
[  964.249566][T12235]  do_pte_missing+0x2215/0x34b0
[  964.249598][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.249631][T12235]  ? handle_mm_fault+0xf1/0x3750
[  964.249670][T12235]  handle_mm_fault+0x1a53/0x3750
[  964.249714][T12235]  ? handle_mm_fault+0xf1/0x3750
[  964.249759][T12235]  ? __pfx_handle_mm_fault+0x10/0x10
[  964.249793][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.249820][T12235]  ? follow_page_pte+0x748/0xf10
[  964.249863][T12235]  ? __pfx_follow_page_pte+0x10/0x10
[  964.249899][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.249936][T12235]  __get_user_pages+0x1675/0x2750
[  964.250003][T12235]  populate_vma_page_range+0x2be/0x3c0
[  964.250037][T12235]  ? __pfx_populate_vma_page_range+0x10/0x10
[  964.250071][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.250099][T12235]  ? down_read+0x2be/0x330
[  964.250137][T12235]  __mm_populate+0x25f/0x390
[  964.250170][T12235]  ? __pfx___mm_populate+0x10/0x10
[  964.250201][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.250231][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.250264][T12235]  vm_mmap_pgoff+0x353/0x4e0
[  964.250295][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.250330][T12235]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  964.250361][T12235]  ? rcu_is_watching+0x16/0xb0
[  964.250395][T12235]  ? ksys_mmap_pgoff+0xf3/0x760
[  964.250428][T12235]  ? srso_alias_return_thunk+0x5/0xfbef5
[  964.250456][T12235]  ? __x64_sys_mmap+0x7f/0x140
[  964.250486][T12235]  do_syscall_64+0x166/0x520
[  964.250515][T12235]  ? trace_irq_disable+0x3b/0x140
[  964.250540][T12235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.250570][T12235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.250594][T12235] RIP: 0033:0x7f4a8319e159
[  964.250617][T12235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  964.250637][T12235] RSP: 002b:00007f4a813f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  964.250662][T12235] RAX: ffffffffffffffda RBX: 00007f4a83425fa0 RCX: 00007f4a8319e159
[  964.250680][T12235] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  964.250697][T12235] RBP: 00007f4a8323506b R08: ffffffffffffffff R09: 0000000000000000
[  964.250713][T12235] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  964.250727][T12235] R13: 00007f4a83426038 R14: 00007f4a83425fa0 R15: 00007ffe9f3b6278
[  964.250765][T12235]  </TASK>
[  965.915140][   T12] IPVS: starting estimator thread 0...
[  966.044078][T12246] IPVS: using max 34 ests per chain, 81600 per kthread
[  970.269689][T12277] loop6: detected capacity change from 0 to 128
[  970.330614][T12269] bond0: (slave syz_tun): Releasing backup interface
[  970.371394][T12269] bridge_slave_0: left allmulticast mode
[  970.371426][T12269] bridge_slave_0: left promiscuous mode
[  970.371628][T12269] bridge0: port 1(bridge_slave_0) entered disabled state
[  970.422834][T12269] bridge_slave_1: left allmulticast mode
[  970.422867][T12269] bridge_slave_1: left promiscuous mode
[  970.423066][T12269] bridge0: port 2(bridge_slave_1) entered disabled state
[  970.537864][T12269] bond0: (slave bond_slave_0): Releasing backup interface
[  970.586069][ T5750] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  970.611580][T12269] bond0: (slave bond_slave_1): Releasing backup interface
[  970.663684][T12269] team0: Port device team_slave_0 removed
[  970.719296][T12269] team0: Port device team_slave_1 removed
[  970.720282][T12269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  970.720305][T12269] batman_adv: batadv0: Removing interface: batadv_slave_0
[  970.738229][T12269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  970.738254][T12269] batman_adv: batadv0: Removing interface: batadv_slave_1
[  970.765375][ T5750] usb 4-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed
[  970.767256][ T5750] usb 4-1: config 253 has an invalid interface number: 130 but max is 0
[  970.767282][ T5750] usb 4-1: config 253 has no interface number 0
[  970.767322][ T5750] usb 4-1: config 253 interface 130 has no altsetting 0
[  970.789484][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.789515][ T5750] usb 4-1: Product: syz
[  970.789532][ T5750] usb 4-1: Manufacturer: syz
[  970.789549][ T5750] usb 4-1: SerialNumber: syz
[  970.853153][T12269] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  970.930408][T12285] netlink: 64 bytes leftover after parsing attributes in process `syz.8.979'.
[  971.394222][T12293] FAULT_INJECTION: forcing a failure.
[  971.394222][T12293] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  971.394262][T12293] CPU: 0 UID: 0 PID: 12293 Comm: syz.7.982 Not tainted syzkaller #0 PREEMPT(full) 
[  971.394290][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  971.394305][T12293] Call Trace:
[  971.394314][T12293]  <TASK>
[  971.394326][T12293]  dump_stack_lvl+0xe8/0x150
[  971.394368][T12293]  should_fail_ex+0x410/0x560
[  971.394401][T12293]  prepare_alloc_pages+0x223/0x600
[  971.394428][T12293]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  971.394457][T12293]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  971.394492][T12293]  ? __pfx_policy_nodemask+0x10/0x10
[  971.394535][T12293]  alloc_pages_mpol+0x21e/0x390
[  971.394567][T12293]  folio_alloc_mpol_noprof+0x39/0x160
[  971.394594][T12293]  shmem_alloc_and_add_folio+0x43e/0xf60
[  971.394630][T12293]  ? filemap_get_entry+0xcd/0x3f0
[  971.394667][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.394696][T12293]  ? filemap_map_pages+0x1d1/0x2170
[  971.394724][T12293]  ? __pfx_filemap_get_entry+0x10/0x10
[  971.394750][T12293]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  971.394795][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.394823][T12293]  ? shmem_allowable_huge_orders+0x628/0x6c0
[  971.394858][T12293]  shmem_get_folio_gfp+0x5da/0x16d0
[  971.394899][T12293]  shmem_fault+0x179/0x390
[  971.394944][T12293]  __do_fault+0x138/0x2a0
[  971.394969][T12293]  ? do_pte_missing+0x140c/0x34b0
[  971.394993][T12293]  do_pte_missing+0x2215/0x34b0
[  971.395018][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.395043][T12293]  ? handle_mm_fault+0xf1/0x3750
[  971.395083][T12293]  handle_mm_fault+0x1a53/0x3750
[  971.395129][T12293]  ? handle_mm_fault+0xf1/0x3750
[  971.395168][T12293]  ? __pfx_handle_mm_fault+0x10/0x10
[  971.395194][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.395224][T12293]  ? follow_page_pte+0x748/0xf10
[  971.395268][T12293]  ? __pfx_follow_page_pte+0x10/0x10
[  971.395302][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.395332][T12293]  __get_user_pages+0x1675/0x2750
[  971.395397][T12293]  populate_vma_page_range+0x2be/0x3c0
[  971.395435][T12293]  ? __pfx_populate_vma_page_range+0x10/0x10
[  971.395464][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.395487][T12293]  ? down_read+0x2be/0x330
[  971.395526][T12293]  __mm_populate+0x25f/0x390
[  971.395561][T12293]  ? __pfx___mm_populate+0x10/0x10
[  971.395592][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.395617][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.395644][T12293]  vm_mmap_pgoff+0x353/0x4e0
[  971.395674][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.395711][T12293]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  971.395739][T12293]  ? __pfx___se_sys_futex+0x10/0x10
[  971.395765][T12293]  ? rcu_is_watching+0x16/0xb0
[  971.395798][T12293]  ? ksys_mmap_pgoff+0xf3/0x760
[  971.395834][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  971.395863][T12293]  ? __x64_sys_mmap+0x7f/0x140
[  971.395892][T12293]  do_syscall_64+0x166/0x520
[  971.395916][T12293]  ? trace_irq_disable+0x3b/0x140
[  971.395936][T12293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.395968][T12293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.395994][T12293] RIP: 0033:0x7fdd58f9e159
[  971.396017][T12293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  971.396038][T12293] RSP: 002b:00007fdd59eed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  971.396058][T12293] RAX: ffffffffffffffda RBX: 00007fdd59225fa0 RCX: 00007fdd58f9e159
[  971.396073][T12293] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  971.396087][T12293] RBP: 00007fdd5903506b R08: ffffffffffffffff R09: 0000000000000000
[  971.396104][T12293] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  971.396121][T12293] R13: 00007fdd59226038 R14: 00007fdd59225fa0 R15: 00007ffc187b8c38
[  971.396160][T12293]  </TASK>
[  972.785861][T12278] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  972.825753][T12278] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  973.394136][ T5620] Bluetooth: hci1: command 0x0406 tx timeout
[  974.310088][T12294] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  974.341854][T12278] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  974.342476][T12278] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  975.241751][T12278] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  975.241878][T12278] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  975.293849][T12278] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  975.294047][T12278] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  975.301035][T12278] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  975.301112][T12278] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  975.346638][T12278] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  975.376332][T12278] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  975.376412][T12278] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  975.435022][T12278] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  975.464707][ T5620] Bluetooth: hci1: command 0x0406 tx timeout
[  975.530908][T12312] bond0: (slave syz_tun): Releasing backup interface
[  975.924216][ T5750] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware
[  976.002589][ T5750] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  976.002641][ T5750] dib0700: firmware download failed at 7 with -22
[  976.030706][ T5750] usb 4-1: USB disconnect, device number 43
[  976.092789][T12312] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  976.188266][T12319] netlink: 'syz.8.989': attribute type 10 has an invalid length.
[  976.208489][T12319] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  976.348774][ T5620] Bluetooth: hci5: command 0x0406 tx timeout
[  976.844471][T12335] syz.3.990 uses obsolete (PF_INET,SOCK_PACKET)
[  978.088840][ T5624] Bluetooth: hci4: command 0x0406 tx timeout
[  978.088884][ T5624] Bluetooth: hci2: command 0x0406 tx timeout
[  978.088916][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout
[  978.089105][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout
[  978.247744][ T8937] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  978.423972][T11103] Bluetooth: hci5: command 0x0406 tx timeout
[  978.543992][ T8937] usb 9-1: Using ep0 maxpacket: 16
[  978.597847][ T8937] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  978.717041][ T8937] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  978.717081][ T8937] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  978.737483][ T8937] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.737510][ T8937] usb 9-1: Product: syz
[  978.737527][ T8937] usb 9-1: Manufacturer: syz
[  978.737545][ T8937] usb 9-1: SerialNumber: syz
[  978.748930][ T8937] usb 9-1: config 0 descriptor??
[  978.753200][ T8937] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  978.753233][ T8937] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[  979.419528][ T8937] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  979.420430][ T8937] em28xx 9-1:0.0: Config register raw data: 0xfffffffb
[  980.230200][T11103] Bluetooth: hci0: command 0x0c1a tx timeout
[  980.230245][T11103] Bluetooth: hci3: command 0x0c1a tx timeout
[  980.230280][T11103] Bluetooth: hci2: command 0x0406 tx timeout
[  980.230311][T11103] Bluetooth: hci4: command 0x0406 tx timeout
[  980.704955][T12333] netlink: 17 bytes leftover after parsing attributes in process `syz.8.995'.
[  980.704989][T12333] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8
[  980.748900][T12333] key id 00000001 not found
[  981.108491][T12333] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  981.113014][ T8937] em28xx 9-1:0.0: Unknown AC97 audio processor detected!
[  981.180291][T12370] loop6: detected capacity change from 0 to 128
[  981.394615][ T8937] em28xx 9-1:0.0: couldn't setup AC97 register 2
[  981.395010][ T8937] em28xx 9-1:0.0: couldn't setup AC97 register 4
[  981.395394][ T8937] em28xx 9-1:0.0: couldn't setup AC97 register 6
[  981.396009][ T8937] em28xx 9-1:0.0: couldn't setup AC97 register 54
[  981.399122][ T8937] em28xx 9-1:0.0: couldn't setup AC97 register 56
[  981.432774][ T8937] usb 9-1: USB disconnect, device number 8
[  981.504230][ T7836] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  981.675131][ T7836] usb 4-1: Using ep0 maxpacket: 16
[  981.676187][ T7836] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  981.679243][ T7836] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  981.679276][ T7836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  981.681636][ T7836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.681663][ T7836] usb 4-1: Product: syz
[  981.681681][ T7836] usb 4-1: Manufacturer: syz
[  981.681699][ T7836] usb 4-1: SerialNumber: syz
[  981.701550][ T7836] usb 4-1: config 0 descriptor??
[  981.724339][ T7836] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  981.724374][ T7836] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  982.291575][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout
[  982.292172][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout
[  982.469240][ T7836] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  982.470899][ T7836] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  983.006672][T12371] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1004'.
[  983.006798][T12371] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8
[  983.111914][T12371] key id 00000001 not found
[  983.352569][T12381] loop8: detected capacity change from 0 to 128
[  983.456703][ T7836] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  983.461430][ T7836] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  983.563267][T12371] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  983.675924][ T5866] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  983.769303][ T7836] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  983.769717][ T7836] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  983.770101][ T7836] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  983.770475][ T7836] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  983.824915][ T7836] usb 4-1: USB disconnect, device number 44
[  983.825785][ T5866] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  983.827497][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.862842][ T5866] usb 8-1: config 0 descriptor??
[  984.276815][T12395] input: syz0 as /devices/virtual/input/input13
[  984.465305][T12397] FAULT_INJECTION: forcing a failure.
[  984.465305][T12397] name failslab, interval 1, probability 0, space 0, times 0
[  984.465350][T12397] CPU: 1 UID: 0 PID: 12397 Comm: syz.8.1011 Not tainted syzkaller #0 PREEMPT(full) 
[  984.465378][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  984.465394][T12397] Call Trace:
[  984.465406][T12397]  <TASK>
[  984.465417][T12397]  dump_stack_lvl+0xe8/0x150
[  984.465460][T12397]  should_fail_ex+0x410/0x560
[  984.465497][T12397]  should_failslab+0xa8/0x100
[  984.465533][T12397]  __kmalloc_noprof+0xfe/0x720
[  984.465558][T12397]  ? __se_sys_add_key+0x349/0x420
[  984.465597][T12397]  ? do_syscall_64+0x166/0x520
[  984.465630][T12397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  984.465660][T12397]  ? mpi_powm+0x1c4/0x2480
[  984.465691][T12397]  ? mpi_powm+0x1c4/0x2480
[  984.465731][T12397]  mpi_powm+0x1c4/0x2480
[  984.465789][T12397]  ? __pfx_mpi_powm+0x10/0x10
[  984.465824][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.465855][T12397]  ? lockdep_hardirqs_on+0x7b/0x110
[  984.465888][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.465924][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.465954][T12397]  ? kfree+0x1c5/0x650
[  984.465991][T12397]  ? rsa_enc+0x2e0/0x480
[  984.466034][T12397]  rsa_enc+0x338/0x480
[  984.466077][T12397]  ? __pfx_rsa_enc+0x10/0x10
[  984.466110][T12397]  ? __virt_addr_valid+0x137/0x390
[  984.466146][T12397]  ? __virt_addr_valid+0x2e8/0x390
[  984.466184][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.466214][T12397]  ? sg_init_one+0xf5/0x1c0
[  984.466259][T12397]  rsassa_pkcs1_verify+0x52b/0xbb0
[  984.466300][T12397]  ? __pfx_rsassa_pkcs1_verify+0x10/0x10
[  984.466373][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.466406][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.466436][T12397]  ? rsassa_pkcs1_set_pub_key+0x13d/0x1a0
[  984.466467][T12397]  public_key_verify_signature+0x79b/0x9e0
[  984.466514][T12397]  ? __pfx_public_key_verify_signature+0x10/0x10
[  984.466548][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.466594][T12397]  ? asymmetric_key_generate_id+0x60/0x170
[  984.466634][T12397]  ? asymmetric_key_id_same+0x67/0xe0
[  984.466677][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.466714][T12397]  x509_check_for_self_signed+0x326/0x430
[  984.466752][T12397]  x509_cert_parse+0x622/0x7a0
[  984.466788][T12397]  x509_key_preparse+0x64/0x6d0
[  984.466820][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.466850][T12397]  ? down_read+0x2be/0x330
[  984.466892][T12397]  asymmetric_key_preparse+0xb9/0x1b0
[  984.466921][T12397]  __key_create_or_update+0x3a9/0xa80
[  984.466968][T12397]  ? __pfx___key_create_or_update+0x10/0x10
[  984.467000][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.467036][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.467067][T12397]  ? lookup_user_key+0xb68/0x1150
[  984.467113][T12397]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  984.467147][T12397]  ? __pfx_keyring_search_iterator+0x10/0x10
[  984.467192][T12397]  key_create_or_update+0x42/0x60
[  984.467233][T12397]  __se_sys_add_key+0x349/0x420
[  984.467278][T12397]  ? __pfx___se_sys_add_key+0x10/0x10
[  984.467328][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.467366][T12397]  ? srso_alias_return_thunk+0x5/0xfbef5
[  984.467396][T12397]  ? __x64_sys_add_key+0x20/0xc0
[  984.467439][T12397]  do_syscall_64+0x166/0x520
[  984.467471][T12397]  ? trace_irq_disable+0x3b/0x140
[  984.467498][T12397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  984.467531][T12397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  984.467558][T12397] RIP: 0033:0x7fa4f8d9e159
[  984.467581][T12397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  984.467604][T12397] RSP: 002b:00007fa4f6ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  984.467631][T12397] RAX: ffffffffffffffda RBX: 00007fa4f9025fa0 RCX: 00007fa4f8d9e159
[  984.467650][T12397] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  984.467669][T12397] RBP: 00007fa4f8e3506b R08: 0000000030d850dd R09: 0000000000000000
[  984.467687][T12397] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  984.467704][T12397] R13: 00007fa4f9026038 R14: 00007fa4f9025fa0 R15: 00007ffe8963e008
[  984.467745][T12397]  </TASK>
[  985.438180][T12409] loop8: detected capacity change from 0 to 164
[  987.105783][ T8937] usb 8-1: USB disconnect, device number 4
[  987.451127][T12425] input: syz0 as /devices/virtual/input/input14
[  988.604021][ T8937] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  989.034259][ T8937] usb 9-1: Using ep0 maxpacket: 16
[  989.072941][ T8937] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  989.381202][ T8937] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  989.381242][ T8937] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  989.574066][ T8937] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.574101][ T8937] usb 9-1: Product: syz
[  989.574119][ T8937] usb 9-1: Manufacturer: syz
[  989.574136][ T8937] usb 9-1: SerialNumber: syz
[  989.577396][ T8937] usb 9-1: config 0 descriptor??
[  989.582712][ T8937] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  989.582747][ T8937] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[  990.354286][ T5866] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  990.484207][ T5866] usb 8-1: device descriptor read/64, error -71
[  990.502320][ T8937] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  990.556447][ T8937] em28xx 9-1:0.0: Config register raw data: 0xfffffffb
[  990.724051][ T5866] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  990.854146][ T5866] usb 8-1: device descriptor read/64, error -71
[  990.967256][ T5866] usb usb8-port1: attempt power cycle
[  991.077261][T12433] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1021'.
[  991.077558][T12433] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8
[  991.122602][T12433] key id 00000001 not found
[  991.374392][ T5866] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  991.412528][ T5866] usb 8-1: device descriptor read/8, error -71
[  991.649076][ T8937] em28xx 9-1:0.0: Unknown AC97 audio processor detected!
[  991.662463][ T5866] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  991.670953][ T8937] em28xx 9-1:0.0: couldn't setup AC97 register 2
[  991.711191][ T5866] usb 8-1: device descriptor read/8, error -71
[  991.829598][ T5866] usb usb8-port1: unable to enumerate USB device
[  992.462111][ T1264] ieee802154 phy0 wpan0: encryption failed: -22
[  992.462178][ T1264] ieee802154 phy1 wpan1: encryption failed: -22
[  993.186731][ T8937] em28xx 9-1:0.0: couldn't setup AC97 register 4
[  993.207823][ T8937] em28xx 9-1:0.0: couldn't setup AC97 register 6
[  993.209587][ T8937] em28xx 9-1:0.0: couldn't setup AC97 register 54
[  993.211387][ T8937] em28xx 9-1:0.0: couldn't setup AC97 register 56
[  993.228642][ T8937] usb 9-1: USB disconnect, device number 9
[  993.590660][   T29] rcu_tasks_wait_gp: rcu_tasks grace period number 17 (since boot) is 1027 jiffies old.
[  995.944989][ T5784] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  996.166090][ T5784] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  996.284372][ T5784] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.284414][ T5784] usb 8-1: Product: syz
[  996.284470][ T5784] usb 8-1: Manufacturer: syz
[  996.284525][ T5784] usb 8-1: SerialNumber: syz
[  996.486246][T12479] loop3: detected capacity change from 0 to 128
[  996.625711][T11103] Bluetooth: unknown link type 162
[  996.625806][T11103] Bluetooth: hci2: connection err: -111
[  996.694850][ T5784] usb 8-1: config 0 descriptor??
[  996.844268][T12473] bond0: (slave syz_tun): Releasing backup interface
[  997.240741][ T5784] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  997.677302][T12482] FAULT_INJECTION: forcing a failure.
[  997.677302][T12482] name failslab, interval 1, probability 0, space 0, times 0
[  997.677341][T12482] CPU: 0 UID: 0 PID: 12482 Comm: syz.6.1037 Not tainted syzkaller #0 PREEMPT(full) 
[  997.677370][T12482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[  997.677386][T12482] Call Trace:
[  997.677397][T12482]  <TASK>
[  997.677409][T12482]  dump_stack_lvl+0xe8/0x150
[  997.677452][T12482]  should_fail_ex+0x410/0x560
[  997.677490][T12482]  should_failslab+0xa8/0x100
[  997.677526][T12482]  __kmalloc_noprof+0xfe/0x720
[  997.677551][T12482]  ? __se_sys_add_key+0x349/0x420
[  997.677591][T12482]  ? do_syscall_64+0x166/0x520
[  997.677628][T12482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.677655][T12482]  ? mpi_powm+0x1c4/0x2480
[  997.677685][T12482]  ? mpi_powm+0x1c4/0x2480
[  997.677725][T12482]  mpi_powm+0x1c4/0x2480
[  997.677784][T12482]  ? __pfx_mpi_powm+0x10/0x10
[  997.677821][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.677859][T12482]  ? lockdep_hardirqs_on+0x7b/0x110
[  997.677891][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.677927][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.677958][T12482]  ? kfree+0x1c5/0x650
[  997.677994][T12482]  ? rsa_enc+0x2e0/0x480
[  997.678040][T12482]  rsa_enc+0x338/0x480
[  997.678084][T12482]  ? __pfx_rsa_enc+0x10/0x10
[  997.678119][T12482]  ? __virt_addr_valid+0x137/0x390
[  997.678155][T12482]  ? __virt_addr_valid+0x2e8/0x390
[  997.678193][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.678223][T12482]  ? sg_init_one+0xf5/0x1c0
[  997.678268][T12482]  rsassa_pkcs1_verify+0x52b/0xbb0
[  997.678310][T12482]  ? __pfx_rsassa_pkcs1_verify+0x10/0x10
[  997.678375][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.678408][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.678438][T12482]  ? rsassa_pkcs1_set_pub_key+0x13d/0x1a0
[  997.678470][T12482]  public_key_verify_signature+0x79b/0x9e0
[  997.678518][T12482]  ? __pfx_public_key_verify_signature+0x10/0x10
[  997.678551][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.678597][T12482]  ? asymmetric_key_generate_id+0x60/0x170
[  997.678638][T12482]  ? asymmetric_key_id_same+0x67/0xe0
[  997.678682][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.678719][T12482]  x509_check_for_self_signed+0x326/0x430
[  997.678757][T12482]  x509_cert_parse+0x622/0x7a0
[  997.678793][T12482]  x509_key_preparse+0x64/0x6d0
[  997.678824][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.678861][T12482]  ? down_read+0x2be/0x330
[  997.678903][T12482]  asymmetric_key_preparse+0xb9/0x1b0
[  997.678932][T12482]  __key_create_or_update+0x3a9/0xa80
[  997.678980][T12482]  ? __pfx___key_create_or_update+0x10/0x10
[  997.679012][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.679048][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.679079][T12482]  ? lookup_user_key+0xb68/0x1150
[  997.679125][T12482]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  997.679159][T12482]  ? __pfx_keyring_search_iterator+0x10/0x10
[  997.679203][T12482]  key_create_or_update+0x42/0x60
[  997.679243][T12482]  __se_sys_add_key+0x349/0x420
[  997.679289][T12482]  ? __pfx___se_sys_add_key+0x10/0x10
[  997.679331][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.679369][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.679400][T12482]  ? __x64_sys_add_key+0x20/0xc0
[  997.679443][T12482]  do_syscall_64+0x166/0x520
[  997.679476][T12482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.679502][T12482]  ? srso_alias_return_thunk+0x5/0xfbef5
[  997.679540][T12482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  997.679566][T12482] RIP: 0033:0x7f9f60d9e159
[  997.679590][T12482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  997.679612][T12482] RSP: 002b:00007f9f61bdc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  997.679640][T12482] RAX: ffffffffffffffda RBX: 00007f9f61025fa0 RCX: 00007f9f60d9e159
[  997.679660][T12482] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  997.679679][T12482] RBP: 00007f9f60e3506b R08: 000000000e165459 R09: 0000000000000000
[  997.679697][T12482] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  997.679713][T12482] R13: 00007f9f61026038 R14: 00007f9f61025fa0 R15: 00007ffdf66ff968
[  997.679755][T12482]  </TASK>
[  997.899300][T12473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  999.729482][ T5784] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  999.734099][ T5784] usb 8-1: USB disconnect, device number 9
[ 1002.086222][ T5750] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1002.234709][ T5750] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1002.236841][ T5750] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.273212][ T5750] usb 9-1: config 0 descriptor??
[ 1002.973360][T12522] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5)
[ 1002.973394][T12522] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1003.001224][T12522] vhci_hcd vhci_hcd.0: Device attached
[ 1003.002895][T12525] vhci_hcd: connection closed
[ 1003.013761][ T6219] vhci_hcd vhci_hcd.9: stop threads
[ 1003.014369][ T6219] vhci_hcd vhci_hcd.9: release socket
[ 1003.014402][ T6219] vhci_hcd vhci_hcd.9: disconnect device
[ 1006.291868][ T5866] usb 9-1: USB disconnect, device number 10
[ 1006.575541][T12544] loop8: detected capacity change from 0 to 128
[ 1006.654289][ T5750] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1006.894800][ T5750] usb 4-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed
[ 1006.896022][ T5750] usb 4-1: config 253 has an invalid interface number: 130 but max is 0
[ 1006.896049][ T5750] usb 4-1: config 253 has no interface number 0
[ 1006.896080][ T5750] usb 4-1: config 253 interface 130 has no altsetting 0
[ 1006.898471][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.898497][ T5750] usb 4-1: Product: syz
[ 1006.898514][ T5750] usb 4-1: Manufacturer: syz
[ 1006.898532][ T5750] usb 4-1: SerialNumber: syz
[ 1007.901381][T12552] jffs2: notice: (12552) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1008.385426][T12555] bond0: (slave syz_tun): Releasing backup interface
[ 1008.472440][T12555] bridge_slave_0: left allmulticast mode
[ 1008.472471][T12555] bridge_slave_0: left promiscuous mode
[ 1008.472790][T12555] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1008.556074][T12555] bridge_slave_1: left allmulticast mode
[ 1008.556106][T12555] bridge_slave_1: left promiscuous mode
[ 1008.558261][T12555] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1008.561322][T12562] loop1: detected capacity change from 0 to 164
[ 1008.650348][T12555] bond0: (slave bond_slave_0): Releasing backup interface
[ 1008.696014][T12555] bond0: (slave bond_slave_1): Releasing backup interface
[ 1009.341240][T12539] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1009.410312][T12555] team0: Port device team_slave_0 removed
[ 1009.529635][T12539] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1009.625460][T12555] team0: Port device team_slave_1 removed
[ 1009.626800][T12539] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1009.628161][T12539] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1009.628918][T12539] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1009.677316][T12539] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1009.680059][T12555] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1009.680084][T12555] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1009.833020][T12555] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1009.833116][T12555] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1010.100960][ T5776] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1010.168237][T12555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1010.279629][ T5776] usb 9-1: device descriptor read/64, error -71
[ 1010.513997][T11103] Bluetooth: hci1: command 0x0406 tx timeout
[ 1010.546784][ T5776] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1010.706304][ T5776] usb 9-1: device descriptor read/64, error -71
[ 1010.825860][ T5776] usb usb9-port1: attempt power cycle
[ 1011.264815][ T5776] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1011.291250][ T5776] usb 9-1: device descriptor read/8, error -71
[ 1011.544539][T11103] Bluetooth: hci5: command 0x0406 tx timeout
[ 1011.545818][ T5776] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1011.581090][ T5776] usb 9-1: device descriptor read/8, error -71
[ 1011.689485][ T5776] usb usb9-port1: unable to enumerate USB device
[ 1011.704000][T11103] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1011.704039][T11103] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1011.704092][T11103] Bluetooth: hci4: command 0x0406 tx timeout
[ 1011.704123][T11103] Bluetooth: hci2: command 0x0406 tx timeout
[ 1011.704306][ T5750] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware
[ 1011.721166][ T5750] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1011.721212][ T5750] dib0700: firmware download failed at 7 with -22
[ 1011.724621][ T5750] usb 4-1: USB disconnect, device number 45
[ 1012.058813][T12576] loop7: detected capacity change from 0 to 4096
[ 1012.118360][T12584] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1013.244007][   T29] rcu_tasks_wait_gp: rcu_tasks grace period number 21 (since boot) is 1043 jiffies old.
[ 1018.080856][T12617] jffs2: notice: (12617) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1018.526674][T12613] loop8: detected capacity change from 0 to 164
[ 1019.434026][ T5866] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1019.585086][ T5866] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1019.590782][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.608551][ T5866] usb 4-1: config 0 descriptor??
[ 1022.135064][T12644] loop6: detected capacity change from 0 to 4096
[ 1022.169456][T12649] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1023.388819][ T5866] usb 4-1: USB disconnect, device number 46
[ 1024.701541][T12664] syzkaller0: entered promiscuous mode
[ 1024.701570][T12664] syzkaller0: entered allmulticast mode
[ 1027.294275][ T5619] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1027.484992][ T5619] usb 7-1: Using ep0 maxpacket: 8
[ 1027.516422][ T5619] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[ 1027.714301][ T5619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1027.714351][ T5619] usb 7-1: Product: syz
[ 1027.714453][ T5619] usb 7-1: Manufacturer: syz
[ 1027.714519][ T5619] usb 7-1: SerialNumber: syz
[ 1027.975525][ T5619] usb 7-1: config 0 descriptor??
[ 1028.444359][ T5619] usb 7-1: can't set config #0, error -71
[ 1028.465255][ T5619] usb 7-1: USB disconnect, device number 3
[ 1028.521121][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'.
[ 1028.690766][T12693] jffs2: notice: (12693) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1029.841735][ T7836] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1030.023974][ T7836] usb 8-1: Using ep0 maxpacket: 16
[ 1030.024747][ T7836] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1030.026179][ T7836] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1030.026212][ T7836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1030.090226][ T7836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1030.090250][ T7836] usb 8-1: Product: syz
[ 1030.090263][ T7836] usb 8-1: Manufacturer: syz
[ 1030.090277][ T7836] usb 8-1: SerialNumber: syz
[ 1030.121705][ T7836] usb 8-1: config 0 descriptor??
[ 1030.141302][ T7836] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1030.141336][ T7836] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[ 1030.204096][ T8528] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1030.364970][ T8528] usb 10-1: Using ep0 maxpacket: 16
[ 1030.368609][ T8528] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1030.369911][ T8528] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1030.369946][ T8528] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1030.377144][ T8528] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1030.377172][ T8528] usb 10-1: Product: syz
[ 1030.377189][ T8528] usb 10-1: Manufacturer: syz
[ 1030.377221][ T8528] usb 10-1: SerialNumber: syz
[ 1030.390739][ T8528] usb 10-1: config 0 descriptor??
[ 1030.749471][ T7836] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[ 1030.750411][ T7836] em28xx 8-1:0.0: Config register raw data: 0xfffffffb
[ 1030.838832][    C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1030.890650][ T8528] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input15
[ 1030.932444][ T8528] imon:send_packet: packet tx failed (-71)
[ 1030.954079][ T8528] imon 10-1:0.0: panel buttons/knobs setup failed
[ 1031.074129][ T8528] rc_core: IR keymap rc-imon-pad not found
[ 1031.074164][ T8528] Registered IR keymap rc-empty
[ 1031.074242][ T8528] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1031.074264][ T8528] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1031.075223][ T8528] imon:send_packet: packet tx failed (-71)
[ 1031.127541][ T8528] imon 10-1:0.0: remote input dev register failed
[ 1031.127716][ T8528] imon 10-1:0.0: imon_init_intf0: rc device setup failed
[ 1031.163067][T12698] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1091'.
[ 1031.163098][T12698] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8
[ 1031.186716][T12698] key id 00000001 not found
[ 1031.199289][ T7836] em28xx 8-1:0.0: AC97 chip type couldn't be determined
[ 1031.199313][ T7836] em28xx 8-1:0.0: No AC97 audio processor
[ 1031.350517][ T8528] imon 10-1:0.0: unable to initialize intf0, err 0
[ 1031.350546][ T8528] imon:imon_probe: failed to initialize context!
[ 1031.350562][ T8528] imon 10-1:0.0: unable to register, err -19
[ 1031.374298][ T8528] usb 10-1: USB disconnect, device number 6
[ 1033.660288][ T5619] usb 8-1: USB disconnect, device number 10
[ 1033.693764][ T5619] em28xx 8-1:0.0: Disconnecting em28xx
[ 1036.682212][T12733] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1036.853747][ T5619] em28xx: Freeing device
[ 1037.205023][ T5619] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1037.365980][ T5619] usb 8-1: Using ep0 maxpacket: 16
[ 1037.408137][ T5619] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1037.434203][ T5619] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1037.434287][ T5619] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1037.530362][ T5619] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.532796][ T5619] usb 8-1: Product: syz
[ 1037.532862][ T5619] usb 8-1: Manufacturer: syz
[ 1037.532882][ T5619] usb 8-1: SerialNumber: syz
[ 1037.718564][ T5619] usb 8-1: config 0 descriptor??
[ 1037.917571][ T5619] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1037.918018][ T5619] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[ 1038.323537][T12747] loop9: detected capacity change from 0 to 164
[ 1038.653410][T12747] iso9660: Unknown parameter 'ÿÿÿÿÿ.ÃNÛBþO'
[ 1039.175483][ T5619] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[ 1039.338525][ T5619] em28xx 8-1:0.0: Config register raw data: 0xfffffffb
[ 1040.215115][T12740] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1102'.
[ 1040.215143][T12740] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8
[ 1040.220412][T12740] key id 00000001 not found
[ 1040.439649][ T5619] em28xx 8-1:0.0: Unknown AC97 audio processor detected!
[ 1040.442537][ T5619] em28xx 8-1:0.0: couldn't setup AC97 register 2
[ 1040.534640][T12753] loop3: detected capacity change from 0 to 128
[ 1040.575032][T12754] jffs2: notice: (12754) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1041.119370][ T5619] em28xx 8-1:0.0: couldn't setup AC97 register 4
[ 1041.236114][ T5619] em28xx 8-1:0.0: couldn't setup AC97 register 6
[ 1041.258563][ T5619] em28xx 8-1:0.0: couldn't setup AC97 register 54
[ 1041.283503][ T5619] em28xx 8-1:0.0: couldn't setup AC97 register 56
[ 1041.407215][ T5619] usb 8-1: USB disconnect, device number 11
[ 1043.533065][ T5866] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1043.770545][ T5866] usb 2-1: device descriptor read/64, error -71
[ 1044.174750][ T5866] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1044.404001][ T5866] usb 2-1: device descriptor read/64, error -71
[ 1044.444351][T12778] loop7: detected capacity change from 0 to 164
[ 1044.514244][ T5866] usb usb2-port1: attempt power cycle
[ 1044.864023][ T5866] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1045.074368][ T5866] usb 2-1: device not accepting address 32, error -71
[ 1045.543306][ T5619] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1045.684222][ T5619] usb 8-1: device descriptor read/64, error -71
[ 1045.934162][ T5619] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1046.094823][ T5619] usb 8-1: device descriptor read/64, error -71
[ 1046.209607][ T5619] usb usb8-port1: attempt power cycle
[ 1046.675997][ T5619] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1046.698724][ T5619] usb 8-1: device descriptor read/8, error -71
[ 1046.946817][ T5619] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1046.975893][ T5619] usb 8-1: device descriptor read/8, error -71
[ 1047.088669][ T5619] usb usb8-port1: unable to enumerate USB device
[ 1048.188912][T11103] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1048.194721][T11103] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1048.203383][T11103] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1048.219484][T11103] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1048.223197][T11103] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1048.234877][T12795] syzkaller0: entered promiscuous mode
[ 1048.234898][T12795] syzkaller0: entered allmulticast mode
[ 1048.261138][T12802] loop1: detected capacity change from 0 to 128
[ 1048.349472][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1119'.
[ 1048.389350][T12805] bridge1: port 1(veth0_to_bond) entered blocking state
[ 1048.389556][T12805] bridge1: port 1(veth0_to_bond) entered disabled state
[ 1048.389706][T12805] veth0_to_bond: entered allmulticast mode
[ 1048.391688][T12805] veth0_to_bond: entered promiscuous mode
[ 1048.709642][ T5866] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1048.993986][ T5866] usb 10-1: Using ep0 maxpacket: 8
[ 1048.994771][ T5866] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[ 1049.240269][ T5866] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1049.240307][ T5866] usb 10-1: Product: syz
[ 1049.240325][ T5866] usb 10-1: Manufacturer: syz
[ 1049.240344][ T5866] usb 10-1: SerialNumber: syz
[ 1050.267647][ T5620] Bluetooth: hci6: command tx timeout
[ 1050.362087][ T5866] usb 10-1: config 0 descriptor??
[ 1051.636541][ T5866] usb 10-1: can't set config #0, error -71
[ 1051.642931][ T5866] usb 10-1: USB disconnect, device number 7
[ 1053.072895][ T5620] Bluetooth: hci6: command tx timeout
[ 1055.046253][ T1264] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.046318][ T1264] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.146501][ T5620] Bluetooth: hci6: command tx timeout
[ 1055.614294][ T5866] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1055.755031][ T5866] usb 4-1: device descriptor read/64, error -71
[ 1056.019143][ T5866] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1056.154572][ T5866] usb 4-1: device descriptor read/64, error -71
[ 1056.218013][ T6133] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.267912][ T5866] usb usb4-port1: attempt power cycle
[ 1056.634278][ T5866] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1056.658352][ T5866] usb 4-1: device descriptor read/8, error -71
[ 1057.053135][ T5866] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1057.079824][ T5866] usb 4-1: device descriptor read/8, error -71
[ 1057.764168][ T5620] Bluetooth: hci6: command tx timeout
[ 1057.764997][ T5866] usb usb4-port1: unable to enumerate USB device
[ 1057.930037][T11912] IPVS: starting estimator thread 0...
[ 1058.045186][T12844] IPVS: using max 24 ests per chain, 57600 per kthread
[ 1059.719801][ T6133] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1059.810868][T12855] loop3: detected capacity change from 0 to 128
[ 1060.133867][ T6133] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1060.976818][ T6133] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1061.558325][  T982] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1061.714863][  T982] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1061.715918][  T982] usb 4-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61
[ 1061.715951][  T982] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1061.718417][  T982] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1061.718445][  T982] usb 4-1: Product: syz
[ 1061.718463][  T982] usb 4-1: Manufacturer: syz
[ 1061.718481][  T982] usb 4-1: SerialNumber: syz
[ 1061.723781][  T982] usb 4-1: config 0 descriptor??
[ 1061.733545][T12866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1061.804305][  T982] usb 4-1: selecting invalid altsetting 0
[ 1062.025050][ T5866] usb 4-1: USB disconnect, device number 51
[ 1062.240787][T11314] udevd[11314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1063.275512][  T982] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1063.767950][  T982] usb 7-1: device descriptor read/64, error -71
[ 1064.064340][T12749] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1064.723424][  T982] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1065.234011][  T982] usb 7-1: device descriptor read/64, error -71
[ 1065.344863][  T982] usb usb7-port1: attempt power cycle
[ 1067.354724][ T5620] Bluetooth: unknown link type 162
[ 1067.354755][ T5620] Bluetooth: hci5: connection err: -111
[ 1070.747343][ T6133] bond0 (unregistering): Released all slaves
[ 1072.187606][T11103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1072.193339][T11103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1072.209552][T11103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1072.215032][T11103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1072.216184][T11103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1073.477592][T12800] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1073.477715][T12800] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1073.477851][T12800] bridge_slave_0: entered allmulticast mode
[ 1073.512433][T12800] bridge_slave_0: entered promiscuous mode
[ 1073.617829][T12800] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1073.617937][T12800] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1073.618080][T12800] bridge_slave_1: entered allmulticast mode
[ 1073.619604][T12800] bridge_slave_1: entered promiscuous mode
[ 1075.355676][T11103] Bluetooth: hci4: command tx timeout
[ 1075.464067][ T6133] hsr_slave_0: left promiscuous mode
[ 1075.495608][ T6133] hsr_slave_1: left promiscuous mode
[ 1075.682100][ T6133] veth1_macvtap: left promiscuous mode
[ 1075.682140][ T6133] veth0_macvtap: left promiscuous mode
[ 1075.682250][ T6133] veth1_vlan: left promiscuous mode
[ 1075.682343][ T6133] veth0_vlan: left promiscuous mode
[ 1075.840309][T12956] input: syz0 as /devices/virtual/input/input17
[ 1076.744098][ T5750] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1076.904698][ T5750] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[ 1076.905861][ T5750] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1076.905891][ T5750] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 1076.905933][ T5750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.962638][ T5750] usb 4-1: probing VID:PID(0424:012C)   
[ 1076.986462][ T5750] usb 4-1: vub300 testing BULK IN EndPoint(0) 81
[ 1076.986505][ T5750] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02
[ 1076.986532][ T5750] usb 4-1: vub300 testing BULK IN EndPoint(2) 83
[ 1076.986555][ T5750] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04
[ 1076.986577][ T5750] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83
[ 1077.178147][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1077.178746][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1077.387140][T11103] Bluetooth: hci4: command tx timeout
[ 1077.642105][ T5750] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[ 1077.793991][ T5750] usb 4-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted
[ 1078.001261][T12958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1078.014914][T12958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1078.642234][ T5750] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[ 1078.835866][ T5866] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[ 1078.847025][ T5866] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[ 1078.855040][ T5866] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71
[ 1078.876550][ T5750] usb 4-1: USB disconnect, device number 52
[ 1079.463958][T11103] Bluetooth: hci4: command tx timeout
[ 1079.724124][ T5750] USB vub300 remote SDIO host controller[0] now disconnected
[ 1080.148645][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1080.179595][T12988] veth0_to_bond: left allmulticast mode
[ 1080.179621][T12988] veth0_to_bond: left promiscuous mode
[ 1080.179856][T12988] bridge1: port 1(veth0_to_bond) entered disabled state
[ 1080.307649][T12800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1080.310460][T12800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1080.664323][    C0] ------------[ cut here ]------------
[ 1080.664341][    C0] do not call blocking ops when !TASK_RUNNING; state=2001 set at [<ffffffff8be85b3e>] do_nanosleep+0x7e/0x6a0
[ 1080.664381][    C0] WARNING: kernel/sched/core.c:9184 at __might_sleep+0x92/0xf0, CPU#0: syz-executor/11451
[ 1080.692839][    C0] Modules linked in:
[ 1080.697147][    C0] CPU: 0 UID: 0 PID: 11451 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
[ 1080.706736][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1080.716812][    C0] RIP: 0010:__might_sleep+0xac/0xf0
[ 1080.722016][    C0] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 fe c3 e6 0e 43 80 3c 3c 00 74 08 48 89 df e8 7f 52 a1 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1
[ 1080.741637][    C0] RSP: 0018:ffffc90000007c08 EFLAGS: 00010246
[ 1080.747716][    C0] RAX: 0000000000000000 RBX: ffff8880217018a8 RCX: ffffffff8be85b3e
[ 1080.755731][    C0] RDX: ffffffff8be85b3e RSI: 0000000000002001 RDI: ffffffff907d4bd0
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1080.763704][    C0] RBP: 0000000000002001 R08: 0000000000000100 R09: 1ffffffff20f49af
[ 1080.771782][    C0] R10: dffffc0000000000 R11: fffffbfff20f49b0 R12: 1ffff110042e0315
[ 1080.779770][    C0] R13: 00000000000011d1 R14: ffffffff907d4bd0 R15: dffffc0000000000
[ 1080.787749][    C0] FS:  000055556a1e1500(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000
[ 1080.796693][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1080.803258][    C0] CR2: 0000001b33810ff8 CR3: 000000007be55000 CR4: 0000000000350ef0
[ 1080.811233][    C0] Call Trace:
[ 1080.814515][    C0]  <IRQ>
[ 1080.817345][    C0]  __cancel_work_sync+0x6d/0x110
[ 1080.822281][    C0]  mmc_free_host+0x19/0x40
[ 1080.826702][    C0]  call_timer_fn+0x18d/0x5f0
[ 1080.831303][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 1080.838017][    C0]  ? call_timer_fn+0xd5/0x5f0
[ 1080.842697][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1080.847835][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1080.853462][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1080.858671][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 1080.865374][    C0]  __run_timer_base+0x652/0x8b0
[ 1080.870217][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1080.875874][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1080.881242][    C0]  ? ktime_get+0x1f5/0x220
[ 1080.885670][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1080.891310][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1080.896954][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1080.902578][    C0]  run_timer_softirq+0xb7/0x170
[ 1080.907439][    C0]  handle_softirqs+0x226/0x860
[ 1080.912202][    C0]  ? __irq_exit_rcu+0xcb/0x220
[ 1080.916986][    C0]  __irq_exit_rcu+0xcb/0x220
[ 1080.921591][    C0]  irq_exit_rcu+0x9/0x30
[ 1080.925844][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1080.931466][    C0]  </IRQ>
[ 1080.934397][    C0]  <TASK>
[ 1080.937311][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1080.943273][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 1080.949698][    C0] Code: f7 e8 2d 58 bb f5 f7 c3 00 02 00 00 74 05 e8 90 a2 e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 94 65 ac f5 65 48 8b 05 0c a1 ac 07 48 85 c0 74 18 5b 41 5e e9
[ 1080.969320][    C0] RSP: 0018:ffffc90003d1fbb8 EFLAGS: 00000206
[ 1080.975403][    C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001
[ 1080.983358][    C0] RDX: 0000000000000000 RSI: ffffffff8e41457a RDI: 0000000000000001
[ 1080.991336][    C0] RBP: 0000000000000001 R08: ffffffff907a4d7f R09: 1ffffffff20f49af
[ 1080.999333][    C0] R10: dffffc0000000000 R11: fffffbfff20f49b0 R12: 000000000000c350
[ 1081.007315][    C0] R13: dffffc0000000000 R14: ffff8880b8628280 R15: 0000000000000246
[ 1081.015327][    C0]  hrtimer_start_range_ns_user+0x2ba/0x430
[ 1081.021136][    C0]  do_nanosleep+0x16c/0x6a0
[ 1081.025649][    C0]  ? do_nanosleep+0x7e/0x6a0
[ 1081.030226][    C0]  ? __pfx_do_nanosleep+0x10/0x10
[ 1081.035271][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.040890][    C0]  ? __asan_memset+0x22/0x50
[ 1081.045503][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.051122][    C0]  ? __hrtimer_setup+0x1b7/0x260
[ 1081.056083][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 1081.061282][    C0]  hrtimer_nanosleep+0x18f/0x3a0
[ 1081.066262][    C0]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[ 1081.071719][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 1081.076934][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.082560][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.088212][    C0]  __se_sys_clock_nanosleep+0x35b/0x3b0
[ 1081.093757][    C0]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[ 1081.099871][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.105520][    C0]  do_syscall_64+0x166/0x520
[ 1081.110103][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1081.116180][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1081.122056][    C0] RIP: 0033:0x7f9f60d5e98e
[ 1081.126476][    C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1081.146096][    C0] RSP: 002b:00007ffdf66ffc48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[ 1081.154525][    C0] RAX: ffffffffffffffda RBX: 000055556a1e1500 RCX: 00007f9f60d5e98e
[ 1081.162483][    C0] RDX: 00007ffdf66ffca0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1081.170463][    C0] RBP: 00007ffdf66ffd0c R08: 0000000000000000 R09: 0000000000000000
[ 1081.178446][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 1081.186421][    C0] R13: 00000000000927c0 R14: 0000000000107c9e R15: 00007ffdf66ffd60
[ 1081.194422][    C0]  </TASK>
[ 1081.197448][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1081.204728][    C0] CPU: 0 UID: 0 PID: 11451 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1081.214255][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1081.224300][    C0] Call Trace:
[ 1081.227573][    C0]  <IRQ>
[ 1081.230402][    C0]  vpanic+0x56d/0xa60
[ 1081.234396][    C0]  ? __pfx__printk+0x10/0x10
[ 1081.239008][    C0]  ? __pfx_vpanic+0x10/0x10
[ 1081.243516][    C0]  ? is_bpf_text_address+0x292/0x2b0
[ 1081.248792][    C0]  ? is_bpf_text_address+0x26/0x2b0
[ 1081.254004][    C0]  panic+0xc5/0xd0
[ 1081.257745][    C0]  ? __pfx_panic+0x10/0x10
[ 1081.262173][    C0]  __warn+0x315/0x4c0
[ 1081.266154][    C0]  ? __might_sleep+0x92/0xf0
[ 1081.270798][    C0]  ? __might_sleep+0x92/0xf0
[ 1081.275391][    C0]  __report_bug+0x276/0x570
[ 1081.279897][    C0]  ? __irq_exit_rcu+0xcb/0x220
[ 1081.284688][    C0]  ? __might_sleep+0x92/0xf0
[ 1081.289300][    C0]  ? __pfx___report_bug+0x10/0x10
[ 1081.294313][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.299957][    C0]  ? do_nanosleep+0x7e/0x6a0
[ 1081.304533][    C0]  ? do_nanosleep+0x7e/0x6a0
[ 1081.309112][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.314729][    C0]  ? do_raw_spin_unlock+0xf5/0x200
[ 1081.319847][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1081.325642][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.331271][    C0]  ? debug_object_assert_init+0x20d/0x380
[ 1081.336986][    C0]  report_bug_entry+0x19b/0x290
[ 1081.341825][    C0]  ? __might_sleep+0xac/0xf0
[ 1081.346404][    C0]  ? __might_sleep+0xb1/0xf0
[ 1081.350985][    C0]  handle_bug+0xce/0x200
[ 1081.355220][    C0]  exc_invalid_op+0x1a/0x50
[ 1081.359718][    C0]  asm_exc_invalid_op+0x1a/0x20
[ 1081.364554][    C0] RIP: 0010:__might_sleep+0xac/0xf0
[ 1081.369746][    C0] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 fe c3 e6 0e 43 80 3c 3c 00 74 08 48 89 df e8 7f 52 a1 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1
[ 1081.389332][    C0] RSP: 0018:ffffc90000007c08 EFLAGS: 00010246
[ 1081.395386][    C0] RAX: 0000000000000000 RBX: ffff8880217018a8 RCX: ffffffff8be85b3e
[ 1081.403349][    C0] RDX: ffffffff8be85b3e RSI: 0000000000002001 RDI: ffffffff907d4bd0
[ 1081.411301][    C0] RBP: 0000000000002001 R08: 0000000000000100 R09: 1ffffffff20f49af
[ 1081.419253][    C0] R10: dffffc0000000000 R11: fffffbfff20f49b0 R12: 1ffff110042e0315
[ 1081.427205][    C0] R13: 00000000000011d1 R14: ffffffff907d4bd0 R15: dffffc0000000000
[ 1081.435167][    C0]  ? do_nanosleep+0x7e/0x6a0
[ 1081.439746][    C0]  ? do_nanosleep+0x7e/0x6a0
[ 1081.444329][    C0]  __cancel_work_sync+0x6d/0x110
[ 1081.449262][    C0]  mmc_free_host+0x19/0x40
[ 1081.453662][    C0]  call_timer_fn+0x18d/0x5f0
[ 1081.458240][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 1081.464926][    C0]  ? call_timer_fn+0xd5/0x5f0
[ 1081.469589][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[ 1081.474691][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.480313][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1081.485497][    C0]  ? __pfx_vub300_inactivity_timer_expired+0x10/0x10
[ 1081.492169][    C0]  __run_timer_base+0x652/0x8b0
[ 1081.497005][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.502638][    C0]  ? __pfx___run_timer_base+0x10/0x10
[ 1081.507999][    C0]  ? ktime_get+0x1f5/0x220
[ 1081.512398][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.518016][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.523639][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.529259][    C0]  run_timer_softirq+0xb7/0x170
[ 1081.534100][    C0]  handle_softirqs+0x226/0x860
[ 1081.538873][    C0]  ? __irq_exit_rcu+0xcb/0x220
[ 1081.543635][    C0]  __irq_exit_rcu+0xcb/0x220
[ 1081.548226][    C0]  irq_exit_rcu+0x9/0x30
[ 1081.552460][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1081.558080][    C0]  </IRQ>
[ 1081.560994][    C0]  <TASK>
[ 1081.563909][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1081.569891][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 1081.576294][    C0] Code: f7 e8 2d 58 bb f5 f7 c3 00 02 00 00 74 05 e8 90 a2 e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 94 65 ac f5 65 48 8b 05 0c a1 ac 07 48 85 c0 74 18 5b 41 5e e9
[ 1081.595899][    C0] RSP: 0018:ffffc90003d1fbb8 EFLAGS: 00000206
[ 1081.601948][    C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001
[ 1081.609900][    C0] RDX: 0000000000000000 RSI: ffffffff8e41457a RDI: 0000000000000001
[ 1081.617853][    C0] RBP: 0000000000000001 R08: ffffffff907a4d7f R09: 1ffffffff20f49af
[ 1081.625804][    C0] R10: dffffc0000000000 R11: fffffbfff20f49b0 R12: 000000000000c350
[ 1081.633772][    C0] R13: dffffc0000000000 R14: ffff8880b8628280 R15: 0000000000000246
[ 1081.641743][    C0]  hrtimer_start_range_ns_user+0x2ba/0x430
[ 1081.647548][    C0]  do_nanosleep+0x16c/0x6a0
[ 1081.652042][    C0]  ? do_nanosleep+0x7e/0x6a0
[ 1081.656615][    C0]  ? __pfx_do_nanosleep+0x10/0x10
[ 1081.661632][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.667247][    C0]  ? __asan_memset+0x22/0x50
[ 1081.671831][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.677449][    C0]  ? __hrtimer_setup+0x1b7/0x260
[ 1081.682378][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 1081.687569][    C0]  hrtimer_nanosleep+0x18f/0x3a0
[ 1081.692517][    C0]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[ 1081.697971][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 1081.703161][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.708782][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.714402][    C0]  __se_sys_clock_nanosleep+0x35b/0x3b0
[ 1081.719944][    C0]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[ 1081.726006][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1081.731637][    C0]  do_syscall_64+0x166/0x520
[ 1081.736219][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1081.742276][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1081.748150][    C0] RIP: 0033:0x7f9f60d5e98e
[ 1081.752560][    C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1081.772234][    C0] RSP: 002b:00007ffdf66ffc48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[ 1081.780630][    C0] RAX: ffffffffffffffda RBX: 000055556a1e1500 RCX: 00007f9f60d5e98e
[ 1081.788595][    C0] RDX: 00007ffdf66ffca0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1081.796545][    C0] RBP: 00007ffdf66ffd0c R08: 0000000000000000 R09: 0000000000000000
[ 1081.804496][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 1081.812442][    C0] R13: 00000000000927c0 R14: 0000000000107c9e R15: 00007ffdf66ffd60
[ 1081.820408][    C0]  </TASK>
[ 1081.823611][    C0] Kernel Offset: disabled
[ 1081.827916][    C0] Rebooting in 86400 seconds..