last executing test programs:

5m44.096903231s ago: executing program 32 (id=130):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x5b5c, 0x4000, 0x3, 0x39d}, 0x0, 0x4, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0)
open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100)
r3 = io_uring_setup(0x3eac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2ca})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x4, 0x3}, 0x10)
bind$tipc(r4, 0x0, 0x0)

5m5.33247701s ago: executing program 33 (id=206):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x620000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000340))

3m28.022611606s ago: executing program 2 (id=541):
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x6, 0x0, {0x2, 0x1, 0x1, 0x0, '}'}}, 0x2a)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', <r2=>r1, 0x700, 0x80, 0x3079f5c2, 0x7fff, {{0x8, 0x4, 0x2, 0x19, 0x20, 0x67, 0x0, 0x5, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x51, 0x3, 0x8, [{@private=0xa010102, 0x6}]}]}}}}})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000640)={0x9, &(0x7f0000000100)=[{}, {@none}, {@fixed}, {@fixed}, {@fixed}, {}, {}, {}, {@fixed}]})
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000680)=""/160, &(0x7f0000000740)=0xa0)
ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000780))
r3 = openat2(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x141001, 0x2, 0xe}, 0x18)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'veth1_vlan\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xa0, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a40)={'gre0\x00', r5, 0x3, 0x80, 0x5, 0xa1c, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x65, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @empty}}}})
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x11c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x91}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8000000000000001}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5f}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc1}, 0xc004)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, <r6=>r3, {0x4}}, './file0\x00'})
ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000d00)={'\x00', 0xcbd1, 0x2, 0x3, 0x4, 0x47, 0xffffffffffffffff})
r7 = syz_open_dev$sndmidi(&(0x7f0000000d80), 0x8000000000000001, 0x80000)
syz_usb_connect(0x2, 0x3cc, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x81, 0x83, 0xdc, 0x10, 0x2013, 0x24c, 0xea09, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ba, 0x1, 0x6, 0x4, 0x40, 0x7f, "", [{{0x9, 0x4, 0x3c, 0x9, 0xb, 0xc9, 0x9c, 0x50, 0x7, [@generic={0x32, 0x9, "fd36e789e3673a42db4be5cdd3946171b59834dfd6c0cf664db06b2dadfa43365015305388c262fc7b913551603509e4"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "17"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd33, 0x2, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x1}, [@mdlm_detail={0x3a, 0x24, 0x13, 0x0, "2c5ad8619c3e3db3b8c3fb21318761983820751b62121ff7e522e7bedc4bc4213df162c8f8ac17de23adae6d4d00bd44e9519d66dde7"}, @dmm={0x7, 0x24, 0x14, 0x1, 0x3ff}, @mdlm_detail={0x75, 0x24, 0x13, 0xf7, "ff994b014ea7cdf1bb1c2327bfa9f38ba53ec63b3903f947422208744d83018650d9c9e4ce98f0508550b4fe916e0362d12dd17c13e1f225c175de2f373f76d9a05595997070f375555f2357ab2298b311237652f82d12250f91ecd29bee329b95329607fe8eabb8ef89a3fe96137787e5"}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x6, 0x5, 0xa}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xfe, 0x8d}, @mdlm={0x15, 0x24, 0x12, 0x2}]}], [{{0x9, 0x5, 0x1, 0x3, 0x8, 0x0, 0xa, 0xa}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x1, 0x8, 0xc}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x2, 0x0, 0x4}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x6, 0x24, 0x2, [@generic={0x3d, 0x24, "d331901db26edf13385037b2b5f3b74d67d6e152e2889c7414ef052d0f497e189a21ff04c75b56e33c679aa978614e5d7c1c163e7454eade4f6c50"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x81, 0x1, 0x1, [@generic={0xa0, 0xf, "405be477ad1c889ce8d7815b20f201a533830c9f6973ac4fea5fe07c42b9d3accbaec1050a22c390c974876eb30df6816c103d9a483dc5a7b4d5ff910cef0222adb13ab78edd710e0d8d6cfd2d3212e597b34f82c26cf2e27f0b5868fda3993a4f5847cdfd77a601a00bef0ee1195cb7851eb09984a2633e38fb4f67a80950fe71bb4165879c9b2625cf93d7ad05c77be780eebe9659d08e8634a717d350"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0xd, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x0, 0x81, 0xfd, [@generic={0xbf, 0x30, "8a90e23faf0b32d4edf699bde809e70fba002b4b94c10980d1be1802b1220d58caf7b080155850561cc0b08deaff471771058cd3a5a548b9e15c9a3cb8ca8f581f405e3cb0f4178088c4806a249756eb05bc48cf2bcf7ab0a009d665ac46e254edccdb211592f91fdae2418c9117747597a56e69d124386c2a699ca443e4a185db95c91fab200f529459fcbaa0a009ea317e9a636951cdfa9c24935e581461cf7403869621e99418e126a693e9259b851a08a5885152602cffe5db823c"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xb1eb}]}}, {{0x9, 0x5, 0x5, 0x1e, 0x400, 0xcd, 0x3e, 0x40}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x10, 0x43, 0x6, [@generic={0x5c, 0x2, "3cc949a9632ee3088498196ee6ed8aa8024358ffdd9275679591159b6b3a6b9722126c022d56a2ced276419822a265cfb50e3a6bde16ddab4818db0d3e525f3155dc72daa16c2a5e284e255e02941d63af0dbfdcc6491606bf44"}, @generic={0x16, 0x3, "5e41169cd3f971358b5f350c5829f38ea3bfa017"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x3, 0x6, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x0, 0x3, 0x4}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x300, 0x4, 0x44, 0x8, 0x40, 0x6}, 0x2d, &(0x7f0000001200)={0x5, 0xf, 0x2d, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x3, 0xf00, 0x1, [0x3f3f, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x8b, "580c2ac9fdad88f9c0c618d1bf3467d8"}]}, 0x2, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xb1, &(0x7f0000001280)=@string={0xb1, 0x3, "d12f71d5dbedd58aa1db3be5ef7ad625ef60974ee97610eacba1e1d6c31726621a328127079caaecfc1c4151d6810fede85a608dd53517a033c66fd140ed2292e85a7eac04e75e56b4560c714429c565786a52cb53b4b898b9116d46ba59b8407cc5c40d996b00c7a3108890ae4c4fba8e9ba8c34a2c74d978c6dc3024b0e9dec7995c817d63fb0dd51195a19f662561a532195cb4b1b23a9bd89bf952ae8ed7f30bd08e77a57d3921bc40ae81f024"}}]})
connect$vsock_stream(r6, &(0x7f0000001380)={0x28, 0x0, 0x2710, @my=0x0}, 0x10)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000013c0)={0x7fffffff, 0x9, 0x3, 0x81, 0x3})
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000001400)={0x3, 0x840d, 0x8000, 0x1, <r8=>0x0}, &(0x7f0000001440)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000001480)={r8, 0x5, 0x30}, 0xc)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000014c0)={{0x2, 0x2, 0x5, 0x1, 0x3}, 0xd, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x4, 0x0, 0x1, 0x5})
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000016c0)={<r9=>r7, &(0x7f00000015c0)='\x00', 0x121402, &(0x7f0000001600)={@_ha_fsid={[0x7ff, 0xffff]}, {0x3, 0x1, 0x4, 0x8}}, 0x1, &(0x7f0000001640)={@_ha_fsid}, &(0x7f0000001680)=0xffff})
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000001700), &(0x7f0000001740)=0x4)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000001780)='\x00')
connect$inet6(r9, &(0x7f00000017c0)={0xa, 0x4e21, 0xa, @empty, 0x9}, 0x1c)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x70, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x81}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000001940))
ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000001980))
openat$ttynull(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0)

3m25.168710635s ago: executing program 2 (id=549):
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x448d0}, 0x4010)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000140)=0x5, 0x4)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = syz_ublk_setup_io_uring(0x204d, &(0x7f0000000080)={0x0, 0xa4f8, 0x1000, 0x2, 0x1e6}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0))
r6 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2, 0x0, r5})
r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0)
lseek(r7, 0x5, 0x2)
close_range(r6, 0xffffffffffffffff, 0x0)
r8 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)

3m24.811021101s ago: executing program 2 (id=552):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000015d80), 0x201, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1208000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x880)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
socket$netlink(0x10, 0x3, 0x10)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x1)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19})
ioctl$UI_DEV_CREATE(r4, 0x5501)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000080001c000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f67001400028008000540000003ff060002407d0000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0)
ioctl$UI_DEV_DESTROY(r4, 0x5502)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000002f00090027ad700000000000040000004d621a9d77f5a710608bd6c8ec6b89af0b193675a64dbdce01259d42da7240488a7d4f8c638e99dcc5ff7ad67ba252ebe5ac2fe575f1914a03c86f08d7b0"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0)

3m21.522013968s ago: executing program 2 (id=557):
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864"], 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
modify_ldt$read_default(0x2, &(0x7f0000000200)=""/30, 0x1e)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)={0x28, r0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x14014)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xec, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x208186c0}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf0}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x234b}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa494}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)

3m20.934251598s ago: executing program 2 (id=559):
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x8)
unlinkat(r0, &(0x7f0000000280)='./bus\x00', 0x200)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa8}]}, 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), 0x0, &(0x7f0000000000))
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x100081, 0x27, 0x2, 0x0, 0x0, r5}, 0x0, 0x0, 0x0)
syz_usbip_server_init(0x3)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
syz_io_uring_setup(0x2f90, &(0x7f0000000340)={0x0, 0x91d9, 0x3010, 0x2, 0x292}, &(0x7f0000000100), 0x0, &(0x7f0000000000))
epoll_create(0xaf2)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(0xffffffffffffffff, r6, 0x0)
ioctl$OCFS2_IOC_INFO(r7, 0x80106f05, &(0x7f0000007840)={&(0x7f0000007680)=[&(0x7f0000000000)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000000640)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x1}, &(0x7f0000001340)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x3, 0xd}, {0x46f, 0x8000}, {0x101, 0x3}, {0xfffffffffffffbc2, 0x7}, {0x4, 0x2}, {0xffffffffffff0fda, 0x1}, {0x5, 0xaf}, {0x2, 0x6}, {0xfb8, 0xfffffffffffffff8}, {0x72, 0x7}, {0x8, 0x8001}, {0x9, 0x7}, {0x7, 0x100}, {0xf0, 0x10000}, {0x7fff, 0x2}, {0x9}, {0x3, 0x7}, {0x4, 0x5}, {0x8b, 0x7}, {0x3, 0x5}, {0x3, 0x6}, {0x80000000, 0xa}, {0x0, 0x7}, {0xfff, 0x8}, {0x80000000, 0x5}, {0x1}, {0xff, 0x401000}, {0x4, 0x72}, {0x81, 0xffffffff}, {0xfffffffffffffc00, 0x1}, {0x2}, {0xffffffff, 0x9}, {0x81, 0x8}, {0x1, 0x7}, {0x8, 0x8}, {0xaf, 0xfffffffffffffff8}, {0x816c}, {0xfff, 0x3}, {0x6, 0x1}, {0xa3b0, 0x5}, {0xef19, 0x8}, {0x4, 0x2}, {0x5, 0x10001}, {0x3, 0xd}, {0x0, 0xc}, {0xffffffff00000001, 0x1ec5}, {0x2b6, 0x3}, {0x4, 0xffffffff}, {0x8001, 0x3}, {0xd, 0x8001}, {0x5, 0x2}, {0x1, 0x53ca}, {0x7, 0x9}, {0xff, 0x7fffffffffffffff}, {0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x4, 0xf}, {0x4, 0x7}, {0x95, 0x3}, {0x4, 0x7}, {0x3, 0xffffffffffffffff}, {0x4, 0x11d1af11}, {0x6d8b, 0xd}, {0x6, 0x101}, {0x800, 0x9}, {0xfffffffffffffff4, 0x8}, {0x7, 0x3}, {0xe01a, 0xfff}, {0x0, 0x4}, {0x4, 0x1ff}, {0x400, 0x4}, {0x7, 0x2}, {0xb276, 0x10000}, {0xfffffffffffffffe, 0xcde3}, {0x4, 0x10000}, {0x5, 0x2}, {0xf, 0x4}, {0x9, 0xa}, {0x4, 0xffffffffffff0001}, {0x7fffffffffffffff, 0x58c}, {0x30cd, 0x2}, {0x9, 0xffffffff}, {0x5839, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x5, 0x9}, {0x5, 0xfff}, {0x1000, 0x1}, {0x2, 0x9}, {0x8000000000000000, 0x101}, {0x9}, {0x1, 0x6}, {0x4, 0x7}, {0x9, 0xff}, {0xb, 0x7}, {0x2000, 0x4}, {0x10001, 0x5}, {0x4, 0x7fffffff}, {0x3cbc, 0x9}, {0x8, 0x101}, {0xfbc, 0xc740}, {0x5, 0x6}, {0xe, 0x1}, {0x1c, 0x9}, {0xffffffff, 0x1}, {0x9, 0x6}, {0x90, 0x7}, {0x5, 0x101}, {0x3, 0x6}, {0x6, 0xe4}, {0x4, 0xff}, {0x5, 0xb9}, {0x0, 0xd1c}, {0x2b551b19, 0x8}, {0x5b, 0x7b}, {0x401, 0x3}, {0x4, 0x1}, {0xa6cd, 0x5}, {0x1, 0xad}, {0x8}, {0x0, 0x460}, {0x1, 0x5}, {0xffffffffffffc9f9, 0x7}, {0xc526, 0x1ff}, {0x9bbb, 0x5}, {0x9, 0x7}, {0x0, 0xf9}, {0x267f4d21, 0x6}, {0x34, 0x2}, {0x0, 0x10000}, {0x101, 0x1}, {0x10001, 0x8}, {0x933, 0x6}, {0x8, 0x100}, {0x3, 0x8}, {0x0, 0xffffffff00000000}, {0xff, 0x200}, {0x9, 0x7}, {0x8}, {0x96, 0x10001}, {0x8, 0x7}, {0x950, 0x5}, {0x5, 0x5}, {0x8000, 0x6}, {0x8, 0x6}, {0x7}, {0x9}, {0x6, 0x3}, {0x5}, {0xfffffffffffeffff, 0x119a20000}, {0x4, 0x5}, {0xf00000, 0x5}, {0x51f, 0x5847}, {0xffffffffffffff81, 0xff}, {0x5, 0x5}, {0x9, 0x7fff}, {0x8, 0x41fe}, {0xd7a, 0x3}, {0x2, 0x80000001}, {0x100}, {0x1, 0x600000000000}, {0x3e8b, 0x6}, {0x1, 0x9}, {0x2, 0x6}, {0x5, 0xe}, {0x3bda, 0x4}, {0x0, 0x3ff}, {0x3}, {0x4, 0x8}, {0x7fffffff, 0x6}, {0x80000000, 0x812}, {0x7}, {0x4, 0xffff}, {0xd8, 0x44}, {0xfff, 0x7}, {0x6}, {0x0, 0x5}, {0x4, 0x1ff}, {0x4, 0x78d9}, {0x1, 0xa8fa}, {0x0, 0xd}, {0x0, 0x92}, {0x3, 0x2}, {0x9, 0xce50}, {0x9, 0x8}, {0x3, 0x6}, {0x7ff, 0x8}, {0x0, 0xfffffffffffffffb}, {0x0, 0x9}, {0x4, 0x5}, {0xffffffffffffffff, 0x3}, {0x6, 0x2}, {0xfffffffffffffff9, 0x4}, {0x0, 0x4}, {0x6d4, 0xffffffffffffffb4}, {0x7f, 0x5}, {0x4, 0x85f}, {0x9, 0x1}, {0x8000000000000001, 0x3}, {0x3, 0x10000}, {0xfff, 0x80000000}, {0x8, 0x4}, {0xa349, 0x42e4}, {0x9, 0x8000000000000000}, {0x64a, 0x7}, {0xfffffffffffffff9, 0xe5f}, {0x4}, {0x8, 0xc19}, {0x6, 0x4}, {0x1, 0xfffffffffffffffb}, {0x9, 0x1}, {0x9, 0x1}, {0x1, 0x6}, {0x2}, {0x40, 0xe20}, {0xe7fb, 0x2}, {0x4, 0x1}, {0xffffffffffffffff, 0x2}, {0x3, 0x6d}, {0x7, 0xc}, {0x4, 0xc841}, {0x3, 0x7}, {0x3ff, 0x7fffffff}, {0x8, 0x10000}, {0x25d4, 0x9}, {0x5, 0x8968}, {0x100000000, 0x2}, {0x3f, 0x100000001}, {0x6, 0x6}, {0x7fff, 0xf7a}, {0x0, 0x10000}, {0x800, 0x1}, {0xe3, 0x7}, {0x7fffffffffffffff, 0xfffffffffffffff8}, {0x6ce7, 0xff2}, {0x8001, 0x24}, {0x5, 0x7}, {0x699, 0xfffffffffffffff9}, {0x3d86, 0x8001}, {0x2, 0x6}, {0xca18, 0x9}, {0x7}, {0x2, 0x81}, {0x0, 0x4}, {0x0, 0xffffffffffffffff}, {0x9, 0x5}, {0x10, 0x9}, {0x9, 0x9}, {0x2}, {0x7, 0xffffffffffffd372}, {0x53, 0x7}, {}, {0x8, 0xfffffffffffffff7}, {0x7fff, 0x80000000}]}, &(0x7f0000002380)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x6}, {0x7, 0x4bbdff1f}, {0x5, 0x100000000}, {0x101, 0x2}, {0x8, 0xa}, {0x1e, 0xb}, {0x2, 0x1}, {0x3, 0xffffffff}, {0x2, 0x1ff}, {0x0, 0x1}, {0x7, 0xa}, {0x8, 0x4}, {0x100000001, 0x9}, {0x6c4, 0x2}, {0x2, 0x81}, {0x2}, {0x7, 0x3}, {0x0, 0xc}, {0x7, 0x1}, {0xfffffffffffffff7, 0x61}, {0x81, 0x30c2}, {}, {0x4, 0x7fff}, {0xa584, 0xf0}, {0xe, 0x5917}, {0x5, 0x5}, {0x10000, 0x100}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0xbe0}, {0x5, 0x5c}, {0x9, 0x4}, {0x4ed, 0x70ca}, {0x0, 0x4}, {0x9, 0x100}, {0x10001, 0x7ff}, {0xffffffffffffffff, 0x8f}, {0x9, 0xff}, {0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0x944}, {0xf, 0x3}, {0x4, 0x7}, {0x0, 0x1e}, {0x8, 0x2}, {0x4, 0x92}, {0x401, 0xfff}, {0xc87a, 0x3}, {0x2, 0x5}, {0x10, 0x100000000}, {0x0, 0xe}, {0x0, 0x92b}, {0x5, 0x8}, {0x81, 0xffffffffffff3a5d}, {0x8000000000000001, 0x3}, {0x62a, 0xcf2}, {0x0, 0x45}, {0x8000, 0x4f5}, {0x7, 0x1}, {0x3, 0x6}, {0xe, 0x81}, {0x4, 0x8000}, {0x9e, 0x7}, {0x6, 0x1}, {0x4, 0xc}, {0xb, 0x200}, {0x4, 0x120}, {0x9086, 0x7}, {0x0, 0x6}, {0x8, 0x4}, {0x6, 0x8}, {0x9, 0x1}, {0xf0, 0x6}, {0xf70, 0x6}, {0x80000000, 0xb}, {0x6, 0x4504ba3f}, {0x1, 0x401}, {0x4, 0x8000000000000001}, {0x0, 0x6f}, {0x2, 0x9c53}, {0x2, 0xe}, {0x6, 0xe}, {0xffffffffffffff00, 0x1}, {0x72, 0x81}, {0x3, 0x10001}, {0x5, 0x800}, {0x10000, 0x9}, {0xfffffffffffffff7, 0x3}, {0x5, 0x7}, {0x100000001, 0x5}, {0x1, 0xc}, {0x9, 0x9}, {0xe, 0x544}, {0x400, 0x10000}, {0x3, 0x3}, {0x4, 0x3ff}, {0x8, 0x10001}, {0xfef9, 0x1}, {0x57, 0x1}, {0xc6, 0x1}, {0x6, 0x83c}, {0x10000, 0xe87}, {0x5, 0xfffffffffffffffa}, {0x77, 0x2}, {0x9, 0x6}, {0x0, 0x2}, {0xb8, 0x3}, {0x2, 0x800}, {0x1, 0x7fffffff}, {0x7fff, 0xff}, {0x2b1570a5, 0x3}, {0x5, 0x2}, {0x3, 0x7}, {0x2, 0x9}, {0x3, 0x6}, {0x4, 0x3}, {0xfff, 0xe77e}, {0x1, 0x8}, {0x4, 0x40f1}, {0x43, 0x6}, {0x8}, {0x0, 0x1}, {0x1, 0x8}, {0xf, 0xffff}, {0xa, 0x8001}, {0xffffffff, 0x6dd}, {0x5, 0x10001}, {0x5, 0x7}, {0x0, 0xfffffffffffffffc}, {0x7, 0xe}, {0x6, 0x9c}, {0xffffffffffffff67, 0xffffffffffffffff}, {0x9b6c, 0x2}, {0xff}, {0xfffffffffffffff3, 0x3}, {0x6, 0x7fffffffffffffff}, {0x406, 0x6}, {0x3, 0x6}, {0x5, 0x8000000000000000}, {0x8, 0x5}, {0x6, 0x8000000000000001}, {0x4, 0x7}, {0x7, 0x9}, {0x10001, 0x7}, {0x2b0, 0xfffffffffffffff9}, {0x7}, {0x1ff, 0x12000000000000}, {0xffffffffffffff7f, 0x6}, {0x750, 0x6}, {0x3, 0x1}, {0x9, 0x4}, {0x4, 0x5}, {0x6, 0x10}, {0x1, 0x9}, {0x2, 0x8}, {0x2, 0x4}, {0xfffffffffffffd9b, 0x3}, {0x8a, 0x6}, {0x8, 0x5}, {0x28321fcd, 0xda13}, {0x8, 0x8}, {0x6, 0x7}, {0x2465, 0x40000000}, {0x100000000, 0x8}, {0x2, 0xfffffffffffffff9}, {0x1, 0xa}, {0x8001}, {0x3ff, 0x8}, {0x7}, {0x7fffffff, 0x8}, {0x9, 0xffffffff80000001}, {0x4, 0x10}, {0x6, 0x4}, {0x1}, {0x7, 0x6}, {0xfffffffffffffff2, 0x4}, {0x8, 0x4}, {0x4, 0x9}, {0x691f90ed, 0x1000}, {0x6d91, 0xc065}, {0x4}, {0x81, 0x5}, {0x0, 0x436a}, {0xecc2, 0x1ff}, {0xe, 0x2}, {0x9, 0x9a}, {0x574, 0xd3}, {0x101}, {0x9e16, 0x5}, {0x6, 0x4}, {0xfffffffffffff001, 0x9}, {0x6f4, 0x80000001}, {0x1, 0x4}, {0xffff, 0x21171c5e}, {0x7fffffffffffffff, 0xfffffffffffffffd}, {0xe, 0x5}, {0x3, 0x1f}, {0x27, 0x2}, {0x1, 0x100}, {0x2, 0xdc6}, {0x8000, 0x8a}, {0x7, 0x6e3}, {0xffffffffffffffff, 0x101}, {0x80, 0x75}, {0x61, 0xa}, {0x200, 0xffffffff}, {0x9, 0x9}, {0xfffffffffffffffd, 0x9}, {0x5, 0x8}, {0x7, 0xbc9}, {0x1, 0xde07}, {0x0, 0x1}, {0x8000000000000001, 0xfffffffffffffffe}, {0x4, 0x1}, {0x8, 0x100000000}, {0x57, 0x5}, {0x3, 0xc}, {0xe, 0x9}, {0x1000, 0x6}, {0xffff, 0x2}, {0x4, 0x3}, {0x80000000, 0x2}, {0x6, 0x3}, {0x4, 0x7fffffff}, {0x7ff, 0x100}, {0x7, 0x80000001}, {0x7, 0x80000000}, {0x81}, {0x6, 0x10}, {0x6, 0xf}, {0x8, 0x3ff}, {0x64, 0x1}, {0x7, 0x4}, {0xe7f, 0x3}, {0x0, 0x33dd}, {0x4, 0x41b}, {0x1, 0xd}, {0xfa, 0x9}, {0x1, 0xdca1}, {0x5, 0x5}, {0x0, 0x8}, {0x5, 0x6}, {0x13d, 0xf}, {0x6, 0x4}, {0x250, 0x8}, {0x3}, {0x8000000000000000, 0x5}, {0x5, 0x81}, {0x990f, 0x1}, {0x47, 0xfc9}, {0x8, 0x5}, {0x8, 0xa1}, {0x0, 0x1c9}, {0x6, 0x9}]}, 0x0, &(0x7f0000003400)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x2}, &(0x7f0000003540)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000003580)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0x101, 0x62a11001}, {0x288e, 0x7}, {0x4, 0x5}, {0x0, 0x5}, {0x8000000000000000, 0x3}, {0x7da88ab4, 0x4}, {0x9c79, 0x6}, {0x8}, {0x2d86, 0x85d}, {0x401, 0x714d924e}, {0x7fffffffffffffff, 0x8000000000000001}, {0x3, 0x8}, {0x8, 0x8001}, {0x1, 0xc72}, {0x24d, 0x3000000000}, {0x401, 0xfc9}, {0x2, 0x7}, {0x9, 0x2}, {0x1, 0x8000000000000001}, {0x3a1, 0x7}, {0x4, 0x9f6a}, {0x1, 0x9}, {0x10, 0x1}, {0x4, 0x5}, {0xfffffffffffffffa, 0xfffffffffffffff8}, {0x9, 0xaa}, {0x1, 0x7fffffff}, {0x1ff, 0x8}, {0x8, 0x1c00000000}, {0xf, 0x6e}, {0x1, 0x7}, {0x80, 0xe}, {0x7}, {0x7, 0x8}, {0x9}, {0x2, 0x50}, {0x9, 0x7}, {0x8, 0xa}, {0x80, 0x9}, {0x2, 0x9}, {0x8}, {0x0, 0x2262}, {0x78c, 0x401}, {0x6, 0x8}, {0x200000000000}, {0x4, 0x2}, {0x8, 0x4}, {0x7fff, 0x9}, {0x7, 0x7}, {0xa, 0x7f}, {0x4, 0x9f46}, {0x8, 0x6964}, {0x5, 0x5434}, {0x0, 0xd77d58e}, {0x4, 0x6}, {0x5}, {0x4600000000000000, 0x80000000}, {0x200, 0x8}, {0x6, 0x6d070b81}, {0x8cd, 0x1ff}, {0x5, 0x800}, {0x7fff0000000000, 0x2}, {0x6, 0x2}, {0x9, 0xfe}, {0x9, 0x3}, {0xc7, 0x7}, {0x23, 0x6}, {0x8a, 0x3}, {0x8, 0x43aa340d}, {0x7f, 0x5}, {0xfffffffffffffffe, 0x200}, {0x8000000000000001, 0x1}, {0x0, 0xa00000}, {0x6, 0x473c55e9}, {0x4, 0x7}, {0x2, 0x373}, {0x9, 0x8001}, {0x10000, 0x9}, {0x2a, 0x6}, {0xaea3, 0x5}, {0xb, 0x1}, {0x1, 0x1}, {0xe, 0x3410}, {0x7, 0x10001}, {0x81, 0x9}, {0x44fb8406, 0xe42}, {0x9, 0x80000001}, {0x9, 0xa7d}, {0xffffffffffffffff, 0x7fffffffffffffff}, {0x5, 0xffffffffffffffff}, {0x1, 0x10}, {0x8, 0x2000}, {0x3ff, 0x6}, {0xdf, 0x7}, {0x9, 0x1}, {0xba8, 0x1}, {0x5, 0x9}, {0x0, 0x200}, {0x1ff, 0xbe}, {0x8, 0x4}, {0x97, 0x87}, {0x9, 0xe}, {0x4, 0x9b2}, {0x1000, 0x3a6}, {0x2, 0xff}, {0x2, 0xa2f8}, {0xffff, 0x9}, {0x1ff, 0x6}, {0x8, 0x369}, {0x7, 0x4}, {0x1141, 0x81}, {0x7fff, 0x7fff}, {0xffd, 0x10}, {0x100000001}, {0x9, 0x7}, {0x97, 0x2}, {0x6, 0xffffffffffffffff}, {0x8, 0x6}, {0x4, 0x6}, {0x8, 0x9}, {0x3ff, 0x3}, {0x80}, {0x6, 0x9}, {0x1, 0x1}, {0x9}, {0x8, 0xe}, {0x7fff, 0x4}, {0x4}, {0x8000, 0x1}, {0x8, 0x5}, {0x5, 0x101}, {0x3e, 0x1}, {0x5, 0xfffffffffffffc00}, {0x5d7fab98, 0xffff800000000000}, {0xbd8, 0xa}, {0x100, 0x10}, {0x2, 0x6}, {0xfffffffffffff952, 0x10000}, {0x200, 0xf}, {0x6, 0x2}, {0x497, 0x935}, {0x7fff, 0xe59e}, {0x2, 0x6}, {0x800, 0x3}, {0xe5, 0x5}, {0x7d52, 0x10}, {0x5, 0xdf60}, {0x7588, 0xb9}, {0x4, 0x93a9}, {0xcc, 0x7f}, {0x4deac896, 0xf}, {0x8e, 0xfffffffffffeffff}, {0x0, 0x6}, {0xbaa, 0x401}, {0x9, 0xc027}, {0x5, 0xfffffffffffffbff}, {0xffffffff, 0x1}, {0x3, 0xfffffffffffffc01}, {0x10, 0x2}, {0x3, 0x18000000}, {0x3, 0x2}, {0x1ff, 0x369}, {0x80, 0xc0000000000}, {0xd}, {0x3acc, 0x5}, {0x4, 0x9}, {0x1}, {0x1ff, 0x8}, {0x8, 0xffffffffffffffff}, {0x9, 0x81}, {0x7, 0x3}, {0x100000001, 0x7}, {0x3, 0x9}, {0x2, 0x7}, {0x7fffffffffffffff, 0x2c}, {0x2, 0x6833}, {0xabca, 0x2}, {0xfffffffffffffff4, 0x6}, {0x8, 0x100000001}, {0x2, 0x400}, {0x6, 0xc915}, {0x4, 0x3}, {0x5, 0xffffffffffffffff}, {0x7ff, 0xc68}, {0x101, 0x6}, {0x7fff, 0xf}, {0x3, 0x6}, {0x7ff, 0xf5f00000}, {0x2, 0x8}, {0xfffffffffffffffd, 0x4}, {0x4, 0x10}, {0x1}, {0x8ae0, 0xfff}, {0x8, 0x7ff}, {0x1, 0x3}, {0x800, 0x1}, {0x200, 0x1}, {0x7, 0x9}, {0xd2, 0x4}, {0x4, 0x3}, {0x8}, {0x9}, {0xffffffffffffbe81, 0x5c}, {0x80, 0x58cc}, {0xf40d, 0xffffffffffffff80}, {0x7, 0xeb7d}, {0x1, 0x179e}, {0xfffffffffffffff9, 0x9}, {0x100000001, 0xffff}, {0x6, 0x33b1a992}, {0x2, 0x8}, {0xc0000, 0x4}, {0x800, 0x6}, {0xffffffffffffffff, 0x6}, {0x5, 0x9}, {0x0, 0xc}, {0xffff}, {0x1528, 0x6}, {0xf, 0x3}, {0x8, 0x3356}, {0x8000000000000001, 0x1}, {0x1, 0xae3}, {0x7fff, 0x2}, {0xb1, 0xbda}, {0x1, 0x101}, {0x38000, 0x6}, {0x8, 0x593e}, {0x1, 0xffff}, {0x517, 0x5}, {0x8, 0x9}, {0xfffffffffffffffc, 0x9}, {0x7, 0xffff}, {0x38000000000000, 0x65}, {0x8, 0x7fd8}, {0x3ff, 0x80000000}, {0x0, 0x9}, {0x8000000000000000, 0x24}, {0x2, 0xc}, {0x7fffffffffffffff, 0x8902}, {0x9000000000000, 0xfff}, {0x2, 0x3}, {0x0, 0x7ff}, {0xfffffffffffffff8}, {0x1, 0x8}, {0x0, 0x7fffffffffffffff}, {0x10000, 0x8}, {0x6, 0x7}, {0x80, 0xd}, {0x4, 0x3c7f}, {0x9, 0x56f}, {0x7ff, 0x7}, {0x1, 0x991}, {0x2, 0x8000}, {0x3, 0xfffffffffffffffb}, {0x6}]}, &(0x7f00000045c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000004600)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000001}, {}, 0x5}, &(0x7f0000004740)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f00000047c0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000004840)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000004880)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, 0x0, &(0x7f0000004980)=@features={{0x4f32494e, 0x6, 0x10, 0x3}}, 0x0, 0x0, &(0x7f0000004a40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, 0x0, &(0x7f0000004ac0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000004b00)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000004b40)=@clustersize={{0x4f32494e, 0x1, 0x10}}, 0x0, 0x0, &(0x7f0000004d00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000004d40)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, 0x0, &(0x7f0000004e00)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x28a}, 0x0, &(0x7f0000004f80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000004fc0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x0, 0x5}, {0x4, 0x70000}, {0x2, 0x6}, {0x200, 0x7}, {0x8000}, {0x7ff, 0x7a9e}, {0x1, 0x7c}, {0x9, 0x4}, {0x8, 0x8}, {0xad5, 0x5}, {0x3, 0xd}, {0x8e, 0x2000000}, {0x9, 0xfff}, {0x72d, 0xe}, {0x5, 0x7fffffffffffffff}, {0xfff, 0x81}, {0x2, 0x41}, {0xce, 0xf}, {0xcf83, 0xffff}, {0xa0, 0xf98d}, {0xffffffffffffffff, 0x3}, {0x2, 0x80000000000000}, {0x6, 0x6}, {0x3ff, 0x9}, {0x1ff, 0x8000000000000001}, {0x10000, 0x4}, {0x5, 0x4}, {0x6f, 0xe}, {0x4, 0xa5}, {0x8, 0x100}, {0x9, 0x2}, {0x2, 0x7}, {0x800, 0x8}, {0x7, 0x4}, {0x5, 0xff}, {0x2, 0x7}, {0x8, 0x8001}, {0x217587bf, 0x5}, {0x25d3, 0x401}, {0x1}, {0xd3, 0x9}, {0x3, 0x2}, {0xef, 0x7e}, {0x40, 0x4ab}, {0xa776, 0x2d}, {0x3, 0x7}, {0xfff, 0xfffffffffffffff9}, {0x2, 0xffffffffffffffff}, {0x5cfc}, {0x3f46, 0x100000000}, {0xe74, 0x9}, {0x7f, 0x1000}, {0x200, 0xc}, {0x0, 0x1ff}, {0x5, 0x8dd9}, {0x8}, {0xa010, 0x3}, {0x5, 0x6}, {0x40, 0xff}, {0xc}, {0xfffffffffffffffd, 0x4}, {0x5, 0x5}, {0x6, 0x8}, {0x40, 0x4}, {0x8, 0x2}, {0x8, 0xf}, {0x8, 0xfffffffffffffffc}, {0x10000, 0xbe}, {0x18, 0x7fffffff}, {0x2, 0x5}, {0x8000000000000001, 0xe}, {0x8, 0xe8}, {0x2, 0xfffffffffffffffe}, {0xfffffffffffffffb, 0xffffffff7fffffff}, {0x400000000000, 0x9}, {0x80000001, 0x7}, {0x23cd, 0xf}, {0x4, 0x31}, {0x0, 0x3}, {0x2, 0x401}, {0xb526, 0x6}, {0x0, 0x6}, {0xffffffffffff8000}, {0x7e2a, 0xfffffffffffffffa}, {0x8, 0x1}, {0x26, 0x6}, {0x8000000000000001, 0x7}, {0x2, 0x9}, {0x9, 0xce}, {0x1, 0x4}, {0xc, 0x200}, {0xfffffffffffffffc, 0x8}, {0x6, 0xe65}, {0x9802, 0x976}, {0x1, 0x4}, {0x6, 0x6}, {0x5470, 0x7ff}, {0x2, 0xa}, {0x81, 0x36f1}, {0xffffffffffffffe3, 0x8}, {0xf2c, 0x9}, {0x3, 0x3}, {0xff, 0x1ff80000000}, {0x269d, 0xc87f}, {0x6}, {0x7f, 0x4}, {0x3, 0x102}, {0x4, 0x40}, {0x0, 0x8}, {0x9, 0x7}, {0x10000, 0x10001}, {0x98, 0x1e000000}, {0x10}, {0x0, 0x5}, {0x3, 0xdfc}, {0x5, 0x4f}, {0x76d8, 0xffffffffffffffff}, {0x112f1e33, 0x7}, {0x200, 0x1000}, {0x9, 0xe4}, {0x5}, {0x10, 0x8}, {0x1, 0x80}, {0xfffffffffffffe00, 0x8}, {0x0, 0x1ea2}, {0x3, 0x1a}, {0x8, 0x1000}, {0xb12d, 0x1}, {0xffffffffffff7fff, 0x1}, {0x1, 0x8}, {0xb, 0xffffffff00000001}, {0x1, 0xb16b}, {0x2, 0x1}, {}, {0x2, 0x7}, {0x200, 0x5}, {0xffffffffffffffff}, {0x4, 0x7}, {0xfffffffffffffffc, 0x7}, {0x7fff, 0x5}, {0xfff, 0x2}, {0x2}, {0x101, 0x7}, {0x9, 0x7b}, {0x7, 0x3}, {0xfffffffffffffe01, 0x6}, {0x8001, 0xfff}, {0x9, 0x8000000000000001}, {0x8, 0xc}, {0xffffffff80000000, 0xef}, {0x3, 0x79}, {0x7fffffffffffffff, 0xffffffff}, {0x8, 0x9}, {0xa0, 0x5}, {0x4, 0xb4f}, {0x6, 0xa}, {0x94, 0x7}, {0x8000, 0x8000000000000001}, {0x7fff, 0x5}, {0x7ff, 0x6}, {0xec28000000, 0xffff}, {0xd74b, 0x3ff}, {0xf, 0x761a}, {0x8000000000000000, 0x8001}, {0x4, 0x7}, {0x7, 0x101}, {0x1000, 0x5}, {0x8, 0x2}, {0x9, 0x7}, {0x8000, 0x7}, {0x1, 0xab}, {0x1, 0x5a4}, {0x1, 0x3}, {0x4, 0x6}, {0xffffffffffffffff, 0xffffffffffffff52}, {0x7, 0x18}, {0x4}, {0x401, 0xe60}, {0x7, 0x2}, {0x7, 0x81}, {0x7fffffffffffffff, 0x82}, {0x9, 0x92e}, {0xffffffffffffffd2, 0x5c4}, {0x7, 0x7ff}, {0x7, 0x3}, {0x3, 0x9}, {0x2, 0x3}, {0x7, 0x7}, {0x5, 0x8a}, {0xfffffffffffff882, 0x8001}, {0x800, 0x6}, {0x8000000000000000, 0x3ffc0000000}, {0x5, 0x6}, {0x7, 0x7}, {0x5, 0x1}, {0x4, 0x9}, {0x8, 0x800}, {0xa, 0x1}, {0x27, 0xa9}, {0x5, 0xa5}, {0x2, 0x4}, {0x0, 0x30c1}, {0xff81, 0xfffffffffffffff9}, {0x4, 0x4}, {0x7, 0x8}, {0x1ff, 0x9}, {0x100, 0x7}, {0x9, 0x4}, {0x158e, 0xffffffffffffffe6}, {0xfffffffffffffc01, 0x7}, {0x6, 0x8}, {0x401, 0x9}, {0x3, 0x9}, {0x1, 0x692}, {0x7, 0x4}, {0x2, 0x87}, {0x2, 0x1}, {0x7d01, 0x9}, {0x5, 0x400}, {0x2, 0x200}, {0x80, 0x8001}, {0xffffffff, 0x3}, {0x3, 0x10001}, {0x99a8, 0x1}, {0xc1, 0x76}, {0x3, 0x9}, {0x6, 0x1}, {0x2, 0x5}, {0x6, 0xe}, {0x1, 0x4}, {0xd, 0xc}, {0xd, 0x81}, {0x0, 0x274}, {0x3, 0x101}, {0x3, 0x14}, {0x7, 0x9}, {0x1, 0x8}, {0x80000001, 0x8709}, {0xffffffffffffffff, 0x5}, {0x6, 0x3ff}, {0x9, 0xb}, {0x6, 0x5}, {0x8, 0x7}, {0x6, 0x11}, {0x39f6, 0x100}, {0x4, 0x7}, {0x8, 0x3}, {0xffff, 0x4}, {0xf3, 0x8}, {0xcc2, 0xfffffffffffffff9}, {0x9, 0x2}, {0x8000000000000001, 0x1}, {0x4, 0x6f}, {0x1, 0x100000000}, {0x0, 0x3}]}, &(0x7f0000006000)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x5}, 0x0, &(0x7f0000006180)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f00000061c0)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000006200)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0xd, 0xa4}, {0x7, 0x1}, {0x6, 0x7ff}, {0x1, 0x927}, {0x9, 0x3}, {0x3, 0x67}, {0x4d0d4bce, 0x400}, {0x4610d765, 0xfffffffffffffc01}, {0x100000001, 0x8}, {0x4, 0x401}, {0x4, 0xfffffffffffffc00}, {0x9, 0xc0}, {0x4, 0x40}, {0x3, 0x3d2eb873}, {0x80, 0x5}, {0x400, 0x7}, {0x100, 0xd}, {0x3, 0x7fff000000000}, {0x2, 0x70}, {0x9, 0x1}, {0x4, 0x9}, {0x9}, {0x2, 0x2}, {0xbd5, 0x80000001}, {0x5, 0x326}, {0xda95}, {0x3, 0x72d961af}, {0x2, 0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x100, 0x1}, {0x2, 0x10001}, {0x80000001, 0x5}, {0xd, 0x2}, {0xfffffffffffffffb, 0x88}, {0xfffffffffffffffb, 0x401000000000000}, {0x8, 0x8}, {0x7fffffff, 0xfffffffffffffffa}, {0x100, 0x2}, {0x7, 0x7}, {0x5, 0x1}, {0x3, 0x7}, {0x8000000000000000, 0x100}, {0xfffffffffffffff8}, {0xe1a0000, 0x800}, {0x8, 0x68d}, {0x5, 0x8}, {0x9, 0xd105}, {0x7, 0x7}, {0xc431, 0x1}, {0x5, 0x1}, {0xd04, 0x5}, {0x1000, 0x5}, {0x1}, {0x800000000000000, 0x7fffffff}, {0x5}, {0x4b6, 0xd0}, {0xbbc, 0x7f}, {0x3, 0x9}, {0x8, 0xb724}, {0x800, 0x7}, {0x0, 0x80}, {0x80000000, 0x4}, {0xffffffffffffffff, 0xfffffffffffffff0}, {0x1000, 0x6}, {0xb378, 0xb}, {0x3}, {0x4, 0x4}, {0x9, 0x6}, {}, {0x8, 0x1}, {0x7fffffff, 0x9}, {0x10000, 0xf048}, {0xa9, 0x2}, {0x2, 0x80000001}, {0x5, 0xb1}, {0xa, 0x200}, {0x0, 0x1}, {0x4, 0x9}, {0x1, 0x80}, {0x6, 0x9747}, {0xffff, 0x3}, {0xa4f, 0x1}, {0x7, 0x3}, {0x4, 0x100000000}, {0xffffffffffffff7f, 0xfffffffffffffff3}, {0x2, 0x1c3}, {0x9}, {0x0, 0xe89}, {0x2, 0x61}, {0x7f0000000000000, 0xb}, {0xc00, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x0, 0x7}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x7c8000000000000}, {0xe22, 0x1}, {0x3, 0x8}, {0xfc1, 0xbee}, {0x38, 0x7ff}, {0x6, 0xe}, {0x78, 0x7}, {0x3, 0xd2}, {0x6, 0xffffffffffffff44}, {0x6, 0x8}, {0x8, 0x8}, {0x1, 0x6}, {0x10000, 0x7}, {0x7, 0x8}, {0x1, 0x2}, {0xfff, 0xcf}, {0xff, 0x8000000000000000}, {0x1, 0x8}, {0x2dae, 0x7}, {0x8, 0x9}, {0x9, 0xff}, {0x1}, {0x6, 0x3c1}, {0x4, 0x1}, {0x1, 0x1}, {0x26}, {0x1ff, 0x3}, {0x9, 0x400}, {0x0, 0x1}, {0x10001, 0x8}, {0x4, 0x1000}, {0x7, 0x7}, {0x0, 0x200}, {0x40, 0x100000001}, {0x7fffffffffffffff, 0xce0}, {0x5c, 0x100000000}, {0x2875, 0x8}, {0xa6d000000, 0x40}, {0x3, 0x3}, {0x3ff8000000000000, 0x60}, {0x4, 0xa000}, {0xffff, 0x1}, {0x1, 0x9}, {0x4, 0x1}, {0x7, 0x28}, {0x9cc, 0x10001}, {0x9b8a, 0x7}, {0x1, 0x8}, {0xc93a, 0x9104000000}, {0x7, 0xe1dc}, {0x2, 0x401}, {0x9, 0x800}, {0x7fffffff, 0x2}, {0x7, 0x101}, {0x8c, 0x9}, {0x2, 0x10}, {0x6, 0x7fffffffffffffff}, {0x81, 0xdaa}, {0x6, 0x5}, {0x1c33, 0x1}, {0x2da4, 0x101}, {0x8, 0x8b}, {0x101e246d, 0x4}, {0x48, 0x2}, {0x4, 0x2}, {0x79, 0x3}, {0x6, 0x486}, {0x4, 0xfffffffffffffffb}, {0x5, 0x401}, {0x1, 0x2}, {0x9, 0x4}, {0x0, 0x7ff}, {0xffffffffffffffee}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x4}, {0x7fff, 0x101}, {0x632, 0x6}, {0x3, 0x7}, {0xd2, 0x3}, {0x8, 0xfff}, {0x6e5e, 0x9}, {0xcc8, 0x8}, {0xe0a8, 0x7}, {0x9, 0x9}, {0x100, 0x401}, {0x40, 0x7}, {0x7fffffff, 0xc}, {0x4, 0x2}, {0xffffffffffffffff, 0x10001}, {0x2800000000}, {0x3, 0x1e0}, {0xf27, 0x4}, {0x400, 0xfff}, {0x2, 0x7ff}, {0x8000, 0x7fff}, {0x2, 0x2d}, {0x1, 0x8001}, {0xe842, 0x80000000}, {0xffff, 0x9}, {0x7, 0x5b7e}, {0x7, 0x7}, {0x8, 0x7}, {0xd14b, 0x8}, {0x4, 0x6}, {0x4, 0x1}, {0x8, 0x3}, {0xe, 0x667c747f}, {0x29, 0x9}, {0x8ad, 0x7}, {0x4, 0x6}, {0x2, 0x6}, {0x1, 0x39}, {0x5, 0x6}, {0xb3, 0x5}, {0xfff, 0x7}, {0x3, 0x8000000000000001}, {0x0, 0x5}, {0x6, 0xbfa}, {0x1, 0x120000000}, {0x1, 0xffffffffce45d021}, {0x800, 0x3}, {0x3e, 0x5460}, {0x615, 0x9}, {0x7f, 0x3}, {0xfffffffffffffffa, 0x11}, {0x9, 0x7fff}, {0xb, 0x2}, {0x5, 0x6}, {0x5, 0x8}, {0x4, 0x1}, {0x5c, 0x5}, {0x9, 0xa97}, {0xc536, 0xc}, {0x4, 0x4}, {0x185}, {0x3, 0x7d}, {0x5, 0x9}, {0x10, 0x8}, {0x9, 0x7fffffffffffffff}, {0x8, 0x2}, {0xcae1, 0xb}, {0x75e, 0x3}, {0x1ff, 0x3}, {0x8, 0x1}, {0x40, 0x5}, {0x3, 0x2}, {0x90d5}, {0x2, 0x5c}, {0x6, 0x140000000000000}, {0x49, 0x9}, {0xb3, 0x401}, {0x9, 0x93}, {0x10, 0x7}, {0x0, 0xc}, {0x10200000000, 0x101}, {0x0, 0x5}, {0x4fd, 0x10001}]}, &(0x7f0000007240)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f0000007280)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x9d9544bdcbe3448a}}, &(0x7f00000072c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000007300)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000007340)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000007380)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f00000073c0)=@features={{0x4f32494e, 0x6, 0x10, 0x100000000}}, &(0x7f0000007400)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000007440)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000007480)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f00000074c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000007500)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xe0000001}, {}, 0xfffffff8}, 0x0], 0x32})
io_setup(0x482, &(0x7f0000000600))
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x9d, 0x0, &(0x7f00000003c0)=[@request_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

3m19.864441644s ago: executing program 2 (id=568):
r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async)
pipe2$watch_queue(0x0, 0x80) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) (async)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x87fa4000) (async)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) (async)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x84000000000000, 0x2003)
read$msr(r5, &(0x7f0000019680)=""/102392, 0xfffffd1e) (async)
mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000300)=""/81) (async)
socket$inet6(0xa, 0x1, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fac, 0x9)

3m13.110987216s ago: executing program 1 (id=585):
getpid()
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080015"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r1, 0x100000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='1', 0x1)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='1\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='./fi', 0x4)
close(r4)
r5 = openat(0xffffffffffffffff, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='1\n', 0x2)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r6, &(0x7f0000000600)='loop\n', 0x5)
close(r6)
symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
write(r7, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e)
nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1ff)
mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0)

3m11.996454937s ago: executing program 1 (id=588):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r2 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082)
fallocate(r2, 0x11, 0x0, 0x5345)

3m9.291346519s ago: executing program 1 (id=596):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000001010000000000000000000018010000202070250000000000ac207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000008a0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r5 = open$dir(&(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x4a0100, 0x3)
r6 = openat(r5, &(0x7f0000000100)='./proc\x00', 0x2, 0x9)
write(r6, &(0x7f0000000000)='3', 0x1)
epoll_create1(0x80000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x3, 0xffff2d37, 0xffffff01, 0x6, 0xfb, 0x0, 0x5, 0x4, 0x100, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0x1, 0x10, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x4, 0x5, 0x3, 0x8, 0x4, 0x1, 0x2000040], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c8, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x3a, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x443, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x1, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0xff, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x68, 0x1000, 0xa2, 0x7, 0xa9, 0x7, 0x6, 0x0, 0xbf, 0x0, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x512, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0xb5, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x9ceb, 0x7, 0x4, 0x5, 0xb1e, 0x8, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000002294eb630008000300", @ANYRES32, @ANYBLOB="04005b"], 0x20}}, 0x0)

3m8.994643295s ago: executing program 1 (id=597):
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x9}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000100), 0x40)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="2020a9000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e5c6000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="050001"], 0x38}, 0x1, 0x0, 0x0, 0xfb440c942bbb5e5b}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r5, &(0x7f00000002c0)='R', 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x5319a7530c6c2f97, r0, 0x1b5cb000)
r6 = syz_clone(0x3a1a5280, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000480)=0x6)
ioctl$TCSETAF(r8, 0x5408, &(0x7f0000000640)={0x6, 0x13, 0xfac8, 0x3, 0x16, "037a3850b9efa51f"})

3m6.681869386s ago: executing program 1 (id=606):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0xffffffffffffff9e)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0x0, r4, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x2, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x8, {0x0, 0x0, 0x0, 0x8, 0x80000, 0x5, {0x0, 0xb, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0xc000, 0x100004e8, r5, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0xafe, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4, 0x2000, 0x101, r5, r6, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40)
writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)='9', 0x1}], 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000640)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r12=>0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
r14 = dup(r13)
syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0)
timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

3m4.625631853s ago: executing program 34 (id=568):
r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async)
pipe2$watch_queue(0x0, 0x80) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) (async)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x87fa4000) (async)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) (async)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x84000000000000, 0x2003)
read$msr(r5, &(0x7f0000019680)=""/102392, 0xfffffd1e) (async)
mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000300)=""/81) (async)
socket$inet6(0xa, 0x1, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x0, 0x7fff0000}]})
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fac, 0x9)

3m4.483312403s ago: executing program 1 (id=611):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = socket(0x29, 0x1, 0xffffffff)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0)
write(r5, &(0x7f0000000500)='udp 2', 0x5)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r6 = syz_open_dev$sndctrl(0x0, 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000540)={'broute\x00', 0x0, 0x3, 0x7a, [0x2, 0x59bf, 0xfffffffffffffff9, 0x9, 0x7, 0x7], 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000340)=""/122}, &(0x7f00000005c0)=0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000007176000001000100000000064da6f80100000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x18, 0x1407, 0x709, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
getpid()
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x84383, 0x0)

2m49.266430008s ago: executing program 35 (id=611):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = socket(0x29, 0x1, 0xffffffff)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0)
write(r5, &(0x7f0000000500)='udp 2', 0x5)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r6 = syz_open_dev$sndctrl(0x0, 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000540)={'broute\x00', 0x0, 0x3, 0x7a, [0x2, 0x59bf, 0xfffffffffffffff9, 0x9, 0x7, 0x7], 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000340)=""/122}, &(0x7f00000005c0)=0x78)
syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000007176000001000100000000064da6f80100000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x18, 0x1407, 0x709, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
getpid()
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x84383, 0x0)

2m45.263294719s ago: executing program 6 (id=653):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
ioctl$NBD_CLEAR_SOCK(r1, 0xab04)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0)
write(r2, &(0x7f0000000800)='0', 0x1)
write(r2, &(0x7f0000000800)='1', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r6, 0x4000)

2m44.001626672s ago: executing program 6 (id=655):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000015d80), 0x201, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1208000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x880)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
socket$netlink(0x10, 0x3, 0x10)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x1)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11)
ioctl$UI_DEV_CREATE(r4, 0x5501)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000300)={0x14}, 0x14)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000ecc4000000b37f1a009500000000000000c3a3ac15af761990bef76fc949f1ec0ac114d5a7dd99834981fdfef0856e50b2f7914d05a21260fbaf5435604c4ba9f338bee7d2fd2ad76f9df838d4b412290a3c79030dbb84c78a93f197d00afa38fbca1573486d405bf5ba056bcaf61a69c65e0987e4e60e22a32ff8d9378b54097e16c6afef55960154b7fcd226f3dfc90991bc58596854"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000080001c000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f67001400028008000540000003ff060002407d0000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0)
ioctl$UI_DEV_DESTROY(r4, 0x5502)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000002f00090027ad700000000000040000004d621a9d77f5a710608bd6c8ec6b89af0b193675a64dbdce01259d42da7240488a7d4f8c638e99dcc5ff7ad67ba252ebe5ac2fe575f1914a03c86f08d7b0"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0)

2m37.236137433s ago: executing program 6 (id=661):
futex(0x0, 0x80, 0x0, 0x0, 0x0, 0xb0090199)

2m36.978855555s ago: executing program 6 (id=663):
mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1b}, 0x1c)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ppoll(&(0x7f0000000340)=[{r1, 0x101b}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}})
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/loop0/queue/rotational\x00', 0x40402, 0x0)
write(r2, &(0x7f0000000380)='5', 0x1)

2m36.490906677s ago: executing program 6 (id=665):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
syz_clone(0x8000, 0x0, 0xffa0, 0x0, 0x0, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r5, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r4, @ANYBLOB="d80030800c00018008000100010000001400040006c23c949fa2a3989231b403116f0285680001800c00050001000000000000000c0005000f0d0000000000000800010002000000080004000500000008000100030000000c0005000100000001000000050002"], 0xf4}, 0x1, 0x0, 0x0, 0x20048040}, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4)
setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)='h', 0x1}], 0x1, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x800}}], 0x18}, 0x0)
recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1}, 0x140)

2m34.894002221s ago: executing program 6 (id=668):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x40800)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
socket(0x10, 0x80003, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a3c0000000e0a050000000000000000000a0000050900010073797a3100000000100003800c00008008000340000000030900020073797a31000000001400000d1100010000400000000000000500000a"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000270009002abd7000fddbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
r5 = msgget$private(0x0, 0x193)
msgsnd(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0)
msgsnd(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0)
msgsnd(r5, &(0x7f0000000300)=ANY=[@ANYRES8], 0x3f9, 0x0)
msgrcv(r5, &(0x7f00000002c0), 0x8, 0x0, 0x800)

2m19.518988522s ago: executing program 36 (id=668):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x40800)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
socket(0x10, 0x80003, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a3c0000000e0a050000000000000000000a0000050900010073797a3100000000100003800c00008008000340000000030900020073797a31000000001400000d1100010000400000000000000500000a"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000270009002abd7000fddbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
r5 = msgget$private(0x0, 0x193)
msgsnd(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0)
msgsnd(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0)
msgsnd(r5, &(0x7f0000000300)=ANY=[@ANYRES8], 0x3f9, 0x0)
msgrcv(r5, &(0x7f00000002c0), 0x8, 0x0, 0x800)

1m0.248188235s ago: executing program 7 (id=977):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000"], 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2)
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)

59.380133637s ago: executing program 7 (id=984):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x2000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x100, 0x0, 0xfffffffd, {}, [{0x4c, 0x1, [@m_vlan={0x48, 0x3ffc, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x744}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x9, 0x6, "101e02aeed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
munlock(&(0x7f0000623000/0x4000)=nil, 0x4000)
iopl(0x3)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x1, 0x4, 0x2, 0x5})
sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x5, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0)
read(r2, &(0x7f0000000200)=""/10, 0xa)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})

54.214594565s ago: executing program 7 (id=993):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x6})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r2 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r2, 0x0, 0x40000000, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='so\r$#\x83', &(0x7f0000000040)='\xc4T#Y#', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)
r3 = socket$tipc(0x1e, 0x1, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2)
ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, 0x0)
ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000180))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r6], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))

53.486769335s ago: executing program 7 (id=1000):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000006b80)={&(0x7f00000069c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x2, 0xfffffffffffffffe}, {0x5, 0x87}, {0x80000000, 0x80000000000000}, {0xfffffffffffffffe, 0x3}, {0x6}, {0x4, 0x1}, {0x4, 0x1}, {0x81, 0x5c90f878}, {0x80000001, 0x1}, {0x3, 0x3}, {0x3, 0xfff}, {0x5d09, 0x1}, {0x2, 0xffffffff}, {0x589d, 0x100000001}, {0x4, 0x4}, {0x7724f3c7, 0xffffffffffffffff}, {0x6, 0xf7}, {0x7fffffffffffffff, 0x5}, {0x2, 0x3}, {0x81, 0xc}, {0x6, 0x4}, {0xff, 0xfffffffffffff160}, {0x6ad0, 0xe}, {0x800, 0x2}, {0x0, 0xffff}, {0x6}, {0xe90, 0x2}, {0x2, 0x6022e1bd}, {0x200, 0x6}, {0x2}, {0x7ff, 0x40}, {0xf2a2, 0x5}, {0xe, 0xffffffffffffffff}, {0xae, 0x2}, {0x2, 0xfffffffffffffff0}, {0x1, 0x7}, {0x4, 0x100000000}, {0x2}, {0x200, 0xfffffffffffffff2}, {0x7f, 0x8}, {0x7, 0x180000000000000}, {0x400}, {0x0, 0x200}, {0xfff, 0x1ea5}, {0x2, 0x7}, {0x4, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x100, 0x5659}, {0x5, 0x6}, {0x6, 0x14}, {0x66d4, 0xfffffffeffffffff}, {0x9, 0x6}, {0x7, 0x7}, {0x7, 0x96}, {0x9, 0x100000000}, {0x101, 0x4}, {0x3, 0x400}, {0x9, 0x8}, {0x101, 0x5dd}, {0x401, 0xb}, {0x1, 0x1}, {0x6, 0x4}, {0xffffffff, 0x5}, {0x6, 0x41fe}, {0x1, 0x7}, {0x5, 0xfffffffffffffff8}, {0xfffffffffffffffd, 0x7}, {0x4, 0x6}, {0x7, 0xfffffffffffffff1}, {0xfffffffffffffffa, 0x5}, {0x7, 0x4}, {0x1000, 0x4}, {0x8, 0x1}, {0x7, 0x3322}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x6}, {0x200, 0x75}, {0x6, 0x80}, {0x2, 0x18000}, {0xf68, 0x5}, {0x7, 0x400}, {0x400, 0x80}, {0x2}, {0x4, 0x9}, {0x8000000000000000, 0x7}, {0x4c000000}, {0x7fff, 0x7f}, {0x7f, 0x7fff}, {0x0, 0x8}, {0x8, 0x1}, {0x0, 0xa6}, {0x4, 0xffffffff7ffffffb}, {0x5, 0x3}, {0x5, 0x1}, {0x8, 0x4}, {0x2, 0x4}, {0x9d, 0x6320}, {0xd8, 0x1}, {0x0, 0x2}, {0xff, 0x9}, {0x0, 0x1}, {0x4, 0x1}, {0x8000000000000000, 0xffff}, {0x8, 0x10001}, {0x3ff, 0x7}, {0xa8ec, 0x2}, {0x9, 0x8000}, {0xf, 0x16}, {0x8, 0x7}, {0x7, 0x80000001}, {0x80, 0x2}, {0x58}, {0x101, 0x100}, {0x7a, 0x9}, {0x0, 0x2}, {0x0, 0x2}, {0x9, 0x8}, {0x1, 0x5}, {0x0, 0xfffffffffffffff8}, {0x1, 0x8000000000000000}, {0x0, 0xffffffff}, {0x4, 0x2}, {0x6e, 0xcd}, {0x2, 0x4}, {0x0, 0x46}, {0x4, 0xd}, {0x5, 0xffffffffffffffff}, {0x6, 0xef}, {0x7, 0x3}, {0x3, 0x8001}, {0x6f26, 0x1}, {0x7ff, 0x2}, {0x2, 0x60ec}, {0x7, 0x8ee3}, {0x55e1, 0x6}, {0x4, 0x9}, {0x45, 0x2f9c}, {0x679, 0x7}, {0x9, 0x3}, {0x5, 0x3}, {0x80000001, 0x1}, {0x9, 0x2}, {0x100, 0xffff}, {0x7, 0x8000000000000000}, {0x7fffffffffffffff, 0x4}, {0x6, 0x765}, {0x3}, {0x7, 0x1}, {0xfffffffffffffffa, 0x9d2}, {0xa, 0x310d}, {0x2, 0x3}, {0x8, 0x2}, {0x3, 0xfffffffffffffff2}, {0x0, 0xffffffffffffffff}, {0x1, 0x10}, {0xfffffffffffffaa5, 0x1ff}, {0x14e, 0x80}, {0x10001, 0xb}, {0x5, 0x7}, {0x8, 0x4}, {0xfffffffffffffffe, 0x9}, {0x6, 0x4}, {0x6, 0x5}, {0xa, 0xe2}, {0x2, 0xfffffffffffffffd}, {0x6, 0x8000000000000001}, {0x1, 0x7b2}, {0x0, 0x2}, {0x8029, 0x88ce}, {0x8, 0x2af0}, {0x9, 0x716f00000000}, {0x1ff, 0xe}, {0x6, 0x3}, {0xc183, 0x6}, {0x8, 0x8}, {0xfffffffffffff696, 0xb}, {0xef, 0x10001}, {0xfffffffffffffffe, 0x2}, {0x7, 0xffff}, {0x0, 0x1ff}, {0x9, 0x32d2b753}, {0x673, 0x9}, {0x9, 0x145}, {0x3227, 0x1}, {0xb, 0xa1}, {0xb99, 0x9}, {0x2, 0x4}, {0x8000, 0x6}, {0x7f, 0x8}, {0xffffffffffffffc0, 0x80000001}, {0x6, 0x9}, {0x0, 0xe}, {0x6, 0x4}, {0xa, 0x1}, {0x9, 0xb}, {0x5, 0x2}, {0x6, 0xffff}, {0x0, 0x6}, {0x7, 0x5}, {0x74, 0x4}, {0x6, 0xc000000000}, {0x8, 0x6}, {0x2, 0x1}, {0x3, 0x3}, {0xfffffffffffff000, 0x1}, {0x3a96, 0x2}, {0x6, 0xfffffffffffffff7}, {0x10000}, {0x2, 0x2}, {0x5, 0x8}, {0x0, 0x7}, {0x8, 0x1}, {0x3, 0x4}, {0x0, 0x6}, {0x8, 0x6}, {0x4, 0x6}, {0x400, 0x8001}, {0x7, 0x3ff}, {0x1, 0x1000}, {0x4}, {0x1, 0x7}, {0xffffffffffffffff, 0x6}, {0x18, 0x9}, {0x7, 0x2}, {0x9, 0x8}, {0x7ff, 0x3}, {0x8}, {0x6, 0x7fffffff}, {0x0, 0x1915}, {0x8001, 0x5}, {0x7fffffffffffffff, 0x3}, {0x8, 0x7}, {0x2, 0x400}, {0x7, 0x7}, {0x1}, {0x6, 0x3}, {0x9, 0x216a3f5d}, {0x2, 0x850}, {0xdfec}, {0x80000001, 0x2}, {0x6, 0xd}, {0x7, 0x6}, {0x3, 0x4}, {0x1, 0x8}, {0x6, 0x1}, {0x7, 0x1000}, {0x10, 0x2}, {0x5489, 0x2bb}, {0xf, 0x7}, {0x4b, 0xffffffffffff0001}, {0x6}, {0x80, 0xf9b3}, {0xffff, 0x9b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/current\x00')
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000480)=ANY=[@ANYBLOB], 0x104, 0x2)
fcntl$setstatus(r1, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
unshare(0x2a020480)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20160100, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a000000050001000700ff01000000000000ac75d749b3a47836a7edce6f7a3f6ed82c38a14736ab557b6011da34bffab0482edfd435fa0f3d02a2e10627e2df4c6aec11dab62c274723d0ad4d48177461beda2cb0ef77257a9512fbb3e8e020"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
fallocate(r4, 0x0, 0x8e14, 0x8ffff)

52.14341827s ago: executing program 7 (id=1005):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x7, 0xffffffff}, 0xc)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x88}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x1, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad69, 0x2000, 0x4003bfff, 0x1b1, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

51.313497095s ago: executing program 9 (id=1009):
r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff000705810240000007050102400000070582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x14, 0x0)

51.154957109s ago: executing program 7 (id=1011):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000"], 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r1 = socket(0x1e, 0x4, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)

49.432590513s ago: executing program 37 (id=1011):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000"], 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r1 = socket(0x1e, 0x4, 0x0)
connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)

49.390839037s ago: executing program 9 (id=1016):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x1000000}, 0x0, [0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x2000000, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x1, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x40800000000000, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x10, 0xfffffffffffffffe, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x40, 0x0, 0x59ed, 0x1000000000000000, 0x0, 0x4001ff, 0x0, 0x0, 0x0, 0x3, 0xd, 0x100000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x8, 0x2, 0x0, 0x80000000000, 0x0, 0x3f92, 0x0, 0x0, 0xb4b, 0x1, 0x0, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]})
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000600)={0x73622a85, 0x1005, 0x2})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x60, 0x0, &(0x7f0000000e00)=[@acquire_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000d40)={@ptr={0x70742a85, 0x0, &(0x7f0000000c80)=""/161, 0xa1, 0x0, 0x18}, @fda={0x66646185, 0x3, 0x2, 0x5}, @fda={0x66646185, 0x3, 0x0, 0x27}}, &(0x7f0000000dc0)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xb0, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x50, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x100, 0x2}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0xa, 0x1, 0x34}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}}, @exit_looper], 0xfffffffffffffd54, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x440}], 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "375ac603", "3d8efa05fdffffff"}, 0x28)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r6)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="685d5ccdb85405fe0029ccd4a8282e63b52862c5ef871dc15fea034d5aa4792008b74d1d06de7e2ef8ec148241be0e2990a2e012c032f1e6070586813bc2f91fe88a5e36c2de9f344612e4a7251cee44383a9050e2e106fb4c0eccd08625cfa2a2368ab9cdf5a3784099f947360b12b16d16f01234c32a2f26094d84dcad9eb95ed8907a13587f2dcbe017c32333765cf642c18713675cb584211fd849d9df560982c4b2ce9c62a6f3134673b5c0eb4af6dc59af7064025a5c08892c4d2fa8c252b139397b8892ec2e60342ab06cea6c8e0ba633f720ba", @ANYRES32=r0, @ANYBLOB="0104ea7a6367b1a386000000000017000000400006803c00040867636d2861657329000006000000000000000000000000000000000000000001020304f5cb5ab5d953e7b82f644c216180fc9c1e85b49c0328f9200521a725363050d1c40d0546aca4dd6a11fa73951ef809d211e16dce9f8d7da5fcf7ec39578f75ff98e34721dab12214cfe4d5cbb232f29d0a9d301f4cc28a4c3a3371501766554d5a27739346181d5ba0c3dcdd0045c9c035eb9205241d5ad40d87b528294c947bb3d6e2cb0507477413f397976927d75395800a144a49b019e6c23a8619c1ed0000"], 0x54}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adae91e8816ec", "de0000006deed7f21d74bc440900", "f0eddfc6", "fc4bd6b33a9b93ca"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x6dd, &(0x7f0000000240)={0x0, 0xee0c, 0x80, 0x0, 0x156}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000640))

47.45131197s ago: executing program 9 (id=1020):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
listen(r0, 0x7)
r1 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

46.658091896s ago: executing program 9 (id=1022):
bpf$MAP_CREATE(0x18000000, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)

46.354738086s ago: executing program 9 (id=1024):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
fstat(r0, &(0x7f0000004540))
sendmsg$netlink(r0, &(0x7f0000004700)={&(0x7f0000000400)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xc, &(0x7f00000046c0), 0x0, 0x0, 0x0, 0x800}, 0x400c081)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', <r2=>0x0})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0xdc3, 0x143000)
syz_usb_disconnect(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, 0x0)
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000280))
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x14b5, 0x6, 0x1, 0x80}}}}]}, 0x48}}, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f0000000300), 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r8, 0x100000000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0xa}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69700000616300000005000400000000000900020073797a3000000000240007800400028008000640000000020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)

42.461495241s ago: executing program 9 (id=1035):
r0 = socket(0x1e, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x1a)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)
sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r0, 0x0)
r5 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$nfc_llcp(r0, 0x0, 0x0, 0x0)
sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x20040001)

26.981953166s ago: executing program 38 (id=1035):
r0 = socket(0x1e, 0x5, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x1a)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)
sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r0, 0x0)
r5 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
accept4$nfc_llcp(r0, 0x0, 0x0, 0x0)
sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x10}, 0x20040001)

10.915040901s ago: executing program 3 (id=1124):
socket$kcm(0x21, 0x2, 0xa)
openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1bd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
sendto$inet6(r2, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x8d)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)

10.534771097s ago: executing program 0 (id=1125):
r0 = socket$inet6(0xa, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x25dfdbfd, {0xa, 0xef}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x2c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48)
syz_emit_vhci(0x0, 0x14)
socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='bfs\x00', 0x2208004, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c})
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

8.821925574s ago: executing program 3 (id=1128):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000002c0))
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='pstore\x00', 0x2, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r7=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000001c0)={0x8, "b546baa5cc590d30d4d8b40d29968173b959ebab028deda525e19bdeffafde25", <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000780)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", r8, <r9=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r9, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = dup3(r2, 0xffffffffffffffff, 0x80000)
read$sequencer(r10, &(0x7f0000000000)=""/64, 0x40)
mount$9p_unix(0x0, 0x0, 0x0, 0x0, 0x0)
r11 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r12=>0x0, &(0x7f0000000280)=<r13=>0x0, &(0x7f0000000140)=<r14=>0x0)
syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r15=>0x0)
r16 = socket$inet6_tcp(0xa, 0x1, 0x0)
r17 = dup(r16)
syz_ublk_setup_queues(r17, r15, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x801, 0x255, 0x0, r11}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000001}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x20000, 0x2, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x401f0, 0x0, r17}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ff0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
r18 = socket$inet6_tcp(0xa, 0x1, 0x0)
r19 = dup(r18)
syz_ublk_setup_queues(r19, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r19, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xd)

8.816563185s ago: executing program 0 (id=1129):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x8900)
ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000000)=0x2000000)
socket$netlink(0x10, 0x3, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r4, 0xc138fd0d, &(0x7f0000000000)="040000")

7.940425063s ago: executing program 3 (id=1130):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x34, 0x66, 0xd4, 0x20, 0x921, 0x1000, 0xe7cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x9, 0x10, 0x8, "", [{{0x9, 0x4, 0x40, 0x3, 0x0, 0x53, 0xf5, 0xdb, 0x39}}]}}]}}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0})
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000004)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x4}}, './proc\x00'})
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x6, 0x3, 0x1, 0x5}, 'syz1\x00', 0x34})
r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000cbc000/0x1000)=nil, r2, 0x2000000, 0x110, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
write(r3, &(0x7f0000000000)='7', 0x1)
ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

7.351883838s ago: executing program 0 (id=1133):
syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f700000001090212000180000000090400"], 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001000700"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r5=>0x0)
connect$nfc_raw(r4, &(0x7f00000003c0)={0x27, r5, 0xffffffffffffffff, 0x1}, 0x10)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)
r6 = getpgrp(0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x2, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0)
r9 = getpid()
sched_setscheduler(r9, 0x1, &(0x7f0000000100)=0x5)
sched_setscheduler(r9, 0x6, &(0x7f0000000400)=0x8)
r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32)
syz_usb_connect$cdc_ecm(0x2, 0x125, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x1, 0x1, 0x3, 0x20, 0x8, "", [{{0x9, 0x4, 0x0, 0x26, 0x4, 0x2, 0x6, 0x0, 0x2, {{0x6, 0x24, 0x6, 0x0, 0x0, 'x'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x9c, 0x1}, [@country_functional={0xe, 0x24, 0x7, 0x9, 0x1f5, [0xfff8, 0x0, 0x51, 0x9]}, @mdlm_detail={0xc0, 0x24, 0x13, 0x7, "1a8678afbca31a4823eba02d5637755d757ac49ec91a5745a950fd0a1c68d23bb10f4aac95e0609dd41a0ad00affdccc10c1bdf304912c1d1253b45a8913cf2f67299c581820e79743028885b6bbbca0c9f074a7f40992b6ebe001322eefee75042332fce73480e0136b86f336291d83acd74b6a7228318e98b3cc76dc2c9e8558c58a71ee3dac23931eac14f5a36bf0e1688d812b81c6a4e6bd464feff737981b744292e9fd1f3c27e932b132d928753d973226860d476d149d9fd0"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1c, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x1bf, 0x4d, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x60, 0xfe, 0xf0}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x4, 0x9, 0x4, 0x20, 0x7f}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0x79, &(0x7f00000001c0)=ANY=[@ANYBLOB="790370f539711af49830081c9bbe7278d9d10c5ff8d4271fac7b738a8bb837f8ea68c0a97d600e83652ec000c4d9a11ab959a25d3600d3626a18b2ae4d42f743af561eba182a2f0f0157fd55110d03ce3f80b4673440594edd6f63fc8fcf226b610712c486256643bfb1ada484b1ec7480b5c16231e0d427b4"]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81d}}]})

6.639368998s ago: executing program 4 (id=1134):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000006b80)={&(0x7f00000069c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x2, 0xfffffffffffffffe}, {0x5, 0x87}, {0x80000000, 0x80000000000000}, {0xfffffffffffffffe, 0x3}, {0x6}, {0x4, 0x1}, {0x4, 0x1}, {0x81, 0x5c90f878}, {0x80000001, 0x1}, {0x3, 0x3}, {0x3, 0xfff}, {0x5d09, 0x1}, {0x2, 0xffffffff}, {0x589d, 0x100000001}, {0x4, 0x4}, {0x7724f3c7, 0xffffffffffffffff}, {0x6, 0xf7}, {0x7fffffffffffffff, 0x5}, {0x2, 0x3}, {0x81, 0xc}, {0x6, 0x4}, {0xff, 0xfffffffffffff160}, {0x6ad0, 0xe}, {0x800, 0x2}, {0x0, 0xffff}, {0x6}, {0xe90, 0x2}, {0x2, 0x6022e1bd}, {0x200, 0x6}, {0x2}, {0x7ff, 0x40}, {0xf2a2, 0x5}, {0xe, 0xffffffffffffffff}, {0xae, 0x2}, {0x2, 0xfffffffffffffff0}, {0x1, 0x7}, {0x4, 0x100000000}, {0x2}, {0x200, 0xfffffffffffffff2}, {0x7f, 0x8}, {0x7, 0x180000000000000}, {0x400}, {0x0, 0x200}, {0xfff, 0x1ea5}, {0x2, 0x7}, {0x4, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x100, 0x5659}, {0x5, 0x6}, {0x6, 0x14}, {0x66d4, 0xfffffffeffffffff}, {0x9, 0x6}, {0x7, 0x7}, {0x7, 0x96}, {0x9, 0x100000000}, {0x101, 0x4}, {0x3, 0x400}, {0x9, 0x8}, {0x101, 0x5dd}, {0x401, 0xb}, {0x1, 0x1}, {0x6, 0x4}, {0xffffffff, 0x5}, {0x6, 0x41fe}, {0x1, 0x7}, {0x5, 0xfffffffffffffff8}, {0xfffffffffffffffd, 0x7}, {0x4, 0x6}, {0x7, 0xfffffffffffffff1}, {0xfffffffffffffffa, 0x5}, {0x7, 0x4}, {0x1000, 0x4}, {0x8, 0x1}, {0x7, 0x3322}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x6}, {0x200, 0x75}, {0x6, 0x80}, {0x2, 0x18000}, {0xf68, 0x5}, {0x7, 0x400}, {0x400, 0x80}, {0x2}, {0x4, 0x9}, {0x8000000000000000, 0x7}, {0x4c000000}, {0x7fff, 0x7f}, {0x7f, 0x7fff}, {0x0, 0x8}, {0x8, 0x1}, {0x0, 0xa6}, {0x4, 0xffffffff7ffffffb}, {0x5, 0x3}, {0x5, 0x1}, {0x8, 0x4}, {0x2, 0x4}, {0x9d, 0x6320}, {0xd8, 0x1}, {0x0, 0x2}, {0xff, 0x9}, {0x0, 0x1}, {0x4, 0x1}, {0x8000000000000000, 0xffff}, {0x8, 0x10001}, {0x3ff, 0x7}, {0xa8ec, 0x2}, {0x9, 0x8000}, {0xf, 0x16}, {0x8, 0x7}, {0x7, 0x80000001}, {0x80, 0x2}, {0x58}, {0x101, 0x100}, {0x7a, 0x9}, {0x0, 0x2}, {0x0, 0x2}, {0x9, 0x8}, {0x1, 0x5}, {0x0, 0xfffffffffffffff8}, {0x1, 0x8000000000000000}, {0x0, 0xffffffff}, {0x4, 0x2}, {0x6e, 0xcd}, {0x2, 0x4}, {0x0, 0x46}, {0x4, 0xd}, {0x5, 0xffffffffffffffff}, {0x6, 0xef}, {0x7, 0x3}, {0x3, 0x8001}, {0x6f26, 0x1}, {0x7ff, 0x2}, {0x2, 0x60ec}, {0x7, 0x8ee3}, {0x55e1, 0x6}, {0x4, 0x9}, {0x45, 0x2f9c}, {0x679, 0x7}, {0x9, 0x3}, {0x5, 0x3}, {0x80000001, 0x1}, {0x9, 0x2}, {0x100, 0xffff}, {0x7, 0x8000000000000000}, {0x7fffffffffffffff, 0x4}, {0x6, 0x765}, {0x3}, {0x7, 0x1}, {0xfffffffffffffffa, 0x9d2}, {0xa, 0x310d}, {0x2, 0x3}, {0x8, 0x2}, {0x3, 0xfffffffffffffff2}, {0x0, 0xffffffffffffffff}, {0x1, 0x10}, {0xfffffffffffffaa5, 0x1ff}, {0x14e, 0x80}, {0x10001, 0xb}, {0x5, 0x7}, {0x8, 0x4}, {0xfffffffffffffffe, 0x9}, {0x6, 0x4}, {0x6, 0x5}, {0xa, 0xe2}, {0x2, 0xfffffffffffffffd}, {0x6, 0x8000000000000001}, {0x1, 0x7b2}, {0x0, 0x2}, {0x8029, 0x88ce}, {0x8, 0x2af0}, {0x9, 0x716f00000000}, {0x1ff, 0xe}, {0x6, 0x3}, {0xc183, 0x6}, {0x8, 0x8}, {0xfffffffffffff696, 0xb}, {0xef, 0x10001}, {0xfffffffffffffffe, 0x2}, {0x7, 0xffff}, {0x0, 0x1ff}, {0x9, 0x32d2b753}, {0x673, 0x9}, {0x9, 0x145}, {0x3227, 0x1}, {0xb, 0xa1}, {0xb99, 0x9}, {0x2, 0x4}, {0x8000, 0x6}, {0x7f, 0x8}, {0xffffffffffffffc0, 0x80000001}, {0x6, 0x9}, {0x0, 0xe}, {0x6, 0x4}, {0xa, 0x1}, {0x9, 0xb}, {0x5, 0x2}, {0x6, 0xffff}, {0x0, 0x6}, {0x7, 0x5}, {0x74, 0x4}, {0x6, 0xc000000000}, {0x8, 0x6}, {0x2, 0x1}, {0x3, 0x3}, {0xfffffffffffff000, 0x1}, {0x3a96, 0x2}, {0x6, 0xfffffffffffffff7}, {0x10000}, {0x2, 0x2}, {0x5, 0x8}, {0x0, 0x7}, {0x8, 0x1}, {0x3, 0x4}, {0x0, 0x6}, {0x8, 0x6}, {0x4, 0x6}, {0x400, 0x8001}, {0x7, 0x3ff}, {0x1, 0x1000}, {0x4}, {0x1, 0x7}, {0xffffffffffffffff, 0x6}, {0x18, 0x9}, {0x7, 0x2}, {0x9, 0x8}, {0x7ff, 0x3}, {0x8}, {0x6, 0x7fffffff}, {0x0, 0x1915}, {0x8001, 0x5}, {0x7fffffffffffffff, 0x3}, {0x8, 0x7}, {0x2, 0x400}, {0x7, 0x7}, {0x1}, {0x6, 0x3}, {0x9, 0x216a3f5d}, {0x2, 0x850}, {0xdfec}, {0x80000001, 0x2}, {0x6, 0xd}, {0x7, 0x6}, {0x3, 0x4}, {0x1, 0x8}, {0x6, 0x1}, {0x7, 0x1000}, {0x10, 0x2}, {0x5489, 0x2bb}, {0xf, 0x7}, {0x4b, 0xffffffffffff0001}, {0x6}, {0x80, 0xf9b3}, {0xffff, 0x9b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/current\x00')
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100), &(0x7f0000000480)=ANY=[@ANYBLOB], 0x104, 0x2)
fcntl$setstatus(r0, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
unshare(0x2a020480)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20160100, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
fallocate(r2, 0x0, 0x8e14, 0x8ffff)

4.62988187s ago: executing program 4 (id=1136):
r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00')
read$FUSE(r1, &(0x7f0000006280)={0x2020}, 0x2020)
syz_usb_ep_read(r0, 0xd, 0x6, &(0x7f0000000140))

4.470877775s ago: executing program 3 (id=1138):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)="876d95"})
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040050bbe1a00000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0)
recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/197, 0xc5}], 0x1}, 0x2}], 0x1, 0x100, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x42, &(0x7f0000001440)={@random="67ed837beee5", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @udp={0x4, 0x6, "1575cf", 0xc, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, {[], {0x4e22, 0x4e24, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x6, 0x0, @void}}}}}}}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000004010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

4.104353361s ago: executing program 0 (id=1141):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x1, 0x3]}, 0x8)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r1, &(0x7f0000000800)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14)
bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @local}, 0x14)
syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
read$FUSE(r5, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random="e90c610faca2", @empty, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @local}, {0x0, 0x0, 0x8}}}}}, 0x0)
r6 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='mon_addr\x00', &(0x7f0000000200)='127.0.0.1:6789\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='127.0.0.1:6789:/tmp\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0x8)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1000000dce8)

3.427613582s ago: executing program 5 (id=1143):
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x82000000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendmmsg(r6, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000071, 0x0, 0x4}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.269880684s ago: executing program 8 (id=1144):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

3.082573073s ago: executing program 8 (id=1145):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000014)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6}}}}]}, 0x48}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r6, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r7, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
fadvise64(r8, 0x8, 0xd, 0x4)
r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x440800, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x11, r9, 0x3976e000)

2.833301289s ago: executing program 4 (id=1146):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x137e8763730e4e42, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x9}}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x4004, @local}, 0x10, 0x0}, 0x34004095)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

2.80296637s ago: executing program 5 (id=1147):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x8)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
socket(0x10, 0x803, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0xfc6f, 0x0, 0x0, &(0x7f0000000640), 0xc0}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x110000)
close(r3)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2.720591341s ago: executing program 8 (id=1148):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x440000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000300), &(0x7f0000000d80)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000780)}, 0x20)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f00000004c0)={0x1f, @none}, 0x14)
listen(r4, 0xc)
listen(r3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800010900000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}})
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x35}}})
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
unshare(0x22020600)
setns(r8, 0x24020000)
getpgid(r7)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x37, 0x200f, 0x1})

2.571315242s ago: executing program 4 (id=1149):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
pread64(r0, 0x0, 0x0, 0x10000)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
unshare(0x26020480)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0)
ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000440)={0x2a, 0x1a, 0x36, 0x19, 0x4000006, 0x80, 0x1, 0xef, 0x1})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x2008})
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x14)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff})
r7 = socket(0x2d, 0x2, 0x0)
bind$xdp(r7, &(0x7f0000000080)={0x2d, 0xf, 0x0, 0xc}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x844)
write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="710542"], 0xee)

2.335123556s ago: executing program 8 (id=1150):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
iopl(0x3)
read(r1, &(0x7f00000002c0)=""/153, 0x99)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0xffff, 0x0, 0xab657d2f438ba58f, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0xfffffffffffffff9}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in=@multicast1, 0x0, 0x3, 0x2, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x10, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000900)=0x15)
io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x869d, 0x2, 0xffffffff, 0x5fb})
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfffffffffffff566, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5)

2.30245071s ago: executing program 3 (id=1151):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80, 0x7fffffff}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r1, 0x3)
r2 = accept4(r1, 0x0, 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
connect$llc(r2, 0x0, 0xfffffedf)
syz_emit_vhci(0x0, 0x11)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000000000000000000000000000061198c00000000009500"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r6, 0x25, 0x0, @void}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000140)={0x3ff, 0xb})
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r8=>0x0}, 0x0)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r9, r7, 0x3e, r7}, 0x5)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r10, &(0x7f00000006c0)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000001c0)='{\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x2)

1.903436502s ago: executing program 0 (id=1152):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x100001)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0xc0385720, &(0x7f0000000000))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r3], 0x1c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)

1.705702001s ago: executing program 0 (id=1153):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008460d11200001000000010902200001010080320904000002ff0000000705810310000a07050203"], 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1.68895783s ago: executing program 5 (id=1154):
r0 = socket$kcm(0x2b, 0x1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000ad15835f94f1bd72e42da19dd6f68270f59871e7c221cee5740400a67d4ea9d1f7eed37601d78e9a5e0da676e478e3c4640e95e47ce33f842480c664cc23e4e238e4f62d909c6e5fffc94e1fb3567c280a5fed466ab234bd82c9cc312db836d651f69715004df2b162c6f1b4af4692e56fb02390ff0d81e443823b12fe4e38c60660a19739dd3e74b86175a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45)
close(r0)

1.486188692s ago: executing program 4 (id=1155):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000004002060500000000000000000007000000140007800800114000000040080012400000ffff0500010006000800050005000a00000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

1.406751455s ago: executing program 4 (id=1156):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004c00)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x9}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r1, 0x5)
getpgid(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29)
write(r5, &(0x7f0000000000)='7', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1004}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f046})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000000020603000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000300000005000100060000001c00078006000440ffff0000060005400000000008000840000000fc"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680))
syslog(0x2, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x48890)

1.405438079s ago: executing program 5 (id=1157):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', <r3=>0x0})
epoll_create1(0x0)
r4 = epoll_create1(0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1f4, r4, &(0x7f0000000000)={0xa0000001})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbec250900000008000700", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000)

1.243634261s ago: executing program 8 (id=1158):
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4048882)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x10}], 0x1, 0x40800)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xffff, @multicast2}, {0x2, 0x200, @empty}, {0x2, 0x4e24, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x2)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0xa, 0x5, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103)
r5 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r5, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
ioctl(r6, 0x541b, 0x0)
ioctl(r6, 0x5451, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x3, &(0x7f0000000800)=""/4062, &(0x7f0000000000)=0xfde)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x371, &(0x7f0000000040)={0x0, 0x2151, 0x8, 0x3, 0xc1})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2)

1.150021498s ago: executing program 5 (id=1159):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
sendmsg$rds(r0, 0x0, 0x8841)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x2)
recvmmsg(r5, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@any, 0xffffffff}, 0x1, 0x2, 0x1010002})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0)
mount(0x0, &(0x7f0000000100)='./sys\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/file0\x00', 0x1, 0x0)
write(r7, &(0x7f0000000300), 0x0)
close(r7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001540)={0x2, 0x0, [{0x10000, 0xd1, &(0x7f0000000440)=""/209}, {0xd000, 0x1000, &(0x7f0000000540)=""/4096}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0)
symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00')

1.106794683s ago: executing program 3 (id=1160):
mkdirat(0xffffffffffffffff, 0x0, 0x9)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x880a}, @val={0x2, 0x1, 0x0, 0x8, 0xfffa, 0x7}, @eth={@random="d06d6558b77d", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@mpls_mc={0x8864, {[], @ipv6=@udp={0xe, 0x6, "22a577", 0x64, 0x11, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[], {0x4e22, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "2db8870d38857cee26893eb1093477fe10bcf27c89ae1dc4ed36c1c32a384c93", "93d7db5c03de28d26f7bf944ab0e4f10", {"d282b297362c2b25cee711c9c69b1159", "4def0d0ed696b812a9690d7da706265a"}}}}}}}}}}, 0xac)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYRES8], 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x65)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0x7, @remote, 0xffffffb9}}, 0xc, 0x1, 0x6, 0x6, 0xe6, 0x2, 0xe0}, 0x9c)

33.4242ms ago: executing program 5 (id=1161):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_DST={0x8, 0x1, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0)
ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1002, 0x4})

0s ago: executing program 8 (id=1162):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x20, 0x0, 0x0, 0x3}, 0x22)
fcntl$lock(r4, 0x25, &(0x7f0000000080)={0x1, 0x4, 0x80000000, 0x87, r0})
openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x20002, 0x2, {0x0, 0x8}, 0x6, 0x6})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

kernel console output (not intermixed with test programs):

00][ T6820] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.927947][ T6820] usb 9-1: config 0 interface 0 has no altsetting 0
[  363.927993][ T6820] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.957681][ T6820] usb 9-1: config 0 descriptor??
[  364.414556][ T9674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.479895][ T9674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.529060][ T6820] usbhid 9-1:0.0: can't add hid device: -71
[  364.535264][ T6820] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  364.548034][ T6820] usb 9-1: USB disconnect, device number 12
[  364.833224][ T9692] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  364.833256][ T9692] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  364.833345][ T9692] vhci_hcd vhci_hcd.0: Device attached
[  364.923185][ T9692] binder: 9689:9692 ioctl 4018620d 0 returned -22
[  364.992436][ T9694] vhci_hcd: connection closed
[  364.994425][   T85] vhci_hcd vhci_hcd.3: stop threads
[  364.994479][   T85] vhci_hcd vhci_hcd.3: release socket
[  364.994633][   T85] vhci_hcd vhci_hcd.3: disconnect device
[  365.030325][ T6816] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  365.040402][ T6820] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  365.190795][ T6820] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  365.202681][ T6820] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.202725][ T6820] usb 9-1: config 0 interface 0 has no altsetting 0
[  365.202757][ T6820] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.239752][ T6820] usb 9-1: config 0 descriptor??
[  365.315678][ T6810] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  365.520543][ T5703] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  365.562383][ T6810] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  365.566281][ T6810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.566311][ T6810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.566343][ T6810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.568371][ T6810] usb 1-1: config 0 descriptor??
[  365.680347][ T5703] usb 10-1: device descriptor read/64, error -71
[  365.701246][ T6820] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.000F/input/input40
[  365.914574][ T6820] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0
[  365.928543][ T5703] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  366.026900][ T6810] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0
[  366.026949][ T6810] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0
[  366.026969][ T6810] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0
[  366.026985][ T6810] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0
[  366.027001][ T6810] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0
[  366.065562][ T5703] usb 10-1: device descriptor read/64, error -71
[  366.077058][ T6810] playstation 0003:054C:0DF2.0010: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  366.170474][ T5703] usb usb10-port1: attempt power cycle
[  366.291619][ T6810] playstation 0003:054C:0DF2.0010: Failed to retrieve feature with reportID 9: -32
[  366.291654][ T6810] playstation 0003:054C:0DF2.0010: Failed to retrieve DualSense pairing info: -32
[  366.291702][ T6810] playstation 0003:054C:0DF2.0010: Failed to get MAC address from DualSense
[  366.291715][ T6810] playstation 0003:054C:0DF2.0010: Failed to create dualsense.
[  366.375848][ T9701] overlay: Unknown parameter 'fsmagic'
[  366.520453][ T5703] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  366.551303][ T5703] usb 10-1: device descriptor read/8, error -71
[  366.561021][ T6820] usb 9-1: USB disconnect, device number 13
[  366.748287][ T6810] playstation 0003:054C:0DF2.0010: probe with driver playstation failed with error -32
[  366.790262][ T5703] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  366.820892][ T5703] usb 10-1: device descriptor read/8, error -71
[  366.931306][ T5703] usb usb10-port1: unable to enumerate USB device
[  368.653940][ T6820] usb 1-1: USB disconnect, device number 65
[  368.974078][ T9740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.921'.
[  369.280542][ T5718] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  369.480535][ T6820] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  369.583209][ T5718] usb 10-1: unable to get BOS descriptor or descriptor too short
[  369.592304][ T5718] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40
[  369.620998][ T5718] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8
[  369.640254][ T5718] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.661733][ T5718] usb 10-1: Product: syz
[  369.662742][ T6820] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  369.671154][ T6820] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  369.671177][ T6820] usb 1-1: Product: syz
[  369.671190][ T6820] usb 1-1: SerialNumber: syz
[  369.682412][ T6820] usb 1-1: config 0 descriptor??
[  369.720819][ T5718] usb 10-1: Manufacturer: syz
[  369.731856][ T5718] usb 10-1: SerialNumber: syz
[  369.778678][ T9738] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  369.902927][ T6820] hso 1-1:0.0: Failed to find BULK eps
[  370.108565][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.921'.
[  370.170808][ T9754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.171136][ T9754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.390336][ T9738] sd 0:0:1:0: PR command failed: 1026
[  370.390390][ T9738] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  370.390439][ T9738] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  370.427755][ T5718] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  370.436431][ T5718] usb 10-1: MIDIStreaming interface descriptor not found
[  370.550830][ T5718] usb 10-1: USB disconnect, device number 13
[  370.554715][ T9756] openvswitch: netlink: Message has 13076 unknown bytes.
[  370.554769][ T9756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.903747][   T30] audit: type=1400 audit(370.856:1708): avc:  denied  { mount } for  pid=9759 comm="syz.8.924" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[  370.956880][   T30] audit: type=1400 audit(370.906:1709): avc:  denied  { ioctl } for  pid=9759 comm="syz.8.924" path="net:[4026534177]" dev="nsfs" ino=4026534177 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  371.355253][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  371.380518][ T6810] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  371.541162][ T6810] usb 4-1: Using ep0 maxpacket: 32
[  371.548821][ T6810] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  371.559493][ T6810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.582230][ T6810] usb 4-1: config 0 descriptor??
[  371.609865][ T6810] as10x_usb: device has been detected
[  371.610615][ T6810] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  371.635084][ T9766] No such timeout policy "syz1"
[  371.695813][ T6810] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  372.599581][ T6810] as10x_usb: error during firmware upload part1
[  372.607397][ T6810] Registered device nBox DVB-T Dongle
[  372.814766][ T5703] usb 4-1: USB disconnect, device number 42
[  372.847646][ T6810] usb 1-1: USB disconnect, device number 66
[  372.957470][ T9773] support for cryptoloop has been removed.  Use dm-crypt instead.
[  373.038284][ T5703] Unregistered device nBox DVB-T Dongle
[  373.040850][ T5703] as10x_usb: device has been disconnected
[  373.153256][ T9773] openvswitch: netlink: Message has 13076 unknown bytes.
[  373.160729][ T9773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.274252][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  373.274316][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  374.161474][ T5703] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  374.226563][ T9796] fuse: Bad value for 'fd'
[  374.291520][ T5703] usb 1-1: device descriptor read/64, error -71
[  374.390467][ T6810] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  374.399586][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.936'.
[  374.399639][ T9798] netlink: 20 bytes leftover after parsing attributes in process `syz.7.936'.
[  375.335225][ T5703] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  375.362622][ T6810] usb 9-1: Using ep0 maxpacket: 16
[  375.368327][ T6810] usb 9-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  375.378741][ T6810] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  375.378799][ T6810] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.408122][ T6810] usb 9-1: config 0 descriptor??
[  375.472148][ T5703] usb 1-1: device descriptor read/64, error -71
[  375.710555][ T5703] usb usb1-port1: attempt power cycle
[  376.250322][   T30] audit: type=1400 audit(375.806:1710): avc:  denied  { write } for  pid=9809 comm="syz.7.940" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[  376.290562][ T5703] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  376.315309][ T5703] usb 1-1: device descriptor read/8, error -71
[  376.550282][ T5703] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  376.573096][ T5703] usb 1-1: device descriptor read/8, error -71
[  376.644406][ T9793] No such timeout policy "syz1"
[  376.680932][ T5703] usb usb1-port1: unable to enumerate USB device
[  376.704752][ T6810] usb 9-1: USB disconnect, device number 14
[  377.796866][ T6810] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  378.038358][ T6810] usb 1-1: Using ep0 maxpacket: 32
[  378.071462][ T9819] netlink: 56 bytes leftover after parsing attributes in process `syz.0.942'.
[  378.141525][ T9819] FAULT_INJECTION: forcing a failure.
[  378.141525][ T9819] name failslab, interval 1, probability 0, space 0, times 0
[  378.141582][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: syz.0.942 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  378.141614][ T9819] Tainted: [L]=SOFTLOCKUP
[  378.141623][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  378.141634][ T9819] Call Trace:
[  378.141642][ T9819]  <TASK>
[  378.141652][ T9819]  dump_stack_lvl+0x100/0x190
[  378.141684][ T9819]  should_fail_ex.cold+0x5/0xa
[  378.141710][ T9819]  should_failslab+0xc2/0x120
[  378.141727][ T9819]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  378.141740][ T9819]  ? xas_split_alloc+0x182/0x530
[  378.141759][ T9819]  xas_split_alloc+0x182/0x530
[  378.141779][ T9819]  __folio_split+0x95e/0x1bf0
[  378.141816][ T9819]  ? __pfx___folio_split+0x10/0x10
[  378.141842][ T9819]  ? folio_alloc_swap+0xbd8/0x1e70
[  378.141868][ T9819]  ? folio_alloc_swap+0x4c6/0x1e70
[  378.141885][ T9819]  shmem_writeout+0x786/0x1a00
[  378.141905][ T9819]  ? __pfx_shmem_writeout+0x10/0x10
[  378.141919][ T9819]  ? __pfx_try_to_unmap+0x10/0x10
[  378.141942][ T9819]  ? find_held_lock+0x2b/0x80
[  378.141969][ T9819]  ? inode_to_bdi+0x9e/0x160
[  378.141996][ T9819]  ? folio_clear_dirty_for_io+0x178/0x960
[  378.142027][ T9819]  shrink_folio_list+0x399a/0x5e40
[  378.142053][ T9819]  ? __pfx_shrink_folio_list+0x10/0x10
[  378.142068][ T9819]  ? lock_acquire+0x1d1/0x380
[  378.142084][ T9819]  ? find_held_lock+0x2b/0x80
[  378.142113][ T9819]  ? clockevents_program_event+0x23e/0x820
[  378.142141][ T9819]  ? __css_rstat_updated+0x1ce/0x590
[  378.142162][ T9819]  ? __pfx___css_rstat_updated+0x10/0x10
[  378.142176][ T9819]  ? ktime_get+0x9f/0x320
[  378.142201][ T9819]  ? __lock_acquire+0x4c5/0x1ec0
[  378.142214][ T9819]  ? __css_rstat_updated+0x1ce/0x590
[  378.142234][ T9819]  ? __pfx___css_rstat_updated+0x10/0x10
[  378.142259][ T9819]  reclaim_folio_list+0xe9/0x5e0
[  378.142284][ T9819]  ? __pfx_reclaim_folio_list+0x10/0x10
[  378.142305][ T9819]  ? __mod_memcg_lruvec_state+0x18c/0x5b0
[  378.142323][ T9819]  ? lru_gen_update_size+0x431/0xe20
[  378.142340][ T9819]  ? lru_gen_del_folio+0x382/0x5f0
[  378.142353][ T9819]  reclaim_pages+0x428/0x5e0
[  378.142371][ T9819]  ? __pfx_reclaim_pages+0x10/0x10
[  378.142405][ T9819]  ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0
[  378.142433][ T9819]  ? folio_isolate_lru+0xd6/0xe90
[  378.142456][ T9819]  madvise_cold_or_pageout_pte_range+0x147e/0x27b0
[  378.142479][ T9819]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  378.142499][ T9819]  ? is_bpf_text_address+0x94/0x1a0
[  378.142517][ T9819]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  378.142546][ T9819]  ? __kernel_text_address+0xd/0x30
[  378.142573][ T9819]  ? unwind_get_return_address+0x59/0xa0
[  378.142602][ T9819]  ? __lock_acquire+0x4c5/0x1ec0
[  378.142624][ T9819]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  378.142649][ T9819]  walk_pgd_range+0xbef/0x1e00
[  378.142683][ T9819]  ? register_lock_class+0x3f/0x7b0
[  378.142712][ T9819]  ? __pfx_walk_pgd_range+0x10/0x10
[  378.142741][ T9819]  __walk_page_range+0x171/0x850
[  378.142760][ T9819]  ? __lock_acquire+0x4c5/0x1ec0
[  378.142776][ T9819]  walk_page_range_vma_unsafe+0x209/0x8f0
[  378.142798][ T9819]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  378.142832][ T9819]  ? find_held_lock+0x2b/0x80
[  378.142855][ T9819]  ? mlock_drain_local+0x254/0x4e0
[  378.142880][ T9819]  ? mlock_drain_local+0x254/0x4e0
[  378.142904][ T9819]  walk_page_range_vma+0x63/0x90
[  378.142917][ T9819]  madvise_pageout+0x29e/0x5b0
[  378.142933][ T9819]  ? __pfx_madvise_pageout+0x10/0x10
[  378.142976][ T9819]  madvise_vma_behavior+0x48b/0x2350
[  378.143004][ T9819]  ? mas_prev+0xa4/0x100
[  378.143034][ T9819]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  378.143064][ T9819]  ? mas_walk+0x260/0x310
[  378.143086][ T9819]  ? find_vma_prev+0xd8/0x150
[  378.143111][ T9819]  ? __pfx_find_vma_prev+0x10/0x10
[  378.143134][ T9819]  ? lock_acquire+0x1d1/0x380
[  378.143172][ T9819]  madvise_walk_vmas+0x30e/0xc50
[  378.143192][ T9819]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  378.143211][ T9819]  ? __pfx_futex_wake_mark+0x10/0x10
[  378.143241][ T9819]  ? lock_acquire+0x1d1/0x380
[  378.143265][ T9819]  madvise_do_behavior+0x1ea/0x510
[  378.143294][ T9819]  ? __pfx_madvise_do_behavior+0x10/0x10
[  378.143322][ T9819]  ? down_read+0x13b/0x4c0
[  378.143348][ T9819]  do_madvise+0x238/0x290
[  378.143364][ T9819]  ? __pfx_do_madvise+0x10/0x10
[  378.143386][ T9819]  ? do_futex+0x190/0x440
[  378.143429][ T9819]  ? selinux_file_ioctl+0xb6/0x290
[  378.143470][ T9819]  __x64_sys_madvise+0xa9/0x110
[  378.143488][ T9819]  ? lockdep_hardirqs_on+0x7d/0x110
[  378.143502][ T9819]  do_syscall_64+0x123/0x790
[  378.143519][ T9819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.143536][ T9819] RIP: 0033:0x7fec68b9e159
[  378.143556][ T9819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  378.143577][ T9819] RSP: 002b:00007fec69999028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  378.143598][ T9819] RAX: ffffffffffffffda RBX: 00007fec68e25fa0 RCX: 00007fec68b9e159
[  378.143612][ T9819] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000
[  378.143622][ T9819] RBP: 00007fec68c35024 R08: 0000000000000000 R09: 0000000000000000
[  378.143630][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  378.143639][ T9819] R13: 00007fec68e26038 R14: 00007fec68e25fa0 R15: 00007ffc33338ac8
[  378.143657][ T9819]  </TASK>
[  378.165334][ T5703] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[  378.360019][ T5703] usb 9-1: New USB device found, idVendor=0c45, idProduct=6007, bcdDevice=8e.7d
[  378.364969][ T5703] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  378.375282][ T5703] usb 9-1: New USB device strings: Mfr=69, Product=2, SerialNumber=3
[  378.375306][ T5703] usb 9-1: Product: syz
[  378.375319][ T5703] usb 9-1: Manufacturer: syz
[  378.375333][ T5703] usb 9-1: SerialNumber: syz
[  378.385807][ T5703] usb 9-1: config 0 descriptor??
[  378.704125][   T30] audit: type=1400 audit(378.656:1711): avc:  denied  { write } for  pid=9822 comm="syz.8.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  379.411581][ T6810] usb 1-1: unable to get BOS descriptor or descriptor too short
[  379.411639][ T6810] usb 1-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=e7.cf
[  379.423640][ T6810] usb 1-1: unable to read config index 0 descriptor/start: -71
[  379.423673][ T6810] usb 1-1: can't read configurations, error -71
[  381.860417][ T6810] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  382.031463][ T6810] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  382.041672][ T6810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  382.057674][ T6810] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  382.069746][ T6810] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  382.081304][ T6810] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  382.094325][ T6810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.159422][ T9861] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  382.258772][   T30] audit: type=1400 audit(382.206:1712): avc:  denied  { setopt } for  pid=9860 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  384.000484][ T5703] gspca_main: sonixb-2.14.0 probing 0c45:6007
[  384.002330][ T5703] sonixb 9-1:0.0: Error reading register 00: -32
[  384.049848][ T6810] gud 1-1:1.0: Failed to get connectors (error=-71)
[  384.073450][ T6810] gud 1-1:1.0: probe with driver gud failed with error -71
[  384.134788][ T6810] usb 1-1: USB disconnect, device number 73
[  384.563782][ T5718] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  384.723657][ T5718] usb 10-1: unable to get BOS descriptor or descriptor too short
[  384.731559][ T5718] usb 10-1: New USB device found, idVendor=093a, idProduct=2474, bcdDevice=e4.86
[  384.747399][ T5718] usb 10-1: config 149 has an invalid interface number: 164 but max is 0
[  384.755971][ T5718] usb 10-1: config 149 has no interface number 0
[  384.756031][ T5718] usb 10-1: config 149 interface 164 has no altsetting 0
[  384.776611][ T5718] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.776656][ T5718] usb 10-1: Product: syz
[  384.776690][ T5718] usb 10-1: Manufacturer: syz
[  384.776708][ T5718] usb 10-1: SerialNumber: syz
[  385.116054][ T9896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.116557][ T9896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  385.294471][ T5718] gspca_main: pac207-2.14.0 probing 093a:2474
[  385.306289][ T5718] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  385.321251][ T5718] usb 10-1: USB disconnect, device number 14
[  385.432603][ T9898] FAULT_INJECTION: forcing a failure.
[  385.432603][ T9898] name failslab, interval 1, probability 0, space 0, times 0
[  385.432668][ T9898] CPU: 1 UID: 0 PID: 9898 Comm: syz.0.966 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  385.432699][ T9898] Tainted: [L]=SOFTLOCKUP
[  385.432705][ T9898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  385.432714][ T9898] Call Trace:
[  385.432721][ T9898]  <TASK>
[  385.432728][ T9898]  dump_stack_lvl+0x100/0x190
[  385.432759][ T9898]  should_fail_ex.cold+0x5/0xa
[  385.432789][ T9898]  should_failslab+0xc2/0x120
[  385.432810][ T9898]  __kmalloc_cache_noprof+0x91/0x6d0
[  385.432837][ T9898]  ? assoc_array_insert+0x262/0x32c0
[  385.432869][ T9898]  assoc_array_insert+0x262/0x32c0
[  385.432896][ T9898]  ? find_held_lock+0x2b/0x80
[  385.432921][ T9898]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  385.432951][ T9898]  ? __key_link_lock+0x4a/0xb0
[  385.432976][ T9898]  ? __pfx_assoc_array_insert+0x10/0x10
[  385.433008][ T9898]  ? down_write+0x146/0x1f0
[  385.433030][ T9898]  ? __pfx_down_write+0x10/0x10
[  385.433054][ T9898]  __key_link_begin+0xf5/0x260
[  385.433075][ T9898]  __key_create_or_update+0x4ee/0xe30
[  385.433097][ T9898]  ? __pfx___key_create_or_update+0x10/0x10
[  385.433116][ T9898]  ? lookup_user_key+0x3f3/0x1300
[  385.433152][ T9898]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  385.433183][ T9898]  key_create_or_update+0x42/0x60
[  385.433203][ T9898]  __do_sys_add_key+0x2e8/0x460
[  385.433226][ T9898]  ? __pfx___do_sys_add_key+0x10/0x10
[  385.433259][ T9898]  do_syscall_64+0x123/0x790
[  385.433284][ T9898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.433301][ T9898] RIP: 0033:0x7fec68b9e159
[  385.433318][ T9898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  385.433334][ T9898] RSP: 002b:00007fec69999028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  385.433362][ T9898] RAX: ffffffffffffffda RBX: 00007fec68e25fa0 RCX: 00007fec68b9e159
[  385.433394][ T9898] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140
[  385.433406][ T9898] RBP: 00007fec68c35024 R08: fffffffffffffffe R09: 0000000000000000
[  385.433418][ T9898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  385.433430][ T9898] R13: 00007fec68e26038 R14: 00007fec68e25fa0 R15: 00007ffc33338ac8
[  385.433455][ T9898]  </TASK>
[  385.952415][ T5718] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  386.133755][ T5718] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  386.185750][ T5718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  386.185826][ T5718] usb 4-1: config 1 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  386.185861][ T5718] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  386.234446][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.244900][ T5718] usb 4-1: Product: syz
[  386.244944][ T5718] usb 4-1: Manufacturer: syz
[  386.244962][ T5718] usb 4-1: SerialNumber: syz
[  386.679988][    C0] usb 4-1: received EP1 urb->status = -71
[  386.680134][ T5718] usb 4-1: unable to init card! (ret=-71)
[  386.680456][ T5718] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -71
[  386.704094][ T5718] usb 4-1: USB disconnect, device number 43
[  386.727215][   T30] audit: type=1400 audit(386.676:1713): avc:  denied  { execute } for  pid=9913 comm="syz.0.971" name="file2" dev="ramfs" ino=31383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  386.727437][   T30] audit: type=1400 audit(386.676:1714): avc:  denied  { execute_no_trans } for  pid=9913 comm="syz.0.971" path="/file2" dev="ramfs" ino=31383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  386.754650][   T30] audit: type=1400 audit(386.706:1715): avc:  denied  { mounton } for  pid=9913 comm="syz.0.971" path="/file2" dev="ramfs" ino=31383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  386.756527][ T9921] overlay: ./file2 is not a directory
[  387.303679][ T9929] overlayfs: failed to clone upperpath
[  387.496740][ T9828] Set syz1 is full, maxelem 65536 reached
[  387.514090][ T9933] No such timeout policy "syz1"
[  387.571356][ T5718] usb 9-1: USB disconnect, device number 15
[  387.626432][ T9936] Device name cannot be null; rc = [-22]
[  387.645952][ T9937] Device name cannot be null; rc = [-22]
[  387.650737][ T5703] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  387.826561][ T5703] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  387.840805][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  387.840844][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  387.840894][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.843064][ T5703] usb 4-1: config 0 descriptor??
[  388.010260][ T5718] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  388.117917][   T30] audit: type=1800 audit(388.066:1716): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.984" name="(" dev="sda1" ino=2050 res=0 errno=0
[  388.160288][ T5718] usb 9-1: Using ep0 maxpacket: 8
[  388.167031][ T5718] usb 9-1: unable to get BOS descriptor or descriptor too short
[  388.175899][ T5718] usb 9-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice= 0.40
[  388.190847][ T5718] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.199090][ T5718] usb 9-1: Product: syz
[  388.199114][ T5718] usb 9-1: Manufacturer: syz
[  388.199129][ T5718] usb 9-1: SerialNumber: syz
[  388.221161][ T5718] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  388.228657][ T5718] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2
[  388.241403][ T5718] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  388.249622][ T5718] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -2
[  388.262515][ T5718] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  388.263866][ T5703] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0
[  388.263894][ T5703] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0
[  388.263915][ T5703] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0
[  388.263938][ T5703] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0
[  388.263960][ T5703] playstation 0003:054C:0DF2.0011: unknown main item tag 0x0
[  388.281504][ T5703] playstation 0003:054C:0DF2.0011: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[  388.286164][ T6809] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  388.370869][ T5718] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -2
[  388.423583][ T6816] usb 9-1: USB disconnect, device number 16
[  388.450775][ T6809] usb 1-1: device descriptor read/64, error -71
[  388.463061][ T7730] udevd[7730]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  388.522358][ T5703] playstation 0003:054C:0DF2.0011: Failed to retrieve feature with reportID 9: -32
[  388.522396][ T5703] playstation 0003:054C:0DF2.0011: Failed to retrieve DualSense pairing info: -32
[  388.522465][ T5703] playstation 0003:054C:0DF2.0011: Failed to get MAC address from DualSense
[  388.522479][ T5703] playstation 0003:054C:0DF2.0011: Failed to create dualsense.
[  388.538431][ T5703] playstation 0003:054C:0DF2.0011: probe with driver playstation failed with error -32
[  388.690259][ T6809] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  388.830310][ T6809] usb 1-1: device descriptor read/64, error -71
[  388.844591][ T6816] usb 4-1: USB disconnect, device number 44
[  388.917960][ T9956] netlink: 56 bytes leftover after parsing attributes in process `syz.9.986'.
[  388.940480][ T6809] usb usb1-port1: attempt power cycle
[  389.820250][ T6809] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  390.174530][ T6809] usb 1-1: device descriptor read/8, error -71
[  390.480226][ T6809] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  390.500899][ T6809] usb 1-1: device descriptor read/8, error -71
[  390.610602][ T6809] usb usb1-port1: unable to enumerate USB device
[  391.083154][ T9973] netlink: 56 bytes leftover after parsing attributes in process `syz.9.990'.
[  391.380254][ T6816] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  391.540104][ T6816] usb 4-1: Using ep0 maxpacket: 8
[  391.551846][ T6816] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  391.554396][ T6816] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  391.554423][ T6816] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  391.554451][ T6816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.559739][ T6816] kobil_sct 4-1:1.0: KOBIL USB smart card terminal converter detected
[  391.570862][ T6816] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  393.172209][   T30] audit: type=1400 audit(392.246:1717): avc:  denied  { ioctl } for  pid=9978 comm="syz.0.992" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  393.184351][ T6820] usb 4-1: USB disconnect, device number 45
[  393.191130][ T6820] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  393.191562][ T6820] kobil_sct 4-1:1.0: device disconnected
[  394.018095][ T9998] ip_tables: iptables: counters copy to user failed while replacing table
[  394.069116][   T30] audit: type=1400 audit(394.006:1718): avc:  denied  { associate } for  pid=9991 comm="syz.3.997" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  394.074097][   T30] audit: type=1400 audit(394.026:1719): avc:  denied  { mounton } for  pid=9999 comm="syz.7.1000" path="/92/file0" dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  394.099085][ T9992] raw_sendmsg: syz.3.997 forgot to set AF_INET. Fix it!
[  394.245151][T10011] 9p: Bad value for 'rfdno'
[  394.874645][T10004] evm: overlay not supported
[  395.245791][   T30] audit: type=1400 audit(395.196:1720): avc:  denied  { watch watch_reads } for  pid=10018 comm="syz.8.1003" path="/63" dev="tmpfs" ino=369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  395.378692][T10021] binder: BINDER_SET_CONTEXT_MGR already set
[  395.386956][T10021] binder: 10020:10021 ioctl 4018620d 200000000140 returned -16
[  395.396328][   T30] audit: type=1400 audit(395.346:1721): avc:  denied  { listen } for  pid=10020 comm="syz.0.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  395.416109][   T30] audit: type=1400 audit(395.366:1722): avc:  denied  { ioctl } for  pid=10020 comm="syz.0.994" path="socket:[31616]" dev="sockfs" ino=31616 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  396.073719][T10004] syz_tun (unregistering): left allmulticast mode
[  396.714649][T10041] IPVS: sh: FWM 3 0x00000003 - no destination available
[  397.904559][ T5883] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.166637][T10045] dlm: non-version read from control device 192
[  398.185803][ T5883] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.272274][T10051] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  398.418206][T10052] overlayfs: failed lookup in lower (newroot/65, name='bus', err=-40): overlapping layers
[  398.439499][ T5883] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.452385][ T6816] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  398.528549][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  398.547373][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  398.558423][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  398.581289][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  398.590510][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  398.620452][ T6816] usb 1-1: Using ep0 maxpacket: 32
[  398.623114][ T6816] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  398.628038][ T6816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  398.628070][ T6816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  398.628106][ T6816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.630732][ T6816] usb 1-1: config 0 descriptor??
[  398.640376][ T5704] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  398.679468][ T5883] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.803665][ T5704] usb 4-1: unable to get BOS descriptor or descriptor too short
[  398.803724][ T5704] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  398.807842][ T5704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  398.807864][ T5704] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  398.819672][ T5704] usb 4-1: string descriptor 0 read error: -22
[  398.819793][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.843045][ T5704] usb 4-1: selecting invalid altsetting 1
[  398.853905][ T5704] usb 4-1: unit 3 not found!
[  399.073264][T10045] xt_time: invalid argument - start or stop time greater than 23:59:59
[  399.097800][ T5704] usb 4-1: unit 0 not found!
[  399.354998][ T6816] ft260 0003:0403:6030.0012: unknown main item tag 0x0
[  399.355061][ T6816] ft260 0003:0403:6030.0012: unknown main item tag 0x0
[  399.419766][T10068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.425222][ T6816] ft260 0003:0403:6030.0012: chip code: 0000 0000
[  399.636647][ T6816] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  399.681717][ T5704] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  399.697365][ T5704] usb 4-1: USB disconnect, device number 46
[  399.836032][ T6816] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup
[  399.897781][ T6810] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  399.958585][ T5883] bridge_slave_1: left allmulticast mode
[  399.958649][ T5883] bridge_slave_1: left promiscuous mode
[  399.958824][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.984505][ T5883] bridge_slave_0: left allmulticast mode
[  399.984571][ T5883] bridge_slave_0: left promiscuous mode
[  399.984727][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.050307][ T6810] usb 9-1: Using ep0 maxpacket: 8
[  400.057943][ T6810] usb 9-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  400.070297][ T6810] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  400.081191][ T6810] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  400.090976][ T6810] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.107325][ T6810] kobil_sct 9-1:1.0: KOBIL USB smart card terminal converter detected
[  400.119924][ T6810] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  400.324993][   T30] audit: type=1400 audit(400.276:1723): avc:  denied  { write } for  pid=10076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  400.424569][T10090] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1021'.
[  400.449287][   T30] audit: type=1400 audit(400.396:1724): avc:  denied  { write } for  pid=10091 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  400.565321][   T30] audit: type=1400 audit(400.516:1725): avc:  denied  { write } for  pid=10088 comm="syz.3.1021" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  400.640218][ T5605] Bluetooth: hci3: command tx timeout
[  400.725669][ T5883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  400.745009][ T5883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  400.759017][ T5883] bond0 (unregistering): Released all slaves
[  400.781246][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13
[  400.874569][ T6809] usb 9-1: USB disconnect, device number 17
[  400.917523][ T6809] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  400.927963][ T6809] kobil_sct 9-1:1.0: device disconnected
[  400.955590][ T5605] Bluetooth: hci6: command 0x0406 tx timeout
[  401.206324][ T6816] ft260 0003:0403:6030.0012: failed to retrieve status: -71
[  401.207198][ T6816] ft260 0003:0403:6030.0012: failed to reset I2C controller: -71
[  401.229482][T10109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1023'.
[  401.229523][T10109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1023'.
[  401.229560][T10109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1023'.
[  401.276708][T10109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1023'.
[  401.448762][   T30] audit: type=1400 audit(401.396:1726): avc:  denied  { write } for  pid=10096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  401.546719][ T6816] usb 1-1: USB disconnect, device number 78
[  401.648447][   T30] audit: type=1400 audit(401.596:1727): avc:  denied  { write } for  pid=10125 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  401.687894][   T30] audit: type=1400 audit(401.626:1728): avc:  denied  { execute } for  pid=10124 comm="syz.8.1026" path="/dev/snd/pcmC1D0c" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1
[  401.826879][ T5883] hsr_slave_0: left promiscuous mode
[  401.843889][ T5883] hsr_slave_1: left promiscuous mode
[  401.853447][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  401.853486][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0
[  401.873106][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  401.881854][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1
[  401.915607][ T5883] veth1_macvtap: left promiscuous mode
[  401.923244][ T5883] veth0_macvtap: left promiscuous mode
[  401.923355][ T5883] veth1_vlan: left promiscuous mode
[  401.923416][ T5883] veth0_vlan: left promiscuous mode
[  402.791128][ T5600] Bluetooth: hci3: command tx timeout
[  402.850260][ T6816] usb 1-1: new full-speed USB device number 79 using dummy_hcd
[  403.002277][ T6816] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  403.003213][ T6816] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  403.003277][ T6816] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  403.003297][ T6816] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  403.012703][ T6816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.012728][ T6816] usb 1-1: Product: syz
[  403.012740][ T6816] usb 1-1: Manufacturer: syz
[  403.012753][ T6816] usb 1-1: SerialNumber: syz
[  403.459439][    C1] usb 1-1: received EP1 urb->status = -71
[  403.459787][ T6816] usb 1-1: unable to init card! (ret=-71)
[  403.460119][ T6816] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -71
[  403.469185][ T6816] usb 1-1: USB disconnect, device number 79
[  403.905105][ T5883] team0 (unregistering): Port device team_slave_1 removed
[  403.934838][ T5883] team0 (unregistering): Port device team_slave_0 removed
[  404.086668][ T5262] 8021q: adding VLAN 0 to HW filter on device eth14
[  404.588085][T10154] syzkaller0: entered promiscuous mode
[  404.588134][T10154] syzkaller0: entered allmulticast mode
[  404.662235][T10148] tipc: Started in network mode
[  404.667265][T10148] tipc: Node identity 5a2486c3b7df, cluster identity 4711
[  404.686265][T10148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.879548][ T5600] Bluetooth: hci3: command tx timeout
[  404.927095][T10162] netlink: 'syz.8.1034': attribute type 49 has an invalid length.
[  404.948306][T10152] tipc: Resetting bearer <eth:syzkaller0>
[  405.208272][   T30] audit: type=1400 audit(405.156:1729): avc:  denied  { read } for  pid=10172 comm="syz.3.1036" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  405.301510][T10162] ip6gretap0: entered promiscuous mode
[  405.301553][T10162] ip6gretap0: entered allmulticast mode
[  405.337015][T10147] tipc: Resetting bearer <eth:syzkaller0>
[  405.381330][T10147] tipc: Disabling bearer <eth:syzkaller0>
[  405.491494][   T30] audit: type=1400 audit(405.446:1730): avc:  denied  { write } for  pid=10159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  405.530580][ T6820] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  405.660406][ T6820] usb 4-1: device descriptor read/64, error -71
[  405.792119][T10192] netlink: 'syz.0.1038': attribute type 23 has an invalid length.
[  405.904076][ T6820] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  406.008207][   T30] audit: type=1400 audit(405.956:1731): avc:  denied  { write } for  pid=10187 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  406.032372][ T6820] usb 4-1: device descriptor read/64, error -71
[  406.070688][T10057] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.070775][T10057] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.070924][T10057] bridge_slave_0: entered allmulticast mode
[  406.076468][T10057] bridge_slave_0: entered promiscuous mode
[  406.084678][T10057] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.084750][T10057] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.084870][T10057] bridge_slave_1: entered allmulticast mode
[  406.094699][T10057] bridge_slave_1: entered promiscuous mode
[  406.159206][ T6820] usb usb4-port1: attempt power cycle
[  406.189700][T10057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  406.203509][T10057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  406.236684][ T5262] 8021q: adding VLAN 0 to HW filter on device eth15
[  406.272903][T10057] team0: Port device team_slave_0 added
[  406.286463][T10057] team0: Port device team_slave_1 added
[  406.336247][T10057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.343689][T10057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  406.360303][T10057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.361753][T10057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.361765][T10057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  406.361784][T10057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.403229][T10057] hsr_slave_0: entered promiscuous mode
[  406.404017][T10057] hsr_slave_1: entered promiscuous mode
[  406.404478][T10057] debugfs: 'hsr0' already exists in 'hsr'
[  406.404494][T10057] Cannot create hsr debugfs directory
[  406.505007][ T6820] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  406.525676][ T6820] usb 4-1: device descriptor read/8, error -71
[  407.415405][ T5600] Bluetooth: hci3: command tx timeout
[  407.550267][ T6820] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  407.571060][ T6820] usb 4-1: device descriptor read/8, error -71
[  407.680913][ T6820] usb usb4-port1: unable to enumerate USB device
[  407.779443][   T30] audit: type=1400 audit(407.726:1732): avc:  denied  { write } for  pid=10199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  407.822878][ T6810] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  407.923902][   T30] audit: type=1400 audit(407.876:1733): avc:  denied  { write } for  pid=10217 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  407.991042][ T6810] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  408.001756][ T6810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  408.001820][ T6810] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  408.001851][ T6810] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  408.044603][ T6810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.044643][ T6810] usb 1-1: Product: syz
[  408.044669][ T6810] usb 1-1: Manufacturer: syz
[  408.044686][ T6810] usb 1-1: SerialNumber: syz
[  408.085321][ T5262] 8021q: adding VLAN 0 to HW filter on device eth16
[  409.451258][    C0] usb 1-1: received EP1 urb->status = -71
[  409.457980][ T6810] usb 1-1: unable to init card! (ret=-71)
[  409.458170][ T6810] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -71
[  409.540493][ T6810] usb 1-1: USB disconnect, device number 80
[  410.228975][T10240] random: crng reseeded on system resumption
[  410.325396][T10057] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  410.345207][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  410.353217][T10057] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  410.365643][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  410.375959][T10057] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  410.391312][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  410.399325][T10057] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  410.417934][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  410.504326][   T30] audit: type=1400 audit(410.456:1734): avc:  denied  { write } for  pid=10233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  410.582444][ T6820] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  410.619405][   T30] audit: type=1400 audit(410.566:1735): avc:  denied  { write } for  pid=10256 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  410.665875][T10057] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.707327][T10057] 8021q: adding VLAN 0 to HW filter on device team0
[  410.723326][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.723439][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.731427][ T6820] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  410.732307][ T6820] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  410.732340][ T6820] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  410.732360][ T6820] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  410.732384][ T6820] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  410.732413][ T6820] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.813729][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.813811][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.171039][   T30] audit: type=1400 audit(411.116:1736): avc:  denied  { write } for  pid=10262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  411.255178][ T6816] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  411.366679][   T30] audit: type=1400 audit(411.316:1737): avc:  denied  { write } for  pid=10280 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  411.412500][ T6816] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  411.413419][ T6816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  411.413456][ T6816] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  411.413478][ T6816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  411.413502][ T6816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  411.413540][ T6816] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  411.419649][ T6816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  411.419692][ T6816] usb 4-1: Product: syz
[  411.419706][ T6816] usb 4-1: Manufacturer: syz
[  411.419718][ T6816] usb 4-1: SerialNumber: syz
[  411.426501][ T6816] usb 4-1: config 0 descriptor??
[  411.559151][ T6820] gud 9-1:1.0: Failed to get connectors (error=-5)
[  411.559208][ T6820] gud 9-1:1.0: probe with driver gud failed with error -5
[  411.638853][ T6816] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  411.638905][ T6816] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  411.687692][T10057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.690616][T10293] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[  411.736626][   T30] audit: type=1400 audit(411.686:1738): avc:  denied  { getopt } for  pid=10288 comm="syz.0.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  411.842219][ T6816] radio-si470x 4-1:0.0: software version 136, hardware version 40
[  411.842260][ T6816] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  412.084502][T10057] veth0_vlan: entered promiscuous mode
[  412.091809][   T30] audit: type=1400 audit(412.046:1739): avc:  denied  { write } for  pid=10287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  412.098787][T10057] veth1_vlan: entered promiscuous mode
[  412.153208][T10057] veth0_macvtap: entered promiscuous mode
[  412.167686][T10057] veth1_macvtap: entered promiscuous mode
[  413.235549][ T6816] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110
[  413.235599][ T6816] radio-si470x 4-1:0.0: submitting int urb failed (-90)
[  413.235940][ T6816] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -32
[  413.236169][ T6816] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22
[  413.316329][   T30] audit: type=1400 audit(413.266:1740): avc:  denied  { write } for  pid=10315 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  413.332354][T10057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.359678][T10057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.398264][ T6820] usb 9-1: USB disconnect, device number 18
[  413.457350][ T5704] usb 4-1: USB disconnect, device number 51
[  413.480460][   T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.485904][   T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.486346][   T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.486375][   T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.646097][T10319] CIFS: Attempting to mount //127.0.0.1/share
[  413.658951][T10319] CIFS: VFS: Error connecting to socket. Aborting operation.
[  413.659019][T10319] CIFS: VFS: cifs_mount failed w/return code = -111
[  413.696323][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  413.696358][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.809700][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  413.809750][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.025779][   T30] audit: type=1400 audit(413.976:1741): avc:  denied  { write } for  pid=10320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  414.225179][   T30] audit: type=1400 audit(414.176:1742): avc:  denied  { write } for  pid=10340 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  414.381176][ T5704] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  414.401814][ T6807] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  414.410217][ T6809] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  414.531499][ T5704] usb 5-1: Using ep0 maxpacket: 16
[  414.532198][ T5704] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  414.533028][ T5704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.533065][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.546871][ T5704] usb 5-1: config 0 descriptor??
[  414.592374][ T6809] usb 9-1: Using ep0 maxpacket: 8
[  414.599197][ T6809] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  414.608937][ T6807] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  414.625657][ T6809] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  414.637174][ T6809] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.637214][ T6809] usb 9-1: config 0 interface 0 has no altsetting 0
[  414.637262][ T6809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.665020][ T6807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  414.665199][ T6807] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  414.665269][ T6807] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  414.709947][ T6807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.710009][ T6807] usb 4-1: Product: syz
[  414.710060][ T6807] usb 4-1: Manufacturer: syz
[  414.710077][ T6807] usb 4-1: SerialNumber: syz
[  414.752934][ T6809] usb 9-1: config 0 descriptor??
[  414.891264][   T30] audit: type=1400 audit(414.846:1743): avc:  denied  { write } for  pid=10344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  415.139901][T10358] No such timeout policy "syz1"
[  415.180605][    C0] usb 4-1: received EP1 urb->status = -2
[  415.186659][ T6807] usb 4-1: unable to init card! (ret=-110)
[  415.198395][ T6807] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  415.400423][T10332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.401602][T10332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.656539][ T5704] usb 4-1: USB disconnect, device number 52
[  415.834144][ T6809] usbhid 9-1:0.0: can't add hid device: -71
[  415.841374][ T6809] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  415.858823][ T6809] usb 9-1: USB disconnect, device number 19
[  415.883367][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'.
[  415.883419][T10369] netlink: 'syz.0.1058': attribute type 10 has an invalid length.
[  415.883434][T10369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1058'.
[  415.907481][ T5704] usb 5-1: USB disconnect, device number 12
[  415.945966][T10369] geneve2: entered promiscuous mode
[  415.946010][T10369] geneve2: entered allmulticast mode
[  415.961187][  T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.961834][  T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.961863][  T146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.961889][  T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.246943][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  416.246981][   T30] audit: type=1400 audit(416.196:1745): avc:  denied  { write } for  pid=10367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  416.292510][T10381] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1060' sets config #0
[  416.490631][   T30] audit: type=1400 audit(416.446:1746): avc:  denied  { write } for  pid=10392 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  416.510603][T10394] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1062'.
[  416.526355][T10396] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10396 comm=syz.8.1063
[  416.820620][ T5704] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  416.835745][T10408] gadgetfs: bound to dummy_udc driver
[  416.844062][ T5711] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  416.966787][   T30] audit: type=1400 audit(416.916:1747): avc:  denied  { write } for  pid=10402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  416.999729][ T5704] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  417.009942][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.009987][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.010029][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.033593][ T5711] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  417.043548][ T5711] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  417.043573][ T5711] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  417.043605][ T5711] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.055473][   T30] audit: type=1400 audit(416.986:1748): avc:  denied  { write } for  pid=10425 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  417.115224][ T5704] usb 4-1: config 0 descriptor??
[  417.180299][ T6820] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  417.188799][    C1] gadgetfs: connected
[  417.193522][ T6820] gadgetfs: disconnected
[  417.326114][ T5711] usb 9-1: USB disconnect, device number 20
[  417.341701][    C1] gadgetfs: connected
[  417.346026][ T6820] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  417.359675][ T6820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.373078][    C1] gadgetfs: configuration #1
[  417.402752][ T6820] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input41
[  417.403123][   T49] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discover!
[  417.403216][T10433] nvme nvme4: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discover"
[  417.567805][ T5704] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0
[  417.575495][ T5704] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0
[  417.586080][ T5704] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0
[  417.594432][ T5704] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0
[  417.594461][ T5704] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0
[  417.606932][T10413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  417.625477][ T5704] playstation 0003:054C:0DF2.0013: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[  417.642889][   T30] audit: type=1400 audit(417.596:1749): avc:  denied  { write } for  pid=10428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  417.731498][T10413] gadgetfs: suspended from state 3
[  417.737356][T10413] gadgetfs: disconnected
[  417.738669][ T6807] usb 1-1: USB disconnect, device number 81
[  417.738784][    C0] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  417.809873][ T5704] playstation 0003:054C:0DF2.0013: Failed to retrieve feature with reportID 9: -32
[  417.819566][   T30] audit: type=1400 audit(417.756:1750): avc:  denied  { unmount } for  pid=10057 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[  417.841544][ T5704] playstation 0003:054C:0DF2.0013: Failed to retrieve DualSense pairing info: -32
[  417.841625][ T5704] playstation 0003:054C:0DF2.0013: Failed to get MAC address from DualSense
[  417.841643][ T5704] playstation 0003:054C:0DF2.0013: Failed to create dualsense.
[  417.890390][ T5704] playstation 0003:054C:0DF2.0013: probe with driver playstation failed with error -32
[  417.923971][   T30] audit: type=1400 audit(417.876:1751): avc:  denied  { write } for  pid=10443 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  418.066215][ T6809] usb 4-1: USB disconnect, device number 53
[  418.257675][T10446] ALSA: mixer_oss: invalid OSS volume ''
[  418.538396][   T30] audit: type=1400 audit(418.486:1752): avc:  denied  { write } for  pid=10447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  418.679299][   T30] audit: type=1400 audit(418.626:1753): avc:  denied  { write } for  pid=10466 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  418.905828][   T30] audit: type=1400 audit(418.856:1754): avc:  denied  { kexec_image_load } for  pid=10458 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  418.990253][ T5718] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  419.029308][T10479] netlink: 'syz.4.1074': attribute type 2 has an invalid length.
[  419.029340][T10479] netlink: 'syz.4.1074': attribute type 2 has an invalid length.
[  419.141554][ T5718] usb 4-1: Using ep0 maxpacket: 32
[  419.147760][ T5718] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  419.159442][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.172851][ T5718] usb 4-1: config 0 descriptor??
[  419.193339][ T5718] as10x_usb: device has been detected
[  419.201220][ T5718] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  419.222467][ T5718] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  419.245313][ T5718] as10x_usb: error during firmware upload part1
[  419.256763][ T5718] Registered device nBox DVB-T Dongle
[  419.397494][ T5718] usb 4-1: USB disconnect, device number 54
[  419.484920][ T6820] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  419.492881][T10491] picdev_read: 4 callbacks suppressed
[  419.492900][T10491] kvm: pic: non byte read
[  419.493080][T10491] kvm: pic: non byte read
[  419.493256][T10491] kvm: pic: non byte read
[  419.493439][T10491] kvm: pic: non byte read
[  419.493685][T10491] kvm: pic: non byte read
[  419.493861][T10491] kvm: pic: non byte read
[  419.494037][T10491] kvm: pic: non byte read
[  419.494258][T10491] kvm: pic: non byte read
[  419.494439][T10491] kvm: pic: non byte read
[  419.494614][T10491] kvm: pic: non byte read
[  419.559231][T10474] kexec: Could not allocate control_code_buffer
[  419.630794][T10471] sctp: [Deprecated]: syz.3.1073 (pid 10471) Use of int in max_burst socket option.
[  419.630794][T10471] Use struct sctp_assoc_value instead
[  419.634743][ T5718] Unregistered device nBox DVB-T Dongle
[  419.649033][ T5718] as10x_usb: device has been disconnected
[  419.680278][ T6820] usb 5-1: Using ep0 maxpacket: 32
[  419.698934][ T6820] usb 5-1: unable to get BOS descriptor or descriptor too short
[  419.706775][ T6820] usb 5-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=e7.cf
[  419.716898][ T6820] usb 5-1: config 14 has an invalid interface number: 64 but max is 0
[  419.726506][ T6820] usb 5-1: config 14 has no interface number 0
[  419.726584][ T6820] usb 5-1: config 14 interface 64 has no altsetting 0
[  419.743615][ T6820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.743656][ T6820] usb 5-1: Product: syz
[  419.743684][ T6820] usb 5-1: Manufacturer: syz
[  419.743701][ T6820] usb 5-1: SerialNumber: syz
[  420.028142][T10484] FAULT_INJECTION: forcing a failure.
[  420.028142][T10484] name failslab, interval 1, probability 0, space 0, times 0
[  420.028201][T10484] CPU: 0 UID: 0 PID: 10484 Comm: syz.4.1075 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  420.028242][T10484] Tainted: [L]=SOFTLOCKUP
[  420.028250][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  420.028262][T10484] Call Trace:
[  420.028267][T10484]  <TASK>
[  420.028273][T10484]  dump_stack_lvl+0x100/0x190
[  420.028309][T10484]  should_fail_ex.cold+0x5/0xa
[  420.028341][T10484]  should_failslab+0xc2/0x120
[  420.028367][T10484]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  420.028384][T10484]  ? xas_split_alloc+0x182/0x530
[  420.028404][T10484]  xas_split_alloc+0x182/0x530
[  420.028424][T10484]  __folio_split+0x95e/0x1bf0
[  420.028476][T10484]  ? __pfx___folio_split+0x10/0x10
[  420.028505][T10484]  ? folio_alloc_swap+0xbd8/0x1e70
[  420.028531][T10484]  ? folio_alloc_swap+0x4c6/0x1e70
[  420.028550][T10484]  shmem_writeout+0x786/0x1a00
[  420.028572][T10484]  ? __pfx_shmem_writeout+0x10/0x10
[  420.028595][T10484]  ? __pfx_try_to_unmap+0x10/0x10
[  420.028623][T10484]  ? find_held_lock+0x2b/0x80
[  420.028653][T10484]  ? inode_to_bdi+0x9e/0x160
[  420.028676][T10484]  ? folio_clear_dirty_for_io+0x178/0x960
[  420.028698][T10484]  shrink_folio_list+0x399a/0x5e40
[  420.028723][T10484]  ? __pfx_shrink_folio_list+0x10/0x10
[  420.028746][T10484]  ? unwind_next_frame+0xbd/0x2090
[  420.028780][T10484]  ? lock_acquire+0x1d1/0x380
[  420.028803][T10484]  ? is_bpf_text_address+0x8a/0x1a0
[  420.028823][T10484]  ? is_bpf_text_address+0x8a/0x1a0
[  420.028838][T10484]  ? bpf_ksym_find+0x128/0x1c0
[  420.028874][T10484]  ? lock_acquire+0x1d1/0x380
[  420.028894][T10484]  ? is_bpf_text_address+0x25/0x1a0
[  420.028920][T10484]  ? find_held_lock+0x2b/0x80
[  420.028952][T10484]  reclaim_folio_list+0xe9/0x5e0
[  420.028969][T10484]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  420.028992][T10484]  ? __pfx_reclaim_folio_list+0x10/0x10
[  420.029013][T10484]  ? __lock_acquire+0x4c5/0x1ec0
[  420.029041][T10484]  ? rcu_is_watching+0x13/0xc0
[  420.029072][T10484]  reclaim_pages+0x428/0x5e0
[  420.029100][T10484]  ? __pfx_reclaim_pages+0x10/0x10
[  420.029116][T10484]  ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0
[  420.029135][T10484]  ? folio_isolate_lru+0xd6/0xe90
[  420.029163][T10484]  madvise_cold_or_pageout_pte_range+0x147e/0x27b0
[  420.029201][T10484]  ? __lock_acquire+0x4c5/0x1ec0
[  420.029229][T10484]  ? __css_rstat_updated+0x1ce/0x590
[  420.029254][T10484]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  420.029278][T10484]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  420.029297][T10484]  walk_pgd_range+0xbef/0x1e00
[  420.029328][T10484]  ? find_held_lock+0x2b/0x80
[  420.029367][T10484]  ? __pfx_walk_pgd_range+0x10/0x10
[  420.029400][T10484]  ? __pfx_folio_batch_move_lru+0x10/0x10
[  420.029421][T10484]  __walk_page_range+0x171/0x850
[  420.029448][T10484]  walk_page_range_vma_unsafe+0x209/0x8f0
[  420.029480][T10484]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  420.029519][T10484]  ? find_held_lock+0x2b/0x80
[  420.029544][T10484]  ? mlock_drain_local+0x254/0x4e0
[  420.029563][T10484]  ? mlock_drain_local+0x254/0x4e0
[  420.029584][T10484]  walk_page_range_vma+0x63/0x90
[  420.029598][T10484]  madvise_pageout+0x29e/0x5b0
[  420.029624][T10484]  ? __pfx_madvise_pageout+0x10/0x10
[  420.029650][T10484]  ? finish_task_switch.isra.0+0x2bd/0x10d0
[  420.029692][T10484]  madvise_vma_behavior+0x48b/0x2350
[  420.029711][T10484]  ? mas_prev+0xa4/0x100
[  420.029730][T10484]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  420.029748][T10484]  ? mas_walk+0x260/0x310
[  420.029771][T10484]  ? find_vma_prev+0xd8/0x150
[  420.029792][T10484]  ? __pfx___schedule+0x10/0x10
[  420.029812][T10484]  ? __pfx_find_vma_prev+0x10/0x10
[  420.029839][T10484]  ? preempt_schedule_common+0x3c/0xb0
[  420.029853][T10484]  ? preempt_schedule_thunk+0x16/0x40
[  420.029872][T10484]  madvise_walk_vmas+0x30e/0xc50
[  420.029892][T10484]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  420.029917][T10484]  ? plist_check_list+0x1b8/0x280
[  420.029954][T10484]  ? lock_acquire+0x1d1/0x380
[  420.029979][T10484]  madvise_do_behavior+0x1ea/0x510
[  420.029996][T10484]  ? futex_private_hash_put.part.0+0xdc/0x180
[  420.030014][T10484]  ? __pfx_madvise_do_behavior+0x10/0x10
[  420.030031][T10484]  ? down_read+0x13b/0x4c0
[  420.030063][T10484]  do_madvise+0x238/0x290
[  420.030091][T10484]  ? __pfx_do_madvise+0x10/0x10
[  420.030116][T10484]  ? do_futex+0x190/0x440
[  420.030161][T10484]  __x64_sys_madvise+0xa9/0x110
[  420.030187][T10484]  ? lockdep_hardirqs_on+0x7d/0x110
[  420.030215][T10484]  do_syscall_64+0x123/0x790
[  420.030242][T10484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.030269][T10484] RIP: 0033:0x7f43ed79e159
[  420.030290][T10484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.030305][T10484] RSP: 002b:00007f43ee622028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  420.030318][T10484] RAX: ffffffffffffffda RBX: 00007f43eda25fa0 RCX: 00007f43ed79e159
[  420.030327][T10484] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000
[  420.030335][T10484] RBP: 00007f43ed835024 R08: 0000000000000000 R09: 0000000000000000
[  420.030343][T10484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  420.030353][T10484] R13: 00007f43eda26038 R14: 00007f43eda25fa0 R15: 00007ffd9728ae28
[  420.030384][T10484]  </TASK>
[  420.564400][T10509] tmpfs: Bad value for 'mpol'
[  420.698396][ T6820] belkin_sa 5-1:14.64: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  420.713475][ T6820] usb 5-1: bcdDevice: e7cf, bfc: 0
[  420.720737][ T6820] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  420.734855][ T6820] usb 5-1: USB disconnect, device number 13
[  420.745041][ T6820] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  420.756918][ T6820] belkin_sa 5-1:14.64: device disconnected
[  420.998027][ T5600] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  421.018381][ T5600] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  421.027991][ T5600] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  421.114546][ T5600] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  421.123130][ T5600] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  421.303763][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'.
[  421.324831][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  421.324869][   T30] audit: type=1400 audit(421.276:1759): avc:  denied  { write } for  pid=10523 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  421.377989][   T30] audit: type=1400 audit(421.326:1760): avc:  denied  { mounton } for  pid=10516 comm="syz.0.1082" path="mnt:[4026532788]" dev="nsfs" ino=4026532788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  421.600497][   T30] audit: type=1400 audit(421.556:1761): avc:  denied  { read write } for  pid=10528 comm="syz.0.1084" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  421.624325][   T30] audit: type=1400 audit(421.556:1762): avc:  denied  { open } for  pid=10528 comm="syz.0.1084" path="/214/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  421.624365][   T30] audit: type=1400 audit(421.576:1763): avc:  denied  { ioctl } for  pid=10528 comm="syz.0.1084" path="/214/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1
[  422.550313][ T6809] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  422.713507][ T6809] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  422.725850][ T6809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  422.725895][ T6809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.725941][ T6809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.760622][ T6809] usb 5-1: config 0 descriptor??
[  422.804727][T10553] comedi comedi1: unsupported base address 0x2
[  422.820454][ T6820] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  422.929646][   T30] audit: type=1400 audit(422.876:1764): avc:  denied  { write } for  pid=10531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  422.981754][ T6820] usb 1-1: Using ep0 maxpacket: 8
[  422.982961][ T6820] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  422.983986][ T6820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  422.984011][ T6820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  422.984040][ T6820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.993573][ T6820] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected
[  423.017795][ T6820] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  423.140087][   T30] audit: type=1400 audit(423.086:1765): avc:  denied  { create } for  pid=10559 comm="syz.8.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  423.162814][T10561] xt_l2tp: v2 sid > 0xffff: 117440512
[  423.195808][ T6809] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0
[  423.195855][ T6809] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0
[  423.195887][ T6809] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0
[  423.195909][ T6809] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0
[  423.195933][ T6809] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0
[  423.249636][ T6809] playstation 0003:054C:0DF2.0014: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  423.253196][   T30] audit: type=1400 audit(423.196:1766): avc:  denied  { search } for  pid=10563 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  423.254164][   T30] audit: type=1400 audit(423.196:1767): avc:  denied  { search } for  pid=10563 comm="rm" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  423.254333][   T30] audit: type=1400 audit(423.196:1768): avc:  denied  { search } for  pid=10563 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  423.310380][ T6820] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  423.352257][ T5600] Bluetooth: hci7: command tx timeout
[  423.447881][ T6809] playstation 0003:054C:0DF2.0014: Failed to retrieve feature with reportID 9: -32
[  423.457690][ T6809] playstation 0003:054C:0DF2.0014: Failed to retrieve DualSense pairing info: -32
[  423.460312][ T6820] usb 4-1: Using ep0 maxpacket: 16
[  423.464723][ T6820] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  423.469874][ T6820] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  423.469900][ T6820] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  423.469919][ T6820] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  423.469937][ T6820] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  423.469954][ T6820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  423.469973][ T6820] usb 4-1: config 0 has no interface number 0
[  423.470004][ T6820] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  423.470028][ T6820] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  423.470046][ T6820] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  423.470071][ T6820] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  423.470092][ T6820] usb 4-1: config 0 interface 125 has no altsetting 0
[  423.470107][ T6820] usb 4-1: config 0 interface 125 has no altsetting 2
[  423.472538][ T6809] playstation 0003:054C:0DF2.0014: Failed to get MAC address from DualSense
[  423.472557][ T6809] playstation 0003:054C:0DF2.0014: Failed to create dualsense.
[  423.479012][ T6820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.479033][ T6820] usb 4-1: Product: syz
[  423.479045][ T6820] usb 4-1: Manufacturer: syz
[  423.479059][ T6820] usb 4-1: SerialNumber: syz
[  423.638002][ T6809] playstation 0003:054C:0DF2.0014: probe with driver playstation failed with error -32
[  423.665281][ T6820] usb 4-1: config 0 descriptor??
[  423.698552][ T6820] usb 4-1: selecting invalid altsetting 2
[  423.797068][ T5704] usb 5-1: USB disconnect, device number 14
[  423.915039][T10562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.927726][T10562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.976498][ T6816] usb 1-1: USB disconnect, device number 82
[  424.001884][ T6816] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  424.019786][    C1] usb 4-1: async_complete: urb error -71
[  424.019906][    C1] usb 4-1: async_complete: urb error -71
[  424.019981][    C1] usb 4-1: async_complete: urb error -71
[  424.020050][    C1] usb 4-1: async_complete: urb error -71
[  424.027284][ T6816] kobil_sct 1-1:1.0: device disconnected
[  424.028639][ T6820] get_1284_register: usb error -71
[  424.085294][ T6820] usb 4-1: USB disconnect, device number 55
[  424.267662][T10520] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.269340][T10520] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.269462][T10520] bridge_slave_0: entered allmulticast mode
[  424.273282][T10520] bridge_slave_0: entered promiscuous mode
[  424.284867][T10520] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.284937][T10520] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.285229][T10520] bridge_slave_1: entered allmulticast mode
[  424.287993][T10520] bridge_slave_1: entered promiscuous mode
[  424.401288][T10520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.416968][T10520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.458458][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1090'.
[  424.505549][T10580] Cannot find set identified by id 3 to match
[  424.537040][T10520] team0: Port device team_slave_0 added
[  424.571619][T10520] team0: Port device team_slave_1 added
[  424.627785][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'.
[  424.636976][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'.
[  424.720395][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'.
[  424.720443][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'.
[  424.774437][T10520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.774471][T10520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.776048][T10520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.824570][T10520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.824596][T10520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.825625][T10520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  425.019167][T10520] hsr_slave_0: entered promiscuous mode
[  425.020705][ T6820] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  425.025391][T10520] hsr_slave_1: entered promiscuous mode
[  425.028830][T10520] debugfs: 'hsr0' already exists in 'hsr'
[  425.028850][T10520] Cannot create hsr debugfs directory
[  425.030355][   T42] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  425.030975][   T42] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  425.031001][   T42] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  425.040559][   T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  425.140244][ T5718] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  425.173538][ T6820] usb 1-1: Using ep0 maxpacket: 32
[  425.193581][ T6820] usb 1-1: unable to get BOS descriptor or descriptor too short
[  425.193649][ T6820] usb 1-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=e7.cf
[  425.197517][ T6820] usb 1-1: config 14 has an invalid interface number: 64 but max is 0
[  425.197546][ T6820] usb 1-1: config 14 has no interface number 0
[  425.197576][ T6820] usb 1-1: config 14 interface 64 has no altsetting 0
[  425.199246][ T6820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.199267][ T6820] usb 1-1: Product: syz
[  425.199286][ T6820] usb 1-1: Manufacturer: syz
[  425.199299][ T6820] usb 1-1: SerialNumber: syz
[  425.303889][ T5718] usb 5-1: unable to get BOS descriptor or descriptor too short
[  425.312442][ T5718] usb 5-1: not running at top speed; connect to a high speed hub
[  425.323170][ T5718] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  425.334378][ T5718] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1032, setting to 1023
[  425.347801][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.356115][ T5718] usb 5-1: Product: syz
[  425.356138][ T5718] usb 5-1: Manufacturer: 闪挮ⵤ婷ࢲ茲릇𗕛
[  425.356159][ T5718] usb 5-1: SerialNumber: syz
[  425.430724][ T5600] Bluetooth: hci7: command tx timeout
[  425.577002][T10602] FAULT_INJECTION: forcing a failure.
[  425.577002][T10602] name failslab, interval 1, probability 0, space 0, times 0
[  425.577046][T10602] CPU: 1 UID: 0 PID: 10602 Comm: syz.0.1092 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  425.577080][T10602] Tainted: [L]=SOFTLOCKUP
[  425.577090][T10602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  425.577101][T10602] Call Trace:
[  425.577108][T10602]  <TASK>
[  425.577115][T10602]  dump_stack_lvl+0x100/0x190
[  425.577137][T10602]  should_fail_ex.cold+0x5/0xa
[  425.577155][T10602]  should_failslab+0xc2/0x120
[  425.577173][T10602]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  425.577196][T10602]  ? xas_split_alloc+0x182/0x530
[  425.577222][T10602]  xas_split_alloc+0x182/0x530
[  425.577250][T10602]  __folio_split+0x95e/0x1bf0
[  425.577273][T10602]  ? __pfx___folio_split+0x10/0x10
[  425.577290][T10602]  ? folio_alloc_swap+0xbd8/0x1e70
[  425.577308][T10602]  ? folio_alloc_swap+0x4c6/0x1e70
[  425.577330][T10602]  shmem_writeout+0x786/0x1a00
[  425.577367][T10602]  ? __pfx_shmem_writeout+0x10/0x10
[  425.577390][T10602]  ? __pfx_try_to_unmap+0x10/0x10
[  425.577407][T10602]  ? find_held_lock+0x2b/0x80
[  425.577424][T10602]  ? inode_to_bdi+0x9e/0x160
[  425.577443][T10602]  ? folio_clear_dirty_for_io+0x178/0x960
[  425.577464][T10602]  shrink_folio_list+0x399a/0x5e40
[  425.577498][T10602]  ? __pfx_shrink_folio_list+0x10/0x10
[  425.577518][T10602]  ? unwind_next_frame+0xbd/0x2090
[  425.577544][T10602]  ? lock_acquire+0x1d1/0x380
[  425.577557][T10602]  ? is_bpf_text_address+0x8a/0x1a0
[  425.577571][T10602]  ? is_bpf_text_address+0x8a/0x1a0
[  425.577587][T10602]  ? bpf_ksym_find+0x128/0x1c0
[  425.577635][T10602]  ? lock_acquire+0x1d1/0x380
[  425.577653][T10602]  ? is_bpf_text_address+0x25/0x1a0
[  425.577675][T10602]  ? find_held_lock+0x2b/0x80
[  425.577693][T10602]  reclaim_folio_list+0xe9/0x5e0
[  425.577706][T10602]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  425.577728][T10602]  ? __pfx_reclaim_folio_list+0x10/0x10
[  425.577760][T10602]  ? __lock_acquire+0x4c5/0x1ec0
[  425.577786][T10602]  ? rcu_is_watching+0x13/0xc0
[  425.577813][T10602]  reclaim_pages+0x428/0x5e0
[  425.577837][T10602]  ? __pfx_reclaim_pages+0x10/0x10
[  425.577856][T10602]  ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0
[  425.577873][T10602]  ? folio_isolate_lru+0xd6/0xe90
[  425.577893][T10602]  madvise_cold_or_pageout_pte_range+0x147e/0x27b0
[  425.577926][T10602]  ? __lock_acquire+0x4c5/0x1ec0
[  425.577943][T10602]  ? __css_rstat_updated+0x1ce/0x590
[  425.577964][T10602]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  425.577986][T10602]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  425.578001][T10602]  walk_pgd_range+0xbef/0x1e00
[  425.578022][T10602]  ? find_held_lock+0x2b/0x80
[  425.578052][T10602]  ? __pfx_walk_pgd_range+0x10/0x10
[  425.578081][T10602]  ? __pfx_folio_batch_move_lru+0x10/0x10
[  425.578108][T10602]  __walk_page_range+0x171/0x850
[  425.578133][T10602]  walk_page_range_vma_unsafe+0x209/0x8f0
[  425.578152][T10602]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  425.578174][T10602]  ? find_held_lock+0x2b/0x80
[  425.578197][T10602]  ? mlock_drain_local+0x254/0x4e0
[  425.578223][T10602]  ? mlock_drain_local+0x254/0x4e0
[  425.578252][T10602]  walk_page_range_vma+0x63/0x90
[  425.578266][T10602]  madvise_pageout+0x29e/0x5b0
[  425.578279][T10602]  ? __pfx_clockevents_program_event+0x10/0x10
[  425.578295][T10602]  ? __pfx_madvise_pageout+0x10/0x10
[  425.578309][T10602]  ? find_held_lock+0x2b/0x80
[  425.578327][T10602]  ? __hrtimer_rearm_deferred+0x23c/0x7b0
[  425.578376][T10602]  madvise_vma_behavior+0x48b/0x2350
[  425.578402][T10602]  ? mas_prev+0xa4/0x100
[  425.578420][T10602]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  425.578437][T10602]  ? mas_walk+0x260/0x310
[  425.578451][T10602]  ? find_vma_prev+0xd8/0x150
[  425.578467][T10602]  ? __pfx_find_vma_prev+0x10/0x10
[  425.578487][T10602]  ? lock_acquire+0x1d1/0x380
[  425.578518][T10602]  madvise_walk_vmas+0x30e/0xc50
[  425.578545][T10602]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  425.578560][T10602]  ? __pfx_futex_wake_mark+0x10/0x10
[  425.578580][T10602]  ? lock_acquire+0x1d1/0x380
[  425.578592][T10602]  madvise_do_behavior+0x1ea/0x510
[  425.578609][T10602]  ? __pfx_madvise_do_behavior+0x10/0x10
[  425.578634][T10602]  ? down_read+0x13b/0x4c0
[  425.578668][T10602]  do_madvise+0x238/0x290
[  425.578690][T10602]  ? __pfx_do_madvise+0x10/0x10
[  425.578704][T10602]  ? do_futex+0x190/0x440
[  425.578732][T10602]  __x64_sys_madvise+0xa9/0x110
[  425.578746][T10602]  ? lockdep_hardirqs_on+0x7d/0x110
[  425.578763][T10602]  do_syscall_64+0x123/0x790
[  425.578786][T10602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.578805][T10602] RIP: 0033:0x7fec68b9e159
[  425.578824][T10602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.578840][T10602] RSP: 002b:00007fec69999028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  425.578860][T10602] RAX: ffffffffffffffda RBX: 00007fec68e25fa0 RCX: 00007fec68b9e159
[  425.578872][T10602] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000
[  425.578886][T10602] RBP: 00007fec68c35024 R08: 0000000000000000 R09: 0000000000000000
[  425.578898][T10602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  425.578910][T10602] R13: 00007fec68e26038 R14: 00007fec68e25fa0 R15: 00007ffc33338ac8
[  425.578937][T10602]  </TASK>
[  426.192872][ T5718] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  427.057729][ T5718] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  427.093315][ T5718] usb 5-1: USB disconnect, device number 15
[  427.132746][ T7065] udevd[7065]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  427.157215][ T6820] belkin_sa 1-1:14.64: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  427.225439][ T6820] usb 1-1: bcdDevice: e7cf, bfc: 0
[  427.397999][T10638] netlink: 'syz.8.1100': attribute type 23 has an invalid length.
[  427.499972][ T6820] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  427.511184][ T5600] Bluetooth: hci7: command tx timeout
[  427.511263][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  427.511282][   T30] audit: type=1400 audit(427.466:1777): avc:  denied  { write } for  pid=10610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  427.645961][ T6820] usb 1-1: USB disconnect, device number 83
[  427.666163][ T6820] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  427.666644][ T6820] belkin_sa 1-1:14.64: device disconnected
[  427.667617][   T30] audit: type=1400 audit(427.616:1778): avc:  denied  { write } for  pid=10644 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  427.706709][ T5718] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  427.880988][ T5718] usb 5-1: Using ep0 maxpacket: 8
[  427.886549][ T5718] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  427.897474][ T5718] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  427.897522][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.932180][ T5718] kobil_sct 5-1:1.0: required endpoints missing
[  428.147672][ T6820] usb 5-1: USB disconnect, device number 16
[  428.934409][   T30] audit: type=1400 audit(428.886:1779): avc:  denied  { write } for  pid=10648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  429.141344][ T6809] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  429.590974][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  429.766149][ T5600] Bluetooth: hci7: command tx timeout
[  429.783400][   T30] audit: type=1400 audit(429.736:1780): avc:  denied  { write } for  pid=10674 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  429.857202][ T6809] usb 5-1: New USB device found, idVendor=045e, idProduct=00db, bcdDevice= 0.00
[  429.860903][ T6809] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  429.860933][ T6809] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  429.860954][ T6809] usb 5-1: config 0 interface 0 has no altsetting 0
[  429.860979][ T6809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.900211][ T6809] usb 5-1: config 0 descriptor??
[  430.020347][ T6820] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  430.170220][ T6820] usb 4-1: Using ep0 maxpacket: 16
[  430.178276][ T6820] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  430.189722][ T6820] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 64
[  430.200097][ T6820] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023
[  430.214086][ T6820] usb 4-1: config 1 interface 0 has no altsetting 0
[  430.245659][ T6820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.245708][ T6820] usb 4-1: Product: syz
[  430.245736][ T6820] usb 4-1: Manufacturer: syz
[  430.245756][ T6820] usb 4-1: SerialNumber: syz
[  430.275025][T10675] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  430.275146][T10675] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  430.636200][   T30] audit: type=1400 audit(430.296:1781): avc:  denied  { map } for  pid=10683 comm="syz.8.1110" path="socket:[36146]" dev="sockfs" ino=36146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  430.906968][   T30] audit: type=1400 audit(430.856:1782): avc:  denied  { write } for  pid=10685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  431.321986][   T30] audit: type=1400 audit(430.986:1783): avc:  denied  { setattr } for  pid=10673 comm="syz.3.1108" name="HCI" dev="sockfs" ino=36129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  431.350830][ T6820] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  431.376533][ T6820] usb 4-1: USB disconnect, device number 56
[  431.391861][ T7066] udevd[7066]: setting mode of /dev/bus/usb/004/056 to 020664 failed: No such file or directory
[  431.391989][ T7066] udevd[7066]: setting owner of /dev/bus/usb/004/056 to uid=0, gid=0 failed: No such file or directory
[  431.437443][ T6809] input: HID 045e:00db as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:00DB.0015/input/input43
[  431.649483][ T6809] microsoft 0003:045E:00DB.0015: input,hidraw0: USB HID v36.2c Joystick [HID 045e:00db] on usb-dummy_hcd.4-1/input0
[  431.723414][   T30] audit: type=1400 audit(431.676:1784): avc:  denied  { write } for  pid=10707 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  432.243906][ T7730] udevd[7730]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0xc022d, key code 103): Invalid argument
[  432.244046][ T7730] udevd[7730]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0xc022e, key code 108): Invalid argument
[  433.342100][ T6809] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  433.419996][ T6810] usb 5-1: USB disconnect, device number 17
[  433.489567][   T30] audit: type=1400 audit(433.436:1785): avc:  denied  { write } for  pid=10710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  433.525249][ T6809] usb 1-1: Using ep0 maxpacket: 32
[  433.551794][ T6809] usb 1-1: unable to get BOS descriptor or descriptor too short
[  433.551855][ T6809] usb 1-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=e7.cf
[  433.561596][T10520] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  433.564424][ T6809] usb 1-1: config 14 has an invalid interface number: 64 but max is 0
[  433.564448][ T6809] usb 1-1: config 14 has no interface number 0
[  433.564472][ T6809] usb 1-1: config 14 interface 64 has no altsetting 0
[  433.566131][ T6809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.566152][ T6809] usb 1-1: Product: syz
[  433.566165][ T6809] usb 1-1: Manufacturer: syz
[  433.566178][ T6809] usb 1-1: SerialNumber: syz
[  433.601046][T10520] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  433.613075][T10520] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  433.632229][T10520] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  433.636309][T10520] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  433.663167][T10520] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  433.671991][T10520] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  433.681864][T10520] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  433.768761][T10520] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.826884][T10520] 8021q: adding VLAN 0 to HW filter on device team0
[  433.827667][   T30] audit: type=1400 audit(433.776:1786): avc:  denied  { write } for  pid=10737 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  433.828972][   T30] audit: type=1326 audit(433.776:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.4.1116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ed79e159 code=0x7fc00000
[  433.880389][T10717] FAULT_INJECTION: forcing a failure.
[  433.880389][T10717] name failslab, interval 1, probability 0, space 0, times 0
[  433.880425][T10717] CPU: 0 UID: 0 PID: 10717 Comm: syz.0.1114 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  433.880451][T10717] Tainted: [L]=SOFTLOCKUP
[  433.880458][T10717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  433.880469][T10717] Call Trace:
[  433.880478][T10717]  <TASK>
[  433.880486][T10717]  dump_stack_lvl+0x100/0x190
[  433.880525][T10717]  should_fail_ex.cold+0x5/0xa
[  433.880551][T10717]  should_failslab+0xc2/0x120
[  433.880574][T10717]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  433.880596][T10717]  ? xas_split_alloc+0x182/0x530
[  433.880620][T10717]  xas_split_alloc+0x182/0x530
[  433.880646][T10717]  __folio_split+0x95e/0x1bf0
[  433.880680][T10717]  ? __pfx___folio_split+0x10/0x10
[  433.880709][T10717]  ? folio_alloc_swap+0xbd8/0x1e70
[  433.880736][T10717]  ? folio_alloc_swap+0x4c6/0x1e70
[  433.880760][T10717]  shmem_writeout+0x786/0x1a00
[  433.880789][T10717]  ? __pfx_shmem_writeout+0x10/0x10
[  433.880813][T10717]  ? __pfx_try_to_unmap+0x10/0x10
[  433.880836][T10717]  ? find_held_lock+0x2b/0x80
[  433.880860][T10717]  ? inode_to_bdi+0x9e/0x160
[  433.880884][T10717]  ? folio_clear_dirty_for_io+0x178/0x960
[  433.880913][T10717]  shrink_folio_list+0x399a/0x5e40
[  433.880943][T10717]  ? __pfx_shrink_folio_list+0x10/0x10
[  433.880961][T10717]  ? unwind_next_frame+0xbd/0x2090
[  433.880988][T10717]  ? lock_acquire+0x1d1/0x380
[  433.881007][T10717]  ? is_bpf_text_address+0x8a/0x1a0
[  433.881028][T10717]  ? is_bpf_text_address+0x8a/0x1a0
[  433.881048][T10717]  ? bpf_ksym_find+0x128/0x1c0
[  433.881092][T10717]  ? lock_acquire+0x1d1/0x380
[  433.881116][T10717]  reclaim_folio_list+0xe9/0x5e0
[  433.881139][T10717]  ? __pfx_reclaim_folio_list+0x10/0x10
[  433.881167][T10717]  ? __lock_acquire+0x4c5/0x1ec0
[  433.881190][T10717]  ? rcu_is_watching+0x13/0xc0
[  433.881214][T10717]  reclaim_pages+0x428/0x5e0
[  433.881236][T10717]  ? __pfx_reclaim_pages+0x10/0x10
[  433.881255][T10717]  ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0
[  433.881278][T10717]  ? folio_isolate_lru+0xd6/0xe90
[  433.881303][T10717]  madvise_cold_or_pageout_pte_range+0x147e/0x27b0
[  433.881331][T10717]  ? __lock_acquire+0x4c5/0x1ec0
[  433.881348][T10717]  ? __css_rstat_updated+0x1ce/0x590
[  433.881368][T10717]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  433.881400][T10717]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  433.881422][T10717]  walk_pgd_range+0xbef/0x1e00
[  433.881453][T10717]  ? find_held_lock+0x2b/0x80
[  433.881483][T10717]  ? __pfx_walk_pgd_range+0x10/0x10
[  433.881516][T10717]  ? __pfx_folio_batch_move_lru+0x10/0x10
[  433.881541][T10717]  __walk_page_range+0x171/0x850
[  433.881577][T10717]  walk_page_range_vma_unsafe+0x209/0x8f0
[  433.881607][T10717]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  433.881639][T10717]  ? find_held_lock+0x2b/0x80
[  433.881662][T10717]  ? mlock_drain_local+0x254/0x4e0
[  433.881687][T10717]  ? mlock_drain_local+0x254/0x4e0
[  433.881714][T10717]  walk_page_range_vma+0x63/0x90
[  433.881733][T10717]  madvise_pageout+0x29e/0x5b0
[  433.881755][T10717]  ? __pfx_madvise_pageout+0x10/0x10
[  433.881792][T10717]  madvise_vma_behavior+0x48b/0x2350
[  433.881816][T10717]  ? mas_prev+0xa4/0x100
[  433.881838][T10717]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  433.881861][T10717]  ? mas_walk+0x260/0x310
[  433.881879][T10717]  ? find_vma_prev+0xd8/0x150
[  433.881898][T10717]  ? __pfx_find_vma_prev+0x10/0x10
[  433.881916][T10717]  ? lock_acquire+0x1d1/0x380
[  433.881945][T10717]  madvise_walk_vmas+0x30e/0xc50
[  433.881971][T10717]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  433.881994][T10717]  ? __pfx_futex_wake_mark+0x10/0x10
[  433.882024][T10717]  ? lock_acquire+0x1d1/0x380
[  433.882044][T10717]  madvise_do_behavior+0x1ea/0x510
[  433.882068][T10717]  ? __pfx_madvise_do_behavior+0x10/0x10
[  433.882090][T10717]  ? down_read+0x13b/0x4c0
[  433.882121][T10717]  do_madvise+0x238/0x290
[  433.882141][T10717]  ? __pfx_do_madvise+0x10/0x10
[  433.882161][T10717]  ? do_futex+0x190/0x440
[  433.882204][T10717]  __x64_sys_madvise+0xa9/0x110
[  433.882225][T10717]  ? lockdep_hardirqs_on+0x7d/0x110
[  433.882243][T10717]  do_syscall_64+0x123/0x790
[  433.882264][T10717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.882282][T10717] RIP: 0033:0x7fec68b9e159
[  433.882298][T10717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  433.882314][T10717] RSP: 002b:00007fec69999028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  433.882332][T10717] RAX: ffffffffffffffda RBX: 00007fec68e25fa0 RCX: 00007fec68b9e159
[  433.882344][T10717] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000
[  433.882354][T10717] RBP: 00007fec68c35024 R08: 0000000000000000 R09: 0000000000000000
[  433.882364][T10717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  433.882374][T10717] R13: 00007fec68e26038 R14: 00007fec68e25fa0 R15: 00007ffc33338ac8
[  433.882397][T10717]  </TASK>
[  434.060169][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.060243][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.129070][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.129159][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.331464][ T6809] belkin_sa 1-1:14.64: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  434.340179][ T6809] usb 1-1: bcdDevice: e7cf, bfc: 0
[  434.349910][ T6809] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  434.364131][ T6809] usb 1-1: USB disconnect, device number 84
[  434.390045][ T6809] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  434.391750][ T6809] belkin_sa 1-1:14.64: device disconnected
[  434.428026][   T30] audit: type=1326 audit(434.376:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10728 comm="syz.4.1116" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f43ed79e159 code=0x7fc00000
[  434.595512][   T30] audit: type=1326 audit(434.546:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.8.1117" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac159e159 code=0x7ffc0000
[  434.595585][   T30] audit: type=1326 audit(434.546:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.8.1117" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac159e159 code=0x7ffc0000
[  434.604713][   T30] audit: type=1326 audit(434.546:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.8.1117" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1ac159e159 code=0x7ffc0000
[  434.604777][   T30] audit: type=1326 audit(434.546:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.8.1117" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac159e159 code=0x7ffc0000
[  434.604812][   T30] audit: type=1326 audit(434.546:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.8.1117" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac159e159 code=0x7ffc0000
[  434.617500][   T30] audit: type=1326 audit(434.546:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.8.1117" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1ac159e159 code=0x7ffc0000
[  434.734450][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  434.734493][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  435.652277][T10777] netlink: 'syz.3.1121': attribute type 23 has an invalid length.
[  436.548622][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1122'.
[  436.701643][T10799] 8021q: adding VLAN 0 to HW filter on device bond1
[  436.714457][T10520] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.477750][T10843] netlink: 'syz.8.1126': attribute type 23 has an invalid length.
[  439.523404][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  439.523452][   T30] audit: type=1326 audit(439.476:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.0.1129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec68b9e159 code=0x7ffc0000
[  439.524121][   T30] audit: type=1326 audit(439.476:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.0.1129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fec68b9e159 code=0x7ffc0000
[  439.525412][   T30] audit: type=1326 audit(439.476:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.0.1129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec68b9e159 code=0x7ffc0000
[  439.528191][   T30] audit: type=1326 audit(439.476:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.0.1129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec68b9e159 code=0x7ffc0000
[  439.541234][   T30] audit: type=1326 audit(439.496:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.0.1129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fec68b9e159 code=0x7ffc0000
[  439.541282][   T30] audit: type=1326 audit(439.496:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.0.1129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec68b9e159 code=0x7ffc0000
[  439.541319][   T30] audit: type=1326 audit(439.496:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.0.1129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec68b9e159 code=0x7ffc0000
[  439.548779][   T30] audit: type=1326 audit(439.496:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.0.1129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fec68b9e159 code=0x7ffc0000
[  439.549047][   T30] audit: type=1326 audit(439.496:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.0.1129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec68b9e159 code=0x7ffc0000
[  439.549081][   T30] audit: type=1326 audit(439.496:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10846 comm="syz.0.1129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec68b9e159 code=0x7ffc0000
[  439.572113][T10520] veth0_vlan: entered promiscuous mode
[  439.604316][T10520] veth1_vlan: entered promiscuous mode
[  440.007944][T10520] veth0_macvtap: entered promiscuous mode
[  440.031845][T10520] veth1_macvtap: entered promiscuous mode
[  440.067009][T10520] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.091325][T10520] batman_adv: batadv0: Interface activated: batadv_slave_1
[  440.231128][ T5704] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  440.357926][ T5972] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.417001][   T85] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.417337][   T85] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.417603][   T85] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.435521][ T5704] usb 4-1: Using ep0 maxpacket: 32
[  440.458773][ T5704] usb 4-1: unable to get BOS descriptor or descriptor too short
[  440.467011][ T5704] usb 4-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=e7.cf
[  440.491605][ T5704] usb 4-1: config 14 has an invalid interface number: 64 but max is 0
[  440.499985][ T5704] usb 4-1: config 14 has no interface number 0
[  440.500201][ T5704] usb 4-1: config 14 interface 64 has no altsetting 0
[  440.519205][T10872] picdev_read: 4 callbacks suppressed
[  440.519261][T10872] kvm: pic: non byte read
[  440.519431][T10872] kvm: pic: non byte read
[  440.519585][T10872] kvm: pic: non byte read
[  440.519766][T10872] kvm: pic: non byte read
[  440.519938][T10872] kvm: pic: non byte read
[  440.520097][T10872] kvm: pic: non byte read
[  440.525850][T10872] kvm: pic: non byte read
[  440.526031][T10872] kvm: pic: non byte read
[  440.526204][T10872] kvm: pic: non byte read
[  440.526377][T10872] kvm: pic: non byte read
[  440.534259][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.534287][ T5704] usb 4-1: Product: syz
[  440.534301][ T5704] usb 4-1: Manufacturer: syz
[  440.534316][ T5704] usb 4-1: SerialNumber: syz
[  440.758165][ T7384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.758203][ T7384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.850592][ T6807] usb 1-1: new full-speed USB device number 85 using dummy_hcd
[  440.853154][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.853173][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.895924][T10863] FAULT_INJECTION: forcing a failure.
[  440.895924][T10863] name failslab, interval 1, probability 0, space 0, times 0
[  440.895978][T10863] CPU: 1 UID: 0 PID: 10863 Comm: syz.3.1130 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  440.895997][T10863] Tainted: [L]=SOFTLOCKUP
[  440.896003][T10863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  440.896011][T10863] Call Trace:
[  440.896016][T10863]  <TASK>
[  440.896021][T10863]  dump_stack_lvl+0x100/0x190
[  440.896045][T10863]  should_fail_ex.cold+0x5/0xa
[  440.896061][T10863]  should_failslab+0xc2/0x120
[  440.896077][T10863]  kmem_cache_alloc_lru_noprof+0x8e/0x6a0
[  440.896095][T10863]  ? xas_split_alloc+0x182/0x530
[  440.896112][T10863]  xas_split_alloc+0x182/0x530
[  440.896130][T10863]  __folio_split+0x95e/0x1bf0
[  440.896154][T10863]  ? __pfx___folio_split+0x10/0x10
[  440.896170][T10863]  ? folio_alloc_swap+0xbd8/0x1e70
[  440.896189][T10863]  ? folio_alloc_swap+0x4c6/0x1e70
[  440.896205][T10863]  shmem_writeout+0x786/0x1a00
[  440.896226][T10863]  ? __pfx_shmem_writeout+0x10/0x10
[  440.896241][T10863]  ? __pfx_try_to_unmap+0x10/0x10
[  440.896257][T10863]  ? find_held_lock+0x2b/0x80
[  440.896274][T10863]  ? inode_to_bdi+0x9e/0x160
[  440.896292][T10863]  ? folio_clear_dirty_for_io+0x178/0x960
[  440.896312][T10863]  shrink_folio_list+0x399a/0x5e40
[  440.896333][T10863]  ? __pfx_shrink_folio_list+0x10/0x10
[  440.896352][T10863]  ? unwind_next_frame+0xbd/0x2090
[  440.896371][T10863]  ? lock_acquire+0x1d1/0x380
[  440.896382][T10863]  ? is_bpf_text_address+0x25/0x1a0
[  440.896417][T10863]  reclaim_folio_list+0xe9/0x5e0
[  440.896430][T10863]  ? lock_acquire+0x1d1/0x380
[  440.896442][T10863]  ? unwind_next_frame+0xbd/0x2090
[  440.896458][T10863]  ? __pfx_reclaim_folio_list+0x10/0x10
[  440.896477][T10863]  ? __lock_acquire+0x4c5/0x1ec0
[  440.896493][T10863]  ? rcu_is_watching+0x13/0xc0
[  440.896511][T10863]  reclaim_pages+0x428/0x5e0
[  440.896527][T10863]  ? __pfx_reclaim_pages+0x10/0x10
[  440.896541][T10863]  ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0
[  440.896558][T10863]  ? folio_isolate_lru+0xd6/0xe90
[  440.896575][T10863]  madvise_cold_or_pageout_pte_range+0x147e/0x27b0
[  440.896597][T10863]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  440.896615][T10863]  ? lock_acquire+0x1d1/0x380
[  440.896626][T10863]  ? free_unref_folios+0x750/0x1790
[  440.896644][T10863]  ? find_held_lock+0x2b/0x80
[  440.896659][T10863]  ? free_unref_folios+0x81c/0x1790
[  440.896675][T10863]  ? free_unref_folios+0x81c/0x1790
[  440.896692][T10863]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  440.896708][T10863]  walk_pgd_range+0xbef/0x1e00
[  440.896736][T10863]  ? __pfx_walk_pgd_range+0x10/0x10
[  440.896755][T10863]  ? __pfx_folio_batch_move_lru+0x10/0x10
[  440.896777][T10863]  __walk_page_range+0x171/0x850
[  440.896814][T10863]  walk_page_range_vma_unsafe+0x209/0x8f0
[  440.896834][T10863]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  440.896856][T10863]  ? find_held_lock+0x2b/0x80
[  440.896871][T10863]  ? mlock_drain_local+0x254/0x4e0
[  440.896893][T10863]  ? mlock_drain_local+0x254/0x4e0
[  440.896913][T10863]  walk_page_range_vma+0x63/0x90
[  440.896926][T10863]  madvise_pageout+0x29e/0x5b0
[  440.896942][T10863]  ? lockdep_hardirqs_on+0x7d/0x110
[  440.896956][T10863]  ? __pfx_madvise_pageout+0x10/0x10
[  440.896983][T10863]  madvise_vma_behavior+0x48b/0x2350
[  440.897001][T10863]  ? mas_prev+0xa4/0x100
[  440.897018][T10863]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  440.897036][T10863]  ? mas_walk+0x260/0x310
[  440.897049][T10863]  ? find_vma_prev+0xd8/0x150
[  440.897062][T10863]  ? __pfx_find_vma_prev+0x10/0x10
[  440.897074][T10863]  ? lock_acquire+0x1d1/0x380
[  440.897094][T10863]  madvise_walk_vmas+0x30e/0xc50
[  440.897112][T10863]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  440.897130][T10863]  ? __pfx_futex_wake_mark+0x10/0x10
[  440.897162][T10863]  ? lock_acquire+0x1d1/0x380
[  440.897176][T10863]  madvise_do_behavior+0x1ea/0x510
[  440.897193][T10863]  ? __pfx_madvise_do_behavior+0x10/0x10
[  440.897209][T10863]  ? down_read+0x13b/0x4c0
[  440.897230][T10863]  do_madvise+0x238/0x290
[  440.897245][T10863]  ? __pfx_do_madvise+0x10/0x10
[  440.897259][T10863]  ? do_futex+0x190/0x440
[  440.897289][T10863]  __x64_sys_madvise+0xa9/0x110
[  440.897303][T10863]  ? lockdep_hardirqs_on+0x7d/0x110
[  440.897316][T10863]  do_syscall_64+0x123/0x790
[  440.897331][T10863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.897343][T10863] RIP: 0033:0x7fdcb459e159
[  440.897355][T10863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.897367][T10863] RSP: 002b:00007fdcb53fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  440.897380][T10863] RAX: ffffffffffffffda RBX: 00007fdcb4825fa0 RCX: 00007fdcb459e159
[  440.897388][T10863] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000
[  440.897397][T10863] RBP: 00007fdcb4635024 R08: 0000000000000000 R09: 0000000000000000
[  440.897404][T10863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  440.897411][T10863] R13: 00007fdcb4826038 R14: 00007fdcb4825fa0 R15: 00007ffc43671338
[  440.897426][T10863]  </TASK>
[  441.042574][ T6807] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  441.045116][ T6807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.620964][ T6807] usb 1-1: selecting invalid altsetting 3
[  441.621067][ T6807] comedi comedi4: could not set alternate setting 3 in high speed
[  441.621142][ T6807] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[  441.653406][ T6807] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22
[  441.853921][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1133'.
[  442.497431][T10891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.498169][T10891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.809352][ T6807] usb 1-1: USB disconnect, device number 85
[  442.819228][ T5704] belkin_sa 4-1:14.64: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  442.845370][ T5704] usb 4-1: bcdDevice: e7cf, bfc: 0
[  442.854214][ T5704] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  442.862915][ T5704] usb 4-1: USB disconnect, device number 57
[  442.901095][ T5704] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  442.901558][ T5704] belkin_sa 4-1:14.64: device disconnected
[  443.251137][T10911] macvlan2: entered allmulticast mode
[  443.370227][ T6807] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  443.410352][ T6810] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  443.551174][ T6807] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  443.725815][ T6807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.725856][ T6807] usb 5-1: Product: syz
[  443.725884][ T6807] usb 5-1: Manufacturer: syz
[  443.725901][ T6807] usb 5-1: SerialNumber: syz
[  443.733181][T10916] netlink: 'syz.5.1140': attribute type 23 has an invalid length.
[  443.750114][ T6810] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  443.768972][ T6810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.768999][ T6810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.769020][ T6810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.809101][ T6810] usb 4-1: config 0 descriptor??
[  443.818061][ T6807] usb 5-1: USB2VGA dongle found at address 18
[  443.826884][ T6807] usb 5-1: Allocated 8 output buffers
[  443.985028][ T6807] usb 5-1: Failed to early initialize device
[  444.011706][ T6807] usb 5-1: USB disconnect, device number 18
[  444.045474][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'.
[  444.101953][T10906] Illegal XDP return value 66 on prog  (id 161) dev syz_tun, expect packet loss!
[  444.102403][T10906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1138'.
[  444.102439][T10906] openvswitch: netlink: Missing key (keys=c0, expected=40280)
[  444.283054][T10931] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  444.312955][ T6810] hid (null): report_id 0 is invalid
[  444.320293][ T6810] hid (null): report_id 38253 is invalid
[  444.329484][ T6810] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[  444.336667][ T6810] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[  444.343588][ T6810] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[  444.350628][ T6810] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[  444.357589][ T6810] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[  444.365168][ T6810] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[  444.372157][ T6810] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[  444.372186][ T6810] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[  444.372208][ T6810] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[  444.372229][ T6810] asus 0003:0B05:1ABE.0016: unknown main item tag 0x0
[  444.372375][ T6810] asus 0003:0B05:1ABE.0016: report_id 0 is invalid
[  444.372391][ T6810] asus 0003:0B05:1ABE.0016: item 0 1 1 8 parsing failed
[  444.372947][ T6810] asus 0003:0B05:1ABE.0016: Asus hid parse failed: -22
[  444.373037][ T6810] asus 0003:0B05:1ABE.0016: probe with driver asus failed with error -22
[  444.452218][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1145'.
[  444.463983][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1145'.
[  444.559842][ T6816] usb 4-1: USB disconnect, device number 58
[  444.608497][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  444.608537][   T30] audit: type=1400 audit(444.556:1834): avc:  denied  { write } for  pid=10939 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  444.968639][   T30] audit: type=1400 audit(444.916:1835): avc:  denied  { write } for  pid=10946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  445.094858][   T30] audit: type=1400 audit(445.046:1836): avc:  denied  { write } for  pid=10968 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  445.249584][   T30] audit: type=1400 audit(445.196:1837): avc:  denied  { accept } for  pid=10974 comm="syz.3.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  445.314758][   T30] audit: type=1400 audit(445.266:1838): avc:  denied  { create } for  pid=10962 comm="syz.4.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  445.344972][   T30] audit: type=1400 audit(445.296:1839): avc:  denied  { bind } for  pid=10962 comm="syz.4.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  445.390320][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'.
[  445.449097][T10942] ceph: No mds server is up or the cluster is laggy
[  445.479264][T10978] hsr_slave_1 (unregistering): left promiscuous mode
[  445.630049][T10986] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1152'.
[  446.120596][ T6809] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  446.179761][   T30] audit: type=1400 audit(446.126:1840): avc:  denied  { write } for  pid=10972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  446.280380][ T6809] usb 1-1: Using ep0 maxpacket: 8
[  446.287661][ T6809] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  446.297737][ T6809] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  446.297780][ T6809] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  446.297825][ T6809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.334806][ T6809] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected
[  446.353709][ T6809] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  446.574509][   T30] audit: type=1400 audit(446.526:1841): avc:  denied  { write } for  pid=11008 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  447.148451][   T30] audit: type=1400 audit(447.066:1842): avc:  denied  { write } for  pid=11009 comm="syz.5.1159" name="configs" dev="configfs" ino=16492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  447.148680][   T30] audit: type=1400 audit(447.076:1843): avc:  denied  { write } for  pid=11009 comm="syz.5.1159" name="functions" dev="configfs" ino=16491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  447.478265][ T5711] usb 1-1: USB disconnect, device number 86
[  447.504293][ T5711] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  447.515237][ T5711] kobil_sct 1-1:1.0: device disconnected
[  447.690570][ T5704] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  448.154197][   T31] INFO: task syz.6.668:8676 blocked for more than 
** replaying previous printk message **
[  448.154197][   T31] INFO: task syz.6.668:8676 blocked for more than 143 seconds.
[  448.154241][   T31]       Tainted: G             L      syzkaller #0
[  448.154268][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  448.154278][   T31] task:syz.6.668       state:D stack:28152 pid:8676  tgid:8669  ppid:6837   task_flags:0x400140 flags:0x00080002
[  448.154340][   T31] Call Trace:
[  448.154349][   T31]  <TASK>
[  448.154362][   T31]  __schedule+0x1259/0x6920
[  448.154388][   T31]  ? __lock_acquire+0x4c5/0x1ec0
[  448.154417][   T31]  ? do_raw_spin_lock+0x128/0x260
[  448.154449][   T31]  ? __pfx___schedule+0x10/0x10
[  448.154467][   T31]  ? find_held_lock+0x2b/0x80
[  448.154511][   T31]  ? schedule+0x225/0x2c0
[  448.154537][   T31]  schedule+0xdd/0x2c0
[  448.154559][   T31]  schedule_preempt_disabled+0x13/0x30
[  448.154581][   T31]  __mutex_lock+0xccb/0x1bd0
[  448.154606][   T31]  ? nfsd_nl_expkey_set_reqs_doit+0x8a/0x2f0
[  448.154640][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  448.154671][   T31]  ? net_generic+0x25/0x2a0
[  448.154696][   T31]  ? net_generic+0xea/0x2a0
[  448.154719][   T31]  ? net_generic+0xea/0x2a0
[  448.154748][   T31]  ? nfsd_nl_expkey_set_reqs_doit+0x8a/0x2f0
[  448.154774][   T31]  nfsd_nl_expkey_set_reqs_doit+0x8a/0x2f0
[  448.154801][   T31]  genl_family_rcv_msg_doit+0x214/0x300
[  448.154826][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  448.154856][   T31]  ? bpf_lsm_capable+0x9/0x10
[  448.154883][   T31]  ? security_capable+0x80/0x260
[  448.154918][   T31]  genl_rcv_msg+0x560/0x800
[  448.154944][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  448.154973][   T31]  ? __lock_acquire+0x4c5/0x1ec0
[  448.155047][   T31]  ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10
[  448.155086][   T31]  netlink_rcv_skb+0x159/0x420
[  448.155118][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  448.155142][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  448.155185][   T31]  ? netlink_deliver_tap+0x1ae/0xcc0
[  448.155220][   T31]  genl_rcv+0x28/0x40
[  448.155241][   T31]  netlink_unicast+0x585/0x850
[  448.155277][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  448.155314][   T31]  netlink_sendmsg+0x8b0/0xda0
[  448.155349][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.155384][   T31]  ? selinux_socket_sendmsg+0x198/0x2f0
[  448.155420][   T31]  ____sys_sendmsg+0xa4d/0xbe0
[  448.155447][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.155479][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  448.155529][   T31]  ___sys_sendmsg+0x190/0x1e0
[  448.158857][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  448.158891][   T31]  ? futex_wait+0x11e/0x370
[  448.158924][   T31]  ? find_held_lock+0x2b/0x80
[  448.159055][   T31]  __sys_sendmsg+0x160/0x210
[  448.159074][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[  448.159104][   T31]  do_syscall_64+0x123/0x790
[  448.159126][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.159144][   T31] RIP: 0033:0x7fde2fb9e159
[  448.159158][   T31] RSP: 002b:00007fde2ddf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  448.159176][   T31] RAX: ffffffffffffffda RBX: 00007fde2fe26180 RCX: 00007fde2fb9e159
[  448.159188][   T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 000000000000000a
[  448.159199][   T31] RBP: 00007fde2fc35024 R08: 0000000000000000 R09: 0000000000000000
[  448.159210][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  448.159220][   T31] R13: 00007fde2fe26218 R14: 00007fde2fe26180 R15: 00007ffd5b2861d8
[  448.159244][   T31]  </TASK>
[  448.159283][   T31] 
[  448.159283][   T31] Showing all locks held in the system:
[  448.159291][   T31] locks held by pr/ttyS0/16: 2, last CPU#1:
[  448.159303][   T31]  #0: ffffffff8edd8338 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60
[  448.159346][   T31]  #1: ffffffff9bc63c78 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0
[  448.159392][   T31] locks held by khungtaskd/31: 1, last CPU#0:
[  448.159403][   T31]  #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  448.159455][   T31] locks held by kworker/u8:7/154: 1, last CPU#1:
[  448.159466][   T31]  #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: process_one_work+0x880/0x1b10
[  448.159532][   T31] locks held by getty/5355: 2, on CPU#0:
[  448.159543][   T31]  #0: ffff888032f420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  448.159586][   T31]  #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0
[  448.159632][   T31] locks held by kworker/1:4/5704: 6, on CPU#1:
[  448.159644][   T31]  #0: ffff888023af4540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[  448.159687][   T31]  #1: ffffc90002fefd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[  448.159731][   T31]  #2: ffff888029b111d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420
[  448.159770][   T31]  #3: ffff888029b16568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420
[  448.159808][   T31]  #4: ffff88802a25ed60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420
[  448.159846][   T31]  #5: ffffffff9027e148 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1bd0
[  448.159890][   T31] locks held by syz.1.611/8383: 3, on CPU#0:
[  448.159901][   T31]  #0: ffff888074da0ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  448.159942][   T31]  #1: ffff88807ec02460 (sb_writers#22){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  448.160035][   T31]  #2: ffffffff8f287680 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0
[  448.160091][   T31] locks held by syz.6.668/8676: 2, on CPU#0:
[  448.160102][   T31]  #0: ffffffff90d7eac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  448.160164][   T31]  #1: ffffffff8f287680 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0x8a/0x2f0
[  448.160206][   T31] locks held by syz.9.1035/10168: 3, on CPU#1:
[  448.160218][   T31]  #0: ffffffff90d7eac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  448.160251][   T31]  #1: ffff88802b3796e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990
[  448.160294][   T31]  #2: ffffffff8f287680 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0x112/0xd10
[  448.160339][   T31] locks held by syz.5.1161/11033: 2, last CPU#1:
[  448.160350][   T31]  #0: ffffffff8edd82c0 (console_lock){+.+.}-{0:0}, at: vt_resize+0x45/0xf0
[  448.160392][   T31]  #1: ffff8880412ec350 (&tty->winsize_mutex){+.+.}-{4:4}, at: tty_do_resize+0x2f/0x140
[  448.160434][   T31] locks held by dhcpcd-run-hook/11030: 1, last CPU#1:
[  448.160446][   T31]  #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: path_init+0xac1/0x1ab0
[  448.160483][   T31] 
[  448.160487][   T31] =============================================
[  448.160487][   T31] 
[  448.160495][   T31] NMI backtrace for cpu 0
[  448.160507][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  448.160530][   T31] Tainted: [L]=SOFTLOCKUP
[  448.160536][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  448.160546][   T31] Call Trace:
[  448.160553][   T31]  <TASK>
[  448.160559][   T31]  dump_stack_lvl+0x100/0x190
[  448.160583][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  448.160607][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  448.160627][   T31]  nmi_trigger_cpumask_backtrace+0x21f/0x2a0
[  448.160653][   T31]  sys_info+0x141/0x190
[  448.160673][   T31]  watchdog+0xcb1/0x1030
[  448.160695][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  448.160712][   T31]  ? __pfx_watchdog+0x10/0x10
[  448.160730][   T31]  ? __kthread_parkme+0x18f/0x230
[  448.160751][   T31]  ? kthread+0x13a/0x450
[  448.160770][   T31]  ? __pfx_watchdog+0x10/0x10
[  448.160786][   T31]  kthread+0x373/0x450
[  448.160806][   T31]  ? __pfx_kthread+0x10/0x10
[  448.160827][   T31]  ret_from_fork+0x730/0xd60
[  448.160846][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  448.160865][   T31]  ? __switch_to+0x800/0x10f0
[  448.160886][   T31]  ? __pfx_kthread+0x10/0x10
[  448.160909][   T31]  ret_from_fork_asm+0x1a/0x30
[  448.160936][   T31]  </TASK>
[  448.160942][   T31] Sending NMI from CPU 0 to CPUs 1:
[  448.160967][    C1] NMI backtrace for cpu 1
[  448.160978][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  448.160998][    C1] Tainted: [L]=SOFTLOCKUP
[  448.161002][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  448.161010][    C1] RIP: 0010:io_serial_in+0x87/0xb0
[  448.161033][    C1] Code: 07 5c fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 48 1a cf fc eb a2 e8 d1 1a
[  448.161046][    C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002
[  448.161058][    C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000
[  448.161067][    C1] RDX: 00000000000003fd RSI: ffffffff85afe8d0 RDI: ffffffff9bc63ca0
[  448.161077][    C1] RBP: ffffffff9bc63c60 R08: 0000000000000001 R09: 000000000000001f
[  448.161086][    C1] R10: 0000000000000000 R11: 205d313354202020 R12: 0000000000000000
[  448.161094][    C1] R13: 0000000000000020 R14: fffffbfff378c7e9 R15: dffffc0000000000
[  448.161104][    C1] FS:  0000000000000000(0000) GS:ffff888123c61000(0000) knlGS:0000000000000000
[  448.161118][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  448.161128][    C1] CR2: 00007f2eb68e0000 CR3: 000000003c6b5000 CR4: 00000000003526f0
[  448.161137][    C1] Call Trace:
[  448.161142][    C1]  <TASK>
[  448.161149][    C1]  wait_for_lsr+0x13a/0x210
[  448.161165][    C1]  serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0
[  448.161181][    C1]  __serial8250_console_fifo_write+0xa5/0x290
[  448.161195][    C1]  ? __pfx_io_serial_out+0x10/0x10
[  448.161215][    C1]  serial8250_console_write+0xf46/0x1330
[  448.161234][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  448.161250][    C1]  ? __nbcon_context_update_unsafe+0x1b6/0x220
[  448.161272][    C1]  ? __pfx___nbcon_context_update_unsafe+0x10/0x10
[  448.161295][    C1]  nbcon_emit_next_record+0x8f7/0xa70
[  448.161317][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  448.161337][    C1]  ? nbcon_context_try_acquire+0x3a6/0xc60
[  448.161357][    C1]  ? do_raw_spin_lock+0xd0/0x260
[  448.161376][    C1]  ? __pfx___cant_migrate+0x10/0x10
[  448.161393][    C1]  ? _raw_spin_lock_irqsave+0x42/0x60
[  448.161415][    C1]  nbcon_emit_one+0x1a8/0x2b0
[  448.161434][    C1]  ? __pfx_nbcon_emit_one+0x10/0x10
[  448.161461][    C1]  nbcon_kthread_func+0x613/0x7d0
[  448.161483][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  448.161505][    C1]  ? __kthread_parkme+0x18f/0x230
[  448.161521][    C1]  ? kthread+0x13a/0x450
[  448.161538][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  448.161557][    C1]  kthread+0x373/0x450
[  448.161573][    C1]  ? __pfx_kthread+0x10/0x10
[  448.161591][    C1]  ret_from_fork+0x730/0xd60
[  448.161605][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  448.161620][    C1]  ? __switch_to+0x800/0x10f0
[  448.161637][    C1]  ? __pfx_kthread+0x10/0x10
[  448.161655][    C1]  ret_from_fork_asm+0x1a/0x30
[  448.161674][    C1]  </TASK>
[  448.161987][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  449.202578][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  449.213252][   T31] Tainted: [L]=SOFTLOCKUP
[  449.217574][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  449.227612][   T31] Call Trace:
[  449.230878][   T31]  <TASK>
[  449.233800][   T31]  dump_stack_lvl+0x100/0x190
[  449.238479][   T31]  vpanic+0x553/0x970
[  449.242455][   T31]  ? __pfx_vpanic+0x10/0x10
[  449.246945][   T31]  panic+0xd1/0xe0
[  449.250649][   T31]  ? __pfx_panic+0x10/0x10
[  449.255049][   T31]  ? nmi_trigger_cpumask_backtrace+0x263/0x2a0
[  449.261194][   T31]  ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0
[  449.267347][   T31]  ? watchdog.cold+0x1ec/0x234
[  449.272105][   T31]  watchdog.cold+0x1fd/0x234
[  449.276696][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  449.282499][   T31]  ? __pfx_watchdog+0x10/0x10
[  449.287187][   T31]  ? __kthread_parkme+0x18f/0x230
[  449.292216][   T31]  ? kthread+0x13a/0x450
[  449.296460][   T31]  ? __pfx_watchdog+0x10/0x10
[  449.301121][   T31]  kthread+0x373/0x450
[  449.305196][   T31]  ? __pfx_kthread+0x10/0x10
[  449.309775][   T31]  ret_from_fork+0x730/0xd60
[  449.314352][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  449.319451][   T31]  ? __switch_to+0x800/0x10f0
[  449.324117][   T31]  ? __pfx_kthread+0x10/0x10
[  449.328698][   T31]  ret_from_fork_asm+0x1a/0x30
[  449.333455][   T31]  </TASK>
[  449.336674][   T31] Kernel Offset: disabled
[  449.340986][   T31] Rebooting in 86400 seconds..