last executing test programs:

32m58.890793814s ago: executing program 32 (id=253):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008ef17a36000000000000109022400010000900b092228000905810300040b"], 0x0)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x82)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
socket(0x2c, 0x80000, 0x2)
syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x59, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b01020301090247000100000800"], 0x0)
r1 = syz_usbip_server_init(0x3)
write$usbip_server(r1, &(0x7f0000000000)=@ret_unlink={{0x4, 0x4, 0x0, 0x1, 0x4}, {0xc}}, 0x30)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1f, 0x7d3, 0x5, 0xffffffff, 0x1090c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'veth0_virt_wifi\x00', {}, 0x4c00})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f00000031c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@flag='lazytime'}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '.+'}}]}})
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020705000000000000000000040000010500010008000000050005000200000005000400000000000900020073797a31000000000c000780080008400000009011000300686173683a69702c6d61726b00000000"], 0x58}}, 0x0)
syz_usb_connect$midi(0x3, 0xa0, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x86a, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x1, 0x1, 0x3, 0x40, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x5a, [@midi_out_jack={0xf, 0x24, 0x3, 0x3, 0x63, 0x4, [{0x8, 0x4}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x1}], 0xd}], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x0, 0x7, 0xf0, {0xd, 0x25, 0x1, 0x9, "2248839fca3e31e5bc"}}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x1, 0x81, 0x9, {0x8, 0x25, 0x1, 0x4, "f3598a2e"}}}, {{0x9, 0x5, 0xa, 0x36b02d917295f303, 0x400, 0x9, 0x5, 0x1, {0x14, 0x25, 0x1, 0x10, "9b657193b8fb5534e1a690973ca3466e"}}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x3, 0x2, 0x7c, {0x8, 0x25, 0x1, 0x4, "b4d83cb7"}}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x3, 0xff, 0xc2, {0xf, 0x25, 0x1, 0xb, "9512cda054328dc46c426d"}}}]}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x3, 0x1, 0xb, 0xff, 0x8}, 0x46, &(0x7f00000005c0)={0x5, 0xf, 0x46, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x4, 0x63bd, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "27a849d0672e7424acc4807eb3da8e9b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x3, 0x5, 0x8, 0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "1b0f30a353fdbeafd499aa5d7fd176a7"}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x85, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x414}}]})

31m47.534810258s ago: executing program 33 (id=467):
syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x202, 0x12)
syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef2860", 0x5c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e48", 0x29}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094", 0xc0}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xbad}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

26m45.589724876s ago: executing program 34 (id=1123):
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
move_pages(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0)

26m44.667467925s ago: executing program 35 (id=1126):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
r1 = memfd_create(&(0x7f0000000580)='+\x8b\x8a\x16\x06O\xdd\xcfk\x05F\x00\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcR\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2E\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x89V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xda\xb5\xba\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x80\x00\x00\x00!\x16Uu\xe3I\f\x171~\xdf\xe6\xc82\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\x85\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\xdfIn\x97\x0263~\xeb\xbe(i\n\a\x004\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa7\xfd\xb8O\xb9j\xb8\x04\x9dx\xb2\x86\xad\x92\x9be\xe4\x00\x00\x00\x80\xf1\xacQ\xb9O\xd4\x14\xa1\x01\x04\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x83nk\xd3\xc9/m\x1aT\x8f\'\xef\xa6D\xab\xcfs\x97.\xf2\xf4wK`\xa9S\x98>0\x92\xd9\xb8\xb2\x17,\xd6\xf8\n\x93\xc1\x10qk.\xf6\x9bY\xe6\x92\xef\xa2o\\\x9b\xeb\x93v\x11B\xf6', 0x2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="a2", 0x1}], 0x1, 0x0, 0x0, 0x4000000}, 0x0)
fcntl$addseals(r1, 0x409, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000180))
fallocate(r3, 0x13, 0xdf, 0x3)
gettid()
socket$xdp(0x2c, 0x3, 0x0)

21m3.405096343s ago: executing program 8 (id=2085):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x500, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

21m2.50904983s ago: executing program 8 (id=2091):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd, 0x0, <r1=>0x0})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)

21m1.777180897s ago: executing program 8 (id=2093):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
rmdir(&(0x7f0000000140)='./cgroup/../file0\x00')
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4d0, 0x0, 0x1e0, 0xffffffff, 0x0, 0x1e0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv6=@mcast2, @gre_key, @gre_key}}}, {{@ipv6={@dev, @loopback, [], [], 'dvmrp0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"a7fe"}}, @common=@srh={{0x30}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ptrace(0x10, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="210329bd7000fbdbfdffffffffffffff0180"], 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}, {{0x0, 0x0, 0x0}, 0x9}], 0x6, 0x20, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @broadcast}, 0x43, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xc463, 0xa95b})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}, 0x4e}]})

21m0.188657853s ago: executing program 8 (id=2096):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)

20m56.670777928s ago: executing program 8 (id=2103):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001002089}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_UIE_ON(r4, 0x7003)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x295f, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x9}}, [0x8, 0x2, 0x7c2, 0xd, 0x7, 0x7650, 0x0, 0x6, 0x8, 0xfffffffffffffff7, 0x6, 0x3, 0x1, 0x9, 0xf60c]}, &(0x7f00000002c0)=0x100)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$netlink(r8, 0x0, 0x0)
r9 = syz_open_dev$evdev(&(0x7f00000010c0), 0x80000000, 0x4000)
ioctl$EVIOCGMASK(r9, 0x80104592, &(0x7f00000011c0)={0x0, 0xa8, &(0x7f0000001100)="189ec93fa48ae7baa9bccfb91928c39205974663f5909c0be0c381b5830ff0a2fc6e685024919aebb8dfc9cd0f960c4997701b8c40d9494a71b7cddeafc08184185ad99e253309262affa68518827b0fa6d348b8b6bc249b21d2a773adc5e44e607fcb238fd764ab64109698f29bb0a993613186001e6cf317272f6ed723835ee040b5f91356177fa9c95ec57c700976e34ced05edce61594654c7ba1031c120bb643784962c0c46"})

20m54.48850105s ago: executing program 8 (id=2107):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
rmdir(&(0x7f0000000140)='./cgroup/../file0\x00')
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4d0, 0x0, 0x1e0, 0xffffffff, 0x0, 0x1e0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv6=@mcast2, @gre_key, @gre_key}}}, {{@ipv6={@dev, @loopback, [], [], 'dvmrp0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"a7fe"}}, @common=@srh={{0x30}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ptrace(0x10, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="210329bd7000fbdbfdffffffffffffff0180"], 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}, {{0x0, 0x0, 0x0}, 0x9}], 0x6, 0x20, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @broadcast}, 0x43, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xc463, 0xa95b})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}, 0x4e}]})

20m38.476115245s ago: executing program 36 (id=2107):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
rmdir(&(0x7f0000000140)='./cgroup/../file0\x00')
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4d0, 0x0, 0x1e0, 0xffffffff, 0x0, 0x1e0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'dvmrp0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@loopback, @ipv6=@mcast2, @gre_key, @gre_key}}}, {{@ipv6={@dev, @loopback, [], [], 'dvmrp0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@mh={{0x28}, {"a7fe"}}, @common=@srh={{0x30}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
ptrace(0x10, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="210329bd7000fbdbfdffffffffffffff0180"], 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
recvmmsg(r4, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}, {{0x0, 0x0, 0x0}, 0x9}], 0x6, 0x20, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @broadcast}, 0x43, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xc463, 0xa95b})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}, 0x4e}]})

16m22.624881612s ago: executing program 4 (id=2655):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x711, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x9, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xc8Ng\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
syz_open_dev$swradio(&(0x7f0000002740), 0x0, 0x2)
fcntl$addseals(r2, 0x409, 0x8)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x392fc000)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r3, 0x300127)
keyctl$KEYCTL_MOVE(0x11, r3, 0x0, r3, 0x1)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

16m22.432524699s ago: executing program 4 (id=2657):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r0=>0x0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x64, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket(0x10, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4048004)

16m21.263151073s ago: executing program 4 (id=2661):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001002089}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001aa40)=""/102392, 0x18ff8)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_UIE_ON(r3, 0x7003)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
unshare(0x400)
syz_open_dev$evdev(&(0x7f00000010c0), 0x80000000, 0x4000)

16m17.391367943s ago: executing program 4 (id=2668):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0xc65b, 0x4)
readv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c8d090584e1"], 0x0)

16m8.802361679s ago: executing program 4 (id=2679):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r4 = fcntl$dupfd(r3, 0x0, r3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", "8df69b29", "ae7ebfdf4de38175"}, 0x28)
r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0)
bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)

16m5.228975953s ago: executing program 4 (id=2683):
r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
personality(0x5400004)
wait4(r0, 0x0, 0x40000000, 0x0)

15m37.670205417s ago: executing program 5 (id=2718):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fa3f000000000000080000008500000075000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a802e00000000009ee5179da5a02b9e9171452bc520ae8cc4044ed34445bc24eaba56a705251e6182949afc422e41ebfc50b887934fcbd3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000044)

15m30.376250332s ago: executing program 5 (id=2734):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="dcb376bd119b883c215268373d835c409f56bf7f7012d1e11f0583cd52f37260b48b7257c7dce80b18cdce529ba9bc6dfc6aa18cf5dc42a47bf69a7932520b9dc69547f8646913039627c5cea1c3e6e4f7abb2fcf6930f41ee2e2cd593eb6244fef1d076d11a73a0d99665f53e8af26dd8e0540300b98302f3d56f217fd26db6659cd906ba368c2cbee9cbdf26cd893ecdb764c68bb4a668f234ea3ad354afa2b13867dac45e58279b0cf2b797462a19a7623a2e082a3e706176a66176"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004000)
socket$alg(0x26, 0x5, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_connect$cdc_ncm(0x1, 0x160, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109024e01020105c0030904000001020200000724060001812a052400ff030d240f01650c00000d0000000506241a4000100c241b0000ff0f0200040008cf241302b366653a59bd8fda14b668a7795b865d4f2c715ddd14013e8f4ff9335b1f0000c98bdfd5024a7c1a588fe6d6ef455ff0306c9102a1a02cf4b06c"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
socket(0x2, 0x2, 0x0)

15m29.36283922s ago: executing program 9 (id=2735):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000640)=@gcm_256={{0x303}, "272bd2e21fbc971b", "a83f6f9ce07ab567c78432500d714d199483d7b60ea6881bddb1a0a9ee83e939", "9af6b7b2", "2d87824a7af100"}, 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x51a9497)
syz_genetlink_get_family_id$ethtool(0x0, r4)
ioctl$TIOCGSOFTCAR(r0, 0x4b46, &(0x7f0000000140))
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x5, 0xb4, 0x5, 0x0, 0x1, 0x81})
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0x4}, {0x4, 0x3}, {0x3, 0xa3}, {0x1, 0x8}, {0x401, 0xf}]})

15m27.13666488s ago: executing program 9 (id=2736):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r3, &(0x7f0000000440)=""/55, 0x37, 0x40000101, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0008}]})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x26, &(0x7f0000000200)=0x100000b7, 0x4)
inotify_rm_watch(0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd610000e500122f00fe8000000000000000000000000000bb"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00\b', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0xfffe}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@generic={0x6b, 0x1, 0x1, 0x8e}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000001000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="1c005e8010000100ffffff282000000005000000080002"], 0x38}}, 0x0)

15m26.657088783s ago: executing program 5 (id=2737):
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x81002, 0x0)
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0}], 0x2, 0x9, 0x4)
socket$packet(0x11, 0x2, 0x300)
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0)

15m26.042772917s ago: executing program 9 (id=2739):
r0 = userfaultfd(0x801)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

15m25.58780851s ago: executing program 9 (id=2740):
r0 = userfaultfd(0x801)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (fail_nth: 1)

15m25.426184701s ago: executing program 5 (id=2741):
syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x202, 0x12)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233", 0x19}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a", 0x14}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094", 0xc0}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeb7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x8c}]}, 0x0, 0x7fff, 0x0, 0x0, 0x41100, 0x3}, 0x94)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

15m24.823019621s ago: executing program 9 (id=2742):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}, {&(0x7f0000000100)="6306bc3795f8", 0x6}], 0x2, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x38, 0x0, 0x8, [0x1, 0x2c6, 0xff, 0x9, 0x8]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}], 0xa8}, 0x0)

15m24.489951435s ago: executing program 9 (id=2743):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0)
socket(0x2, 0x80805, 0x0)
memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
socket(0x10, 0x803, 0x0)
socket(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

15m23.987603314s ago: executing program 5 (id=2744):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f00001aa000/0x2000)=nil, 0x2000, 0x8)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000540)=@x25, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000680)=""/34, 0x22}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/93, 0x5d}, {&(0x7f0000001740)=""/124, 0x7c}, {&(0x7f00000017c0)=""/147, 0x93}, {&(0x7f0000001880)=""/242, 0xf2}, {&(0x7f0000001980)=""/56, 0x38}, {&(0x7f00000019c0)=""/102, 0x66}, {&(0x7f0000001a40)=""/243, 0xf3}], 0x9, &(0x7f0000001c00)=""/43, 0x2b}, 0x3ff}, {{&(0x7f0000001c40)=@xdp, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000004c0)=""/5, 0x5}, {&(0x7f0000001d00)=""/175, 0xaf}], 0x2, &(0x7f0000001e00)=""/216, 0xd8}, 0x8}, {{&(0x7f0000001f00)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001f80)=""/71, 0x47}, {&(0x7f0000002000)=""/23, 0x17}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000002100)=""/53, 0x35}, {&(0x7f0000002480)=""/40, 0x28}, {&(0x7f0000000100)=""/21, 0x15}], 0x6}, 0x8001}, {{&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002340)=[{&(0x7f00000022c0)=""/66, 0x42}], 0x1, &(0x7f0000002380)=""/69, 0x45}, 0x1}, {{&(0x7f0000002400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003980)=[{&(0x7f0000003800)=""/252, 0xfc}, {&(0x7f0000003900)=""/86, 0x56}], 0x2, &(0x7f00000024c0)=""/234, 0xea}, 0x6}], 0x5, 0x120, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x0)
preadv(r6, 0x0, 0x0, 0x80000000, 0x9)
mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f00000025c0)=ANY=[@ANYBLOB="7472616e733d756effffff7f00000000e5910fa6675de5722738b73ff49913a3d2856759d7b49d867c8b24c6cd48625e45281ebba4c2fcf8"])
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000500)={0x3a, &(0x7f00000005c0)=[{0x12, '\x00', @buffer={"e0615f1132b11e4f262e9c15e3f5cafa7c7aba49c3223610f33af1dd27b037b0", 0x20}}, {0x38, '\x00', @st={0x4, [{0x3, @uvalue=0x5}, {0x2, @uvalue=0x5}, {0x2, @svalue=0xc6}, {0x1, @svalue=0x7}]}, 0x12}]})
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb110018000000000000007400000074000000050000000400000004000093010000000d0000000600000010658b730400000002000000060000000600000001000000b60f000001110000ff00000003000000010000000000001203000000000000000000000300000000040000040300000003000000000000000100000d000000000600000003000000002e003000"], &(0x7f0000000200)=""/98, 0x91, 0x62, 0x1, 0x9}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r8], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r8}, 0x94)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000b, 0x10010, r7, 0x8772f000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000000300008000000000001c0004800800074000001300080004400000020008000940000000080900010073797a30000000354b8f4505d8802900"/76], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="050b28bd7000ffdbdf255400000008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000080)

15m20.530831375s ago: executing program 5 (id=2748):
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xe, 0x7f, 0x0, 0xa, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_address={0x5, 0x6, 0x32, 0x0, 0x0, @in6={0xa, 0x4e20, 0xd, @mcast1, 0xd13}}]}, 0x50}}, 0x2)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x87}, @l2cap_cid_signaling={{0x83}, [@l2cap_disconn_rsp={{0x7, 0xff, 0x4}, {0x2, 0x5}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x7, 0x6, 0xe2, 0xe}}, @l2cap_conn_rsp={{0x3, 0x63, 0x8}, {0x5, 0x6, 0x3, 0x3}}, @l2cap_info_rsp={{0xb, 0x9, 0x58}, {0x3, 0xb714, "6b5102efb068ec3355fa32d9a29ea1fd9ce2961fa82b586d269907860daadccf4d34bd25b34b58a53003f9b2e07f76b3b66811dd60f40bb069fdafd802f56321959b5de0124764978ba5dc44f37c90d41183664c"}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x8, 0x5}}]}}, 0x8c)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x17d8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x624}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x5adc3fc44766f7c7}, 0x800) (async)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x17d8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x624}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x5adc3fc44766f7c7}, 0x800)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000002c0)={<r1=>0x0, 0xffff, 0x0, 0x0, <r2=>0x0})
sched_setscheduler(r2, 0xc2ed43185d153002, &(0x7f0000000340)=0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x32, 0x2a, [@mic={0x8c, 0x10, {0x6f, "c523f7d2a65a", @short="8bf84e67f4501c51"}}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x1, 0x0, {0x7fffffffffffffff, 0xff, 0x0, 0x352, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x400, 0x5, 0x7}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x22}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000041}, 0x40080)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000500)=0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x158ee000)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000580)={'nicvf0\x00', {0x2, 0x4e21, @broadcast}})
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_buf(r5, 0x0, 0x2f, &(0x7f00000005c0)="7a6809693c4e1f6cf14c28b8b7bd4ed8e5bd7b4e56962e029c3c454bbc9b9baa5188968feabeb9b5e7563aac6c3148a902a5a1e1baa82bb84be677c80bd8bb5b", 0x40) (async)
setsockopt$inet_buf(r5, 0x0, 0x2f, &(0x7f00000005c0)="7a6809693c4e1f6cf14c28b8b7bd4ed8e5bd7b4e56962e029c3c454bbc9b9baa5188968feabeb9b5e7563aac6c3148a902a5a1e1baa82bb84be677c80bd8bb5b", 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000640)={r1, 0xffff, 0x0, 0x0, <r7=>r2})
sendmsg$nl_netfilter(r6, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x200, 0x11, 0x9, 0x5, 0x70bd2c, 0x25dfdbfe, {0x5, 0x0, 0x2}, [@typed={0x8, 0xab, 0x0, 0x0, @uid=0xee01}, @generic="7d21d3ff76b2abb2709c4d167bd5f035f0fe5b6db1", @nested={0xd0, 0x73, 0x0, 0x1, [@generic="2f9b5803334a593bb6ca671ab7add6b85efd3e6ee17a408346aa934f93a51772a08bf75360f6920f77ee3ab3e49cc73f70a73aab3b96347905e3eedfec9495789ce30b15bddded1286e5869e40f94c2097034fb0", @nested={0x4, 0x14e}, @nested={0x4, 0x34}, @generic="5b157812487970909ab85661d5a299406b1f626fa4577c1e2be79f59296420f30055ddc8a310", @nested={0x4, 0x158}, @generic="e74fec842873c97dfbd6fbaa6c42f9a9b289abdf61ffb03ae429d08cbba81298b7c8579b526b6e1da4e817743ddf07d4fa5df4984b796f8be6e9d38a59c441332e5986a156f6"]}, @nested={0xe4, 0x138, 0x0, 0x1, [@nested={0x4, 0xac}, @nested={0x4, 0xec}, @nested={0x4, 0x169}, @nested={0x4, 0x139}, @generic="9fca308dc2bb6e263607ffc756dde4184f27c139b5a3c17d357e109c105ed62479b1ecf0472da5f1c4006a9f7c5044dbe29409ddae64b6f30edaeb0c0cf9bc9f4407c8536d6debd72f3e991700e49e754f87fd83f9933a92decc2cc057e8ec18b8d355b5a76c0cbdafbe5c24b953168e8777434120b43036c356b7a0baa68e1d1e45bfdfe0f63a97887587765719c74d", @generic="39ade12b86cbd4bbb826bb9890d8b425e725adbb4bd58e7b58234b92d0516cb0aed6ffd7a0664deabc151f99b0ffb2a9db0f13854746426d33fa34c1a7d6e92b"]}, @nested={0x18, 0x15, 0x0, 0x1, [@nested={0x4, 0xf0}, @typed={0x8, 0x14, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x14d, 0x0, 0x0, @u32=0x9c5e}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x10}, 0x8040)
close(r6)
syz_open_dev$ndb(&(0x7f0000000940), 0x0, 0x50000) (async)
r8 = syz_open_dev$ndb(&(0x7f0000000940), 0x0, 0x50000)
ioctl$NBD_DISCONNECT(r8, 0xab08)
lsm_get_self_attr(0x66, &(0x7f0000000980)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f00000019c0)=0x1020, 0x1)
syz_emit_vhci(&(0x7f0000001a00)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "56bb66733b85b357287a9060e3024037b5a14b03a5e7ac07235a4e57de921e49493b3e3ffb9fdb3eb5490f90766cf929a51d70b70c6f0ae6ef0ce36d1549967382c5e1133b33abd85125b681dd031d217728bbc442ae0175a9e9ced9bd9f31caca6eddbd6bfd62530f6cd76fb83cb95355901dbef97ba8f6c26e5396fc90851437f71a9c67340807835700dbb292a06d219d2dcbb1381810a392f5f96841f80cb609"}, 0xa6)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000001ac0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffc6d, 0xffffffffffffff10, 0x7fffffffffffffff, 0x3dd8006c, 0x2, 0x3ff]}, &(0x7f0000001b40)=0x78) (async)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000001ac0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffc6d, 0xffffffffffffff10, 0x7fffffffffffffff, 0x3dd8006c, 0x2, 0x3ff]}, &(0x7f0000001b40)=0x78)
syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000001bc0)={0x2e, 0x8, 0x0, <r9=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001b80)=@new_dev={0x1, 0x8cb, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0x180}}}, &(0x7f0000001c40))
ioctl$UBLK_U_CMD_START_DEV(r9, 0xc0207506, &(0x7f0000001c80)={r1, 0xffff, 0x0, 0x0, r2}) (async)
ioctl$UBLK_U_CMD_START_DEV(r9, 0xc0207506, &(0x7f0000001c80)={r1, 0xffff, 0x0, 0x0, r2})
syz_open_dev$mouse(&(0x7f0000001d00), 0x180, 0x202) (async)
r10 = syz_open_dev$mouse(&(0x7f0000001d00), 0x180, 0x202)
ioctl$TIOCSPTLCK(r10, 0x40045431, &(0x7f0000001d40)=0x1)
sendmsg$nl_route(r10, &(0x7f0000001e40)={&(0x7f0000001d80), 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)=@mpls_getnetconf={0x1c, 0x52, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xc6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048040}, 0x40884)
sendmsg$nl_xfrm(r10, &(0x7f00000022c0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002280)={&(0x7f0000002040)=@migrate={0x230, 0x21, 0x1, 0x70bd2a, 0x25dfdbfd, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x4e23, 0x6, 0x4e20, 0xfff, 0x2, 0x60, 0x20, 0x29}, 0x6e6bb4}, [@proto={0x5, 0x19, 0x32}, @offload={0xc}, @etimer_thresh={0x8, 0xc, 0x1}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@mcast2, 0x0, 0xa}}, @sec_ctx={0xcc, 0x8, {0xc8, 0x8, 0x0, 0x1, 0xc0, "c8e95bdaba51bab72172020bf7a7c00809ccdba99ffb12d5dc3b2768a1d876642211440e9210d9a6bb96223d7c04adf55ffe64b0077af664909d7c39b31ad45ed8af1f7914351af68a54dddd587c1273074db2cf501c6c62279289df154ceb0074c9039719ce06a8a6eec503a4029f29a8f620444c03f34914ddd16f011cfc5aada7422375fcecbad7273f4efa398b3f8e5051a965ff207549a05210bb9be22ba640e8d316ce202e9ba54bbed2e965108dde20296b092b0c0148c759f3ce07a5"}}, @tfcpad={0x8, 0x16, 0x7}, @policy={0xac, 0x7, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e20, 0x2, 0x4e20, 0x0, 0x2, 0x80, 0x20, 0x29, 0x0, 0xee01}, {0x100, 0x5, 0x4, 0x7, 0x0, 0x3, 0x6, 0xfffffffffffffffa}, {0x8, 0x3, 0x40, 0x3}, 0x20, 0x6e6bbd, 0x1, 0x0, 0x3, 0x3}}, @policy_type={0xa, 0x10, {0x1}}, @lastused={0xc, 0xf, 0x3}]}, 0x230}, 0x1, 0x0, 0x0, 0x4004}, 0x40) (async)
sendmsg$nl_xfrm(r10, &(0x7f00000022c0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002280)={&(0x7f0000002040)=@migrate={0x230, 0x21, 0x1, 0x70bd2a, 0x25dfdbfd, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x4e23, 0x6, 0x4e20, 0xfff, 0x2, 0x60, 0x20, 0x29}, 0x6e6bb4}, [@proto={0x5, 0x19, 0x32}, @offload={0xc}, @etimer_thresh={0x8, 0xc, 0x1}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@mcast2, 0x0, 0xa}}, @sec_ctx={0xcc, 0x8, {0xc8, 0x8, 0x0, 0x1, 0xc0, "c8e95bdaba51bab72172020bf7a7c00809ccdba99ffb12d5dc3b2768a1d876642211440e9210d9a6bb96223d7c04adf55ffe64b0077af664909d7c39b31ad45ed8af1f7914351af68a54dddd587c1273074db2cf501c6c62279289df154ceb0074c9039719ce06a8a6eec503a4029f29a8f620444c03f34914ddd16f011cfc5aada7422375fcecbad7273f4efa398b3f8e5051a965ff207549a05210bb9be22ba640e8d316ce202e9ba54bbed2e965108dde20296b092b0c0148c759f3ce07a5"}}, @tfcpad={0x8, 0x16, 0x7}, @policy={0xac, 0x7, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e20, 0x2, 0x4e20, 0x0, 0x2, 0x80, 0x20, 0x29, 0x0, 0xee01}, {0x100, 0x5, 0x4, 0x7, 0x0, 0x3, 0x6, 0xfffffffffffffffa}, {0x8, 0x3, 0x40, 0x3}, 0x20, 0x6e6bbd, 0x1, 0x0, 0x3, 0x3}}, @policy_type={0xa, 0x10, {0x1}}, @lastused={0xc, 0xf, 0x3}]}, 0x230}, 0x1, 0x0, 0x0, 0x4004}, 0x40)

15m16.868533419s ago: executing program 7 (id=2754):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f00000005c0)=""/157, 0x9d}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000000700)=""/213, 0xd5}, {&(0x7f0000000800)=""/138, 0x8a}], 0x6, &(0x7f0000000980)=""/229, 0xe5}, 0x2}, {{&(0x7f0000000a80)=@can, 0x80, &(0x7f0000003640)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=""/99, 0x63}, 0x953}, {{&(0x7f0000003700)=@isdn, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003780)=""/3, 0x3}, {&(0x7f00000037c0)=""/173, 0xad}, {&(0x7f0000003880)=""/153, 0x99}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/125, 0x7d}], 0x5, &(0x7f0000004a40)=""/159, 0x9f}, 0x4}], 0x3, 0x40000002, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}})
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))
socket$inet6(0xa, 0x2, 0x0)

15m15.98499016s ago: executing program 6 (id=2755):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)={0x20, 0xd}, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x48043)
r2 = dup(0xffffffffffffffff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000580)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xec94, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x6fcd, 0x1, 0xf06, 0x3, 0x95, 0x7f, 0x9}, 0x9c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0x5ef7, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="0000400000004022e5cccd528495ca9d1c4d3ca19330be5b737561fb9411f00e78535eff6b615a0170b8dfc64aca9cbfcc127b8152f407891fad37528a0450566079a169fc48"], &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000200)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x9, "189013c1"}, @global=@item_4={0x3, 0x1, 0x3, "77d2e5b6"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff9, 0x8, 0x1, {0x22, 0xce7}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0x12, 0x10, "30e6dd16054eb75f2c478bb29102e7e4"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xda}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfa}, &(0x7f00000003c0)={0x20, 0x1, 0x89, "eb3fa74d625c673a3ee401844cf1ac351c5ef29fbda2b752b43a3e53af45b7e9e62f645883b151981a587496e6dc5e5caec661b059f4c2322f3dd6256907046febc9ff52a780854b2ad92695f243b982208bd2516e4917e178e9a14bf4d95e1a9a807c8f477c48f38dcd02e1dd716abb924e941c0060a9d39050f331c98f7d2bcd1e9b9b11e2fe7d35"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x1}})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'tunl0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="0b031407e0ff640f0200475412f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0, <r6=>0x0}, &(0x7f0000000640)=0xc)
sendmsg$nl_xfrm(r1, &(0x7f0000000b00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)=@acquire={0x264, 0x17, 0x1, 0x70bd25, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4d5, 0x2b}, @in=@empty, {@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@mcast2, 0x4e24, 0x2, 0x4e24, 0x7, 0xa, 0x20, 0xc0, 0x3c}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@mcast2, 0x4e23, 0x9, 0x4e20, 0x3, 0x8, 0x80, 0x0, 0x0, r5, r6}, {0x7, 0x0, 0x0, 0x4, 0xa6e0, 0x1, 0x0, 0x1}, {0x8000000000000001, 0x7, 0x7ff, 0xffff}, 0x7fffffff, 0x6e6bb0, 0x0, 0x1, 0x1, 0x2}, 0x49d93bad, 0x100, 0x1, 0x70bd25}, [@algo_comp={0x13b, 0x3, {{'lzjh\x00'}, 0x798, "5341eddbd7a558b4c557dbea586559afe18209bc27321664652c5824298e525cd556f958d4c0924bb6ce2510794d0b469983abc135a69d035124331a88298044db23b812dbdfd18fbecc0e00531ec5199966b10900d0bff5b78a69b14d4d0efea43f239c48875bbf089cbb68928fa61ff9ae411c4512a25411268c767fc4f8a73fbe5c803124e1164fd2fa0bde5aa8354bfd10621cf3a040b39e56c846d88e315521a2d368893889372db6cd6568a1f28099ad5b5ab0a7aee6393a6cc3999fdee5987d8af71e6eeb0236adcdbb31bfb404978836dcaf278d191f9a2b1f9d519ffed172505dfb940fd62afbd34c238069fdf0b1"}}]}, 0x264}, 0x1, 0x0, 0x0, 0x20004000}, 0x10)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x48, 0x4, 0x76, 0x5}, {0x6, 0x25, 0x7, 0x207}]}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

15m14.942996903s ago: executing program 7 (id=2756):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="eba498d62a090000009bbfd18dff0300020100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000400)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r0, &(0x7f0000000080), 0x0}, 0x20)
syz_usb_connect(0x5, 0x59, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202", @ANYRESHEX=r1, @ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="d40000002b00070127bd700000000000017c0000bc000280b80078802bd7cb2813429bbbca21456e62825d7b1430c62ae9d4635ae0ecfa720aab4a8b24e6a0726e10df5939679c375e86ded1f64d11fe89f8188889f43859be64d87e3263019ffc9cd83ef4d3ff87d02318a00b69447d428dbe99e465b74437b8a0a7179eda87d4db2cc9747795770fa0bdc711034320b169d808462faedbd00d99b25826aa6da3c09eae29ab629aec4f1a0c293921031f9136c3487fb3add4b6795354a1641c3b414b06f7405551eee1ad868ec7e1ca040007"], 0xd4}, 0x1, 0x0, 0x0, 0xc000}, 0x24044044)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000002b000100fffffffffddbdf24020000001c00388018000380140066801000c8800c002e800800f500f7cf0000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000210300002c05596edcdbdd250a100004ff0000000a000180000000000000000000000002daaa"], 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040040)
ftruncate(r2, 0x9)

15m12.769117296s ago: executing program 7 (id=2757):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f00001aa000/0x2000)=nil, 0x2000, 0x8)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000540)=@x25, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000680)=""/34, 0x22}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/93, 0x5d}, {&(0x7f0000001740)=""/124, 0x7c}, {&(0x7f00000017c0)=""/147, 0x93}, {&(0x7f0000001880)=""/242, 0xf2}, {&(0x7f0000001980)=""/56, 0x38}, {&(0x7f00000019c0)=""/102, 0x66}, {&(0x7f0000001a40)=""/243, 0xf3}], 0x9, &(0x7f0000001c00)=""/43, 0x2b}, 0x3ff}, {{&(0x7f0000001c40)=@xdp, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000004c0)=""/5, 0x5}, {&(0x7f0000001d00)=""/175, 0xaf}], 0x2, &(0x7f0000001e00)=""/216, 0xd8}, 0x8}, {{&(0x7f0000001f00)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001f80)=""/71, 0x47}, {&(0x7f0000002000)=""/23, 0x17}, {&(0x7f0000002040)=""/184, 0xb8}, {&(0x7f0000002100)=""/53, 0x35}, {&(0x7f0000002480)=""/40, 0x28}, {&(0x7f0000000100)=""/21, 0x15}], 0x6}, 0x8001}, {{&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002340)=[{&(0x7f00000022c0)=""/66, 0x42}], 0x1, &(0x7f0000002380)=""/69, 0x45}, 0x1}, {{&(0x7f0000002400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003980)=[{&(0x7f0000003800)=""/252, 0xfc}, {&(0x7f0000003900)=""/86, 0x56}], 0x2, &(0x7f00000024c0)=""/234, 0xea}, 0x6}], 0x5, 0x120, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x0)
preadv(r6, 0x0, 0x0, 0x80000000, 0x9)
mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f00000025c0)=ANY=[@ANYBLOB="7472616e733d756effffff7f00000000e5910fa6675de5722738b73ff49913a3d2856759d7b49d867c8b24c6cd48625e45281ebba4c2fcf8"])
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000500)={0x3a, &(0x7f00000005c0)=[{0x12, '\x00', @buffer={"e0615f1132b11e4f262e9c15e3f5cafa7c7aba49c3223610f33af1dd27b037b0", 0x20}}, {0x38, '\x00', @st={0x4, [{0x3, @uvalue=0x5}, {0x2, @uvalue=0x5}, {0x2, @svalue=0xc6}, {0x1, @svalue=0x7}]}, 0x12}]})
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb110018000000000000007400000074000000050000000400000004000093010000000d0000000600000010658b730400000002000000060000000600000001000000b60f000001110000ff00000003000000010000000000001203000000000000000000000300000000040000040300000003000000000000000100000d000000000600000003000000002e003000"], &(0x7f0000000200)=""/98, 0x91, 0x62, 0x1, 0x9}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r8], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r8}, 0x94)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000b, 0x10010, r7, 0x8772f000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000000300008000000000001c0004800800074000001300080004400000020008000940000000080900010073797a30000000354b8f4505d8802900"/76], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="050b28bd7000ffdbdf255400000008000300", @ANYRES32=0x0, @ANYBLOB="0a0006000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000080)

15m12.439841441s ago: executing program 6 (id=2758):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)

15m12.276292365s ago: executing program 6 (id=2759):
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x10)
write$smackfs_netlabel(0xffffffffffffffff, 0x0, 0x6b)
openat(0xffffffffffffffff, 0x0, 0x2, 0x12)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

15m10.454009889s ago: executing program 6 (id=2760):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="dcb376bd119b883c215268373d835c409f56bf7f7012d1e11f0583cd52f37260b48b7257c7dce80b18cdce529ba9bc6dfc6aa18cf5dc42a47bf69a7932520b9dc69547f8646913039627c5cea1c3e6e4f7abb2fcf6930f41ee2e2cd593eb6244fef1d076d11a73a0d99665f53e8af26dd8e0540300b98302f3d56f217fd26db6659cd906ba368c2cbee9cbdf26cd893ecdb764c68bb4a668f234ea3ad354afa2b13867dac45e58279b0cf2b797462a19a7623a2e082a3e706176a66176"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004000)
socket$alg(0x26, 0x5, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)

15m10.209957858s ago: executing program 6 (id=2761):
fsopen(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r0 = open(&(0x7f0000000400)='./bus\x00', 0x42b42, 0x149)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x110, 0x0, 0x9, 0x2, 0xff}, 0x10)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"})
r8 = syz_open_pts(r7, 0x0)
ioctl$TCSETS(r8, 0x5402, &(0x7f00000001c0)={0xf3a, 0x2, 0x8000, 0x1c, 0x2, "db2d416fbecfb84b5452b768e08ee2df361089"})
ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)=0xd)
close(r5)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r10 = fanotify_init(0x0, 0x1)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}})
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x5, 0x4, {<r11=>0x0}, {}, 0x7, 0x7})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x6b, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x606, 0x0, 0x0, 0x1000, 0xffffffff, r11, 0x0, 0x1b3}}}, &(0x7f0000000480)=<r12=>0x0)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f00000000c0)={0x0, <r13=>0x0, 0x7})
ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f00000002c0)={r13})
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r14, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x6, 0x4, 0x54, 0x81, 0x9, 0x42, 0x1, 0xb, 0x4, 0x3, 0x6, 0x1, 0x3}, 0xe)
shutdown(r14, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000040)={<r15=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff9, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r14, 0x84, 0x73, &(0x7f0000000000)={r15, 0x6, 0x20, 0x7, 0x4}, &(0x7f0000000080)=0x18)
r16 = socket$inet6_tcp(0xa, 0x1, 0x0)
r17 = dup(r16)
syz_ublk_setup_queues(r17, r12, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r17}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r17}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)

15m9.158643279s ago: executing program 37 (id=2743):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0)
socket(0x2, 0x80805, 0x0)
memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
socket(0x10, 0x803, 0x0)
socket(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

15m9.059098601s ago: executing program 7 (id=2763):
syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x202, 0x12)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdb", 0x2e}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233", 0x19}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a", 0x14}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094", 0xc0}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeb7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x8c}]}, 0x0, 0x7fff, 0x0, 0x0, 0x41100, 0x3}, 0x94)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

15m8.781118803s ago: executing program 6 (id=2764):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
unshare(0x6a040000)
arch_prctl$ARCH_SET_GS(0x1001, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x19, r1, 0x1, 0x8}, 0x14)
landlock_create_ruleset(&(0x7f00000002c0)={0x796a, 0x0, 0x1, 0x2040, 0x0, 0x1}, 0x30, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

15m7.253424658s ago: executing program 7 (id=2765):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000004b00)=[{{&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/2, 0x2}, {&(0x7f00000005c0)=""/157, 0x9d}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000000700)=""/213, 0xd5}, {&(0x7f0000000800)=""/138, 0x8a}], 0x6, &(0x7f0000000980)=""/229, 0xe5}, 0x2}, {{&(0x7f0000000a80)=@can, 0x80, &(0x7f0000003640)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=""/99, 0x63}, 0x953}, {{&(0x7f0000003700)=@isdn, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003780)=""/3, 0x3}, {&(0x7f00000037c0)=""/173, 0xad}, {&(0x7f0000003880)=""/153, 0x99}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/125, 0x7d}], 0x5, &(0x7f0000004a40)=""/159, 0x9f}, 0x4}], 0x3, 0x40000002, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}})
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)

15m5.730302209s ago: executing program 7 (id=2766):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00')
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)='9', 0x1}], 0x1) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) (async)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0c66b88e008ec02d1aa80000460f1c460041ae", 0x46}], 0x1, 0x6c, 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @mcast2, 0x10000000}, 0x1c)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd5c980128854d4a828e00000000ff88"], 0xffdd) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
accept$inet(r9, 0x0, &(0x7f0000000200))

15m5.313609414s ago: executing program 38 (id=2748):
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xe, 0x7f, 0x0, 0xa, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_address={0x5, 0x6, 0x32, 0x0, 0x0, @in6={0xa, 0x4e20, 0xd, @mcast1, 0xd13}}]}, 0x50}}, 0x2)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x87}, @l2cap_cid_signaling={{0x83}, [@l2cap_disconn_rsp={{0x7, 0xff, 0x4}, {0x2, 0x5}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x7, 0x6, 0xe2, 0xe}}, @l2cap_conn_rsp={{0x3, 0x63, 0x8}, {0x5, 0x6, 0x3, 0x3}}, @l2cap_info_rsp={{0xb, 0x9, 0x58}, {0x3, 0xb714, "6b5102efb068ec3355fa32d9a29ea1fd9ce2961fa82b586d269907860daadccf4d34bd25b34b58a53003f9b2e07f76b3b66811dd60f40bb069fdafd802f56321959b5de0124764978ba5dc44f37c90d41183664c"}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x8, 0x5}}]}}, 0x8c)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x17d8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x624}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x5adc3fc44766f7c7}, 0x800) (async)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x17d8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x624}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x5adc3fc44766f7c7}, 0x800)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000002c0)={<r1=>0x0, 0xffff, 0x0, 0x0, <r2=>0x0})
sched_setscheduler(r2, 0xc2ed43185d153002, &(0x7f0000000340)=0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x32, 0x2a, [@mic={0x8c, 0x10, {0x6f, "c523f7d2a65a", @short="8bf84e67f4501c51"}}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x1, 0x0, {0x7fffffffffffffff, 0xff, 0x0, 0x352, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x400, 0x5, 0x7}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x22}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000041}, 0x40080)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000500)=0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r4, 0x158ee000)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000580)={'nicvf0\x00', {0x2, 0x4e21, @broadcast}})
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_buf(r5, 0x0, 0x2f, &(0x7f00000005c0)="7a6809693c4e1f6cf14c28b8b7bd4ed8e5bd7b4e56962e029c3c454bbc9b9baa5188968feabeb9b5e7563aac6c3148a902a5a1e1baa82bb84be677c80bd8bb5b", 0x40) (async)
setsockopt$inet_buf(r5, 0x0, 0x2f, &(0x7f00000005c0)="7a6809693c4e1f6cf14c28b8b7bd4ed8e5bd7b4e56962e029c3c454bbc9b9baa5188968feabeb9b5e7563aac6c3148a902a5a1e1baa82bb84be677c80bd8bb5b", 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000640)={r1, 0xffff, 0x0, 0x0, <r7=>r2})
sendmsg$nl_netfilter(r6, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x200, 0x11, 0x9, 0x5, 0x70bd2c, 0x25dfdbfe, {0x5, 0x0, 0x2}, [@typed={0x8, 0xab, 0x0, 0x0, @uid=0xee01}, @generic="7d21d3ff76b2abb2709c4d167bd5f035f0fe5b6db1", @nested={0xd0, 0x73, 0x0, 0x1, [@generic="2f9b5803334a593bb6ca671ab7add6b85efd3e6ee17a408346aa934f93a51772a08bf75360f6920f77ee3ab3e49cc73f70a73aab3b96347905e3eedfec9495789ce30b15bddded1286e5869e40f94c2097034fb0", @nested={0x4, 0x14e}, @nested={0x4, 0x34}, @generic="5b157812487970909ab85661d5a299406b1f626fa4577c1e2be79f59296420f30055ddc8a310", @nested={0x4, 0x158}, @generic="e74fec842873c97dfbd6fbaa6c42f9a9b289abdf61ffb03ae429d08cbba81298b7c8579b526b6e1da4e817743ddf07d4fa5df4984b796f8be6e9d38a59c441332e5986a156f6"]}, @nested={0xe4, 0x138, 0x0, 0x1, [@nested={0x4, 0xac}, @nested={0x4, 0xec}, @nested={0x4, 0x169}, @nested={0x4, 0x139}, @generic="9fca308dc2bb6e263607ffc756dde4184f27c139b5a3c17d357e109c105ed62479b1ecf0472da5f1c4006a9f7c5044dbe29409ddae64b6f30edaeb0c0cf9bc9f4407c8536d6debd72f3e991700e49e754f87fd83f9933a92decc2cc057e8ec18b8d355b5a76c0cbdafbe5c24b953168e8777434120b43036c356b7a0baa68e1d1e45bfdfe0f63a97887587765719c74d", @generic="39ade12b86cbd4bbb826bb9890d8b425e725adbb4bd58e7b58234b92d0516cb0aed6ffd7a0664deabc151f99b0ffb2a9db0f13854746426d33fa34c1a7d6e92b"]}, @nested={0x18, 0x15, 0x0, 0x1, [@nested={0x4, 0xf0}, @typed={0x8, 0x14, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x14d, 0x0, 0x0, @u32=0x9c5e}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x10}, 0x8040)
close(r6)
syz_open_dev$ndb(&(0x7f0000000940), 0x0, 0x50000) (async)
r8 = syz_open_dev$ndb(&(0x7f0000000940), 0x0, 0x50000)
ioctl$NBD_DISCONNECT(r8, 0xab08)
lsm_get_self_attr(0x66, &(0x7f0000000980)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f00000019c0)=0x1020, 0x1)
syz_emit_vhci(&(0x7f0000001a00)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "56bb66733b85b357287a9060e3024037b5a14b03a5e7ac07235a4e57de921e49493b3e3ffb9fdb3eb5490f90766cf929a51d70b70c6f0ae6ef0ce36d1549967382c5e1133b33abd85125b681dd031d217728bbc442ae0175a9e9ced9bd9f31caca6eddbd6bfd62530f6cd76fb83cb95355901dbef97ba8f6c26e5396fc90851437f71a9c67340807835700dbb292a06d219d2dcbb1381810a392f5f96841f80cb609"}, 0xa6)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000001ac0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffc6d, 0xffffffffffffff10, 0x7fffffffffffffff, 0x3dd8006c, 0x2, 0x3ff]}, &(0x7f0000001b40)=0x78) (async)
getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000001ac0)={'broute\x00', 0x0, 0x0, 0x0, [0xfffffffffffffc6d, 0xffffffffffffff10, 0x7fffffffffffffff, 0x3dd8006c, 0x2, 0x3ff]}, &(0x7f0000001b40)=0x78)
syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000001bc0)={0x2e, 0x8, 0x0, <r9=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001b80)=@new_dev={0x1, 0x8cb, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0x180}}}, &(0x7f0000001c40))
ioctl$UBLK_U_CMD_START_DEV(r9, 0xc0207506, &(0x7f0000001c80)={r1, 0xffff, 0x0, 0x0, r2}) (async)
ioctl$UBLK_U_CMD_START_DEV(r9, 0xc0207506, &(0x7f0000001c80)={r1, 0xffff, 0x0, 0x0, r2})
syz_open_dev$mouse(&(0x7f0000001d00), 0x180, 0x202) (async)
r10 = syz_open_dev$mouse(&(0x7f0000001d00), 0x180, 0x202)
ioctl$TIOCSPTLCK(r10, 0x40045431, &(0x7f0000001d40)=0x1)
sendmsg$nl_route(r10, &(0x7f0000001e40)={&(0x7f0000001d80), 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)=@mpls_getnetconf={0x1c, 0x52, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xc6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048040}, 0x40884)
sendmsg$nl_xfrm(r10, &(0x7f00000022c0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002280)={&(0x7f0000002040)=@migrate={0x230, 0x21, 0x1, 0x70bd2a, 0x25dfdbfd, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x4e23, 0x6, 0x4e20, 0xfff, 0x2, 0x60, 0x20, 0x29}, 0x6e6bb4}, [@proto={0x5, 0x19, 0x32}, @offload={0xc}, @etimer_thresh={0x8, 0xc, 0x1}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@mcast2, 0x0, 0xa}}, @sec_ctx={0xcc, 0x8, {0xc8, 0x8, 0x0, 0x1, 0xc0, "c8e95bdaba51bab72172020bf7a7c00809ccdba99ffb12d5dc3b2768a1d876642211440e9210d9a6bb96223d7c04adf55ffe64b0077af664909d7c39b31ad45ed8af1f7914351af68a54dddd587c1273074db2cf501c6c62279289df154ceb0074c9039719ce06a8a6eec503a4029f29a8f620444c03f34914ddd16f011cfc5aada7422375fcecbad7273f4efa398b3f8e5051a965ff207549a05210bb9be22ba640e8d316ce202e9ba54bbed2e965108dde20296b092b0c0148c759f3ce07a5"}}, @tfcpad={0x8, 0x16, 0x7}, @policy={0xac, 0x7, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e20, 0x2, 0x4e20, 0x0, 0x2, 0x80, 0x20, 0x29, 0x0, 0xee01}, {0x100, 0x5, 0x4, 0x7, 0x0, 0x3, 0x6, 0xfffffffffffffffa}, {0x8, 0x3, 0x40, 0x3}, 0x20, 0x6e6bbd, 0x1, 0x0, 0x3, 0x3}}, @policy_type={0xa, 0x10, {0x1}}, @lastused={0xc, 0xf, 0x3}]}, 0x230}, 0x1, 0x0, 0x0, 0x4004}, 0x40) (async)
sendmsg$nl_xfrm(r10, &(0x7f00000022c0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002280)={&(0x7f0000002040)=@migrate={0x230, 0x21, 0x1, 0x70bd2a, 0x25dfdbfd, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x4e23, 0x6, 0x4e20, 0xfff, 0x2, 0x60, 0x20, 0x29}, 0x6e6bb4}, [@proto={0x5, 0x19, 0x32}, @offload={0xc}, @etimer_thresh={0x8, 0xc, 0x1}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@mcast2, 0x0, 0xa}}, @sec_ctx={0xcc, 0x8, {0xc8, 0x8, 0x0, 0x1, 0xc0, "c8e95bdaba51bab72172020bf7a7c00809ccdba99ffb12d5dc3b2768a1d876642211440e9210d9a6bb96223d7c04adf55ffe64b0077af664909d7c39b31ad45ed8af1f7914351af68a54dddd587c1273074db2cf501c6c62279289df154ceb0074c9039719ce06a8a6eec503a4029f29a8f620444c03f34914ddd16f011cfc5aada7422375fcecbad7273f4efa398b3f8e5051a965ff207549a05210bb9be22ba640e8d316ce202e9ba54bbed2e965108dde20296b092b0c0148c759f3ce07a5"}}, @tfcpad={0x8, 0x16, 0x7}, @policy={0xac, 0x7, {{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e20, 0x2, 0x4e20, 0x0, 0x2, 0x80, 0x20, 0x29, 0x0, 0xee01}, {0x100, 0x5, 0x4, 0x7, 0x0, 0x3, 0x6, 0xfffffffffffffffa}, {0x8, 0x3, 0x40, 0x3}, 0x20, 0x6e6bbd, 0x1, 0x0, 0x3, 0x3}}, @policy_type={0xa, 0x10, {0x1}}, @lastused={0xc, 0xf, 0x3}]}, 0x230}, 0x1, 0x0, 0x0, 0x4004}, 0x40)

14m53.737379954s ago: executing program 39 (id=2764):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
unshare(0x6a040000)
arch_prctl$ARCH_SET_GS(0x1001, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x19, r1, 0x1, 0x8}, 0x14)
landlock_create_ruleset(&(0x7f00000002c0)={0x796a, 0x0, 0x1, 0x2040, 0x0, 0x1}, 0x30, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

14m50.447829632s ago: executing program 40 (id=2766):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00')
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)='9', 0x1}], 0x1) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100))
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) (async)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0c66b88e008ec02d1aa80000460f1c460041ae", 0x46}], 0x1, 0x6c, 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @mcast2, 0x10000000}, 0x1c)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd5c980128854d4a828e00000000ff88"], 0xffdd) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
accept$inet(r9, 0x0, &(0x7f0000000200))

15.190965464s ago: executing program 2 (id=3963):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$6lowpan_enable(r0, &(0x7f00000001c0)='1', 0x1)

14.584593496s ago: executing program 2 (id=3968):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) (fail_nth: 1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f000029e000/0x3000)=nil, 0x3000}, 0x1})

13.099301236s ago: executing program 2 (id=3971):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x50a80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
r2 = getpid()
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, r2})
fcntl$getownex(r1, 0x10, &(0x7f0000000180))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4090)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0xa100)
r7 = socket(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c)
unshare(0x20000400)
getsockopt$sock_buf(r7, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f0000000200)={0x8000, 0xf, 0x0, 0x8, 0x850, 0x3})
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100)

11.700946784s ago: executing program 2 (id=3976):
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x7b8, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0xd2, 0x3, 0xff, 0x40, 0x7ca, 0x825, 0x5ff9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a6, 0x2, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0xf1, 0x6, 0xf, 0x1d, 0x8e, 0xb1, 0x8, [@hid_hid={0x9, 0x21, 0x5000, 0x0, 0x1, {0x22, 0xf66}}], [{{0x9, 0x5, 0x9, 0xc, 0x200, 0x6, 0x19, 0x7, [@generic={0x1d, 0xc, "797a6172fba732b466fd046e2546dc2a24828b24f4ca49423c83f3"}, @generic={0xdb, 0x1, "8064eca244cd64c5d16de7f54be522dedd05332bb4ad0c081f47125b1bbe3bb785bf4d73e82b6a2ad768bc15cd30736a46761deb2924d9e61335d51195f5afae1e1252f85eed147d6175a93aa8276a9e7b856c17b3fbbcb9fb7d3e76451807cfeffe9e621dbf0274df4eeec1267d7106046e80030c5e3ae1d1ac9b2b8061547d97c6b6620034db3cd574a6c45287625500aa3371c27c9ec559ee6cb6366bcd8d67e8425f0efdcc5685f5b00465909068cb326f2ac604badab13a900a44f193cdd435a1d72ed8a9db3a84470916233f9269f604a371ade75c44"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x8, 0x3, 0x7, [@generic={0xa3, 0x22, "e067e242e8f5b24fe71ef5f9c86151bf7beef6e147cf640539d9206e0f9076bb4cec875f3edafb7e572302ce3212930969646961432afcfba51c32edc9ab6d645924c815232d92f7354600f040ade25cc1d82d701871b6cd741656d8da5633bb243d64eef9d032edff9190488008e649f9e597c3b368ce39398b2592594aec33ee9449e67bd71174c99142ba07037a54b72e2176f9c2cbf1d91cc451dac343dcc7"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x6, 0xf, 0x3, [@generic={0x92, 0x3, "67f11b5cae53ca1989d577c2ae55107cb8cbcdba180709e8149256e19b99b4b233c5aee3714e8202d39666d818d03d26d9b5b43fcad9cce023ccf8e0a19998a67aa258d283750e5fe430207094bccbd94309bea813d52bfc55966017e2cad39cca85b5ff26d459dfa4c4fa996673ab40821eb662c4e469efd006ad57dde3c3b526a42e598330f238d0b34183494ba147"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x9}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x8f, 0x2, 0x2, [@generic={0xcf, 0x1, "8fbc31b2a849bbc5bd50c24d2f60f3b61ba01b3850664d23d02417d41eea3809d8cf3c38ed1670adcf2863e31b60aebed6d776365257468c18fe684d0229ffb04fc1c51900f54e6c54366f2fe8f427bae9359cc62401f82402d2a8426e2dcdeef443de5cba56a869fdeeb55d6737705f0f14dcf03f4c9c43e55da50f1b15c23d973052d6d3d05e71320263d9eacc1ed63d50bf99753a65612889a00fe4e0ed81bdb166809ca0773a215c3c92ce2826ac0d319d9d13317d8ea8345973565861116f8fc3de9cf13310de33960e94"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x8, 0x6, 0x7}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0xff, 0x8f, 0x9, [@generic={0xa1, 0x2, "ba827561e4f6c98277fa2894bd3c41dbe549344110e32f02f75c2a7a5ea69f5b50e3adf0f63fdebdc02f38ef0a4080cda1868e4e910a9aaef907953f34e82b47e4f87a37e1c2ecb0f07d53226e1dc49e9a1c8af11fc9b787ba2440ba32505b9dfd582a518edac828bdf1b35dccbc35c16bf10c621023624386fec2b38eddf26a54f4467b72a156d9951137e9bb72a4416cdc9ff9f48ba5c5f8d67e3b10efd3"}, @generic={0xe6, 0xd, "043403eb4a4ecccf0e0e2796233bde50b28fd77c93cda885ae386667cd6d2eebcdf1ea21afe0910b845d56b1900b9c473bcb5db4077da877a023530ea16481d2efd862aa6cac7aa2e3e60a8f4dffec6180e958103bf2399d231c6326bc0f01b90bddd88f165d73300c41fbfaf8e5c833ebb933eebc9bf7d4177d550218fcae90f21ca7cc4d012b7d75c16897ec8d47df2eb76544dbc28579a8ea4ea745de4e3c4d5643c35bfc85ab787745ec305381dd250056cb76f2933599bc845594caef05ef74d094ed895bb33eb95d07e9286551fe7b14373f75cb2482c495f1bcb2d2e97b437b4c"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xc, 0x4, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x0, 0x5, 0x1, [@generic={0xe7, 0x8, "664efe280623112eb303417ff699c60852e382c64c80e283d9ba8117330c321acc81fdc251582d9b51b87779b02cb4043b8cca56a5bf2426c109b238949ca289218b40ec72b1c8f0f7dd6cec646cddd03686faf61dafb6254913c4cbb7396152df80f7df619783957a140bf57cab9ef7073738bef482fb9e56a7e5dffc6ae84b22e6eeeabe9a5373ef542e04e4efe23cd062a87f0d413f17996e58ca9ed408121f34c87532c6b36edfa9dde65422241ec74e3d088a06c98d3ee4626c0f12b9c7359b49aade379a5aad908c155145dadc33988307c0bd14e2f95065f460e31a119bdf3db77f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x0, 0xf0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x14, 0x10, 0x3, 0xa3, 0xee, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x8b, 0x9, 0x6}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x36, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x82}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x8, 0x3, 0x35}}, {{0x9, 0x5, 0x2, 0x4, 0x600, 0x2, 0x2, 0x14, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x4, 0x7f, 0x2}}]}}, {{0x9, 0x4, 0xae, 0xc1, 0x6, 0x92, 0x31, 0x8f, 0x2, [], [{{0x9, 0x5, 0xd, 0x10, 0x200, 0x10, 0x7, 0x7, [@generic={0xf4, 0x9, "8a5ccca3507cf2546454f719735ec7e5095fcd1ebab6345759fb2d72c1f88525d874f45bd2b6d069b25f5f18d080d13e8c0acfc3a9809fb9f242715a9ec110caecf4edc0765b74dc73d7847517414e21b368e0b8af85801fdd009e80db362fe3ee931b899d55ac7080fb417da366f56f032c663812e2c1d34f3cb8fdfbbe8dce555a3b5dad102ad43cf0a4c51171a630afe953eda11a1715bc1f25e96202a4fa53fa19c2fa5700ea43ac51cf80b07e22fffaaffec1671b2548616242d874e6de6347d726478e62e35f73569ad60c05b61dd077c55542c5ef7ad3b698cb89ce9c6cc4eee2bd2e732f5820b302ec5bf4636960"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x8, 0x8, 0xe0}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x2, 0x98, 0x33}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x29, 0xac, 0x7, [@generic={0x2f, 0x23, "4bb1879375b174e432acd9e6be03612491acb699e1e3ee2819b981b22b9d841dfe7d05060b8ddceb75e3ed85ff"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x20, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x6f, 0x5, 0x6}}]}}]}}]}}, 0x0)

11.33856983s ago: executing program 1 (id=3981):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffdd0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000011424203"], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8c00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000000)={0x1, 0x0, 0xfcd8, 0x8, 0xffffffff})
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2800001, 0x100010, r2, 0xc6000)
fremovexattr(r2, &(0x7f0000000080)=@known='system.posix_acl_default\x00')
r5 = dup3(r1, r0, 0x80000)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffe2b, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x0, 0x13}, @fda={0x66646185, 0x5, 0x0, 0x40}}, &(0x7f0000000180)}}], 0x0, 0x0, 0x0})

10.654578749s ago: executing program 1 (id=3984):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$nl_route_sched_retired(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x3ebc7eb5c54e06ba}, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x40000102, 0x0)
sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsmount(r6, 0x0, 0x88)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x200, 0xc453}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x204}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

8.317975783s ago: executing program 2 (id=3989):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x9301})
semget(0x1, 0x4, 0x55)
msgget$private(0x0, 0x110)
timer_create(0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40000010)
eventfd2(0x401, 0x3)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x4)
eventfd2(0x40409, 0x80000)
eventfd(0xffffffbb)
io_submit(0x0, 0x0, 0x0)
syz_ublk_add_dev(r1, r2, r3, r4, 0x0, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x80, 0x9])
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r8, 0x7b1, &(0x7f0000001980)={&(0x7f0000000980)=[0x5, 0x6, 0x535, 0xfff, 0x0, 0x4, 0x3, 0x7, 0x5, 0x5, 0x3, 0x2c, 0x9, 0x40, 0xbb98, 0x4, 0x6, 0x81, 0x1, 0x2, 0x2, 0x3, 0x6, 0x9, 0x4, 0x0, 0xa, 0x4, 0x200, 0x9, 0x3, 0x6, 0x7, 0x6, 0x1, 0xffffff81, 0x0, 0x7, 0x10, 0x5, 0x1, 0x8fd8, 0x7fffffff, 0x178, 0x3, 0x9, 0x0, 0x2, 0x8, 0x0, 0x2, 0x1, 0xfffffffd, 0xa, 0xa6, 0x9, 0xa, 0x9, 0x8001, 0x8, 0x80000000, 0x6, 0x7ff, 0x569, 0xf, 0xe5, 0xffffff04, 0x80, 0x3, 0x2, 0xffffff17, 0x62b5, 0x0, 0x0, 0x75a, 0x5, 0x8, 0x3, 0x1, 0x3, 0x2, 0xfff, 0x7, 0x9, 0xfffffffa, 0xd, 0x2, 0x4000, 0x7, 0xffffffff, 0xfffffff9, 0x2, 0x4, 0x0, 0x4, 0x101, 0x0, 0x2, 0x5eea, 0x481a, 0x8, 0x7, 0x10, 0x1, 0x6, 0x91e, 0x5, 0xeaa, 0x9, 0x7, 0x0, 0x9, 0x774, 0x9, 0x4, 0x5cb, 0x1, 0x0, 0x1, 0x1, 0x4, 0xffffffff, 0x10000, 0x3ff, 0x83b, 0x8, 0x6, 0xfffffffc, 0x10001, 0x5, 0xffff9361, 0xc90c, 0x8001, 0x200, 0x3, 0x8000, 0x7f, 0x1, 0x80000000, 0x1, 0x8, 0x7, 0x3, 0x5, 0x0, 0xff, 0x8, 0x100, 0xffffe6f0, 0x4, 0x80000000, 0x5, 0x4, 0x3, 0xfffffffa, 0x2a2ab284, 0x9, 0x8, 0x2, 0x4, 0x0, 0x1, 0x2, 0x400, 0x3, 0x200, 0x6, 0x7ff, 0x0, 0x0, 0x400, 0x10001, 0x35, 0x5, 0xffff7fff, 0xdbd9, 0x1, 0x400, 0x8f, 0x8d5, 0x10, 0x1, 0x40000000, 0xfffffff9, 0x4, 0x200, 0x6a, 0x896, 0x3, 0x81e, 0x4076eb0b, 0xf935, 0xe, 0xc1d, 0x0, 0x7ff, 0x9, 0xdf, 0x0, 0xfff, 0x5, 0x7fffffff, 0xcb56, 0x43aa9baa, 0x1, 0x6, 0x7f, 0x4, 0x0, 0x80000000, 0x8, 0xec2, 0xa, 0x5, 0x1, 0xfffffff9, 0x0, 0xe, 0x6, 0x0, 0x8001, 0xb, 0x1ff, 0x3, 0x3, 0x0, 0x0, 0x4, 0xffff, 0x3, 0xffe, 0x6, 0x8, 0xffff, 0x4d81f205, 0x1, 0x0, 0x3ff, 0x2, 0x4a, 0x8000, 0x897, 0x9d93, 0x7, 0x5, 0x3, 0x6, 0x3, 0x8, 0x0, 0x9, 0x1, 0x90da, 0xffff, 0x4, 0xd1f, 0xb6, 0x3, 0x8, 0xf881, 0xf03, 0x0, 0x5, 0x0, 0xa1, 0xe, 0x4, 0x1, 0x1, 0x9, 0x5, 0x3, 0xfffff758, 0x9, 0x8, 0x8001, 0x6, 0x5, 0xb3c2, 0x3, 0xffffffff, 0x8000, 0x7, 0x3, 0x1000, 0x0, 0xa, 0x5, 0x10, 0x1, 0x7, 0x6, 0xd, 0x5, 0x1, 0x0, 0x5, 0x7, 0xb, 0xa37, 0x5, 0x3, 0x40400000, 0x0, 0x6, 0x7fffffff, 0xb, 0x8, 0x7, 0x1, 0x1, 0x6d1f, 0x7, 0x80000000, 0x2574, 0x6, 0x2, 0x84d, 0x6, 0x1, 0x12, 0xdd9, 0x9, 0xffffffff, 0x5, 0xbac, 0x9, 0xe, 0x0, 0xf7, 0x1, 0x7, 0x7, 0x8, 0x4, 0x7, 0xa50, 0x0, 0x2, 0xc07c, 0x7fffffff, 0x9, 0x5, 0x2c4, 0x7, 0x279c, 0xfffffff7, 0x9d, 0x5, 0x1, 0x3104, 0x9, 0x5, 0xb0, 0xfffffffc, 0xa0, 0x2, 0x7, 0x101, 0xff3a, 0x8a, 0x41fc, 0x77a, 0x1, 0x1000, 0xfffffffa, 0x8000, 0x4, 0x5, 0x8, 0x7, 0x9, 0x1, 0x7, 0x0, 0x0, 0x2, 0x4, 0x166, 0x3, 0xfffffffe, 0x7, 0x6, 0xffffff11, 0x8001, 0x0, 0x5, 0x0, 0x3d6, 0x6, 0x6, 0x5, 0x800, 0x1, 0x7, 0x6b, 0x3, 0x7, 0x5, 0x8, 0x4, 0x7, 0xec, 0x3, 0x2b, 0x7, 0x9, 0x7fffffff, 0xe0, 0x6, 0x4, 0x2, 0x80000000, 0x80000001, 0x100, 0x0, 0x5, 0x400, 0x3, 0x91, 0x0, 0x2, 0x4, 0x1, 0x7, 0x2, 0x2, 0x2, 0x9, 0x1, 0xffffffff, 0x1, 0x7, 0x8, 0x4, 0x3, 0x3, 0xf231, 0xffffffff, 0xfffffffa, 0x4, 0x2, 0x0, 0x3, 0xfffffffd, 0x7, 0xb4, 0xb, 0xdb7d, 0x9255, 0x0, 0x6c1fa804, 0x6, 0x5, 0x0, 0xc3, 0x9, 0x3, 0x3, 0x3, 0x6, 0xa0a8b59, 0x1, 0x8, 0x8, 0x80000001, 0x5, 0x4, 0x1, 0x6, 0x7, 0x7, 0x3, 0xeadcdb2a, 0x4, 0x0, 0x7c91, 0xd60, 0x1, 0x7fff, 0x100, 0x0, 0x7ff, 0x2, 0x3, 0x5, 0x2, 0x45d, 0xb1600000, 0x7f, 0x3, 0x0, 0x0, 0x4, 0x7, 0x3, 0x5, 0x0, 0x8, 0x8, 0xfffffeff, 0x5, 0x5, 0x1, 0x6, 0x80000001, 0x2, 0xfffffff8, 0x0, 0x5, 0x0, 0x81, 0x1, 0x4, 0xd2, 0x7, 0x2, 0x2, 0x7b0, 0x3, 0x4, 0x0, 0x4a33, 0xfffffffb, 0x291, 0x5, 0xfffffffe, 0x5, 0xa33f, 0x1, 0x9, 0x80, 0x40, 0x4, 0x7, 0xb, 0x8000, 0x4b, 0x7, 0x7, 0x10001, 0x1, 0x3, 0x1, 0x6, 0x6, 0x4, 0x2, 0xd682, 0x49, 0xfffff000, 0x81, 0x8, 0x8, 0x0, 0xe12b, 0x9f0, 0x8, 0x3853, 0x9, 0x9, 0x3, 0xb, 0x0, 0x1, 0x7, 0x2, 0x1, 0x5, 0x9, 0x3, 0xc, 0x7, 0x7, 0x9, 0x0, 0x2, 0x8, 0x6, 0xffff5232, 0x7fff, 0x6, 0x0, 0xda84, 0x6, 0x9, 0x7, 0x400, 0x80, 0xfffffff2, 0xc7d, 0x1fffe0, 0x3, 0x59, 0x6, 0x6, 0x9, 0x5, 0x3, 0xb, 0x3, 0x5, 0x9, 0xffffffff, 0xa, 0x1800, 0x1000, 0xffffffff, 0x3, 0x3, 0x6, 0x4, 0x5, 0x4, 0xfffffffd, 0x9, 0xb, 0x8, 0x7, 0x9, 0x0, 0x6, 0x9c9, 0xea, 0x1000, 0x1, 0x9, 0x43, 0x3, 0x7fffffff, 0x7f, 0xfff, 0xdd71, 0x4, 0x8e, 0x7fffffff, 0x3ff, 0x3, 0xf, 0xf, 0x81, 0x2, 0x8c51, 0x8, 0x3ff, 0x5, 0x0, 0xff, 0x7, 0x40, 0x80000001, 0x9, 0x5, 0x520722af, 0x6, 0x1, 0x2, 0x9, 0x0, 0x5, 0x9, 0x5, 0x3, 0x5, 0x5, 0x5, 0xa, 0x10000, 0x10001, 0x2, 0x3a, 0x9, 0x7, 0x4, 0x0, 0x4, 0x9, 0x1b83, 0x200, 0x4, 0x1, 0x9, 0x5, 0x84f, 0x9, 0xa1, 0x3, 0xfffffffa, 0x757, 0x5, 0x0, 0x80, 0x7, 0xd371, 0x4, 0x7, 0x80, 0x100, 0x9, 0x8, 0xf2f1, 0x0, 0x1, 0x0, 0x8, 0x80000000, 0x995, 0x199, 0x0, 0x7fffffff, 0x80000000, 0x1000, 0x20, 0x9, 0x4, 0x2, 0x601, 0x2, 0x6a7, 0x4, 0xfffffffe, 0xfffeffff, 0x1, 0x6, 0x7, 0x594, 0x7ff, 0xad, 0x7, 0x3, 0x1, 0xffff7fff, 0xf430, 0xffff, 0x0, 0x3ff, 0x0, 0x2, 0x2, 0x6, 0x5, 0x2, 0x7, 0xc37, 0x101, 0x5, 0x10000, 0x6d5b, 0x1, 0xad0, 0xffff, 0x9, 0xffffffff, 0x0, 0xf5, 0x800, 0x7, 0x81, 0x1, 0x4, 0x8, 0x2, 0x10000, 0x6, 0x80000000, 0x1, 0x9, 0xe6, 0x2, 0x0, 0x8, 0x3ff, 0x2, 0x7, 0x40, 0x1, 0xfffff540, 0x7fffffff, 0xe08, 0xc96, 0x81, 0x800, 0x4, 0x7, 0x0, 0xffff, 0x3, 0x3, 0x800, 0x3, 0x9, 0x3, 0x2, 0x9, 0x1, 0xfffffffc, 0xfa8, 0x6, 0x0, 0x10000, 0x101, 0x8, 0x8, 0x4, 0x2, 0xfffffd84, 0xc1c4, 0x7ff, 0x7, 0x1, 0x5, 0x1, 0x0, 0x10000, 0x1, 0x4, 0x0, 0x6, 0x4, 0xfffffffc, 0x0, 0x8, 0x7, 0x8, 0x53a, 0x9, 0x8000, 0x7fffffff, 0x7fffffff, 0xc0000000, 0x1, 0x9, 0x7, 0x3c90, 0x8, 0x7, 0x8, 0x95, 0x3000000, 0x9, 0x1, 0x4, 0xfff, 0x7, 0xca, 0x2, 0x6, 0x6, 0x8, 0xfffffffa, 0x2, 0x7f, 0x428f, 0x81, 0xa, 0x3, 0x8, 0x2, 0x3, 0x6, 0x2, 0x7ff, 0x0, 0x9, 0x40, 0x5, 0x3ff, 0x0, 0x9, 0x80000001, 0x9, 0x9, 0xfffffffb, 0x7, 0x2, 0x5, 0x9, 0xc, 0x5, 0x25, 0xda, 0x400, 0x0, 0x168, 0x800, 0x3, 0xce1, 0x4, 0xa016, 0x4, 0x1, 0x8, 0x4, 0xfffff577, 0x401, 0x10001, 0x7, 0x0, 0xe9, 0x9, 0xfffffe01, 0x7ac, 0x2, 0x24000, 0x9, 0x1, 0x800, 0xf, 0x9, 0x2a2f, 0x0, 0x300, 0x3, 0xfff, 0x4, 0x1ff, 0x7, 0x7, 0x0, 0x0, 0x80000000, 0x6, 0x4, 0x1, 0x9, 0x6, 0x16b, 0x4, 0x6, 0xcfca, 0x101, 0x81, 0x2, 0x98, 0xd76, 0x4, 0xc, 0x2, 0x2, 0x0, 0x0, 0xa, 0x5, 0x7f, 0x0, 0x2, 0x40, 0x0, 0x9, 0x1, 0x401, 0x4, 0x81, 0x2, 0x4, 0x1, 0x10000, 0x0, 0x80000001, 0xfffffff7, 0x9, 0xbf93bd1e, 0xffffffff, 0x359, 0x80000000, 0x8d13, 0x4, 0xffffffff, 0x4, 0x9, 0xffff, 0x80000000, 0xaf26, 0x8, 0x6, 0x9e, 0x7, 0x1, 0x7a16b186, 0x1, 0xa9f, 0x5, 0x7fff, 0x100, 0x2, 0x6, 0x6, 0x3e, 0x3c, 0x200, 0xffff, 0x4, 0x8, 0xce6c, 0x2, 0x4, 0xf, 0x200, 0x74, 0x3, 0x10001, 0x8, 0xafdf, 0x0, 0x1, 0x1, 0x7, 0x2, 0x1, 0x3, 0x3ff, 0x8, 0x9, 0xf, 0x1, 0x6, 0x68db, 0x9, 0x5, 0x2, 0x10000, 0x1, 0x80000000, 0x2], 0x1, 0x400})
fcntl$setlease(r8, 0x400, 0x1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x301)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
syz_usb_connect(0x1, 0x528, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x72, 0x79, 0xb4, 0x10, 0x19d2, 0x142, 0xc27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x516, 0x1, 0xf, 0x4, 0x80, 0x9, "", [{{0x9, 0x4, 0x0, 0x1, 0xd, 0xff, 0xff, 0xff, 0x10, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xc000}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xb, 0x1, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x4, 0x200}]}], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0x7f, 0x1, 0x5, [@generic={0xde, 0x6, "c4c282090e869a8bfe8dba676634da9a0e6e03a6e45e3fdfaf41c62148d939fd83d50ccf755d262187c17a65b821f8b0c7340d79807a9f72e4b96532f345f67e1288e387265853fc14419f5ede5c97bf250a93e6ea1304a3219c8748f797e3145ec4f5b5877362cc3a80f31f77658cd9c7e8d49a1de59c2ab3c6ce2faeede25c37b9fb48d6ee97a91a8c6fd82d775733ecc370b4343594fe34df95e20c9617a1525effccde8526bf602e3c989969f7763d6e0278cfe8fe8cab914cacd8abb143aa1b7ccae518b06a00c8aeb70ae5d5ffc22461eafd5b271a3f3be10d"}, @generic={0xa8, 0x11, "311e6c5706e4399e4eee872b0d7ce760274b987170c9ad5ffa79a78ec8a90e745aed00ef7cf1f1d3f51f9d96557c06a85bab5a6dbec83196d8c5c9771a616f1d0c2a93b48557861aa5cc0bf403e9d81b89e76a6a99a7ed0641d50cc0910c59df1764e265d1839bffb84ae790c293e0e1d6f4c918ea520bedef48b84a3cf5e9e405322031314e35af4db387486de61a1e50963bf7f407f8450cfbf9a95980554cdd00b7f8c4ef"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x0, 0xeb, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x10, 0x0, 0x9, [@generic={0x5e, 0xf, "402eb618bf3e24a6c5ce7297cbce6cfe8700192a5feb9f6d27becb6b4996d99d844859ed53f20b0d069fc0ad681da7582a9b523ecfbdb2d8b092c9beadd05c65abaa074362c103006236579e92925b8abe4e6fe3c667addfe4896022"}, @generic={0x82, 0x8, "19ed3647ef17ec04f7f0467fd4e37f48e4de11f3ac53449dee677080c8a6a4ba7221c9e3c7b8409bcd434411d072f86f7e8986b10a1d7ab58f7b77b7c2b86e6cb16704abc1dd66fad6c77d739bb129227ec8ab0517e1fb6942a39f458c17398248d4d531206fc6080da71680846e78c6b90ba7eece2b2bcc50e84c4c55a42569"}]}}, {{0x9, 0x5, 0x0, 0x18, 0x8, 0x2, 0x7, 0xfe}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x8, 0xf3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40, 0xd0be}, @generic={0x2b, 0x11, "b3bb09f776a5e68b15ac321f64df02335dd0b1feb390a3880d32b4efd8ed6171c04a6116dc39d4cea7"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xe, 0x6, 0x1, [@generic={0x53, 0x11, "3f77e6e2516aa574ae8773c53dce3645113ba9e3451f4c28dac8af3bc7aac1dc3f366db830df222671908d1f6e1558aa0d3fc848b2d2a428146c93f05cb446491de62444405c9d6b763f1ac0cc55392ac2"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x89, 0x0, 0x2, [@generic={0x5c, 0x7, "fa3c5dd6dd1ff5c521b7f83aa934b3b0c52772633de1fd60691d74539c549d0c1fc40fe6046669c74985e42a37a55cff4a53d0d8e5335199ff2b3db085b4aacee8f8d1221697b8ccba5723fe9b2593c2229967a09b64cf458e7e"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x10, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3d}, @uac_iso={0x7, 0x25, 0x1, 0xc}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x6, 0x60, 0x8}}, {{0x9, 0x5, 0xb, 0x3, 0x0, 0x9, 0xb, 0x91}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x0, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x5, 0xaf, 0x8}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x6, 0xa6, 0x2, [@generic={0xb6, 0x24, "213cb658bc805ad80f4c19960d1c584d5aa5a377012fc6a311b5cba554145b816b1cfb1650aab2976cefb61239d0133d74699b16da76d5606e298679c6d13f2651f6a9defb028b3114268fb6439b18a43683930585e9f9404a068ff4c736102dcc337b717d000d581cc44be8c0b4bd576c4516d291036caa4cab76ef52a22477d6464029aad479614a9b2306b806fea8ad97369ce4fff927e8e932d3213885059d8b51597d3e9c54a527f338424abaae07d6f54b"}, @generic={0x4a, 0x21, "1e5aef890836139e00fa289d6063d18ca3eaf19dc805879c7d014765d35b462451bb2f150db24e354291427ff3bf23255539a25425666691e1f746b907bc39c6b7c0ec99ef87b906"}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x88, 0xff, 0xf7, 0xff}, 0xfe, &(0x7f0000000600)={0x5, 0xf, 0xfe, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x9, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0x7, 0x2, 0xa}, @generic={0xc9, 0x10, 0x4, "c40481f2c644bbfe5b9e5a93efcb74371995be1be7a7107f548d9c7a871d60865ca4a91d537c02afb90519eacb1f38059469f3c5a82caf3dd89e2091a8bccdcd4011e029082e638aa7f7c0aee3856c6b4a25740322b305358ec238b733e7a8c105f312b0d14f0a1ade21fc8a6272cfd9989d3fc5b865b3c4df779d5d82e4c82d47f819342789f6a22b782fc9b7efd4e55a15fa50b7bd3473304a7ef649ca8807ecc1327b039e84e07de11f198e485b61eb76830b07df9390c04ba3df73ee6ea7f46643e393cc"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x6, 0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "1444494e8e0819a15650e84f7e5d959b"}]}, 0x5, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x407}}, {0x5, &(0x7f00000007c0)=@string={0x5, 0x3, "ed12b0"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc09}}]})

8.107998719s ago: executing program 1 (id=3992):
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x48)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f0", @ANYBLOB="bfd1"], 0x0)

6.348455217s ago: executing program 0 (id=4002):
write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1)

6.160074019s ago: executing program 0 (id=4003):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001})
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000004c0))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4.249733776s ago: executing program 0 (id=4013):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x4, 0x8, 0x7, 0x9}, {0x8, 0x8, 0x7, 0xb6d}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000000))
unlinkat(r0, &(0x7f0000000080)='./cgroup\x00', 0x200)
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x40202, 0x0)
pwritev(r1, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)="15d6fcbf67", 0x5}], 0x2, 0x8, 0x5d1)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8010001, 0x3a10, 0x1, 0x2003}, &(0x7f0000000640)=<r4=>0x0, &(0x7f0000000580)=<r5=>0x0, &(0x7f0000000740)=<r6=>0x0)
write$P9_RATTACH(r0, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x80, 0x2, 0x6}}, 0x14)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r3, 0x0, 0x1, 0x8, 0x2, 0x1, {0x0, 0x0, r3, 0x5}})
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000140)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@new_dev={0x1, 0xaf2, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x2}}}, 0x0)
shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
request_key(0x0, 0x0, 0x0, 0x0)
r8 = dup3(r7, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314, 0xffffffff}], 0x0, 0x0, 0x0})
ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f00000001c0))
r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x8111, 0x0)
io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, &(0x7f0000000280)={0x90, 0x8, 0x2, '\x00', 0x4}, 0x1)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r10=>r1}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r10, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6)

4.098499729s ago: executing program 0 (id=4015):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0x11, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea5}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r0, 0xffffffffffffffff, 0x37, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}})
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_RANGEINFO(r4, 0x80106408, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e23, 0xe76, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x90)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r5, 0x0, 0x2b, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d77741621473ac658833ca3", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x18, 0xeb, &(0x7f0000003600)="c56a8c847238ff52ad0600"/24, &(0x7f0000000500)="229659ccd6f855f1bd40fd739fa8de0cf1ea3f2f73819162675a1ad240b49256c8b5ad664c93136c96f3edc592119ca3df9a80f378d8a74b6a002cad87c687c57201c01f48a4b96bc64e86aafbe22b123676a913b97292c8b81cb7f354a8bbe56b6801d91ea0f5a62faf0660d63f0f204da7c2eb0ff4276ef0f673fc3e0daa8a6375ae443d958b949236f304d7b7ec3c74a34e82949b401a080000000000000019668bedd2eec7ed2766b9f69557646f981aeb9342e4fbd9ee239c7e20caa8beb6b9a56f39c059b4723325cfee096fe5c09269845ea686525461429559d4b3dcbb5134a83966f6c5c8a85a", 0x2, 0x0, 0x3}, 0x50)
r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$6lowpan_enable(r6, &(0x7f00000001c0)='1', 0x1)
r7 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x4c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40)

4.05037696s ago: executing program 2 (id=4016):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00', 0x4c02})
r1 = syz_open_procfs(0x0, &(0x7f0000000400)='stat\x00')
r2 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000001c0))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x109201, 0x0)
pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4)
recvfrom$rxrpc(r1, &(0x7f0000000180)=""/4096, 0x1000, 0x40002061, &(0x7f0000001180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x8, @loopback, 0x1}}, 0x24)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0)

3.87269123s ago: executing program 1 (id=4017):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x81000000}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0xb, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

1.793327459s ago: executing program 1 (id=4019):
openat$vcsu(0xffffffffffffff9c, 0x0, 0x690140, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
r4 = socket(0x2, 0x3, 0xff)
sendmsg$AUDIT_USER(r4, 0x0, 0x200000d0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x9, 0x0, 0x6}, 'syz0\x00', 0x3})
ioctl$UI_DEV_CREATE(r3, 0x5501)
add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
inotify_init1(0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/oops_count', 0x0, 0x48)

1.759956381s ago: executing program 3 (id=4020):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000002c0), &(0x7f0000048000), 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$media(&(0x7f00000000c0), 0x861f, 0x200102)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000a00)={0x0, 0x8, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000980)=[{}, {0x0, <r5=>0x80000000}], 0x1, 0x0, &(0x7f00000009c0)=[{}]})
r6 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x8000)
ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={r5, &(0x7f0000000180), &(0x7f0000000ac0)})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x7}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f800000016002102004c3c446cbd13739f7c7ff6d5fd000000fedbdf2500000000000000000000ffff0a010101fe8000000000000000000000000000aa0000000000000000000080802f00000066c5a2df398a7ac0f9a2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000020000004d633000000fe80000000000000000000000000004e0900000000000000000000000000000000000000000000000000000000000000ffffff7fffffffffedffffffffffffff000800000000000000000000000000000200000000000000fdffffffffffffff0200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002be0000000000000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0)

1.578420932s ago: executing program 3 (id=4021):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x2, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x80000002}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x58}}], 0x1, 0x40000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18000800000081116b00ffffffff95000000000000005651c8707b00a0dd78a214486a6cd5fd02e5f05b993e1c680766f02e0b308f635d84976c961612aae5dfde7bd593289ff4e3d66eb571a7b30ffc6293bf69e9ab5a7e398fa59260749dacfeb3f443c6c9f70d282f29778c7b547486cf994507036a49a4d5610322cdaab3d9922d3c5a511f6bc6a7fa85c18310707345090c700c65be0955ef5e162486beb5c6117ddfbde492368861695f24fca407155e7ba9c152f213261fc8ed17101ef4cbf92785895b6e46ab819e6f820353e563061e25f9b29ca483"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f00000000c0)='syz1\x00')
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10)
writev(r6, &(0x7f0000000040), 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = socket$inet6(0xa, 0x1, 0x7)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0xbf, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r9 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYBLOB="010028bd7000fedbdf25060000001400080076"], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x10004010)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd70000200000003000000080d0000000000000000110000000000080009000200000006001d006e0300000c00160000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008050}, 0x8a1fd7baaf30cd9)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024090)
ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000000)=0x4)
connect$unix(r5, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e31}, 0x6e)
write$UHID_INPUT(r5, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000018180300140012800a000100767863616e0400028008001c0036095e9db43ddfa29cc9815b04b5be05888d8cdb81f8bb7a98a657a866a80a73478dc5972c280a80bb2f", @ANYRES32=r2], 0x60}}, 0x0)

1.527944986s ago: executing program 3 (id=4022):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001})
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000004c0))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.392857914s ago: executing program 0 (id=4023):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$6lowpan_enable(r0, &(0x7f00000001c0)='1', 0x1)

618.75868ms ago: executing program 3 (id=4024):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040880)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00')
utimensat(r1, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0)
r2 = socket(0xa, 0x3, 0xff)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000ffff00008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote}}}], 0x20}, 0x400c844)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1410, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048041}, 0xc0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r6=>0x0})
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000010e90b0000"], 0xd)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ec)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f00000008c0)={0x7, 0x80000000, [{0x6, 0x0, 0x7}, {0xdbebd87, 0x0, 0x7}, {0x4, 0x0, 0x3cf}, {0x9ab, 0x0, 0x2}, {0x2bec, 0x0, 0x7}, {0x7, 0x0, 0x5}, {0x0, 0x0, 0x1}, {0x9023, 0x0, 0x8}, {0x8, 0x0, 0xe9d6}, {0x0, 0x0, 0x1}, {0x101, 0x0, 0x6}, {0xfff, 0x0, 0x2}, {0xbea, 0x0, 0x8000}, {0x1, 0x0, 0x8}, {0x3a, 0x0, 0x3}, {0x2, 0x0, 0x100}]})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, 0x0, 0x40090)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'lo\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001400010126bd7000f8fbdf250a3878ff", @ANYRES32=r9, @ANYBLOB="140002000000005fe2"], 0x34}, 0x1, 0x0, 0x0, 0x4004051}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x5, 0x8}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x6}]}}]}, 0x40}}, 0x4c840)
sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xd, 0x7, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c60133", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00', 0x3}, {&(0x7f0000000140)="23c4", 0x2}], 0x4}, 0x20008b98)

393.394805ms ago: executing program 0 (id=4025):
r0 = epoll_create1(0x80000)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100))
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
socket$netlink(0x10, 0x3, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9})
close(r3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})

339.935209ms ago: executing program 1 (id=4026):
r0 = epoll_create1(0x80000)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100))
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r3 = socket(0x840000000002, 0x1, 0x100)
getpeername$l2tp(r3, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0xb4, &(0x7f0000000280)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}, @val={@val={0x88a8, 0x2, 0x1, 0x3}, {0x8100, 0x3, 0x1, 0x4}}, {@llc_tr={0x11, {@snap={0x0, 0x1, "ae", "26920c", 0x86dd, "a2e45cf784917bd6bd5f8ea458949e4591bdda39e221160eebf53dd424ec903e000e20f141a5c6ea19389b24f94519b79846395f3a6b614ca7d00b627ff5a9fea1101a3c31aa3f8e76bfe02d5c57f1cc1a48768c4c8a739993bd9bbd399105a66810e344a0e20a750601c686de2a0bbafcb3454e9ca52b75e4f7d13988d1b451815c5eaca7bae11546cd983529c8d5a7e4836497e181"}}}}}, &(0x7f0000000340)={0x1, 0x2, [0x30e, 0x970, 0x6, 0x3f7]})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e61, 0x8, @remote, 0xd}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@generic={0x91, 0x1, 0x1, 0x46}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9})
close(r4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
r6 = fsopen(&(0x7f0000000000)='udf\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
read(r6, 0x0, 0x0)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f00000001c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)

242.723593ms ago: executing program 3 (id=4027):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38)

0s ago: executing program 3 (id=4028):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x81000000}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0xb, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

kernel console output (not intermixed with test programs):

021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2059.364283][T21574] usb 1-1: config 0 descriptor??
[ 2059.375572][T22427] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2059.375716][T22427] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2059.395387][T21905] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2059.400616][T21574] usb 1-1: ucan: probing device on interface #0
[ 2059.578212][T21905] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2059.608963][T21905] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2059.614668][T21574] usb 1-1: ucan: device protocol version 0 is not supported
[ 2059.614693][T21574] usb 1-1: ucan: probe failed; try to update the device firmware
[ 2059.643382][T21905] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2059.674853][T21905] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2059.758845][T21905] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2059.799912][T21805] 8021q: adding VLAN 0 to HW filter on device team0
[ 2059.866898][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2059.867040][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2059.923749][   T90] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2059.923854][   T90] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2060.162636][T21870] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2060.299335][T21870] 8021q: adding VLAN 0 to HW filter on device team0
[ 2060.380727][   T90] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2060.381623][   T90] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2060.556727][ T1531] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2060.556948][ T1531] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2060.811696][T21905] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2060.989792][T21905] 8021q: adding VLAN 0 to HW filter on device team0
[ 2061.123596][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2061.130605][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2061.211243][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2061.211823][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2061.726945][T21574] usb 1-1: USB disconnect, device number 70
[ 2063.096007][T21805] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2063.960617][T21870] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2064.292520][T22525] ubi16: attaching mtd0
[ 2064.372488][T21870] veth0_vlan: entered promiscuous mode
[ 2064.409479][T21870] veth1_vlan: entered promiscuous mode
[ 2064.447734][T22528] FAULT_INJECTION: forcing a failure.
[ 2064.447734][T22528] name failslab, interval 1, probability 0, space 0, times 0
[ 2064.447774][T22528] CPU: 1 UID: 0 PID: 22528 Comm: syz.3.3680 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2064.447805][T22528] Tainted: [L]=SOFTLOCKUP
[ 2064.447813][T22528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2064.447827][T22528] Call Trace:
[ 2064.447836][T22528]  <TASK>
[ 2064.447845][T22528]  dump_stack_lvl+0xe8/0x150
[ 2064.447899][T22528]  should_fail_ex+0x467/0x600
[ 2064.447939][T22528]  should_failslab+0xa8/0x100
[ 2064.447970][T22528]  __kmalloc_noprof+0xfe/0x780
[ 2064.447991][T22528]  ? rcu_is_watching+0x15/0xb0
[ 2064.448018][T22528]  ? tomoyo_realpath_from_path+0xef/0x640
[ 2064.448045][T22528]  ? tomoyo_realpath_from_path+0xef/0x640
[ 2064.448081][T22528]  tomoyo_realpath_from_path+0xef/0x640
[ 2064.448120][T22528]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 2064.448159][T22528]  tomoyo_path_number_perm+0x246/0x5f0
[ 2064.448199][T22528]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2064.448236][T22528]  ? __lock_acquire+0x683/0x2ce0
[ 2064.448275][T22528]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2064.448310][T22528]  ? hook_file_ioctl+0x1f3/0x600
[ 2064.448340][T22528]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2064.448396][T22528]  ? __fget_files+0x2a/0x420
[ 2064.448422][T22528]  ? __fget_files+0x2a/0x420
[ 2064.448443][T22528]  ? __fget_files+0x3a8/0x420
[ 2064.448464][T22528]  ? __fget_files+0x2a/0x420
[ 2064.448491][T22528]  security_file_ioctl+0xc3/0x2a0
[ 2064.448520][T22528]  __se_sys_ioctl+0x47/0x170
[ 2064.448549][T22528]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2064.448575][T22528]  do_syscall_64+0x174/0x580
[ 2064.448610][T22528]  ? trace_irq_disable+0x3b/0x140
[ 2064.448647][T22528]  ? clear_bhb_loop+0x40/0x90
[ 2064.448676][T22528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2064.448700][T22528] RIP: 0033:0x7ff26395de59
[ 2064.448723][T22528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2064.448743][T22528] RSP: 002b:00007ff261bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2064.448768][T22528] RAX: ffffffffffffffda RBX: 00007ff263be5fa0 RCX: 00007ff26395de59
[ 2064.448786][T22528] RDX: 0000200000000440 RSI: 0000000040186f40 RDI: 0000000000000003
[ 2064.448802][T22528] RBP: 00007ff261bb6090 R08: 0000000000000000 R09: 0000000000000000
[ 2064.448816][T22528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2064.448831][T22528] R13: 00007ff263be6038 R14: 00007ff263be5fa0 R15: 00007ffcd135e638
[ 2064.448876][T22528]  </TASK>
[ 2064.463501][T22528] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2064.895551][T22528] ubi16: attaching mtd0
[ 2065.370004][T22532] input input50: cannot allocate more than FF_MAX_EFFECTS effects
[ 2065.842005][T21870] veth0_macvtap: entered promiscuous mode
[ 2065.871000][T21870] veth1_macvtap: entered promiscuous mode
[ 2065.910774][T21905] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2065.993963][T21870] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2066.041920][T21870] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2066.140967][   T90] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2066.166767][   T90] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2066.179337][T22542] FAULT_INJECTION: forcing a failure.
[ 2066.179337][T22542] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2066.179377][T22542] CPU: 1 UID: 0 PID: 22542 Comm: syz.3.3684 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2066.179436][T22542] Tainted: [L]=SOFTLOCKUP
[ 2066.179465][T22542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2066.179505][T22542] Call Trace:
[ 2066.179527][T22542]  <TASK>
[ 2066.179549][T22542]  dump_stack_lvl+0xe8/0x150
[ 2066.179663][T22542]  should_fail_ex+0x467/0x600
[ 2066.179810][T22542]  _copy_from_user+0x2d/0xb0
[ 2066.179884][T22542]  ___sys_recvmsg+0x173/0x5a0
[ 2066.179963][T22542]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2066.180014][T22542]  ? __fget_files+0x2a/0x420
[ 2066.180120][T22542]  ? __fget_files+0x3a8/0x420
[ 2066.180206][T22542]  do_recvmmsg+0x320/0x7f0
[ 2066.180286][T22542]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2066.180320][T22542]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2066.180367][T22542]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2066.180450][T22542]  __x64_sys_recvmmsg+0x198/0x250
[ 2066.180524][T22542]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 2066.180617][T22542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2066.180689][T22542]  do_syscall_64+0x174/0x580
[ 2066.180772][T22542]  ? clear_bhb_loop+0x40/0x90
[ 2066.180800][T22542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2066.180821][T22542] RIP: 0033:0x7ff26395de59
[ 2066.180842][T22542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2066.180871][T22542] RSP: 002b:00007ff261bb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 2066.180935][T22542] RAX: ffffffffffffffda RBX: 00007ff263be5fa0 RCX: 00007ff26395de59
[ 2066.180977][T22542] RDX: 0400000000000179 RSI: 0000200000000480 RDI: 0000000000000003
[ 2066.181017][T22542] RBP: 00007ff261bb6090 R08: 0000000000000000 R09: 0000000000000000
[ 2066.181057][T22542] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001
[ 2066.181102][T22542] R13: 00007ff263be6038 R14: 00007ff263be5fa0 R15: 00007ffcd135e638
[ 2066.181226][T22542]  </TASK>
[ 2066.258687][T21805] veth0_vlan: entered promiscuous mode
[ 2066.260631][   T90] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2066.287747][   T90] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2066.365203][ T5603] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 2066.525813][ T5603] usb 1-1: Using ep0 maxpacket: 32
[ 2066.549271][ T5603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2066.549323][ T5603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2066.549366][ T5603] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 2066.549391][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2066.621313][ T5603] usb 1-1: config 0 descriptor??
[ 2066.734116][T21805] veth1_vlan: entered promiscuous mode
[ 2067.157122][ T5603] ft260 0003:0403:6030.0011: unknown main item tag 0x0
[ 2067.157162][ T5603] ft260 0003:0403:6030.0011: unknown main item tag 0x0
[ 2067.167631][T21905] veth0_vlan: entered promiscuous mode
[ 2067.346740][ T5603] ft260 0003:0403:6030.0011: failed to retrieve chip version
[ 2067.347454][ T5603] ft260 0003:0403:6030.0011: probe with driver ft260 failed with error -5
[ 2067.551524][ T5835] usb 1-1: USB disconnect, device number 71
[ 2067.994140][T21905] veth1_vlan: entered promiscuous mode
[ 2068.150940][   T37] kauditd_printk_skb: 142 callbacks suppressed
[ 2068.150964][   T37] audit: type=1326 audit(1784071536.458:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22551 comm="syz.3.3688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff26395de59 code=0x7ffc0000
[ 2068.151019][   T37] audit: type=1326 audit(1784071536.458:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22551 comm="syz.3.3688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff26395de59 code=0x7ffc0000
[ 2068.151070][   T37] audit: type=1326 audit(1784071536.488:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22551 comm="syz.3.3688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff26395de59 code=0x7ffc0000
[ 2068.151127][   T37] audit: type=1326 audit(1784071536.488:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22551 comm="syz.3.3688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff26395de59 code=0x7ffc0000
[ 2068.151180][   T37] audit: type=1326 audit(1784071536.488:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22551 comm="syz.3.3688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff26395de59 code=0x7ffc0000
[ 2068.151234][   T37] audit: type=1326 audit(1784071536.488:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22551 comm="syz.3.3688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff26395de59 code=0x7ffc0000
[ 2068.151284][   T37] audit: type=1326 audit(1784071536.488:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22551 comm="syz.3.3688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff26395de59 code=0x7ffc0000
[ 2068.151337][   T37] audit: type=1326 audit(1784071536.488:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22551 comm="syz.3.3688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff26395de59 code=0x7ffc0000
[ 2068.151388][   T37] audit: type=1326 audit(1784071536.488:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22551 comm="syz.3.3688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff26395de59 code=0x7ffc0000
[ 2068.151444][   T37] audit: type=1326 audit(1784071536.488:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22551 comm="syz.3.3688" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff26395de59 code=0x7ffc0000
[ 2068.692523][T22558] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcl818)
[ 2068.703992][T21805] veth0_macvtap: entered promiscuous mode
[ 2068.725274][ T1428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2068.725298][ T1428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2068.770545][T21805] veth1_macvtap: entered promiscuous mode
[ 2068.932187][T21905] veth0_macvtap: entered promiscuous mode
[ 2068.953569][   T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2068.953593][   T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2069.018688][T21905] veth1_macvtap: entered promiscuous mode
[ 2069.023732][T21805] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2069.144851][T21574] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 2069.165491][T21805] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2069.219145][   T90] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2069.220819][   T90] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2069.223538][T21905] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2069.240489][   T90] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2069.281079][T13653] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2069.304257][T21905] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2069.315999][T21574] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[ 2069.326427][T21574] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40
[ 2069.326535][T21574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 2069.326597][T21574] usb 4-1: Product: syz
[ 2069.326640][T21574] usb 4-1: Manufacturer: syz
[ 2069.455208][T20991] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2069.458367][T20991] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2069.461694][ T9373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2069.597055][ T9373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2069.602338][T21574] usb 4-1: probing VID:PID(0424:012C)   
[ 2069.636578][T21574] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[ 2069.693418][T21574] vub300 4-1:127.0: probe with driver vub300 failed with error -22
[ 2070.174710][T21574] usb 4-1: USB disconnect, device number 65
[ 2071.552489][T22576] team0: No ports can be present during mode change
[ 2073.359679][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2073.359705][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2073.871189][ T6050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2073.871206][ T6050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2074.036974][T22588] input input51: cannot allocate more than FF_MAX_EFFECTS effects
[ 2074.646736][T22598] FAULT_INJECTION: forcing a failure.
[ 2074.646736][T22598] name failslab, interval 1, probability 0, space 0, times 0
[ 2074.646835][T22598] CPU: 0 UID: 0 PID: 22598 Comm: syz.1.3699 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2074.646870][T22598] Tainted: [L]=SOFTLOCKUP
[ 2074.646880][T22598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2074.646895][T22598] Call Trace:
[ 2074.646904][T22598]  <TASK>
[ 2074.646914][T22598]  dump_stack_lvl+0xe8/0x150
[ 2074.646954][T22598]  should_fail_ex+0x467/0x600
[ 2074.646992][T22598]  should_failslab+0xa8/0x100
[ 2074.647019][T22598]  __kmalloc_noprof+0xfe/0x780
[ 2074.647040][T22598]  ? rcu_is_watching+0x15/0xb0
[ 2074.647066][T22598]  ? tomoyo_realpath_from_path+0xef/0x640
[ 2074.647093][T22598]  ? tomoyo_realpath_from_path+0xef/0x640
[ 2074.647126][T22598]  tomoyo_realpath_from_path+0xef/0x640
[ 2074.647166][T22598]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 2074.647203][T22598]  tomoyo_path_number_perm+0x246/0x5f0
[ 2074.647241][T22598]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2074.647283][T22598]  ? preempt_schedule_thunk+0x16/0x40
[ 2074.647329][T22598]  ? hook_file_ioctl+0x1f3/0x600
[ 2074.647387][T22598]  ? __rcu_read_unlock+0x83/0xe0
[ 2074.647422][T22598]  ? __fget_files+0x2a/0x420
[ 2074.647444][T22598]  ? __fget_files+0x3a8/0x420
[ 2074.647464][T22598]  ? __fget_files+0x2a/0x420
[ 2074.647491][T22598]  security_file_ioctl+0xc3/0x2a0
[ 2074.647518][T22598]  __se_sys_ioctl+0x47/0x170
[ 2074.647547][T22598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2074.647572][T22598]  do_syscall_64+0x174/0x580
[ 2074.647609][T22598]  ? clear_bhb_loop+0x40/0x90
[ 2074.647637][T22598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2074.647660][T22598] RIP: 0033:0x7fb92f9ede59
[ 2074.647682][T22598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2074.647702][T22598] RSP: 002b:00007fb92dc25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2074.647725][T22598] RAX: ffffffffffffffda RBX: 00007fb92fc76090 RCX: 00007fb92f9ede59
[ 2074.647743][T22598] RDX: 0000000000000000 RSI: 000000008050640a RDI: 0000000000000005
[ 2074.647758][T22598] RBP: 00007fb92dc25090 R08: 0000000000000000 R09: 0000000000000000
[ 2074.647772][T22598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2074.647787][T22598] R13: 00007fb92fc76128 R14: 00007fb92fc76090 R15: 00007ffe8413e138
[ 2074.647823][T22598]  </TASK>
[ 2074.648008][T22598] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2076.402140][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2076.473795][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2076.498312][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2076.510573][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2076.525476][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2079.087543][T20206] Bluetooth: hci5: command tx timeout
[ 2081.408919][T20206] Bluetooth: hci5: command tx timeout
[ 2082.627128][T22671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3714'.
[ 2083.248889][T22682] FAULT_INJECTION: forcing a failure.
[ 2083.248889][T22682] name failslab, interval 1, probability 0, space 0, times 0
[ 2083.248941][T22682] CPU: 1 UID: 0 PID: 22682 Comm: syz.1.3720 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2083.248972][T22682] Tainted: [L]=SOFTLOCKUP
[ 2083.248982][T22682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2083.248996][T22682] Call Trace:
[ 2083.249005][T22682]  <TASK>
[ 2083.249018][T22682]  dump_stack_lvl+0xe8/0x150
[ 2083.249060][T22682]  should_fail_ex+0x467/0x600
[ 2083.249105][T22682]  should_failslab+0xa8/0x100
[ 2083.249134][T22682]  __kmalloc_cache_noprof+0xa0/0x6b0
[ 2083.249159][T22682]  ? alloc_pipe_info+0xe8/0x4c0
[ 2083.249188][T22682]  ? alloc_pipe_info+0xe8/0x4c0
[ 2083.249225][T22682]  alloc_pipe_info+0xe8/0x4c0
[ 2083.249257][T22682]  splice_direct_to_actor+0xa52/0xcc0
[ 2083.249284][T22682]  ? __lock_acquire+0x683/0x2ce0
[ 2083.249312][T22682]  ? kstrtouint+0x6e/0xe0
[ 2083.249352][T22682]  ? __lock_acquire+0x683/0x2ce0
[ 2083.249376][T22682]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2083.249401][T22682]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2083.249438][T22682]  do_splice_direct+0x19b/0x2a0
[ 2083.249467][T22682]  ? __pfx_do_splice_direct+0x10/0x10
[ 2083.249493][T22682]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2083.249524][T22682]  ? bpf_lsm_file_permission+0x9/0x20
[ 2083.249557][T22682]  ? security_file_permission+0x75/0x260
[ 2083.249582][T22682]  ? rw_verify_area+0x209/0x4d0
[ 2083.249613][T22682]  do_sendfile+0x540/0x7e0
[ 2083.249647][T22682]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2083.249691][T22682]  ? __pfx_do_sendfile+0x10/0x10
[ 2083.249739][T22682]  __se_sys_sendfile64+0x144/0x1a0
[ 2083.249775][T22682]  ? __pfx___se_sys_sendfile64+0x10/0x10
[ 2083.249818][T22682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2083.249843][T22682]  do_syscall_64+0x174/0x580
[ 2083.249877][T22682]  ? trace_irq_disable+0x3b/0x140
[ 2083.249920][T22682]  ? clear_bhb_loop+0x40/0x90
[ 2083.249949][T22682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2083.249973][T22682] RIP: 0033:0x7fb92f9ede59
[ 2083.249995][T22682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2083.250016][T22682] RSP: 002b:00007fb92dc46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2083.250039][T22682] RAX: ffffffffffffffda RBX: 00007fb92fc75fa0 RCX: 00007fb92f9ede59
[ 2083.250055][T22682] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2083.250069][T22682] RBP: 00007fb92dc46090 R08: 0000000000000000 R09: 0000000000000000
[ 2083.250083][T22682] R10: 0000000001000009 R11: 0000000000000246 R12: 0000000000000001
[ 2083.250097][T22682] R13: 00007fb92fc76038 R14: 00007fb92fc75fa0 R15: 00007ffe8413e138
[ 2083.250131][T22682]  </TASK>
[ 2083.434671][T20206] Bluetooth: hci5: command tx timeout
[ 2084.055865][T22695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3727'.
[ 2084.218916][T13653] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2086.050812][T20206] Bluetooth: hci5: command tx timeout
[ 2086.095667][T22701] FAULT_INJECTION: forcing a failure.
[ 2086.095667][T22701] name failslab, interval 1, probability 0, space 0, times 0
[ 2086.095707][T22701] CPU: 0 UID: 0 PID: 22701 Comm: syz.3.3728 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2086.095739][T22701] Tainted: [L]=SOFTLOCKUP
[ 2086.095748][T22701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2086.095763][T22701] Call Trace:
[ 2086.095772][T22701]  <TASK>
[ 2086.095782][T22701]  dump_stack_lvl+0xe8/0x150
[ 2086.095824][T22701]  should_fail_ex+0x467/0x600
[ 2086.095864][T22701]  should_failslab+0xa8/0x100
[ 2086.095893][T22701]  __kmalloc_cache_noprof+0xa0/0x6b0
[ 2086.095924][T22701]  ? alloc_pipe_info+0xe8/0x4c0
[ 2086.095952][T22701]  ? alloc_pipe_info+0xe8/0x4c0
[ 2086.095988][T22701]  alloc_pipe_info+0xe8/0x4c0
[ 2086.096022][T22701]  splice_direct_to_actor+0xa52/0xcc0
[ 2086.096057][T22701]  ? __lock_acquire+0x683/0x2ce0
[ 2086.096086][T22701]  ? kstrtouint+0x6e/0xe0
[ 2086.096128][T22701]  ? __lock_acquire+0x683/0x2ce0
[ 2086.096152][T22701]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2086.096178][T22701]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2086.096215][T22701]  do_splice_direct+0x19b/0x2a0
[ 2086.096244][T22701]  ? __pfx_do_splice_direct+0x10/0x10
[ 2086.096271][T22701]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2086.096302][T22701]  ? bpf_lsm_file_permission+0x9/0x20
[ 2086.096336][T22701]  ? security_file_permission+0x75/0x260
[ 2086.096361][T22701]  ? rw_verify_area+0x209/0x4d0
[ 2086.096391][T22701]  do_sendfile+0x540/0x7e0
[ 2086.096425][T22701]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2086.096469][T22701]  ? __pfx_do_sendfile+0x10/0x10
[ 2086.096519][T22701]  __se_sys_sendfile64+0x144/0x1a0
[ 2086.096556][T22701]  ? __pfx___se_sys_sendfile64+0x10/0x10
[ 2086.096599][T22701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2086.096626][T22701]  do_syscall_64+0x174/0x580
[ 2086.096673][T22701]  ? clear_bhb_loop+0x40/0x90
[ 2086.096702][T22701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2086.096726][T22701] RIP: 0033:0x7ff26395de59
[ 2086.096747][T22701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2086.096765][T22701] RSP: 002b:00007ff261b74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2086.096789][T22701] RAX: ffffffffffffffda RBX: 00007ff263be6180 RCX: 00007ff26395de59
[ 2086.096807][T22701] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[ 2086.096822][T22701] RBP: 00007ff261b74090 R08: 0000000000000000 R09: 0000000000000000
[ 2086.096837][T22701] R10: 000080001d00c0d1 R11: 0000000000000246 R12: 0000000000000001
[ 2086.096852][T22701] R13: 00007ff263be6218 R14: 00007ff263be6180 R15: 00007ffcd135e638
[ 2086.096889][T22701]  </TASK>
[ 2088.076055][T22720] FAULT_INJECTION: forcing a failure.
[ 2088.076055][T22720] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2088.076095][T22720] CPU: 0 UID: 0 PID: 22720 Comm: syz.2.3735 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2088.076124][T22720] Tainted: [L]=SOFTLOCKUP
[ 2088.076133][T22720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2088.076147][T22720] Call Trace:
[ 2088.076156][T22720]  <TASK>
[ 2088.076166][T22720]  dump_stack_lvl+0xe8/0x150
[ 2088.076206][T22720]  should_fail_ex+0x467/0x600
[ 2088.076246][T22720]  _copy_from_user+0x2d/0xb0
[ 2088.076272][T22720]  do_sock_getsockopt+0x200/0x7e0
[ 2088.076308][T22720]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 2088.076349][T22720]  ? __fget_files+0x3a8/0x420
[ 2088.076371][T22720]  ? __fget_files+0x2a/0x420
[ 2088.076401][T22720]  __x64_sys_getsockopt+0x1aa/0x250
[ 2088.076432][T22720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2088.076458][T22720]  do_syscall_64+0x174/0x580
[ 2088.076503][T22720]  ? trace_irq_disable+0x3b/0x140
[ 2088.076540][T22720]  ? clear_bhb_loop+0x40/0x90
[ 2088.076569][T22720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2088.076593][T22720] RIP: 0033:0x7f8ee864de59
[ 2088.076615][T22720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2088.076635][T22720] RSP: 002b:00007f8ee68a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 2088.076659][T22720] RAX: ffffffffffffffda RBX: 00007f8ee88d5fa0 RCX: 00007f8ee864de59
[ 2088.076677][T22720] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003
[ 2088.076691][T22720] RBP: 00007f8ee68a6090 R08: 0000200000000240 R09: 0000000000000000
[ 2088.076708][T22720] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[ 2088.076724][T22720] R13: 00007f8ee88d6038 R14: 00007f8ee88d5fa0 R15: 00007ffed9866db8
[ 2088.076761][T22720]  </TASK>
[ 2088.534723][T11799] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 2088.694668][T11799] usb 1-1: Using ep0 maxpacket: 32
[ 2088.697022][T11799] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2088.697053][T11799] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 2088.697080][T11799] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2088.699819][T11799] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 2088.699849][T11799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2088.699871][T11799] usb 1-1: Product: syz
[ 2088.699888][T11799] usb 1-1: Manufacturer: syz
[ 2088.699905][T11799] usb 1-1: SerialNumber: syz
[ 2088.705735][T11799] usb 1-1: config 0 descriptor??
[ 2088.834673][T22552] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 2088.990063][T22552] usb 3-1: config 127 has an invalid interface number: 241 but max is 1
[ 2088.990096][T22552] usb 3-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2088.990116][T22552] usb 3-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2088.990135][T22552] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping
[ 2088.990155][T22552] usb 3-1: config 127 has an invalid interface number: 174 but max is 1
[ 2088.990179][T22552] usb 3-1: config 127 has no interface number 0
[ 2088.990197][T22552] usb 3-1: config 127 has no interface number 1
[ 2088.990257][T22552] usb 3-1: config 127 interface 241 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 2088.990384][T22552] usb 3-1: config 127 interface 241 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 2088.990417][T22552] usb 3-1: config 127 interface 241 altsetting 6 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 2088.990449][T22552] usb 3-1: config 127 interface 241 altsetting 6 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 2088.990477][T22552] usb 3-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x6, skipping
[ 2088.990502][T22552] usb 3-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[ 2088.990527][T22552] usb 3-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[ 2088.990553][T22552] usb 3-1: config 127 interface 241 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 32
[ 2088.990580][T22552] usb 3-1: config 127 interface 241 altsetting 6 endpoint 0x4 has invalid wMaxPacketSize 0
[ 2088.990606][T22552] usb 3-1: config 127 interface 241 altsetting 6 endpoint 0x2 has invalid maxpacket 1536, setting to 64
[ 2088.990633][T22552] usb 3-1: config 127 interface 241 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[ 2088.990672][T22552] usb 3-1: config 127 interface 174 altsetting 193 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 2088.990700][T22552] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x5, skipping
[ 2088.990725][T22552] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0xC, skipping
[ 2088.990750][T22552] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x2, skipping
[ 2088.990773][T22552] usb 3-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2088.990794][T22552] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x6, skipping
[ 2088.990818][T22552] usb 3-1: config 127 interface 174 altsetting 193 bulk endpoint 0xF has invalid maxpacket 32
[ 2088.990851][T22552] usb 3-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2088.990875][T22552] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x5, skipping
[ 2088.990900][T22552] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x8, skipping
[ 2088.990925][T22552] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x4, skipping
[ 2088.990948][T22552] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x9, skipping
[ 2088.990973][T22552] usb 3-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2088.990997][T22552] usb 3-1: config 127 interface 174 altsetting 193 endpoint 0xA has invalid maxpacket 1023, setting to 64
[ 2088.991027][T22552] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x2, skipping
[ 2088.991052][T22552] usb 3-1: config 127 interface 241 has no altsetting 0
[ 2088.991070][T22552] usb 3-1: config 127 interface 174 has no altsetting 0
[ 2089.083136][T22552] usb 3-1: Dual-Role OTG device on HNP port
[ 2089.090427][T22552] usb 3-1: New USB device found, idVendor=07ca, idProduct=0825, bcdDevice=5f.f9
[ 2089.090460][T22552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2089.090483][T22552] usb 3-1: Product: syz
[ 2089.090499][T22552] usb 3-1: Manufacturer: syz
[ 2089.090515][T22552] usb 3-1: SerialNumber: syz
[ 2089.178400][T11799] gs_usb 1-1:0.0: Configuring for 1 interfaces
[ 2089.512087][T22726] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2090.026993][T13653] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2090.272449][T22552] usb 3-1: USB disconnect, device number 25
[ 2090.634953][T11799] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-ETIMEDOUT)
[ 2090.635752][T11799] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110
[ 2090.733092][T11799] usb 1-1: USB disconnect, device number 72
[ 2092.690846][T13653] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2093.554688][T11799] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[ 2093.568296][T13653] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2093.652913][ T5719] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 2093.706123][T11799] usb 2-1: not running at top speed; connect to a high speed hub
[ 2093.707102][T11799] usb 2-1: config 0 has an invalid interface number: 69 but max is 1
[ 2093.707121][T11799] usb 2-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config
[ 2093.707136][T11799] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2093.707151][T11799] usb 2-1: config 0 has no interface number 0
[ 2093.707173][T11799] usb 2-1: config 0 interface 69 has no altsetting 0
[ 2093.710209][T11799] usb 2-1: New USB device found, idVendor=0451, idProduct=8140, bcdDevice= 4.82
[ 2093.710230][T11799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2093.710246][T11799] usb 2-1: Product: syz
[ 2093.710261][T11799] usb 2-1: Manufacturer: syz
[ 2093.710272][T11799] usb 2-1: SerialNumber: syz
[ 2093.716261][T11799] usb 2-1: config 0 descriptor??
[ 2093.784626][ T5603] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 2093.824597][ T5719] usb 3-1: Using ep0 maxpacket: 32
[ 2093.844952][ T5719] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 2093.844983][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2093.845006][ T5719] usb 3-1: Product: syz
[ 2093.845022][ T5719] usb 3-1: Manufacturer: syz
[ 2093.845039][ T5719] usb 3-1: SerialNumber: syz
[ 2093.905695][ T5719] usb 3-1: config 0 descriptor??
[ 2093.926258][ T5719] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 2093.926545][ T5719] dvb-usb: bulk message failed: -22 (4/0)
[ 2093.926565][ T5719] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 2093.926700][ T5719] dvb-usb: bulk message failed: -22 (5/0)
[ 2093.926717][ T5719] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 2093.996177][ T5719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2093.996744][ T5603] usb 4-1: Using ep0 maxpacket: 32
[ 2093.997372][ T5719] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 2093.997432][ T5719] usb 3-1: media controller created
[ 2094.000484][ T5603] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 2094.000523][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2094.000599][ T5603] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 2094.000639][ T5603] usb 4-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00
[ 2094.000662][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2094.121850][T22769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2094.123894][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2094.149846][T22769] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2094.167697][T22774] dvb-usb: bulk message failed: -22 (7/0)
[ 2094.167721][T22774] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[ 2094.167769][T22774] ttusb2: i2c transfer failed.
[ 2094.175484][T22769] support for cryptoloop has been removed.  Use dm-crypt instead.
[ 2094.191460][T22769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3754'.
[ 2094.271617][T22779] binder: 22778:22779 ioctl c0306201 200000000080 returned -14
[ 2094.273725][ T5603] usb 4-1: config 0 descriptor??
[ 2094.365660][T22781] binder: 22778:22781 ioctl c0306201 2000000003c0 returned -14
[ 2094.394663][T22779] FAULT_INJECTION: forcing a failure.
[ 2094.394663][T22779] name failslab, interval 1, probability 0, space 0, times 0
[ 2094.394708][T22779] CPU: 1 UID: 0 PID: 22779 Comm: syz.0.3759 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2094.394761][T22779] Tainted: [L]=SOFTLOCKUP
[ 2094.394770][T22779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2094.394816][T22779] Call Trace:
[ 2094.394825][T22779]  <TASK>
[ 2094.394836][T22779]  dump_stack_lvl+0xe8/0x150
[ 2094.394878][T22779]  should_fail_ex+0x467/0x600
[ 2094.394919][T22779]  should_failslab+0xa8/0x100
[ 2094.394948][T22779]  __kmalloc_noprof+0xfe/0x780
[ 2094.394970][T22779]  ? rcu_is_watching+0x15/0xb0
[ 2094.394998][T22779]  ? tomoyo_realpath_from_path+0xef/0x640
[ 2094.395026][T22779]  ? tomoyo_realpath_from_path+0xef/0x640
[ 2094.395063][T22779]  tomoyo_realpath_from_path+0xef/0x640
[ 2094.395102][T22779]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 2094.395139][T22779]  tomoyo_path_number_perm+0x246/0x5f0
[ 2094.395178][T22779]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2094.395212][T22779]  ? __lock_acquire+0x683/0x2ce0
[ 2094.395252][T22779]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2094.395285][T22779]  ? hook_file_ioctl+0x1f3/0x600
[ 2094.395316][T22779]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2094.395372][T22779]  ? __fget_files+0x2a/0x420
[ 2094.395398][T22779]  ? __fget_files+0x2a/0x420
[ 2094.395418][T22779]  ? __fget_files+0x3a8/0x420
[ 2094.395440][T22779]  ? __fget_files+0x2a/0x420
[ 2094.395467][T22779]  security_file_ioctl+0xc3/0x2a0
[ 2094.395493][T22779]  __se_sys_ioctl+0x47/0x170
[ 2094.395524][T22779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2094.395550][T22779]  do_syscall_64+0x174/0x580
[ 2094.395587][T22779]  ? clear_bhb_loop+0x40/0x90
[ 2094.395616][T22779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2094.395640][T22779] RIP: 0033:0x7f2a92d8de59
[ 2094.395663][T22779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2094.395684][T22779] RSP: 002b:00007f2a90fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2094.395708][T22779] RAX: ffffffffffffffda RBX: 00007f2a93015fa0 RCX: 00007f2a92d8de59
[ 2094.395725][T22779] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003
[ 2094.395740][T22779] RBP: 00007f2a90fe6090 R08: 0000000000000000 R09: 0000000000000000
[ 2094.395754][T22779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2094.395768][T22779] R13: 00007f2a93016038 R14: 00007f2a93015fa0 R15: 00007ffe11a38ea8
[ 2094.395814][T22779]  </TASK>
[ 2094.427622][T22779] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2094.757818][ T5719] usb 3-1: selecting invalid altsetting 3
[ 2094.757840][ T5719] ttusb2: set interface to alts=3 failed
[ 2094.886819][ T5719] DVB: Unable to find symbol tda10086_attach()
[ 2094.886837][ T5719] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 2094.889688][ T5719] dvb-usb: bulk message failed: -22 (4/0)
[ 2094.889711][ T5719] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 2094.889839][ T5719] dvb-usb: bulk message failed: -22 (5/0)
[ 2094.889857][ T5719] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 2094.889929][ T5719] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 2095.011192][ T5719] usb 3-1: USB disconnect, device number 26
[ 2095.300326][ T5603] usbhid 4-1:0.0: can't add hid device: -71
[ 2095.300700][ T5603] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2095.449229][ T5719] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 2095.451098][ T5603] usb 4-1: USB disconnect, device number 66
[ 2096.763701][T22796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3763'.
[ 2098.267492][T11799] hub 2-1:0.69: bad descriptor, ignoring hub
[ 2098.267537][T11799] hub 2-1:0.69: probe with driver hub failed with error -5
[ 2098.271223][T11799] rndis_host 2-1:0.69: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 2098.578990][T11799] usb 2-1: USB disconnect, device number 31
[ 2099.030163][T22813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3769'.
[ 2099.120647][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[ 2100.276871][T22654] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 2100.431448][T22654] usb 2-1: config 127 has an invalid interface number: 241 but max is 1
[ 2100.431480][T22654] usb 2-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2100.431501][T22654] usb 2-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2100.431521][T22654] usb 2-1: config 127 contains an unexpected descriptor of type 0x2, skipping
[ 2100.431542][T22654] usb 2-1: config 127 has an invalid interface number: 174 but max is 1
[ 2100.431566][T22654] usb 2-1: config 127 has no interface number 0
[ 2100.431584][T22654] usb 2-1: config 127 has no interface number 1
[ 2100.431640][T22654] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 2100.431670][T22654] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 2100.431699][T22654] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 2100.431731][T22654] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 2100.431765][T22654] usb 2-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x6, skipping
[ 2100.431789][T22654] usb 2-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[ 2100.431814][T22654] usb 2-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[ 2100.431839][T22654] usb 2-1: config 127 interface 241 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 32
[ 2100.431864][T22654] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x4 has invalid wMaxPacketSize 0
[ 2100.431887][T22654] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x2 has invalid maxpacket 1536, setting to 64
[ 2100.431915][T22654] usb 2-1: config 127 interface 241 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[ 2100.432149][T22654] usb 2-1: config 127 interface 174 altsetting 193 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 2100.432228][T22654] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x5, skipping
[ 2100.432254][T22654] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0xC, skipping
[ 2100.432505][T22654] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x2, skipping
[ 2100.432567][T22654] usb 2-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2100.433493][T22654] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x6, skipping
[ 2100.463381][T22654] usb 2-1: config 127 interface 174 altsetting 193 bulk endpoint 0xF has invalid maxpacket 32
[ 2100.463421][T22654] usb 2-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2100.463447][T22654] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x5, skipping
[ 2100.463472][T22654] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x8, skipping
[ 2100.482384][T22654] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x4, skipping
[ 2100.482418][T22654] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x9, skipping
[ 2100.482441][T22654] usb 2-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2100.482467][T22654] usb 2-1: config 127 interface 174 altsetting 193 endpoint 0xA has invalid maxpacket 1023, setting to 64
[ 2100.482496][T22654] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x2, skipping
[ 2100.482521][T22654] usb 2-1: config 127 interface 241 has no altsetting 0
[ 2100.482542][T22654] usb 2-1: config 127 interface 174 has no altsetting 0
[ 2100.619448][T22654] usb 2-1: Dual-Role OTG device on HNP port
[ 2100.664423][T22654] usb 2-1: New USB device found, idVendor=07ca, idProduct=0825, bcdDevice=5f.f9
[ 2100.664456][T22654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2100.677462][T22654] usb 2-1: Product: syz
[ 2100.677538][T22654] usb 2-1: Manufacturer: syz
[ 2100.677556][T22654] usb 2-1: SerialNumber: syz
[ 2100.910201][T22825] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2101.477410][T22654] usb 2-1: USB disconnect, device number 32
[ 2101.696886][T22835] FAULT_INJECTION: forcing a failure.
[ 2101.696886][T22835] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2101.696936][T22835] CPU: 1 UID: 0 PID: 22835 Comm: syz.3.3778 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2101.696966][T22835] Tainted: [L]=SOFTLOCKUP
[ 2101.696975][T22835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2101.696990][T22835] Call Trace:
[ 2101.697000][T22835]  <TASK>
[ 2101.697011][T22835]  dump_stack_lvl+0xe8/0x150
[ 2101.697054][T22835]  should_fail_ex+0x467/0x600
[ 2101.697092][T22835]  _copy_to_user+0x31/0xb0
[ 2101.697121][T22835]  simple_read_from_buffer+0xe1/0x170
[ 2101.697151][T22835]  proc_fail_nth_read+0x1be/0x230
[ 2101.697180][T22835]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2101.697208][T22835]  ? rw_verify_area+0x250/0x4d0
[ 2101.697237][T22835]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2101.697261][T22835]  vfs_read+0x219/0xa90
[ 2101.697296][T22835]  ? __pfx_vfs_read+0x10/0x10
[ 2101.697326][T22835]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2101.697364][T22835]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2101.697398][T22835]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2101.697433][T22835]  ? mutex_lock_nested+0x152/0x1d0
[ 2101.697460][T22835]  ? fdget_pos+0x252/0x320
[ 2101.697494][T22835]  ksys_read+0x156/0x270
[ 2101.697525][T22835]  ? __pfx_ksys_read+0x10/0x10
[ 2101.697561][T22835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2101.697588][T22835]  do_syscall_64+0x174/0x580
[ 2101.697622][T22835]  ? trace_irq_disable+0x3b/0x140
[ 2101.697660][T22835]  ? clear_bhb_loop+0x40/0x90
[ 2101.697689][T22835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2101.697714][T22835] RIP: 0033:0x7ff26391e68e
[ 2101.697734][T22835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2101.697753][T22835] RSP: 002b:00007ff261b94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2101.697778][T22835] RAX: ffffffffffffffda RBX: 00007ff261b956c0 RCX: 00007ff26391e68e
[ 2101.697803][T22835] RDX: 000000000000000f RSI: 00007ff261b950a0 RDI: 0000000000000005
[ 2101.697818][T22835] RBP: 00007ff261b95090 R08: 0000000000000000 R09: 0000000000000000
[ 2101.697834][T22835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2101.697847][T22835] R13: 00007ff263be6128 R14: 00007ff263be6090 R15: 00007ffcd135e638
[ 2101.697886][T22835]  </TASK>
[ 2102.194418][T22837] input input52: cannot allocate more than FF_MAX_EFFECTS effects
[ 2102.296769][T13653] bridge_slave_1: left allmulticast mode
[ 2102.296798][T13653] bridge_slave_1: left promiscuous mode
[ 2102.297040][T13653] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2102.499212][T13653] bridge_slave_0: left allmulticast mode
[ 2102.499250][T13653] bridge_slave_0: left promiscuous mode
[ 2102.499621][T13653] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2102.619767][T22849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3781'.
[ 2102.913457][T22857] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3785'.
[ 2103.124761][T11799] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 2103.274699][T11799] usb 2-1: Using ep0 maxpacket: 32
[ 2103.315182][T11799] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 2103.315214][T11799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2103.363800][T11799] usb 2-1: config 0 descriptor??
[ 2103.386725][T11799] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 2103.494670][ T5603] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 2103.644788][ T5603] usb 1-1: Using ep0 maxpacket: 32
[ 2103.648413][ T5603] usb 1-1: config 0 has no interfaces?
[ 2103.652120][ T5603] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[ 2103.652150][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2103.652629][ T5603] usb 1-1: Product: syz
[ 2103.652646][ T5603] usb 1-1: Manufacturer: syz
[ 2103.652662][ T5603] usb 1-1: SerialNumber: syz
[ 2103.745322][ T5603] usb 1-1: config 0 descriptor??
[ 2103.823468][T22872] FAULT_INJECTION: forcing a failure.
[ 2103.823468][T22872] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2103.823510][T22872] CPU: 0 UID: 0 PID: 22872 Comm: syz.3.3792 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2103.823541][T22872] Tainted: [L]=SOFTLOCKUP
[ 2103.823555][T22872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2103.823566][T22872] Call Trace:
[ 2103.823573][T22872]  <TASK>
[ 2103.823580][T22872]  dump_stack_lvl+0xe8/0x150
[ 2103.823639][T22872]  should_fail_ex+0x467/0x600
[ 2103.823680][T22872]  _copy_from_user+0x2d/0xb0
[ 2103.823705][T22872]  ___sys_sendmsg+0x1c6/0x360
[ 2103.823730][T22872]  ? __lock_acquire+0x683/0x2ce0
[ 2103.823758][T22872]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2103.823829][T22872]  ? __fget_files+0x2a/0x420
[ 2103.823854][T22872]  ? __fget_files+0x3a8/0x420
[ 2103.823886][T22872]  __x64_sys_sendmsg+0x1b7/0x290
[ 2103.823918][T22872]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2103.823950][T22872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2103.823990][T22872]  do_syscall_64+0x174/0x580
[ 2103.824028][T22872]  ? clear_bhb_loop+0x40/0x90
[ 2103.824055][T22872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2103.824077][T22872] RIP: 0033:0x7ff26395de59
[ 2103.824103][T22872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2103.824117][T22872] RSP: 002b:00007ff261bb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2103.824134][T22872] RAX: ffffffffffffffda RBX: 00007ff263be5fa0 RCX: 00007ff26395de59
[ 2103.824164][T22872] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[ 2103.824179][T22872] RBP: 00007ff261bb6090 R08: 0000000000000000 R09: 0000000000000000
[ 2103.824194][T22872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2103.824208][T22872] R13: 00007ff263be6038 R14: 00007ff263be5fa0 R15: 00007ffcd135e638
[ 2103.824243][T22872]  </TASK>
[ 2104.671820][T13653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2104.767479][T13653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2104.829628][T13653] bond0 (unregistering): Released all slaves
[ 2104.922974][T14441] usb 1-1: USB disconnect, device number 73
[ 2105.448628][T11799] gspca_vc032x: reg_r err -71
[ 2105.448650][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448661][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448671][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448681][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448691][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448701][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448711][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448720][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448729][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448739][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448758][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448768][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448778][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448789][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448799][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448809][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448818][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448828][T11799] gspca_vc032x: I2c Bus Busy Wait 00
[ 2105.448838][T11799] gspca_vc032x: Unknown sensor...
[ 2105.448932][T11799] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[ 2105.504702][T11799] usb 2-1: USB disconnect, device number 33
[ 2106.350611][T22603] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2106.350748][T22603] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2106.351030][T22603] bridge_slave_0: entered allmulticast mode
[ 2106.380667][T22603] bridge_slave_0: entered promiscuous mode
[ 2106.398801][T22603] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2106.399843][T22603] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2106.400142][T22603] bridge_slave_1: entered allmulticast mode
[ 2106.402988][T22603] bridge_slave_1: entered promiscuous mode
[ 2106.476449][T14441] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 2106.647188][T14441] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2106.647221][T14441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2106.647242][T14441] usb 1-1: Product: syz
[ 2106.647259][T14441] usb 1-1: Manufacturer: syz
[ 2106.647365][T14441] usb 1-1: SerialNumber: syz
[ 2106.724644][T22582] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 2106.763991][T14441] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2106.874630][T22582] usb 2-1: Using ep0 maxpacket: 8
[ 2106.876744][T22582] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2106.876772][T22582] usb 2-1: config 0 has no interface number 0
[ 2106.880395][T22582] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[ 2106.880425][T22582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2106.880447][T22582] usb 2-1: Product: syz
[ 2106.880463][T22582] usb 2-1: Manufacturer: syz
[ 2106.880478][T22582] usb 2-1: SerialNumber: syz
[ 2107.001112][T22582] usb 2-1: config 0 descriptor??
[ 2107.061575][T22582] usb 2-1: selecting invalid altsetting 2
[ 2107.061621][T22582] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22
[ 2107.160887][T17946] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2107.275190][T22582] usb 2-1: USB disconnect, device number 34
[ 2107.358087][T22603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2107.496092][T22603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2107.603024][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9
[ 2107.965977][T11799] usb 1-1: USB disconnect, device number 74
[ 2108.215072][T13653] hsr_slave_0: left promiscuous mode
[ 2108.254685][T13653] hsr_slave_1: left promiscuous mode
[ 2108.255947][T13653] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2108.255977][T13653] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2108.305881][T13653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2108.305912][T13653] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2108.324615][ T5602] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 2108.331212][T17946] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[ 2108.396681][T17946] ath9k_htc: Failed to initialize the device
[ 2108.446119][T22948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2108.446770][T11799] usb 1-1: ath9k_htc: USB layer deinitialized
[ 2108.447425][T22948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2108.521664][T13653] veth1_macvtap: left promiscuous mode
[ 2108.521791][T13653] veth0_macvtap: left promiscuous mode
[ 2108.522081][T13653] veth1_vlan: left promiscuous mode
[ 2108.522269][T13653] veth0_vlan: left promiscuous mode
[ 2108.667017][ T5602] usb 2-1: config 127 has an invalid interface number: 241 but max is 1
[ 2108.667050][ T5602] usb 2-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2108.667070][ T5602] usb 2-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2108.667090][ T5602] usb 2-1: config 127 contains an unexpected descriptor of type 0x2, skipping
[ 2108.667110][ T5602] usb 2-1: config 127 has an invalid interface number: 174 but max is 1
[ 2108.667133][ T5602] usb 2-1: config 127 has no interface number 0
[ 2108.667150][ T5602] usb 2-1: config 127 has no interface number 1
[ 2108.667210][ T5602] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 2108.667250][ T5602] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 2108.667279][ T5602] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 2108.667311][ T5602] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 2108.667340][ T5602] usb 2-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x6, skipping
[ 2108.667364][ T5602] usb 2-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[ 2108.667389][ T5602] usb 2-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[ 2108.667413][ T5602] usb 2-1: config 127 interface 241 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 32
[ 2108.667439][ T5602] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x4 has invalid wMaxPacketSize 0
[ 2108.667463][ T5602] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x2 has invalid maxpacket 1536, setting to 64
[ 2108.667490][ T5602] usb 2-1: config 127 interface 241 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[ 2108.667527][ T5602] usb 2-1: config 127 interface 174 altsetting 193 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 2108.667555][ T5602] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x5, skipping
[ 2108.667579][ T5602] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0xC, skipping
[ 2108.667603][ T5602] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x2, skipping
[ 2108.667627][ T5602] usb 2-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2108.667649][ T5602] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x6, skipping
[ 2108.667674][ T5602] usb 2-1: config 127 interface 174 altsetting 193 bulk endpoint 0xF has invalid maxpacket 32
[ 2108.667698][ T5602] usb 2-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2108.667721][ T5602] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x5, skipping
[ 2108.667745][ T5602] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x8, skipping
[ 2108.667769][ T5602] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x4, skipping
[ 2108.667792][ T5602] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x9, skipping
[ 2108.667816][ T5602] usb 2-1: config 127 interface 241 has no altsetting 0
[ 2108.667836][ T5602] usb 2-1: config 127 interface 174 has no altsetting 0
[ 2108.671174][ T5602] usb 2-1: Dual-Role OTG device on HNP port
[ 2108.671544][ T5602] usb 2-1: New USB device found, idVendor=07ca, idProduct=0825, bcdDevice=5f.f9
[ 2108.671573][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2108.671595][ T5602] usb 2-1: Product: syz
[ 2108.671611][ T5602] usb 2-1: Manufacturer: syz
[ 2108.671628][ T5602] usb 2-1: SerialNumber: syz
[ 2108.844642][T10457] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[ 2109.094244][T22940] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2109.103343][T10457] usb 4-1: device descriptor read/64, error -71
[ 2109.334715][T10457] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[ 2109.380831][ T5602] usb 2-1: USB disconnect, device number 35
[ 2109.464734][T10457] usb 4-1: device descriptor read/64, error -71
[ 2109.568355][T22952] FAULT_INJECTION: forcing a failure.
[ 2109.568355][T22952] name fail_futex, interval 1, probability 0, space 0, times 1
[ 2109.568402][T22952] CPU: 0 UID: 0 PID: 22952 Comm: syz.0.3817 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2109.568437][T22952] Tainted: [L]=SOFTLOCKUP
[ 2109.568446][T22952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2109.568462][T22952] Call Trace:
[ 2109.568472][T22952]  <TASK>
[ 2109.568485][T22952]  dump_stack_lvl+0xe8/0x150
[ 2109.568525][T22952]  should_fail_ex+0x467/0x600
[ 2109.568555][T22952]  get_futex_key+0x1b3/0x1580
[ 2109.568577][T22952]  ? perf_lock_task_context+0x79b/0x850
[ 2109.568603][T22952]  ? __pfx_get_futex_key+0x10/0x10
[ 2109.568622][T22952]  ? __lock_acquire+0x683/0x2ce0
[ 2109.568641][T22952]  ? __lock_acquire+0x683/0x2ce0
[ 2109.568664][T22952]  futex_wake+0x119/0x600
[ 2109.568696][T22952]  ? __pfx_futex_wake+0x10/0x10
[ 2109.568721][T22952]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2109.568761][T22952]  do_futex+0x458/0x4e0
[ 2109.568787][T22952]  ? __pfx_do_futex+0x10/0x10
[ 2109.568814][T22952]  ? __might_fault+0xaf/0x130
[ 2109.568835][T22952]  mm_release+0x101/0x290
[ 2109.568859][T22952]  exit_mm+0x50/0x240
[ 2109.568888][T22952]  do_exit+0x6cd/0x2360
[ 2109.568922][T22952]  ? __pfx_do_exit+0x10/0x10
[ 2109.568949][T22952]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2109.568972][T22952]  ? rt_spin_lock+0x1e0/0x400
[ 2109.569000][T22952]  ? rt_spin_unlock+0x157/0x200
[ 2109.569024][T22952]  do_group_exit+0x22d/0x2f0
[ 2109.569051][T22952]  ? rt_spin_unlock+0x163/0x200
[ 2109.569075][T22952]  get_signal+0x121b/0x12c0
[ 2109.569114][T22952]  arch_do_signal_or_restart+0xbb/0x860
[ 2109.569142][T22952]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 2109.569173][T22952]  ? ksys_write+0x248/0x270
[ 2109.569211][T22952]  exit_to_user_mode_loop+0x104/0x730
[ 2109.569228][T22952]  ? rcu_is_watching+0x15/0xb0
[ 2109.569251][T22952]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2109.569274][T22952]  do_syscall_64+0x353/0x580
[ 2109.569302][T22952]  ? trace_irq_disable+0x3b/0x140
[ 2109.569331][T22952]  ? clear_bhb_loop+0x40/0x90
[ 2109.569354][T22952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2109.569373][T22952] RIP: 0033:0x7f2a92d8de59
[ 2109.569389][T22952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2109.569405][T22952] RSP: 002b:00007f2a90fe6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 2109.569425][T22952] RAX: 0000000007fffffe RBX: 00007f2a93015fa0 RCX: 00007f2a92d8de59
[ 2109.569439][T22952] RDX: 0000000000000005 RSI: 0000000007fffffe RDI: 0000000000000003
[ 2109.569450][T22952] RBP: 00007f2a90fe6090 R08: 0000000000000000 R09: 0000000000000000
[ 2109.569461][T22952] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001
[ 2109.569473][T22952] R13: 00007f2a93016038 R14: 00007f2a93015fa0 R15: 00007ffe11a38ea8
[ 2109.569501][T22952]  </TASK>
[ 2109.614669][T10457] usb usb4-port1: attempt power cycle
[ 2110.097920][T10457] usb 4-1: new full-speed USB device number 69 using dummy_hcd
[ 2110.168239][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3818'.
[ 2110.168637][T10457] usb 4-1: device descriptor read/8, error -71
[ 2111.592846][T13653] team0 (unregistering): Port device team_slave_1 removed
[ 2113.433739][T13653] team0 (unregistering): Port device team_slave_0 removed
[ 2113.875188][T22603] team0: Port device team_slave_0 added
[ 2114.081496][T22603] team0: Port device team_slave_1 added
[ 2114.289755][T22603] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2114.289773][T22603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2114.289796][T22603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2114.342812][T22603] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2114.342832][T22603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2114.342863][T22603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2114.426368][T17946] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 2114.514710][T10457] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 2114.676211][T17946] usb 1-1: Using ep0 maxpacket: 32
[ 2114.706298][T10457] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2114.706333][T10457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2114.706355][T10457] usb 2-1: Product: syz
[ 2114.706372][T10457] usb 2-1: Manufacturer: syz
[ 2114.706388][T10457] usb 2-1: SerialNumber: syz
[ 2114.772729][T10457] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2114.778459][T17946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2114.778515][T17946] usb 1-1: config 0 has no interfaces?
[ 2114.805376][T17946] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[ 2114.805408][T17946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[ 2114.805431][T17946] usb 1-1: Product: syz
[ 2114.805447][T17946] usb 1-1: Manufacturer: syz
[ 2114.805463][T17946] usb 1-1: SerialNumber: syz
[ 2114.886773][ T5602] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2114.959172][T17946] usb 1-1: config 0 descriptor??
[ 2115.207858][T22603] hsr_slave_0: entered promiscuous mode
[ 2115.212661][T22603] hsr_slave_1: entered promiscuous mode
[ 2115.221491][T22603] debugfs: 'hsr0' already exists in 'hsr'
[ 2115.221523][T22603] Cannot create hsr debugfs directory
[ 2115.515463][T17946] usb 1-1: USB disconnect, device number 75
[ 2115.768548][T22582] usb 2-1: USB disconnect, device number 36
[ 2116.016348][ T5602] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2116.105639][ T5602] ath9k_htc: Failed to initialize the device
[ 2116.106592][T22582] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2116.611934][T22997] overlayfs: invalid origin (000000790066696c6530000000000000000000000000)
[ 2116.730047][T23003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2116.750075][T23003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2116.955532][ T5835] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 2117.419459][T23019] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 2118.471835][T23033] 9p: Bad value for 'rfdno'
[ 2118.773381][T23040] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcl818)
[ 2119.022437][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10
[ 2119.149796][T11799] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 2119.297294][T11799] usb 2-1: Using ep0 maxpacket: 16
[ 2119.302550][T11799] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2119.302579][T11799] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2119.317750][T11799] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2119.317781][T11799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2119.317802][T11799] usb 2-1: Product: syz
[ 2119.317817][T11799] usb 2-1: Manufacturer: syz
[ 2119.317833][T11799] usb 2-1: SerialNumber: syz
[ 2119.389980][T11799] usb 2-1: 0:2 : does not exist
[ 2121.115429][   T37] kauditd_printk_skb: 22 callbacks suppressed
[ 2121.115451][   T37] audit: type=1326 audit(1784071589.468:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23053 comm="syz.2.3851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee864de59 code=0x7ffc0000
[ 2121.115571][   T37] audit: type=1326 audit(1784071589.468:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23053 comm="syz.2.3851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8ee864de59 code=0x7ffc0000
[ 2121.166496][   T37] audit: type=1326 audit(1784071589.528:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23053 comm="syz.2.3851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee864de59 code=0x7ffc0000
[ 2121.210082][   T37] audit: type=1326 audit(1784071589.568:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23053 comm="syz.2.3851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee864de59 code=0x7ffc0000
[ 2121.210380][   T37] audit: type=1326 audit(1784071589.568:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23053 comm="syz.2.3851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ee864de59 code=0x7ffc0000
[ 2121.210975][   T37] audit: type=1326 audit(1784071589.568:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23053 comm="syz.2.3851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee864de59 code=0x7ffc0000
[ 2121.211026][   T37] audit: type=1326 audit(1784071589.568:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23053 comm="syz.2.3851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee864de59 code=0x7ffc0000
[ 2121.324645][   T37] audit: type=1326 audit(1784071589.528:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23053 comm="syz.2.3851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee864de59 code=0x7ffc0000
[ 2121.324716][   T37] audit: type=1326 audit(1784071589.678:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23053 comm="syz.2.3851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee864de59 code=0x7ffc0000
[ 2121.324827][   T37] audit: type=1326 audit(1784071589.688:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23053 comm="syz.2.3851" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8ee864de59 code=0x7ffc0000
[ 2121.910847][T11799] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 2122.148918][T11799] usb 2-1: USB disconnect, device number 37
[ 2122.319911][T23089] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2123.739174][T22665] udevd[22665]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2124.147726][T23105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3864'.
[ 2125.156390][T23109] FAULT_INJECTION: forcing a failure.
[ 2125.156390][T23109] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2125.156431][T23109] CPU: 1 UID: 0 PID: 23109 Comm: syz.3.3866 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2125.156462][T23109] Tainted: [L]=SOFTLOCKUP
[ 2125.156471][T23109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2125.156486][T23109] Call Trace:
[ 2125.156495][T23109]  <TASK>
[ 2125.156505][T23109]  dump_stack_lvl+0xe8/0x150
[ 2125.156547][T23109]  should_fail_ex+0x467/0x600
[ 2125.156587][T23109]  _copy_from_user+0x2d/0xb0
[ 2125.156613][T23109]  ___sys_sendmsg+0x1c6/0x360
[ 2125.156639][T23109]  ? __lock_acquire+0x683/0x2ce0
[ 2125.156668][T23109]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2125.156732][T23109]  ? __fget_files+0x2a/0x420
[ 2125.156755][T23109]  ? __fget_files+0x3a8/0x420
[ 2125.156789][T23109]  __x64_sys_sendmsg+0x1b7/0x290
[ 2125.156817][T23109]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2125.156863][T23109]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2125.156890][T23109]  do_syscall_64+0x174/0x580
[ 2125.156925][T23109]  ? trace_irq_disable+0x3b/0x140
[ 2125.156962][T23109]  ? clear_bhb_loop+0x40/0x90
[ 2125.156991][T23109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2125.157015][T23109] RIP: 0033:0x7ff26395de59
[ 2125.157045][T23109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2125.157067][T23109] RSP: 002b:00007ff261bb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2125.157091][T23109] RAX: ffffffffffffffda RBX: 00007ff263be5fa0 RCX: 00007ff26395de59
[ 2125.157109][T23109] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003
[ 2125.157125][T23109] RBP: 00007ff261bb6090 R08: 0000000000000000 R09: 0000000000000000
[ 2125.157140][T23109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2125.157155][T23109] R13: 00007ff263be6038 R14: 00007ff263be5fa0 R15: 00007ffcd135e638
[ 2125.157192][T23109]  </TASK>
[ 2125.731524][T23104] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3864'.
[ 2125.735516][T23107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2125.737526][T23107] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2125.738932][T23107] bridge0: entered allmulticast mode
[ 2127.578177][T23146] FAULT_INJECTION: forcing a failure.
[ 2127.578177][T23146] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2127.586405][T23146] CPU: 0 UID: 0 PID: 23146 Comm: syz.3.3879 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2127.586442][T23146] Tainted: [L]=SOFTLOCKUP
[ 2127.586451][T23146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2127.586465][T23146] Call Trace:
[ 2127.586475][T23146]  <TASK>
[ 2127.586484][T23146]  dump_stack_lvl+0xe8/0x150
[ 2127.586526][T23146]  should_fail_ex+0x467/0x600
[ 2127.586565][T23146]  copy_fpstate_to_sigframe+0xac0/0xd80
[ 2127.586610][T23146]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[ 2127.586647][T23146]  ? rt_spin_lock+0x1e0/0x400
[ 2127.586677][T23146]  ? rt_spin_lock+0x1e0/0x400
[ 2127.586708][T23146]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2127.586743][T23146]  ? fpu__alloc_mathframe+0xac/0x130
[ 2127.586785][T23146]  get_sigframe+0x603/0x830
[ 2127.586826][T23146]  ? __pfx_get_sigframe+0x10/0x10
[ 2127.586858][T23146]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2127.586886][T23146]  ? rt_spin_lock+0x1e0/0x400
[ 2127.586921][T23146]  x64_setup_rt_frame+0x164/0xc50
[ 2127.586949][T23146]  ? rt_spin_unlock+0x157/0x200
[ 2127.586981][T23146]  ? rt_spin_unlock+0x163/0x200
[ 2127.587012][T23146]  ? get_signal+0x10de/0x12c0
[ 2127.587048][T23146]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[ 2127.587077][T23146]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2127.587122][T23146]  arch_do_signal_or_restart+0x45b/0x860
[ 2127.587157][T23146]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 2127.587198][T23146]  ? ksys_write+0x248/0x270
[ 2127.587236][T23146]  exit_to_user_mode_loop+0x104/0x730
[ 2127.587259][T23146]  ? rcu_is_watching+0x15/0xb0
[ 2127.587288][T23146]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2127.587314][T23146]  do_syscall_64+0x353/0x580
[ 2127.587348][T23146]  ? trace_irq_disable+0x3b/0x140
[ 2127.587385][T23146]  ? clear_bhb_loop+0x40/0x90
[ 2127.587413][T23146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2127.587436][T23146] RIP: 0033:0x7ff26391e68e
[ 2127.587457][T23146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2127.587478][T23146] RSP: 002b:00007ff261bb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2127.587502][T23146] RAX: 0000000000000001 RBX: 00007ff261bb66c0 RCX: 00007ff26391e68e
[ 2127.587518][T23146] RDX: 0000000000000001 RSI: 00007ff261bb6090 RDI: 0000000000000006
[ 2127.587532][T23146] RBP: 00007ff261bb6090 R08: 0000000000000000 R09: 0000000000000000
[ 2127.587548][T23146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2127.587562][T23146] R13: 00007ff263be6038 R14: 00007ff263be5fa0 R15: 00007ffcd135e638
[ 2127.587598][T23146]  </TASK>
[ 2130.532242][T23154] 9p: Could not find request transport: un���
[ 2130.882116][   T37] kauditd_printk_skb: 88 callbacks suppressed
[ 2130.882172][   T37] audit: type=1804 audit(1784071599.138:2476): pid=23158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.3882" name="/newroot/26/file0" dev="tmpfs" ino=159 res=1 errno=0
[ 2134.066985][T17663] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 2134.331861][T17663] usb 1-1: config 127 has an invalid interface number: 241 but max is 1
[ 2134.331891][T17663] usb 1-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2134.331912][T17663] usb 1-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2134.331930][T17663] usb 1-1: config 127 contains an unexpected descriptor of type 0x2, skipping
[ 2134.331955][T17663] usb 1-1: config 127 has an invalid interface number: 174 but max is 1
[ 2134.331972][T17663] usb 1-1: config 127 has no interface number 0
[ 2134.331985][T17663] usb 1-1: config 127 has no interface number 1
[ 2134.332025][T17663] usb 1-1: config 127 interface 241 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 2134.332046][T17663] usb 1-1: config 127 interface 241 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 2134.332067][T17663] usb 1-1: config 127 interface 241 altsetting 6 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 2134.332089][T17663] usb 1-1: config 127 interface 241 altsetting 6 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 2134.332115][T17663] usb 1-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x6, skipping
[ 2134.332132][T17663] usb 1-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[ 2134.332148][T17663] usb 1-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[ 2134.332165][T17663] usb 1-1: config 127 interface 241 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 32
[ 2134.332184][T17663] usb 1-1: config 127 interface 241 altsetting 6 endpoint 0x4 has invalid wMaxPacketSize 0
[ 2134.332200][T17663] usb 1-1: config 127 interface 241 altsetting 6 endpoint 0x2 has invalid maxpacket 1536, setting to 64
[ 2134.332220][T17663] usb 1-1: config 127 interface 241 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[ 2134.332245][T17663] usb 1-1: config 127 interface 174 altsetting 193 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 2134.332286][T17663] usb 1-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x5, skipping
[ 2134.332311][T17663] usb 1-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0xC, skipping
[ 2134.332335][T17663] usb 1-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x2, skipping
[ 2134.332360][T17663] usb 1-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2134.332383][T17663] usb 1-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x6, skipping
[ 2134.332413][T17663] usb 1-1: config 127 interface 174 altsetting 193 bulk endpoint 0xF has invalid maxpacket 32
[ 2134.332430][T17663] usb 1-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2134.332446][T17663] usb 1-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x5, skipping
[ 2134.332474][T17663] usb 1-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x8, skipping
[ 2134.332492][T17663] usb 1-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x4, skipping
[ 2134.332509][T17663] usb 1-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x9, skipping
[ 2134.332525][T17663] usb 1-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2134.332542][T17663] usb 1-1: config 127 interface 174 altsetting 193 endpoint 0xA has invalid maxpacket 1023, setting to 64
[ 2134.332562][T17663] usb 1-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x2, skipping
[ 2134.332579][T17663] usb 1-1: config 127 interface 241 has no altsetting 0
[ 2134.332592][T17663] usb 1-1: config 127 interface 174 has no altsetting 0
[ 2134.504818][T21577] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 2134.556373][T17663] usb 1-1: Dual-Role OTG device on HNP port
[ 2134.561067][T17663] usb 1-1: New USB device found, idVendor=07ca, idProduct=0825, bcdDevice=5f.f9
[ 2134.561113][T17663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2134.561134][T17663] usb 1-1: Product: syz
[ 2134.561150][T17663] usb 1-1: Manufacturer: syz
[ 2134.561166][T17663] usb 1-1: SerialNumber: syz
[ 2134.669687][T21577] usb 2-1: Using ep0 maxpacket: 32
[ 2134.730755][T21577] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 2134.731546][T21577] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 2134.731586][T21577] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2134.731615][T21577] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 2134.817966][T21577] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 2134.817996][T21577] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2134.818019][T21577] usb 2-1: Product: syz
[ 2134.818033][T21577] usb 2-1: Manufacturer: syz
[ 2134.818047][T21577] usb 2-1: SerialNumber: syz
[ 2134.885609][T23165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2134.954309][    C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 2135.427093][T21577] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input53
[ 2135.501319][T17663] usb 1-1: USB disconnect, device number 76
[ 2135.758466][T21577] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 2135.758490][T21577]  (id 0x00)
[ 2136.054067][T23194] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3888'.
[ 2136.074608][T23194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3888'.
[ 2136.876662][T21577] rc_core: IR keymap rc-imon-pad not found
[ 2136.876687][T21577] Registered IR keymap rc-empty
[ 2136.876881][T21577] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 2136.876902][T21577] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 2137.124195][T21577] imon:send_packet: packet tx failed (-71)
[ 2137.134682][T21577] imon 2-1:155.0: remote input dev register failed
[ 2137.134871][T21577] imon 2-1:155.0: imon_init_intf0: rc device setup failed
[ 2138.488839][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2138.548687][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2138.551953][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2138.566117][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2138.592033][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2138.980817][ T5602] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 2139.133512][T23224] FAULT_INJECTION: forcing a failure.
[ 2139.133512][T23224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2139.133578][T23224] CPU: 0 UID: 0 PID: 23224 Comm: syz.1.3897 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2139.133608][T23224] Tainted: [L]=SOFTLOCKUP
[ 2139.133617][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2139.133630][T23224] Call Trace:
[ 2139.133639][T23224]  <TASK>
[ 2139.133649][T23224]  dump_stack_lvl+0xe8/0x150
[ 2139.133691][T23224]  should_fail_ex+0x467/0x600
[ 2139.133729][T23224]  _copy_from_user+0x2d/0xb0
[ 2139.133756][T23224]  ___sys_sendmsg+0x1c6/0x360
[ 2139.133785][T23224]  ? __lock_acquire+0x683/0x2ce0
[ 2139.133814][T23224]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2139.133878][T23224]  ? __fget_files+0x2a/0x420
[ 2139.133901][T23224]  ? __fget_files+0x3a8/0x420
[ 2139.133934][T23224]  __x64_sys_sendmsg+0x1b7/0x290
[ 2139.133963][T23224]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2139.134008][T23224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2139.134034][T23224]  do_syscall_64+0x174/0x580
[ 2139.134069][T23224]  ? trace_irq_disable+0x3b/0x140
[ 2139.134104][T23224]  ? clear_bhb_loop+0x40/0x90
[ 2139.134132][T23224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2139.134156][T23224] RIP: 0033:0x7fb92f9ede59
[ 2139.134176][T23224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2139.134198][T23224] RSP: 002b:00007fb92dc46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2139.134223][T23224] RAX: ffffffffffffffda RBX: 00007fb92fc75fa0 RCX: 00007fb92f9ede59
[ 2139.134241][T23224] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003
[ 2139.134260][T23224] RBP: 00007fb92dc46090 R08: 0000000000000000 R09: 0000000000000000
[ 2139.134274][T23224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2139.134286][T23224] R13: 00007fb92fc76038 R14: 00007fb92fc75fa0 R15: 00007ffe8413e138
[ 2139.134323][T23224]  </TASK>
[ 2139.228098][T23218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3895'.
[ 2139.257391][ T5602] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2139.257423][ T5602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2139.257445][ T5602] usb 3-1: Product: syz
[ 2139.257460][ T5602] usb 3-1: Manufacturer: syz
[ 2139.257476][ T5602] usb 3-1: SerialNumber: syz
[ 2139.428466][ T5602] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2139.532540][T10457] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2141.336174][T21577] imon 2-1:155.0: unable to initialize intf0, err 0
[ 2141.336218][T21577] imon:imon_probe: failed to initialize context!
[ 2141.336233][T21577] imon 2-1:155.0: unable to register, err -19
[ 2142.520565][T10457] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2142.594707][ T5599] Bluetooth: hci0: command tx timeout
[ 2142.595178][ T5599] Bluetooth: hci3: command 0x0406 tx timeout
[ 2142.713286][T21577] usb 2-1: USB disconnect, device number 38
[ 2143.065648][T10457] ath9k_htc: Failed to initialize the device
[ 2143.177025][T10457] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2143.216877][T23240] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3900'.
[ 2143.217323][T23244] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2143.218095][T23244] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2143.219221][T23244] bridge0: entered allmulticast mode
[ 2144.463448][ T5835] usb 3-1: USB disconnect, device number 28
[ 2144.770292][T20206] Bluetooth: hci0: command tx timeout
[ 2146.875194][T23246] Bluetooth: hci0: command tx timeout
[ 2147.501341][T23246] Bluetooth: hci4: command 0x0406 tx timeout
[ 2148.147494][T23297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3915'.
[ 2148.862901][T23296] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3915'.
[ 2148.863288][T23297] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2148.863643][T23297] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2148.864382][T23297] bridge0: entered allmulticast mode
[ 2149.023468][T23305] FAULT_INJECTION: forcing a failure.
[ 2149.023468][T23305] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2149.023508][T23305] CPU: 1 UID: 0 PID: 23305 Comm: syz.3.3919 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2149.023540][T23305] Tainted: [L]=SOFTLOCKUP
[ 2149.023548][T23305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2149.023561][T23305] Call Trace:
[ 2149.023570][T23305]  <TASK>
[ 2149.023579][T23305]  dump_stack_lvl+0xe8/0x150
[ 2149.023621][T23305]  should_fail_ex+0x467/0x600
[ 2149.023660][T23305]  _copy_from_user+0x2d/0xb0
[ 2149.023686][T23305]  __sys_bpf+0x2e7/0xd90
[ 2149.023717][T23305]  ? __pfx___sys_bpf+0x10/0x10
[ 2149.023743][T23305]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2149.023792][T23305]  ? rt_mutex_slowunlock+0x219/0x460
[ 2149.023841][T23305]  ? ksys_write+0x248/0x270
[ 2149.023872][T23305]  ? __pfx_ksys_write+0x10/0x10
[ 2149.023905][T23305]  __x64_sys_bpf+0xba/0xd0
[ 2149.023940][T23305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2149.023965][T23305]  do_syscall_64+0x174/0x580
[ 2149.024004][T23305]  ? trace_irq_disable+0x3b/0x140
[ 2149.024041][T23305]  ? clear_bhb_loop+0x40/0x90
[ 2149.024077][T23305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2149.024101][T23305] RIP: 0033:0x7ff26395de59
[ 2149.024123][T23305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2149.024143][T23305] RSP: 002b:00007ff261bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2149.024168][T23305] RAX: ffffffffffffffda RBX: 00007ff263be5fa0 RCX: 00007ff26395de59
[ 2149.024185][T23305] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000002
[ 2149.024201][T23305] RBP: 00007ff261bb6090 R08: 0000000000000000 R09: 0000000000000000
[ 2149.024216][T23305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2149.024230][T23305] R13: 00007ff263be6038 R14: 00007ff263be5fa0 R15: 00007ffcd135e638
[ 2149.024267][T23305]  </TASK>
[ 2149.034726][T20206] Bluetooth: hci0: command tx timeout
[ 2151.942229][T23346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3929'.
[ 2152.749386][T23345] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3929'.
[ 2154.280465][T23367] FAULT_INJECTION: forcing a failure.
[ 2154.280465][T23367] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2154.280504][T23367] CPU: 0 UID: 0 PID: 23367 Comm: syz.0.3935 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2154.280532][T23367] Tainted: [L]=SOFTLOCKUP
[ 2154.280540][T23367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2154.280553][T23367] Call Trace:
[ 2154.280561][T23367]  <TASK>
[ 2154.280571][T23367]  dump_stack_lvl+0xe8/0x150
[ 2154.280609][T23367]  should_fail_ex+0x467/0x600
[ 2154.280646][T23367]  _copy_from_user+0x2d/0xb0
[ 2154.280670][T23367]  ___sys_sendmsg+0x1c6/0x360
[ 2154.280694][T23367]  ? __lock_acquire+0x683/0x2ce0
[ 2154.280722][T23367]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2154.280777][T23367]  ? __fget_files+0x2a/0x420
[ 2154.280797][T23367]  ? __fget_files+0x3a8/0x420
[ 2154.280828][T23367]  __x64_sys_sendmsg+0x1b7/0x290
[ 2154.280854][T23367]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2154.280895][T23367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2154.280920][T23367]  do_syscall_64+0x174/0x580
[ 2154.280952][T23367]  ? trace_irq_disable+0x3b/0x140
[ 2154.280988][T23367]  ? clear_bhb_loop+0x40/0x90
[ 2154.281027][T23367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2154.281049][T23367] RIP: 0033:0x7f2a92d8de59
[ 2154.281071][T23367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2154.281091][T23367] RSP: 002b:00007f2a90fe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2154.281115][T23367] RAX: ffffffffffffffda RBX: 00007f2a93015fa0 RCX: 00007f2a92d8de59
[ 2154.281132][T23367] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006
[ 2154.281147][T23367] RBP: 00007f2a90fe6090 R08: 0000000000000000 R09: 0000000000000000
[ 2154.281199][T23367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2154.281214][T23367] R13: 00007f2a93016038 R14: 00007f2a93015fa0 R15: 00007ffe11a38ea8
[ 2154.281250][T23367]  </TASK>
[ 2156.309918][T23391] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3940'.
[ 2157.627393][ T5835] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 2157.649903][T23403] FAULT_INJECTION: forcing a failure.
[ 2157.649903][T23403] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2157.649943][T23403] CPU: 0 UID: 0 PID: 23403 Comm: syz.0.3946 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2157.649973][T23403] Tainted: [L]=SOFTLOCKUP
[ 2157.649982][T23403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2157.649996][T23403] Call Trace:
[ 2157.650005][T23403]  <TASK>
[ 2157.650015][T23403]  dump_stack_lvl+0xe8/0x150
[ 2157.650057][T23403]  should_fail_ex+0x467/0x600
[ 2157.650097][T23403]  _copy_from_user+0x2d/0xb0
[ 2157.650124][T23403]  ___sys_sendmsg+0x1c6/0x360
[ 2157.650159][T23403]  ? __lock_acquire+0x683/0x2ce0
[ 2157.650186][T23403]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2157.650252][T23403]  ? __fget_files+0x2a/0x420
[ 2157.650274][T23403]  ? __fget_files+0x3a8/0x420
[ 2157.650307][T23403]  __x64_sys_sendmsg+0x1b7/0x290
[ 2157.650334][T23403]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2157.650375][T23403]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2157.650401][T23403]  do_syscall_64+0x174/0x580
[ 2157.650434][T23403]  ? trace_irq_disable+0x3b/0x140
[ 2157.650470][T23403]  ? clear_bhb_loop+0x40/0x90
[ 2157.650498][T23403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2157.650523][T23403] RIP: 0033:0x7f2a92d8de59
[ 2157.650543][T23403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2157.650563][T23403] RSP: 002b:00007f2a90fe6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2157.650587][T23403] RAX: ffffffffffffffda RBX: 00007f2a93015fa0 RCX: 00007f2a92d8de59
[ 2157.650604][T23403] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[ 2157.650619][T23403] RBP: 00007f2a90fe6090 R08: 0000000000000000 R09: 0000000000000000
[ 2157.650633][T23403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2157.650646][T23403] R13: 00007f2a93016038 R14: 00007f2a93015fa0 R15: 00007ffe11a38ea8
[ 2157.650681][T23403]  </TASK>
[ 2157.822717][ T5835] usb 2-1: config 127 has an invalid interface number: 241 but max is 1
[ 2157.822808][ T5835] usb 2-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2157.822862][ T5835] usb 2-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2157.822916][ T5835] usb 2-1: config 127 contains an unexpected descriptor of type 0x2, skipping
[ 2157.822969][ T5835] usb 2-1: config 127 has an invalid interface number: 174 but max is 1
[ 2157.823022][ T5835] usb 2-1: config 127 has no interface number 0
[ 2157.823072][ T5835] usb 2-1: config 127 has no interface number 1
[ 2157.823244][ T5835] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 2157.823558][ T5835] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 2157.823647][ T5835] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 2157.823747][ T5835] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 2157.823843][ T5835] usb 2-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x6, skipping
[ 2157.823907][ T5835] usb 2-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[ 2157.823969][ T5835] usb 2-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[ 2157.824032][ T5835] usb 2-1: config 127 interface 241 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 32
[ 2157.824105][ T5835] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x4 has invalid wMaxPacketSize 0
[ 2157.824167][ T5835] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x2 has invalid maxpacket 1536, setting to 64
[ 2157.824252][ T5835] usb 2-1: config 127 interface 241 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[ 2157.849598][ T5835] usb 2-1: config 127 interface 174 altsetting 193 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 2157.849694][ T5835] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x5, skipping
[ 2157.849758][ T5835] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0xC, skipping
[ 2157.849822][ T5835] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x2, skipping
[ 2157.849893][ T5835] usb 2-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2157.849954][ T5835] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x6, skipping
[ 2157.850018][ T5835] usb 2-1: config 127 interface 174 altsetting 193 bulk endpoint 0xF has invalid maxpacket 32
[ 2157.851364][ T5835] usb 2-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2157.851392][ T5835] usb 2-1: config 127 interface 241 has no altsetting 0
[ 2157.851413][ T5835] usb 2-1: config 127 interface 174 has no altsetting 0
[ 2157.944910][ T5835] usb 2-1: Dual-Role OTG device on HNP port
[ 2157.974101][ T5835] usb 2-1: New USB device found, idVendor=07ca, idProduct=0825, bcdDevice=5f.f9
[ 2157.974206][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2157.974601][ T5835] usb 2-1: Product: syz
[ 2157.974619][ T5835] usb 2-1: Manufacturer: syz
[ 2157.974659][ T5835] usb 2-1: SerialNumber: syz
[ 2158.242040][T23395] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2158.696729][ T5835] usb 2-1: USB disconnect, device number 39
[ 2160.180629][T23430] FAULT_INJECTION: forcing a failure.
[ 2160.180629][T23430] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2160.180670][T23430] CPU: 1 UID: 0 PID: 23430 Comm: syz.3.3954 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2160.180699][T23430] Tainted: [L]=SOFTLOCKUP
[ 2160.180708][T23430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2160.180723][T23430] Call Trace:
[ 2160.180732][T23430]  <TASK>
[ 2160.180742][T23430]  dump_stack_lvl+0xe8/0x150
[ 2160.180783][T23430]  should_fail_ex+0x467/0x600
[ 2160.180821][T23430]  _copy_from_user+0x2d/0xb0
[ 2160.180847][T23430]  ___sys_sendmsg+0x1c6/0x360
[ 2160.180871][T23430]  ? __lock_acquire+0x683/0x2ce0
[ 2160.180899][T23430]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2160.180961][T23430]  ? __fget_files+0x2a/0x420
[ 2160.180983][T23430]  ? __fget_files+0x3a8/0x420
[ 2160.181019][T23430]  __x64_sys_sendmsg+0x1b7/0x290
[ 2160.181047][T23430]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2160.181090][T23430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2160.181115][T23430]  do_syscall_64+0x174/0x580
[ 2160.181148][T23430]  ? trace_irq_disable+0x3b/0x140
[ 2160.181182][T23430]  ? clear_bhb_loop+0x40/0x90
[ 2160.181209][T23430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2160.181231][T23430] RIP: 0033:0x7ff26395de59
[ 2160.181252][T23430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2160.181271][T23430] RSP: 002b:00007ff261bb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2160.181295][T23430] RAX: ffffffffffffffda RBX: 00007ff263be5fa0 RCX: 00007ff26395de59
[ 2160.181313][T23430] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003
[ 2160.181329][T23430] RBP: 00007ff261bb6090 R08: 0000000000000000 R09: 0000000000000000
[ 2160.181344][T23430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2160.181359][T23430] R13: 00007ff263be6038 R14: 00007ff263be5fa0 R15: 00007ffcd135e638
[ 2160.181392][T23430]  </TASK>
[ 2160.247186][T23427] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1'
[ 2160.574319][T23435] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3953'.
[ 2160.581285][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[ 2161.869116][T23450] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3956'.
[ 2163.490956][T23470] FAULT_INJECTION: forcing a failure.
[ 2163.490956][T23470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2163.490997][T23470] CPU: 1 UID: 0 PID: 23470 Comm: syz.1.3964 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2163.491027][T23470] Tainted: [L]=SOFTLOCKUP
[ 2163.491036][T23470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2163.491050][T23470] Call Trace:
[ 2163.491060][T23470]  <TASK>
[ 2163.491070][T23470]  dump_stack_lvl+0xe8/0x150
[ 2163.491119][T23470]  should_fail_ex+0x467/0x600
[ 2163.491158][T23470]  _copy_from_user+0x2d/0xb0
[ 2163.491186][T23470]  ___sys_sendmsg+0x1c6/0x360
[ 2163.491210][T23470]  ? __lock_acquire+0x683/0x2ce0
[ 2163.491238][T23470]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2163.491300][T23470]  ? __fget_files+0x2a/0x420
[ 2163.491323][T23470]  ? __fget_files+0x3a8/0x420
[ 2163.491356][T23470]  __x64_sys_sendmsg+0x1b7/0x290
[ 2163.491382][T23470]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2163.491427][T23470]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2163.491452][T23470]  do_syscall_64+0x174/0x580
[ 2163.491487][T23470]  ? trace_irq_disable+0x3b/0x140
[ 2163.491521][T23470]  ? clear_bhb_loop+0x40/0x90
[ 2163.491549][T23470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2163.491573][T23470] RIP: 0033:0x7fb92f9ede59
[ 2163.491594][T23470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2163.491612][T23470] RSP: 002b:00007fb92dc46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2163.491636][T23470] RAX: ffffffffffffffda RBX: 00007fb92fc75fa0 RCX: 00007fb92f9ede59
[ 2163.491653][T23470] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 2163.491668][T23470] RBP: 00007fb92dc46090 R08: 0000000000000000 R09: 0000000000000000
[ 2163.491681][T23470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2163.491695][T23470] R13: 00007fb92fc76038 R14: 00007fb92fc75fa0 R15: 00007ffe8413e138
[ 2163.491731][T23470]  </TASK>
[ 2163.562519][ T5835] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 2163.765812][ T5835] usb 1-1: device descriptor read/64, error -71
[ 2164.004615][ T5835] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 2164.118472][T23479] FAULT_INJECTION: forcing a failure.
[ 2164.118472][T23479] name failslab, interval 1, probability 0, space 0, times 0
[ 2164.118521][T23479] CPU: 1 UID: 0 PID: 23479 Comm: syz.2.3968 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2164.118551][T23479] Tainted: [L]=SOFTLOCKUP
[ 2164.118560][T23479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2164.118574][T23479] Call Trace:
[ 2164.118583][T23479]  <TASK>
[ 2164.118593][T23479]  dump_stack_lvl+0xe8/0x150
[ 2164.118635][T23479]  should_fail_ex+0x467/0x600
[ 2164.118675][T23479]  should_failslab+0xa8/0x100
[ 2164.118704][T23479]  __kmalloc_noprof+0xfe/0x780
[ 2164.118725][T23479]  ? rcu_is_watching+0x15/0xb0
[ 2164.118754][T23479]  ? tomoyo_realpath_from_path+0xef/0x640
[ 2164.118781][T23479]  ? tomoyo_realpath_from_path+0xef/0x640
[ 2164.118818][T23479]  tomoyo_realpath_from_path+0xef/0x640
[ 2164.118862][T23479]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 2164.118900][T23479]  tomoyo_path_number_perm+0x246/0x5f0
[ 2164.118941][T23479]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2164.118977][T23479]  ? __lock_acquire+0x683/0x2ce0
[ 2164.119017][T23479]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2164.119051][T23479]  ? hook_file_ioctl+0x1f3/0x600
[ 2164.119081][T23479]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2164.119137][T23479]  ? __fget_files+0x2a/0x420
[ 2164.119163][T23479]  ? __fget_files+0x2a/0x420
[ 2164.119184][T23479]  ? __fget_files+0x3a8/0x420
[ 2164.119206][T23479]  ? __fget_files+0x2a/0x420
[ 2164.119233][T23479]  security_file_ioctl+0xc3/0x2a0
[ 2164.119260][T23479]  __se_sys_ioctl+0x47/0x170
[ 2164.119289][T23479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2164.119315][T23479]  do_syscall_64+0x174/0x580
[ 2164.119348][T23479]  ? trace_irq_disable+0x3b/0x140
[ 2164.119385][T23479]  ? clear_bhb_loop+0x40/0x90
[ 2164.119413][T23479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2164.119436][T23479] RIP: 0033:0x7f8ee864de59
[ 2164.119457][T23479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2164.119477][T23479] RSP: 002b:00007f8ee68a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2164.119508][T23479] RAX: ffffffffffffffda RBX: 00007f8ee88d5fa0 RCX: 00007f8ee864de59
[ 2164.119525][T23479] RDX: 0000200000000080 RSI: 00000000c028aa03 RDI: 0000000000000003
[ 2164.119540][T23479] RBP: 00007f8ee68a6090 R08: 0000000000000000 R09: 0000000000000000
[ 2164.119553][T23479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2164.119566][T23479] R13: 00007f8ee88d6038 R14: 00007f8ee88d5fa0 R15: 00007ffed9866db8
[ 2164.119601][T23479]  </TASK>
[ 2164.119741][T23479] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2164.164704][ T5835] usb 1-1: device descriptor read/64, error -71
[ 2164.174600][T11799] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 2164.278812][ T5835] usb usb1-port1: attempt power cycle
[ 2164.528710][T11799] usb 2-1: config 127 has an invalid interface number: 241 but max is 1
[ 2164.528742][T11799] usb 2-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2164.528762][T11799] usb 2-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2164.528780][T11799] usb 2-1: config 127 contains an unexpected descriptor of type 0x2, skipping
[ 2164.528800][T11799] usb 2-1: config 127 has an invalid interface number: 174 but max is 1
[ 2164.528821][T11799] usb 2-1: config 127 has no interface number 0
[ 2164.528839][T11799] usb 2-1: config 127 has no interface number 1
[ 2164.528908][T11799] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 2164.528937][T11799] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 2164.528967][T11799] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 2164.528999][T11799] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 2164.529027][T11799] usb 2-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x6, skipping
[ 2164.529051][T11799] usb 2-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[ 2164.529074][T11799] usb 2-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[ 2164.529099][T11799] usb 2-1: config 127 interface 241 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 32
[ 2164.529124][T11799] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x4 has invalid wMaxPacketSize 0
[ 2164.529148][T11799] usb 2-1: config 127 interface 241 altsetting 6 endpoint 0x2 has invalid maxpacket 1536, setting to 64
[ 2164.529175][T11799] usb 2-1: config 127 interface 241 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[ 2164.529211][T11799] usb 2-1: config 127 interface 174 altsetting 193 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 2164.529239][T11799] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x5, skipping
[ 2164.529264][T11799] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0xC, skipping
[ 2164.529289][T11799] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x2, skipping
[ 2164.529518][T11799] usb 2-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2164.529544][T11799] usb 2-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x6, skipping
[ 2164.529570][T11799] usb 2-1: config 127 interface 174 altsetting 193 bulk endpoint 0xF has invalid maxpacket 32
[ 2164.529595][T11799] usb 2-1: config 127 interface 241 has no altsetting 0
[ 2164.529616][T11799] usb 2-1: config 127 interface 174 has no altsetting 0
[ 2164.533283][T11799] usb 2-1: Dual-Role OTG device on HNP port
[ 2164.533637][T11799] usb 2-1: New USB device found, idVendor=07ca, idProduct=0825, bcdDevice=5f.f9
[ 2164.533667][T11799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2164.533689][T11799] usb 2-1: Product: syz
[ 2164.533705][T11799] usb 2-1: Manufacturer: syz
[ 2164.533721][T11799] usb 2-1: SerialNumber: syz
[ 2164.803554][ T5835] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 2164.829895][ T5835] usb 1-1: device descriptor read/8, error -71
[ 2164.912538][T23474] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 2165.064738][ T5835] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 2165.086402][ T5835] usb 1-1: device descriptor read/8, error -71
[ 2165.123813][T23484] FAULT_INJECTION: forcing a failure.
[ 2165.123813][T23484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2165.123852][T23484] CPU: 1 UID: 0 PID: 23484 Comm: syz.3.3970 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2165.123884][T23484] Tainted: [L]=SOFTLOCKUP
[ 2165.123893][T23484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2165.123907][T23484] Call Trace:
[ 2165.123919][T23484]  <TASK>
[ 2165.123929][T23484]  dump_stack_lvl+0xe8/0x150
[ 2165.123969][T23484]  should_fail_ex+0x467/0x600
[ 2165.124008][T23484]  _copy_from_user+0x2d/0xb0
[ 2165.124035][T23484]  raw_setsockopt+0x665/0x12f0
[ 2165.124072][T23484]  ? __pfx_raw_setsockopt+0x10/0x10
[ 2165.124127][T23484]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 2165.124159][T23484]  ? __pfx_raw_setsockopt+0x10/0x10
[ 2165.124191][T23484]  do_sock_setsockopt+0x17c/0x1b0
[ 2165.124219][T23484]  __x64_sys_setsockopt+0x143/0x1b0
[ 2165.124246][T23484]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2165.124270][T23484]  do_syscall_64+0x174/0x580
[ 2165.124309][T23484]  ? clear_bhb_loop+0x40/0x90
[ 2165.124338][T23484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2165.124362][T23484] RIP: 0033:0x7ff26395de59
[ 2165.124383][T23484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2165.124403][T23484] RSP: 002b:00007ff261bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 2165.124427][T23484] RAX: ffffffffffffffda RBX: 00007ff263be5fa0 RCX: 00007ff26395de59
[ 2165.124444][T23484] RDX: 0000000000000008 RSI: 0000000000000065 RDI: 0000000000000003
[ 2165.124457][T23484] RBP: 00007ff261bb6090 R08: 0000000000000004 R09: 0000000000000000
[ 2165.124470][T23484] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[ 2165.124486][T23484] R13: 00007ff263be6038 R14: 00007ff263be5fa0 R15: 00007ffcd135e638
[ 2165.124528][T23484]  </TASK>
[ 2165.205524][ T5835] usb usb1-port1: unable to enumerate USB device
[ 2165.375156][T11799] usb 2-1: USB disconnect, device number 40
[ 2166.959858][T19004] bridge_slave_1: left allmulticast mode
[ 2166.959897][T19004] bridge_slave_1: left promiscuous mode
[ 2166.960402][T19004] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2167.117806][T19004] bridge_slave_0: left allmulticast mode
[ 2167.117843][T19004] bridge_slave_0: left promiscuous mode
[ 2167.118113][T19004] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2167.174890][T11799] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 2167.342689][T11799] usb 3-1: config 127 has an invalid interface number: 241 but max is 1
[ 2167.342720][T11799] usb 3-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2167.342739][T11799] usb 3-1: config 127 contains an unexpected descriptor of type 0x1, skipping
[ 2167.342760][T11799] usb 3-1: config 127 contains an unexpected descriptor of type 0x2, skipping
[ 2167.342780][T11799] usb 3-1: config 127 has an invalid interface number: 174 but max is 1
[ 2167.342801][T11799] usb 3-1: config 127 has no interface number 0
[ 2167.342819][T11799] usb 3-1: config 127 has no interface number 1
[ 2167.342878][T11799] usb 3-1: config 127 interface 241 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64
[ 2167.342906][T11799] usb 3-1: config 127 interface 241 altsetting 6 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 2167.342936][T11799] usb 3-1: config 127 interface 241 altsetting 6 endpoint 0xC has invalid maxpacket 1023, setting to 64
[ 2167.342968][T11799] usb 3-1: config 127 interface 241 altsetting 6 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 2167.342997][T11799] usb 3-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x6, skipping
[ 2167.343022][T11799] usb 3-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0x1, skipping
[ 2167.343046][T11799] usb 3-1: config 127 interface 241 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[ 2167.343071][T11799] usb 3-1: config 127 interface 241 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 32
[ 2167.343097][T11799] usb 3-1: config 127 interface 241 altsetting 6 endpoint 0x4 has invalid wMaxPacketSize 0
[ 2167.343122][T11799] usb 3-1: config 127 interface 241 altsetting 6 endpoint 0x2 has invalid maxpacket 1536, setting to 64
[ 2167.343176][T11799] usb 3-1: config 127 interface 241 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[ 2167.343215][T11799] usb 3-1: config 127 interface 174 altsetting 193 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 2167.343243][T11799] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x5, skipping
[ 2167.343268][T11799] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0xC, skipping
[ 2167.343294][T11799] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x2, skipping
[ 2167.343318][T11799] usb 3-1: config 127 interface 174 altsetting 193 has an invalid descriptor for endpoint zero, skipping
[ 2167.343343][T11799] usb 3-1: config 127 interface 174 altsetting 193 has a duplicate endpoint with address 0x6, skipping
[ 2167.343367][T11799] usb 3-1: config 127 interface 241 has no altsetting 0
[ 2167.343387][T11799] usb 3-1: config 127 interface 174 has no altsetting 0
[ 2167.394299][T11799] usb 3-1: Dual-Role OTG device on HNP port
[ 2167.424622][T11799] usb 3-1: New USB device found, idVendor=07ca, idProduct=0825, bcdDevice=5f.f9
[ 2167.424656][T11799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2167.424679][T11799] usb 3-1: Product: syz
[ 2167.424695][T11799] usb 3-1: Manufacturer: syz
[ 2167.424711][T11799] usb 3-1: SerialNumber: syz
[ 2167.705376][T23501] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2168.590648][T23522] trusted_key: syz.1.3984 sent an empty control message without MSG_MORE.
[ 2169.957874][T11799] usb 3-1: USB disconnect, device number 29
[ 2170.096267][T19004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2170.215659][T19004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2170.257086][T19004] bond0 (unregistering): Released all slaves
[ 2170.386016][T22654] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 2170.597762][T22654] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2170.599238][T22654] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2170.599370][T22654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 2170.599402][T22654] usb 1-1: SerialNumber: syz
[ 2170.711960][T23535] tun0: tun_chr_ioctl cmd 1074025677
[ 2170.712426][T23535] tun0: linktype set to 769
[ 2170.814602][T11799] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[ 2170.817471][T23205] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2170.817767][T23205] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2170.818400][T23205] bridge_slave_0: entered allmulticast mode
[ 2170.865921][T23205] bridge_slave_0: entered promiscuous mode
[ 2170.930171][T23205] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2170.930469][T23205] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2170.930846][T23205] bridge_slave_1: entered allmulticast mode
[ 2170.964684][T11799] usb 3-1: Invalid ep0 maxpacket: 16
[ 2170.993131][T23205] bridge_slave_1: entered promiscuous mode
[ 2171.094603][T11799] usb 3-1: new low-speed USB device number 31 using dummy_hcd
[ 2171.244757][T11799] usb 3-1: Invalid ep0 maxpacket: 16
[ 2171.245384][T11799] usb usb3-port1: attempt power cycle
[ 2171.408848][T19004] hsr_slave_0: left promiscuous mode
[ 2171.411291][T23558] loop3: detected capacity change from 0 to 7
[ 2171.530365][T19004] hsr_slave_1: left promiscuous mode
[ 2171.531419][T19004] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2171.540171][T22654] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[ 2171.591766][T19004] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2171.594180][T22654] usb 1-1: USB disconnect, device number 81
[ 2171.614768][T11799] usb 3-1: new low-speed USB device number 32 using dummy_hcd
[ 2171.641273][T11799] usb 3-1: Invalid ep0 maxpacket: 16
[ 2171.764687][T11799] usb 3-1: new low-speed USB device number 33 using dummy_hcd
[ 2171.774427][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 2171.797936][T11799] usb 3-1: Invalid ep0 maxpacket: 16
[ 2171.798305][T11799] usb usb3-port1: unable to enumerate USB device
[ 2171.990803][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2171.991129][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[ 2172.023041][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2172.023137][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[ 2172.036525][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2172.036800][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[ 2172.130871][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2172.130964][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[ 2172.183897][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2172.183960][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[ 2172.216495][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2172.216599][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[ 2172.308301][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2172.308393][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[ 2172.310557][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2172.310639][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[ 2172.310854][    C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2172.310925][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[ 2172.311003][T23558] ldm_validate_partition_table(): Disk read failed.
[ 2172.311214][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[ 2172.313798][T23558] Dev loop3: unable to read RDB block 0
[ 2172.410665][T23558]  loop3: unable to read partition table
[ 2172.410916][T23558] loop3: partition table beyond EOD, truncated
[ 2172.410936][T23558] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[ 2172.507693][T23564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4003'.
[ 2173.106239][T19004] team0 (unregistering): Port device team_slave_1 removed
[ 2173.168580][T19004] team0 (unregistering): Port device team_slave_0 removed
[ 2173.264654][ T5835] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 2173.424650][ T5835] usb 2-1: Using ep0 maxpacket: 16
[ 2173.430630][ T5835] usb 2-1: config 0 has an invalid interface number: 107 but max is 0
[ 2173.430660][ T5835] usb 2-1: config 0 has an invalid descriptor of length 209, skipping remainder of the config
[ 2173.430681][ T5835] usb 2-1: config 0 has no interface number 0
[ 2173.430727][ T5835] usb 2-1: config 0 interface 107 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2173.503437][ T5835] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[ 2173.503470][ T5835] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 2173.503493][ T5835] usb 2-1: Product: syz
[ 2173.503509][ T5835] usb 2-1: Manufacturer: syz
[ 2173.503525][ T5835] usb 2-1: SerialNumber: syz
[ 2173.563776][ T5835] usb 2-1: config 0 descriptor??
[ 2173.739997][T23582] FAULT_INJECTION: forcing a failure.
[ 2173.739997][T23582] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2173.740098][T23582] CPU: 0 UID: 0 PID: 23582 Comm: syz.3.4011 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2173.740131][T23582] Tainted: [L]=SOFTLOCKUP
[ 2173.740139][T23582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2173.740152][T23582] Call Trace:
[ 2173.740162][T23582]  <TASK>
[ 2173.740172][T23582]  dump_stack_lvl+0xe8/0x150
[ 2173.740216][T23582]  should_fail_ex+0x467/0x600
[ 2173.740256][T23582]  _copy_from_user+0x2d/0xb0
[ 2173.740282][T23582]  do_sys_poll+0x258/0xf50
[ 2173.740331][T23582]  ? __lock_acquire+0x683/0x2ce0
[ 2173.740354][T23582]  ? __pfx_do_sys_poll+0x10/0x10
[ 2173.740391][T23582]  ? is_bpf_text_address+0x292/0x2b0
[ 2173.740416][T23582]  ? is_bpf_text_address+0x26/0x2b0
[ 2173.740556][T23582]  ? set_user_sigmask+0xcd/0x1c0
[ 2173.740585][T23582]  ? __pfx_set_user_sigmask+0x10/0x10
[ 2173.740614][T23582]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2173.740652][T23582]  __se_sys_ppoll+0x209/0x2b0
[ 2173.740686][T23582]  ? fput+0xa0/0xd0
[ 2173.740724][T23582]  ? __pfx___se_sys_ppoll+0x10/0x10
[ 2173.740757][T23582]  ? __pfx_ksys_write+0x10/0x10
[ 2173.740789][T23582]  ? __x64_sys_ppoll+0x20/0xc0
[ 2173.740821][T23582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2173.740847][T23582]  do_syscall_64+0x174/0x580
[ 2173.740883][T23582]  ? clear_bhb_loop+0x40/0x90
[ 2173.740911][T23582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2173.740934][T23582] RIP: 0033:0x7ff26395de59
[ 2173.740954][T23582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2173.740973][T23582] RSP: 002b:00007ff261bb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[ 2173.740997][T23582] RAX: ffffffffffffffda RBX: 00007ff263be5fa0 RCX: 00007ff26395de59
[ 2173.741014][T23582] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0
[ 2173.741030][T23582] RBP: 00007ff261bb6090 R08: 0000000000000000 R09: 0000000000000000
[ 2173.741045][T23582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2173.741059][T23582] R13: 00007ff263be6038 R14: 00007ff263be5fa0 R15: 00007ffcd135e638
[ 2173.741096][T23582]  </TASK>
[ 2174.011723][ T5835] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected
[ 2174.012099][ T5835] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81
[ 2174.012177][ T5835] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 88
[ 2174.043092][ T5835] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1
[ 2174.108616][ T5835] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[ 2174.160768][ T5835] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2
[ 2174.224010][ T5835] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[ 2174.265969][ T5835] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4
[ 2174.342797][ T5835] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[ 2174.371484][ T5835] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6
[ 2174.388086][ T5835] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[ 2174.413191][ T5835] usb 2-1: USB disconnect, device number 41
[ 2174.433933][T23205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2174.512208][T23205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2175.443849][ T5835] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[ 2175.485354][ T5835] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[ 2175.526816][ T5835] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[ 2175.638467][T23205] team0: Port device team_slave_0 added
[ 2175.650737][ T5835] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[ 2175.673723][T23205] team0: Port device team_slave_1 added
[ 2175.692970][ T5835] keyspan 2-1:0.107: device disconnected
[ 2177.486870][T23618] input: syz0 as /devices/virtual/input/input56
[ 2178.561142][T23205] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2178.561161][T23205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2178.561193][T23205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2178.722641][T23205] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2178.722660][T23205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2178.722707][T23205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2178.809502][T23631] 
[ 2178.809517][T23631] ============================================
[ 2178.809551][T23631] WARNING: possible recursive locking detected
[ 2178.809579][T23631] syzkaller #0 Tainted: G             L     
[ 2178.809595][T23631] --------------------------------------------
[ 2178.809607][T23631] syz.0.4025/23631 is trying to acquire lock:
[ 2178.809623][T23631] ffffffff8eba6708 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_de[ 2178.809623][T23631] ffffffff8eba6708 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.809689][T23631] 
[ 2178.809689][T23631] but task is already holding lock:
[ 2178.809699][T23631] ffffffff8eba6708 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.809755][T23631] 
[ 2178.809755][T23631] other info that might help us debug this:
[ 2178.809765][T23631]  Possible unsafe locking scenario:
[ 2178.809765][T23631] 
[ 2178.809773][T23631]        CPU0
[ 2178.809780][T23631]        ----
[ 2178.809787][T23631]   lock(qp_broker_list.mutex);
[ 2178.809804][T23631]   lock(qp_broker_list.mutex);
[ 2178.809822][T23631] 
[ 2178.809822][T23631]  *** DEADLOCK ***
[ 2178.809822][T23631] 
[ 2178.809830][T23631]  May be due to missing lock nesting notation
[ 2178.809830][T23631] 
[ 2178.809839][T23631] 1 lock held by syz.0.4025/23631:
[ 2178.809855][T23631]  #0: ffffffff8eba6708 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.809914][T23631] 
[ 2178.809914][T23631] stack backtrace:
[ 2178.809931][T23631] CPU: 0 UID: 0 PID: 23631 Comm: syz.0.4025 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2178.809971][T23631] Tainted: [L]=SOFTLOCKUP
[ 2178.809981][T23631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2178.809998][T23631] Call Trace:
[ 2178.810007][T23631]  <TASK>
[ 2178.810018][T23631]  dump_stack_lvl+0xe8/0x150
[ 2178.810058][T23631]  print_deadlock_bug+0x279/0x290
[ 2178.810092][T23631]  __lock_acquire+0x24df/0x2ce0
[ 2178.810122][T23631]  ? stack_depot_save_flags+0x3ec/0x800
[ 2178.810162][T23631]  ? kasan_save_track+0x4f/0x80
[ 2178.810185][T23631]  ? kasan_save_track+0x3e/0x80
[ 2178.810211][T23631]  ? kasan_save_free_info+0x40/0x50
[ 2178.810244][T23631]  ? __kasan_slab_free+0x5c/0x80
[ 2178.810268][T23631]  ? kfree+0x1c5/0x6c0
[ 2178.810317][T23631]  ? vmci_ctx_put+0x5ba/0xc00
[ 2178.810347][T23631]  ? vmci_ctx_enqueue_datagram+0x3c3/0x440
[ 2178.810379][T23631]  ? vmci_datagram_dispatch+0x450/0xc80
[ 2178.810414][T23631]  ? vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.810449][T23631]  lock_acquire+0x106/0x350
[ 2178.810471][T23631]  ? vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.810500][T23631]  ? vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.810527][T23631]  ? vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.810551][T23631]  mutex_lock_nested+0x5a/0x1d0
[ 2178.810581][T23631]  ? vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.810609][T23631]  vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.810641][T23631]  ? __pfx_vmci_qp_broker_detach+0x10/0x10
[ 2178.810663][T23631]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2178.810700][T23631]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2178.810742][T23631]  ? kfree+0x1c5/0x6c0
[ 2178.810776][T23631]  ? vmci_ctx_put+0x5ba/0xc00
[ 2178.810804][T23631]  ? vmci_ctx_put+0x13e/0xc00
[ 2178.810836][T23631]  vmci_ctx_put+0x619/0xc00
[ 2178.810866][T23631]  ? vmci_ctx_put+0x13e/0xc00
[ 2178.810898][T23631]  ? __pfx_vmci_ctx_put+0x10/0x10
[ 2178.810939][T23631]  vmci_ctx_enqueue_datagram+0x3c3/0x440
[ 2178.810976][T23631]  vmci_datagram_dispatch+0x450/0xc80
[ 2178.811012][T23631]  ? __pfx_vmci_datagram_dispatch+0x10/0x10
[ 2178.811053][T23631]  vmci_qp_broker_detach+0x87e/0xeb0
[ 2178.811084][T23631]  ? __pfx_vmci_qp_broker_detach+0x10/0x10
[ 2178.811108][T23631]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2178.811150][T23631]  ? kfree+0x1c5/0x6c0
[ 2178.811184][T23631]  ? vmci_ctx_put+0x5ba/0xc00
[ 2178.811213][T23631]  ? vmci_ctx_put+0x13e/0xc00
[ 2178.811244][T23631]  vmci_ctx_put+0x619/0xc00
[ 2178.811273][T23631]  ? vmci_ctx_put+0x13e/0xc00
[ 2178.811306][T23631]  ? __pfx_vmci_ctx_put+0x10/0x10
[ 2178.811347][T23631]  vmci_host_close+0x91/0x140
[ 2178.811386][T23631]  ? __pfx_vmci_host_close+0x10/0x10
[ 2178.811425][T23631]  __fput+0x42a/0xa80
[ 2178.811467][T23631]  fput_close_sync+0x11f/0x240
[ 2178.811492][T23631]  ? __pfx_fput_close_sync+0x10/0x10
[ 2178.811519][T23631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2178.811548][T23631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2178.811574][T23631]  __x64_sys_close+0x7e/0x110
[ 2178.811599][T23631]  do_syscall_64+0x174/0x580
[ 2178.811638][T23631]  ? clear_bhb_loop+0x40/0x90
[ 2178.811666][T23631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2178.811692][T23631] RIP: 0033:0x7f2a92d8de59
[ 2178.811715][T23631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2178.811739][T23631] RSP: 002b:00007f2a90fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2178.811765][T23631] RAX: ffffffffffffffda RBX: 00007f2a93015fa0 RCX: 00007f2a92d8de59
[ 2178.811783][T23631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[ 2178.811797][T23631] RBP: 00007f2a92e23e6f R08: 0000000000000000 R09: 0000000000000000
[ 2178.811812][T23631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2178.811828][T23631] R13: 00007f2a93016038 R14: 00007f2a93015fa0 R15: 00007ffe11a38ea8
[ 2178.811857][T23631]  </TASK>
[ 2178.847021][T23631] ------------[ cut here ]------------
[ 2178.847094][T23631] rtmutex deadlock detected
[ 2178.847134][T23631] WARNING: kernel/locking/rtmutex.c:1698 at rt_mutex_handle_deadlock+0x21/0xb0, CPU#0: syz.0.4025/23631
[ 2178.847325][T23631] Modules linked in:
[ 2178.847390][T23631] CPU: 0 UID: 0 PID: 23631 Comm: syz.0.4025 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2178.847507][T23631] Tainted: [L]=SOFTLOCKUP
[ 2178.847530][T23631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2178.847573][T23631] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0
[ 2178.847694][T23631] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 16 40 01 00 48 8d 3d 0f 9d 6e 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d 43 1d 59 07 4c 8d
[ 2178.847764][T23631] RSP: 0018:ffffc9000537f530 EFLAGS: 00010286
[ 2178.847820][T23631] RAX: 0000000080000000 RBX: 00000000ffffffdd RCX: 0000000000000000
[ 2178.847866][T23631] RDX: 0000000000000000 RSI: ffffffff8bca6260 RDI: ffffffff8fb2efc0
[ 2178.847920][T23631] RBP: ffffc9000537f6e0 R08: ffffffff8faf84f7 R09: 1ffffffff1f5f09e
[ 2178.847980][T23631] R10: dffffc0000000000 R11: fffffbfff1f5f09f R12: 1ffff92000a6feb4
[ 2178.848026][T23631] R13: ffffffff8b444cf2 R14: ffffffff8eba66b0 R15: dffffc0000000000
[ 2178.848072][T23631] FS:  00007f2a90fe66c0(0000) GS:ffff888125c49000(0000) knlGS:0000000000000000
[ 2178.848137][T23631] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2178.848182][T23631] CR2: 00007effc4ae5b38 CR3: 000000007c082000 CR4: 00000000003526f0
[ 2178.848242][T23631] Call Trace:
[ 2178.848267][T23631]  <TASK>
[ 2178.848298][T23631]  ? rt_mutex_slowlock+0x1f2/0x780
[ 2178.848382][T23631]  rt_mutex_slowlock+0x73c/0x780
[ 2178.848454][T23631]  ? rt_mutex_slowlock+0x1f2/0x780
[ 2178.848589][T23631]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 2178.848700][T23631]  ? lock_acquire+0x221/0x350
[ 2178.848774][T23631]  ? vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.848824][T23631]  mutex_lock_nested+0x168/0x1d0
[ 2178.848916][T23631]  vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.848987][T23631]  ? __pfx_vmci_qp_broker_detach+0x10/0x10
[ 2178.849058][T23631]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2178.849164][T23631]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2178.849264][T23631]  ? kfree+0x1c5/0x6c0
[ 2178.849360][T23631]  ? vmci_ctx_put+0x5ba/0xc00
[ 2178.849453][T23631]  ? vmci_ctx_put+0x13e/0xc00
[ 2178.849484][T23631]  vmci_ctx_put+0x619/0xc00
[ 2178.849512][T23631]  ? vmci_ctx_put+0x13e/0xc00
[ 2178.849569][T23631]  ? __pfx_vmci_ctx_put+0x10/0x10
[ 2178.849698][T23631]  vmci_ctx_enqueue_datagram+0x3c3/0x440
[ 2178.849800][T23631]  vmci_datagram_dispatch+0x450/0xc80
[ 2178.849896][T23631]  ? __pfx_vmci_datagram_dispatch+0x10/0x10
[ 2178.849989][T23631]  vmci_qp_broker_detach+0x87e/0xeb0
[ 2178.850064][T23631]  ? __pfx_vmci_qp_broker_detach+0x10/0x10
[ 2178.850128][T23631]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2178.850238][T23631]  ? kfree+0x1c5/0x6c0
[ 2178.850323][T23631]  ? vmci_ctx_put+0x5ba/0xc00
[ 2178.850397][T23631]  ? vmci_ctx_put+0x13e/0xc00
[ 2178.850484][T23631]  vmci_ctx_put+0x619/0xc00
[ 2178.850560][T23631]  ? vmci_ctx_put+0x13e/0xc00
[ 2178.850645][T23631]  ? __pfx_vmci_ctx_put+0x10/0x10
[ 2178.850753][T23631]  vmci_host_close+0x91/0x140
[ 2178.850846][T23631]  ? __pfx_vmci_host_close+0x10/0x10
[ 2178.850942][T23631]  __fput+0x42a/0xa80
[ 2178.850990][T23631]  fput_close_sync+0x11f/0x240
[ 2178.851013][T23631]  ? __pfx_fput_close_sync+0x10/0x10
[ 2178.851092][T23631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2178.851179][T23631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2178.851244][T23631]  __x64_sys_close+0x7e/0x110
[ 2178.851307][T23631]  do_syscall_64+0x174/0x580
[ 2178.851400][T23631]  ? clear_bhb_loop+0x40/0x90
[ 2178.851475][T23631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2178.851538][T23631] RIP: 0033:0x7f2a92d8de59
[ 2178.851598][T23631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2178.851651][T23631] RSP: 002b:00007f2a90fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2178.851717][T23631] RAX: ffffffffffffffda RBX: 00007f2a93015fa0 RCX: 00007f2a92d8de59
[ 2178.851769][T23631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[ 2178.851803][T23631] RBP: 00007f2a92e23e6f R08: 0000000000000000 R09: 0000000000000000
[ 2178.851843][T23631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2178.851878][T23631] R13: 00007f2a93016038 R14: 00007f2a93015fa0 R15: 00007ffe11a38ea8
[ 2178.851955][T23631]  </TASK>
[ 2178.851988][T23631] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2178.852043][T23631] CPU: 0 UID: 0 PID: 23631 Comm: syz.0.4025 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2178.852129][T23631] Tainted: [L]=SOFTLOCKUP
[ 2178.852152][T23631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 2178.852194][T23631] Call Trace:
[ 2178.852216][T23631]  <TASK>
[ 2178.852245][T23631]  vpanic+0x56c/0xa60
[ 2178.852307][T23631]  ? __pfx__printk+0x10/0x10
[ 2178.852380][T23631]  ? __pfx_vpanic+0x10/0x10
[ 2178.852463][T23631]  ? is_bpf_text_address+0x292/0x2b0
[ 2178.852515][T23631]  ? is_bpf_text_address+0x26/0x2b0
[ 2178.852597][T23631]  panic+0xc5/0xd0
[ 2178.852658][T23631]  ? __pfx_panic+0x10/0x10
[ 2178.852735][T23631]  __warn+0x315/0x4c0
[ 2178.852797][T23631]  ? rt_mutex_handle_deadlock+0x21/0xb0
[ 2178.852873][T23631]  ? rt_mutex_handle_deadlock+0x21/0xb0
[ 2178.852926][T23631]  __report_bug+0x331/0x530
[ 2178.853111][T23631]  ? rt_mutex_handle_deadlock+0x21/0xb0
[ 2178.853188][T23631]  ? __pfx___report_bug+0x10/0x10
[ 2178.853290][T23631]  ? __schedule+0x16f2/0x5500
[ 2178.853388][T23631]  report_bug_entry+0x19a/0x290
[ 2178.853495][T23631]  ? rt_mutex_handle_deadlock+0x21/0xb0
[ 2178.853567][T23631]  ? rt_mutex_handle_deadlock+0x26/0xb0
[ 2178.853630][T23631]  handle_bug+0xce/0x200
[ 2178.853702][T23631]  exc_invalid_op+0x1a/0x50
[ 2178.853750][T23631]  asm_exc_invalid_op+0x1a/0x20
[ 2178.853847][T23631] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0
[ 2178.853938][T23631] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 16 40 01 00 48 8d 3d 0f 9d 6e 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d 43 1d 59 07 4c 8d
[ 2178.853990][T23631] RSP: 0018:ffffc9000537f530 EFLAGS: 00010286
[ 2178.854043][T23631] RAX: 0000000080000000 RBX: 00000000ffffffdd RCX: 0000000000000000
[ 2178.854085][T23631] RDX: 0000000000000000 RSI: ffffffff8bca6260 RDI: ffffffff8fb2efc0
[ 2178.854129][T23631] RBP: ffffc9000537f6e0 R08: ffffffff8faf84f7 R09: 1ffffffff1f5f09e
[ 2178.854181][T23631] R10: dffffc0000000000 R11: fffffbfff1f5f09f R12: 1ffff92000a6feb4
[ 2178.854225][T23631] R13: ffffffff8b444cf2 R14: ffffffff8eba66b0 R15: dffffc0000000000
[ 2178.854279][T23631]  ? rt_mutex_slowlock+0x1f2/0x780
[ 2178.854373][T23631]  ? rt_mutex_slowlock+0x1f2/0x780
[ 2178.854449][T23631]  rt_mutex_slowlock+0x73c/0x780
[ 2178.854475][T23631]  ? rt_mutex_slowlock+0x1f2/0x780
[ 2178.854503][T23631]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 2178.854563][T23631]  ? lock_acquire+0x221/0x350
[ 2178.854628][T23631]  ? vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.854692][T23631]  mutex_lock_nested+0x168/0x1d0
[ 2178.854777][T23631]  vmci_qp_broker_detach+0xe9/0xeb0
[ 2178.854853][T23631]  ? __pfx_vmci_qp_broker_detach+0x10/0x10
[ 2178.854908][T23631]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2178.855002][T23631]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2178.855104][T23631]  ? kfree+0x1c5/0x6c0
[ 2178.855203][T23631]  ? vmci_ctx_put+0x5ba/0xc00
[ 2178.855296][T23631]  ? vmci_ctx_put+0x13e/0xc00
[ 2178.855379][T23631]  vmci_ctx_put+0x619/0xc00
[ 2178.855453][T23631]  ? vmci_ctx_put+0x13e/0xc00
[ 2178.855528][T23631]  ? __pfx_vmci_ctx_put+0x10/0x10
[ 2178.855633][T23631]  vmci_ctx_enqueue_datagram+0x3c3/0x440
[ 2178.855719][T23631]  vmci_datagram_dispatch+0x450/0xc80
[ 2178.855845][T23631]  ? __pfx_vmci_datagram_dispatch+0x10/0x10
[ 2178.855945][T23631]  vmci_qp_broker_detach+0x87e/0xeb0
[ 2178.856016][T23631]  ? __pfx_vmci_qp_broker_detach+0x10/0x10
[ 2178.856047][T23631]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2178.856145][T23631]  ? kfree+0x1c5/0x6c0
[ 2178.856232][T23631]  ? vmci_ctx_put+0x5ba/0xc00
[ 2178.856306][T23631]  ? vmci_ctx_put+0x13e/0xc00
[ 2178.856375][T23631]  vmci_ctx_put+0x619/0xc00
[ 2178.856457][T23631]  ? vmci_ctx_put+0x13e/0xc00
[ 2178.856533][T23631]  ? __pfx_vmci_ctx_put+0x10/0x10
[ 2178.856649][T23631]  vmci_host_close+0x91/0x140
[ 2178.856758][T23631]  ? __pfx_vmci_host_close+0x10/0x10
[ 2178.856851][T23631]  __fput+0x42a/0xa80
[ 2178.856909][T23631]  fput_close_sync+0x11f/0x240
[ 2178.856975][T23631]  ? __pfx_fput_close_sync+0x10/0x10
[ 2178.857040][T23631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2178.857113][T23631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2178.857180][T23631]  __x64_sys_close+0x7e/0x110
[ 2178.857243][T23631]  do_syscall_64+0x174/0x580
[ 2178.857338][T23631]  ? clear_bhb_loop+0x40/0x90
[ 2178.857411][T23631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2178.857483][T23631] RIP: 0033:0x7f2a92d8de59
[ 2178.857538][T23631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2178.857592][T23631] RSP: 002b:00007f2a90fe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2178.857656][T23631] RAX: ffffffffffffffda RBX: 00007f2a93015fa0 RCX: 00007f2a92d8de59
[ 2178.857708][T23631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[ 2178.857742][T23631] RBP: 00007f2a92e23e6f R08: 0000000000000000 R09: 0000000000000000
[ 2178.857785][T23631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2178.857825][T23631] R13: 00007f2a93016038 R14: 00007f2a93015fa0 R15: 00007ffe11a38ea8
[ 2178.857899][T23631]  </TASK>
[ 2178.858094][T23631] Kernel Offset: disabled