last executing test programs:

22m41.825677881s ago: executing program 32 (id=268):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async, rerun: 32)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000012c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03002dbd7000fddbdf250200000004000500050002"], 0x30}, 0x1, 0x0, 0x0, 0x4000110}, 0x0) (async)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x68, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x31}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x44000) (async)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async)
r4 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r4) (async, rerun: 32)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) (async, rerun: 32)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x2000, 0x80, &(0x7f0000000580)=""/128}]}) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r6], 0x1c}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (rerun: 64)

19m29.550674991s ago: executing program 33 (id=637):
socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000200)='./file1\x00', 0x12e)
syz_usb_connect(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000b4106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507020004814006090587030800"], 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x566e105bf7b091e4)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71]})
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0xae, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000000180c200000086dd6001012000783afffe8000000000000000000000000000bbff03030000000000000000000000000186009078000000070000000000000000000aa78ce54006598080a8030037004023493b07aafaffffffffffffff23732472eefa45ad964892497465bb4c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbafe5af180200010000000004002600040000000101fe906d17efe30000000690efafb1dc37fd06a2bc60b57186f814d9"], 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000001c0)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
prlimit64(0x0, 0xe, 0x0, 0x0)
execve(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48)
r3 = gettid()
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0)
write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

17m14.769600234s ago: executing program 34 (id=972):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00', 0x7)
r2 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r2}}, 0x3c)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)

14m43.438621121s ago: executing program 2 (id=1428):
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000007b00006114640000000000466d4d824f05000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0)

14m41.48967324s ago: executing program 2 (id=1429):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000240))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f0889e", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="40000400000040d11c5f"], 0x0, 0x0, 0x0, 0x0})

14m36.699032855s ago: executing program 2 (id=1440):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
prlimit64(0x0, 0x7, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setrlimit(0x2, 0x0)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000800000/0x800000)=nil)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x2, 0x0, &(0x7f00007d0000)=0xa192)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x3, 0x0, [{0xffff1000, 0x8a, &(0x7f0000000100)=""/138}, {0x100000, 0x41, &(0x7f0000000300)=""/65}, {0xf000, 0xe7, &(0x7f0000000380)=""/231}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@alu={0x7, 0x0, 0xe, 0x0, 0x7, 0x80, 0x4}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

14m33.159970552s ago: executing program 2 (id=1449):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611214000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

14m32.009130092s ago: executing program 2 (id=1452):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000240))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03076804268c989e14f0889e", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

14m30.425410313s ago: executing program 2 (id=1455):
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000007b00006114640000000000466d4d824f05000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0)

14m29.854192749s ago: executing program 35 (id=1455):
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000007b00006114640000000000466d4d824f05000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301)
ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0)

14m19.200741176s ago: executing program 7 (id=1475):
r0 = socket$inet6(0xa, 0x2, 0x4c9)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x5, 0x2c, 0x2, 0x7}, {0x1, 0x8, 0x9, 0x2}, {0x3ff, 0xf, 0x0, 0x1}]})
eventfd2(0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
close(r0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400040, 0x10)
mknodat(r3, &(0x7f0000000140)='./file0\x00', 0x1, 0x6)
accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@netrom, @netrom, @bcast, @netrom, @netrom, @remote, @bcast, @netrom]}, &(0x7f0000000200)=0x48, 0x180800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
read$FUSE(r7, &(0x7f0000000400)={0x2020, 0x0, <r8=>0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000002440)=@gcm_128={{0x303}, "1cc79aa753a4a589", "ecd314beaeedb69c8b38c37dbfb2bd19", "7b241348", "4a8c3605539b93a3"}, 0x28)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000002480)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x53, r2})
write$FUSE_INTERRUPT(r7, &(0x7f00000024c0)={0x10, 0x0, r8}, 0x10)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
mknod(&(0x7f0000002500)='./file0\x00', 0x2, 0xb)
r12 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002540), 0x40040, 0x0)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000025c0), r4)
sendmsg$BATADV_CMD_SET_HARDIF(r12, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x24, r13, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x2000c080)
r14 = dup3(r1, r11, 0x80000)
sched_setscheduler(r9, 0x0, &(0x7f00000026c0)=0x1)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), r14)
sendmsg$NL80211_CMD_SET_KEY(r15, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x24, r16, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000015}, 0x20000000)

14m18.315605474s ago: executing program 7 (id=1478):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
r1 = socket(0x11, 0xa, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000080))
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0xc, 0x0, 0xffffffff, 0x7}})
ioctl$FIONREAD(r0, 0x541b, 0x0)

14m14.480133868s ago: executing program 7 (id=1486):
r0 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1a"], 0x7c}}, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060012"], 0x24}}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000c80)={0x2020, 0x0, <r5=>0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
ptrace$getsig(0x4202, r6, 0x0, &(0x7f0000000080))
mq_open(&(0x7f0000000100)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\x03q\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x91:\x0f\xef\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00q`\x1a_\xcd\x8ck+\x05\x11}*\xf5\r\a\x14\x97B>\x9d\xe6\x81\xf9\xcbE\xa1\xc3\xda\xb6\xfe\rh\xd5\xe3\x9d\x85\xe0;\x90W\xa4\xc1\x1eb;\xa5\x12\xc5\x936k\x18=\xe08\x17\xfc\xf1\xee\xd5\xa7\xab\xd3\x05a\x15?c\xa3\xa8\xd3$\xe8`$\x16\xb4\xd8K\x1bR4s\xab\xedM\xa1\xd4I\x91\x01', 0x6e93ebbbcc0884f2, 0x2c, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040))
write$FUSE_LK(r7, &(0x7f0000000240)={0x28, 0x0, r5, {{0x3, 0x6, 0x0, r6}}}, 0x28)
epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000c40)={0x8000203d})
epoll_pwait(r8, &(0x7f0000000140)=[{}], 0x1, 0x80000001, 0x0, 0x0)

14m13.510185799s ago: executing program 7 (id=1487):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn'])

14m13.159366181s ago: executing program 7 (id=1490):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x1}, 0x8)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040))
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x8140aecc, &(0x7f0000000140)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef)

14m11.817640906s ago: executing program 7 (id=1494):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xf2, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

14m10.933908248s ago: executing program 36 (id=1494):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xf2, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

12m59.444596102s ago: executing program 4 (id=1609):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x50}}, 0x340000d1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shutdown(0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000000206010006000a060000000000009d22cff6492500000e0003006269746d61703a69700000000500040000000000bcd0e23c94481049df89da9e6158aad61ddc9ef071420e6b4c43bc947ebd4a46cdfa34e9ea0c4ac0a43aa1808b0d663f7009eb2d511463ddb5502dd428376f57f331b4c6a18afb80bb2c926f7f13b41d85029fbb8b0c6b6bec1b94c1c1d532ddb63291f784d141e4e2d10afe035f98668cabd5fe70f451e428fb3647aeef9a4baf8e939713a9c9ae01145412e702679fd57fb1ddec9e7b7048656bad62d9fc3a67fa24fd2707676ddf80d78ef5ded9dc513ed0086b8ceef2be9eb5bf7e8cd3453e861cd92f558fb02f69dcf5cba0ed04134c2b2e828ebeee15ca0f09a17da1d87c90d79b9650b63740220bef41fea4ac8eadaf00810d1085"], 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
r2 = msgget$private(0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="44af6905d2e47967f2aed6000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008001200000000000800130000000000"], 0x44}}, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000300)='\x00\x00\x00', 0x3}], 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000100)={r6, 0x5, 0x20, 0x3, 0x2}, &(0x7f00000001c0)=0x18)
msgrcv(r2, &(0x7f0000000200)={0x0, ""/95}, 0x67, 0x2, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x56, 0x0, 0x0)
ioctl$EVIOCRMFF(r8, 0x550c, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r9, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10)
connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r9, 0x0, 0xd, &(0x7f0000000040)=0xb, 0x4)
setsockopt$inet_int(r9, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4)

12m54.386752912s ago: executing program 4 (id=1621):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22)
writev(r3, &(0x7f0000000000)=[{0x0}], 0x1)

12m48.675501843s ago: executing program 4 (id=1628):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x300000000000000, 0x3})
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61)
mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {0x0, 0x77b, 0xb200, 0xa4}, 0x3f, [0x5, 0x411d, 0xa9, 0x6, 0xfffffffe, 0xfffffff8, 0xc3, 0x2, 0x200, 0x6, 0x7, 0xd, 0x8200, 0xa3, 0x2, 0x0, 0x7, 0x1, 0x5ef, 0x4, 0x5b, 0x6, 0x8001, 0x1, 0x0, 0x40, 0x2, 0x30, 0x5a1, 0x2, 0x3c3c14ed, 0x54, 0x7, 0x1, 0x2, 0x3, 0x8, 0xc76, 0x8, 0x80, 0x5, 0x4, 0x10, 0x3, 0xc11, 0x7f, 0x2, 0x7, 0x1, 0x401, 0xd10, 0x1, 0x6, 0x4, 0x1, 0xb, 0xa, 0x2, 0x4, 0x7, 0x9, 0x7, 0x40, 0x4], [0x0, 0xffffffff, 0x0, 0x8001, 0x3, 0x0, 0x4, 0x909, 0x7, 0x10, 0x7, 0x7ff, 0x2, 0x401, 0x0, 0x6, 0x0, 0xff, 0x8, 0x0, 0x5, 0xa6, 0x2, 0x0, 0x9, 0xffffff7c, 0x5, 0x3ff, 0xfdb, 0x5, 0x800, 0x3ff, 0x0, 0xa, 0x4d9b, 0x3, 0x7, 0x2, 0x9, 0x0, 0xfff, 0x2, 0x4, 0x10001, 0x6, 0xfffffbff, 0x0, 0xd, 0x4, 0x5, 0x0, 0x6, 0x1ff, 0x0, 0x9, 0x2, 0x6, 0x8, 0x3, 0xffff, 0x1, 0x8000, 0x7, 0x3], [0x8, 0xe7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x7, 0x8, 0x1, 0x8, 0xb, 0x3, 0x1, 0x80000001, 0x1, 0x81, 0x7, 0x918, 0xfffffffa, 0x2, 0x20, 0x7ff, 0x9, 0x1, 0x3ff, 0x6, 0x0, 0x8, 0x7f, 0x6, 0xca, 0x5, 0x0, 0x1, 0x9, 0x3, 0x9, 0xfffffffd, 0x27, 0x7, 0x1, 0xd6d9, 0x2005, 0x5, 0x0, 0xfffffff8, 0x6, 0x400, 0xfffffff9, 0x6, 0x4, 0x3e, 0x10, 0x2, 0x8, 0x549, 0x80000000, 0x5, 0x1, 0x80, 0xfffffbb5, 0x10000000, 0x6, 0x2], [0x669, 0xfffffff8, 0xfffffffb, 0x8009, 0x4, 0x6, 0x2698, 0x1, 0x80, 0x1, 0x6, 0x10001, 0x10001, 0x2, 0x8, 0xfffffff3, 0x6, 0x5, 0x1, 0x9, 0x7fff, 0x0, 0xb, 0xd, 0xffff, 0x100, 0x0, 0x4, 0x0, 0x9, 0x8001, 0x200, 0x7, 0x8, 0x0, 0x40, 0x7, 0x80, 0xfffffff7, 0x8000, 0x3, 0x80000000, 0xffffffff, 0x2d, 0x7592, 0x3, 0x80, 0x80, 0x93b, 0x1798, 0x1, 0x9, 0xf, 0x9, 0x82, 0x6, 0x6dd75fa8, 0x9, 0x80000000, 0x80, 0x3, 0x379, 0x6000]}, 0x45c)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs(0x0, 0x0)

12m44.219063454s ago: executing program 4 (id=1636):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
recvmmsg(r3, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0}, 0x2a}], 0x1, 0x10020, 0x0)
setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000140)=0x5, 0x4)
bind$l2tp(r3, &(0x7f00000000c0), 0x10)
sendto$l2tp(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000600000000000000000c0000000c00000002000000000400"/39], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r4 = userfaultfd(0x80001)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4004044)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0xf4})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x220, 0xd0, 0x720d, 0x148, 0x0, 0x148, 0x188, 0x240, 0x240, 0x188, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010100, 0xff, 0xff000000, 'veth1_to_hsr\x00', 'dvmrp1\x00', {0xff}, {}, 0xff, 0x1, 0x30}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1e01, 0x2, 0x3], 0x0, 0x2}, {0xffffffffffffffff, [0x7, 0xb2cc575b459b5b36, 0x4, 0x4], 0x6, 0x7}}}}, {{@ip={@broadcast, @multicast1, 0xff000000, 0xffffffff, 'sit0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x1, 0x3, 0x40}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r8=>0x0})
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x1}}}, 0x30)
ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f00000002c0)={0xc, r8})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r8, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000"])

12m42.18012077s ago: executing program 4 (id=1641):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004)
recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000003800)=""/105, 0x69}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/4096, 0x1000}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x2, 0x0)

12m41.43944332s ago: executing program 4 (id=1643):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x300000000000000, 0x3})
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61)
mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {0x0, 0x77b, 0xb200, 0xa4}, 0x3f, [0x5, 0x411d, 0xa9, 0x6, 0xfffffffe, 0xfffffff8, 0xc3, 0x2, 0x200, 0x6, 0x7, 0xd, 0x8200, 0xa3, 0x2, 0x0, 0x7, 0x1, 0x5ef, 0x4, 0x5b, 0x6, 0x8001, 0x1, 0x0, 0x40, 0x2, 0x30, 0x5a1, 0x2, 0x3c3c14ed, 0x54, 0x7, 0x1, 0x2, 0x3, 0x8, 0xc76, 0x8, 0x80, 0x5, 0x4, 0x10, 0x3, 0xc11, 0x7f, 0x2, 0x7, 0x1, 0x401, 0xd10, 0x1, 0x6, 0x4, 0x1, 0xb, 0xa, 0x2, 0x4, 0x7, 0x9, 0x7, 0x40, 0x4], [0x0, 0xffffffff, 0x0, 0x8001, 0x3, 0x0, 0x4, 0x909, 0x7, 0x10, 0x7, 0x7ff, 0x2, 0x401, 0x0, 0x6, 0x0, 0xff, 0x8, 0x0, 0x5, 0xa6, 0x2, 0x0, 0x9, 0xffffff7c, 0x5, 0x3ff, 0xfdb, 0x5, 0x800, 0x3ff, 0x0, 0xa, 0x4d9b, 0x3, 0x7, 0x2, 0x9, 0x0, 0xfff, 0x2, 0x4, 0x10001, 0x6, 0xfffffbff, 0x0, 0xd, 0x4, 0x5, 0x0, 0x6, 0x1ff, 0x0, 0x9, 0x2, 0x6, 0x8, 0x3, 0xffff, 0x1, 0x8000, 0x7, 0x3], [0x8, 0xe7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x7, 0x8, 0x1, 0x8, 0xb, 0x3, 0x1, 0x80000001, 0x1, 0x81, 0x7, 0x918, 0xfffffffa, 0x2, 0x20, 0x7ff, 0x9, 0x1, 0x3ff, 0x6, 0x0, 0x8, 0x7f, 0x6, 0xca, 0x5, 0x0, 0x1, 0x9, 0x3, 0x9, 0xfffffffd, 0x27, 0x7, 0x1, 0xd6d9, 0x2005, 0x5, 0x0, 0xfffffff8, 0x6, 0x400, 0xfffffff9, 0x6, 0x4, 0x3e, 0x10, 0x2, 0x8, 0x549, 0x80000000, 0x5, 0x1, 0x80, 0xfffffbb5, 0x10000000, 0x6, 0x2], [0x669, 0xfffffff8, 0xfffffffb, 0x8009, 0x4, 0x6, 0x2698, 0x1, 0x80, 0x1, 0x6, 0x10001, 0x10001, 0x2, 0x8, 0xfffffff3, 0x6, 0x5, 0x1, 0x9, 0x7fff, 0x0, 0xb, 0xd, 0xffff, 0x100, 0x0, 0x4, 0x0, 0x9, 0x8001, 0x200, 0x7, 0x8, 0x0, 0x40, 0x7, 0x80, 0xfffffff7, 0x8000, 0x3, 0x80000000, 0xffffffff, 0x2d, 0x7592, 0x3, 0x80, 0x80, 0x93b, 0x1798, 0x1, 0x9, 0xf, 0x9, 0x82, 0x6, 0x6dd75fa8, 0x9, 0x80000000, 0x80, 0x3, 0x379, 0x6000]}, 0x45c)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs(0x0, 0x0)

12m26.28318129s ago: executing program 37 (id=1643):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2})
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5})
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x300000000000000, 0x3})
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61)
mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {0x0, 0x77b, 0xb200, 0xa4}, 0x3f, [0x5, 0x411d, 0xa9, 0x6, 0xfffffffe, 0xfffffff8, 0xc3, 0x2, 0x200, 0x6, 0x7, 0xd, 0x8200, 0xa3, 0x2, 0x0, 0x7, 0x1, 0x5ef, 0x4, 0x5b, 0x6, 0x8001, 0x1, 0x0, 0x40, 0x2, 0x30, 0x5a1, 0x2, 0x3c3c14ed, 0x54, 0x7, 0x1, 0x2, 0x3, 0x8, 0xc76, 0x8, 0x80, 0x5, 0x4, 0x10, 0x3, 0xc11, 0x7f, 0x2, 0x7, 0x1, 0x401, 0xd10, 0x1, 0x6, 0x4, 0x1, 0xb, 0xa, 0x2, 0x4, 0x7, 0x9, 0x7, 0x40, 0x4], [0x0, 0xffffffff, 0x0, 0x8001, 0x3, 0x0, 0x4, 0x909, 0x7, 0x10, 0x7, 0x7ff, 0x2, 0x401, 0x0, 0x6, 0x0, 0xff, 0x8, 0x0, 0x5, 0xa6, 0x2, 0x0, 0x9, 0xffffff7c, 0x5, 0x3ff, 0xfdb, 0x5, 0x800, 0x3ff, 0x0, 0xa, 0x4d9b, 0x3, 0x7, 0x2, 0x9, 0x0, 0xfff, 0x2, 0x4, 0x10001, 0x6, 0xfffffbff, 0x0, 0xd, 0x4, 0x5, 0x0, 0x6, 0x1ff, 0x0, 0x9, 0x2, 0x6, 0x8, 0x3, 0xffff, 0x1, 0x8000, 0x7, 0x3], [0x8, 0xe7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x7, 0x8, 0x1, 0x8, 0xb, 0x3, 0x1, 0x80000001, 0x1, 0x81, 0x7, 0x918, 0xfffffffa, 0x2, 0x20, 0x7ff, 0x9, 0x1, 0x3ff, 0x6, 0x0, 0x8, 0x7f, 0x6, 0xca, 0x5, 0x0, 0x1, 0x9, 0x3, 0x9, 0xfffffffd, 0x27, 0x7, 0x1, 0xd6d9, 0x2005, 0x5, 0x0, 0xfffffff8, 0x6, 0x400, 0xfffffff9, 0x6, 0x4, 0x3e, 0x10, 0x2, 0x8, 0x549, 0x80000000, 0x5, 0x1, 0x80, 0xfffffbb5, 0x10000000, 0x6, 0x2], [0x669, 0xfffffff8, 0xfffffffb, 0x8009, 0x4, 0x6, 0x2698, 0x1, 0x80, 0x1, 0x6, 0x10001, 0x10001, 0x2, 0x8, 0xfffffff3, 0x6, 0x5, 0x1, 0x9, 0x7fff, 0x0, 0xb, 0xd, 0xffff, 0x100, 0x0, 0x4, 0x0, 0x9, 0x8001, 0x200, 0x7, 0x8, 0x0, 0x40, 0x7, 0x80, 0xfffffff7, 0x8000, 0x3, 0x80000000, 0xffffffff, 0x2d, 0x7592, 0x3, 0x80, 0x80, 0x93b, 0x1798, 0x1, 0x9, 0xf, 0x9, 0x82, 0x6, 0x6dd75fa8, 0x9, 0x80000000, 0x80, 0x3, 0x379, 0x6000]}, 0x45c)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs(0x0, 0x0)

8m45.637158211s ago: executing program 9 (id=2239):
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, 0x0, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, 0x0, &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000200)={0xff02, 0x2, 0xffff, 0xb, 0xd, "5f730000a9003f00"})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x5f)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000002d80)={0x0, 0x1}, &(0x7f0000002dc0)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000002e00)={0x0, 0x7, 0x9, 0x8, 0x3, 0x400, 0x400, 0x3, {0x0, @in6={{0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x7fff, 0x6066, 0x4, 0x8, 0x2}}, &(0x7f0000002ec0)=0xb0)
sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x40000)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x4, 0x0, 0xffffffff, 0x83, "00000000000000000000ffff00"})
r4 = syz_open_pts(r2, 0x0)
dup3(r4, r2, 0x0)
pipe(0x0)
r5 = io_uring_setup(0x79bf, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
personality(0x400000d)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0)

8m43.864933188s ago: executing program 9 (id=2244):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) (async)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x83, &(0x7f0000000140)={r9}, 0x8)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x200, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, 0x4100}}, 0x20}}, 0x4008000)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES8=r0, @ANYBLOB="69bd8fa2062b50abcf3c1889a5c2742df31743d4b5799bfee41fec3d3aa5aebe78a3cde87f44fd79767177f3d5a41002f8c26f1f09313ab3d672bde57d6a1e25753635f01a536b7da7c52f444da8dc9fbaab54d5e3a2bc48c311b22e26e1df3872c6f08a54c8a120da2ec59d18d30036ed6ea972ad0abce95d4e8e897c504c243cd9d8918728979a43f5965bf6826ceb505e707542c8adbf497c4152b6c6", @ANYRES32=r0, @ANYRESHEX=r1, @ANYRES32=r2], 0x48)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) (async)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0xa8440, 0x0)
r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
r15 = dup(r14)
ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800002201"]) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r16 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r16, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r16, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
setsockopt$inet_int(r16, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)

8m43.373515895s ago: executing program 9 (id=2247):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x6c}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r0=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20040051)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f00000005c0)="f250bf28b01a5df4611c99f0241276b5e1808fe39f314d4ec915be49a3522570089ec5bb36527c332faebc3307ff537596d5d6aec9f2", 0x36}, {&(0x7f0000000180)="f3", 0x1}], 0x4}}, {{0x0, 0x0, 0x0}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000007c0)="1d", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)}}], 0x4, 0x4048841)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@setneightbl={0x14, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40080)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r5 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(0x0, 0x0, 0x0, 0x0, r5)
syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00')
r6 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r6, &(0x7f0000000180)={0x11, 0xf6, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

8m42.697435126s ago: executing program 9 (id=2249):
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0)
umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async, rerun: 32)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000007c0)={'#! ', '', [], 0xa, "c3efb4b60ec6b517344a1c5642068defcb59ef42378d57fdb9963115fa9b29f9a7ca09a454ea6b52bb2b6d90f8e06db85ddb83dc3b31daf9b4e43542cf2cd31aea495c26e3dd32537f133e643695a628a70f285b124708dea5b8735d0a5ed082114e2eb54713"}, 0x6a) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_user\x00', 0xb00000000065808, 0x0)
r3 = socket(0x200000100000011, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r4=>0x0}) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r7, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7a6e, 0x4, 0x20000000000, 0x0, 0x8, 0xc0, 0x0, 0x5], 0x8000000, 0x8340})
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r8, 0x101, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async)
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) (async, rerun: 32)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) (async, rerun: 32)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd43af9111aa0c520f06"], 0x3000}], 0x1}, 0x0)

8m40.593981232s ago: executing program 9 (id=2256):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pipe2$9p(0x0, 0x0)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x4310, &(0x7f0000000100)={0x0, 0x1000000, 0x1, 0x0, 0x3a6}, &(0x7f0000000040), 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
listen(r8, 0x0)
accept4$rose(r8, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000300)={0x0, 0xff, 0x8, 0x0, 0x2, "7f12ddb357f7adf97affffffff7d1800"})

8m39.777416013s ago: executing program 9 (id=2257):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x24004094}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740ab487b1b512f33a8dbd67a8b35f2405127f309901ea13e31d5810f85eae8f528c938c24abb1b1abbda2e7fa6e0758629bb09ed64a8ba5b2ef3c3591fd06d7e10d93c0857ecac854ac51ad69639d98adb2c1464e444cc1a6a2e7ee244622433b51f58606b063f4938101a7e764c957eba2e913b2ac10435471fa769740a1275cb467e5264b71bc8727fc12e9aba46e4a8abf3dda91e0da608d6a0a35573d5524fb25451cc23051887de4df85c8e771260c4943e78905aa1e7493027366ed1bea0d80304804800018008000100667764003c0002800800"], 0x558}}, 0x40)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x6e69, 0xffff, 0x3, 0xfffc, 0xf, 0x8})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaabb6, 0x52, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8m39.232242355s ago: executing program 38 (id=2257):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x24004094}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740ab487b1b512f33a8dbd67a8b35f2405127f309901ea13e31d5810f85eae8f528c938c24abb1b1abbda2e7fa6e0758629bb09ed64a8ba5b2ef3c3591fd06d7e10d93c0857ecac854ac51ad69639d98adb2c1464e444cc1a6a2e7ee244622433b51f58606b063f4938101a7e764c957eba2e913b2ac10435471fa769740a1275cb467e5264b71bc8727fc12e9aba46e4a8abf3dda91e0da608d6a0a35573d5524fb25451cc23051887de4df85c8e771260c4943e78905aa1e7493027366ed1bea0d80304804800018008000100667764003c0002800800"], 0x558}}, 0x40)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x6e69, 0xffff, 0x3, 0xfffc, 0xf, 0x8})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaabb6, 0x52, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8m18.417997692s ago: executing program 5 (id=2311):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r2, &(0x7f0000000200)=""/164, 0xa4)
syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0})

8m18.317401304s ago: executing program 5 (id=2312):
signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140))
socket$inet_smc(0x2b, 0x1, 0x0)
pipe2$9p(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x3, 0x0, 0x1, 0x8, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0xfffffffffffffe3d)
r4 = socket$caif_stream(0x25, 0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='xprtrdma_post_send_err\x00', r3}, 0x18)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000000)={0xc0, "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"})
setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000180), 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x242, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
openat$urandom(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
setitimer(0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280))

8m17.193379242s ago: executing program 5 (id=2316):
sched_setaffinity(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0)
shutdown(0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0xffffff45, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000206030000000000000000000000000011000300686173683a69702c706f7274000000000c000780080012400ffffffcf30005000a00000005000400010000000500010007000000"], 0x4c}}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
lseek(r4, 0xfffffffffffffffb, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=@flushpolicy={0x124, 0x12, 0x105, 0x0, 0x0, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in6=@local, 0x2, 0x6, 0xd1}}, @policy={0xac, 0x7, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x6, 0x4e20, 0x0, 0xa, 0x0, 0xa0, 0x2, 0x0, r6}, {0x43, 0x1, 0x18e8, 0x0, 0x6, 0x2, 0x9, 0x5471}, {0xd48a, 0x1, 0x6, 0x8000}, 0x10001, 0x6e6bb2, 0x0, 0x1, 0x0, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xa, 0x8e, 0x61}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7ff}]}, 0x124}}, 0x4000800)

8m14.728114138s ago: executing program 5 (id=2319):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002680)='bbr\x00', 0x4)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r2 = getpgrp(0x0)
r3 = syz_open_procfs$userns(r2, &(0x7f0000000400))
setns(r3, 0x12020000)
syz_open_procfs(r2, &(0x7f00000003c0)='net/igmp6\x00')
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
pipe(&(0x7f0000019480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(r6)
r7 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000380)={0x1d, r8, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18)
splice(r5, 0x0, r6, 0x0, 0x10500, 0x0)
write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file0/../file0', [{0x20, '/dev/fuse\x00'}, {0x20, '/dev/md0\x00'}], 0xa, "40bb4a6055bf62b9e79a62c52710cc445d01b737bee04ec400fa79891cda475b0450bb43b0b962fbe1475b93c2eab587e99775c39c2498d347d98998005a424b8ec47e80d311352724427d88722afca7717b527ce2ba549cd3d1cd2aaf73664dd866d22cd83b6ef30dd7ff21f385b942b1a64c98b6821d3f6a8cfbf3cd491bf41586a120211af2ab57b801a873627edcdb97fc18024254a9fba5c4fb11fba4b6"}, 0xc9)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x11b4890, 0x0)
rmdir(&(0x7f00000001c0)='./file0/../file0\x00')
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r9, 0x891c, 0x0)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000140)=@md0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])

8m14.354143253s ago: executing program 5 (id=2322):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f0000001300)=""/181, 0x31, 0xb5, 0x1, 0x0, 0x0, @void, @value}, 0x28)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

8m12.978407259s ago: executing program 5 (id=2327):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r2, &(0x7f0000000200)=""/164, 0xa4)
syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0})
getdents(r2, &(0x7f0000000700)=""/90, 0x5a)

8m11.091092308s ago: executing program 39 (id=2327):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r2, &(0x7f0000000200)=""/164, 0xa4)
syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0})
getdents(r2, &(0x7f0000000700)=""/90, 0x5a)

16.2433517s ago: executing program 3 (id=3658):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {0x14}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x24}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r0, 0x1, 0x0)
fchdir(r3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)

14.176991954s ago: executing program 3 (id=3661):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d40)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, r2, 0x3, 0x7, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048000)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x2, &(0x7f0000000040), 0x4)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, 0x0, &(0x7f0000000080))
write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15)
r7 = dup(r5)
write$FUSE_BMAP(r7, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r7, &(0x7f0000000480)={0x18}, 0x18)
write$FUSE_INIT(r7, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}]}})
r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r8, 0x75e7f000)
write$FUSE_INIT(r8, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

14.089442995s ago: executing program 1 (id=3662):
mkdir(0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x3, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x6, 0x842, 0x0, 0x10, 0x0, 0x100, 0x10000, 0x2, 0x8, 0x4000, 0xfffffffc, r2, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50)
creat(&(0x7f0000000180)='./file0/file0\x00', 0x0)
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r3}, 0x10)

13.905719875s ago: executing program 1 (id=3664):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x306, @multicast}, 0x1c, {0x2, 0x4e21, @multicast2}, 'veth0\x00'}) (fail_nth: 2)

12.887644068s ago: executing program 3 (id=3667):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0)
mount(0x0, 0x0, 0x0, 0x200000, 0x0)
syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="120101023253262024040899382e0102030109022d0001813c20000904f9d7f58703d90109050802000206080709058102200009060709050a08000000a505"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$sg(0x0, 0x0, 0x1a3c82)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r1 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$smackfs_netlabel(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x56)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
connect$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x4, 0x3}}, 0x10)

11.383108926s ago: executing program 1 (id=3670):
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0xc2, 0x5d}}]}}]}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x80000, 0x25dfdbfd, {0x2, 0x8, 0xd3, 0xfe, r1}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0xdd, 0x5}}]}, 0x3c}}, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141080, 0x0)
ioctl$SNDCTL_DSP_POST(r2, 0x5008, 0x0)

9.758775765s ago: executing program 6 (id=3673):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {0x14}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x24}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)

9.743749839s ago: executing program 3 (id=3674):
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e23, 0x8000, 0x4e1d, 0x3, 0x2, 0x20, 0x20, 0x33}, {0x80000000, 0x6, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0x7, 0x4d, 0x3, 0x4}, 0x85, 0x0, 0x1, 0x0, 0x3}, {{@in=@local, 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x5, 0x8, 0x1000000}}, 0xe8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[])
write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="25000000030000000000000000000000010000000000000004"], 0x25)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file2'}}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f2c0000000b0a01080000000000000000012300000900020073797a32000000080900010073797a30"], 0xc4}}, 0x24008004)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0x2, 0x3}, 0x6)

8.528446713s ago: executing program 3 (id=3675):
syz_open_dev$sg(0x0, 0x2, 0x4ce681)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0xffffffff)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8)
close(r4)

8.431481992s ago: executing program 0 (id=3676):
socket$isdn(0x22, 0x2, 0x26)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx  \x00'}, 0x20)
syz_open_procfs(0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
open_by_handle_at(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200010004"], 0x51b402)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
r5 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0)
lseek(r5, 0xc4d5, 0x0)
pread64(r5, &(0x7f0000019800)=""/102380, 0x18fec, 0x48)
dup3(r5, 0xffffffffffffffff, 0x80000)

8.300399807s ago: executing program 6 (id=3677):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000102505a1a4400001020301090265dde52d405bc1180bf473c3cda56b48000101000000090400000002060003052406ffffa1f51f00051524120900a317a88b045e4f01a607c0ffcb7e552a15"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000806000003"], 0xfce)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8a95)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000006, 0x80010, r3, 0xffffd000)
socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r2, 0x6, 0xa, &(0x7f0000000040), 0x4)

7.08940699s ago: executing program 1 (id=3678):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r1 = inotify_init1(0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
chmod(&(0x7f0000000240)='./file0\x00', 0xc0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3e, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x6000009)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='^,\x00')

7.04640565s ago: executing program 0 (id=3679):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = accept(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80)
setsockopt(r1, 0x400, 0x7, &(0x7f0000000200)="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", 0x1000)
socket(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x40840}, 0x4010)
socket$vsock_stream(0x28, 0x1, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]})
chdir(&(0x7f0000000100)='./file0\x00')
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56330300000000000000d6e747033a0093b837dc6cc01e32efaec80000ec00120c000140060404000d04009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00", 0x89}], 0x1}, 0x0)

6.027862797s ago: executing program 6 (id=3680):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioperm(0x2, 0xf, 0x9e8f)
r0 = signalfd(0xffffffffffffffff, 0x0, 0xfffffffffffffe82)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x449b}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000cc0)=""/102400, 0x19000)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1, 0x4}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20)
gettid()
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x164}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="0a0001000000648a"], 0x48}}, 0x0)

5.860449456s ago: executing program 0 (id=3681):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r2, 0x6)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000400)={0x7, {{0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3000000}}, 0x0, 0x4, [{{0xa, 0x4e24, 0x8, @mcast2, 0xf1b}}, {{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}}, {{0xa, 0x4e22, 0xa, @mcast1, 0xf2f2}}, {{0xa, 0x4e24, 0x7735, @mcast1, 0x6a7}}]}, 0x290)

5.859599049s ago: executing program 1 (id=3682):
syz_open_dev$tty1(0xc, 0x4, 0x4)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x540, 0x180, 0x180, 0x288, 0x98, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x61}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{}, {0xc}}]}, @TTL={0x28}}, {{@ip={@remote, @local, 0xffffff00, 0xffffff00, 'veth1_vlan\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0x0, 0x5c}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x6]}}}, @common=@addrtype={{}, {0x100, 0x900}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x9}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298b2d52f8acf654)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x804, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1001, 0x7], [0x9, 0x80], 0x108}})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
umount2(0x0, 0x7)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private1, 0x0, 0x2}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
unshare(0x400)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0xffffffff, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xc5, 0x80012d58, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa014101, 0x4e21, 0x3, 'dh\x00', 0x4, 0x50, 0x42}, {@rand_addr=0x64010102, 0x4e1f, 0x2000, 0x40, 0x10000, 0x7}}, 0x44)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100))

5.858921321s ago: executing program 8 (id=3683):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
recvmmsg$unix(r2, &(0x7f0000003c00)=[{{&(0x7f0000000280), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/81, 0x51}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/243, 0xf3}, {&(0x7f0000001680)=""/147, 0x93}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000001740)=""/137, 0x89}, {&(0x7f0000001800)=""/31, 0x1f}, {&(0x7f0000001840)=""/236, 0xec}, {&(0x7f0000003940)=""/207, 0xcf}, {&(0x7f0000003a40)=""/65, 0x41}], 0x9, &(0x7f0000003b80)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x2, 0x82, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0x1000}, 0x18)
r4 = add_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)=@keyring)
request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r4)
r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, r4)
keyctl$read(0x2, r5, &(0x7f0000001940)=""/4086, 0xff6)

5.211505012s ago: executing program 6 (id=3684):
socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000080)=0x40, 0x4)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x8a)
r4 = open(0x0, 0x0, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
fcntl$setlease(r3, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x1e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x4, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x32f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000050)
socket$kcm(0x2d, 0x2, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x0, 0xa8, 0xfeffffff, 0xa8, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x81}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@ip={@empty, @loopback, 0xffffff00, 0xffffffff, 'caif0\x00', 'netpci0\x00', {0xff}, {}, 0x33, 0x0, 0x41}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @gre_key=0x7, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x84)

4.896677375s ago: executing program 0 (id=3685):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x800, 0x0)
poll(&(0x7f0000000ec0), 0x0, 0xc9)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
close(r4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c009900f400000000000400070000000000154cf814a41100ae02a4cd9b13486390af6f219dbc10941cbbdfdb1dcb36b2fd7a32b324dd5b14206990a900"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff2c0d3c1b}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)

4.271110624s ago: executing program 1 (id=3686):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='pagemap\x00')
pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
lseek(r1, 0x1000000, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0)
listen(r2, 0x20000005)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000001ad00)={0xa, 0x5, &(0x7f000001aa40)=ANY=[@ANYBLOB="18080000092a00"/20, @ANYRES32=r0, @ANYBLOB="00000000080000009500000000000000"], &(0x7f000001aa80)='syzkaller\x00', 0x7d7, 0xd7, &(0x7f000001aac0)=""/215, 0x41100, 0x2, '\x00', 0x0, @fallback=0x16, r5, 0x8, &(0x7f000001abc0)={0xa, 0x5}, 0x8, 0x10, &(0x7f000001ac00)={0x4, 0x5, 0x93d, 0x2}, 0x10, 0x0, r0, 0x5, &(0x7f000001ac40)=[r0, r0, r0, r0, r5, r0, r5], &(0x7f000001ac80)=[{0x0, 0x1, 0xd, 0xb}, {0x4, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x9}, {0x2, 0x2, 0xf, 0x6}, {0x4, 0x3, 0xc, 0x2}], 0x10, 0x800, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001b000)={r6, 0x0, 0x3b, 0xf9, &(0x7f000001adc0)="9d1effe720b50ed56398a910dde52a5e2a9c2f3fbed6185054ac255bd162a0937396a25836c7745b616783e591ad76c0ed1961f4cc5423323bb64b", &(0x7f000001ae00)=""/249, 0x5, 0x0, 0x8c, 0x3a, &(0x7f000001af00)="c8e7cb669e3bb47216bd45a5086f7b9e830d592aaebcf291566d3751ad36cec5b6591ea0e24c54e8a41716c458cbd78afb86a34e673ac32a5a99c9d57c8e93375e42f770c1e17d13f6938baea013395ca330b7abbbbb4c30570c39fad8a8d0237ab0d8d5b881cfa4469123105ddd131a7830f5af49cb7e08ea716b94e22dfa8aa48f070d1ffb8e1f629cc061", &(0x7f000001afc0)="2c355d9baf0832440d6201e9274b2517bddc2716e9a34d7f8729a77088c44e1b061159e6016ff876d0450d49faff08530076f1c08af3e8b58025", 0x9, 0x0, 0x9}, 0x50)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8)
r8 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f000001b0c0)=ANY=[@ANYRES8=r1, @ANYRESOCT=r8, @ANYBLOB="654ba539f5f3bc82533d732095dd16eb55b934bcd54ca1f79d38f8b349956ba8b8b41485a2c706ad1dd4849a20fc748f1d6a090be63d9791604e5a31d1b7a2f2eb64e4069bce63ddc8bad12b599fea37115db9db86aea22f9d06197131d015ca63f6c9c32e8743c50229895772820f8ab39f330c15d754b4844490b9f51f7dfe52cdd251e77e39a4b527f5a23d8c4c3e22b6601d244b1bc2fbcd754ec7caa6d3bf6732d8969e6d0c29dedc96a4c920c87c8b1786f67c54c32564bfa65ac09fa119b40a54a05409e62175b885c3c85b37a88ccd890440cd"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000800000000000592b6a6bdeabe559f96e", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x100, 0xe0, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xd, 0x6, 0x275}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)

3.313728513s ago: executing program 0 (id=3687):
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x7ffffffe}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044840}, 0x44000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0)

3.311006316s ago: executing program 8 (id=3688):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)

2.648915637s ago: executing program 8 (id=3689):
socket$isdn(0x22, 0x2, 0x26)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx  \x00'}, 0x20)
syz_open_procfs(0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r4 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
open_by_handle_at(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200010004"], 0x51b402)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
r5 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0)
lseek(r5, 0xc4d5, 0x0)
pread64(r5, &(0x7f0000019800)=""/102380, 0x18fec, 0x48)
dup3(r5, 0xffffffffffffffff, 0x80000)

2.518581027s ago: executing program 0 (id=3690):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x0, 0x40005, 0x29)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd0})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x16, &(0x7f00000005c0)=@framed={{}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6d7}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r3=>r2, {0x0, 0x5}}, './file0\x00'})
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x8841, 0x8)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="6280b26b255f8f12e15c038def3e13e5e65471a48f1007d4d7407adf47e64a177b37d4eaa32eba7f18ef712e37f07d8333e92f10"])
read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x2b, 0x20000000, 0x0, 0x22, 0xe, 0xffe, 0x1, 0x0, 0x0, 0x0, 0x5}}, 0x50)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r3, r4, 0x9, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x2, 0x0, &(0x7f0000000440)=[0x10001, 0x9], 0xa785}}, 0x30)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0)
ioctl$PTP_SYS_OFFSET(r7, 0x40043d14, &(0x7f00000007c0)={0x4012})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r4)
syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x21, 0x55, {0x55, 0x6, "46f6442c4744c2ed31d932863b21b159db2a5c0a775aa0ca58321f0b810fed8e8bea8aef90a622f84bad44154fdafe16805761cdcaf46f91ae97725f3c8d2c93b663113ceefbb699728257a168647aa1490b9d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@fallback=r9, 0x14, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r11, 0x89ec, &(0x7f00000002c0)={0x7, 0x8})
sendmsg$nl_route(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000010}, 0x44804)
r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r12, &(0x7f0000000240)={0x69, 0x3, 0x0, {0x3, 0x5b, 0x0, '\b\xe4\xbb\x1e?U,|?\xc7\xe9\xaa\xa2^\x12\x15\x02\x81?\x00\x01\x00\x00\x01A\xa5\xa3\xcf~m\x06\x00\x00\x00\xf2\x97(\xf7\x18\xefx\xc5\x90\xa2\xe5\xe5\xbfq\x8f\x92ZN\x97\xeb\xdaeu\x16\xc5\xcb\xf7@H\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x01\x9eNX\xbfm\xb8}j\xfe\x00\xc5&\xcf\xb7x\xf5\xe4\xb5\x9cZ\x93p\xb8\x18.`\x8f\a\x00\x00\x00\x00\x00\x00\x00\xc0\xd7\x92\x9b\xb0\xfa\xeagR\xcb\xc1\x80\x92\xa0\x00\x14\x92\x18i\x95\xf1\x02\xe8J(PO\x8a\x81\xa2I1[\x06*\xa0\xf1Z\xdc'}}, 0x69)

1.543081737s ago: executing program 8 (id=3691):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a", 0x5)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT, 0x2)
r2 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
ptrace(0x11, r4)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc}, 0xc)
bind$netlink(r5, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x507}, 0xc)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0xfffe, 0x3, 0x0, 0x0, 0x0})
write$smackfs_logging(r2, 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00@\x00'/28], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000005000000000400000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000080), &(0x7f0000000180)=r9}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000002ac0)=ANY=[@ANYBLOB="180000850000007b00000095000900000000000000000000000000000000cba9c6895953ebdcba0c8c6e11e8d6e7f6caf060062878f027093979186c3c7e5c0b688b2de729979b99ae68686f1bb9c41e3806de209048762d6a56a303c5940ced884fe3d7733efc4fd8c3dbde8dd252d2026879018dd2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="72617702d7a86e6f5d2499bc0000000000663b000022b208b4d7dadc19e2b2807a8e7799afb1b05becc1e034db7300"/58], 0x48)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0x118, 0x118, 0xffffffff, 0x118, 0x118, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@local, @ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, @gre_key=0x6, @port=0x4e24}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x40}, [0x0, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'pim6reg\x00', {}, {}, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@private=0xa010100, @ipv6=@local, @gre_key=0x3, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0)

1.344164734s ago: executing program 6 (id=3692):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = accept(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80)
setsockopt(r1, 0x400, 0x7, &(0x7f0000000200)="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", 0x1000)
socket(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x40840}, 0x4010)
socket$vsock_stream(0x28, 0x1, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]})
chdir(&(0x7f0000000100)='./file0\x00')
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56330300000000000000d6e747033a0093b837dc6cc01e32efaec80000ec00120c000140060404000d04009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00", 0x89}], 0x1}, 0x0)

1.174622559s ago: executing program 3 (id=3693):
open(&(0x7f0000000180)='./cgroup\x00', 0x111200, 0xc0)
socket$inet6(0xa, 0x3, 0xfe)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_io_uring_setup(0x662a, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x7, 0xc2}, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2026c1, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xcb)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x0, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8})
clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6})
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810)

1.119562165s ago: executing program 8 (id=3694):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0)
read$FUSE(r0, &(0x7f0000000f40)={0x2020}, 0x2020)

912.086µs ago: executing program 8 (id=3695):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
restart_syscall()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x9)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), 0x202400, &(0x7f0000000380)={[{@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_null}], [{@euid_eq}]})
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r2, &(0x7f0000000000)='./file0\x00', 0x80, 0x0)
chdir(0x0)
linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00')
chroot(&(0x7f0000000040)='./file1\x00')
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x125, @tick=0xab4, 0x9, {0xff, 0x4}, 0xea, 0x1, 0x4})
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xfc00}, &(0x7f0000000180)=0x8)
syz_open_dev$sg(0x0, 0x0, 0x8002)

0s ago: executing program 6 (id=3696):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa4c81, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r3, 0x0, 0x0, 0x1}])
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0)

kernel console output (not intermixed with test programs):

S network, BSSID 50:50:50:50:50:50
[ 1342.492799][T17086] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1342.560893][T17090] FAULT_INJECTION: forcing a failure.
[ 1342.560893][T17090] name failslab, interval 1, probability 0, space 0, times 0
[ 1342.590874][T17090] CPU: 0 UID: 0 PID: 17090 Comm: syz.3.2977 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[ 1342.590903][T17090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1342.590916][T17090] Call Trace:
[ 1342.590924][T17090]  <TASK>
[ 1342.590933][T17090]  dump_stack_lvl+0x189/0x250
[ 1342.590970][T17090]  ? __pfx____ratelimit+0x10/0x10
[ 1342.591001][T17090]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1342.591030][T17090]  ? __pfx__printk+0x10/0x10
[ 1342.591060][T17090]  ? __pfx___might_resched+0x10/0x10
[ 1342.591083][T17090]  ? fs_reclaim_acquire+0x7d/0x100
[ 1342.591111][T17090]  should_fail_ex+0x414/0x560
[ 1342.591137][T17090]  ? alloc_netdev_mqs+0xa8b/0x11e0
[ 1342.591175][T17090]  should_failslab+0xa8/0x100
[ 1342.591207][T17090]  __kvmalloc_node_noprof+0x168/0x600
[ 1342.591237][T17090]  ? alloc_netdev_mqs+0xa8b/0x11e0
[ 1342.591278][T17090]  alloc_netdev_mqs+0xa8b/0x11e0
[ 1342.591318][T17090]  rtnl_create_link+0x31f/0xd10
[ 1342.591357][T17090]  rtnl_newlink_create+0x25c/0xb00
[ 1342.591398][T17090]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1342.591420][T17090]  ? rtnl_newlink+0x8db/0x1c70
[ 1342.591447][T17090]  ? __pfx___mutex_lock+0x10/0x10
[ 1342.591481][T17090]  ? ns_capable+0x8a/0xf0
[ 1342.591509][T17090]  rtnl_newlink+0x16d6/0x1c70
[ 1342.591535][T17090]  ? netlink_sendmsg+0x805/0xb30
[ 1342.591574][T17090]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1342.591628][T17090]  ? kasan_quarantine_put+0xdd/0x220
[ 1342.591654][T17090]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1342.591681][T17090]  ? nlmon_xmit+0xb0/0x100
[ 1342.591702][T17090]  ? kmem_cache_free+0x18f/0x400
[ 1342.591740][T17090]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1342.591764][T17090]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1342.591785][T17090]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1342.591807][T17090]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1342.591835][T17090]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1342.591864][T17090]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1342.591891][T17090]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1342.591922][T17090]  ? __dev_queue_xmit+0x1cd7/0x3a70
[ 1342.591957][T17090]  ? __lock_acquire+0xab9/0xd20
[ 1342.592008][T17090]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1342.592031][T17090]  rtnetlink_rcv_msg+0x7cc/0xb70
[ 1342.592060][T17090]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1342.592082][T17090]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1342.592103][T17090]  ? ref_tracker_free+0x63a/0x7d0
[ 1342.592122][T17090]  ? __copy_skb_header+0xa7/0x550
[ 1342.592181][T17090]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1342.592205][T17090]  ? __skb_clone+0x63/0x7a0
[ 1342.592242][T17090]  netlink_rcv_skb+0x208/0x470
[ 1342.592267][T17090]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1342.592293][T17090]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1342.592335][T17090]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1342.592360][T17090]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1342.592394][T17090]  netlink_unicast+0x75b/0x8d0
[ 1342.592428][T17090]  netlink_sendmsg+0x805/0xb30
[ 1342.592467][T17090]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1342.592504][T17090]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1342.592524][T17090]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1342.592550][T17090]  __sock_sendmsg+0x21c/0x270
[ 1342.592575][T17090]  ____sys_sendmsg+0x505/0x830
[ 1342.592610][T17090]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1342.592650][T17090]  ? import_iovec+0x74/0xa0
[ 1342.592683][T17090]  ___sys_sendmsg+0x21f/0x2a0
[ 1342.592712][T17090]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1342.592787][T17090]  ? __fget_files+0x2a/0x420
[ 1342.592806][T17090]  ? __fget_files+0x3a0/0x420
[ 1342.592838][T17090]  __x64_sys_sendmsg+0x19b/0x260
[ 1342.592869][T17090]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1342.592909][T17090]  ? __pfx_ksys_write+0x10/0x10
[ 1342.592942][T17090]  ? rcu_is_watching+0x15/0xb0
[ 1342.592972][T17090]  ? do_syscall_64+0xbe/0x3b0
[ 1342.592997][T17090]  do_syscall_64+0xfa/0x3b0
[ 1342.593017][T17090]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1342.593035][T17090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1342.593056][T17090]  ? clear_bhb_loop+0x60/0xb0
[ 1342.593083][T17090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1342.593103][T17090] RIP: 0033:0x7f69a718e969
[ 1342.593121][T17090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1342.593138][T17090] RSP: 002b:00007f69a8020038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1342.593169][T17090] RAX: ffffffffffffffda RBX: 00007f69a73b5fa0 RCX: 00007f69a718e969
[ 1342.593184][T17090] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000007
[ 1342.593197][T17090] RBP: 00007f69a8020090 R08: 0000000000000000 R09: 0000000000000000
[ 1342.593210][T17090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1342.593223][T17090] R13: 0000000000000000 R14: 00007f69a73b5fa0 R15: 00007ffcc6492978
[ 1342.593258][T17090]  </TASK>
[ 1343.139053][T17097] QAT: Invalid ioctl 1073935638
[ 1343.701427][ T5883] usb 2-1: USB disconnect, device number 32
[ 1345.109709][T17120] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[ 1345.116294][T17120] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1345.172437][T17120] vhci_hcd vhci_hcd.0: Device attached
[ 1345.172469][T17123] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10)
[ 1345.184562][T17123] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1345.226650][T17123] vhci_hcd vhci_hcd.0: Device attached
[ 1345.406269][   T43] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[ 1346.088939][T17121] delete_channel: no stack
[ 1346.624480][T17126] vhci_hcd: connection closed
[ 1346.626431][ T9280] vhci_hcd: stop threads
[ 1346.642552][T17125] vhci_hcd: connection reset by peer
[ 1346.652146][ T9280] vhci_hcd: release socket
[ 1346.662363][ T9280] vhci_hcd: disconnect device
[ 1346.672468][ T9280] vhci_hcd: stop threads
[ 1346.682489][ T9280] vhci_hcd: release socket
[ 1346.691576][ T9280] vhci_hcd: disconnect device
[ 1347.987505][T17155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2992'.
[ 1348.676173][T17154] netlink: 293 bytes leftover after parsing attributes in process `syz.6.2993'.
[ 1348.810806][T17157] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1349.735477][T17165] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2996'.
[ 1349.810432][T17167] QAT: Invalid ioctl 1073935638
[ 1350.058371][T17171] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2996'.
[ 1351.038763][   T43] vhci_hcd: vhci_device speed not set
[ 1351.125057][T17184] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[ 1351.334389][T17184] team0: Failed to send options change via netlink (err -105)
[ 1351.342918][T17184] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[ 1351.362994][T17184] team0: Port device team_slave_1 removed
[ 1352.433207][T17189] delete_channel: no stack
[ 1352.549519][   T30] audit: type=1800 audit(1748684557.602:253): pid=17194 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.0.3005" name="/" dev="sockfs" ino=59139 res=0 errno=0
[ 1355.145369][T17224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3015'.
[ 1355.178038][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3014'.
[ 1355.203804][T17224] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1355.214291][T17224] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1355.223677][T17224] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1355.232456][T17224] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1355.441508][T17224] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1355.450560][T17224] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1355.459568][T17224] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1355.468466][T17224] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1355.685607][T17226] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1355.694748][T17226] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1355.703611][T17226] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1355.712395][T17226] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1355.797105][T17226] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1355.806096][T17226] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1355.815009][T17226] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1355.823898][T17226] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1356.494585][T17237] FAULT_INJECTION: forcing a failure.
[ 1356.494585][T17237] name failslab, interval 1, probability 0, space 0, times 0
[ 1356.517720][T17237] CPU: 0 UID: 0 PID: 17237 Comm: syz.8.3019 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[ 1356.517747][T17237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1356.517760][T17237] Call Trace:
[ 1356.517769][T17237]  <TASK>
[ 1356.517778][T17237]  dump_stack_lvl+0x189/0x250
[ 1356.517819][T17237]  ? __pfx____ratelimit+0x10/0x10
[ 1356.517850][T17237]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1356.517879][T17237]  ? __pfx__printk+0x10/0x10
[ 1356.517906][T17237]  ? __pfx___might_resched+0x10/0x10
[ 1356.517934][T17237]  should_fail_ex+0x414/0x560
[ 1356.517962][T17237]  should_failslab+0xa8/0x100
[ 1356.517994][T17237]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1356.518035][T17237]  ? __alloc_skb+0x112/0x2d0
[ 1356.518058][T17237]  ? kasan_quarantine_put+0xdd/0x220
[ 1356.518088][T17237]  __alloc_skb+0x112/0x2d0
[ 1356.518118][T17237]  inet_netconf_notify_devconf+0x173/0x240
[ 1356.518153][T17237]  inetdev_event+0x77f/0x15b0
[ 1356.518191][T17237]  ? __pfx_inetdev_event+0x10/0x10
[ 1356.518233][T17237]  notifier_call_chain+0x1b3/0x3e0
[ 1356.518268][T17237]  unregister_netdevice_many_notify+0x15d8/0x2320
[ 1356.518306][T17237]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1356.518329][T17237]  ? rcu_is_watching+0x15/0xb0
[ 1356.518354][T17237]  ? trace_contention_end+0x39/0x120
[ 1356.518381][T17237]  ? __mutex_lock+0x330/0xe80
[ 1356.518414][T17237]  ? ppp_release+0x87/0x1f0
[ 1356.518444][T17237]  unregister_netdevice_queue+0x33c/0x380
[ 1356.518480][T17237]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 1356.518514][T17237]  ? __pfx_locks_remove_posix+0x10/0x10
[ 1356.518539][T17237]  ? __mutex_unlock_slowpath+0x1cd/0x700
[ 1356.518564][T17237]  ppp_release+0xed/0x1f0
[ 1356.518587][T17237]  ? __pfx_ppp_release+0x10/0x10
[ 1356.518609][T17237]  __fput+0x449/0xa70
[ 1356.518646][T17237]  fput_close_sync+0x119/0x200
[ 1356.518674][T17237]  ? __pfx_fput_close_sync+0x10/0x10
[ 1356.518712][T17237]  __x64_sys_close+0x7f/0x110
[ 1356.518736][T17237]  do_syscall_64+0xfa/0x3b0
[ 1356.518756][T17237]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1356.518775][T17237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.518795][T17237]  ? clear_bhb_loop+0x60/0xb0
[ 1356.518821][T17237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.518841][T17237] RIP: 0033:0x7f5cf198e969
[ 1356.518861][T17237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1356.518880][T17237] RSP: 002b:00007f5cef7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1356.518904][T17237] RAX: ffffffffffffffda RBX: 00007f5cf1bb5fa0 RCX: 00007f5cf198e969
[ 1356.518920][T17237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 1356.518932][T17237] RBP: 00007f5cef7f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1356.518945][T17237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1356.518957][T17237] R13: 0000000000000000 R14: 00007f5cf1bb5fa0 R15: 00007ffc84082868
[ 1356.518991][T17237]  </TASK>
[ 1357.780562][T17244] overlay: Bad value for 'lowerdir'
[ 1360.123064][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3024'.
[ 1360.197325][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3023'.
[ 1360.242236][T17262] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1360.251326][T17262] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1360.260138][T17262] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1360.268921][T17262] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1360.614645][T17262] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1360.624374][T17262] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1360.634741][T17262] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1360.644279][T17262] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1360.660923][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'.
[ 1360.713587][T17272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3027'.
[ 1360.884962][T17265] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1360.893964][T17265] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1360.902794][T17265] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1360.911769][T17265] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1360.938248][ T5928] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1361.000617][T17265] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1361.010060][T17265] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1361.019133][T17265] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1361.028471][T17265] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1361.097972][ T5928] usb 4-1: device descriptor read/64, error -71
[ 1361.348022][ T5928] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1361.487992][ T5928] usb 4-1: device descriptor read/64, error -71
[ 1361.588240][T17278] vivid-007: =================  START STATUS  =================
[ 1361.597640][T17278] vivid-007: Generate PTS: true
[ 1361.598477][ T5928] usb usb4-port1: attempt power cycle
[ 1361.603654][T17278] vivid-007: Generate SCR: true
[ 1361.614146][T17278] tpg source WxH: 320x240 (Y'CbCr)
[ 1361.628785][T17278] tpg field: 1
[ 1361.632222][T17278] tpg crop: (0,0)/320x240
[ 1361.636893][T17278] tpg compose: (0,0)/320x240
[ 1361.647964][T17278] tpg colorspace: 8
[ 1361.651960][T17278] tpg transfer function: 0/0
[ 1361.656751][T17278] tpg Y'CbCr encoding: 0/0
[ 1361.667396][T17278] tpg quantization: 0/0
[ 1361.672564][T17278] tpg RGB range: 0/2
[ 1361.676579][T17278] vivid-007: ==================  END STATUS  ==================
[ 1361.941150][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.947517][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.957130][ T5928] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 1362.892440][ T5928] usb 4-1: device descriptor read/8, error -71
[ 1363.717270][T17275] delete_channel: no stack
[ 1363.995477][T17286] mkiss: ax0: crc mode is auto.
[ 1364.915991][T17306] overlayfs: overlapping lowerdir path
[ 1365.171585][ T5928] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1365.179622][ T5883] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1365.219139][ T5928] usb 4-1: device descriptor read/8, error -71
[ 1365.323258][ T5883] usb 1-1: device descriptor read/64, error -71
[ 1365.338389][ T5928] usb usb4-port1: unable to enumerate USB device
[ 1365.493650][T17311] FAULT_INJECTION: forcing a failure.
[ 1365.493650][T17311] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1365.507079][T17311] CPU: 1 UID: 0 PID: 17311 Comm: syz.8.3040 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[ 1365.507105][T17311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1365.507118][T17311] Call Trace:
[ 1365.507127][T17311]  <TASK>
[ 1365.507136][T17311]  dump_stack_lvl+0x189/0x250
[ 1365.507171][T17311]  ? __pfx____ratelimit+0x10/0x10
[ 1365.507201][T17311]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1365.507231][T17311]  ? __pfx__printk+0x10/0x10
[ 1365.507252][T17311]  ? __might_fault+0xb0/0x130
[ 1365.507294][T17311]  should_fail_ex+0x414/0x560
[ 1365.507322][T17311]  _copy_from_user+0x2d/0xb0
[ 1365.507352][T17311]  __sys_bpf+0x1ed/0x860
[ 1365.507376][T17311]  ? __pfx___sys_bpf+0x10/0x10
[ 1365.507412][T17311]  ? ksys_write+0x22a/0x250
[ 1365.507443][T17311]  ? __pfx_ksys_write+0x10/0x10
[ 1365.507467][T17311]  ? rcu_is_watching+0x15/0xb0
[ 1365.507499][T17311]  __x64_sys_bpf+0x7c/0x90
[ 1365.507529][T17311]  do_syscall_64+0xfa/0x3b0
[ 1365.507548][T17311]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1365.507569][T17311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1365.507589][T17311]  ? clear_bhb_loop+0x60/0xb0
[ 1365.507615][T17311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1365.507635][T17311] RIP: 0033:0x7f5cf198e969
[ 1365.507654][T17311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1365.507672][T17311] RSP: 002b:00007f5cef7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1365.507696][T17311] RAX: ffffffffffffffda RBX: 00007f5cf1bb5fa0 RCX: 00007f5cf198e969
[ 1365.507711][T17311] RDX: 0000000000000022 RSI: 0000200000001bc0 RDI: 000000000000000a
[ 1365.507724][T17311] RBP: 00007f5cef7f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1365.507737][T17311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1365.507749][T17311] R13: 0000000000000000 R14: 00007f5cf1bb5fa0 R15: 00007ffc84082868
[ 1365.507782][T17311]  </TASK>
[ 1365.757955][ T5883] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1365.887891][ T5883] usb 1-1: device descriptor read/64, error -71
[ 1366.015370][ T5883] usb usb1-port1: attempt power cycle
[ 1366.309632][T17321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3041'.
[ 1366.377952][ T5883] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1366.412867][ T5883] usb 1-1: device descriptor read/8, error -71
[ 1366.444415][T17321] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1366.453661][T17321] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1366.462572][T17321] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1366.471871][T17321] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1366.591581][T17321] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1366.602134][T17321] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1366.611193][T17321] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1366.620233][T17321] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1366.698010][ T5883] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1366.758827][ T5883] usb 1-1: device descriptor read/8, error -71
[ 1366.905610][ T5883] usb usb1-port1: unable to enumerate USB device
[ 1367.126261][T17335] vivid-000: disconnect
[ 1367.368371][T11959] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1367.562431][T11959] usb 2-1: config 0 has an invalid interface number: 95 but max is 0
[ 1367.601016][T11959] usb 2-1: config 0 has no interface number 0
[ 1367.649752][T11959] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[ 1367.719166][T11959] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[ 1367.882529][T17343] overlayfs: overlapping lowerdir path
[ 1367.905980][T11959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1367.915994][T11959] usb 2-1: Product: syz
[ 1367.920507][T11959] usb 2-1: Manufacturer: syz
[ 1367.925131][T11959] usb 2-1: SerialNumber: syz
[ 1367.934076][T11959] usb 2-1: config 0 descriptor??
[ 1367.936766][T17345] QAT: Invalid ioctl 1073935638
[ 1368.019681][T17335] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1368.679567][T17338] delete_channel: no stack
[ 1369.088202][T17334] vivid-000: reconnect
[ 1369.091423][T11959] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1369.118032][T11959] usb 2-1: MIDIStreaming interface descriptor not found
[ 1369.301196][T11959] usb 2-1: USB disconnect, device number 33
[ 1369.517119][T17363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3055'.
[ 1370.232132][T17366] udevd[17366]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1373.066159][T17386] usb usb8: usbfs: process 17386 (syz.3.3063) did not claim interface 0 before use
[ 1373.218098][T11959] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[ 1373.232276][T17388] QAT: Invalid ioctl 1073935638
[ 1373.614070][T11959] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[ 1373.753522][T11959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1373.808173][T11959] usb 2-1: config 0 has no interface number 0
[ 1373.898364][T11959] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1373.950859][T11959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1373.970060][T11959] usb 2-1: Product: syz
[ 1373.974268][T11959] usb 2-1: Manufacturer: syz
[ 1373.997913][T11959] usb 2-1: SerialNumber: syz
[ 1374.024393][T17393] ceph: Bad value for 'source'
[ 1374.029663][T11959] usb 2-1: config 0 descriptor??
[ 1374.059191][T11959] hub 2-1:0.31: bad descriptor, ignoring hub
[ 1374.065238][T11959] hub 2-1:0.31: probe with driver hub failed with error -5
[ 1374.127618][T11959] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[ 1374.168129][T11959] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized!
[ 1374.192249][T11959] usb 2-1: Failed to create links for entity 6
[ 1374.221341][T11959] usb 2-1: Failed to register entities (-22).
[ 1374.296783][T11959] usb 2-1: USB disconnect, device number 34
[ 1374.370551][   T30] audit: type=1326 audit(1748684579.432:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17399 comm="syz.0.3068" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa9a458e969 code=0x0
[ 1374.445489][T17404] netlink: 'syz.6.3069': attribute type 3 has an invalid length.
[ 1374.484945][T17404] netlink: 'syz.6.3069': attribute type 1 has an invalid length.
[ 1374.503441][T17404] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.3069'.
[ 1374.552046][T17404] netlink: 788 bytes leftover after parsing attributes in process `syz.6.3069'.
[ 1375.847878][T17415] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1376.109259][T17418] input: syz0 as /devices/virtual/input/input40
[ 1376.219869][T17420] QAT: Invalid ioctl 1073935638
[ 1377.187953][ T5928] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1377.247942][   T10] usb 1-1: new low-speed USB device number 55 using dummy_hcd
[ 1377.379032][ T5928] usb 9-1: Using ep0 maxpacket: 8
[ 1377.397057][ T5928] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[ 1377.417961][ T5928] usb 9-1: config 179 has no interface number 0
[ 1377.424291][ T5928] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1377.452337][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1377.457949][ T5928] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1377.473617][   T10] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[ 1377.495707][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1377.500899][T17442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3083'.
[ 1377.511483][   T10] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[ 1377.695942][T17426] delete_channel: no stack
[ 1377.735495][T17442] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1377.744655][T17442] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1377.753644][T17442] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1377.762476][T17442] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1377.787980][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1377.809920][   T10] usb 1-1: config 0 descriptor??
[ 1377.818633][T17434] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1377.847014][ T5928] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1377.880404][ T5928] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1377.943319][T17442] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1377.953834][T17442] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1377.963420][T17442] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1377.972522][T17442] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1377.981592][ T5928] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1378.003755][ T5928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1378.051383][T17429] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1378.271150][   T10] holtek_mouse 0003:04D9:A067.000A: unbalanced delimiter at end of report description
[ 1378.346854][ T5928] usb 9-1: USB disconnect, device number 27
[ 1378.346908][    C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1378.346939][    C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1378.404082][   T10] holtek_mouse 0003:04D9:A067.000A: hid parse failed: -22
[ 1378.433634][   T10] holtek_mouse 0003:04D9:A067.000A: probe with driver holtek_mouse failed with error -22
[ 1378.514662][   T10] usb 1-1: USB disconnect, device number 55
[ 1378.861814][T17454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3084'.
[ 1378.881305][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3084'.
[ 1379.685111][T17458] netlink: 'syz.8.3089': attribute type 3 has an invalid length.
[ 1379.922477][T17460] QAT: Invalid ioctl 1073935638
[ 1380.718303][ T5883] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1380.978162][ T5883] usb 2-1: Using ep0 maxpacket: 8
[ 1380.994396][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1381.018696][ T5883] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1381.027776][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1381.039877][ T5883] usb 2-1: config 0 descriptor??
[ 1381.050642][ T5883] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1381.217282][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3097'.
[ 1381.268829][T17480] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1381.277678][T17480] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1381.287033][T17480] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1381.296499][T17480] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1381.368302][T17480] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1381.377272][T17480] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1381.386880][T17480] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1381.397609][T17480] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1381.915587][T17470] delete_channel: no stack
[ 1383.507368][ T5883] gspca_vc032x: reg_w err -110
[ 1383.513108][ T5883] vc032x 2-1:0.0: probe with driver vc032x failed with error -110
[ 1384.021108][T16180] usb 2-1: USB disconnect, device number 35
[ 1386.289588][T17512] QAT: Invalid ioctl 1073935638
[ 1386.608099][T17514] tmpfs: Unknown parameter 'usrquota@'
[ 1387.070405][T17518] 9pnet_fd: Insufficient options for proto=fd
[ 1389.679607][T17539] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3116'.
[ 1390.010227][T17546] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3119'.
[ 1390.034746][T17546] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3119'.
[ 1390.044071][   T30] audit: type=1326 audit(1748684595.092:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17545 comm="syz.3.3120" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69a718e969 code=0x0
[ 1390.119362][T17556] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000
[ 1390.412942][T17528] delete_channel: no stack
[ 1391.085053][T17583] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000'
[ 1391.209171][T17585] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000'
[ 1392.094068][T17596] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1392.168188][ T5928] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1392.352220][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1392.378457][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1392.398054][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1392.422016][ T5928] usb 1-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00
[ 1392.452576][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1392.494275][ T5928] usb 1-1: config 0 descriptor??
[ 1392.816078][ T5883] IPVS: starting estimator thread 0...
[ 1392.937999][T17604] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1393.113965][T17610] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1393.127199][T17601] delete_channel: no stack
[ 1393.131826][T16647] Bluetooth: hci4: command 0x1003 tx timeout
[ 1393.138871][ T5826] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1393.180946][ T5928] wacom 0003:056A:0027.000B: unbalanced collection at end of report description
[ 1393.199477][ T5928] wacom 0003:056A:0027.000B: parse failed
[ 1393.208457][ T5928] wacom 0003:056A:0027.000B: probe with driver wacom failed with error -22
[ 1395.360748][T17617] xt_CT: No such helper "pptp"
[ 1396.050230][  T981] usb 1-1: USB disconnect, device number 56
[ 1396.365640][T17629] FAULT_INJECTION: forcing a failure.
[ 1396.365640][T17629] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1396.379851][T17629] CPU: 1 UID: 0 PID: 17629 Comm: syz.8.3144 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[ 1396.379878][T17629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1396.379890][T17629] Call Trace:
[ 1396.379899][T17629]  <TASK>
[ 1396.379909][T17629]  dump_stack_lvl+0x189/0x250
[ 1396.379943][T17629]  ? __pfx____ratelimit+0x10/0x10
[ 1396.379975][T17629]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1396.380004][T17629]  ? __pfx__printk+0x10/0x10
[ 1396.380039][T17629]  should_fail_ex+0x414/0x560
[ 1396.380066][T17629]  _copy_to_user+0x31/0xb0
[ 1396.380097][T17629]  simple_read_from_buffer+0xe1/0x170
[ 1396.380132][T17629]  proc_fail_nth_read+0x1df/0x250
[ 1396.380158][T17629]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1396.380184][T17629]  ? rw_verify_area+0x258/0x650
[ 1396.380210][T17629]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1396.380234][T17629]  vfs_read+0x1fd/0x980
[ 1396.380271][T17629]  ? __pfx_vfs_read+0x10/0x10
[ 1396.380305][T17629]  ? rcu_is_watching+0x15/0xb0
[ 1396.380329][T17629]  ? __rseq_handle_notify_resume+0x37e/0x11f0
[ 1396.380363][T17629]  ksys_read+0x145/0x250
[ 1396.380393][T17629]  ? __pfx_ksys_read+0x10/0x10
[ 1396.380426][T17629]  ? do_syscall_64+0xbe/0x3b0
[ 1396.380451][T17629]  do_syscall_64+0xfa/0x3b0
[ 1396.380470][T17629]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1396.380489][T17629]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1396.380510][T17629]  ? clear_bhb_loop+0x60/0xb0
[ 1396.380535][T17629]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1396.380555][T17629] RIP: 0033:0x7f5cf198d37c
[ 1396.380573][T17629] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1396.380590][T17629] RSP: 002b:00007f5cef7b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1396.380613][T17629] RAX: ffffffffffffffda RBX: 00007f5cf1bb6160 RCX: 00007f5cf198d37c
[ 1396.380628][T17629] RDX: 000000000000000f RSI: 00007f5cef7b40a0 RDI: 0000000000000005
[ 1396.380641][T17629] RBP: 00007f5cef7b4090 R08: 0000000000000000 R09: 0000000000000000
[ 1396.380654][T17629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1396.380666][T17629] R13: 0000000000000000 R14: 00007f5cf1bb6160 R15: 00007ffc84082868
[ 1396.380706][T17629]  </TASK>
[ 1398.080041][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3156'.
[ 1398.123819][T17658] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1398.218020][ T5885] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1398.507929][ T5885] usb 9-1: Using ep0 maxpacket: 16
[ 1398.585763][ T5928] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1398.626786][ T5885] usb 9-1: config 0 has an invalid interface number: 4 but max is 1
[ 1398.645392][ T5885] usb 9-1: config 0 has an invalid interface number: 4 but max is 1
[ 1398.666402][ T5885] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1398.679582][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3162'.
[ 1398.691918][ T5885] usb 9-1: config 0 has no interface number 0
[ 1398.698324][ T5885] usb 9-1: config 0 interface 4 altsetting 9 endpoint 0xF has an invalid bInterval 255, changing to 11
[ 1398.710683][ T5885] usb 9-1: config 0 interface 4 altsetting 4 endpoint 0xE has invalid wMaxPacketSize 0
[ 1398.750015][ T5885] usb 9-1: config 0 interface 4 altsetting 4 bulk endpoint 0xE has invalid maxpacket 0
[ 1398.761707][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3162'.
[ 1398.777420][ T5885] usb 9-1: config 0 interface 4 has no altsetting 0
[ 1398.781402][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3162'.
[ 1398.784798][ T5885] usb 9-1: config 0 interface 4 has no altsetting 1
[ 1398.810247][ T5928] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1398.820403][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1398.826396][ T5885] usb 9-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82
[ 1398.852251][ T5928] usb 2-1: config 0 descriptor??
[ 1398.863622][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1398.894382][ T5885] usb 9-1: config 0 descriptor??
[ 1399.157903][ T5883] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1399.209872][ T5928] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1399.210785][ T5885] usb 9-1: string descriptor 0 read error: -71
[ 1399.250565][ T5885] usb 9-1: USB disconnect, device number 28
[ 1399.357907][ T5883] usb 4-1: Using ep0 maxpacket: 32
[ 1400.135052][ T5883] usb 4-1: config 0 has an invalid interface number: 207 but max is 0
[ 1400.142959][T17660] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3157'.
[ 1400.148045][ T5883] usb 4-1: config 0 has no interface number 0
[ 1400.161038][ T5928] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[ 1400.176628][ T5883] usb 4-1: config 0 interface 207 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8
[ 1400.186810][ T5928] [drm] Initialized udl on minor 2
[ 1400.200480][T17660] sg_write: process 1002 (syz.1.3157) changed security contexts after opening file descriptor, this is not allowed.
[ 1400.202035][ T5883] usb 4-1: config 0 interface 207 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 1400.225908][ T5883] usb 4-1: config 0 interface 207 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1400.268123][ T5883] usb 4-1: config 0 interface 207 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[ 1400.301245][T17660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1400.318496][T17660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1400.326386][ T5883] usb 4-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=f3.c7
[ 1400.337285][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1400.348526][ T5928] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1400.366415][ T5928] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1400.392421][ T5883] usb 4-1: config 0 descriptor??
[ 1400.412797][T16180] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1400.428709][T17671] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1400.436857][ T5928] usb 2-1: USB disconnect, device number 36
[ 1400.447167][T16180] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1400.455065][T17671] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1400.463522][T17671] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1400.527361][ T5883] usb 4-1: can't set first interface for hiFace device.
[ 1400.554247][ T5883] snd-usb-hiface 4-1:0.207: probe with driver snd-usb-hiface failed with error -5
[ 1401.086508][ T5883] usb 4-1: USB disconnect, device number 34
[ 1401.151299][T17707] QAT: Invalid ioctl 1073935638
[ 1402.021963][T17718] 9pnet_fd: Insufficient options for proto=fd
[ 1402.380076][   T30] audit: type=1326 audit(1748684607.442:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17723 comm="syz.6.3177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa23678e969 code=0x0
[ 1402.677951][ T5928] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1402.948165][ T5928] usb 9-1: Using ep0 maxpacket: 32
[ 1402.986010][ T5928] usb 9-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af
[ 1402.998003][ T5928] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1403.025106][ T5928] usb 9-1: Product: syz
[ 1403.042515][ T5928] usb 9-1: Manufacturer: syz
[ 1403.065776][ T5928] usb 9-1: SerialNumber: syz
[ 1403.789342][ T5928] usb 9-1: config 0 descriptor??
[ 1403.833600][ T5928] gspca_main: sunplus-2.14.0 probing 046d:0960
[ 1404.000516][ T5928] gspca_sunplus: reg_w_riv err -71
[ 1404.002985][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3183'.
[ 1404.023296][ T5928] sunplus 9-1:0.0: probe with driver sunplus failed with error -71
[ 1404.033191][T17744] syz_tun: entered allmulticast mode
[ 1404.052629][ T5928] usb 9-1: USB disconnect, device number 29
[ 1404.115589][T17746] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3183'.
[ 1404.315467][T17746] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[ 1404.367225][T17742] syz_tun: left allmulticast mode
[ 1405.762969][   T30] audit: type=1800 audit(1748684610.822:257): pid=17759 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.3188" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[ 1405.866764][T17763] QAT: Invalid ioctl 1073935638
[ 1409.242358][T17792] FAULT_INJECTION: forcing a failure.
[ 1409.242358][T17792] name failslab, interval 1, probability 0, space 0, times 0
[ 1409.307970][T17792] CPU: 0 UID: 0 PID: 17792 Comm: syz.3.3197 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[ 1409.308000][T17792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1409.308014][T17792] Call Trace:
[ 1409.308023][T17792]  <TASK>
[ 1409.308032][T17792]  dump_stack_lvl+0x189/0x250
[ 1409.308067][T17792]  ? __pfx____ratelimit+0x10/0x10
[ 1409.308100][T17792]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1409.308130][T17792]  ? __pfx__printk+0x10/0x10
[ 1409.308159][T17792]  ? __pfx___might_resched+0x10/0x10
[ 1409.308181][T17792]  ? fs_reclaim_acquire+0x7d/0x100
[ 1409.308210][T17792]  should_fail_ex+0x414/0x560
[ 1409.308239][T17792]  should_failslab+0xa8/0x100
[ 1409.308273][T17792]  __kmalloc_noprof+0xcb/0x4f0
[ 1409.308302][T17792]  ? snd_ctl_elem_add+0x429/0xa60
[ 1409.308329][T17792]  ? snd_ctl_elem_add+0x436/0xa60
[ 1409.308365][T17792]  snd_ctl_elem_add+0x436/0xa60
[ 1409.308411][T17792]  snd_ctl_ioctl+0xcc7/0x1ad0
[ 1409.308442][T17792]  ? stack_trace_save+0x9c/0xe0
[ 1409.308473][T17792]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[ 1409.308510][T17792]  ? kasan_save_track+0x4f/0x80
[ 1409.308534][T17792]  ? kasan_save_track+0x3e/0x80
[ 1409.308557][T17792]  ? kasan_save_free_info+0x46/0x50
[ 1409.308577][T17792]  ? __kasan_slab_free+0x62/0x70
[ 1409.308601][T17792]  ? kfree+0x18e/0x440
[ 1409.308624][T17792]  ? tomoyo_path_number_perm+0x47a/0x5a0
[ 1409.308643][T17792]  ? security_file_ioctl+0xcb/0x2d0
[ 1409.308663][T17792]  ? __se_sys_ioctl+0x47/0x170
[ 1409.308684][T17792]  ? do_syscall_64+0xfa/0x3b0
[ 1409.308702][T17792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1409.308780][T17792]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1409.308804][T17792]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1409.308826][T17792]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 1409.308856][T17792]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1409.308877][T17792]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1409.308897][T17792]  ? smack_log+0xef/0x3f0
[ 1409.308928][T17792]  ? __pfx_smack_log+0x10/0x10
[ 1409.308956][T17792]  ? smk_access+0x14c/0x4e0
[ 1409.308991][T17792]  ? smk_tskacc+0x2fc/0x370
[ 1409.309027][T17792]  ? smack_file_ioctl+0x2a9/0x340
[ 1409.309060][T17792]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1409.309105][T17792]  ? ksys_write+0x1e1/0x250
[ 1409.309141][T17792]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1409.309166][T17792]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[ 1409.309195][T17792]  __se_sys_ioctl+0xfc/0x170
[ 1409.309224][T17792]  do_syscall_64+0xfa/0x3b0
[ 1409.309244][T17792]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1409.309265][T17792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1409.309286][T17792]  ? clear_bhb_loop+0x60/0xb0
[ 1409.309310][T17792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1409.309328][T17792] RIP: 0033:0x7f69a718e969
[ 1409.309347][T17792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1409.309365][T17792] RSP: 002b:00007f69a8020038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1409.309387][T17792] RAX: ffffffffffffffda RBX: 00007f69a73b5fa0 RCX: 00007f69a718e969
[ 1409.309402][T17792] RDX: 0000200000000700 RSI: 00000000c1105517 RDI: 0000000000000003
[ 1409.309416][T17792] RBP: 00007f69a8020090 R08: 0000000000000000 R09: 0000000000000000
[ 1409.309428][T17792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1409.309440][T17792] R13: 0000000000000000 R14: 00007f69a73b5fa0 R15: 00007ffcc6492978
[ 1409.309475][T17792]  </TASK>
[ 1409.763238][T17794] Smack: duplicate mount options
[ 1410.256816][T17808] ptrace attach of "./syz-executor exec"[11737] was attempted by "\x09   
              ¬                                                                 
                                       T    µ•        \x0a       
  @                þ€             ª     ÿÿÿÿ                                  ÿÿÿÿ                                   
                       @                                                                                  \x0a          þ€                                                                                                                                             
       »                l                      
                                            
   ,½p þÛß%\x09  syz0     A rxe  3 ip6erspan0      \x09  syz2     A siw  3 nr0             \x09  syz2     A siw  3 geneve1 €       T           ÷ÿÿÿÿÿÿÿ 3 dvmrp1       àÿÿ  syz1     A rxe  3 ipvlan1         \x09  syz2    A rxe  3 wg1                                                     
[ 1410.388213][T11959] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1410.777135][T11959] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[ 1410.847917][T11959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1411.274502][T11959] usb 2-1: config 0 descriptor??
[ 1411.333276][T11959] gspca_main: sunplus-2.14.0 probing 055f:c420
[ 1411.541758][T17823] input: syz1 as /devices/virtual/input/input41
[ 1412.080809][T11959] gspca_sunplus: reg_w_riv err -110
[ 1412.131838][T11959] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[ 1412.144412][T17805] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1412.187785][T17805] CIFS mount error: No usable UNC path provided in device string!
[ 1412.187785][T17805] 
[ 1412.200650][T17805] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1412.202489][T17823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1412.238286][ T5883] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1412.299115][ T5928] usb 2-1: USB disconnect, device number 37
[ 1412.421226][ T5883] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1412.431508][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1412.443784][ T5883] usb 9-1: config 0 descriptor??
[ 1414.327907][  T981] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1414.456056][ T5883] usb 9-1: Cannot read MAC address
[ 1414.473649][ T5883] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1414.515181][ T5883] usb 9-1: USB disconnect, device number 30
[ 1414.540074][  T981] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50
[ 1414.572886][  T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1414.593277][  T981] usb 1-1: Product: syz
[ 1414.599201][  T981] usb 1-1: Manufacturer: syz
[ 1414.605633][  T981] usb 1-1: SerialNumber: syz
[ 1414.631493][  T981] usb 1-1: config 0 descriptor??
[ 1414.653796][  T981] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[ 1415.442634][T17869] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1415.851266][T17878] No buffer was provided with the request
[ 1417.279768][ T5883] usb 1-1: USB disconnect, device number 57
[ 1417.884107][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'.
[ 1419.108183][   T30] audit: type=1800 audit(1748684624.162:258): pid=17917 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3233" name=A0F29C1437B3CFF8C3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=62939 res=0 errno=0
[ 1419.189798][T17919] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (22)
[ 1419.732897][   T30] audit: type=1326 audit(1748684624.792:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17923 comm="syz.6.3241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa23678e969 code=0x0
[ 1420.008025][T16180] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1420.182854][T16180] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50
[ 1420.203994][T16180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1420.223215][T16180] usb 1-1: Product: syz
[ 1420.232986][T16180] usb 1-1: Manufacturer: syz
[ 1420.245401][T16180] usb 1-1: SerialNumber: syz
[ 1420.261643][T16180] usb 1-1: config 0 descriptor??
[ 1420.284114][T16180] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[ 1421.084496][ T5826] Bluetooth: hci1: command tx timeout
[ 1421.897447][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3247'.
[ 1423.658407][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.664804][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1424.194243][ T5883] usb 1-1: USB disconnect, device number 58
[ 1424.987465][T17968] fuse: Bad value for 'max_read'
[ 1425.755460][T17976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3258'.
[ 1426.182527][   T30] audit: type=1326 audit(1748684630.982:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17973 comm="syz.1.3256" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3af198e969 code=0x0
[ 1426.710819][T17982] lo speed is unknown, defaulting to 1000
[ 1426.998892][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'.
[ 1427.543951][T17999] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1427.692959][T18003] FAULT_INJECTION: forcing a failure.
[ 1427.692959][T18003] name failslab, interval 1, probability 0, space 0, times 0
[ 1427.727655][T18003] CPU: 1 UID: 0 PID: 18003 Comm: syz.3.3266 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[ 1427.727686][T18003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1427.727698][T18003] Call Trace:
[ 1427.727707][T18003]  <TASK>
[ 1427.727717][T18003]  dump_stack_lvl+0x189/0x250
[ 1427.727751][T18003]  ? __pfx____ratelimit+0x10/0x10
[ 1427.727788][T18003]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1427.727817][T18003]  ? __pfx__printk+0x10/0x10
[ 1427.727846][T18003]  ? __pfx___might_resched+0x10/0x10
[ 1427.727869][T18003]  ? fs_reclaim_acquire+0x7d/0x100
[ 1427.727898][T18003]  should_fail_ex+0x414/0x560
[ 1427.727927][T18003]  should_failslab+0xa8/0x100
[ 1427.727960][T18003]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1427.727989][T18003]  ? rxrpc_lookup_local+0x54e/0x1410
[ 1427.728022][T18003]  rxrpc_lookup_local+0x54e/0x1410
[ 1427.728061][T18003]  ? __pfx_rxrpc_lookup_local+0x10/0x10
[ 1427.728099][T18003]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1427.728122][T18003]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1427.728145][T18003]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1427.728169][T18003]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1427.728196][T18003]  ? do_raw_spin_unlock+0x122/0x240
[ 1427.728231][T18003]  rxrpc_sendmsg+0x399/0x710
[ 1427.728262][T18003]  ? __pfx_rxrpc_sendmsg+0x10/0x10
[ 1427.728288][T18003]  __sock_sendmsg+0x21c/0x270
[ 1427.728314][T18003]  ____sys_sendmsg+0x505/0x830
[ 1427.728348][T18003]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1427.728388][T18003]  ? import_iovec+0x74/0xa0
[ 1427.728422][T18003]  ___sys_sendmsg+0x21f/0x2a0
[ 1427.728460][T18003]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1427.728534][T18003]  ? __fget_files+0x2a/0x420
[ 1427.728553][T18003]  ? __fget_files+0x3a0/0x420
[ 1427.728587][T18003]  __x64_sys_sendmsg+0x19b/0x260
[ 1427.728618][T18003]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1427.728660][T18003]  ? __pfx_ksys_write+0x10/0x10
[ 1427.728684][T18003]  ? rcu_is_watching+0x15/0xb0
[ 1427.728715][T18003]  ? do_syscall_64+0xbe/0x3b0
[ 1427.728741][T18003]  do_syscall_64+0xfa/0x3b0
[ 1427.728760][T18003]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1427.728779][T18003]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.728799][T18003]  ? clear_bhb_loop+0x60/0xb0
[ 1427.728825][T18003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.728844][T18003] RIP: 0033:0x7f69a718e969
[ 1427.728863][T18003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1427.728881][T18003] RSP: 002b:00007f69a8020038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1427.728905][T18003] RAX: ffffffffffffffda RBX: 00007f69a73b5fa0 RCX: 00007f69a718e969
[ 1427.728919][T18003] RDX: 000000000000fc00 RSI: 0000200000000080 RDI: 0000000000000003
[ 1427.728933][T18003] RBP: 00007f69a8020090 R08: 0000000000000000 R09: 0000000000000000
[ 1427.728945][T18003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1427.728957][T18003] R13: 0000000000000000 R14: 00007f69a73b5fa0 R15: 00007ffcc6492978
[ 1427.728991][T18003]  </TASK>
[ 1428.090802][T18006] IPVS: set_ctl: invalid protocol: 21717 172.20.20.187:0
[ 1428.113456][   T30] audit: type=1800 audit(1748684633.142:261): pid=18006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.3267" name="file1" dev="tmpfs" ino=1888 res=0 errno=0
[ 1428.338413][ T5885] usb 9-1: new full-speed USB device number 31 using dummy_hcd
[ 1428.488359][ T5885] usb 9-1: device descriptor read/64, error -71
[ 1428.746948][ T5885] usb 9-1: new full-speed USB device number 32 using dummy_hcd
[ 1428.887376][ T5885] usb 9-1: device descriptor read/64, error -71
[ 1429.138404][ T5885] usb usb9-port1: attempt power cycle
[ 1430.127455][ T5885] usb 9-1: new full-speed USB device number 33 using dummy_hcd
[ 1430.150161][ T5885] usb 9-1: device descriptor read/8, error -71
[ 1430.675190][ T5826] Bluetooth: hci0: SCO packet for unknown connection handle 200
[ 1430.728657][ T5885] usb 9-1: new full-speed USB device number 34 using dummy_hcd
[ 1430.829742][ T5885] usb 9-1: device descriptor read/8, error -71
[ 1430.938201][ T5885] usb usb9-port1: unable to enumerate USB device
[ 1431.536084][T18053] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3282'.
[ 1432.621465][T18070] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3287'.
[ 1436.507517][T18106] cgroup: Invalid name
[ 1436.617982][T16180] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1436.778488][T16180] usb 4-1: Using ep0 maxpacket: 16
[ 1436.795517][T16180] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1436.820113][T16180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1436.830804][T16180] usb 4-1: Product: syz
[ 1436.835086][T16180] usb 4-1: Manufacturer: syz
[ 1436.840404][T16180] usb 4-1: SerialNumber: syz
[ 1436.852791][T16180] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1436.860576][T16180] r8152-cfgselector 4-1: config 0 descriptor??
[ 1437.529642][T16180] r8152-cfgselector 4-1: USB disconnect, device number 35
[ 1439.131125][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3305'.
[ 1439.958464][   T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 1440.028050][T16180] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1440.103249][   T10] usb 1-1: device descriptor read/64, error -71
[ 1440.188172][T16180] usb 4-1: Using ep0 maxpacket: 32
[ 1440.205524][T18148] exfat: Unknown parameter 'discardu/#/msr'
[ 1440.206684][T16180] usb 4-1: config 0 has an invalid interface number: 207 but max is 0
[ 1440.327736][T16180] usb 4-1: config 0 has no interface number 0
[ 1440.335573][T16180] usb 4-1: config 0 interface 207 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8
[ 1440.418967][T16180] usb 4-1: config 0 interface 207 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 1440.428922][   T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1440.496574][T16180] usb 4-1: config 0 interface 207 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1440.573516][   T10] usb 1-1: device descriptor read/64, error -71
[ 1440.584502][T16180] usb 4-1: config 0 interface 207 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[ 1440.688159][T16180] usb 4-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=f3.c7
[ 1440.701831][   T10] usb usb1-port1: attempt power cycle
[ 1440.711630][T16180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1440.779349][T16180] usb 4-1: config 0 descriptor??
[ 1440.788698][T18140] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1440.796148][T18140] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1440.838329][T18140] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1440.862066][T16180] usb 4-1: can't set first interface for hiFace device.
[ 1440.893115][T16180] snd-usb-hiface 4-1:0.207: probe with driver snd-usb-hiface failed with error -5
[ 1441.058384][   T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1441.127724][   T10] usb 1-1: device descriptor read/8, error -71
[ 1441.719796][   T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1441.878230][   T10] usb 1-1: device descriptor read/8, error -71
[ 1441.927150][ T6686] usb 4-1: USB disconnect, device number 36
[ 1442.000412][   T10] usb usb1-port1: unable to enumerate USB device
[ 1443.479395][T18167] affs: No valid root block on device nullb0
[ 1444.432990][  T981] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1444.747933][  T981] usb 1-1: Using ep0 maxpacket: 32
[ 1445.373548][  T981] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 1445.416839][  T981] usb 1-1: config 0 has no interface number 0
[ 1445.440872][  T981] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1445.468752][  T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1445.497671][  T981] usb 1-1: Product: syz
[ 1445.517676][  T981] usb 1-1: Manufacturer: syz
[ 1445.526855][  T981] usb 1-1: SerialNumber: syz
[ 1445.560226][  T981] usb 1-1: config 0 descriptor??
[ 1445.571225][  T981] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1445.652115][T18196] loop6: detected capacity change from 0 to 524287999
[ 1445.727982][T11959] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1445.739475][T18196] netlink: 'syz.8.3322': attribute type 12 has an invalid length.
[ 1445.926707][T11959] usb 2-1: device descriptor read/64, error -71
[ 1446.188931][T11959] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1446.293513][  T981] usb 1-1: qt2_attach - failed to power on unit: -71
[ 1446.334134][  T981] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71
[ 1446.346160][T11959] usb 2-1: device descriptor read/64, error -71
[ 1446.379546][  T981] usb 1-1: USB disconnect, device number 63
[ 1446.478298][T11959] usb usb2-port1: attempt power cycle
[ 1446.908576][T11959] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1447.058527][T11959] usb 2-1: device descriptor read/8, error -71
[ 1448.124862][T11959] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1448.308286][T11959] usb 2-1: device descriptor read/8, error -71
[ 1448.469616][T11959] usb usb2-port1: unable to enumerate USB device
[ 1449.243438][T18222] delete_channel: no stack
[ 1454.104505][T18278] FAULT_INJECTION: forcing a failure.
[ 1454.104505][T18278] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1454.948180][T18278] CPU: 0 UID: 0 PID: 18278 Comm: syz.0.3345 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[ 1454.948218][T18278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1454.948229][T18278] Call Trace:
[ 1454.948238][T18278]  <TASK>
[ 1454.948247][T18278]  dump_stack_lvl+0x189/0x250
[ 1454.948281][T18278]  ? __pfx____ratelimit+0x10/0x10
[ 1454.948312][T18278]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1454.948341][T18278]  ? __pfx__printk+0x10/0x10
[ 1454.948365][T18278]  ? fs_reclaim_acquire+0x7d/0x100
[ 1454.948399][T18278]  should_fail_ex+0x414/0x560
[ 1454.948430][T18278]  prepare_alloc_pages+0x213/0x610
[ 1454.948463][T18278]  __alloc_frozen_pages_noprof+0x123/0x370
[ 1454.948494][T18278]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1454.948529][T18278]  ? policy_nodemask+0x27c/0x720
[ 1454.948567][T18278]  alloc_pages_mpol+0x232/0x4a0
[ 1454.948606][T18278]  folio_alloc_mpol_noprof+0x39/0x70
[ 1454.948640][T18278]  shmem_alloc_and_add_folio+0x447/0xf60
[ 1454.948674][T18278]  ? filemap_get_entry+0xad/0x2f0
[ 1454.948702][T18278]  ? filemap_get_entry+0xad/0x2f0
[ 1454.948728][T18278]  ? filemap_get_entry+0xad/0x2f0
[ 1454.948758][T18278]  ? filemap_get_entry+0x28f/0x2f0
[ 1454.948791][T18278]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1454.948830][T18278]  ? shmem_allowable_huge_orders+0x1f8/0x420
[ 1454.948860][T18278]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[ 1454.948894][T18278]  shmem_get_folio_gfp+0x59d/0x1660
[ 1454.948947][T18278]  shmem_write_begin+0xf7/0x2b0
[ 1454.948987][T18278]  generic_perform_write+0x2c7/0x910
[ 1454.949025][T18278]  ? __pfx_generic_perform_write+0x10/0x10
[ 1454.949046][T18278]  ? do_raw_spin_unlock+0x122/0x240
[ 1454.949075][T18278]  ? mnt_put_write_access_file+0xc0/0x100
[ 1454.949103][T18278]  ? file_update_time+0x416/0x490
[ 1454.949134][T18278]  shmem_file_write_iter+0xf8/0x120
[ 1454.949159][T18278]  do_iter_readv_writev+0x518/0x6e0
[ 1454.949194][T18278]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 1454.949230][T18278]  ? rcu_read_lock_any_held+0xb3/0x120
[ 1454.949278][T18278]  vfs_writev+0x31a/0x960
[ 1454.949305][T18278]  ? __lock_acquire+0xab9/0xd20
[ 1454.949329][T18278]  ? __pfx_vfs_writev+0x10/0x10
[ 1454.949371][T18278]  ? __fget_files+0x2a/0x420
[ 1454.949396][T18278]  ? __fget_files+0x3a0/0x420
[ 1454.949413][T18278]  ? __fget_files+0x2a/0x420
[ 1454.949444][T18278]  do_writev+0x14d/0x2d0
[ 1454.949468][T18278]  ? __pfx_do_writev+0x10/0x10
[ 1454.949487][T18278]  ? rcu_is_watching+0x15/0xb0
[ 1454.949519][T18278]  ? do_syscall_64+0xbe/0x3b0
[ 1454.949546][T18278]  do_syscall_64+0xfa/0x3b0
[ 1454.949566][T18278]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1454.949586][T18278]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1454.949606][T18278]  ? clear_bhb_loop+0x60/0xb0
[ 1454.949632][T18278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1454.949652][T18278] RIP: 0033:0x7fa9a458e969
[ 1454.949671][T18278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1454.949688][T18278] RSP: 002b:00007fa9a5449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1454.949711][T18278] RAX: ffffffffffffffda RBX: 00007fa9a47b6080 RCX: 00007fa9a458e969
[ 1454.949726][T18278] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007
[ 1454.949739][T18278] RBP: 00007fa9a5449090 R08: 0000000000000000 R09: 0000000000000000
[ 1454.949751][T18278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1454.949763][T18278] R13: 0000000000000000 R14: 00007fa9a47b6080 R15: 00007ffc056ac8c8
[ 1454.949799][T18278]  </TASK>
[ 1455.655716][T18293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3351'.
[ 1455.672599][T18293] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1455.681412][T18293] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1455.690326][T18293] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1455.699149][T18293] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1455.709239][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3352'.
[ 1455.780398][T16180] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1455.827094][T18293] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1455.837565][T18293] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1455.847390][T18293] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1455.856509][T18293] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1455.957180][T18296] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1455.966091][T18296] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1455.975592][T18296] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1455.984580][T18296] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1455.993961][T16180] usb 9-1: Using ep0 maxpacket: 32
[ 1456.001294][T16180] usb 9-1: config 0 has an invalid interface number: 207 but max is 0
[ 1456.011428][T16180] usb 9-1: config 0 has no interface number 0
[ 1456.018547][T16180] usb 9-1: config 0 interface 207 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8
[ 1456.035912][T16180] usb 9-1: config 0 interface 207 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 1456.052896][T16180] usb 9-1: config 0 interface 207 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1456.064731][T16180] usb 9-1: config 0 interface 207 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[ 1456.075650][T18296] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1456.085887][T18296] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1456.095470][T18296] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1456.104452][T18296] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1456.114432][T16180] usb 9-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=f3.c7
[ 1456.128212][T16180] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1456.168767][T16180] usb 9-1: config 0 descriptor??
[ 1456.174779][T18285] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1456.192899][T18285] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1456.201301][T18285] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1456.216122][T16180] usb 9-1: can't set first interface for hiFace device.
[ 1456.225263][T16180] snd-usb-hiface 9-1:0.207: probe with driver snd-usb-hiface failed with error -5
[ 1456.341494][T18309] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3357'.
[ 1456.448328][T18300] futex_wake_op: syz.0.3354 tries to shift op by -1; fix this program
[ 1457.046349][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3359'.
[ 1457.798237][  T981] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1458.068568][  T981] usb 2-1: Using ep0 maxpacket: 32
[ 1458.087289][  T981] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1458.294527][  T981] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1459.160353][  T981] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1459.244304][T16180] usb 9-1: USB disconnect, device number 35
[ 1459.290390][  T981] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1459.424407][  T981] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1459.642203][  T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.905224][  T981] usb 2-1: Product: syz
[ 1459.997891][  T981] usb 2-1: Manufacturer: syz
[ 1460.018061][  T981] usb 2-1: SerialNumber: syz
[ 1460.042301][  T981] usb 2-1: can't set config #155, error -71
[ 1460.051926][  T981] usb 2-1: USB disconnect, device number 42
[ 1460.074507][T18342] FAULT_INJECTION: forcing a failure.
[ 1460.074507][T18342] name failslab, interval 1, probability 0, space 0, times 0
[ 1460.120942][T18342] CPU: 0 UID: 0 PID: 18342 Comm: syz.0.3368 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[ 1460.120969][T18342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1460.120981][T18342] Call Trace:
[ 1460.120991][T18342]  <TASK>
[ 1460.121000][T18342]  dump_stack_lvl+0x189/0x250
[ 1460.121035][T18342]  ? __pfx____ratelimit+0x10/0x10
[ 1460.121067][T18342]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1460.121096][T18342]  ? __pfx__printk+0x10/0x10
[ 1460.121120][T18342]  ? __pfx___might_resched+0x10/0x10
[ 1460.121145][T18342]  ? fs_reclaim_acquire+0x7d/0x100
[ 1460.121185][T18342]  should_fail_ex+0x414/0x560
[ 1460.121213][T18342]  should_failslab+0xa8/0x100
[ 1460.121251][T18342]  __kmalloc_noprof+0xcb/0x4f0
[ 1460.121279][T18342]  ? tomoyo_encode+0x28b/0x550
[ 1460.121311][T18342]  tomoyo_encode+0x28b/0x550
[ 1460.121343][T18342]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1460.121380][T18342]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1460.121402][T18342]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1460.121428][T18342]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1460.121468][T18342]  ? __lock_acquire+0xab9/0xd20
[ 1460.121513][T18342]  ? __fget_files+0x2a/0x420
[ 1460.121537][T18342]  ? __fget_files+0x2a/0x420
[ 1460.121554][T18342]  ? __fget_files+0x3a0/0x420
[ 1460.121572][T18342]  ? __fget_files+0x2a/0x420
[ 1460.121596][T18342]  security_file_ioctl+0xcb/0x2d0
[ 1460.121621][T18342]  __se_sys_ioctl+0x47/0x170
[ 1460.121651][T18342]  do_syscall_64+0xfa/0x3b0
[ 1460.121669][T18342]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1460.121689][T18342]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1460.121709][T18342]  ? clear_bhb_loop+0x60/0xb0
[ 1460.121734][T18342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1460.121755][T18342] RIP: 0033:0x7fa9a458e969
[ 1460.121774][T18342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1460.121791][T18342] RSP: 002b:00007fa9a546a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1460.121813][T18342] RAX: ffffffffffffffda RBX: 00007fa9a47b5fa0 RCX: 00007fa9a458e969
[ 1460.121828][T18342] RDX: 0000200000000440 RSI: 00000000c0d05640 RDI: 0000000000000003
[ 1460.121842][T18342] RBP: 00007fa9a546a090 R08: 0000000000000000 R09: 0000000000000000
[ 1460.121854][T18342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1460.121866][T18342] R13: 0000000000000000 R14: 00007fa9a47b5fa0 R15: 00007ffc056ac8c8
[ 1460.121900][T18342]  </TASK>
[ 1460.122005][T18342] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1460.521214][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3369'.
[ 1460.585258][T18346] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1460.594178][T18346] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1460.603100][T18346] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1460.612057][T18346] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1460.728201][T11959] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1460.758118][T18346] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1460.767155][T18346] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1460.776255][T18346] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1460.785345][T18346] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1461.089959][T11959] usb 9-1: Using ep0 maxpacket: 32
[ 1461.111090][T11959] usb 9-1: config 0 has an invalid interface number: 207 but max is 0
[ 1461.124607][T11959] usb 9-1: config 0 has no interface number 0
[ 1461.141470][T11959] usb 9-1: config 0 interface 207 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8
[ 1461.178207][T11959] usb 9-1: config 0 interface 207 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 1461.209573][T11959] usb 9-1: config 0 interface 207 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1461.413344][T18353] overlayfs: overlapping lowerdir path
[ 1461.421141][T11959] usb 9-1: config 0 interface 207 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[ 1461.451598][T11959] usb 9-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=f3.c7
[ 1461.590833][T11959] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1461.602123][T11959] usb 9-1: config 0 descriptor??
[ 1461.609551][T18340] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1461.616993][T18340] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1461.636021][T18340] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1461.695684][T11959] usb 9-1: can't set first interface for hiFace device.
[ 1461.725485][T11959] snd-usb-hiface 9-1:0.207: probe with driver snd-usb-hiface failed with error -5
[ 1461.846013][T18364] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[ 1461.852581][T18364] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1461.955609][T18364] vhci_hcd vhci_hcd.0: Device attached
[ 1462.198817][T16180] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[ 1462.707997][ T5885] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1462.830744][T18365] vhci_hcd: connection reset by peer
[ 1462.838049][ T5969] vhci_hcd: stop threads
[ 1462.842736][ T5969] vhci_hcd: release socket
[ 1462.847269][ T5969] vhci_hcd: disconnect device
[ 1462.868452][ T5885] usb 1-1: Using ep0 maxpacket: 32
[ 1462.875756][ T5885] usb 1-1: config 0 has an invalid interface number: 207 but max is 0
[ 1462.890711][ T5885] usb 1-1: config 0 has no interface number 0
[ 1462.897226][ T5885] usb 1-1: config 0 interface 207 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8
[ 1462.927860][ T5885] usb 1-1: config 0 interface 207 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 1462.948472][ T5885] usb 1-1: config 0 interface 207 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1462.959543][ T5885] usb 1-1: config 0 interface 207 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[ 1462.970336][ T5885] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=f3.c7
[ 1462.979443][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1462.990763][ T5885] usb 1-1: config 0 descriptor??
[ 1462.997525][T18376] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1463.005561][T18376] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1463.012950][T18376] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1463.030492][ T5885] usb 1-1: can't set first interface for hiFace device.
[ 1463.037462][ T5885] snd-usb-hiface 1-1:0.207: probe with driver snd-usb-hiface failed with error -5
[ 1463.695054][ T5885] usb 9-1: USB disconnect, device number 36
[ 1465.248526][ T5928] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1465.435668][ T5885] usb 1-1: USB disconnect, device number 64
[ 1465.449023][ T5928] usb 2-1: Using ep0 maxpacket: 32
[ 1465.491178][ T5928] usb 2-1: config 0 has an invalid interface number: 207 but max is 0
[ 1465.530943][ T5928] usb 2-1: config 0 has no interface number 0
[ 1465.573702][ T5928] usb 2-1: config 0 interface 207 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8
[ 1465.626956][ T5928] usb 2-1: config 0 interface 207 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 1465.681629][ T5928] usb 2-1: config 0 interface 207 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1465.735646][ T5928] usb 2-1: config 0 interface 207 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[ 1465.751347][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'.
[ 1465.783518][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'.
[ 1465.795501][T18397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1465.797392][ T5928] usb 2-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=f3.c7
[ 1465.827058][T18397] netlink: 'syz.0.3384': attribute type 1 has an invalid length.
[ 1465.836354][T18397] NCSI netlink: No device for ifindex 0
[ 1465.855170][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1465.881197][ T5928] usb 2-1: config 0 descriptor??
[ 1465.918870][T18392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1465.938987][T18392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1465.977198][T18392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1466.047606][ T5928] usb 2-1: can't set first interface for hiFace device.
[ 1466.073153][ T5928] snd-usb-hiface 2-1:0.207: probe with driver snd-usb-hiface failed with error -5
[ 1466.105880][T18402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'.
[ 1466.382322][T11959] usb 2-1: USB disconnect, device number 43
[ 1468.066024][T16180] vhci_hcd: vhci_device speed not set
[ 1468.139213][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3392'.
[ 1470.836653][T18449] delete_channel: no stack
[ 1471.147982][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3403'.
[ 1471.424702][T18459] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1471.433655][T18459] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1471.446107][T18459] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1471.455091][T18459] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1471.543520][T18459] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1471.552683][T18459] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1471.561712][T18459] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1471.570645][T18459] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1471.599452][T18464] 9pnet_fd: Insufficient options for proto=fd
[ 1472.027994][   T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1472.217973][   T43] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1472.312810][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3408'.
[ 1472.408429][   T43] usb 2-1: Using ep0 maxpacket: 32
[ 1472.430862][   T43] usb 2-1: config 0 has an invalid interface number: 207 but max is 0
[ 1472.496344][   T43] usb 2-1: config 0 has no interface number 0
[ 1472.556490][   T43] usb 2-1: config 0 interface 207 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8
[ 1472.655853][   T43] usb 2-1: config 0 interface 207 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 1472.807881][   T43] usb 2-1: config 0 interface 207 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1472.857837][   T43] usb 2-1: config 0 interface 207 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[ 1472.888415][   T43] usb 2-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=f3.c7
[ 1472.917950][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1472.968409][   T43] usb 2-1: config 0 descriptor??
[ 1472.970960][   T10] usb 1-1: Using ep0 maxpacket: 16
[ 1472.989865][   T10] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[ 1473.005804][   T10] usb 1-1: config 0 has no interface number 0
[ 1473.009022][T18469] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1473.017918][   T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1473.038112][T18469] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1473.045363][   T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1473.055607][T18469] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1473.077335][   T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1473.080102][   T43] usb 2-1: can't set first interface for hiFace device.
[ 1473.090830][   T10] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1473.110418][   T10] usb 1-1: Product: syz
[ 1473.114892][   T10] usb 1-1: SerialNumber: syz
[ 1473.134989][   T43] snd-usb-hiface 2-1:0.207: probe with driver snd-usb-hiface failed with error -5
[ 1473.142905][   T10] usb 1-1: config 0 descriptor??
[ 1473.172036][   T10] cm109 1-1:0.8: invalid payload size 0, expected 4
[ 1473.184218][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input44
[ 1473.589827][T16180] usb 2-1: USB disconnect, device number 44
[ 1474.274942][T18488] 9pnet_fd: Insufficient options for proto=fd
[ 1475.299631][T18490] delete_channel: no stack
[ 1475.631849][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1475.641689][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1475.649425][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1475.656613][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1475.664214][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1475.672184][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1475.679466][   T10] usb 1-1: USB disconnect, device number 65
[ 1475.685528][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1475.685555][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1476.359602][T18509] FAULT_INJECTION: forcing a failure.
[ 1476.359602][T18509] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1476.394723][T18509] CPU: 0 UID: 0 PID: 18509 Comm: syz.0.3418 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[ 1476.394752][T18509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1476.394764][T18509] Call Trace:
[ 1476.394773][T18509]  <TASK>
[ 1476.394783][T18509]  dump_stack_lvl+0x189/0x250
[ 1476.394819][T18509]  ? __pfx____ratelimit+0x10/0x10
[ 1476.394852][T18509]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1476.394881][T18509]  ? __pfx__printk+0x10/0x10
[ 1476.394902][T18509]  ? __might_fault+0xb0/0x130
[ 1476.394946][T18509]  should_fail_ex+0x414/0x560
[ 1476.394974][T18509]  copy_fpstate_to_sigframe+0xa8d/0xce0
[ 1476.395002][T18509]  ? copy_fpstate_to_sigframe+0x181/0xce0
[ 1476.395027][T18509]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[ 1476.395065][T18509]  ? __lock_acquire+0xab9/0xd20
[ 1476.395093][T18509]  ? fpu__alloc_mathframe+0xad/0x130
[ 1476.395117][T18509]  get_sigframe+0x58d/0x7d0
[ 1476.395154][T18509]  ? __pfx_get_sigframe+0x10/0x10
[ 1476.395200][T18509]  x64_setup_rt_frame+0x15c/0xd40
[ 1476.395226][T18509]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1476.395248][T18509]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1476.395285][T18509]  ? get_signal+0x1122/0x1310
[ 1476.395318][T18509]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[ 1476.395352][T18509]  arch_do_signal_or_restart+0x3dc/0x750
[ 1476.395392][T18509]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1476.395441][T18509]  ? exit_to_user_mode_loop+0x40/0x110
[ 1476.395467][T18509]  exit_to_user_mode_loop+0x75/0x110
[ 1476.395489][T18509]  do_syscall_64+0x2bd/0x3b0
[ 1476.395509][T18509]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1476.395528][T18509]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1476.395549][T18509]  ? clear_bhb_loop+0x60/0xb0
[ 1476.395574][T18509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1476.395593][T18509] RIP: 0033:0x7fa9a458e967
[ 1476.395612][T18509] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[ 1476.395630][T18509] RSP: 002b:00007fa9a546a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[ 1476.395651][T18509] RAX: 0000000000000116 RBX: 00007fa9a47b5fa0 RCX: 00007fa9a458e969
[ 1476.395665][T18509] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003
[ 1476.395678][T18509] RBP: 00007fa9a546a090 R08: 0000000000000000 R09: 0000000000000000
[ 1476.395691][T18509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1476.395703][T18509] R13: 0000000000000000 R14: 00007fa9a47b5fa0 R15: 00007ffc056ac8c8
[ 1476.395738][T18509]  </TASK>
[ 1476.676279][   T10] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1476.704449][T18513] 9pnet_fd: Insufficient options for proto=fd
[ 1477.007901][   T10] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[ 1477.277941][ T6686] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1477.380059][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1477.399662][   T10] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1477.407291][   T10] usb 1-1: can't read configurations, error -71
[ 1477.444927][ T6686] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1477.469645][ T6686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1477.515391][ T6686] usb 2-1: config 0 descriptor??
[ 1477.757035][ T6686] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1478.033156][ T6686] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[ 1478.114073][ T6686] [drm] Initialized udl on minor 2
[ 1478.176990][T18524] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3421'.
[ 1478.225198][ T6686] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1478.937483][T18539] delete_channel: no stack
[ 1479.095820][T18543] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[ 1479.102394][T18543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1479.134500][ T6686] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1479.147390][T16180] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1479.200165][T16180] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1479.208816][ T6686] usb 2-1: USB disconnect, device number 45
[ 1479.238006][T16180] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[ 1479.303155][T18544] vhci_hcd: connection closed
[ 1479.305884][T18543] vhci_hcd vhci_hcd.0: Device attached
[ 1479.326959][ T5969] vhci_hcd: stop threads
[ 1479.331619][ T5969] vhci_hcd: release socket
[ 1479.336072][ T5969] vhci_hcd: disconnect device
[ 1483.422561][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3434'.
[ 1483.769547][T18577] @: renamed from vlan0 (while UP)
[ 1484.048081][   T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1484.184672][ T5928] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1484.756521][T18579] delete_channel: no stack
[ 1484.837132][ T5928] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50
[ 1484.874247][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1484.893279][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.900250][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.917908][ T5928] usb 4-1: Product: syz
[ 1484.922086][ T5928] usb 4-1: Manufacturer: syz
[ 1484.926667][ T5928] usb 4-1: SerialNumber: syz
[ 1484.967936][   T10] usb 2-1: Using ep0 maxpacket: 32
[ 1485.019826][ T5928] usb 4-1: config 0 descriptor??
[ 1485.044774][ T5928] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[ 1485.078402][T16180] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[ 1485.110184][T18590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3442'.
[ 1485.264194][T16180] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1485.276885][T16180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1485.305088][T16180] usb 1-1: config 0 descriptor??
[ 1485.328471][T16180] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1485.535001][T18595] No buffer was provided with the request
[ 1485.554320][T11959] usb 4-1: USB disconnect, device number 37
[ 1485.602014][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1485.631022][   T10] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1485.639907][   T10] usb 2-1: can't read configurations, error -71
[ 1485.753436][T16180] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1485.779477][T16180] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 1485.994450][T18586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1486.003539][T18586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1486.250541][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3445'.
[ 1486.272536][T18608] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1486.282023][T18608] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1486.294119][T18608] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1486.305249][T18608] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1487.299732][T18608] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1487.310023][T18608] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1487.319622][T18608] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1487.328577][T18608] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1487.541235][ T6686] usb 1-1: USB disconnect, device number 68
[ 1488.782841][T18623] loop6: detected capacity change from 0 to 524287999
[ 1488.800316][T18623] netlink: 'syz.8.3451': attribute type 12 has an invalid length.
[ 1489.507969][T18638] overlayfs: missing 'lowerdir'
[ 1490.649536][T16180] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[ 1490.905948][T16180] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1491.110687][T16180] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1491.269531][T16180] usb 4-1: can't read configurations, error -71
[ 1491.632582][T18652] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3462'.
[ 1492.128581][T16180] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1492.303432][T16180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1492.348490][T16180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1492.398889][T16180] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1492.434068][T16180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1492.451541][T16180] usb 4-1: config 0 descriptor??
[ 1493.739435][T16180] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0
[ 1493.750343][T16180] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[ 1494.308972][T16180] cp2112 0003:10C4:EA90.000C: Part Number: 0x82 Device Version: 0xFE
[ 1494.582374][T18690] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3475'.
[ 1495.609512][T18683] cp2112 0003:10C4:EA90.000C: Error starting transaction: -38
[ 1496.680821][T18687] delete_channel: no stack
[ 1496.905337][T16180] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71
[ 1496.939321][T16180] usb 4-1: USB disconnect, device number 39
[ 1496.998454][T18701] netlink: 'syz.8.3476': attribute type 7 has an invalid length.
[ 1497.046201][T18701] netlink: 'syz.8.3476': attribute type 8 has an invalid length.
[ 1497.074218][T18706] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3478'.
[ 1497.086777][T18705] netlink: 'syz.1.3477': attribute type 3 has an invalid length.
[ 1497.108913][T18701] netlink: 'syz.8.3476': attribute type 15 has an invalid length.
[ 1497.116161][T18705] netlink: 'syz.1.3477': attribute type 1 has an invalid length.
[ 1500.373841][T18720] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3481'.
[ 1501.948017][   T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1502.186913][   T10] usb 2-1: Using ep0 maxpacket: 16
[ 1502.228363][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1502.245771][T18751] loop6: detected capacity change from 0 to 524287999
[ 1502.258305][   T10] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1502.274932][   T10] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1502.321184][T18751] netlink: 'syz.8.3489': attribute type 12 has an invalid length.
[ 1502.439935][T18755] openvswitch: netlink: IPv6 tunnel dst address is zero
[ 1502.495524][   T10] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1502.529985][   T10] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 1502.655238][   T10] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1502.669733][   T10] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1502.681764][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1502.951614][ T5999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1502.979636][   T10] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[ 1503.070854][   T10] scsi host1: usb-storage 2-1:1.0
[ 1503.208869][T18765] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3494'.
[ 1503.300409][ T5999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1504.176371][T13231] scsi 1:0:0:0: Direct-Access     Sandisk  ImageMate SDDR09 0177 PQ: 0 ANSI: 0
[ 1504.388052][   T30] audit: type=1326 audit(1748684709.422:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18776 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23678e969 code=0x7ffc0000
[ 1504.653965][   T30] audit: type=1326 audit(1748684709.422:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18776 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23678e969 code=0x7ffc0000
[ 1505.353410][   T30] audit: type=1326 audit(1748684709.422:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18776 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa23678e969 code=0x7ffc0000
[ 1505.375771][   T30] audit: type=1326 audit(1748684709.422:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18776 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23678e969 code=0x7ffc0000
[ 1505.398389][   T30] audit: type=1326 audit(1748684709.422:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18776 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23678e969 code=0x7ffc0000
[ 1505.420620][   T30] audit: type=1326 audit(1748684709.422:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18776 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa23678e969 code=0x7ffc0000
[ 1505.444186][   T30] audit: type=1326 audit(1748684709.422:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18776 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23678e969 code=0x7ffc0000
[ 1505.488427][   T30] audit: type=1326 audit(1748684709.422:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18776 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23678e969 code=0x7ffc0000
[ 1505.569000][   T30] audit: type=1326 audit(1748684709.422:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18776 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa23678e969 code=0x7ffc0000
[ 1505.677595][T13231] sd 1:0:0:0: Attached scsi generic sg1 type 0
[ 1505.719267][ T5999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1505.720007][   T30] audit: type=1326 audit(1748684709.422:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18776 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23678e969 code=0x7ffc0000
[ 1505.979229][ T5999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1506.518355][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3502'.
[ 1507.270509][T16180] usb 2-1: USB disconnect, device number 48
[ 1507.376878][   T12] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK
[ 1507.456811][   T12] sd 1:0:0:0: [sdb] Sense not available.
[ 1507.468758][ T5999] bridge_slave_1: left allmulticast mode
[ 1507.476763][ T5999] bridge_slave_1: left promiscuous mode
[ 1507.490362][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1507.502717][   T12] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B)
[ 1507.533564][   T12] sd 1:0:0:0: [sdb] 0-byte physical blocks
[ 1507.552832][   T12] sd 1:0:0:0: [sdb] Write Protect is off
[ 1507.568816][   T12] sd 1:0:0:0: [sdb] Asking for cache data failed
[ 1507.581854][   T12] sd 1:0:0:0: [sdb] Assuming drive cache: write through
[ 1507.768803][ T5999] bridge_slave_0: left allmulticast mode
[ 1507.798770][ T5999] bridge_slave_0: left promiscuous mode
[ 1507.821073][   T12] sd 1:0:0:0: [sdb] Attached SCSI removable disk
[ 1507.822345][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1508.464756][T18766] udevd[18766]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[ 1509.844921][T18766] udevd[18766]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory
[ 1509.961277][ T5999] team0: Port device geneve0 removed
[ 1511.081605][ T5999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1511.102110][ T5999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1511.125369][ T5999] bond0 (unregistering): (slave dummy0): Releasing backup interface
[ 1511.952106][ T5999] bond0 (unregistering): Released all slaves
[ 1512.609571][ T5999] bond1 (unregistering): (slave bond2): Releasing backup interface
[ 1512.625737][ T5999] bond1 (unregistering): Released all slaves
[ 1512.781194][ T5999] bond2 (unregistering): Released all slaves
[ 1513.006779][ T5999] bond3 (unregistering): Released all slaves
[ 1513.031631][T18812] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1513.081672][T18845] lo speed is unknown, defaulting to 1000
[ 1513.089169][T18845] lo speed is unknown, defaulting to 1000
[ 1513.095844][T18845] lo speed is unknown, defaulting to 1000
[ 1513.118279][T18845] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1513.148681][T18845] lo speed is unknown, defaulting to 1000
[ 1513.156672][T18845] lo speed is unknown, defaulting to 1000
[ 1513.164694][T18845] lo speed is unknown, defaulting to 1000
[ 1513.172673][T18845] lo speed is unknown, defaulting to 1000
[ 1513.181589][T18845] lo speed is unknown, defaulting to 1000
[ 1513.189904][T18845] lo speed is unknown, defaulting to 1000
[ 1513.197990][T18845] lo speed is unknown, defaulting to 1000
[ 1513.205925][T18845] lo speed is unknown, defaulting to 1000
[ 1513.372315][T18854] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3516'.
[ 1513.424526][T18854] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[ 1515.707971][T16180] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1515.918503][T16180] usb 1-1: Using ep0 maxpacket: 32
[ 1515.951925][T16180] usb 1-1: config 0 has an invalid interface number: 207 but max is 0
[ 1515.962232][T16180] usb 1-1: config 0 has no interface number 0
[ 1516.135066][T16180] usb 1-1: config 0 interface 207 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 8
[ 1516.277890][T16180] usb 1-1: config 0 interface 207 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 1516.295982][T16180] usb 1-1: config 0 interface 207 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1516.307246][T16180] usb 1-1: config 0 interface 207 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[ 1516.322230][T16180] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=f3.c7
[ 1516.335850][T16180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1516.374288][ T5999] hsr_slave_0: left promiscuous mode
[ 1516.389472][T16180] usb 1-1: config 0 descriptor??
[ 1516.423761][ T5999] hsr_slave_1: left promiscuous mode
[ 1516.548755][T18868] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1516.556521][T18868] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1516.562000][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1516.608577][T16180] usb 1-1: can't set config #0, error -71
[ 1516.623013][T16180] usb 1-1: USB disconnect, device number 69
[ 1516.688132][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1516.706185][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1516.777904][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1516.847422][ T5999] veth1_macvtap: left promiscuous mode
[ 1516.908220][ T5999] veth0_macvtap: left promiscuous mode
[ 1516.913941][ T5999] veth1_vlan: left promiscuous mode
[ 1516.977073][ T5999] veth0_vlan: left promiscuous mode
[ 1517.077879][T16180] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1517.271278][T16180] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1517.316521][T16180] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad
[ 1517.350708][T16180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1517.383557][T16180] usb 1-1: config 0 descriptor??
[ 1517.446697][T16180] usb 1-1: selecting invalid altsetting 0
[ 1517.520770][T16180] usb 1-1: can't set first interface for hiFace device.
[ 1517.544239][T16180] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -5
[ 1518.369518][  T981] usb 1-1: USB disconnect, device number 70
[ 1518.413699][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3529'.
[ 1518.817843][ T5881] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1518.990274][ T5881] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1519.021212][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.055961][ T5881] usb 4-1: config 0 descriptor??
[ 1519.137924][T18905] overlayfs: missing 'lowerdir'
[ 1519.428163][ T5881] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1519.745286][ T5881] [drm:udl_init] *ERROR* Selecting channel failed
[ 1520.134584][ T5881] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[ 1520.223110][ T5881] [drm] Initialized udl on minor 2
[ 1520.329725][ T5881] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1520.452760][ T5881] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1520.539217][T18698] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1520.639900][ T5881] usb 4-1: USB disconnect, device number 40
[ 1520.660174][T18698] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1521.137378][ T5999] team0 (unregistering): Port device team_slave_1 removed
[ 1522.672375][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3534'.
[ 1523.307912][T18698] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1523.599181][T18698] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1523.648092][T18698] usb 2-1: config 1 interface 0 has no altsetting 1
[ 1523.717288][T18698] usb 2-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40
[ 1523.747641][T18698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1523.785944][T18698] usb 2-1: Product: syz
[ 1523.790868][T18698] usb 2-1: Manufacturer: syz
[ 1523.795507][T18698] usb 2-1: SerialNumber: syz
[ 1525.317589][ T5999] batadv1: left allmulticast mode
[ 1525.359355][   T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1525.514772][ T5999] batadv1: left promiscuous mode
[ 1525.534084][ T5999] bridge0: port 3(batadv1) entered disabled state
[ 1525.651441][ T5999] bridge_slave_1: left allmulticast mode
[ 1526.259981][   T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1526.272594][ T5999] bridge_slave_1: left promiscuous mode
[ 1526.285711][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1526.297850][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1526.382567][   T10] usb 4-1: config 0 descriptor??
[ 1526.395649][ T5999] bridge_slave_0: left allmulticast mode
[ 1526.439834][T18698] usb 2-1: USB disconnect, device number 49
[ 1526.461356][ T5999] bridge_slave_0: left promiscuous mode
[ 1526.495196][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1526.620831][   T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1526.653055][   T10] [drm:udl_init] *ERROR* Selecting channel failed
[ 1526.758521][   T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[ 1526.793792][   T10] [drm] Initialized udl on minor 2
[ 1526.847012][   T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1526.867498][   T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1526.875127][T18959] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1526.947294][T18959] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1526.957912][   T10] usb 4-1: USB disconnect, device number 41
[ 1527.016336][T18959] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1527.927129][ T5999] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1528.232475][ T5999] team0: Port device geneve0 removed
[ 1528.591855][T18992] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3556'.
[ 1530.480276][T18698] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1531.135484][T16180] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 1531.288569][T18698] usb 9-1: config 0 has an invalid interface number: 237 but max is 0
[ 1531.306496][T18698] usb 9-1: config 0 has no interface number 0
[ 1531.313172][T18698] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1531.324275][T18698] usb 9-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1531.334219][T18698] usb 9-1: config 0 interface 237 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1531.576947][T18698] usb 9-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[ 1531.603325][T18698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1531.631170][T18698] usb 9-1: Product: syz
[ 1531.656401][T18698] usb 9-1: Manufacturer: syz
[ 1531.669423][T18698] usb 9-1: SerialNumber: syz
[ 1531.821714][T18698] usb 9-1: config 0 descriptor??
[ 1531.956344][T16180] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1532.095340][T16180] usb 1-1: config 1 interface 0 has no altsetting 1
[ 1532.178093][ T5826] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1532.232452][T16180] usb 1-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40
[ 1532.314432][T16180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1532.328873][ T5999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1532.341439][ T5999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1532.348020][T16180] usb 1-1: Product: syz
[ 1532.354213][T16180] usb 1-1: Manufacturer: syz
[ 1532.362154][ T5999] bond0 (unregistering): Released all slaves
[ 1532.364118][T16180] usb 1-1: SerialNumber: syz
[ 1532.714955][ T5999] bond1 (unregistering): Released all slaves
[ 1533.510927][T16180] usb 9-1: USB disconnect, device number 37
[ 1534.318070][  T981] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1534.797356][T16180] usb 1-1: USB disconnect, device number 71
[ 1535.108588][ T5999] : left promiscuous mode
[ 1535.128483][  T981] usb 4-1: Using ep0 maxpacket: 32
[ 1535.137301][  T981] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1535.147607][  T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1535.159836][T19029] QAT: Invalid ioctl 1073935638
[ 1535.168822][  T981] usb 4-1: config 0 descriptor??
[ 1535.497984][  T981] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1537.052160][  T981] usb 4-1: USB disconnect, device number 42
[ 1537.291792][ T5999] hsr_slave_0: left promiscuous mode
[ 1537.357076][ T5999] hsr_slave_1: left promiscuous mode
[ 1537.379338][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1537.445710][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1537.942011][ T5999] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1537.966272][ T5999] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1538.891793][T19056] delete_channel: no stack
[ 1539.252870][ T5999] veth1_macvtap: left promiscuous mode
[ 1539.274734][ T5999] veth0_macvtap: left promiscuous mode
[ 1539.288898][ T5999] veth1_vlan: left promiscuous mode
[ 1539.323095][ T5999] veth0_vlan: left promiscuous mode
[ 1543.086354][ T5999] team0 (unregistering): Port device team_slave_1 removed
[ 1543.301198][ T5826] Bluetooth: hci1: command 0x0406 tx timeout
[ 1543.623975][T19092] netlink: 'syz.8.3586': attribute type 12 has an invalid length.
[ 1543.729504][T19100] netlink: 'syz.1.3588': attribute type 12 has an invalid length.
[ 1544.509535][T19113] QAT: Invalid ioctl 1073935638
[ 1545.772007][ T5999] IPVS: stop unused estimator thread 0...
[ 1545.800153][T19131] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1545.806665][T19131] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1546.263583][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.278271][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.355991][T19141] netlink: 'syz.8.3602': attribute type 12 has an invalid length.
[ 1547.833479][T19149] vlan0: entered allmulticast mode
[ 1547.864778][T19149] dummy0: entered allmulticast mode
[ 1548.013519][T19153] tmpfs: Bad value for 'mpol'
[ 1548.290078][T19160] netlink: 'syz.0.3606': attribute type 1 has an invalid length.
[ 1548.298193][ T5883] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1548.342289][T19160] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3606'.
[ 1548.627908][ T5883] usb 9-1: device descriptor read/64, error -71
[ 1548.927902][ T5883] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1549.108169][ T5883] usb 9-1: device descriptor read/64, error -71
[ 1549.238874][ T5883] usb usb9-port1: attempt power cycle
[ 1550.346570][ T5883] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[ 1550.375252][T19165] delete_channel: no stack
[ 1550.518608][ T5883] usb 9-1: device descriptor read/8, error -71
[ 1550.767896][ T5883] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 1550.809281][ T5883] usb 9-1: device descriptor read/8, error -71
[ 1550.923435][ T5883] usb usb9-port1: unable to enumerate USB device
[ 1551.084593][T19182] syz_tun: entered promiscuous mode
[ 1551.094590][T19182] vlan0: entered promiscuous mode
[ 1551.795622][T19193] netlink: 'syz.1.3614': attribute type 12 has an invalid length.
[ 1555.993471][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3623'.
[ 1556.329135][T19215] team0: Port device team_slave_0 removed
[ 1558.762299][T19241] 9pnet_fd: Insufficient options for proto=fd
[ 1560.578726][T19255] FAULT_INJECTION: forcing a failure.
[ 1560.578726][T19255] name failslab, interval 1, probability 0, space 0, times 0
[ 1560.614821][T19255] CPU: 1 UID: 0 PID: 19255 Comm: syz.3.3636 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[ 1560.614841][T19255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1560.614849][T19255] Call Trace:
[ 1560.614855][T19255]  <TASK>
[ 1560.614861][T19255]  dump_stack_lvl+0x189/0x250
[ 1560.614882][T19255]  ? __pfx____ratelimit+0x10/0x10
[ 1560.614901][T19255]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1560.614918][T19255]  ? __pfx__printk+0x10/0x10
[ 1560.614933][T19255]  ? __pfx___might_resched+0x10/0x10
[ 1560.614947][T19255]  ? fs_reclaim_acquire+0x7d/0x100
[ 1560.614964][T19255]  should_fail_ex+0x414/0x560
[ 1560.614981][T19255]  should_failslab+0xa8/0x100
[ 1560.615001][T19255]  __kmalloc_noprof+0xcb/0x4f0
[ 1560.615018][T19255]  ? tomoyo_encode+0x28b/0x550
[ 1560.615036][T19255]  tomoyo_encode+0x28b/0x550
[ 1560.615054][T19255]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1560.615076][T19255]  ? tomoyo_mount_permission+0x27a/0x970
[ 1560.615091][T19255]  tomoyo_mount_permission+0x377/0x970
[ 1560.615107][T19255]  ? tomoyo_mount_permission+0x27a/0x970
[ 1560.615121][T19255]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[ 1560.615171][T19255]  security_sb_mount+0xec/0x350
[ 1560.615190][T19255]  path_mount+0xbc/0xfe0
[ 1560.615207][T19255]  ? user_path_at+0x44/0x60
[ 1560.615219][T19255]  ? kmem_cache_free+0x18f/0x400
[ 1560.615242][T19255]  __se_sys_mount+0x317/0x410
[ 1560.615258][T19255]  ? __pfx___se_sys_mount+0x10/0x10
[ 1560.615274][T19255]  ? do_syscall_64+0xbe/0x3b0
[ 1560.615285][T19255]  ? __x64_sys_mount+0x20/0xc0
[ 1560.615298][T19255]  do_syscall_64+0xfa/0x3b0
[ 1560.615310][T19255]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1560.615324][T19255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1560.615336][T19255]  ? clear_bhb_loop+0x60/0xb0
[ 1560.615351][T19255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1560.615362][T19255] RIP: 0033:0x7f69a718e969
[ 1560.615375][T19255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1560.615385][T19255] RSP: 002b:00007f69a8020038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1560.615400][T19255] RAX: ffffffffffffffda RBX: 00007f69a73b5fa0 RCX: 00007f69a718e969
[ 1560.615410][T19255] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 00002000000000c0
[ 1560.615418][T19255] RBP: 00007f69a8020090 R08: 0000000000000000 R09: 0000000000000000
[ 1560.615426][T19255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1560.615434][T19255] R13: 0000000000000001 R14: 00007f69a73b5fa0 R15: 00007ffcc6492978
[ 1560.615452][T19255]  </TASK>
[ 1560.615467][T19255] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1561.162550][   T30] kauditd_printk_skb: 20 callbacks suppressed
[ 1561.162571][   T30] audit: type=1326 audit(1748684766.222:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19269 comm="syz.1.3642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3af198e969 code=0x0
[ 1561.357588][T19274] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3642'.
[ 1561.415991][T19274] netlink: 'syz.1.3642': attribute type 4 has an invalid length.
[ 1561.824486][T19276] netlink: 'syz.1.3642': attribute type 4 has an invalid length.
[ 1562.523558][T19286] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1562.967498][T19289] overlayfs: failed to resolve './file0': -2
[ 1565.562546][   T30] audit: type=1326 audit(1748684770.622:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1565.567920][ T5884] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 1565.614679][   T30] audit: type=1326 audit(1748684770.622:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1565.641030][   T30] audit: type=1326 audit(1748684770.622:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1565.673245][   T30] audit: type=1326 audit(1748684770.622:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1565.701244][   T30] audit: type=1326 audit(1748684770.622:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1565.734306][   T30] audit: type=1326 audit(1748684770.622:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1565.763723][   T30] audit: type=1326 audit(1748684770.622:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1565.791864][   T30] audit: type=1326 audit(1748684770.622:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1565.856747][   T30] audit: type=1326 audit(1748684770.622:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a458e969 code=0x7ffc0000
[ 1565.878740][ T5884] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1565.922210][ T5884] usb 9-1: config 1 interface 0 has no altsetting 1
[ 1566.270814][ T5884] usb 9-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40
[ 1566.316566][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1566.369024][   T30] audit: type=1326 audit(1748684770.622:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1566.415439][ T5884] usb 9-1: Product: syz
[ 1566.417578][   T30] audit: type=1326 audit(1748684770.622:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1566.427890][ T5884] usb 9-1: Manufacturer: syz
[ 1566.568261][ T5884] usb 9-1: SerialNumber: syz
[ 1566.729010][   T30] audit: type=1326 audit(1748684770.622:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a458e969 code=0x7ffc0000
[ 1566.794334][   T30] audit: type=1326 audit(1748684770.652:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1567.718825][   T30] audit: type=1326 audit(1748684770.652:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1567.771931][   T30] audit: type=1326 audit(1748684770.652:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1567.884076][   T30] audit: type=1326 audit(1748684770.652:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1567.924339][T19328] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1567.936713][   T30] audit: type=1326 audit(1748684770.652:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1567.963320][T19328] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[ 1568.005005][T19328] bridge_slave_0: default FDB implementation only supports local addresses
[ 1568.005064][   T30] audit: type=1326 audit(1748684770.652:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1568.187495][   T30] audit: type=1326 audit(1748684770.652:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19303 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa9a452ab39 code=0x7ffc0000
[ 1568.894873][T19331] delete_channel: no stack
[ 1569.309953][T19343] FAULT_INJECTION: forcing a failure.
[ 1569.309953][T19343] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1570.143059][T19343] CPU: 0 UID: 0 PID: 19343 Comm: syz.1.3664 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[ 1570.143087][T19343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1570.143100][T19343] Call Trace:
[ 1570.143108][T19343]  <TASK>
[ 1570.143118][T19343]  dump_stack_lvl+0x189/0x250
[ 1570.143151][T19343]  ? __pfx____ratelimit+0x10/0x10
[ 1570.143181][T19343]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1570.143211][T19343]  ? __pfx__printk+0x10/0x10
[ 1570.143232][T19343]  ? __might_fault+0xb0/0x130
[ 1570.143277][T19343]  should_fail_ex+0x414/0x560
[ 1570.143305][T19343]  _copy_from_user+0x2d/0xb0
[ 1570.143334][T19343]  kstrtouint_from_user+0xc4/0x170
[ 1570.143362][T19343]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1570.143407][T19343]  proc_fail_nth_write+0x88/0x240
[ 1570.143429][T19343]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1570.143459][T19343]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1570.143483][T19343]  vfs_write+0x27b/0xa90
[ 1570.143529][T19343]  ? __pfx_vfs_write+0x10/0x10
[ 1570.143559][T19343]  ? __fget_files+0x2a/0x420
[ 1570.143584][T19343]  ? __fget_files+0x3a0/0x420
[ 1570.143602][T19343]  ? __fget_files+0x2a/0x420
[ 1570.143633][T19343]  ksys_write+0x145/0x250
[ 1570.143657][T19343]  ? __fget_files+0x3a0/0x420
[ 1570.143677][T19343]  ? __pfx_ksys_write+0x10/0x10
[ 1570.143709][T19343]  ? do_syscall_64+0xbe/0x3b0
[ 1570.143733][T19343]  do_syscall_64+0xfa/0x3b0
[ 1570.143751][T19343]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1570.143771][T19343]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1570.143792][T19343]  ? clear_bhb_loop+0x60/0xb0
[ 1570.143816][T19343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1570.143835][T19343] RIP: 0033:0x7f3af198d41f
[ 1570.143853][T19343] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1570.143870][T19343] RSP: 002b:00007f3af27d3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1570.143894][T19343] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3af198d41f
[ 1570.143908][T19343] RDX: 0000000000000001 RSI: 00007f3af27d30a0 RDI: 0000000000000004
[ 1570.143921][T19343] RBP: 00007f3af27d3090 R08: 0000000000000000 R09: 0000000000000000
[ 1570.143933][T19343] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1570.143945][T19343] R13: 0000000000000000 R14: 00007f3af1bb5fa0 R15: 00007ffcafe53cc8
[ 1570.143980][T19343]  </TASK>
[ 1570.672069][ T5884] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1570.687087][T19356] futex_wake_op: syz.6.3671 tries to shift op by 144; fix this program
[ 1571.750196][T18698] usb 9-1: USB disconnect, device number 42
[ 1571.768031][  T981] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1571.848536][ T5884] usb 4-1: Using ep0 maxpacket: 32
[ 1571.869254][ T5884] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1571.933918][ T5884] usb 4-1: config 129 has an invalid interface number: 249 but max is 0
[ 1571.944367][T19356] could not allocate digest TFM handle xcbc(aes)
[ 1571.973514][ T5884] usb 4-1: config 129 has no interface number 0
[ 1571.996415][ T5884] usb 4-1: too many endpoints for config 129 interface 249 altsetting 215: 245, using maximum allowed: 30
[ 1572.028484][  T981] usb 2-1: Using ep0 maxpacket: 32
[ 1572.044898][  T981] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[ 1572.056612][ T5884] usb 4-1: config 129 interface 249 altsetting 215 bulk endpoint 0x81 has invalid maxpacket 32
[ 1572.100619][  T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1572.117518][ T5884] usb 4-1: config 129 interface 249 altsetting 215 endpoint 0xA has invalid wMaxPacketSize 0
[ 1572.139235][  T981] usb 2-1: Product: syz
[ 1572.161153][  T981] usb 2-1: Manufacturer: syz
[ 1572.167959][ T5884] usb 4-1: config 129 interface 249 altsetting 215 has 3 endpoint descriptors, different from the interface descriptor's value: 245
[ 1572.190288][  T981] usb 2-1: SerialNumber: syz
[ 1572.218760][  T981] usb 2-1: config 0 descriptor??
[ 1572.229112][ T5884] usb 4-1: config 129 interface 249 has no altsetting 0
[ 1572.247213][ T5884] usb 4-1: string descriptor 0 read error: -71
[ 1572.257697][  T981] usb 2-1: no audio or video endpoints found
[ 1572.274222][ T5884] usb 4-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38
[ 1572.535417][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1572.754073][ T5884] usb 4-1: can't set config #129, error -71
[ 1572.780884][ T5884] usb 4-1: USB disconnect, device number 43
[ 1572.819139][T19371] overlayfs: missing 'lowerdir'
[ 1573.621223][ T5883] usb 2-1: USB disconnect, device number 50
[ 1574.685988][T19377] delete_channel: no stack
[ 1574.998458][T19388] loop2: detected capacity change from 0 to 7
[ 1575.014677][T19388] Dev loop2: unable to read RDB block 7
[ 1575.020619][T19388]  loop2: AHDI p1 p2 p3
[ 1575.024827][T19388] loop2: partition table partially beyond EOD, truncated
[ 1575.042617][T19388] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1575.073844][T19391] netlink: 'syz.1.3678': attribute type 10 has an invalid length.
[ 1575.093535][T19388] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1575.113832][T19391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3678'.
[ 1575.167039][T19391] team0: entered promiscuous mode
[ 1575.195642][T19391] team_slave_0: entered promiscuous mode
[ 1575.234000][T19391] team0: entered allmulticast mode
[ 1575.261526][T19391] team_slave_0: entered allmulticast mode
[ 1575.360622][T19391] bridge0: port 3(team0) entered blocking state
[ 1575.442002][T19391] bridge0: port 3(team0) entered disabled state
[ 1575.742029][T19391] bridge0: port 3(team0) entered blocking state
[ 1575.748501][T19391] bridge0: port 3(team0) entered forwarding state
[ 1577.004944][T19408] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3683'.
[ 1577.017379][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3683'.
[ 1577.062536][T19408] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1577.071437][T19408] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1577.080559][T19408] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1577.089503][T19408] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1577.874169][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3685'.
[ 1580.292037][T19431] delete_channel: no stack
[ 1581.022823][ T5883] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 1581.196268][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1581.785261][ T5883] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[ 1581.915451][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1581.929575][ T5883] usb 1-1: config 0 descriptor??
[ 1686.997691][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1687.004704][    C1] rcu: 	0-...!: (0 ticks this GP) idle=713c/0/0x1 softirq=110192/110192 fqs=0
[ 1687.014791][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P18862/1:b..l P6710/1:b..l
[ 1687.023966][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=102825, q=226 ncpus=2)
[ 1687.031789][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1687.031819][    C0] NMI backtrace for cpu 0
[ 1687.031833][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[ 1687.031854][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1687.031864][    C0] RIP: 0010:advance_sched+0x442/0xc90
[ 1687.031893][    C0] Code: 4d 8b bf 28 01 00 00 48 8d 98 30 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 44 f7 a4 f8 4c 03 3b 4d 89 3e <eb> 0f e8 c7 f1 43 f8 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 10
[ 1687.031908][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00000006
[ 1687.031923][    C0] RAX: 1ffff1100512bca6 RBX: ffff88802895e530 RCX: dffffc0000000000
[ 1687.031936][    C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 184cd6291c000000
[ 1687.031949][    C0] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004
[ 1687.031960][    C0] R10: dffffc0000000000 R11: fffff52000000f7c R12: dffffc0000000000
[ 1687.031973][    C0] R13: ffff888046151000 R14: ffff88802895e528 R15: 184cd62920000000
[ 1687.031986][    C0] FS:  0000000000000000(0000) GS:ffff888125c99000(0000) knlGS:0000000000000000
[ 1687.032001][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1687.032014][    C0] CR2: 0000200000000041 CR3: 00000000486ba000 CR4: 00000000003526f0
[ 1687.032032][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1687.032043][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1687.032055][    C0] Call Trace:
[ 1687.032062][    C0]  <IRQ>
[ 1687.032078][    C0]  ? __pfx_advance_sched+0x10/0x10
[ 1687.032100][    C0]  __hrtimer_run_queues+0x52c/0xc60
[ 1687.032128][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1687.032147][    C0]  ? read_tsc+0x9/0x20
[ 1687.032167][    C0]  hrtimer_interrupt+0x45b/0xaa0
[ 1687.032198][    C0]  __sysvec_apic_timer_interrupt+0x10b/0x410
[ 1687.032220][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1687.032243][    C0]  </IRQ>
[ 1687.032249][    C0]  <TASK>
[ 1687.032256][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1687.032275][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1687.032299][    C0] Code: 03 d5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 b2 2b 00 f3 0f 1e fa fb f4 <e9> d8 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1687.032314][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6
[ 1687.032328][    C0] RAX: 94ae751b5ae91c00 RBX: ffffffff819752a8 RCX: 94ae751b5ae91c00
[ 1687.032341][    C0] RDX: 0000000000000001 RSI: ffffffff8d95adbe RDI: ffffffff8be19200
[ 1687.032353][    C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb
[ 1687.032366][    C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9f7ef0
[ 1687.032378][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a48
[ 1687.032392][    C0]  ? do_idle+0x1e8/0x510
[ 1687.032415][    C0]  default_idle+0x13/0x20
[ 1687.032432][    C0]  default_idle_call+0x74/0xb0
[ 1687.032450][    C0]  do_idle+0x1e8/0x510
[ 1687.032471][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1687.032497][    C0]  cpu_startup_entry+0x44/0x60
[ 1687.032522][    C0]  rest_init+0x2de/0x300
[ 1687.032540][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1687.032562][    C0]  start_kernel+0x478/0x500
[ 1687.032580][    C0]  x86_64_start_reservations+0x24/0x30
[ 1687.032601][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1687.032620][    C0]  common_startup_64+0x13e/0x147
[ 1687.032649][    C0]  </TASK>
[ 1687.032813][    C1] task:kworker/u8:12   state:R  running task     stack:21160 pid:6710  tgid:6710  ppid:2      task_flags:0x4208160 flags:0x00004000
[ 1687.372982][    C1] Workqueue: bat_events batadv_nc_worker
[ 1687.378657][    C1] Call Trace:
[ 1687.381957][    C1]  <TASK>
[ 1687.384914][    C1]  __schedule+0x16a2/0x4cb0
[ 1687.389474][    C1]  ? preempt_schedule_irq+0xb5/0x150
[ 1687.394799][    C1]  ? kvm_sched_clock_read+0x11/0x20
[ 1687.400032][    C1]  ? __pfx___schedule+0x10/0x10
[ 1687.404935][    C1]  ? preempt_schedule_irq+0xaa/0x150
[ 1687.410255][    C1]  preempt_schedule_irq+0xb5/0x150
[ 1687.415404][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1687.421168][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1687.427008][    C1]  irqentry_exit+0x6f/0x90
[ 1687.431447][    C1]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1687.436934][    C1] RIP: 0010:lock_acquire+0x175/0x360
[ 1687.442242][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 db 48 fa 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[ 1687.461872][    C1] RSP: 0018:ffffc9001c987980 EFLAGS: 00000206
[ 1687.467965][    C1] RAX: 0f1646b3d5665500 RBX: 0000000000000000 RCX: 0f1646b3d5665500
[ 1687.475961][    C1] RDX: 0000000000000000 RSI: ffffffff8db46f77 RDI: ffffffff8be19200
[ 1687.483959][    C1] RBP: ffffffff8b2a3972 R08: 0000000000000000 R09: ffffffff8b2a3972
[ 1687.491952][    C1] R10: dffffc0000000000 R11: ffffffff8b2a38a0 R12: 0000000000000002
[ 1687.499945][    C1] R13: ffffffff8e13cc80 R14: 0000000000000000 R15: 0000000000000246
[ 1687.507944][    C1]  ? batadv_nc_worker+0xd2/0x610
[ 1687.512912][    C1]  ? __pfx_batadv_nc_worker+0x10/0x10
[ 1687.518317][    C1]  ? batadv_nc_worker+0xd2/0x610
[ 1687.523302][    C1]  ? batadv_nc_worker+0xd2/0x610
[ 1687.528269][    C1]  ? batadv_nc_worker+0xd2/0x610
[ 1687.533242][    C1]  batadv_nc_worker+0xef/0x610
[ 1687.538039][    C1]  ? batadv_nc_worker+0xd2/0x610
[ 1687.543015][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[ 1687.548766][    C1]  process_scheduled_works+0xae1/0x17b0
[ 1687.554376][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1687.560407][    C1]  worker_thread+0x8a0/0xda0
[ 1687.565027][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1687.571395][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1687.576371][    C1]  kthread+0x70e/0x8a0
[ 1687.580477][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1687.585621][    C1]  ? __pfx_kthread+0x10/0x10
[ 1687.590248][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1687.595481][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1687.600712][    C1]  ? __pfx_kthread+0x10/0x10
[ 1687.605350][    C1]  ret_from_fork+0x3fc/0x770
[ 1687.609990][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1687.615139][    C1]  ? __switch_to_asm+0x39/0x70
[ 1687.619928][    C1]  ? __switch_to_asm+0x33/0x70
[ 1687.624712][    C1]  ? __pfx_kthread+0x10/0x10
[ 1687.629335][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1687.634144][    C1]  </TASK>
[ 1687.637187][    C1] task:udevd           state:R  running task     stack:24832 pid:18862 tgid:18862 ppid:5190   task_flags:0x400140 flags:0x00004002
[ 1687.650717][    C1] Call Trace:
[ 1687.654020][    C1]  <TASK>
[ 1687.656978][    C1]  __schedule+0x16a2/0x4cb0
[ 1687.661545][    C1]  ? preempt_schedule_common+0x83/0xd0
[ 1687.667043][    C1]  ? __pfx___schedule+0x10/0x10
[ 1687.671948][    C1]  ? preempt_schedule+0xae/0xc0
[ 1687.676832][    C1]  preempt_schedule_common+0x83/0xd0
[ 1687.682154][    C1]  preempt_schedule+0xae/0xc0
[ 1687.686866][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[ 1687.692270][    C1]  ? __wake_up_common_lock+0x190/0x1f0
[ 1687.697770][    C1]  preempt_schedule_thunk+0x16/0x30
[ 1687.703009][    C1]  _raw_spin_unlock_irqrestore+0xfd/0x110
[ 1687.708759][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1687.715130][    C1]  __wake_up_common_lock+0x190/0x1f0
[ 1687.720460][    C1]  sock_def_readable+0x1fb/0x550
[ 1687.725427][    C1]  ? sock_def_readable+0xbe/0x550
[ 1687.730478][    C1]  unix_dgram_sendmsg+0xd94/0x1870
[ 1687.735656][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1687.741250][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1687.746558][    C1]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1687.752135][    C1]  __sock_sendmsg+0x21c/0x270
[ 1687.756844][    C1]  sock_write_iter+0x258/0x330
[ 1687.761646][    C1]  ? __pfx_sock_write_iter+0x10/0x10
[ 1687.766978][    C1]  ? bpf_lsm_file_permission+0x9/0x20
[ 1687.772377][    C1]  ? security_file_permission+0x75/0x290
[ 1687.778046][    C1]  vfs_write+0x54b/0xa90
[ 1687.782330][    C1]  ? __pfx_sock_write_iter+0x10/0x10
[ 1687.787653][    C1]  ? __pfx_vfs_write+0x10/0x10
[ 1687.792464][    C1]  ? __x64_sys_sendmsg+0x1b4/0x260
[ 1687.797618][    C1]  ksys_write+0x145/0x250
[ 1687.801981][    C1]  ? __pfx_ksys_write+0x10/0x10
[ 1687.806872][    C1]  ? do_syscall_64+0xbe/0x3b0
[ 1687.811576][    C1]  do_syscall_64+0xfa/0x3b0
[ 1687.816109][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1687.822198][    C1]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1687.827855][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1687.832559][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1687.838474][    C1] RIP: 0033:0x7fe32b8a7407
[ 1687.842914][    C1] RSP: 002b:00007ffc647b2350 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 1687.851359][    C1] RAX: ffffffffffffffda RBX: 00007fe32c0a9880 RCX: 00007fe32b8a7407
[ 1687.859357][    C1] RDX: 0000000000000000 RSI: 00007ffc647b23f7 RDI: 000000000000000a
[ 1687.867349][    C1] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000
[ 1687.875339][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fe32c0a96e8
[ 1687.883337][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1687.891348][    C1]  </TASK>
[ 1687.894388][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g102825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[ 1687.906820][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=103647
[ 1687.914813][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g102825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[ 1687.926290][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1687.936277][    C1] rcu: RCU grace-period kthread stack dump:
[ 1687.942181][    C1] task:rcu_preempt     state:I stack:27128 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[ 1687.954144][    C1] Call Trace:
[ 1687.957450][    C1]  <TASK>
[ 1687.960410][    C1]  __schedule+0x16a2/0x4cb0
[ 1687.964969][    C1]  ? schedule+0x165/0x360
[ 1687.969340][    C1]  ? __pfx___schedule+0x10/0x10
[ 1687.974245][    C1]  ? schedule+0x91/0x360
[ 1687.978532][    C1]  schedule+0x165/0x360
[ 1687.982726][    C1]  schedule_timeout+0x12b/0x270
[ 1687.987611][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1687.993014][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1687.998336][    C1]  ? prepare_to_swait_event+0x341/0x380
[ 1688.003922][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[ 1688.008799][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1688.014033][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1688.018994][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1688.024303][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1688.029553][    C1]  ? finish_swait+0xcd/0x1f0
[ 1688.034186][    C1]  rcu_gp_kthread+0x99/0x390
[ 1688.038809][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1688.044031][    C1]  ? __kthread_parkme+0x7b/0x200
[ 1688.048998][    C1]  ? __kthread_parkme+0x1a1/0x200
[ 1688.054060][    C1]  kthread+0x70e/0x8a0
[ 1688.058163][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1688.063391][    C1]  ? __pfx_kthread+0x10/0x10
[ 1688.068013][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1688.073242][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1688.078468][    C1]  ? __pfx_kthread+0x10/0x10
[ 1688.083090][    C1]  ret_from_fork+0x3fc/0x770
[ 1688.087720][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1688.092877][    C1]  ? __switch_to_asm+0x39/0x70
[ 1688.097669][    C1]  ? __switch_to_asm+0x33/0x70
[ 1688.102453][    C1]  ? __pfx_kthread+0x10/0x10
[ 1688.107085][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1688.111889][    C1]  </TASK>