last executing test programs:

13m23.208975131s ago: executing program 4 (id=484):
getitimer(0x2, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async)
prlimit64(r0, 0xf, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async)
r1 = fanotify_init(0x8, 0x80000)
write$binfmt_elf64(r1, 0x0, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) (async)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4)
sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r5, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000003000)) (async)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000c1a9010300000000000000000500000d0900011073797a6a00000000"], 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4}})

13m16.970577345s ago: executing program 4 (id=500):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
socket$inet6(0x10, 0x3, 0x0) (async)
socket$inet6(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00'}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000019340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8254010088520300200012800b000100697036746e6c0000100002800400130005000900290000000800040000000000"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000019340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8254010088520300200012800b000100697036746e6c0000100002800400130005000900290000000800040000000000"], 0x48}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000300)=""/102392, 0x18ff8)
syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) (async)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$sierra_net(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0)
socket(0x1e, 0x4, 0x0)

13m12.97673041s ago: executing program 4 (id=512):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x1b6b80000000}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x1b6b80000000}, 0x0)
syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) (async)
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000500)={0x4, 0x1, 0x1, "2ecf704b441c52d9cae5f6fd6e34aed1a983546708e42b96a1f9b2c976b04bf9", 0x10006006})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c)
syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) (async)
read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020)
recvfrom$inet_nvme(r3, &(0x7f00000004c0)=""/44, 0x2c, 0x10101, &(0x7f0000000880)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80)
r4 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}}, 0xfffffd56, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x8040) (async)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}}, 0xfffffd56, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x8040)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000080)=0x24007, 0xfffffffffffffee9)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) (async)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa)
statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1000, 0x20, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r8, &(0x7f0000006180)={0x2020, 0x0, 0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
syz_fuse_handle_req(r8, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r9, r10, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$fuseblk(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x80a000, &(0x7f0000000700)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}], [{@subj_role={'subj_role', 0x3d, 'sh\x00'}}, {@euid_eq={'euid', 0x3d, r9}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/cpu/#/msr\x00'}}]}}) (async)
mount$fuseblk(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x80a000, &(0x7f0000000700)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}], [{@subj_role={'subj_role', 0x3d, 'sh\x00'}}, {@euid_eq={'euid', 0x3d, r9}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/cpu/#/msr\x00'}}]}})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0xce22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x200}}, 0x0, 0x0, 0x3c, 0x0, "a30b3b2884c69b16668c68a5daa845f387713f4048782ece1e75f1fcb1b3f41e4de625ff106bb28200c01f696109383664417165bba0dd5ace522fa7880000000000000000000300"}, 0xd8)

13m11.785385893s ago: executing program 4 (id=517):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x40, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x22, 0x130, 0x0, 0x1, [@generic="c18a", @typed={0x14, 0x13f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @typed={0x8, 0xbf, 0x0, 0x0, @fd}]}]}, @nested={0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xfffffff8}]}, 0x1c}}, 0x80) (rerun: 32)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0xcdf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x84, 0x2, '\x00\x00'}, 0x0}) (rerun: 64)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000040)={0x0, 0x17, 0x2, "65cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000ac0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x81, 0x2, "80e3"}, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x9, 0x80, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "b0b94a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x8, 0x1}, {0x6, 0x24, 0x1a, 0x92e2, 0x3}, [@obex={0x5, 0x24, 0x15, 0x2}, @dmm={0x7, 0x24, 0x14, 0x71cd, 0x8}, @dmm={0x7, 0x24, 0x14, 0x0, 0x5}, @acm={0x4, 0x24, 0x2, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0xb, 0xd2, 0x21}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xa6, 0x5, 0x47}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x30, 0x4, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x1, 0x9}}}}}}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x0, 0x5, 0x7f, 0x519fef84062e3555, 0x80}, 0x40, &(0x7f0000000240)={0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x30, 0x4, 0x4, 0xf, 0x22, [0x0, 0xff0030, 0xff00c0, 0x3ff0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "da335ea3e759fca36fdaad8a085f7e41"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc, 0xb, 0x9, 0x2, 0x1}]}, 0x9, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x100a}}, {0xcc, &(0x7f0000000380)=@string={0xcc, 0x3, "c3b3cfd77eedbfeb36c4465892312768d57e1bc824f3abe58e992a5e26711982eb426792365a2b996f53aabec624c99a97a11669b04e4443f0d027cc2758f74c9e2fde69ce961acf9bc37e9cd16ef33b6e35f6272a63893cdf0dcc21feadff02c0936595f4976e27636982004330b76b4670141ea346308b4237dce49494ec170a01a49bff790567db7deee8f3515c2a1d17643fdf0ebc1282df17284d6521ae22c230ff4657b800e07b7eb2996e1f6463ec040434a51ec85eaa9ce1b0da456a4d99913b06e323977148"}}, {0xa1, &(0x7f0000000600)=@string={0xa1, 0x3, "66020cecafbec2aa388a397e52ecb2b6e970163281a057418e10ee626f164932395c34945c6e7b6604b429ce36296be8ed0791f188357357ad57d92828e9f464d5fe9316e3c6ebd7ed409d6dd30f74699d0175f9e12f7e75c7fe8af53fafed5429979b2e24ed9344e11d49718bae64332c4a7935d1abef022d79b5221a5cb247deee727b48e74f5de5215b1f7db1a7beab581793b13fec7a25d75faf96c6f7"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xd4dc}}, {0x78, &(0x7f0000001080)=@string={0x78, 0x3, "322a6810198fe267cccdfcd6536444313cb9be08110cea4094c79755efdd29d137c32a1b1bce341b93aeaf32127d2cf4fb517dd50cc5a13ebaa38cc897dec507fbd6c00ccf7cb24fe7e2379014af52a894ea564cd32d1a4c43f0f3adb15e3fcf376496096c0b4d8e5756b275f921a436a7f82010867a"}}, {0xdd, &(0x7f0000000880)=@string={0xdd, 0x3, "dfc421faa8b379ac5ebea711e75fd706c9dbddfbdcc82f9645e182ff8249099188d04d395fc599ab01c3bd4e975b74c6670796a3255f584ab6a62f4525d0e10b1e8aade763bd055547e97500fc67f39e0f035a8321b8acc8b158aabed41cb81de0c46491caf90e24e509879700159b8d05f34072badecaddfe216a3a5083567806e8a77c9e5d037bafaa550fa2f8256bd4c31c88bd639ff853a53fde2bd88d790624911719d704ed4b4ce5627657963342e4900eb2144c1c7f633a92d1b5b08216fa63c06aa72bb4daf2406aba7f26a2a14152c7d40e481ce5a277"}}, {0x78, &(0x7f00000006c0)=@string={0x78, 0x3, "81d7335cd5329760b471890dbd3811d78d9f8e72bb4653460293de25eb88032270d9f5b66075020a13750a72c825686c4275be2def91c3821570dd5a787fdb9a453bbf03075e65050fa4120281ad824bca24ee6541d1ceedfc1483c3007f4fc6ba367c263ae955eb9a82938ac3da12e8ec0dc326ad61"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x41b}}]})
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000d40)={0x14, &(0x7f0000000c00)={0x20, 0x21, 0x21, {0x21, 0x21, "23f6cbdbdf11c4abe982f9efa063bb21062079ff7909f87417d9a728879b02"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001000)={0x44, &(0x7f0000000d80)={0x20, 0xa, 0xb2, "8605d77c09fa32578381df32f5edd977a691f2941549a3ab88c4e958a8e7f24fbb632f95afb3cac79e520b75b7c976eab58da67abfbd42749f30d61817fe05dd03db34ce907dbab884073e9ec24fe689b8b2ec7981d09c7ab862da4af996eaaab139fb1161a872bcc47b050027708f731f8c8a1fb44d9ba6aba0a662a37bc0358f67250f0456debdbea57c4c76e4de34ee8f01372b34b2d9edfeef82843d64bf3bd9f9d64edf72a9aad98dee640d216239e7"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000ec0)={0x20, 0x80, 0x1c, {0x9, 0x9, 0xff, 0x81, 0xcd1, 0x1000, 0xfff9, 0x8, 0xede, 0x1, 0x0, 0x2e3}}, &(0x7f0000000f00)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000f80)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000fc0)={0x20, 0x89, 0x2, 0x1}}) (async)
syz_usb_control_io(r0, 0x0, 0x0)

13m9.468924183s ago: executing program 3 (id=526):
syz_usb_connect(0x3, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x44, 0xab, 0xe0, 0x8, 0x2109, 0x711, 0x25de, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x94, 0x4, 0x0, 0x90, 0xa5, 0x32, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x3, 0x7f}, {0x6, 0x24, 0x1a, 0x8, 0x21}}]}}]}}]}}, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x20004010) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffd3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x6a9c35127c6c3d14) (async, rerun: 32)
r4 = socket(0x2a, 0x2, 0x0) (rerun: 32)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}, @TCA_RATE={0x6, 0x5, {0xa6, 0x7}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async, rerun: 32)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000004456ff8aca0d55ef0ab58f309a49b7b435ae67cede62d4"], 0x0, 0x0, 0x0, 0x0}) (rerun: 32)

13m9.155788226s ago: executing program 4 (id=528):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
syz_usb_connect(0x3, 0x24, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x2)
fsopen(0x0, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
socket$netlink(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000004000000060000000400000000000000", @ANYRES32, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082003f0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

13m7.904550047s ago: executing program 3 (id=535):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001002a000000000000000000000a28000000000a010800000000000000000a00000008000240000000010900010073797a300000000f20000000000a01040000000000000000070000000900010073797a310000000028000000000a030000000000000000000a00000008000240000000000900010073797a30"], 0x98}}, 0x0)
mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1012, &(0x7f0000000600)={[{@memory_hugetlb_accounting}, {@memory_recursiveprot}, {@memory_recursiveprot}, {@favordynmods}, {@favordynmods}, {@pids_localevents}, {@subsystem='pids'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, '/dev/kvm\x00'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%'}}, {@subj_type={'subj_type', 0x3d, ')${.)'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@subj_user={'subj_user', 0x3d, '},}/'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/kvm\x00'}}]})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x7, 0xe4, &(0x7f0000000500)=""/228}, 0x94)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240048d0}, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000700)={0x1, 0x0, @pic={0xcf, 0xff, 0x80, 0x7, 0x86, 0x1, 0xe, 0x6, 0x7f, 0x9, 0x5, 0x84, 0x3, 0x10, 0x9, 0x2}})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
statfs(0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040))
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x2, 0x0, 0x10, 0xf7, 0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x8})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

13m7.191159427s ago: executing program 3 (id=539):
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x3}}, 0x18, &(0x7f0000000180)={0x0}}, 0xee)
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x448081)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1)

13m7.047360649s ago: executing program 3 (id=540):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200)={0x1, 0xa, 0x2, 0x200}, 0x10}, 0x94)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffe000/0x1000)=nil)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
setitimer(0x2, 0x0, 0x0)
shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil)

13m6.982864615s ago: executing program 3 (id=541):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCFLSH(r5, 0x540b, 0x2)
pipe2$watch_queue(&(0x7f0000000000), 0x80) (async)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xb16b}, 0x8)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1}, 0x40010002)
setgid(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000002c000000030a010200000000000000000a0000040900010073797a1d000000000c0002400000000000000003140000001100010000000000000000000000000a"], 0x74}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)

13m6.107201388s ago: executing program 4 (id=544):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x20002f7})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, <r3=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000300)={{r3, 0x6, 0xfffffffffffffffc, 0x6, 0x1, 0xfffffffffffff457, 0x9, 0x7fff, 0x6, 0xfffffff7, 0x8, 0xd, 0xf75a, 0xd85e, 0x8b}})
fcntl$getownex(r1, 0x10, &(0x7f0000001300)={0x0, <r4=>0x0})
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
r6 = epoll_create1(0x80000)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f0000001340)={r6, r0, 0xe5b})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x5)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x0, 0xe, 0xa, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
open(&(0x7f0000001380)='./file0\x00', 0xc900, 0x10)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

12m52.560903473s ago: executing program 3 (id=545):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01040008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003740)={0x30, r6, 0xe7816804f9787cab, 0x70bd2a, 0x24dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0xc084)

12m50.599552629s ago: executing program 32 (id=537):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002dbd7000fedbdf25080001000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001700000000000000fa6500850000002a00000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5, r3}, 0xc)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r2, 0x9d, 0x1d}, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613235362d61726d363400000000000000000000000000001000"/79], &(0x7f0000000140)="71cf216571648d22a22e7005145bba9b490b678ac3c84c4a6a1773f808ea9ea56679e460785e2f76fb9751a4446719d5bdb198d1710098801ee129165f7e351926d026adaca732ddaa0cc50959721b78bd4a3a1d9f5ccd5572d7461cf84bb6b995777222633ad259adc7dde512a9d4c4b5766892ae526308faffbf233cefe4106d798114f1e6feb7d2f2010d68a70a44eaa8fc537545ca98956e75aea9", &(0x7f0000000200)="65c74c77d44978d2f6af92847c0eaa23952c2f291d590081fb0411bd05") (async)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r2, 0x9d, 0x1d}, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613235362d61726d363400000000000000000000000000001000"/79], &(0x7f0000000140)="71cf216571648d22a22e7005145bba9b490b678ac3c84c4a6a1773f808ea9ea56679e460785e2f76fb9751a4446719d5bdb198d1710098801ee129165f7e351926d026adaca732ddaa0cc50959721b78bd4a3a1d9f5ccd5572d7461cf84bb6b995777222633ad259adc7dde512a9d4c4b5766892ae526308faffbf233cefe4106d798114f1e6feb7d2f2010d68a70a44eaa8fc537545ca98956e75aea9", &(0x7f0000000200)="65c74c77d44978d2f6af92847c0eaa23952c2f291d590081fb0411bd05")
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x21, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000002000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000031000000850000000600000018250000", @ANYRES32=r0, @ANYBLOB="000000000100000018220000", @ANYRES32=r0, @ANYBLOB="000000000e000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000feff00000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7, <r8=>r7}, &(0x7f0000000600), &(0x7f0000000640)=r6}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)
syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0xb, @win={{0x40, 0x96b, 0x800, 0x4}, 0x9, 0x8, 0x0, 0x5, 0x0, 0x80}})
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid() (async)
r9 = getpid()
sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r11, &(0x7f0000000380)=[{{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x61, &(0x7f0000000300)=[{&(0x7f0000000880)="64c5988a26fd33c1ad1b890d3574e940e6acf620da251ce4f479ebb9c09ffd16404097ec7f904945aa3a717e64a8817eb31c84e2b024f90471dcea579337e59e21e70aebffba452b7568a9347b887e1c086fdc7ce27ee021deeb6ac58aaa970b587ef55676848ed4787c205339864877bbcf8d3d8b6c24f43fd6717bf586ca139f1aa0bef0f3f67cd57198e9aa8615214b242b371a3a50ae18231a5557f1f53ebd61ccb3ff55d7a4f53c49f5efc0302df9cf281bc39defb646134b6031baddf543380ad6ed7a7475b573150c0282eaeb89ae78ef39b2a51c93c241713844a757da42052eaaf46f4b06ad00372b1780e6", 0xf0}], 0x1, 0x0, 0x0, 0x48090}}], 0x1, 0x0) (async)
sendmmsg$unix(r11, &(0x7f0000000380)=[{{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x61, &(0x7f0000000300)=[{&(0x7f0000000880)="64c5988a26fd33c1ad1b890d3574e940e6acf620da251ce4f479ebb9c09ffd16404097ec7f904945aa3a717e64a8817eb31c84e2b024f90471dcea579337e59e21e70aebffba452b7568a9347b887e1c086fdc7ce27ee021deeb6ac58aaa970b587ef55676848ed4787c205339864877bbcf8d3d8b6c24f43fd6717bf586ca139f1aa0bef0f3f67cd57198e9aa8615214b242b371a3a50ae18231a5557f1f53ebd61ccb3ff55d7a4f53c49f5efc0302df9cf281bc39defb646134b6031baddf543380ad6ed7a7475b573150c0282eaeb89ae78ef39b2a51c93c241713844a757da42052eaaf46f4b06ad00372b1780e6", 0xf0}], 0x1, 0x0, 0x0, 0x48090}}], 0x1, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x400000000000096, 0x2, 0x0) (async)
recvmmsg(r10, &(0x7f00000000c0), 0x400000000000096, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5886, 0x10, 0x80000000, 0xffffffff}, &(0x7f0000000b40)=<r12=>0x0, &(0x7f0000000280)=<r13=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2f, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1})

12m46.518938999s ago: executing program 33 (id=542):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
prlimit64(r0, 0xe, &(0x7f0000000300)={0xa, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r7, @ANYBLOB="08002600b41400000a000600ffffffffff849de99d32ff00e4070022013400000008009f0002000000003400010101"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x1)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x0, 0x20040044)
recvmmsg(r8, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000001b00)=""/4106, 0x1000}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000000680)=""/181, 0xb5}, {&(0x7f0000000740)=""/149, 0x95}], 0x6}, 0x7}, {{0x0, 0xfffffffffffffef9, &(0x7f0000000440), 0x0, &(0x7f00000019c0)=""/189, 0xbd}, 0x4}], 0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0)
r11 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x107ff9, 0x32c, 0x0, r10}, &(0x7f0000000800)=<r12=>0x0, &(0x7f0000000040)=<r13=>0x0)
syz_io_uring_submit(r12, r13, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r10, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1})
io_uring_enter(r11, 0xfd0, 0x4c1, 0x43, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

12m40.304705671s ago: executing program 34 (id=543):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x7) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), 0x4) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000003ac0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='ext4_discard_blocks\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) (async)
migrate_pages(0x0, 0x9, &(0x7f0000000340)=0x3, &(0x7f0000000380)=0x102) (async)
ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2)

12m19.533972284s ago: executing program 35 (id=544):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x20002f7})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, <r3=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000300)={{r3, 0x6, 0xfffffffffffffffc, 0x6, 0x1, 0xfffffffffffff457, 0x9, 0x7fff, 0x6, 0xfffffff7, 0x8, 0xd, 0xf75a, 0xd85e, 0x8b}})
fcntl$getownex(r1, 0x10, &(0x7f0000001300)={0x0, <r4=>0x0})
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
r6 = epoll_create1(0x80000)
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f0000001340)={r6, r0, 0xe5b})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x5)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x0, 0xe, 0xa, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
open(&(0x7f0000001380)='./file0\x00', 0xc900, 0x10)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

12m19.475531336s ago: executing program 36 (id=545):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01040008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003740)={0x30, r6, 0xe7816804f9787cab, 0x70bd2a, 0x24dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0xc084)

11m4.836453273s ago: executing program 5 (id=788):
set_tid_address(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x50, 0x1, 0x0, "d02067046edd9a2ad5b4f84e565c6f0f30807278f8983c3c0a31965ebd9ca8ac"})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000000009000300735f7af5ff00000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}})
readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97)
syz_fuse_handle_req(r7, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000004200)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x20, 0xa, 0xc, 0x7, 0xcdd, 0x0, 0x0, 0x80, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r7, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x2, 0x5, 0xfffffffffffffff9, 0x400, 0xc, {0x0, 0xb, 0x7, 0x1, 0x1, 0x4, 0x9, 0x0, 0x4, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r7, &(0x7f0000004280)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(r7, &(0x7f0000006400)={0x10, 0x0, r8}, 0x10)

11m3.845530729s ago: executing program 5 (id=789):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="02e700f8ff010000"], 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xf0003, 0x0)

11m3.253666916s ago: executing program 5 (id=790):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = getpgrp(r1)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='bic', 0x3)
shutdown(r4, 0x1)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
process_vm_writev(r2, &(0x7f0000000b00)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/254, 0xfe}, {&(0x7f0000000840)=""/9, 0x9}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/152, 0x98}, {&(0x7f0000000a00)=""/94, 0x5e}, {&(0x7f0000000a80)=""/100, 0x64}], 0x8, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/91, 0x5b}, {&(0x7f0000000c00)=""/14, 0xe}], 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg2\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xf0, r8, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x4008094)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x6, 0x2, {0x2, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004001}, 0x8000)
getpid()
r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r11, 0x0, 0xa0028000}, 0x38)

11m2.977714216s ago: executing program 5 (id=792):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)
truncate(&(0x7f0000000000)='./file1\x00', 0x825)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

11m1.266428315s ago: executing program 5 (id=800):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, 0x0, &(0x7f0000000600)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0})
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="02e700f8ff010000"], 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xf0003, 0x0)

11m0.946122713s ago: executing program 5 (id=802):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) (async)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) (async)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) (async)
pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000440)="0021439ffd81d1ccc73d6e5f93cc0900000000000000", 0x16}], 0x1, 0x8, 0x49d) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "ffffc8212475010000000000000000000000000000000000a7084cd572df2655", "61241765", '\t\x00'}, 0x38) (async)
r2 = socket$alg(0x26, 0x5, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r3], 0x1c}}, 0x804)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x20000010304}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) (async)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0xfffffffffffffffc, 0x1, 0x1}}, 0x40) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x20040800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x11a, 0x1, 0xce}}], 0x18}, 0x8000)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r7, &(0x7f0000002180)=""/4101, 0x1005, 0x1) (async)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x9, 0x800, 0x10, 0x7, 0x1})
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000001c0)={0x1b3, 0xf7c, 0xf8, 0x200}, 0x8)

11m0.729595134s ago: executing program 37 (id=802):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) (async)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) (async)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) (async)
pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000440)="0021439ffd81d1ccc73d6e5f93cc0900000000000000", 0x16}], 0x1, 0x8, 0x49d) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "ffffc8212475010000000000000000000000000000000000a7084cd572df2655", "61241765", '\t\x00'}, 0x38) (async)
r2 = socket$alg(0x26, 0x5, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r3], 0x1c}}, 0x804)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x20000010304}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) (async)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0xfffffffffffffffc, 0x1, 0x1}}, 0x40) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x20040800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x11a, 0x1, 0xce}}], 0x18}, 0x8000)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r7, &(0x7f0000002180)=""/4101, 0x1005, 0x1) (async)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x9, 0x800, 0x10, 0x7, 0x1})
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000001c0)={0x1b3, 0xf7c, 0xf8, 0x200}, 0x8)

9m22.198636113s ago: executing program 8 (id=1229):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, <r0=>0x0})
sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004)
setrlimit(0xc, &(0x7f0000000280)={0x1, 0x200})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'lo\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001400100029bd7000fedbdf25021004fd", @ANYRES32=r8, @ANYBLOB="15000600020000000700000005ff"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$FBIOGETCMAP(r9, 0x4604, &(0x7f00000015c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = accept4(r5, 0x0, 0x0, 0x80800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8927d2a8103ef2f4b93766b756b66f74f46cf801704d27a8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511ce678c0bb8e26d7b48241847bf9e343ef4e55d45e2a0000000000000000000", 0xfffffe7f}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de990e40a896805e49ce1e13103d82fffe82237f587e63d95e01ef451eaba2dd01c56e7f23c1fcccbea54dae8e295f2e533e4a34175026a9964eebc1aaae05e44a19a27bee2f591abe2f456448754670a7c3e2e4b47a71bc7"}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x40800)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

9m20.455606025s ago: executing program 8 (id=1237):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1f00000000000000000000000020"], 0x50) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async, rerun: 32)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) (rerun: 32)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
syz_io_uring_setup(0x496, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r4 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff00000000010000000000000083a23c4b125cd0cb66020d0dec68bdf2f631705b10ab2e1b4a166191b5a7a4bfb6e20d6413681b077a038ce5c447474bc4ded41e830e7eaf8371896209e2c8497aec4f52835c383b03ecc1a9be540ed47aa8228efe02cfe92a861419d5ec06bcf215d820515338549b3dad61ffbd7400e8db8093ea7b4a62b71fe7ec5f7169d937e5ebd0be5b8952dacb9aea7dff24e519", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r7)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (async)
r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0)
syz_usb_control_io(r11, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, 0x0}, 0x0)

9m20.301873464s ago: executing program 8 (id=1238):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x8c, 0x1e, 0x221, 0x0, 0x0, {0x3}, [@nested={0x75, 0x5d, 0x0, 0x1, [@generic="206b375a91ebb6a8e27b0a2d3dab5a687d984804563f551042ec847cec2ceb0f2f210fa6b1884c1aa4a97738dd5eacebad1ba4cfd3b7faac448543c1b9a03a1eec4b45ec0a090c95c1ac06bdb53f462368128be70da72ef6800292c911f9db536fb3ceb6a18c6a41ce6e2ce65a00000000"]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r2, 0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00002ec000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, 0xffffffffffffffff, 0xffffe000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x111, 0x2}}, 0x20)
timerfd_create(0x0, 0x80000)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getpgrp(0xffffffffffffffff)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x3000400, &(0x7f0000000040)={[], [], 0x2f})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r6, &(0x7f0000001400)=""/4088, 0xff8)

9m19.842909393s ago: executing program 8 (id=1241):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000002000/0x3000)=nil)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount_setattr(r2, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000, {r2}}, 0x20)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
read$hidraw(r4, &(0x7f0000002340)=""/147, 0x93)
syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000140)='\x00')

9m17.882829044s ago: executing program 8 (id=1252):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
open(0x0, 0x0, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94)
socket$packet(0x11, 0x3, 0x300)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0xd}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
inotify_init1(0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)

9m17.684450211s ago: executing program 8 (id=1253):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffdfa}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid() (async)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) (async)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1)
mknod$loop(0x0, 0x2000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f6", @ANYRES16=r4, @ANYBLOB="030300000000fcdbdf251100000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0440c0}, 0x810)
sendmmsg$inet6(r3, 0x0, 0x0, 0x10)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304106000000000000109022400010000000009040000"], 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304106000000000000109022400010000000009040000"], 0x0)

9m17.303915569s ago: executing program 38 (id=1253):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffdfa}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid() (async)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) (async)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1)
mknod$loop(0x0, 0x2000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f6", @ANYRES16=r4, @ANYBLOB="030300000000fcdbdf251100000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0440c0}, 0x810)
sendmmsg$inet6(r3, 0x0, 0x0, 0x10)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304106000000000000109022400010000000009040000"], 0x0) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304106000000000000109022400010000000009040000"], 0x0)

8m21.11150537s ago: executing program 1 (id=1543):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async)
fcntl$lock(r3, 0x6, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ffffff7f000000000800000085000000610000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00')
read(r5, &(0x7f0000001180)=""/4096, 0x1000)
mremap(&(0x7f0000337000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f00006c1000/0x3000)=nil) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)

8m20.546757848s ago: executing program 1 (id=1544):
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r0=>0x0)
r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0x1, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x86c}})
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

8m20.518762033s ago: executing program 1 (id=1547):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffffd, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3d}, @empty, [0xff, 0xff, 0xffffff00], [0x0, 0xff, 0xff, 0xff000000], 'ipvlan0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x33, 0x79, 0x3, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0x8000, 0x70000, 'pptp\x00', 'syz1\x00', {0x3}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'snmp\x00', {0x530e}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x58, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0)

8m20.476564346s ago: executing program 1 (id=1548):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x2, @local, 0xb7c}}]}, 0x70}, 0x1, 0x7}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r5}, 0x18)
ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000001380)={0x0, 0x1, 0x3})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3], [0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x40040041)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffff7, 0x1a3c82)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x20200009, 0x21, &(0x7f0000000240)={0x80, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4004890}, 0xc080)
ioctl$TIOCSLCKTRMIOS(r0, 0x8925, 0x0)

8m20.36272659s ago: executing program 1 (id=1549):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
close(0xffffffffffffffff)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) (async)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r1 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0xc, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf85}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
unshare(0x22020600) (async)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
listen(0xffffffffffffffff, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18) (async)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto, @fwd, @volatile={0x10}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @func={0xb, 0x0, 0x0, 0xc, 0x3}]}}, 0x0, 0x56}, 0x28) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

8m20.007094881s ago: executing program 1 (id=1554):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8000)
setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000600)=0x2f, 0x4)
getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f00000022c0))
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c)
listen(r0, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9)
io_setup(0x3ff, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x2, 0xfffffffffffffffe)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
accept4(r0, 0x0, 0x0, 0x80800)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x23, 0x4, @thr={&(0x7f00000001c0)="405998235cec7ee93d2cb886fbd65c4b7ac05cf73721c5252119fc5a75109e28d80f4af6b7ae0cc6b31de643707af52f4416d461a747d704975ac97d19a84e7b05a5f243ec6f06dade372847fbc89902545d16b1ef65410c0b6f9ff1c1832f007d56cb3bff2ada0d51c9c4ac321b092dda92e0de0aa2cfc767611cef5fb4bb2dce5267089aabb2b2933007bc8116f52b8b22dc3b60e4e3d3a75dd8b87c1ae559a0554ea369752e39e2fc58beac821df393ef0a936491b99477500e289e760a380aec589843624e95133a8e5afaefaa5d3c72db79a3921d0aa0d2bed096024f6670a96c6349ea0d358d8f096306b301cd4a", &(0x7f0000000000)="52fe9dc4d0e2da5ba807e69f589de856471e2b5f2b8739d157d38251c67f9d"}}, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000006800010003001000fdffff7f000003000000000000000200"], 0x1c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
timer_settime(r3, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20a00, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0, 0x13}], 0x1, 0x4d, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f00000005c0)={{0x4, 0x0, 0x80, {0x2000, 0x4000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"})
memfd_create(&(0x7f0000000180)='[\x00', 0x6)
syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000c8549b407c2c0e032881010203010902240001000000000904000007000000000000000207dd90671cb5bf1e12b451b0ff03000000090582020800000000"], 0x0)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
timer_delete(0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])

8m4.860072029s ago: executing program 39 (id=1554):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8000)
setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000600)=0x2f, 0x4)
getsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, &(0x7f00000022c0))
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfbf, @empty}, 0x1c)
listen(r0, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x9)
io_setup(0x3ff, &(0x7f0000000000)=<r2=>0x0)
io_submit(r2, 0x2, 0xfffffffffffffffe)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
accept4(r0, 0x0, 0x0, 0x80800)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x23, 0x4, @thr={&(0x7f00000001c0)="405998235cec7ee93d2cb886fbd65c4b7ac05cf73721c5252119fc5a75109e28d80f4af6b7ae0cc6b31de643707af52f4416d461a747d704975ac97d19a84e7b05a5f243ec6f06dade372847fbc89902545d16b1ef65410c0b6f9ff1c1832f007d56cb3bff2ada0d51c9c4ac321b092dda92e0de0aa2cfc767611cef5fb4bb2dce5267089aabb2b2933007bc8116f52b8b22dc3b60e4e3d3a75dd8b87c1ae559a0554ea369752e39e2fc58beac821df393ef0a936491b99477500e289e760a380aec589843624e95133a8e5afaefaa5d3c72db79a3921d0aa0d2bed096024f6670a96c6349ea0d358d8f096306b301cd4a", &(0x7f0000000000)="52fe9dc4d0e2da5ba807e69f589de856471e2b5f2b8739d157d38251c67f9d"}}, &(0x7f0000000100)=<r3=>0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000006800010003001000fdffff7f000003000000000000000200"], 0x1c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
timer_settime(r3, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20a00, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0, 0x13}], 0x1, 0x4d, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f00000005c0)={{0x4, 0x0, 0x80, {0x2000, 0x4000}}, "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", "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"})
memfd_create(&(0x7f0000000180)='[\x00', 0x6)
syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000c8549b407c2c0e032881010203010902240001000000000904000007000000000000000207dd90671cb5bf1e12b451b0ff03000000090582020800000000"], 0x0)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
timer_delete(0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])

15.798191208s ago: executing program 6 (id=3820):
syslog(0x3, &(0x7f00000007c0)=""/210, 0xd2)
r0 = socket$inet(0x2, 0x3, 0x2f)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r1, 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x80}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280))
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

15.774821123s ago: executing program 7 (id=3821):
add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9, 0xe9, 0xcc, 0x8, 0x5d1, 0x9008, 0x9591, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x96, 0x0, 0x0, 0x4e, 0x3, 0x9a}}]}}]}}, 0x0)

12.666906456s ago: executing program 7 (id=3838):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x2c4000, 0x0) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x2c4000, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
readv(r3, &(0x7f00000001c0), 0x7) (async)
readv(r3, &(0x7f00000001c0), 0x7)
sched_setattr(r0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x8001, 0x1, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
r4 = creat(0x0, 0x122)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
dup3(r6, r5, 0x0) (async)
r7 = dup3(r6, r5, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000649000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6dd) (async)
mmap$binder(&(0x7f0000649000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6dd)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)

12.662923549s ago: executing program 6 (id=3839):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000140)={0x6, 0x10})
ioctl$TCFLSH(r0, 0x400455c8, 0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2601, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x20000000)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a027b3ff82e875988b147043022effffb3"], 0x0}, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x7ff})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r5, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x40000050)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

9.568439657s ago: executing program 7 (id=3851):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000300)=0x3, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x0)
setresuid(0x0, r5, 0x0)
setreuid(r5, r5)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40c99, 0x60503}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_bond\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8851}, 0x40000c8)

9.559319317s ago: executing program 6 (id=3852):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x200, 0x40000001, 0x4, 0x0, 0x2, "0062ba7d8207000000ecf5000000f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x13)
ioctl$TCXONC(r1, 0x540a, 0x2)

8.167123794s ago: executing program 9 (id=3858):
socket$l2tp6(0xa, 0x2, 0x73)
openat$dsp(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
socket$caif_stream(0x25, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x81)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(r0, &(0x7f0000002600)=[{&(0x7f0000000300)="d88b2da57872c5", 0x7}, {&(0x7f0000002500)="e050", 0x2}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40)
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x65f4c2b2cd71285c, './file1\x00'}, 0x6e)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffc62)
ioctl$SNAPSHOT_FREE(r3, 0x3305)
write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'ip6erspan0', 0x32, 0x34}, 0xd)

7.981765961s ago: executing program 9 (id=3859):
mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='proc\x00', 0x281473, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) (async)
mkdir(&(0x7f0000000000)='./file2\x00', 0xe) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f0000000000)=0x8) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a31000000002800048010000180090001006d61737100000000140001800a0001007265646972000000040002800900020073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async)
close(0x3)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async)
recvmmsg(r4, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000003c0)=""/92}, {&(0x7f0000002000)=""/4096}, {&(0x7f0000000300)=""/9}, {&(0x7f0000000840)=""/99}, {&(0x7f00000008c0)=""/201}, {&(0x7f0000000d00)=""/194}, {&(0x7f0000000c00)=""/166}, {&(0x7f0000000600)=""/23}, {&(0x7f0000001000)=""/180}, {&(0x7f00000010c0)=""/201}], 0x0, &(0x7f0000001400)=""/249}, 0xffffffff}], 0x400000000000100, 0x60010000, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x4)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})

6.502691401s ago: executing program 7 (id=3863):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000000)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200005, 0x30}, 0xc)
sendto$inet6(r0, &(0x7f0000000400)='\b?', 0x2, 0x80, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
close(0xffffffffffffffff)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000019300)={0x6, 0x4, &(0x7f0000019300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r3, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r2, r3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1)

6.41401595s ago: executing program 6 (id=3864):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x14, r0, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x40010)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7f}}, @hoplimit={{0x14}}, @hopopts={{0x110, 0x29, 0x36, {0x5e, 0x1e, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xe7}, @generic={0x8, 0xe3, "5b23ee96da0c829e73eacc40ed3b962336155ffdc14aa07d00000000a7ef42203f152ece05d20ef9699897b829f1d5dc3a79886af23370fb206674a55c7757c0ca22b5fec4679c1bd59147bfb9f5608240068e018ab18924ff5903506cad2b94132fa0ae46b26bdf7f5b0ebb4a38afb6eadf15b36ee4a8508648510bc83a7ff6548c896564ae35e0ca51cd7b66408221388e694fd1d520c837486bc3e6dc0e33496b4d2ba0f2c2bd5fbb8afb1cc91d6df9ba2c1a34ffc767f6b0d34c7500ec0ebcb7152782fbdd981d5e82daf56b97a61601aae936b214914d3207088b98a130c20000"}, @generic={0x1, 0x2, "2bdb"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0x158}}], 0x1, 0x810)
futex(0x0, 0x204, 0x2, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="6f46c908341889a11ea3992276d5ab9e10824f9fcfb7f6d042618c6866e3801459b03d38ea918910602c461a2efae322fa6119ac242a51d6da28c74d466e336b26c77454129b8f099137cbe49f4f0d25a1887a2a71ab45b6bed147c61d2108915369d90861af6441ec422495a54e03b9b8a72989a44ab1eb127d8b935e45b14c721e41b0ae5a78be", 0x88}], 0x1, 0x0, 0x0, 0x84}], 0x2, 0x4040000)
r2 = socket(0x10, 0x2, 0x4)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x4c)
r3 = socket(0x1d, 0x2, 0x6)
sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)={0x2, [<r4=>0x0, 0x0]}, &(0x7f0000000240)=0xc)
sendmsg$inet_sctp(r3, &(0x7f00000008c0)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000084000000000000000900ba35400004001800000000000000840000000000000002002a00040005002000000000000000840000000200000006c364029d4d2c702684d8a5fe2d7606b0e9b0b8ff4600010001000000ff0f00002e69daf3f1defb20a13c9e50175fd34957eeeb36d46f51841a5319fe90", @ANYRES32=r4], 0x50, 0x4}, 0x4)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000a00)={r4, @in={{0x2, 0x4e20, @remote}}, 0x1, 0x7}, &(0x7f0000000280)=0x90)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r5, 0x3)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500006c000000008106907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c0400ca90781000080a8000000000000fbc050a00000007fffffffc080a008015010000008a1312f4142e8e7d3f904711ca154d8b01873413120c39e122bd2f7556512830127a3fa7b7d1494ce5c300"], 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)

5.493577048s ago: executing program 2 (id=3866):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000000ecffffff0080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0xa0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x28000600)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000001c0)={0x8, 0x3000, 0x1, r3, 0xe})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000300)=@ethtool_eeprom={0xc, 0x7, 0xbc5f, 0x19, "f1fb44466ec5e2ac2b7dcd63c9df9b4786ed14dc44ae8d2d3d"}})
syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$set_reqkey_keyring(0xf, 0xfffffffb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

5.265151178s ago: executing program 2 (id=3867):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_usb_disconnect(r0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000200))
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

4.874591472s ago: executing program 9 (id=3868):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x400, 0x18}, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@getsadinfo={0xa0, 0x23, 0x200, 0x70bd25, 0x25dfdbfb, 0x0, [@sec_ctx={0xd, 0x8, {0x9, 0x8, 0x1, 0x5, 0x1, "be"}}, @migrate={0x50, 0x11, [{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, @in6=@mcast1, 0x2b, 0x2, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x0, 0xa}}]}, 0xa0}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r8 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002)
writev(r8, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0x9, 0x0, 0x4800, r5, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="fbff0400", @ANYRES32=r3, @ANYBLOB="000000003db30000185900000200"/24], &(0x7f0000000280)='GPL\x00', 0xc, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, r4, r5, r8, r9], &(0x7f0000000480)=[{0x2, 0x1, 0x7, 0xa}], 0x10, 0x101}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)

3.961022974s ago: executing program 9 (id=3869):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bond0\x00', 0x50)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000002c0))
getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
set_mempolicy(0x4, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
utime(0x0, &(0x7f00000001c0)={0x8, 0x6})
socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.840607723s ago: executing program 9 (id=3870):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240)
creat(&(0x7f0000000040)='./file0\x00', 0x4b)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000210902120001000000000904"], 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r4, 0x8}, &(0x7f00000000c0)=0x8)
write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x80, 0xc9, 0x80, 0x7}}}, 0x9)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00')
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
syz_open_dev$dri(&(0x7f00000002c0), 0x12c5, 0x80c002)
writev(r5, 0x0, 0x0)
write$binfmt_aout(r5, 0x0, 0x0)

3.262321718s ago: executing program 6 (id=3874):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffd9c, 0x50, 0x2, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x1}, {}, {}, {0x9}, {0x1, 0x5}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r1) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) (async)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
r3 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x15cd, 0x3000, 0x3, 0x3c3})
io_uring_enter(r3, 0x0, 0xcb, 0xf, &(0x7f0000000000), 0x18) (async, rerun: 64)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) (rerun: 64)

3.258797515s ago: executing program 7 (id=3875):
syz_io_uring_setup(0x83b, 0x0, &(0x7f0000000140), &(0x7f0000000400))
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x2a, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid() (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000193c0)='pagemap\x00')
flock(r3, 0xc) (async)
flock(r3, 0xc)
recvmmsg(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/165, 0xa5}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f00000016c0)=""/123, 0x7b}, {&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f00000015c0)=""/227, 0xe3}, {&(0x7f00000016c0)}], 0x8}, 0x10004}], 0x1, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="08000000b6b916edb92b63f68170d023404518c9deed18fc179aedec3dce71101947ddef826fe257e69d2899f64ccce466483e2a", @ANYRES16=r5, @ANYBLOB="0f0029bd7000ffdbdf2510000000060011003900000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x20040080)
getpgid(r0)

3.194385072s ago: executing program 2 (id=3876):
r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0)
ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f00000000c0), 0x5005)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
r1 = io_uring_setup(0x6cb6, &(0x7f0000000880)={0x0, 0x8cbc, 0x2, 0x20000002, 0x10026c})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0xfffffffe, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, 0x0, 0x0)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

3.026746791s ago: executing program 0 (id=3877):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}], 0x18, 0x801}], 0x1, 0x54)
r1 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x4000e7a9, 0x80, 0x7ffe, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000600000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c7a49c00000000000000392985c3f8e1427138e3a191a0946d1058a0bfd82800000000000000cbe966b09e93a13100040000000000000000000000c7fd42c194ab83e721dd25e79e441ea4395219d35ba4315717a385e3630807f304a7aba45dd32162d9020000006d538c79effed010f408426285b77841f933f7bc445ece8e44d98bdebe5cc4d881465b224c92f7c5ce52640a5b6a929ebdf4a746b678b8948b62b6094eb64cf5579f9804468d882d2b90fe507927ad6c91edd7044009e9ef3de567d38aa1be82a7bf543b81bb3da3ad10570a4b4d04549bba86ef1ec8ccb56e8d5b0ce55e14"], 0x50)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x200ffb, 0x0, 0x4)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r5 = dup(r4)
io_setup(0x19, &(0x7f00000009c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}])
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2161, 0x1, {0x2}})
io_uring_enter(r1, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)

2.438494581s ago: executing program 0 (id=3878):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x7800, 0x8, 0xc26, 0x0, {{0x3c, 0x4, 0x3, 0x1a, 0xf0, 0x65, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, {[@generic={0x7, 0x4, "15e6"}, @end, @timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x9}, {@private=0xa010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}]}, @cipso={0x86, 0x2c, 0x2, [{0x5, 0x5, "45181f"}, {0x6, 0xb, "8a790de969bdc53bb5"}, {0x1, 0xf, "66dc5d2b89a425df2a0e254d98"}, {0x6, 0x7, "8f63a11cdb"}]}, @lsrr={0x83, 0xb, 0x73, [@remote, @broadcast]}, @ssrr={0x89, 0x2b, 0x7c, [@multicast1, @loopback, @remote, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @broadcast, @empty]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0x11, 0x1, 0x9, [{@rand_addr=0x64010100, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x32}, 0xf}, {@private=0xa010100, 0x80000001}, {@broadcast, 0xa}, {@empty, 0x2}, {@empty, 0x5}, {@remote, 0x89e7}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x63b1}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000340)={0x4000, 0x4f, 0x18}, 0x18)
sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x8000804)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
syz_emit_ethernet(0x5e, &(0x7f0000000400)={@local, @remote, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x7, 0x0, 0x3}}, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0x40, 0x1, 0x0, 0x0, "ae0c1414e65063a4e003ceffef744b6db27667f2a2c01af01c80628fead2934b164e998775f5128446bb7e8de139a0c2ec5e333af27b80b8857b27b30d034397"}}}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0)

1.503111177s ago: executing program 0 (id=3879):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x40001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000540)=""/188, 0xbc}, {&(0x7f0000000600)=""/116, 0x74}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/64, 0x40}], 0x5}, 0x3}, {{&(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)=""/235, 0xeb}], 0x1, &(0x7f00000008c0)=""/90, 0x5a}, 0x10}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/160, 0xa0}, {&(0x7f0000000a00)=""/24, 0x18}], 0x2, &(0x7f0000002c80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000ac0)=@caif, 0x80, &(0x7f0000000d40)=[{&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f0000000c40)=""/244, 0xf4}], 0x3}, 0x20000}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d80)=""/9, 0x9}], 0x1, &(0x7f0000001ec0)=""/195, 0xc3}}, {{&(0x7f0000000e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001fc0)=""/14, 0xe}, {&(0x7f0000002000)=""/131, 0x83}, {&(0x7f00000020c0)=""/49, 0x31}, {&(0x7f0000002100)=""/144, 0x90}, {&(0x7f00000021c0)=""/136, 0x88}, {&(0x7f0000002280)=""/175, 0xaf}, {&(0x7f0000002340)=""/168, 0xa8}], 0x7, &(0x7f0000002480)=""/117, 0x75}, 0x6}], 0x6, 0x51ac9dc609280c74, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) (async)
sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0xa) (async)
write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\x00', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x46, 0x46, 0x43, 0x43, 0x43]}, 0x2e) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100037c0000040042800c000180060006008848"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)

1.484843952s ago: executing program 2 (id=3880):
prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x31, 0xffffffffffffffff, 0xbdded000)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f00000002c0)={{}, "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"})
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x140)
getdents64(r0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x0, 0xb1)
r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0)
open_by_handle_at(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x4006000)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e0b06c90006"], 0xe)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
dup(r4)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}})
read$FUSE(r6, &(0x7f0000002680)={0x2020}, 0x2020)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

1.03459722s ago: executing program 0 (id=3881):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000002c0)="a6", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x4, 0xfcc0, 0x41, 0x0, 0x0)
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
socket(0x25, 0x3, 0x800200ff)
shutdown(r0, 0x1)

429.60186ms ago: executing program 2 (id=3882):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) (async)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x80, 0x7, 0x8000000000000000, 0x9, <r2=>0x0})
ptrace$ARCH_GET_FS(0x1e, r2, &(0x7f0000000200), 0x1003) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'veth0_vlan\x00'}, 0x18) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@gettaction={0x70, 0x32, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x57c}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x200000000000011, 0x2, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

428.029134ms ago: executing program 2 (id=3883):
r0 = socket$netlink(0x10, 0x3, 0x0)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
syz_usb_connect(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0xf4, 0xdd, 0x8, 0x46d, 0x8b1, 0x6d2a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x15, 0xb3, 0x83}}]}}]}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60010000", @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf250c0000004c0105802c00028008000200da0800000800040003000000080001001d000000080002000000000008000300580f00003400028008000400f9ffffff080002000400000008000300dc0000000800040040000000080002000008000008000200080000003c000280080003000c00000008000200e303000008000300ff07000008000200faffffff080003000400000008000100060000000800020000100000080001007564700008000100756470004c000280080001001f00000008000200020000000800040010000000080004000400000008000200000000000800010001000000080002000008"], 0x160}, 0x1, 0x0, 0x0, 0x28000021}, 0x24008854)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0)
ftruncate(r5, 0x8800000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
clock_adjtime(0x2, &(0x7f0000000600)={0x6, 0x1, 0x0, 0xf83, 0x4, 0x81, 0x8001, 0x4, 0xbdb1, 0x0, 0xfffffffffffff595, 0x4, 0x3, 0x4ed6112c, 0x7, 0x9, 0x10000, 0x4, 0x401, 0x8, 0x3, 0x2, 0x1, 0x1, 0x7fffffff, 0x81})
setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xfff2}, {0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x29, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004841}, 0x0)

417.461336ms ago: executing program 9 (id=3884):
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/73, 0x49}, {&(0x7f0000000600)=""/237, 0xed}], 0x5, &(0x7f0000000780)=""/189, 0xbd}, 0xa}, {{&(0x7f0000000840)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000008c0)=""/223, 0xdf}, {&(0x7f00000009c0)=""/81, 0x51}, {&(0x7f0000000a40)=""/150, 0x96}], 0x3, &(0x7f0000000b00)=""/143, 0x8f}, 0x8}, {{&(0x7f0000000bc0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/60, 0x3c}], 0x1, &(0x7f0000000cc0)=""/113, 0x71}, 0x9}, {{&(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000dc0)=""/225, 0xe1}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000001f00)=""/230, 0xe6}, 0x3}, {{&(0x7f0000002000)=@caif=@dgm, 0x80, &(0x7f0000002640)=[{&(0x7f0000002080)=""/249, 0xf9}, {&(0x7f0000002180)=""/12, 0xc}, {&(0x7f00000021c0)=""/107, 0x6b}, {&(0x7f0000002240)=""/238, 0xee}, {&(0x7f0000002340)=""/112, 0x70}, {&(0x7f00000023c0)=""/101, 0x65}, {&(0x7f0000002440)=""/225, 0xe1}, {&(0x7f0000002540)=""/12, 0xc}, {&(0x7f0000002580)=""/33, 0x21}, {&(0x7f00000025c0)=""/119, 0x77}], 0xa, &(0x7f0000002700)=""/119, 0x77}, 0x4}], 0x5, 0x10000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
r7 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r7, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002940)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf250200000008002b000021000008000300", @ANYRES32=r10, @ANYBLOB="08000b0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
recvmmsg(r7, 0x0, 0x0, 0x1000400000de, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000028c0)='memory.oom.group\x00', 0x2, 0x0)
syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=<r11=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)

162.756703ms ago: executing program 0 (id=3885):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r2 = fcntl$getown(r1, 0x9)
timer_create(0x1, &(0x7f0000000080)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f0000000240))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xb, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYRESOCT=r2], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000580)='pwc_handler_enter\x00', r4, 0x0, 0x8001}, 0x18)
r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x200001, 0x0)
io_setup(0x6, &(0x7f0000000540))
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f00000004c0), 0x0, 0x60, &(0x7f0000000500), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000940)={0x9c, r6, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x106}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x801}, 0xc810)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r8 = getpid()
sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7)

83.220861ms ago: executing program 7 (id=3886):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x64, 0x0, 0x0, 0x1}, {0x6}]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x4537686b1ea6bcfe, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)
sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1120}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff9, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x9}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002)

82.744185ms ago: executing program 6 (id=3887):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002240)=""/102400, 0x19000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000240)={0x10800, 0x7fffffff, 0x0, 0x8, 0x230, 0x8})
timer_settime(0x0, 0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc8902, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x17})
ptrace(0x10, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpcgss_svc_seqno_low\x00', r3}, 0x18)
r6 = creat(&(0x7f0000000280)='./file0\x00', 0x142)
write$binfmt_elf32(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f00000004"], 0x258)
close(r6)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
userfaultfd(0x80001)

0s ago: executing program 0 (id=3888):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
syz_clone(0x808a000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x140, 0x82)
r5 = fanotify_init(0x81, 0x40000)
fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) (async)
syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64)
read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020) (async, rerun: 32)
r6 = syz_open_dev$vcsu(&(0x7f0000000200), 0x5d67, 0x440040) (rerun: 32)
bind$tipc(r6, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x1, 0x2}}, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
unshare(0x40000000) (async)
r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
r8 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r7)
keyctl$invalidate(0x15, r8) (async)
keyctl$read(0xb, r8, 0x0, 0x0) (async)
syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000007c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xff, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xffff, 0x87, 0x3}, {0x6, 0x24, 0x1a, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x42}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xb, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x7, 0x8, 0x4}}}}}}}]}}, 0x0) (async, rerun: 32)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x14, 0x34, 0x107, 0x3, 0x0, {0xff, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (rerun: 32)

kernel console output (not intermixed with test programs):

interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  941.608707][   T48] magicmouse 0003:05AC:0323.001A: unknown main item tag 0x0
[  941.617417][T20482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  941.628352][   T48] magicmouse 0003:05AC:0323.001A: hidraw0: USB HID v0.00 Device [HID 05ac:0323] on usb-dummy_hcd.2-1/input0
[  941.687760][ T7235] bridge_slave_1: left promiscuous mode
[  941.701380][ T7235] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.710497][ T7235] bridge_slave_0: left allmulticast mode
[  941.717464][ T7235] bridge_slave_0: left promiscuous mode
[  941.723901][ T7235] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.731298][T18140] usb 10-1: new high-speed USB device number 104 using dummy_hcd
[  941.813990][   T48] usb 3-1: USB disconnect, device number 54
[  941.885919][T18140] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  941.905019][T18140] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  941.923107][T18140] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  941.940264][T18140] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  941.958527][T18140] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  941.988823][T18140] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.010299][T18140] usb 10-1: config 0 descriptor??
[  942.226649][T18140] hdpvr 10-1:0.0: firmware version 0x3 dated 3;¨“Ã~&X^€œ	wÒΖŠÒ¥g/ƒNÐ`žxè$«·¯=å"Ü—
[  942.238642][T18140] hdpvr 10-1:0.0: untested firmware, the driver might not work.
[  942.354222][ T7235] bond0 (unregistering): left promiscuous mode
[  942.360407][ T7235] bond_slave_0: left promiscuous mode
[  942.366590][T18140] hdpvr 10-1:0.0: device init failed
[  942.372689][ T7235] bond_slave_1: left promiscuous mode
[  942.380530][T18140] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12
[  942.385056][T20501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3668'.
[  942.409550][T18140] usb 10-1: USB disconnect, device number 104
[  942.423501][ T7235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  942.439276][ T7235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  942.449792][ T7235] bond0 (unregistering): Released all slaves
[  942.536988][ T7235] bond1 (unregistering): Released all slaves
[  942.663166][ T7235] bond2 (unregistering): Released all slaves
[  942.755595][ T7235] bond3 (unregistering): Released all slaves
[  942.794789][ T5829] Bluetooth: hci1: command tx timeout
[  942.855793][ T7235] bond4 (unregistering): (slave dummy0): Releasing active interface
[  942.869473][ T7235] bond4 (unregistering): Released all slaves
[  942.912991][T20482] hsr_slave_0: entered promiscuous mode
[  942.919570][T20482] hsr_slave_1: entered promiscuous mode
[  942.926216][T20482] debugfs: 'hsr0' already exists in 'hsr'
[  942.932998][T20482] Cannot create hsr debugfs directory
[  942.969653][ T7235] : left promiscuous mode
[  943.030301][ T7235] tipc: Left network mode
[  943.470358][T20525] netlink: 'syz.2.3671': attribute type 10 has an invalid length.
[  943.656615][T20525] syz_tun: entered promiscuous mode
[  943.752771][T20525] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  943.816472][T20539] orangefs_devreq_open: device cannot be opened in blocking mode
[  943.822023][T20482] 8021q: adding VLAN 0 to HW filter on device bond0
[  943.866742][T20482] 8021q: adding VLAN 0 to HW filter on device team0
[  943.903103][ T7235] hsr_slave_0: left promiscuous mode
[  943.910817][ T7235] hsr_slave_1: left promiscuous mode
[  943.925896][ T7235] veth1_macvtap: left promiscuous mode
[  943.951386][ T7235] veth0_macvtap: left promiscuous mode
[  944.052408][ T7235] pim6reg (unregistering): left allmulticast mode
[  944.260411][ T7235] team_slave_0 (unregistering): left promiscuous mode
[  944.267981][ T7235] team0 (unregistering): Port device team_slave_0 removed
[  944.648454][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state
[  944.655623][ T6521] bridge0: port 1(bridge_slave_0) entered forwarding state
[  944.762239][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state
[  944.769400][ T6521] bridge0: port 2(bridge_slave_1) entered forwarding state
[  945.041153][ T5829] Bluetooth: hci1: command tx timeout
[  945.146451][T20482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  945.158313][T20482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  945.356218][ T7235] IPVS: stop unused estimator thread 0...
[  945.441436][ T5970] usb 10-1: new high-speed USB device number 105 using dummy_hcd
[  945.508164][T20482] 8021q: adding VLAN 0 to HW filter on device batadv0
[  945.521445][   T48] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  945.631764][ T5970] usb 10-1: Using ep0 maxpacket: 16
[  945.639308][ T5970] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  945.657340][ T5970] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  945.667742][ T5970] usb 10-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00
[  945.672495][   T48] usb 3-1: Using ep0 maxpacket: 8
[  945.698498][ T5970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.698685][   T48] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  945.719244][ T5970] usb 10-1: config 0 descriptor??
[  945.724720][   T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.740304][   T48] usb 3-1: Product: syz
[  945.748447][   T48] usb 3-1: Manufacturer: syz
[  945.755190][   T48] usb 3-1: SerialNumber: syz
[  945.770097][   T48] usb 3-1: config 0 descriptor??
[  945.865096][T20482] veth0_vlan: entered promiscuous mode
[  945.882909][T20482] veth1_vlan: entered promiscuous mode
[  945.919920][T20482] veth0_macvtap: entered promiscuous mode
[  945.936686][T20482] veth1_macvtap: entered promiscuous mode
[  945.956696][T20482] batman_adv: batadv0: Interface activated: batadv_slave_0
[  945.975354][T20482] batman_adv: batadv0: Interface activated: batadv_slave_1
[  945.994633][   T48] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  946.133724][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  946.148954][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  946.205010][ T7235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  946.216833][ T7235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  946.461621][   T30] audit: type=1400 audit(947.401:1407): avc:  denied  { setattr } for  pid=20590 comm="syz.0.3663" name="L2CAP" dev="sockfs" ino=69194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  947.112415][ T5829] Bluetooth: hci1: command tx timeout
[  947.208130][   T30] audit: type=1400 audit(948.171:1408): avc:  denied  { write } for  pid=20609 comm="syz.0.3680" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  947.234973][   T30] audit: type=1400 audit(948.201:1409): avc:  denied  { read } for  pid=20609 comm="syz.0.3680" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  947.258367][   T30] audit: type=1400 audit(948.201:1410): avc:  denied  { open } for  pid=20609 comm="syz.0.3680" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  947.322941][   T30] audit: type=1400 audit(948.201:1411): avc:  denied  { map } for  pid=20609 comm="syz.0.3680" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  947.561060][ T8251] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  947.691080][ T8251] usb 1-1: device descriptor read/64, error -71
[  947.831889][   T48] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  947.941118][ T8251] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  948.081281][ T8251] usb 1-1: device descriptor read/64, error -71
[  948.201583][ T8251] usb usb1-port1: attempt power cycle
[  948.274206][ T5970] usbhid 10-1:0.0: can't add hid device: -71
[  948.280247][ T5970] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  948.308576][T18140] usb 3-1: USB disconnect, device number 55
[  948.325964][ T5970] usb 10-1: USB disconnect, device number 105
[  948.571548][ T8251] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  948.592204][ T8251] usb 1-1: device descriptor read/8, error -71
[  948.964725][ T8251] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  948.972488][   T30] audit: type=1400 audit(949.711:1412): avc:  denied  { bind } for  pid=20635 comm="syz.9.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  949.011720][ T8251] usb 1-1: device descriptor read/8, error -71
[  949.121342][ T8251] usb usb1-port1: unable to enumerate USB device
[  949.191308][ T5829] Bluetooth: hci1: command tx timeout
[  949.341620][   T30] audit: type=1400 audit(950.311:1413): avc:  denied  { map } for  pid=20652 comm="syz.9.3688" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  949.381125][   T30] audit: type=1400 audit(950.311:1414): avc:  denied  { execute } for  pid=20652 comm="syz.9.3688" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  949.480200][T20654] CIFS mount error: No usable UNC path provided in device string!
[  949.480200][T20654] 
[  949.498944][T20654] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  949.632281][T20654] netlink: 'syz.9.3688': attribute type 1 has an invalid length.
[  949.640240][T20654] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3688'.
[  949.781793][T20659] rdma_op ffff88804ba2b1f0 conn xmit_rdma 0000000000000000
[  949.970587][T20664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3690'.
[  950.057644][T20665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=20665 comm=syz.2.3690
[  950.070928][T20665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3690'.
[  950.346879][T20667] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3691'.
[  950.362079][   T30] audit: type=1400 audit(951.321:1415): avc:  denied  { audit_control } for  pid=20666 comm="syz.9.3691" capability=30  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  950.387219][T10898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  950.397094][T10898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  950.911101][ T8251] usb 10-1: new high-speed USB device number 106 using dummy_hcd
[  951.072724][ T8251] usb 10-1: Using ep0 maxpacket: 16
[  951.079204][ T8251] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  951.090302][ T8251] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  951.100726][ T8251] usb 10-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00
[  951.109865][ T8251] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.119171][ T8251] usb 10-1: config 0 descriptor??
[  951.141278][ T5970] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  951.303344][ T5970] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  951.312762][ T5970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.324248][ T5970] usb 1-1: config 0 descriptor??
[  951.339551][ T5970] cp210x 1-1:0.0: cp210x converter detected
[  951.538248][ T8251] magicmouse 0003:05AC:0323.001B: unknown main item tag 0x0
[  951.547934][T20692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  951.574693][T20692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  951.587378][ T8251] magicmouse 0003:05AC:0323.001B: hidraw0: USB HID v0.00 Device [HID 05ac:0323] on usb-dummy_hcd.9-1/input0
[  951.601496][T20692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  951.610213][T20692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  951.623935][T20692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  951.636661][T20692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  951.661897][T20692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  951.677541][T20692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  951.691739][T20692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  951.702570][T20692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  951.740135][ T5970] usb 1-1: cp210x converter now attached to ttyUSB0
[  951.753936][ T5970] usb 10-1: USB disconnect, device number 106
[  952.991408][  T975] usb 10-1: new high-speed USB device number 107 using dummy_hcd
[  953.176538][  T975] usb 10-1: config 0 has an invalid interface number: 99 but max is 0
[  953.187259][  T975] usb 10-1: config 0 has no interface number 0
[  953.202505][  T975] usb 10-1: config 0 interface 99 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1023
[  953.221167][  T975] usb 10-1: config 0 interface 99 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  953.231461][  T975] usb 10-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  953.243921][  T975] usb 10-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=79.68
[  953.253217][  T975] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.261849][  T975] usb 10-1: Product: syz
[  953.269090][  T975] usb 10-1: Manufacturer: syz
[  953.279067][  T975] usb 10-1: SerialNumber: syz
[  953.306341][  T975] usb 10-1: config 0 descriptor??
[  953.317708][T20705] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  953.337207][  T975] ftdi_sio 10-1:0.99: FTDI USB Serial Device converter detected
[  953.347304][  T975] ftdi_sio ttyUSB1: unknown device type: 0x7968
[  953.544821][ T7538] usb 10-1: USB disconnect, device number 107
[  953.552282][ T7538] ftdi_sio 10-1:0.99: device disconnected
[  953.905214][ T7538] usb 1-1: USB disconnect, device number 49
[  953.916834][ T7538] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  953.925095][ T7538] cp210x 1-1:0.0: device disconnected
[  955.202133][  T975] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  955.372756][T20733] Mount JFS Failure: -5
[  955.378532][   T30] audit: type=1400 audit(956.341:1416): avc:  denied  { read append } for  pid=20722 comm="syz.2.3708" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  955.381343][  T975] usb 1-1: device descriptor read/64, error -71
[  955.402293][   T30] audit: type=1400 audit(956.341:1417): avc:  denied  { open } for  pid=20722 comm="syz.2.3708" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  955.431888][   T30] audit: type=1400 audit(956.401:1418): avc:  denied  { ioctl } for  pid=20722 comm="syz.2.3708" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  955.581291][T15639] usb 10-1: new full-speed USB device number 108 using dummy_hcd
[  955.641244][  T975] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  955.732204][T15639] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  955.743596][T15639] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  955.754830][T15639] usb 10-1: config 0 interface 0 has no altsetting 0
[  955.761561][T15639] usb 10-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  955.770671][T15639] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.779004][  T975] usb 1-1: device descriptor read/64, error -71
[  955.787862][T15639] usb 10-1: config 0 descriptor??
[  955.901730][  T975] usb usb1-port1: attempt power cycle
[  955.953483][   T30] audit: type=1326 audit(956.921:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20722 comm="syz.2.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456518f749 code=0x7fc00000
[  956.199140][T15639] hid-steam 0003:28DE:1102.001C: unknown main item tag 0x0
[  956.207872][T15639] hid-steam 0003:28DE:1102.001C: unknown main item tag 0x0
[  956.216043][T15639] hid-steam 0003:28DE:1102.001C: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.9-1/input0
[  956.241107][  T975] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  956.261454][  T975] usb 1-1: device descriptor read/8, error -71
[  956.271101][ T7246] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  956.281252][T15639] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' connected
[  956.293271][T15639] input: Steam Controller as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:28DE:1102.001C/input/input34
[  956.314595][T15639] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0
[  956.325627][T15639] hid-steam 0003:28DE:1102.001D: unknown main item tag 0x0
[  956.347209][T15639] hid-steam 0003:28DE:1102.001D: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.9-1/input0
[  956.426171][ T7246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  956.443829][ T7246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  956.454766][ T7246] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  956.464300][ T7246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.474719][ T7246] usb 3-1: config 0 descriptor??
[  956.501182][  T975] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  956.521962][  T975] usb 1-1: device descriptor read/8, error -71
[  956.626720][T15639] usb 10-1: USB disconnect, device number 108
[  956.635196][  T975] usb usb1-port1: unable to enumerate USB device
[  956.665466][T15639] hid-steam 0003:28DE:1102.001C: Steam Controller 'XXXXXXXXXX' disconnected
[  956.891729][ T7246] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0
[  956.898808][ T7246] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0
[  956.905964][ T7246] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0
[  956.913420][ T7246] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0
[  956.920380][ T7246] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0
[  956.927445][ T7246] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0
[  956.934434][ T7246] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0
[  956.944716][ T7246] cp2112 0003:10C4:EA90.001E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  957.092748][ T7246] cp2112 0003:10C4:EA90.001E: Part Number: 0x82 Device Version: 0xFE
[  957.431104][ T7538] usb 10-1: new high-speed USB device number 109 using dummy_hcd
[  957.601105][ T7538] usb 10-1: device descriptor read/64, error -71
[  957.720674][T20735] cp2112 0003:10C4:EA90.001E: Multi-message I2C transactions not supported
[  957.734999][ T7246] cp2112 0003:10C4:EA90.001E: error reading lock byte: -71
[  957.746755][ T7246] usb 3-1: USB disconnect, device number 56
[  957.861502][ T7538] usb 10-1: new high-speed USB device number 110 using dummy_hcd
[  958.031200][ T7538] usb 10-1: device descriptor read/64, error -71
[  958.173752][ T7538] usb usb10-port1: attempt power cycle
[  959.045951][ T7538] usb 10-1: new high-speed USB device number 111 using dummy_hcd
[  959.071746][ T7538] usb 10-1: device descriptor read/8, error -71
[  959.321118][ T7538] usb 10-1: new high-speed USB device number 112 using dummy_hcd
[  959.352080][ T7538] usb 10-1: device descriptor read/8, error -71
[  959.473748][ T7538] usb usb10-port1: unable to enumerate USB device
[  960.581070][ T5970] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  960.731093][ T5970] usb 3-1: Using ep0 maxpacket: 32
[  960.737353][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  960.748380][ T5970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  960.758185][ T5970] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  960.767855][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.778735][ T5970] usb 3-1: config 0 descriptor??
[  961.171147][ T5956] usb 10-1: new full-speed USB device number 113 using dummy_hcd
[  961.198799][ T5970] usbhid 3-1:0.0: can't add hid device: -71
[  961.221224][ T5970] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  961.229023][ T7538] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  961.240320][ T5970] usb 3-1: USB disconnect, device number 57
[  961.252434][T20845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3727'.
[  961.324218][ T5956] usb 10-1: unable to get BOS descriptor or descriptor too short
[  961.334028][ T5956] usb 10-1: not running at top speed; connect to a high speed hub
[  961.343004][ T5956] usb 10-1: config 5 has an invalid interface number: 121 but max is 0
[  961.351474][ T5956] usb 10-1: config 5 has no interface number 0
[  961.359282][ T5956] usb 10-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=b3.a2
[  961.368724][ T5956] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.376865][ T5956] usb 10-1: Product: syz
[  961.381323][ T5956] usb 10-1: Manufacturer: syz
[  961.386005][ T5956] usb 10-1: SerialNumber: syz
[  961.402558][ T7538] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  961.412942][ T7538] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  961.422231][ T7538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.438180][ T7538] usb 1-1: config 0 descriptor??
[  961.452892][ T7538] pwc: Askey VC010 type 2 USB webcam detected.
[  961.599062][T20839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  961.607639][ T5970] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  961.616098][T20839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  961.630363][ T5956] dvb-usb: found a 'PCTV HDTV USB' in warm state.
[  961.640574][ T5956] pctv452e: pctv452e_power_ctrl: 1
[  961.640574][ T5956] 
[  961.647999][ T5956] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  961.647999][ T5956] 
[  961.659028][ T5956] dvb-usb: bulk message failed: -22 (5/0)
[  961.670018][ T5956] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  961.682765][ T5956] dvb-usb: PCTV HDTV USB error while loading driver (-19)
[  961.698474][ T5956] usb 10-1: USB disconnect, device number 113
[  961.771179][ T5970] usb 3-1: Using ep0 maxpacket: 8
[  961.780554][ T5970] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  961.791019][ T5970] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  961.800258][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.808348][ T5970] usb 3-1: Product: syz
[  961.812622][ T5970] usb 3-1: Manufacturer: syz
[  961.817221][ T5970] usb 3-1: SerialNumber: syz
[  961.823603][ T5970] usb 3-1: config 0 descriptor??
[  961.830404][ T5970] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  961.838511][ T5970] usb 3-1: setting power ON
[  961.843344][ T5970] dvb-usb: bulk message failed: -22 (2/0)
[  961.852536][ T5970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  961.862267][ T7538] pwc: recv_control_msg error -32 req 02 val 2b00
[  961.869256][ T7538] pwc: recv_control_msg error -32 req 02 val 2700
[  961.876153][ T5970] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  961.884851][ T5970] usb 3-1: media controller created
[  961.890914][ T7538] pwc: recv_control_msg error -32 req 02 val 2c00
[  961.893907][T20841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  961.908271][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  961.909454][T20841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  961.927100][ T5970] usb 3-1: selecting invalid altsetting 6
[  961.934553][ T7538] pwc: recv_control_msg error -32 req 04 val 1000
[  961.941042][ T5970] usb 3-1: digital interface selection failed (-22)
[  961.947629][ T5970] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  961.956735][ T7538] pwc: recv_control_msg error -32 req 04 val 1300
[  961.963826][ T5970] usb 3-1: setting power OFF
[  961.968886][ T5970] dvb-usb: bulk message failed: -22 (2/0)
[  961.975881][ T5970] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  961.985257][ T7538] pwc: recv_control_msg error -32 req 04 val 1400
[  961.992492][ T5970] (NULL device *): no alternate interface
[  961.996042][ T7538] pwc: recv_control_msg error -32 req 02 val 2000
[  962.013295][ T7538] pwc: recv_control_msg error -32 req 02 val 2100
[  962.026426][ T5970] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  962.220662][ T7538] pwc: recv_control_msg error -71 req 02 val 2500
[  962.242429][ T7538] pwc: recv_control_msg error -71 req 02 val 2400
[  962.257043][ T7538] pwc: recv_control_msg error -71 req 02 val 2600
[  962.265020][ T5956] usb 3-1: USB disconnect, device number 58
[  962.271433][ T7538] pwc: recv_control_msg error -71 req 02 val 2900
[  962.279412][ T7538] pwc: recv_control_msg error -71 req 02 val 2800
[  962.288403][ T7538] pwc: recv_control_msg error -71 req 04 val 1100
[  962.296268][ T7538] pwc: recv_control_msg error -71 req 04 val 1200
[  962.308888][ T7538] pwc: Registered as video103.
[  962.316655][ T7538] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35
[  962.353678][ T7538] usb 1-1: USB disconnect, device number 54
[  963.065964][T20867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3731'.
[  963.132799][T20869] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3732'.
[  963.995398][T20894] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3739'.
[  964.043389][T20895] netlink: 'syz.0.3740': attribute type 4 has an invalid length.
[  964.108373][   T30] audit: type=1326 audit(965.071:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20888 comm="syz.9.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0c38f749 code=0x7ffc0000
[  964.136767][   T30] audit: type=1326 audit(965.071:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20888 comm="syz.9.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0c38f749 code=0x7ffc0000
[  964.178047][   T30] audit: type=1326 audit(965.101:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20888 comm="syz.9.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9a0c38f749 code=0x7ffc0000
[  964.208103][   T30] audit: type=1326 audit(965.101:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20888 comm="syz.9.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0c38f749 code=0x7ffc0000
[  964.244765][   T30] audit: type=1326 audit(965.101:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20888 comm="syz.9.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0c38f749 code=0x7ffc0000
[  964.303434][   T30] audit: type=1326 audit(965.101:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20888 comm="syz.9.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a0c38f749 code=0x7ffc0000
[  964.341046][   T30] audit: type=1326 audit(965.101:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20888 comm="syz.9.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0c38f749 code=0x7ffc0000
[  964.367016][   T30] audit: type=1326 audit(965.101:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20888 comm="syz.9.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0c38f749 code=0x7ffc0000
[  964.390349][   T30] audit: type=1326 audit(965.101:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20888 comm="syz.9.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9a0c38f749 code=0x7ffc0000
[  964.416508][   T30] audit: type=1326 audit(965.101:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20888 comm="syz.9.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0c38f749 code=0x7ffc0000
[  964.421438][T15639] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  964.591036][T15639] usb 1-1: Using ep0 maxpacket: 16
[  964.597445][T15639] usb 1-1: config 0 has no interfaces?
[  964.604014][T15639] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  964.613134][T15639] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  964.621194][T15639] usb 1-1: Manufacturer: syz
[  964.627976][T15639] usb 1-1: config 0 descriptor??
[  964.884320][T20895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  964.894946][T20895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  966.512829][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'.
[  967.000287][  T975] usb 1-1: USB disconnect, device number 55
[  967.372892][  T975] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  967.536596][  T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  967.547511][  T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  967.576934][  T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  967.604898][  T975] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  967.630179][  T975] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  967.650808][  T975] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  967.670491][  T975] usb 1-1: Manufacturer: syz
[  967.686480][  T975] usb 1-1: config 0 descriptor??
[  967.803510][ T8251] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  967.941713][  T975] rc_core: IR keymap rc-hauppauge not found
[  967.947612][  T975] Registered IR keymap rc-empty
[  967.952909][  T975] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  967.963342][ T8251] usb 3-1: Using ep0 maxpacket: 32
[  967.969756][ T8251] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  967.978879][ T8251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.981590][  T975] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  967.992147][ T8251] usb 3-1: config 0 descriptor??
[  968.004273][ T8251] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  968.013310][  T975] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  968.026500][  T975] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input36
[  968.041114][  T975] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  968.072208][  T975] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  968.091148][  T975] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  968.121122][  T975] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  968.151168][  T975] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  968.181668][  T975] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  968.201553][  T975] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  968.221141][  T975] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  968.242359][  T975] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  968.261089][  T975] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  968.282986][  T975] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  968.292150][  T975] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  969.049223][T20956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3747'.
[  969.244660][ T8251] gspca_vc032x: reg_w err -71
[  969.259164][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.265902][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.275093][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.280530][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.287058][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.292680][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.297958][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.303345][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.308617][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.313989][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.319254][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.324638][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.329909][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.336377][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.341705][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.346974][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.352881][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.358170][ T8251] gspca_vc032x: I2c Bus Busy Wait 00
[  969.363543][ T8251] gspca_vc032x: Unknown sensor...
[  969.369401][ T8251] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[  969.380766][ T8251] usb 3-1: USB disconnect, device number 59
[  969.863782][T20967] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3754'.
[  969.946874][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3757'.
[  970.103678][ T8252] usb 1-1: USB disconnect, device number 56
[  970.142162][  T975] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  970.379802][  T975] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  970.391369][  T975] usb 3-1: config 0 interface 0 has no altsetting 0
[  970.401696][  T975] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  970.421085][  T975] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  970.437614][  T975] usb 3-1: Product: syz
[  970.444182][  T975] usb 3-1: Manufacturer: syz
[  970.449089][  T975] usb 3-1: SerialNumber: syz
[  970.458967][  T975] usb 3-1: config 0 descriptor??
[  970.474071][  T975] usb 3-1: selecting invalid altsetting 0
[  970.553763][T19801] udevd[19801]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system
[  970.745238][T21011] vxlan0: entered promiscuous mode
[  970.750579][T21011] vxlan0: entered allmulticast mode
[  970.816884][ T7235] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  970.840362][ T7235] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  970.858586][ T7235] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  970.879943][ T7235] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  971.504439][T21019] 9pnet_fd: Insufficient options for proto=fd
[  972.962970][ T5956] usb 3-1: USB disconnect, device number 60
[  973.430007][T21054] xt_CT: No such helper "snmp_trap"
[  976.311098][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  976.311113][   T30] audit: type=1400 audit(977.271:1450): avc:  denied  { append } for  pid=21088 comm="syz.0.3789" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  976.345213][T21089] 9p: Bad value for 'rfdno'
[  976.573137][ T6521] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.666436][ T6521] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.737076][ T6521] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.149672][ T6521] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.353906][ T6521] bridge_slave_1: left allmulticast mode
[  977.367383][ T6521] bridge_slave_1: left promiscuous mode
[  977.374520][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.482751][ T6521] bridge_slave_0: left allmulticast mode
[  977.488426][ T6521] bridge_slave_0: left promiscuous mode
[  977.494252][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.961273][ T5927] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  979.052613][ T6521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  979.062828][ T6521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  979.073652][ T6521] bond0 (unregistering): Released all slaves
[  979.100813][T21123] sp0: Synchronizing with TNC
[  979.111146][ T5927] usb 3-1: device descriptor read/64, error -71
[  979.174467][ T6521] IPVS: stopping backup sync thread 8972 ...
[  979.305279][T21136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3801'.
[  979.351644][ T5927] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  979.515395][ T5927] usb 3-1: device descriptor read/64, error -71
[  979.540397][T21149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3802'.
[  979.551832][T21149] vlan0: entered allmulticast mode
[  979.556964][T21149] veth0_vlan: entered allmulticast mode
[  979.628663][ T6521] hsr_slave_0: left promiscuous mode
[  979.637053][ T6521] hsr_slave_1: left promiscuous mode
[  979.641326][ T5927] usb usb3-port1: attempt power cycle
[  979.642980][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  979.669044][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_0
[  979.690276][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  979.697957][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_1
[  979.808979][ T6521] veth1_macvtap: left promiscuous mode
[  979.817074][ T6521] veth0_macvtap: left promiscuous mode
[  979.823855][ T6521] veth1_vlan: left promiscuous mode
[  979.833965][ T6521] veth0_vlan: left promiscuous mode
[  980.036218][  T468] smc: removing ib device syz2
[  980.082072][ T5927] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  980.123924][ T5927] usb 3-1: device descriptor read/8, error -71
[  980.374453][ T5927] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  980.410048][ T5927] usb 3-1: device descriptor read/8, error -71
[  980.576083][ T5927] usb usb3-port1: unable to enumerate USB device
[  980.599541][T21163] !
: renamed from dummy0 (while UP)
[  981.354505][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3796'.
[  981.379109][T21119] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3796'.
[  981.981102][ T7538] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  982.161058][ T7538] usb 1-1: Using ep0 maxpacket: 32
[  982.177105][ T7538] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  982.211078][ T7538] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  982.220842][ T7538] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  982.265878][ T7538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.319959][ T7538] usb 1-1: config 0 descriptor??
[  982.352105][ T7538] hub 1-1:0.0: USB hub found
[  982.534908][ T7538] hub 1-1:0.0: 1 port detected
[  982.767162][ T7538] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  982.791926][ T7538] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  982.825931][ T7538] usbhid 1-1:0.0: can't add hid device: -71
[  982.844898][ T7538] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  982.882300][ T7538] usb 1-1: USB disconnect, device number 57
[  982.942560][ T8251] usb 3-1: new full-speed USB device number 65 using dummy_hcd
[  983.104802][ T8251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  983.120580][ T8251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  983.135106][ T8251] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  983.150721][ T8251] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  983.160569][ T8251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.173318][ T8251] usb 3-1: config 0 descriptor??
[  983.591157][ T8251] hid-multitouch 0003:0457:07DA.001F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0
[  983.786825][T21237] IPVS: set_ctl: invalid protocol: 108 172.20.20.13:20001
[  984.031058][ T8251] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  984.181046][ T8251] usb 1-1: Using ep0 maxpacket: 8
[  984.187366][ T8251] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  984.197602][ T8251] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  984.210393][ T8251] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  984.221058][ T8251] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  984.234526][ T8251] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  984.243607][ T8251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  984.456313][ T8251] usb 1-1: GET_CAPABILITIES returned 0
[  984.462019][ T8251] usbtmc 1-1:16.0: can't read capabilities
[  984.684266][T15639] usb 1-1: USB disconnect, device number 58
[  985.471079][T18140] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  985.621085][T18140] usb 1-1: Using ep0 maxpacket: 32
[  985.627807][T18140] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  985.636673][T18140] usb 1-1: config 0 has no interface number 0
[  985.643668][T18140] usb 1-1: config 0 interface 184 has no altsetting 0
[  985.652994][T18140] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  985.662307][T18140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.670293][T18140] usb 1-1: Product: syz
[  985.674479][T18140] usb 1-1: Manufacturer: syz
[  985.679071][T18140] usb 1-1: SerialNumber: syz
[  985.687068][T18140] usb 1-1: config 0 descriptor??
[  985.696867][T18140] smsc75xx v1.0.0
[  985.698422][ T5956] usb 3-1: USB disconnect, device number 65
[  986.104575][T18140] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  986.116940][T18140] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  986.131833][T18140] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  986.144292][T18140] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  986.154057][T18140] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  986.165242][T18140] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  986.175712][T18140] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[  986.194347][T18140] usb 1-1: USB disconnect, device number 59
[  986.550892][T21284] Can't find ip_set type hJsh:net
[  986.559079][T21286] hpfs: hpfs_map_sector(): read error
[  986.851070][T15639] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  987.001181][T15639] usb 1-1: Using ep0 maxpacket: 8
[  987.007686][T15639] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  987.018625][T15639] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB
[  987.030339][T15639] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  987.041183][T15639] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  987.056290][T15639] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  987.065397][T15639] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  987.073499][T15639] usb 1-1: Product: syz
[  987.077684][T15639] usb 1-1: Manufacturer: syz
[  987.082992][T15639] usb 1-1: SerialNumber: syz
[  987.090690][T15639] usb 1-1: config 0 descriptor??
[  987.325360][T21290] loop8: detected capacity change from 0 to 8
[  987.336198][T21290] Dev loop8: unable to read RDB block 8
[  987.702086][T21290]  loop8: unable to read partition table
[  987.714687][T21290] loop8: partition table beyond EOD, truncated
[  987.751325][T21290] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  987.842806][T15639] usb 1-1: USB disconnect, device number 60
[  988.141492][   T48] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  988.321177][   T48] usb 3-1: Using ep0 maxpacket: 16
[  988.327447][   T48] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  988.337479][   T48] usb 3-1: config 0 interface 0 has no altsetting 0
[  988.344479][   T48] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  988.356034][   T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.372570][   T48] usb 3-1: config 0 descriptor??
[  988.782662][T21308] netlink: 'syz.2.3837': attribute type 32 has an invalid length.
[  988.799460][   T48] usbhid 3-1:0.0: can't add hid device: -71
[  988.815868][   T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  988.830373][   T48] usb 3-1: USB disconnect, device number 66
[  989.693642][T21345] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3848'.
[  989.791282][   T48] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  989.943273][   T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  989.961579][   T48] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  989.976046][   T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  989.992776][   T48] usb 3-1: config 0 descriptor??
[  990.009138][   T48] pwc: Askey VC010 type 2 USB webcam detected.
[  990.265158][T21349] futex_wake_op: syz.0.3849 tries to shift op by -1; fix this program
[  990.464049][   T48] pwc: recv_control_msg error -32 req 02 val 2b00
[  990.491997][   T48] pwc: recv_control_msg error -32 req 02 val 2700
[  990.507260][   T48] pwc: recv_control_msg error -32 req 02 val 2c00
[  990.615388][   T48] pwc: recv_control_msg error -32 req 04 val 1000
[  991.242856][   T48] pwc: recv_control_msg error -32 req 04 val 1300
[  991.261485][   T48] pwc: recv_control_msg error -32 req 04 val 1400
[  991.286581][   T48] pwc: recv_control_msg error -32 req 02 val 2000
[  991.312416][   T48] pwc: recv_control_msg error -32 req 02 val 2100
[  991.334603][   T48] pwc: recv_control_msg error -32 req 04 val 1500
[  991.350146][   T48] pwc: recv_control_msg error -32 req 02 val 2500
[  991.415083][   T48] pwc: recv_control_msg error -32 req 02 val 2400
[  991.432137][   T48] pwc: recv_control_msg error -32 req 02 val 2600
[  991.444680][   T48] pwc: recv_control_msg error -32 req 02 val 2900
[  991.687526][T21370] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[  991.966497][   T30] audit: type=1400 audit(1248.807:1451): avc:  denied  { set_context_mgr } for  pid=21369 comm="syz.0.3855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  992.482718][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  992.491781][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  993.269360][   T48] pwc: recv_control_msg error -71 req 02 val 2800
[  993.277185][   T48] pwc: recv_control_msg error -71 req 04 val 1100
[  993.284032][   T48] pwc: recv_control_msg error -71 req 04 val 1200
[  993.295004][   T48] pwc: Registered as video103.
[  993.309592][   T48] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37
[  993.363278][   T48] usb 3-1: USB disconnect, device number 67
[  994.292431][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'.
[  994.388033][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'.
[  994.445522][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'.
[  994.466865][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'.
[  994.527960][ T5829] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  995.924958][ T8251] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  996.099227][ T8251] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  996.116013][ T8251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.124290][ T8251] usb 3-1: Product: syz
[  996.128467][ T8251] usb 3-1: Manufacturer: syz
[  996.133933][ T8251] usb 3-1: SerialNumber: syz
[  996.585824][   T30] audit: type=1400 audit(1253.557:1452): avc:  denied  { nlmsg_read } for  pid=21446 comm="syz.9.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  996.606589][T21448] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3868'.
[  996.843726][ T8251] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  996.866650][ T8251] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  996.877308][ T8251] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  996.888155][ T8251] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  996.934496][ T8251] usb 3-1: USB disconnect, device number 68
[  997.118870][T21471] overlayfs: failed lookup in lower (newroot/46, name='bus', err=-40): overlapping layers
[  997.737644][T21489] syz_tun: entered allmulticast mode
[  999.539375][T21521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3879'.
[  999.548399][T21521] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 1000.143362][T21529] 9p: Bad value for 'rfdno'
[ 1000.641061][  T975] usb 3-1: new low-speed USB device number 69 using dummy_hcd
[ 1000.793926][  T975] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a
[ 1000.815228][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.836915][  T975] usb 3-1: config 0 descriptor??
[ 1000.858724][  T975] pwc: Logitech QuickCam Notebook Pro USB webcam detected.
[ 1002.836266][T21548] cgroup: fork rejected by pids controller in /syz0
[ 1002.844574][ T5829] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1010.325454][T21558] syz.0.3888 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1010.335574][T21558] CPU: 0 UID: 0 PID: 21558 Comm: syz.0.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1010.335601][T21558] Tainted: [L]=SOFTLOCKUP
[ 1010.335606][T21558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1010.335616][T21558] Call Trace:
[ 1010.335621][T21558]  <TASK>
[ 1010.335627][T21558]  dump_stack_lvl+0x16c/0x1f0
[ 1010.335653][T21558]  dump_header+0x101/0x960
[ 1010.335681][T21558]  oom_kill_process+0x176/0x910
[ 1010.335707][T21558]  out_of_memory+0x350/0x1700
[ 1010.335733][T21558]  ? __lock_acquire+0x436/0x2890
[ 1010.335754][T21558]  ? __pfx_out_of_memory+0x10/0x10
[ 1010.335783][T21558]  mem_cgroup_out_of_memory+0x118/0x130
[ 1010.335799][T21558]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1010.335820][T21558]  ? do_raw_spin_unlock+0x172/0x230
[ 1010.335844][T21558]  try_charge_memcg+0x695/0xd30
[ 1010.335870][T21558]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1010.335891][T21558]  ? __print_lock_name+0xd1/0xe0
[ 1010.335914][T21558]  ? rcu_read_unlock+0x17/0x60
[ 1010.335941][T21558]  charge_memcg+0x8a/0x230
[ 1010.335961][T21558]  __mem_cgroup_charge+0x2b/0x1e0
[ 1010.335986][T21558]  shmem_alloc_and_add_folio+0x50c/0xc20
[ 1010.336016][T21558]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1010.336042][T21558]  ? shmem_allowable_huge_orders+0xd4/0x3f0
[ 1010.336071][T21558]  shmem_get_folio_gfp+0x67f/0x1610
[ 1010.336099][T21558]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1010.336131][T21558]  shmem_write_begin+0x1a4/0x3b0
[ 1010.336148][T21558]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1010.336163][T21558]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[ 1010.336183][T21558]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1010.336204][T21558]  generic_perform_write+0x3c4/0x900
[ 1010.336233][T21558]  ? __pfx_generic_perform_write+0x10/0x10
[ 1010.336260][T21558]  ? file_update_time_flags+0x35c/0x520
[ 1010.336280][T21558]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1010.336296][T21558]  shmem_file_write_iter+0x10e/0x140
[ 1010.336315][T21558]  __kernel_write_iter+0x31a/0xb10
[ 1010.336336][T21558]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1010.336355][T21558]  ? cgroup1_freezing+0x12c/0x3b0
[ 1010.336373][T21558]  ? cgroup1_freezing+0x136/0x3b0
[ 1010.336393][T21558]  dump_user_range+0x413/0xb70
[ 1010.336422][T21558]  ? __pfx_dump_user_range+0x10/0x10
[ 1010.336446][T21558]  ? elf_coredump_extra_notes_write+0xbd/0x500
[ 1010.336468][T21558]  ? __pfx_writenote+0x10/0x10
[ 1010.336488][T21558]  elf_core_dump+0x29c3/0x3c10
[ 1010.336514][T21558]  ? __pfx_elf_core_dump+0x10/0x10
[ 1010.336528][T21558]  ? kasan_save_stack+0x33/0x60
[ 1010.336546][T21558]  ? kasan_save_track+0x14/0x30
[ 1010.336565][T21558]  ? __kasan_kmalloc+0xaa/0xb0
[ 1010.336580][T21558]  ? __kvmalloc_node_noprof+0x3ac/0xa40
[ 1010.336597][T21558]  ? vfs_coredump+0x1dd9/0x55e0
[ 1010.336618][T21558]  ? arch_do_signal_or_restart+0x8f/0x7e0
[ 1010.336639][T21558]  ? irqentry_exit+0x38a/0x8c0
[ 1010.336656][T21558]  ? asm_exc_page_fault+0x26/0x30
[ 1010.336678][T21558]  ? 0xffffffffff600000
[ 1010.336728][T21558]  ? vfs_coredump+0x2b85/0x55e0
[ 1010.336749][T21558]  vfs_coredump+0x2b85/0x55e0
[ 1010.336779][T21558]  ? __pfx_vfs_coredump+0x10/0x10
[ 1010.336802][T21558]  ? __lock_acquire+0x436/0x2890
[ 1010.336825][T21558]  ? __lock_acquire+0x436/0x2890
[ 1010.336844][T21558]  ? lock_acquire+0x179/0x330
[ 1010.336866][T21558]  ? lock_acquire+0x179/0x330
[ 1010.336898][T21558]  ? arch_stack_walk+0xa6/0x100
[ 1010.336925][T21558]  ? stack_trace_save+0x8e/0xc0
[ 1010.336945][T21558]  ? __pfx_stack_trace_save+0x10/0x10
[ 1010.336961][T21558]  ? stack_depot_save_flags+0x29/0x9b0
[ 1010.336984][T21558]  ? __lock_acquire+0x436/0x2890
[ 1010.337004][T21558]  ? kasan_save_stack+0x42/0x60
[ 1010.337056][T21558]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1010.337077][T21558]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1010.337101][T21558]  ? rcu_is_watching+0x12/0xc0
[ 1010.337118][T21558]  get_signal+0x22e1/0x26d0
[ 1010.337149][T21558]  ? __pfx_get_signal+0x10/0x10
[ 1010.337177][T21558]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1010.337198][T21558]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1010.337228][T21558]  ? __bad_area_nosemaphore+0x350/0x690
[ 1010.337252][T21558]  irqentry_exit+0x38a/0x8c0
[ 1010.337274][T21558]  asm_exc_page_fault+0x26/0x30
[ 1010.337288][T21558] RIP: 0033:0x7fef8658f751
[ 1010.337300][T21558] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1010.337315][T21558] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1010.337328][T21558] RAX: 0000000000000000 RBX: 00007fef867e5fa0 RCX: 00007fef8658f749
[ 1010.337339][T21558] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000
[ 1010.337350][T21558] RBP: 00007fef86613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1010.337359][T21558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1010.337368][T21558] R13: 00007fef867e6038 R14: 00007fef867e5fa0 R15: 00007fffd9feb478
[ 1010.337390][T21558]  </TASK>
[ 1010.337396][T21558] memory: usage 307200kB, limit 307200kB, failcnt 19804
[ 1010.817614][T21558] memory+swap: usage 432064kB, limit 9007199254740988kB, failcnt 0
[ 1010.825513][T21558] kmem: usage 11052kB, limit 9007199254740988kB, failcnt 0
[ 1010.832706][T21558] Memory cgroup stats for /syz0:
[ 1010.832949][T21558] cache 302997504
[ 1010.842071][T21558] rss 147456
[ 1010.845263][T21558] rss_huge 0
[ 1010.848449][T21558] shmem 302993408
[ 1010.852099][T21558] mapped_file 4096
[ 1010.855804][T21558] dirty 4096
[ 1010.858982][T21558] writeback 0
[ 1010.862280][T21558] workingset_refault_anon 609
[ 1010.866932][T21558] workingset_refault_file 0
[ 1010.871684][T21558] swap 127860736
[ 1010.875218][T21558] swapcached 135168
[ 1010.879005][T21558] pgpgin 1125709
[ 1010.882556][T21558] pgpgout 1053205
[ 1010.886167][T21558] pgfault 806748
[ 1010.889690][T21558] pgmajfault 126
[ 1010.893231][T21558] inactive_anon 133529600
[ 1010.897537][T21558] active_anon 169041920
[ 1010.901690][T21558] inactive_file 4096
[ 1010.905559][T21558] active_file 0
[ 1010.908996][T21558] unevictable 0
[ 1010.912451][T21558] hierarchical_memory_limit 314572800
[ 1010.917886][T21558] hierarchical_memsw_limit 9223372036854771712
[ 1010.924034][T21558] total_cache 302997504
[ 1010.928168][T21558] total_rss 147456
[ 1010.931879][T21558] total_rss_huge 0
[ 1010.935578][T21558] total_shmem 302993408
[ 1010.940315][T21558] total_mapped_file 4096
[ 1010.944589][T21558] total_dirty 4096
[ 1010.948295][T21558] total_writeback 0
[ 1010.952101][T21558] total_workingset_refault_anon 609
[ 1010.957602][T21558] total_workingset_refault_file 0
[ 1010.962630][T21558] total_swap 127860736
[ 1010.966677][T21558] total_swapcached 135168
[ 1010.971026][T21558] total_pgpgin 1125709
[ 1010.975070][T21558] total_pgpgout 1053205
[ 1010.979200][T21558] total_pgfault 806748
[ 1010.983268][T21558] total_pgmajfault 126
[ 1010.987313][T21558] total_inactive_anon 133529600
[ 1010.992151][T21558] total_active_anon 169041920
[ 1010.996806][T21558] total_inactive_file 4096
[ 1011.001222][T21558] total_active_file 0
[ 1011.005183][T21558] total_unevictable 0
[ 1011.009139][T21558] anon_cost 0
[ 1011.012412][T21558] file_cost 0
[ 1011.015673][T21558] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3888,pid=21558,uid=0
[ 1011.030753][T21558] Memory cgroup out of memory: Killed process 21558 (syz.0.3888) total-vm:98324kB, anon-rss:1152kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000
[ 1011.092725][T21565] syz.0.3888 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1011.093119][T21558] syz.0.3888 (21558) used greatest stack depth: 18840 bytes left
[ 1011.102625][T21565] CPU: 1 UID: 0 PID: 21565 Comm: syz.0.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1011.102649][T21565] Tainted: [L]=SOFTLOCKUP
[ 1011.102655][T21565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1011.102664][T21565] Call Trace:
[ 1011.102670][T21565]  <TASK>
[ 1011.102677][T21565]  dump_stack_lvl+0x16c/0x1f0
[ 1011.102703][T21565]  dump_header+0x101/0x960
[ 1011.102732][T21565]  oom_kill_process+0x176/0x910
[ 1011.102764][T21565]  out_of_memory+0x350/0x1700
[ 1011.102789][T21565]  ? __lock_acquire+0x436/0x2890
[ 1011.102812][T21565]  ? __pfx_out_of_memory+0x10/0x10
[ 1011.102843][T21565]  mem_cgroup_out_of_memory+0x118/0x130
[ 1011.102861][T21565]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1011.102883][T21565]  ? do_raw_spin_unlock+0x172/0x230
[ 1011.102909][T21565]  try_charge_memcg+0x695/0xd30
[ 1011.102935][T21565]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1011.102957][T21565]  ? __print_lock_name+0xd1/0xe0
[ 1011.102981][T21565]  ? rcu_read_unlock+0x17/0x60
[ 1011.103010][T21565]  charge_memcg+0x8a/0x230
[ 1011.103032][T21565]  __mem_cgroup_charge+0x2b/0x1e0
[ 1011.103058][T21565]  shmem_alloc_and_add_folio+0x50c/0xc20
[ 1011.103089][T21565]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1011.103116][T21565]  ? shmem_allowable_huge_orders+0xd4/0x3f0
[ 1011.103148][T21565]  shmem_get_folio_gfp+0x67f/0x1610
[ 1011.103178][T21565]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1011.103206][T21565]  ? __pfx_timestamp_truncate+0x10/0x10
[ 1011.103233][T21565]  shmem_write_begin+0x1a4/0x3b0
[ 1011.103251][T21565]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1011.103268][T21565]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[ 1011.103293][T21565]  generic_perform_write+0x3c4/0x900
[ 1011.103325][T21565]  ? __pfx_generic_perform_write+0x10/0x10
[ 1011.103349][T21565]  ? generic_update_time+0xcf/0xf0
[ 1011.103364][T21565]  ? mnt_put_write_access_file+0x45/0xf0
[ 1011.103386][T21565]  ? file_update_time_flags+0x35c/0x520
[ 1011.103406][T21565]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1011.103424][T21565]  shmem_file_write_iter+0x10e/0x140
[ 1011.103445][T21565]  __kernel_write_iter+0x31a/0xb10
[ 1011.103467][T21565]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1011.103493][T21565]  ? cgroup1_freezing+0x12c/0x3b0
[ 1011.103513][T21565]  ? cgroup1_freezing+0x136/0x3b0
[ 1011.103533][T21565]  dump_user_range+0x413/0xb70
[ 1011.103563][T21565]  ? __pfx_dump_user_range+0x10/0x10
[ 1011.103589][T21565]  ? elf_coredump_extra_notes_write+0xbd/0x500
[ 1011.103613][T21565]  ? __pfx_writenote+0x10/0x10
[ 1011.103635][T21565]  elf_core_dump+0x29c3/0x3c10
[ 1011.103664][T21565]  ? __pfx_elf_core_dump+0x10/0x10
[ 1011.103678][T21565]  ? kasan_save_stack+0x33/0x60
[ 1011.103696][T21565]  ? kasan_save_track+0x14/0x30
[ 1011.103713][T21565]  ? __kasan_kmalloc+0xaa/0xb0
[ 1011.103729][T21565]  ? __kvmalloc_node_noprof+0x3ac/0xa40
[ 1011.103747][T21565]  ? vfs_coredump+0x1dd9/0x55e0
[ 1011.103770][T21565]  ? arch_do_signal_or_restart+0x8f/0x7e0
[ 1011.103791][T21565]  ? irqentry_exit+0x38a/0x8c0
[ 1011.103811][T21565]  ? asm_exc_page_fault+0x26/0x30
[ 1011.103832][T21565]  ? 0xffffffffff600000
[ 1011.103886][T21565]  ? vfs_coredump+0x2b85/0x55e0
[ 1011.103909][T21565]  vfs_coredump+0x2b85/0x55e0
[ 1011.103942][T21565]  ? __pfx_vfs_coredump+0x10/0x10
[ 1011.103965][T21565]  ? __lock_acquire+0x436/0x2890
[ 1011.103989][T21565]  ? __lock_acquire+0x436/0x2890
[ 1011.104010][T21565]  ? lock_acquire+0x179/0x330
[ 1011.104034][T21565]  ? lock_acquire+0x179/0x330
[ 1011.104068][T21565]  ? arch_stack_walk+0xa6/0x100
[ 1011.104098][T21565]  ? stack_trace_save+0x8e/0xc0
[ 1011.104115][T21565]  ? __pfx_stack_trace_save+0x10/0x10
[ 1011.104134][T21565]  ? stack_depot_save_flags+0x29/0x9b0
[ 1011.104159][T21565]  ? __lock_acquire+0x436/0x2890
[ 1011.104192][T21565]  ? kasan_save_stack+0x42/0x60
[ 1011.104242][T21565]  ? rcu_is_watching+0x12/0xc0
[ 1011.104257][T21565]  ? irqentry_exit+0x1dd/0x8c0
[ 1011.104276][T21565]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1011.104297][T21565]  ? irqentry_exit+0x1dd/0x8c0
[ 1011.104315][T21565]  ? trace_irq_disable.constprop.0+0xd4/0x110
[ 1011.104338][T21565]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1011.104358][T21565]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1011.104383][T21565]  ? trace_irq_enable.constprop.0+0x2f/0x110
[ 1011.104407][T21565]  get_signal+0x22e1/0x26d0
[ 1011.104440][T21565]  ? __pfx_get_signal+0x10/0x10
[ 1011.104470][T21565]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1011.104498][T21565]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1011.104528][T21565]  ? __bad_area_nosemaphore+0x350/0x690
[ 1011.104555][T21565]  irqentry_exit+0x38a/0x8c0
[ 1011.104578][T21565]  asm_exc_page_fault+0x26/0x30
[ 1011.104594][T21565] RIP: 0033:0x7fef8658f751
[ 1011.104607][T21565] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1011.104622][T21565] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1011.104636][T21565] RAX: 0000000000000000 RBX: 00007fef867e5fa0 RCX: 00007fef8658f749
[ 1011.104646][T21565] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000
[ 1011.104656][T21565] RBP: 00007fef86613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1011.104665][T21565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1011.104674][T21565] R13: 00007fef867e6038 R14: 00007fef867e5fa0 R15: 00007fffd9feb478
[ 1011.104698][T21565]  </TASK>
[ 1011.104719][T21565] memory: usage 307200kB, limit 307200kB, failcnt 20069
[ 1011.633032][T21565] memory+swap: usage 432068kB, limit 9007199254740988kB, failcnt 0
[ 1011.640953][T21565] kmem: usage 10996kB, limit 9007199254740988kB, failcnt 0
[ 1011.648179][T21565] Memory cgroup stats for /syz0:
[ 1011.648282][T21565] cache 303071232
[ 1011.657128][T21565] rss 147456
[ 1011.660321][T21565] rss_huge 0
[ 1011.663783][T21565] shmem 303067136
[ 1011.667405][T21565] mapped_file 4096
[ 1011.671670][T21565] dirty 4096
[ 1011.674859][T21565] writeback 0
[ 1011.678130][T21565] workingset_refault_anon 609
[ 1011.682809][T21565] workingset_refault_file 0
[ 1011.687297][T21565] swap 127877120
[ 1011.690829][T21565] swapcached 118784
[ 1011.694890][T21565] pgpgin 1125729
[ 1011.698430][T21565] pgpgout 1053211
[ 1011.702083][T21565] pgfault 806749
[ 1011.705615][T21565] pgmajfault 126
[ 1011.709147][T21565] inactive_anon 133726208
[ 1011.713492][T21565] active_anon 169439232
[ 1011.717635][T21565] inactive_file 4096
[ 1011.721785][T21565] active_file 0
[ 1011.725231][T21565] unevictable 0
[ 1011.728681][T21565] hierarchical_memory_limit 314572800
[ 1011.734143][T21565] hierarchical_memsw_limit 9223372036854771712
[ 1011.740296][T21565] total_cache 303071232
[ 1011.744487][T21565] total_rss 147456
[ 1011.748197][T21565] total_rss_huge 0
[ 1011.751921][T21565] total_shmem 303067136
[ 1011.756051][T21565] total_mapped_file 4096
[ 1011.760820][T21565] total_dirty 4096
[ 1011.764546][T21565] total_writeback 0
[ 1011.768327][T21565] total_workingset_refault_anon 609
[ 1011.773526][T21565] total_workingset_refault_file 0
[ 1011.778525][T21565] total_swap 127877120
[ 1011.782591][T21565] total_swapcached 118784
[ 1011.786894][T21565] total_pgpgin 1125729
[ 1011.790938][T21565] total_pgpgout 1053211
[ 1011.795113][T21565] total_pgfault 806749
[ 1011.799157][T21565] total_pgmajfault 126
[ 1011.803218][T21565] total_inactive_anon 133726208
[ 1011.808044][T21565] total_active_anon 169439232
[ 1011.812710][T21565] total_inactive_file 4096
[ 1011.817105][T21565] total_active_file 0
[ 1011.821087][T21565] total_unevictable 0
[ 1011.825046][T21565] anon_cost 0
[ 1011.828306][T21565] file_cost 0
[ 1011.831586][T21565] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3888,pid=21551,uid=0
[ 1011.848296][T21565] Memory cgroup out of memory: Killed process 21551 (syz.0.3888) total-vm:98324kB, anon-rss:1152kB, file-rss:57648kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000
[ 1011.916316][T21548] syz.0.3888 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000
[ 1011.929402][T21548] CPU: 1 UID: 0 PID: 21548 Comm: syz.0.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1011.929428][T21548] Tainted: [L]=SOFTLOCKUP
[ 1011.929433][T21548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1011.929442][T21548] Call Trace:
[ 1011.929448][T21548]  <TASK>
[ 1011.929453][T21548]  dump_stack_lvl+0x16c/0x1f0
[ 1011.929477][T21548]  dump_header+0x101/0x960
[ 1011.929505][T21548]  oom_kill_process+0x176/0x910
[ 1011.929534][T21548]  out_of_memory+0x350/0x1700
[ 1011.929562][T21548]  ? __pfx_out_of_memory+0x10/0x10
[ 1011.929591][T21548]  mem_cgroup_out_of_memory+0x118/0x130
[ 1011.929607][T21548]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1011.929627][T21548]  ? do_raw_spin_unlock+0x172/0x230
[ 1011.929653][T21548]  try_charge_memcg+0x695/0xd30
[ 1011.929677][T21548]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1011.929698][T21548]  ? peak_open+0x20/0x50
[ 1011.929722][T21548]  ? get_mem_cgroup_from_objcg+0xd3/0x330
[ 1011.929741][T21548]  __memcg_kmem_charge_page+0xda/0x420
[ 1011.929765][T21548]  __alloc_frozen_pages_noprof+0x323/0x2430
[ 1011.929784][T21548]  ? mark_held_locks+0x49/0x80
[ 1011.929801][T21548]  ? irqentry_exit+0x1dd/0x8c0
[ 1011.929819][T21548]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1011.929838][T21548]  ? irqentry_exit+0x1dd/0x8c0
[ 1011.929855][T21548]  ? trace_irq_disable.constprop.0+0xd4/0x110
[ 1011.929877][T21548]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1011.929896][T21548]  ? mark_held_locks+0x49/0x80
[ 1011.929912][T21548]  ? irqentry_exit+0x1dd/0x8c0
[ 1011.929934][T21548]  ? __lock_acquire+0x436/0x2890
[ 1011.929953][T21548]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1011.929973][T21548]  ? policy_nodemask+0xea/0x4e0
[ 1011.929995][T21548]  alloc_pages_mpol+0x1fb/0x550
[ 1011.930016][T21548]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1011.930043][T21548]  alloc_pages_noprof+0x131/0x390
[ 1011.930063][T21548]  pte_alloc_one+0x1e/0x3d0
[ 1011.930086][T21548]  __pte_alloc+0x6d/0x3f0
[ 1011.930104][T21548]  ? __pfx___pte_alloc+0x10/0x10
[ 1011.930120][T21548]  ? __pfx___might_resched+0x10/0x10
[ 1011.930134][T21548]  ? copy_page_range+0x22fb/0x6780
[ 1011.930160][T21548]  copy_page_range+0x3f3e/0x6780
[ 1011.930207][T21548]  ? __pfx_copy_page_range+0x10/0x10
[ 1011.930237][T21548]  ? __pfx___might_resched+0x10/0x10
[ 1011.930254][T21548]  ? __pfx_mas_store+0x10/0x10
[ 1011.930278][T21548]  ? dup_mmap+0xba4/0x20e0
[ 1011.930297][T21548]  ? down_write+0x14d/0x200
[ 1011.930320][T21548]  ? up_write+0x282/0x4e0
[ 1011.930341][T21548]  dup_mmap+0xbea/0x20e0
[ 1011.930369][T21548]  ? __pfx_dup_mmap+0x10/0x10
[ 1011.930403][T21548]  copy_process+0x3b9f/0x7430
[ 1011.930428][T21548]  ? do_wp_page+0x1c04/0x5010
[ 1011.930454][T21548]  ? __pfx_copy_process+0x10/0x10
[ 1011.930476][T21548]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1011.930506][T21548]  kernel_clone+0xfc/0x910
[ 1011.930521][T21548]  ? __pfx_kernel_clone+0x10/0x10
[ 1011.930541][T21548]  ? find_held_lock+0x2b/0x80
[ 1011.930564][T21548]  ? bpf_get_current_ancestor_cgroup_id+0x1f0/0x480
[ 1011.930583][T21548]  __do_sys_clone+0xce/0x120
[ 1011.930597][T21548]  ? __pfx___do_sys_clone+0x10/0x10
[ 1011.930622][T21548]  ? syscall_trace_enter+0x1cb/0x220
[ 1011.930645][T21548]  ? rcu_is_watching+0x12/0xc0
[ 1011.930662][T21548]  do_syscall_64+0xcd/0xf80
[ 1011.930683][T21548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1011.930699][T21548] RIP: 0033:0x7fef8658f749
[ 1011.930711][T21548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1011.930725][T21548] RSP: 002b:00007fef87419fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1011.930741][T21548] RAX: ffffffffffffffda RBX: 00007fef867e5fa0 RCX: 00007fef8658f749
[ 1011.930751][T21548] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000
[ 1011.930760][T21548] RBP: 00007fef86613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1011.930769][T21548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1011.930777][T21548] R13: 00007fef867e6038 R14: 00007fef867e5fa0 R15: 00007fffd9feb478
[ 1011.930799][T21548]  </TASK>
[ 1011.930818][T21548] memory: usage 307200kB, limit 307200kB, failcnt 20266
[ 1012.329697][T21548] memory+swap: usage 432076kB, limit 9007199254740988kB, failcnt 0
[ 1012.337854][T21548] kmem: usage 10940kB, limit 9007199254740988kB, failcnt 0
[ 1012.345061][T21548] Memory cgroup stats for /syz0:
[ 1012.345322][T21548] cache 303079424
[ 1012.353881][T21548] rss 122880
[ 1012.357065][T21548] rss_huge 0
[ 1012.360252][T21548] shmem 303075328
[ 1012.364135][T21548] mapped_file 4096
[ 1012.367849][T21548] dirty 4096
[ 1012.371059][T21548] writeback 0
[ 1012.374336][T21548] workingset_refault_anon 609
[ 1012.378999][T21548] workingset_refault_file 0
[ 1012.383540][T21548] swap 127873024
[ 1012.387079][T21548] swapcached 110592
[ 1012.390870][T21548] pgpgin 1125731
[ 1012.394682][T21548] pgpgout 1053213
[ 1012.398308][T21548] pgfault 806749
[ 1012.401848][T21548] pgmajfault 126
[ 1012.405384][T21548] inactive_anon 133775360
[ 1012.409697][T21548] active_anon 169533440
[ 1012.413868][T21548] inactive_file 4096
[ 1012.417750][T21548] active_file 0
[ 1012.421468][T21548] unevictable 0
[ 1012.424919][T21548] hierarchical_memory_limit 314572800
[ 1012.430280][T21548] hierarchical_memsw_limit 9223372036854771712
[ 1012.436430][T21548] total_cache 303079424
[ 1012.440572][T21548] total_rss 122880
[ 1012.444302][T21548] total_rss_huge 0
[ 1012.448008][T21548] total_shmem 303075328
[ 1012.452410][T21548] total_mapped_file 4096
[ 1012.456637][T21548] total_dirty 4096
[ 1012.460341][T21548] total_writeback 0
[ 1012.464248][T21548] total_workingset_refault_anon 609
[ 1012.469436][T21548] total_workingset_refault_file 0
[ 1012.474487][T21548] total_swap 127873024
[ 1012.478548][T21548] total_swapcached 110592
[ 1012.483128][T21548] total_pgpgin 1125731
[ 1012.487184][T21548] total_pgpgout 1053213
[ 1012.491343][T21548] total_pgfault 806749
[ 1012.495398][T21548] total_pgmajfault 126
[ 1012.499452][T21548] total_inactive_anon 133775360
[ 1012.504314][T21548] total_active_anon 169533440
[ 1012.508979][T21548] total_inactive_file 4096
[ 1012.513649][T21548] total_active_file 0
[ 1012.517627][T21548] total_unevictable 0
[ 1012.521631][T21548] anon_cost 0
[ 1012.524907][T21548] file_cost 0
[ 1012.528182][T21548] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3888,pid=21555,uid=0
[ 1012.543992][T21548] Memory cgroup out of memory: Killed process 21555 (syz.0.3888) total-vm:98324kB, anon-rss:1152kB, file-rss:57472kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000
[ 1012.603846][T21548] syz.0.3888 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000
[ 1012.616764][T21548] CPU: 1 UID: 0 PID: 21548 Comm: syz.0.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1012.616789][T21548] Tainted: [L]=SOFTLOCKUP
[ 1012.616794][T21548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1012.616803][T21548] Call Trace:
[ 1012.616808][T21548]  <TASK>
[ 1012.616814][T21548]  dump_stack_lvl+0x16c/0x1f0
[ 1012.616843][T21548]  dump_header+0x101/0x960
[ 1012.616869][T21548]  oom_kill_process+0x176/0x910
[ 1012.616895][T21548]  out_of_memory+0x350/0x1700
[ 1012.616923][T21548]  ? __pfx_out_of_memory+0x10/0x10
[ 1012.616952][T21548]  mem_cgroup_out_of_memory+0x118/0x130
[ 1012.616968][T21548]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1012.616987][T21548]  ? do_raw_spin_unlock+0x172/0x230
[ 1012.617012][T21548]  try_charge_memcg+0x695/0xd30
[ 1012.617037][T21548]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1012.617057][T21548]  ? peak_open+0x20/0x50
[ 1012.617081][T21548]  ? get_mem_cgroup_from_objcg+0xd3/0x330
[ 1012.617100][T21548]  __memcg_kmem_charge_page+0xda/0x420
[ 1012.617123][T21548]  __alloc_frozen_pages_noprof+0x323/0x2430
[ 1012.617147][T21548]  ? __lock_acquire+0x436/0x2890
[ 1012.617167][T21548]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1012.617190][T21548]  ? find_held_lock+0x2b/0x80
[ 1012.617213][T21548]  ? is_bpf_text_address+0x8a/0x1a0
[ 1012.617230][T21548]  ? bpf_ksym_find+0x127/0x1c0
[ 1012.617250][T21548]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1012.617275][T21548]  ? policy_nodemask+0xea/0x4e0
[ 1012.617297][T21548]  alloc_pages_mpol+0x1fb/0x550
[ 1012.617317][T21548]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1012.617344][T21548]  alloc_pages_noprof+0x131/0x390
[ 1012.617364][T21548]  __pmd_alloc+0x3b/0x9c0
[ 1012.617387][T21548]  copy_page_range+0x4620/0x6780
[ 1012.617412][T21548]  ? __lock_acquire+0x436/0x2890
[ 1012.617432][T21548]  ? __lock_acquire+0x436/0x2890
[ 1012.617457][T21548]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1012.617479][T21548]  ? __pfx_copy_page_range+0x10/0x10
[ 1012.617503][T21548]  ? mas_store+0xb4b/0x12f0
[ 1012.617526][T21548]  ? __vma_enter_locked+0x1dc/0x770
[ 1012.617548][T21548]  ? __pfx_mas_store+0x10/0x10
[ 1012.617582][T21548]  dup_mmap+0xbea/0x20e0
[ 1012.617610][T21548]  ? __pfx_dup_mmap+0x10/0x10
[ 1012.617645][T21548]  copy_process+0x3b9f/0x7430
[ 1012.617669][T21548]  ? do_wp_page+0x1c04/0x5010
[ 1012.617695][T21548]  ? __pfx_copy_process+0x10/0x10
[ 1012.617718][T21548]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1012.617747][T21548]  kernel_clone+0xfc/0x910
[ 1012.617762][T21548]  ? __pfx_kernel_clone+0x10/0x10
[ 1012.617781][T21548]  ? find_held_lock+0x2b/0x80
[ 1012.617804][T21548]  ? bpf_get_current_ancestor_cgroup_id+0x1f0/0x480
[ 1012.617822][T21548]  __do_sys_clone+0xce/0x120
[ 1012.617835][T21548]  ? __pfx___do_sys_clone+0x10/0x10
[ 1012.617860][T21548]  ? syscall_trace_enter+0x1cb/0x220
[ 1012.617884][T21548]  ? rcu_is_watching+0x12/0xc0
[ 1012.617901][T21548]  do_syscall_64+0xcd/0xf80
[ 1012.617922][T21548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1012.617937][T21548] RIP: 0033:0x7fef8658f749
[ 1012.617949][T21548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1012.617963][T21548] RSP: 002b:00007fef87419fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1012.617979][T21548] RAX: ffffffffffffffda RBX: 00007fef867e5fa0 RCX: 00007fef8658f749
[ 1012.617988][T21548] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000
[ 1012.617997][T21548] RBP: 00007fef86613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1012.618006][T21548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1012.618015][T21548] R13: 00007fef867e6038 R14: 00007fef867e5fa0 R15: 00007fffd9feb478
[ 1012.618037][T21548]  </TASK>
[ 1012.618057][T21548] memory: usage 307200kB, limit 307200kB, failcnt 20336
[ 1012.983548][T21548] memory+swap: usage 432068kB, limit 9007199254740988kB, failcnt 0
[ 1012.991713][T21548] kmem: usage 10940kB, limit 9007199254740988kB, failcnt 0
[ 1012.998900][T21548] Memory cgroup stats for /syz0:
[ 1012.998999][T21548] cache 303079424
[ 1013.007556][T21548] rss 122880
[ 1013.010744][T21548] rss_huge 0
[ 1013.013944][T21548] shmem 303075328
[ 1013.017563][T21548] mapped_file 4096
[ 1013.021526][T21548] dirty 4096
[ 1013.024714][T21548] writeback 0
[ 1013.027987][T21548] workingset_refault_anon 609
[ 1013.032675][T21548] workingset_refault_file 0
[ 1013.037166][T21548] swap 127864832
[ 1013.040700][T21548] swapcached 110592
[ 1013.044531][T21548] pgpgin 1125731
[ 1013.048066][T21548] pgpgout 1053213
[ 1013.051944][T21548] pgfault 806749
[ 1013.055478][T21548] pgmajfault 126
[ 1013.059011][T21548] inactive_anon 169533440
[ 1013.063363][T21548] active_anon 133775360
[ 1013.067506][T21548] inactive_file 4096
[ 1013.071416][T21548] active_file 0
[ 1013.074862][T21548] unevictable 0
[ 1013.078307][T21548] hierarchical_memory_limit 314572800
[ 1013.083917][T21548] hierarchical_memsw_limit 9223372036854771712
[ 1013.090062][T21548] total_cache 303079424
[ 1013.094243][T21548] total_rss 122880
[ 1013.097958][T21548] total_rss_huge 0
[ 1013.101676][T21548] total_shmem 303075328
[ 1013.105817][T21548] total_mapped_file 4096
[ 1013.110046][T21548] total_dirty 4096
[ 1013.114026][T21548] total_writeback 0
[ 1013.117823][T21548] total_workingset_refault_anon 609
[ 1013.123013][T21548] total_workingset_refault_file 0
[ 1013.128024][T21548] total_swap 127864832
[ 1013.132096][T21548] total_swapcached 110592
[ 1013.136412][T21548] total_pgpgin 1125731
[ 1013.140467][T21548] total_pgpgout 1053213
[ 1013.144875][T21548] total_pgfault 806749
[ 1013.148930][T21548] total_pgmajfault 126
[ 1013.153008][T21548] total_inactive_anon 169533440
[ 1013.157848][T21548] total_active_anon 133775360
[ 1013.162522][T21548] total_inactive_file 4096
[ 1013.166927][T21548] total_active_file 0
[ 1013.170892][T21548] total_unevictable 0
[ 1013.175121][T21548] anon_cost 0
[ 1013.178395][T21548] file_cost 0
[ 1013.181674][T21548] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3888,pid=21556,uid=0
[ 1013.197661][T21548] Memory cgroup out of memory: Killed process 21556 (syz.0.3888) total-vm:98324kB, anon-rss:1152kB, file-rss:47872kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000
[ 1013.246210][T21559] syz.0.3888 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1013.256425][T21559] CPU: 0 UID: 0 PID: 21559 Comm: syz.0.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1013.256450][T21559] Tainted: [L]=SOFTLOCKUP
[ 1013.256456][T21559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1013.256465][T21559] Call Trace:
[ 1013.256472][T21559]  <TASK>
[ 1013.256479][T21559]  dump_stack_lvl+0x16c/0x1f0
[ 1013.256508][T21559]  dump_header+0x101/0x960
[ 1013.256536][T21559]  oom_kill_process+0x176/0x910
[ 1013.256562][T21559]  out_of_memory+0x350/0x1700
[ 1013.256585][T21559]  ? __lock_acquire+0x436/0x2890
[ 1013.256605][T21559]  ? __pfx_out_of_memory+0x10/0x10
[ 1013.256634][T21559]  mem_cgroup_out_of_memory+0x118/0x130
[ 1013.256653][T21559]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1013.256673][T21559]  ? do_raw_spin_unlock+0x172/0x230
[ 1013.256697][T21559]  try_charge_memcg+0x695/0xd30
[ 1013.256721][T21559]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1013.256741][T21559]  ? __print_lock_name+0xd0/0xe0
[ 1013.256764][T21559]  ? rcu_read_unlock+0x17/0x60
[ 1013.256793][T21559]  charge_memcg+0x8a/0x230
[ 1013.256814][T21559]  __mem_cgroup_charge+0x2b/0x1e0
[ 1013.256837][T21559]  shmem_alloc_and_add_folio+0x50c/0xc20
[ 1013.256867][T21559]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1013.256892][T21559]  ? shmem_allowable_huge_orders+0xd4/0x3f0
[ 1013.256923][T21559]  shmem_get_folio_gfp+0x67f/0x1610
[ 1013.256952][T21559]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1013.256981][T21559]  shmem_write_begin+0x1a4/0x3b0
[ 1013.256998][T21559]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1013.257013][T21559]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[ 1013.257032][T21559]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1013.257055][T21559]  generic_perform_write+0x3c4/0x900
[ 1013.257084][T21559]  ? __pfx_generic_perform_write+0x10/0x10
[ 1013.257109][T21559]  ? file_update_time_flags+0x35c/0x520
[ 1013.257127][T21559]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1013.257144][T21559]  shmem_file_write_iter+0x10e/0x140
[ 1013.257162][T21559]  __kernel_write_iter+0x31a/0xb10
[ 1013.257184][T21559]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1013.257205][T21559]  ? cgroup1_freezing+0x12c/0x3b0
[ 1013.257224][T21559]  ? cgroup1_freezing+0x136/0x3b0
[ 1013.257242][T21559]  dump_user_range+0x413/0xb70
[ 1013.257270][T21559]  ? __pfx_dump_user_range+0x10/0x10
[ 1013.257293][T21559]  ? elf_coredump_extra_notes_write+0xbd/0x500
[ 1013.257315][T21559]  ? __pfx_writenote+0x10/0x10
[ 1013.257337][T21559]  elf_core_dump+0x29c3/0x3c10
[ 1013.257364][T21559]  ? __pfx_elf_core_dump+0x10/0x10
[ 1013.257377][T21559]  ? kasan_save_stack+0x33/0x60
[ 1013.257392][T21559]  ? kasan_save_track+0x14/0x30
[ 1013.257408][T21559]  ? __kasan_kmalloc+0xaa/0xb0
[ 1013.257423][T21559]  ? __kvmalloc_node_noprof+0x3ac/0xa40
[ 1013.257439][T21559]  ? vfs_coredump+0x1dd9/0x55e0
[ 1013.257461][T21559]  ? arch_do_signal_or_restart+0x8f/0x7e0
[ 1013.257482][T21559]  ? irqentry_exit+0x38a/0x8c0
[ 1013.257503][T21559]  ? asm_exc_page_fault+0x26/0x30
[ 1013.257523][T21559]  ? 0xffffffffff600000
[ 1013.257571][T21559]  ? vfs_coredump+0x2b85/0x55e0
[ 1013.257592][T21559]  vfs_coredump+0x2b85/0x55e0
[ 1013.257625][T21559]  ? __pfx_vfs_coredump+0x10/0x10
[ 1013.257646][T21559]  ? __lock_acquire+0x436/0x2890
[ 1013.257667][T21559]  ? __lock_acquire+0x436/0x2890
[ 1013.257686][T21559]  ? lock_acquire+0x179/0x330
[ 1013.257708][T21559]  ? lock_acquire+0x179/0x330
[ 1013.257741][T21559]  ? arch_stack_walk+0xa6/0x100
[ 1013.257768][T21559]  ? stack_trace_save+0x8e/0xc0
[ 1013.257785][T21559]  ? __pfx_stack_trace_save+0x10/0x10
[ 1013.257801][T21559]  ? stack_depot_save_flags+0x29/0x9b0
[ 1013.257824][T21559]  ? __lock_acquire+0x436/0x2890
[ 1013.257843][T21559]  ? kasan_save_stack+0x42/0x60
[ 1013.257898][T21559]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1013.257918][T21559]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1013.257942][T21559]  ? rcu_is_watching+0x12/0xc0
[ 1013.257959][T21559]  get_signal+0x22e1/0x26d0
[ 1013.257989][T21559]  ? __pfx_get_signal+0x10/0x10
[ 1013.258019][T21559]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1013.258041][T21559]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1013.258068][T21559]  ? __bad_area_nosemaphore+0x350/0x690
[ 1013.258093][T21559]  irqentry_exit+0x38a/0x8c0
[ 1013.258115][T21559]  asm_exc_page_fault+0x26/0x30
[ 1013.258128][T21559] RIP: 0033:0x7fef8658f751
[ 1013.258142][T21559] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1013.258157][T21559] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1013.258170][T21559] RAX: 0000000000000000 RBX: 00007fef867e5fa0 RCX: 00007fef8658f749
[ 1013.258180][T21559] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000
[ 1013.258189][T21559] RBP: 00007fef86613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1013.258198][T21559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1013.258206][T21559] R13: 00007fef867e6038 R14: 00007fef867e5fa0 R15: 00007fffd9feb478
[ 1013.258228][T21559]  </TASK>
[ 1013.258234][T21559] memory: usage 307200kB, limit 307200kB, failcnt 20387
[ 1013.716361][  T975] pwc: Failed to set LED on/off time (-110)
[ 1013.719587][T21559] memory+swap: usage 432060kB, limit 9007199254740988kB, failcnt 0
[ 1013.731400][  T975] pwc: send_video_command error -32
[ 1013.737574][T21559] kmem: usage 10888kB, limit 9007199254740988kB, failcnt 0
[ 1013.743511][  T975] pwc: Failed to set video mode VGA@30 fps; return code = -32
[ 1013.751357][T21559] Memory cgroup stats for 
[ 1013.756600][  T975] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -32
[ 1013.763819][T21559] /syz0:
[ 1013.764010][T21559] cache 303083520
[ 1013.764020][T21559] rss 122880
[ 1013.764026][T21559] rss_huge 0
[ 1013.764033][T21559] shmem 303079424
[ 1013.764039][T21559] mapped_file 4096
[ 1013.764045][T21559] dirty 4096
[ 1013.764052][T21559] writeback 0
[ 1013.764058][T21559] workingset_refault_anon 609
[ 1013.764065][T21559] workingset_refault_file 0
[ 1013.764072][T21559] swap 127856640
[ 1013.764079][T21559] swapcached 110592
[ 1013.764086][T21559] pgpgin 1125732
[ 1013.764093][T21559] pgpgout 1053213
[ 1013.764100][T21559] pgfault 806749
[ 1013.764107][T21559] pgmajfault 126
[ 1013.764114][T21559] inactive_anon 133775360
[ 1013.764121][T21559] active_anon 169533440
[ 1013.764129][T21559] inactive_file 4096
[ 1013.764136][T21559] active_file 0
[ 1013.764143][T21559] unevictable 0
[ 1013.764150][T21559] hierarchical_memory_limit 314572800
[ 1013.764171][T21559] hierarchical_memsw_limit 9223372036854771712
[ 1013.764181][T21559] total_cache 303083520
[ 1013.764189][T21559] total_rss 122880
[ 1013.764197][T21559] total_rss_huge 0
[ 1013.764205][T21559] total_shmem 303079424
[ 1013.764213][T21559] total_mapped_file 4096
[ 1013.764221][T21559] total_dirty 4096
[ 1013.764230][T21559] total_writeback 0
[ 1013.901386][T21559] total_workingset_refault_anon 609
[ 1013.906553][T21559] total_workingset_refault_file 0
[ 1013.911931][T21559] total_swap 127856640
[ 1013.915979][T21559] total_swapcached 110592
[ 1013.920274][T21559] total_pgpgin 1125732
[ 1013.924348][T21559] total_pgpgout 1053213
[ 1013.928471][T21559] total_pgfault 806749
[ 1013.932526][T21559] total_pgmajfault 126
[ 1013.936564][T21559] total_inactive_anon 133775360
[ 1013.941395][T21559] total_active_anon 169533440
[ 1013.946037][T21559] total_inactive_file 4096
[ 1013.950419][T21559] total_active_file 0
[ 1013.954384][T21559] total_unevictable 0
[ 1013.958335][T21559] anon_cost 0
[ 1013.961624][T21559] file_cost 0
[ 1013.964878][T21559] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3888,pid=21559,uid=0
[ 1013.979879][T21559] Memory cgroup out of memory: Killed process 21559 (syz.0.3888) total-vm:98324kB, anon-rss:1152kB, file-rss:27392kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[ 1014.016438][T21561] syz.0.3888 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1014.026297][T21561] CPU: 1 UID: 0 PID: 21561 Comm: syz.0.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1014.026320][T21561] Tainted: [L]=SOFTLOCKUP
[ 1014.026325][T21561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1014.026334][T21561] Call Trace:
[ 1014.026340][T21561]  <TASK>
[ 1014.026346][T21561]  dump_stack_lvl+0x16c/0x1f0
[ 1014.026369][T21561]  dump_header+0x101/0x960
[ 1014.026395][T21561]  oom_kill_process+0x176/0x910
[ 1014.026421][T21561]  out_of_memory+0x350/0x1700
[ 1014.026444][T21561]  ? __lock_acquire+0x436/0x2890
[ 1014.026465][T21561]  ? __pfx_out_of_memory+0x10/0x10
[ 1014.026495][T21561]  mem_cgroup_out_of_memory+0x118/0x130
[ 1014.026511][T21561]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1014.026531][T21561]  ? do_raw_spin_unlock+0x172/0x230
[ 1014.026555][T21561]  try_charge_memcg+0x695/0xd30
[ 1014.026580][T21561]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1014.026599][T21561]  ? __print_lock_name+0xd0/0xe0
[ 1014.026622][T21561]  ? rcu_read_unlock+0x17/0x60
[ 1014.026648][T21561]  charge_memcg+0x8a/0x230
[ 1014.026669][T21561]  __mem_cgroup_charge+0x2b/0x1e0
[ 1014.026692][T21561]  shmem_alloc_and_add_folio+0x50c/0xc20
[ 1014.026721][T21561]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1014.026747][T21561]  ? shmem_allowable_huge_orders+0xd4/0x3f0
[ 1014.026776][T21561]  shmem_get_folio_gfp+0x67f/0x1610
[ 1014.026804][T21561]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1014.026834][T21561]  shmem_write_begin+0x1a4/0x3b0
[ 1014.026850][T21561]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1014.026866][T21561]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[ 1014.026885][T21561]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1014.026906][T21561]  generic_perform_write+0x3c4/0x900
[ 1014.026935][T21561]  ? __pfx_generic_perform_write+0x10/0x10
[ 1014.026959][T21561]  ? file_update_time_flags+0x35c/0x520
[ 1014.026978][T21561]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1014.026995][T21561]  shmem_file_write_iter+0x10e/0x140
[ 1014.027013][T21561]  __kernel_write_iter+0x31a/0xb10
[ 1014.027034][T21561]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1014.027053][T21561]  ? cgroup1_freezing+0x12c/0x3b0
[ 1014.027071][T21561]  ? cgroup1_freezing+0x136/0x3b0
[ 1014.027089][T21561]  dump_user_range+0x413/0xb70
[ 1014.027118][T21561]  ? __pfx_dump_user_range+0x10/0x10
[ 1014.027142][T21561]  ? elf_coredump_extra_notes_write+0xbd/0x500
[ 1014.027164][T21561]  ? __pfx_writenote+0x10/0x10
[ 1014.027184][T21561]  elf_core_dump+0x29c3/0x3c10
[ 1014.027210][T21561]  ? __pfx_elf_core_dump+0x10/0x10
[ 1014.027223][T21561]  ? kasan_save_stack+0x33/0x60
[ 1014.027239][T21561]  ? kasan_save_track+0x14/0x30
[ 1014.027259][T21561]  ? __kasan_kmalloc+0xaa/0xb0
[ 1014.027273][T21561]  ? __kvmalloc_node_noprof+0x3ac/0xa40
[ 1014.027290][T21561]  ? vfs_coredump+0x1dd9/0x55e0
[ 1014.027312][T21561]  ? arch_do_signal_or_restart+0x8f/0x7e0
[ 1014.027332][T21561]  ? irqentry_exit+0x38a/0x8c0
[ 1014.027349][T21561]  ? asm_exc_page_fault+0x26/0x30
[ 1014.027368][T21561]  ? 0xffffffffff600000
[ 1014.027417][T21561]  ? vfs_coredump+0x2b85/0x55e0
[ 1014.027438][T21561]  vfs_coredump+0x2b85/0x55e0
[ 1014.027468][T21561]  ? __pfx_vfs_coredump+0x10/0x10
[ 1014.027490][T21561]  ? __lock_acquire+0x436/0x2890
[ 1014.027512][T21561]  ? __lock_acquire+0x436/0x2890
[ 1014.027531][T21561]  ? lock_acquire+0x179/0x330
[ 1014.027552][T21561]  ? lock_acquire+0x179/0x330
[ 1014.027583][T21561]  ? arch_stack_walk+0xa6/0x100
[ 1014.027610][T21561]  ? stack_trace_save+0x8e/0xc0
[ 1014.027626][T21561]  ? __pfx_stack_trace_save+0x10/0x10
[ 1014.027642][T21561]  ? stack_depot_save_flags+0x29/0x9b0
[ 1014.027665][T21561]  ? __lock_acquire+0x436/0x2890
[ 1014.027684][T21561]  ? kasan_save_stack+0x42/0x60
[ 1014.027736][T21561]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1014.027755][T21561]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1014.027779][T21561]  ? rcu_is_watching+0x12/0xc0
[ 1014.027796][T21561]  get_signal+0x22e1/0x26d0
[ 1014.027827][T21561]  ? __pfx_get_signal+0x10/0x10
[ 1014.027854][T21561]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1014.027876][T21561]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1014.027903][T21561]  ? __bad_area_nosemaphore+0x350/0x690
[ 1014.027927][T21561]  irqentry_exit+0x38a/0x8c0
[ 1014.027949][T21561]  asm_exc_page_fault+0x26/0x30
[ 1014.027962][T21561] RIP: 0033:0x7fef8658f751
[ 1014.027975][T21561] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1014.027989][T21561] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1014.028001][T21561] RAX: 0000000000000000 RBX: 00007fef867e5fa0 RCX: 00007fef8658f749
[ 1014.028011][T21561] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000
[ 1014.028020][T21561] RBP: 00007fef86613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1014.028029][T21561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1014.028038][T21561] R13: 00007fef867e6038 R14: 00007fef867e5fa0 R15: 00007fffd9feb478
[ 1014.028060][T21561]  </TASK>
[ 1014.028066][T21561] memory: usage 307200kB, limit 307200kB, failcnt 20421
[ 1014.508344][T21561] memory+swap: usage 432052kB, limit 9007199254740988kB, failcnt 0
[ 1014.516488][T21561] kmem: usage 10832kB, limit 9007199254740988kB, failcnt 0
[ 1014.523681][T21561] Memory cgroup stats for /syz0:
[ 1014.523780][T21561] cache 303087616
[ 1014.532319][T21561] rss 122880
[ 1014.535500][T21561] rss_huge 0
[ 1014.538674][T21561] shmem 303083520
[ 1014.542548][T21561] mapped_file 4096
[ 1014.546249][T21561] dirty 4096
[ 1014.549422][T21561] writeback 0
[ 1014.552709][T21561] workingset_refault_anon 609
[ 1014.557364][T21561] workingset_refault_file 0
[ 1014.561881][T21561] swap 127848448
[ 1014.565402][T21561] swapcached 110592
[ 1014.569197][T21561] pgpgin 1125733
[ 1014.573011][T21561] pgpgout 1053213
[ 1014.576618][T21561] pgfault 806749
[ 1014.580140][T21561] pgmajfault 126
[ 1014.583681][T21561] inactive_anon 133775360
[ 1014.587985][T21561] active_anon 169533440
[ 1014.592138][T21561] inactive_file 4096
[ 1014.596008][T21561] active_file 0
[ 1014.599441][T21561] unevictable 0
[ 1014.603135][T21561] hierarchical_memory_limit 314572800
[ 1014.608481][T21561] hierarchical_memsw_limit 9223372036854771712
[ 1014.614642][T21561] total_cache 303087616
[ 1014.618773][T21561] total_rss 122880
[ 1014.622493][T21561] total_rss_huge 0
[ 1014.626188][T21561] total_shmem 303083520
[ 1014.630318][T21561] total_mapped_file 4096
[ 1014.634812][T21561] total_dirty 4096
[ 1014.638527][T21561] total_writeback 0
[ 1014.642335][T21561] total_workingset_refault_anon 609
[ 1014.647508][T21561] total_workingset_refault_file 0
[ 1014.652526][T21561] total_swap 127848448
[ 1014.656568][T21561] total_swapcached 110592
[ 1014.660869][T21561] total_pgpgin 1125733
[ 1014.665174][T21561] total_pgpgout 1053213
[ 1014.669304][T21561] total_pgfault 806749
[ 1014.673373][T21561] total_pgmajfault 126
[ 1014.677415][T21561] total_inactive_anon 133775360
[ 1014.682266][T21561] total_active_anon 169533440
[ 1014.686919][T21561] total_inactive_file 4096
[ 1014.691578][T21561] total_active_file 0
[ 1014.695536][T21561] total_unevictable 0
[ 1014.699497][T21561] anon_cost 0
[ 1014.702770][T21561] file_cost 0
[ 1014.706037][T21561] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3888,pid=21562,uid=0
[ 1014.723056][T21561] Memory cgroup out of memory: Killed process 21562 (syz.0.3888) total-vm:98324kB, anon-rss:1152kB, file-rss:23936kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[ 1014.828345][T21566] syz.0.3888 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1014.838760][T21566] CPU: 0 UID: 0 PID: 21566 Comm: syz.0.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1014.838784][T21566] Tainted: [L]=SOFTLOCKUP
[ 1014.838789][T21566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1014.838798][T21566] Call Trace:
[ 1014.838804][T21566]  <TASK>
[ 1014.838810][T21566]  dump_stack_lvl+0x16c/0x1f0
[ 1014.838834][T21566]  dump_header+0x101/0x960
[ 1014.838860][T21566]  oom_kill_process+0x176/0x910
[ 1014.838886][T21566]  out_of_memory+0x350/0x1700
[ 1014.838910][T21566]  ? __lock_acquire+0x436/0x2890
[ 1014.838932][T21566]  ? __pfx_out_of_memory+0x10/0x10
[ 1014.838961][T21566]  mem_cgroup_out_of_memory+0x118/0x130
[ 1014.838977][T21566]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1014.838997][T21566]  ? do_raw_spin_unlock+0x172/0x230
[ 1014.839021][T21566]  try_charge_memcg+0x695/0xd30
[ 1014.839045][T21566]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1014.839065][T21566]  ? __print_lock_name+0xd0/0xe0
[ 1014.839088][T21566]  ? rcu_read_unlock+0x17/0x60
[ 1014.839115][T21566]  charge_memcg+0x8a/0x230
[ 1014.839135][T21566]  __mem_cgroup_charge+0x2b/0x1e0
[ 1014.839158][T21566]  shmem_alloc_and_add_folio+0x50c/0xc20
[ 1014.839188][T21566]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1014.839213][T21566]  ? shmem_allowable_huge_orders+0xd4/0x3f0
[ 1014.839242][T21566]  shmem_get_folio_gfp+0x67f/0x1610
[ 1014.839270][T21566]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1014.839300][T21566]  shmem_write_begin+0x1a4/0x3b0
[ 1014.839316][T21566]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1014.839332][T21566]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[ 1014.839351][T21566]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1014.839373][T21566]  generic_perform_write+0x3c4/0x900
[ 1014.839401][T21566]  ? __pfx_generic_perform_write+0x10/0x10
[ 1014.839426][T21566]  ? file_update_time_flags+0x35c/0x520
[ 1014.839445][T21566]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1014.839461][T21566]  shmem_file_write_iter+0x10e/0x140
[ 1014.839480][T21566]  __kernel_write_iter+0x31a/0xb10
[ 1014.839505][T21566]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1014.839524][T21566]  ? cgroup1_freezing+0x12c/0x3b0
[ 1014.839542][T21566]  ? cgroup1_freezing+0x136/0x3b0
[ 1014.839560][T21566]  dump_user_range+0x413/0xb70
[ 1014.839588][T21566]  ? __pfx_dump_user_range+0x10/0x10
[ 1014.839612][T21566]  ? elf_coredump_extra_notes_write+0xbd/0x500
[ 1014.839634][T21566]  ? __pfx_writenote+0x10/0x10
[ 1014.839654][T21566]  elf_core_dump+0x29c3/0x3c10
[ 1014.839680][T21566]  ? __pfx_elf_core_dump+0x10/0x10
[ 1014.839693][T21566]  ? kasan_save_stack+0x33/0x60
[ 1014.839709][T21566]  ? kasan_save_track+0x14/0x30
[ 1014.839725][T21566]  ? __kasan_kmalloc+0xaa/0xb0
[ 1014.839740][T21566]  ? __kvmalloc_node_noprof+0x3ac/0xa40
[ 1014.839757][T21566]  ? vfs_coredump+0x1dd9/0x55e0
[ 1014.839778][T21566]  ? arch_do_signal_or_restart+0x8f/0x7e0
[ 1014.839798][T21566]  ? irqentry_exit+0x38a/0x8c0
[ 1014.839815][T21566]  ? asm_exc_page_fault+0x26/0x30
[ 1014.839835][T21566]  ? 0xffffffffff600000
[ 1014.839883][T21566]  ? vfs_coredump+0x2b85/0x55e0
[ 1014.839905][T21566]  vfs_coredump+0x2b85/0x55e0
[ 1014.839935][T21566]  ? __pfx_vfs_coredump+0x10/0x10
[ 1014.839956][T21566]  ? __lock_acquire+0x436/0x2890
[ 1014.839977][T21566]  ? __lock_acquire+0x436/0x2890
[ 1014.839996][T21566]  ? lock_acquire+0x179/0x330
[ 1014.840018][T21566]  ? lock_acquire+0x179/0x330
[ 1014.840049][T21566]  ? arch_stack_walk+0xa6/0x100
[ 1014.840076][T21566]  ? stack_trace_save+0x8e/0xc0
[ 1014.840093][T21566]  ? __pfx_stack_trace_save+0x10/0x10
[ 1014.840110][T21566]  ? stack_depot_save_flags+0x29/0x9b0
[ 1014.840134][T21566]  ? __lock_acquire+0x436/0x2890
[ 1014.840152][T21566]  ? kasan_save_stack+0x42/0x60
[ 1014.840204][T21566]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1014.840223][T21566]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1014.840247][T21566]  ? rcu_is_watching+0x12/0xc0
[ 1014.840264][T21566]  get_signal+0x22e1/0x26d0
[ 1014.840294][T21566]  ? __pfx_get_signal+0x10/0x10
[ 1014.840322][T21566]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1014.840344][T21566]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1014.840371][T21566]  ? __bad_area_nosemaphore+0x350/0x690
[ 1014.840395][T21566]  irqentry_exit+0x38a/0x8c0
[ 1014.840416][T21566]  asm_exc_page_fault+0x26/0x30
[ 1014.840430][T21566] RIP: 0033:0x7fef8658f751
[ 1014.840442][T21566] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1014.840457][T21566] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1014.840469][T21566] RAX: 0000000000000000 RBX: 00007fef867e5fa0 RCX: 00007fef8658f749
[ 1014.840478][T21566] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000
[ 1014.840492][T21566] RBP: 00007fef86613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1014.840500][T21566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1014.840509][T21566] R13: 00007fef867e6038 R14: 00007fef867e5fa0 R15: 00007fffd9feb478
[ 1014.840530][T21566]  </TASK>
[ 1014.840536][T21566] memory: usage 307200kB, limit 307200kB, failcnt 20763
[ 1015.320058][T21566] memory+swap: usage 432044kB, limit 9007199254740988kB, failcnt 0
[ 1015.327995][T21566] kmem: usage 10776kB, limit 9007199254740988kB, failcnt 0
[ 1015.335465][T21566] Memory cgroup stats for /syz0:
[ 1015.335562][T21566] cache 303304704
[ 1015.344109][T21566] rss 122880
[ 1015.347288][T21566] rss_huge 0
[ 1015.350460][T21566] shmem 303300608
[ 1015.354130][T21566] mapped_file 4096
[ 1015.357826][T21566] dirty 4096
[ 1015.361275][T21566] writeback 0
[ 1015.364536][T21566] workingset_refault_anon 609
[ 1015.369190][T21566] workingset_refault_file 0
[ 1015.373684][T21566] swap 127840256
[ 1015.377204][T21566] swapcached 110592
[ 1015.381149][T21566] pgpgin 1125786
[ 1015.384674][T21566] pgpgout 1053213
[ 1015.388283][T21566] pgfault 806752
[ 1015.392080][T21566] pgmajfault 126
[ 1015.395602][T21566] inactive_anon 169758720
[ 1015.399906][T21566] active_anon 133775360
[ 1015.404048][T21566] inactive_file 4096
[ 1015.407918][T21566] active_file 0
[ 1015.411440][T21566] unevictable 0
[ 1015.414907][T21566] hierarchical_memory_limit 314572800
[ 1015.420251][T21566] hierarchical_memsw_limit 9223372036854771712
[ 1015.426725][T21566] total_cache 303304704
[ 1015.430854][T21566] total_rss 122880
[ 1015.434573][T21566] total_rss_huge 0
[ 1015.438270][T21566] total_shmem 303300608
[ 1015.442439][T21566] total_mapped_file 4096
[ 1015.446663][T21566] total_dirty 4096
[ 1015.450365][T21566] total_writeback 0
[ 1015.454420][T21566] total_workingset_refault_anon 609
[ 1015.459595][T21566] total_workingset_refault_file 0
[ 1015.464654][T21566] total_swap 127840256
[ 1015.468698][T21566] total_swapcached 110592
[ 1015.473019][T21566] total_pgpgin 1125786
[ 1015.477061][T21566] total_pgpgout 1053213
[ 1015.481460][T21566] total_pgfault 806752
[ 1015.485505][T21566] total_pgmajfault 126
[ 1015.489547][T21566] total_inactive_anon 169758720
[ 1015.494401][T21566] total_active_anon 133775360
[ 1015.499051][T21566] total_inactive_file 4096
[ 1015.503472][T21566] total_active_file 0
[ 1015.507429][T21566] total_unevictable 0
[ 1015.511662][T21566] anon_cost 0
[ 1015.514925][T21566] file_cost 0
[ 1015.518202][T21566] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3888,pid=21561,uid=0
[ 1015.533792][T21566] Memory cgroup out of memory: Killed process 21561 (syz.0.3888) total-vm:98324kB, anon-rss:1152kB, file-rss:22784kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[ 1015.573740][T21564] syz.0.3888 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1015.583684][T21564] CPU: 0 UID: 0 PID: 21564 Comm: syz.0.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1015.583708][T21564] Tainted: [L]=SOFTLOCKUP
[ 1015.583714][T21564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1015.583722][T21564] Call Trace:
[ 1015.583728][T21564]  <TASK>
[ 1015.583734][T21564]  dump_stack_lvl+0x16c/0x1f0
[ 1015.583758][T21564]  dump_header+0x101/0x960
[ 1015.583784][T21564]  oom_kill_process+0x176/0x910
[ 1015.583809][T21564]  out_of_memory+0x350/0x1700
[ 1015.583833][T21564]  ? __lock_acquire+0x436/0x2890
[ 1015.583854][T21564]  ? __pfx_out_of_memory+0x10/0x10
[ 1015.583883][T21564]  mem_cgroup_out_of_memory+0x118/0x130
[ 1015.583899][T21564]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1015.583919][T21564]  ? do_raw_spin_unlock+0x172/0x230
[ 1015.583943][T21564]  try_charge_memcg+0x695/0xd30
[ 1015.583967][T21564]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1015.583987][T21564]  ? __print_lock_name+0xd0/0xe0
[ 1015.584010][T21564]  ? rcu_read_unlock+0x17/0x60
[ 1015.584037][T21564]  charge_memcg+0x8a/0x230
[ 1015.584057][T21564]  __mem_cgroup_charge+0x2b/0x1e0
[ 1015.584080][T21564]  shmem_alloc_and_add_folio+0x50c/0xc20
[ 1015.584109][T21564]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1015.584134][T21564]  ? shmem_allowable_huge_orders+0xd4/0x3f0
[ 1015.584172][T21564]  shmem_get_folio_gfp+0x67f/0x1610
[ 1015.584200][T21564]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1015.584230][T21564]  shmem_write_begin+0x1a4/0x3b0
[ 1015.584246][T21564]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1015.584261][T21564]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[ 1015.584280][T21564]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1015.584301][T21564]  generic_perform_write+0x3c4/0x900
[ 1015.584329][T21564]  ? __pfx_generic_perform_write+0x10/0x10
[ 1015.584353][T21564]  ? file_update_time_flags+0x35c/0x520
[ 1015.584372][T21564]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1015.584388][T21564]  shmem_file_write_iter+0x10e/0x140
[ 1015.584406][T21564]  __kernel_write_iter+0x31a/0xb10
[ 1015.584427][T21564]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1015.584446][T21564]  ? cgroup1_freezing+0x12c/0x3b0
[ 1015.584464][T21564]  ? cgroup1_freezing+0x136/0x3b0
[ 1015.584486][T21564]  dump_user_range+0x413/0xb70
[ 1015.584515][T21564]  ? __pfx_dump_user_range+0x10/0x10
[ 1015.584539][T21564]  ? elf_coredump_extra_notes_write+0xbd/0x500
[ 1015.584561][T21564]  ? __pfx_writenote+0x10/0x10
[ 1015.584581][T21564]  elf_core_dump+0x29c3/0x3c10
[ 1015.584606][T21564]  ? __pfx_elf_core_dump+0x10/0x10
[ 1015.584620][T21564]  ? kasan_save_stack+0x33/0x60
[ 1015.584635][T21564]  ? kasan_save_track+0x14/0x30
[ 1015.584651][T21564]  ? __kasan_kmalloc+0xaa/0xb0
[ 1015.584666][T21564]  ? __kvmalloc_node_noprof+0x3ac/0xa40
[ 1015.584683][T21564]  ? vfs_coredump+0x1dd9/0x55e0
[ 1015.584703][T21564]  ? arch_do_signal_or_restart+0x8f/0x7e0
[ 1015.584724][T21564]  ? irqentry_exit+0x38a/0x8c0
[ 1015.584741][T21564]  ? asm_exc_page_fault+0x26/0x30
[ 1015.584760][T21564]  ? 0xffffffffff600000
[ 1015.584808][T21564]  ? vfs_coredump+0x2b85/0x55e0
[ 1015.584829][T21564]  vfs_coredump+0x2b85/0x55e0
[ 1015.584859][T21564]  ? __pfx_vfs_coredump+0x10/0x10
[ 1015.584881][T21564]  ? __lock_acquire+0x436/0x2890
[ 1015.584903][T21564]  ? __lock_acquire+0x436/0x2890
[ 1015.584922][T21564]  ? lock_acquire+0x179/0x330
[ 1015.584944][T21564]  ? lock_acquire+0x179/0x330
[ 1015.584975][T21564]  ? arch_stack_walk+0xa6/0x100
[ 1015.585002][T21564]  ? stack_trace_save+0x8e/0xc0
[ 1015.585019][T21564]  ? __pfx_stack_trace_save+0x10/0x10
[ 1015.585036][T21564]  ? stack_depot_save_flags+0x29/0x9b0
[ 1015.585059][T21564]  ? __lock_acquire+0x436/0x2890
[ 1015.585079][T21564]  ? kasan_save_stack+0x42/0x60
[ 1015.585130][T21564]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1015.585150][T21564]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1015.585173][T21564]  ? rcu_is_watching+0x12/0xc0
[ 1015.585190][T21564]  get_signal+0x22e1/0x26d0
[ 1015.585220][T21564]  ? __pfx_get_signal+0x10/0x10
[ 1015.585248][T21564]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1015.585270][T21564]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1015.585297][T21564]  ? __bad_area_nosemaphore+0x350/0x690
[ 1015.585322][T21564]  irqentry_exit+0x38a/0x8c0
[ 1015.585344][T21564]  asm_exc_page_fault+0x26/0x30
[ 1015.585358][T21564] RIP: 0033:0x7fef8658f751
[ 1015.585370][T21564] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1015.585384][T21564] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1015.585397][T21564] RAX: 0000000000000000 RBX: 00007fef867e5fa0 RCX: 00007fef8658f749
[ 1015.585407][T21564] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000
[ 1015.585416][T21564] RBP: 00007fef86613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1015.585425][T21564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1015.585434][T21564] R13: 00007fef867e6038 R14: 00007fef867e5fa0 R15: 00007fffd9feb478
[ 1015.585456][T21564]  </TASK>
[ 1015.585462][T21564] memory: usage 307200kB, limit 307200kB, failcnt 20840
[ 1016.064082][T21564] memory+swap: usage 432036kB, limit 9007199254740988kB, failcnt 0
[ 1016.071997][T21564] kmem: usage 10720kB, limit 9007199254740988kB, failcnt 0
[ 1016.079168][T21564] Memory cgroup stats for /syz0:
[ 1016.079267][T21564] cache 303304704
[ 1016.087795][T21564] rss 122880
[ 1016.090986][T21564] rss_huge 0
[ 1016.094160][T21564] shmem 303300608
[ 1016.097764][T21564] mapped_file 4096
[ 1016.101487][T21564] dirty 4096
[ 1016.104660][T21564] writeback 0
[ 1016.107922][T21564] workingset_refault_anon 609
[ 1016.112598][T21564] workingset_refault_file 0
[ 1016.117073][T21564] swap 127832064
[ 1016.120590][T21564] swapcached 110592
[ 1016.124389][T21564] pgpgin 1125786
[ 1016.127908][T21564] pgpgout 1053213
[ 1016.131535][T21564] pgfault 806752
[ 1016.135054][T21564] pgmajfault 126
[ 1016.138580][T21564] inactive_anon 169758720
[ 1016.142900][T21564] active_anon 133775360
[ 1016.147028][T21564] inactive_file 4096
[ 1016.150895][T21564] active_file 0
[ 1016.154406][T21564] unevictable 0
[ 1016.157846][T21564] hierarchical_memory_limit 314572800
[ 1016.163724][T21564] hierarchical_memsw_limit 9223372036854771712
[ 1016.169857][T21564] total_cache 303304704
[ 1016.174041][T21564] total_rss 122880
[ 1016.177737][T21564] total_rss_huge 0
[ 1016.181458][T21564] total_shmem 303300608
[ 1016.185587][T21564] total_mapped_file 4096
[ 1016.189802][T21564] total_dirty 4096
[ 1016.193521][T21564] total_writeback 0
[ 1016.197300][T21564] total_workingset_refault_anon 609
[ 1016.202509][T21564] total_workingset_refault_file 0
[ 1016.207505][T21564] total_swap 127832064
[ 1016.211562][T21564] total_swapcached 110592
[ 1016.215863][T21564] total_pgpgin 1125786
[ 1016.220162][T21564] total_pgpgout 1053213
[ 1016.224310][T21564] total_pgfault 806752
[ 1016.228350][T21564] total_pgmajfault 126
[ 1016.232407][T21564] total_inactive_anon 169758720
[ 1016.237229][T21564] total_active_anon 133775360
[ 1016.241902][T21564] total_inactive_file 4096
[ 1016.246291][T21564] total_active_file 0
[ 1016.250244][T21564] total_unevictable 0
[ 1016.254230][T21564] anon_cost 0
[ 1016.257491][T21564] file_cost 0
[ 1016.260749][T21564] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3888,pid=21560,uid=0
[ 1016.276167][T21564] Memory cgroup out of memory: Killed process 21560 (syz.0.3888) total-vm:98324kB, anon-rss:1152kB, file-rss:22400kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000
[ 1016.327598][T21567] syz.0.3888 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1016.338232][T21567] CPU: 1 UID: 0 PID: 21567 Comm: syz.0.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1016.338258][T21567] Tainted: [L]=SOFTLOCKUP
[ 1016.338263][T21567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1016.338273][T21567] Call Trace:
[ 1016.338278][T21567]  <TASK>
[ 1016.338284][T21567]  dump_stack_lvl+0x16c/0x1f0
[ 1016.338309][T21567]  dump_header+0x101/0x960
[ 1016.338335][T21567]  oom_kill_process+0x176/0x910
[ 1016.338361][T21567]  out_of_memory+0x350/0x1700
[ 1016.338385][T21567]  ? __lock_acquire+0x436/0x2890
[ 1016.338406][T21567]  ? __pfx_out_of_memory+0x10/0x10
[ 1016.338435][T21567]  mem_cgroup_out_of_memory+0x118/0x130
[ 1016.338451][T21567]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1016.338471][T21567]  ? do_raw_spin_unlock+0x172/0x230
[ 1016.338496][T21567]  try_charge_memcg+0x695/0xd30
[ 1016.338520][T21567]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1016.338539][T21567]  ? peak_open+0x20/0x50
[ 1016.338563][T21567]  ? get_mem_cgroup_from_objcg+0xd3/0x330
[ 1016.338582][T21567]  obj_cgroup_charge_account+0x336/0x670
[ 1016.338606][T21567]  __memcg_slab_post_alloc_hook+0x2e3/0x880
[ 1016.338631][T21567]  ? kasan_save_track+0x14/0x30
[ 1016.338651][T21567]  kmem_cache_alloc_lru_noprof+0x58f/0x770
[ 1016.338669][T21567]  ? shmem_alloc_inode+0x25/0x50
[ 1016.338690][T21567]  ? __pfx_shmem_alloc_inode+0x10/0x10
[ 1016.338707][T21567]  ? shmem_alloc_inode+0x25/0x50
[ 1016.338722][T21567]  shmem_alloc_inode+0x25/0x50
[ 1016.338739][T21567]  alloc_inode+0x64/0x240
[ 1016.338757][T21567]  new_inode+0x22/0x1c0
[ 1016.338775][T21567]  shmem_get_inode+0x19a/0xfb0
[ 1016.338799][T21567]  shmem_mknod+0x1a2/0x3b0
[ 1016.338822][T21567]  ? __pfx_shmem_create+0x10/0x10
[ 1016.338840][T21567]  lookup_open.isra.0+0x12dc/0x1780
[ 1016.338863][T21567]  ? __pfx_lookup_open.isra.0+0x10/0x10
[ 1016.338886][T21567]  ? find_held_lock+0x2b/0x80
[ 1016.338914][T21567]  ? __pfx_down_write+0x10/0x10
[ 1016.338940][T21567]  path_openat+0xa95/0x3140
[ 1016.338968][T21567]  ? __pfx_path_openat+0x10/0x10
[ 1016.338989][T21567]  ? kasan_save_stack+0x42/0x60
[ 1016.339004][T21567]  ? kasan_save_stack+0x33/0x60
[ 1016.339020][T21567]  ? kasan_save_track+0x14/0x30
[ 1016.339035][T21567]  ? __kasan_slab_alloc+0x89/0x90
[ 1016.339052][T21567]  ? kmem_cache_alloc_noprof+0x25e/0x770
[ 1016.339066][T21567]  ? getname_kernel+0x52/0x370
[ 1016.339086][T21567]  ? filp_open+0x1d/0x80
[ 1016.339099][T21567]  ? vfs_coredump+0x180f/0x55e0
[ 1016.339124][T21567]  do_filp_open+0x20b/0x470
[ 1016.339146][T21567]  ? __pfx_do_filp_open+0x10/0x10
[ 1016.339191][T21567]  file_open_name+0x2a3/0x450
[ 1016.339206][T21567]  ? __pfx_file_open_name+0x10/0x10
[ 1016.339219][T21567]  ? getname_kernel+0x52/0x370
[ 1016.339248][T21567]  ? __asan_memcpy+0x3c/0x60
[ 1016.339267][T21567]  filp_open+0x4b/0x80
[ 1016.339281][T21567]  vfs_coredump+0x180f/0x55e0
[ 1016.339311][T21567]  ? __pfx_vfs_coredump+0x10/0x10
[ 1016.339332][T21567]  ? __lock_acquire+0x436/0x2890
[ 1016.339354][T21567]  ? __lock_acquire+0x436/0x2890
[ 1016.339373][T21567]  ? lock_acquire+0x179/0x330
[ 1016.339395][T21567]  ? lock_acquire+0x179/0x330
[ 1016.339412][T21567]  ? find_held_lock+0x2b/0x80
[ 1016.339435][T21567]  ? is_bpf_text_address+0x8a/0x1a0
[ 1016.339451][T21567]  ? bpf_ksym_find+0x127/0x1c0
[ 1016.339479][T21567]  ? arch_stack_walk+0xa6/0x100
[ 1016.339507][T21567]  ? stack_trace_save+0x8e/0xc0
[ 1016.339523][T21567]  ? __pfx_stack_trace_save+0x10/0x10
[ 1016.339540][T21567]  ? stack_depot_save_flags+0x29/0x9b0
[ 1016.339562][T21567]  ? __lock_acquire+0x436/0x2890
[ 1016.339581][T21567]  ? kasan_save_stack+0x42/0x60
[ 1016.339632][T21567]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1016.339651][T21567]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1016.339675][T21567]  ? rcu_is_watching+0x12/0xc0
[ 1016.339692][T21567]  get_signal+0x22e1/0x26d0
[ 1016.339722][T21567]  ? __pfx_get_signal+0x10/0x10
[ 1016.339750][T21567]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1016.339773][T21567]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1016.339800][T21567]  ? __bad_area_nosemaphore+0x350/0x690
[ 1016.339825][T21567]  irqentry_exit+0x38a/0x8c0
[ 1016.339847][T21567]  asm_exc_page_fault+0x26/0x30
[ 1016.339861][T21567] RIP: 0033:0x7fef8658f751
[ 1016.339874][T21567] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1016.339889][T21567] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1016.339901][T21567] RAX: 0000000000000000 RBX: 00007fef867e5fa0 RCX: 00007fef8658f749
[ 1016.339911][T21567] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000
[ 1016.339920][T21567] RBP: 00007fef86613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1016.339929][T21567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1016.339937][T21567] R13: 00007fef867e6038 R14: 00007fef867e5fa0 R15: 00007fffd9feb478
[ 1016.339959][T21567]  </TASK>
[ 1016.339965][T21567] memory: usage 307200kB, limit 307200kB, failcnt 20960
[ 1016.812593][T21567] memory+swap: usage 432028kB, limit 9007199254740988kB, failcnt 0
[ 1016.820474][T21567] kmem: usage 10668kB, limit 9007199254740988kB, failcnt 0
[ 1016.827703][T21567] Memory cgroup stats for /syz0:
[ 1016.827896][T21567] cache 303415296
[ 1016.836414][T21567] rss 122880
[ 1016.839592][T21567] rss_huge 0
[ 1016.843265][T21567] shmem 303411200
[ 1016.846895][T21567] mapped_file 4096
[ 1016.850597][T21567] dirty 4096
[ 1016.853832][T21567] writeback 0
[ 1016.857102][T21567] workingset_refault_anon 609
[ 1016.862004][T21567] workingset_refault_file 0
[ 1016.866530][T21567] swap 127823872
[ 1016.870046][T21567] swapcached 110592
[ 1016.874262][T21567] pgpgin 1125813
[ 1016.877923][T21567] pgpgout 1053213
[ 1016.881553][T21567] pgfault 806753
[ 1016.885066][T21567] pgmajfault 126
[ 1016.888587][T21567] inactive_anon 169811968
[ 1016.892979][T21567] active_anon 133832704
[ 1016.897173][T21567] inactive_file 4096
[ 1016.901344][T21567] active_file 0
[ 1016.904772][T21567] unevictable 0
[ 1016.908520][T21567] hierarchical_memory_limit 314572800
[ 1016.913892][T21567] hierarchical_memsw_limit 9223372036854771712
[ 1016.920011][T21567] total_cache 303415296
[ 1016.924162][T21567] total_rss 122880
[ 1016.927853][T21567] total_rss_huge 0
[ 1016.931872][T21567] total_shmem 303411200
[ 1016.935996][T21567] total_mapped_file 4096
[ 1016.940204][T21567] total_dirty 4096
[ 1016.943905][T21567] total_writeback 0
[ 1016.947682][T21567] total_workingset_refault_anon 609
[ 1016.952879][T21567] total_workingset_refault_file 0
[ 1016.957870][T21567] total_swap 127823872
[ 1016.962252][T21567] total_swapcached 110592
[ 1016.966580][T21567] total_pgpgin 1125813
[ 1016.970615][T21567] total_pgpgout 1053213
[ 1016.974771][T21567] total_pgfault 806753
[ 1016.978805][T21567] total_pgmajfault 126
[ 1016.982852][T21567] total_inactive_anon 169811968
[ 1016.987666][T21567] total_active_anon 133832704
[ 1016.992514][T21567] total_inactive_file 4096
[ 1016.996898][T21567] total_active_file 0
[ 1017.000843][T21567] total_unevictable 0
[ 1017.004815][T21567] anon_cost 0
[ 1017.008068][T21567] file_cost 0
[ 1017.011353][T21567] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3888,pid=21563,uid=0
[ 1017.028073][T21567] Memory cgroup out of memory: Killed process 21563 (syz.0.3888) total-vm:98324kB, anon-rss:1152kB, file-rss:21888kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000
[ 1017.069000][T21565] syz.0.3888 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1017.079055][T21565] CPU: 0 UID: 0 PID: 21565 Comm: syz.0.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1017.079080][T21565] Tainted: [L]=SOFTLOCKUP
[ 1017.079085][T21565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1017.079094][T21565] Call Trace:
[ 1017.079099][T21565]  <TASK>
[ 1017.079105][T21565]  dump_stack_lvl+0x16c/0x1f0
[ 1017.079128][T21565]  dump_header+0x101/0x960
[ 1017.079155][T21565]  oom_kill_process+0x176/0x910
[ 1017.079180][T21565]  out_of_memory+0x350/0x1700
[ 1017.079204][T21565]  ? __lock_acquire+0x436/0x2890
[ 1017.079225][T21565]  ? __pfx_out_of_memory+0x10/0x10
[ 1017.079255][T21565]  mem_cgroup_out_of_memory+0x118/0x130
[ 1017.079271][T21565]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1017.079291][T21565]  ? do_raw_spin_unlock+0x172/0x230
[ 1017.079315][T21565]  try_charge_memcg+0x695/0xd30
[ 1017.079340][T21565]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1017.079360][T21565]  ? __print_lock_name+0xd1/0xe0
[ 1017.079383][T21565]  ? rcu_read_unlock+0x17/0x60
[ 1017.079409][T21565]  charge_memcg+0x8a/0x230
[ 1017.079429][T21565]  __mem_cgroup_charge+0x2b/0x1e0
[ 1017.079452][T21565]  shmem_alloc_and_add_folio+0x50c/0xc20
[ 1017.079486][T21565]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1017.079511][T21565]  ? shmem_allowable_huge_orders+0xd4/0x3f0
[ 1017.079540][T21565]  shmem_get_folio_gfp+0x67f/0x1610
[ 1017.079569][T21565]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1017.079603][T21565]  ? __pfx_timestamp_truncate+0x10/0x10
[ 1017.079629][T21565]  shmem_write_begin+0x1a4/0x3b0
[ 1017.079645][T21565]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1017.079661][T21565]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[ 1017.079684][T21565]  generic_perform_write+0x3c4/0x900
[ 1017.079712][T21565]  ? __pfx_generic_perform_write+0x10/0x10
[ 1017.079734][T21565]  ? generic_update_time+0xcf/0xf0
[ 1017.079747][T21565]  ? mnt_put_write_access_file+0x45/0xf0
[ 1017.079768][T21565]  ? file_update_time_flags+0x35c/0x520
[ 1017.079786][T21565]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1017.079803][T21565]  shmem_file_write_iter+0x10e/0x140
[ 1017.079821][T21565]  __kernel_write_iter+0x31a/0xb10
[ 1017.079843][T21565]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1017.079861][T21565]  ? cgroup1_freezing+0x12c/0x3b0
[ 1017.079880][T21565]  ? cgroup1_freezing+0x136/0x3b0
[ 1017.079898][T21565]  dump_user_range+0x413/0xb70
[ 1017.079926][T21565]  ? __pfx_dump_user_range+0x10/0x10
[ 1017.079950][T21565]  ? elf_coredump_extra_notes_write+0xbd/0x500
[ 1017.079973][T21565]  ? __pfx_writenote+0x10/0x10
[ 1017.079993][T21565]  elf_core_dump+0x29c3/0x3c10
[ 1017.080019][T21565]  ? __pfx_elf_core_dump+0x10/0x10
[ 1017.080032][T21565]  ? kasan_save_stack+0x33/0x60
[ 1017.080048][T21565]  ? kasan_save_track+0x14/0x30
[ 1017.080064][T21565]  ? __kasan_kmalloc+0xaa/0xb0
[ 1017.080079][T21565]  ? __kvmalloc_node_noprof+0x3ac/0xa40
[ 1017.080096][T21565]  ? vfs_coredump+0x1dd9/0x55e0
[ 1017.080117][T21565]  ? arch_do_signal_or_restart+0x8f/0x7e0
[ 1017.080138][T21565]  ? irqentry_exit+0x38a/0x8c0
[ 1017.080156][T21565]  ? asm_exc_page_fault+0x26/0x30
[ 1017.080176][T21565]  ? 0xffffffffff600000
[ 1017.080226][T21565]  ? vfs_coredump+0x2b85/0x55e0
[ 1017.080247][T21565]  vfs_coredump+0x2b85/0x55e0
[ 1017.080277][T21565]  ? __pfx_vfs_coredump+0x10/0x10
[ 1017.080299][T21565]  ? __lock_acquire+0x436/0x2890
[ 1017.080321][T21565]  ? __lock_acquire+0x436/0x2890
[ 1017.080340][T21565]  ? lock_acquire+0x179/0x330
[ 1017.080362][T21565]  ? lock_acquire+0x179/0x330
[ 1017.080394][T21565]  ? arch_stack_walk+0xa6/0x100
[ 1017.080421][T21565]  ? stack_trace_save+0x8e/0xc0
[ 1017.080438][T21565]  ? __pfx_stack_trace_save+0x10/0x10
[ 1017.080455][T21565]  ? stack_depot_save_flags+0x29/0x9b0
[ 1017.080482][T21565]  ? __lock_acquire+0x436/0x2890
[ 1017.080501][T21565]  ? kasan_save_stack+0x42/0x60
[ 1017.080546][T21565]  ? rcu_is_watching+0x12/0xc0
[ 1017.080559][T21565]  ? irqentry_exit+0x1dd/0x8c0
[ 1017.080577][T21565]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1017.080595][T21565]  ? irqentry_exit+0x1dd/0x8c0
[ 1017.080612][T21565]  ? trace_irq_disable.constprop.0+0xd4/0x110
[ 1017.080633][T21565]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1017.080652][T21565]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1017.080675][T21565]  ? trace_irq_enable.constprop.0+0x2f/0x110
[ 1017.080697][T21565]  get_signal+0x22e1/0x26d0
[ 1017.080728][T21565]  ? __pfx_get_signal+0x10/0x10
[ 1017.080756][T21565]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1017.080778][T21565]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1017.080805][T21565]  ? __bad_area_nosemaphore+0x350/0x690
[ 1017.080830][T21565]  irqentry_exit+0x38a/0x8c0
[ 1017.080852][T21565]  asm_exc_page_fault+0x26/0x30
[ 1017.080866][T21565] RIP: 0033:0x7fef8658f751
[ 1017.080878][T21565] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1017.080892][T21565] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1017.080904][T21565] RAX: 0000000000000000 RBX: 00007fef867e5fa0 RCX: 00007fef8658f749
[ 1017.080914][T21565] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000
[ 1017.080924][T21565] RBP: 00007fef86613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1017.080932][T21565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1017.080941][T21565] R13: 00007fef867e6038 R14: 00007fef867e5fa0 R15: 00007fffd9feb478
[ 1017.080967][T21565]  </TASK>
[ 1017.587259][T21565] memory: usage 307200kB, limit 307200kB, failcnt 21028
[ 1017.594669][T21565] memory+swap: usage 432020kB, limit 9007199254740988kB, failcnt 0
[ 1017.602563][T21565] kmem: usage 10612kB, limit 9007199254740988kB, failcnt 0
[ 1017.609735][T21565] Memory cgroup stats for /syz0:
[ 1017.609834][T21565] cache 303415296
[ 1017.618370][T21565] rss 122880
[ 1017.621565][T21565] rss_huge 0
[ 1017.624736][T21565] shmem 303411200
[ 1017.628343][T21565] mapped_file 4096
[ 1017.632052][T21565] dirty 4096
[ 1017.635224][T21565] writeback 0
[ 1017.638482][T21565] workingset_refault_anon 609
[ 1017.643153][T21565] workingset_refault_file 0
[ 1017.647637][T21565] swap 127815680
[ 1017.651183][T21565] swapcached 110592
[ 1017.654971][T21565] pgpgin 1125813
[ 1017.658492][T21565] pgpgout 1053213
[ 1017.662118][T21565] pgfault 806753
[ 1017.665637][T21565] pgmajfault 126
[ 1017.669158][T21565] inactive_anon 133832704
[ 1017.673477][T21565] active_anon 169811968
[ 1017.677604][T21565] inactive_file 4096
[ 1017.681507][T21565] active_file 0
[ 1017.684939][T21565] unevictable 0
[ 1017.688371][T21565] hierarchical_memory_limit 314572800
[ 1017.693728][T21565] hierarchical_memsw_limit 9223372036854771712
[ 1017.700374][T21565] total_cache 303415296
[ 1017.704574][T21565] total_rss 122880
[ 1017.708273][T21565] total_rss_huge 0
[ 1017.711989][T21565] total_shmem 303411200
[ 1017.716123][T21565] total_mapped_file 4096
[ 1017.720342][T21565] total_dirty 4096
[ 1017.724053][T21565] total_writeback 0
[ 1017.727837][T21565] total_workingset_refault_anon 609
[ 1017.733028][T21565] total_workingset_refault_file 0
[ 1017.738027][T21565] total_swap 127815680
[ 1017.742086][T21565] total_swapcached 110592
[ 1017.746390][T21565] total_pgpgin 1125813
[ 1017.750432][T21565] total_pgpgout 1053213
[ 1017.754579][T21565] total_pgfault 806753
[ 1017.758620][T21565] total_pgmajfault 126
[ 1017.762691][T21565] total_inactive_anon 133832704
[ 1017.767518][T21565] total_active_anon 169811968
[ 1017.772181][T21565] total_inactive_file 4096
[ 1017.776572][T21565] total_active_file 0
[ 1017.780526][T21565] total_unevictable 0
[ 1017.784517][T21565] anon_cost 0
[ 1017.787781][T21565] file_cost 0
[ 1017.791062][T21565] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3888,pid=21547,uid=0
[ 1017.806679][T21565] Memory cgroup out of memory: Killed process 21547 (syz.0.3888) total-vm:98324kB, anon-rss:1148kB, file-rss:21672kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[ 1105.910941][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1105.917909][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P21498/1:b..l
[ 1105.926468][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=113321, q=2664 ncpus=2)
[ 1105.934352][    C1] task:syz.2.3876      state:R  running task     stack:23592 pid:21498 tgid:21498 ppid:18654  task_flags:0x40064c flags:0x00080001
[ 1105.948993][    C1] Call Trace:
[ 1105.952261][    C1]  <TASK>
[ 1105.955172][    C1]  ? __schedule+0x10b9/0x6150
[ 1105.959844][    C1]  __schedule+0x1139/0x6150
[ 1105.964319][    C1]  ? __lock_acquire+0x436/0x2890
[ 1105.969238][    C1]  ? __pfx___schedule+0x10/0x10
[ 1105.974074][    C1]  preempt_schedule_irq+0x51/0x90
[ 1105.979070][    C1]  irqentry_exit+0x1d8/0x8c0
[ 1105.983634][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1105.989604][    C1] RIP: 0010:__rcu_read_unlock+0x31/0x5a0
[ 1105.995223][    C1] Code: 54 55 65 48 8b 2d e7 6f 0e 12 53 48 8d bd 84 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 <83> e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 45 02 00 00 65 4c 8b 25
[ 1106.014810][    C1] RSP: 0018:ffffc9000e2def10 EFLAGS: 00000a07
[ 1106.020845][    C1] RAX: ffff88805f4bce04 RBX: ffffc9000e2dfa80 RCX: ffffc9000e2deefc
[ 1106.028788][    C1] RDX: 0000000000000000 RSI: ffffffff8daa7ea1 RDI: ffff88805f4bce04
[ 1106.036732][    C1] RBP: ffff88805f4bc980 R08: 0000000000000001 R09: 00000000ffffffff
[ 1106.044684][    C1] R10: 0000000000000002 R11: 000000000001434f R12: ffffc9000e2deff8
[ 1106.052631][    C1] R13: ffffc9000e2defa8 R14: ffffc9000e2dfa80 R15: ffffc9000e2defdc
[ 1106.060589][    C1]  unwind_next_frame+0x3fe/0x20b0
[ 1106.065590][    C1]  ? finish_dput+0x76/0x480
[ 1106.070075][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1106.076210][    C1]  arch_stack_walk+0x94/0x100
[ 1106.080871][    C1]  ? dput.part.0+0x451/0x570
[ 1106.085435][    C1]  stack_trace_save+0x8e/0xc0
[ 1106.090094][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1106.095437][    C1]  ? __lock_acquire+0x436/0x2890
[ 1106.100352][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1106.105521][    C1]  save_stack+0x160/0x1f0
[ 1106.109820][    C1]  ? __pfx_save_stack+0x10/0x10
[ 1106.114638][    C1]  ? free_unref_folios+0xa22/0x1610
[ 1106.119805][    C1]  ? folios_put_refs+0x4be/0x750
[ 1106.124717][    C1]  ? shmem_undo_range+0x58f/0x1140
[ 1106.129808][    C1]  ? shmem_evict_inode+0x39e/0xbe0
[ 1106.134884][    C1]  ? evict+0x3c2/0xad0
[ 1106.138926][    C1]  ? iput.part.0+0x621/0x1190
[ 1106.143578][    C1]  ? iput+0x35/0x40
[ 1106.147354][    C1]  ? dentry_unlink_inode+0x29c/0x480
[ 1106.152612][    C1]  ? __dentry_kill+0x1d0/0x600
[ 1106.157341][    C1]  ? finish_dput+0x76/0x480
[ 1106.161812][    C1]  ? page_ext_put+0x3e/0xd0
[ 1106.166289][    C1]  __reset_page_owner+0x84/0x1a0
[ 1106.171296][    C1]  free_unref_folios+0xa22/0x1610
[ 1106.176292][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1106.181028][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1106.186804][    C1]  folios_put_refs+0x4be/0x750
[ 1106.191537][    C1]  ? __pfx_folios_put_refs+0x10/0x10
[ 1106.196791][    C1]  ? folio_batch_remove_exceptionals+0x115/0x1a0
[ 1106.203097][    C1]  shmem_undo_range+0x58f/0x1140
[ 1106.208007][    C1]  ? __pfx_shmem_undo_range+0x10/0x10
[ 1106.213366][    C1]  ? is_bpf_text_address+0x8a/0x1a0
[ 1106.218541][    C1]  ? bpf_ksym_find+0x127/0x1c0
[ 1106.223280][    C1]  shmem_evict_inode+0x39e/0xbe0
[ 1106.228195][    C1]  ? inode_wait_for_writeback+0x170/0x390
[ 1106.233884][    C1]  ? __pfx_shmem_evict_inode+0x10/0x10
[ 1106.239309][    C1]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[ 1106.245349][    C1]  ? find_held_lock+0x2b/0x80
[ 1106.250001][    C1]  ? evict+0x37e/0xad0
[ 1106.254046][    C1]  ? __pfx_shmem_evict_inode+0x10/0x10
[ 1106.259473][    C1]  evict+0x3c2/0xad0
[ 1106.263338][    C1]  ? find_held_lock+0x2b/0x80
[ 1106.267988][    C1]  ? __pfx_evict+0x10/0x10
[ 1106.272374][    C1]  ? iput.part.0+0x619/0x1190
[ 1106.277022][    C1]  iput.part.0+0x621/0x1190
[ 1106.281507][    C1]  iput+0x35/0x40
[ 1106.285109][    C1]  dentry_unlink_inode+0x29c/0x480
[ 1106.290195][    C1]  __dentry_kill+0x1d0/0x600
[ 1106.294754][    C1]  finish_dput+0x76/0x480
[ 1106.299051][    C1]  dput.part.0+0x451/0x570
[ 1106.303435][    C1]  dput+0x1f/0x30
[ 1106.307045][    C1]  __fput+0x51c/0xb70
[ 1106.310997][    C1]  task_work_run+0x150/0x240
[ 1106.315560][    C1]  ? __pfx_task_work_run+0x10/0x10
[ 1106.320645][    C1]  do_exit+0x87f/0x2bd0
[ 1106.324776][    C1]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1106.330385][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1106.334947][    C1]  do_group_exit+0xd3/0x2a0
[ 1106.339417][    C1]  get_signal+0x2671/0x26d0
[ 1106.343900][    C1]  ? __pfx_get_signal+0x10/0x10
[ 1106.348727][    C1]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1106.354245][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1106.360374][    C1]  ? do_user_addr_fault+0x926/0x1370
[ 1106.365632][    C1]  irqentry_exit+0x38a/0x8c0
[ 1106.370195][    C1]  asm_exc_page_fault+0x26/0x30
[ 1106.375014][    C1] RIP: 0033:0x7f456518f751
[ 1106.379394][    C1] RSP: 002b:000000000000a420 EFLAGS: 00010217
[ 1106.385428][    C1] RAX: 0000000000000000 RBX: 00007f45653e5fa0 RCX: 00007f456518f749
[ 1106.393369][    C1] RDX: 0000000000000000 RSI: 000000000000a420 RDI: 0000000000022080
[ 1106.401309][    C1] RBP: 00007f4565213f91 R08: 0000000000000000 R09: 0000000000000000
[ 1106.409247][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1106.417196][    C1] R13: 00007f45653e6038 R14: 00007f45653e5fa0 R15: 00007fff7bce6fe8
[ 1106.425141][    C1]  </TASK>
[ 1106.428140][    C1] rcu: rcu_preempt kthread starved for 9220 jiffies! g113321 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1106.439317][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1106.449282][    C1] rcu: RCU grace-period kthread stack dump:
[ 1106.455159][    C1] task:rcu_preempt     state:R  running task     stack:27864 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1106.468647][    C1] Call Trace:
[ 1106.471917][    C1]  <TASK>
[ 1106.474840][    C1]  ? __schedule+0x10b9/0x6150
[ 1106.479518][    C1]  __schedule+0x1139/0x6150
[ 1106.484016][    C1]  ? __lock_acquire+0x436/0x2890
[ 1106.488956][    C1]  ? __mod_timer+0x8f2/0xd30
[ 1106.493553][    C1]  ? __pfx___schedule+0x10/0x10
[ 1106.498396][    C1]  ? find_held_lock+0x2b/0x80
[ 1106.503075][    C1]  ? schedule+0x2d7/0x3a0
[ 1106.507402][    C1]  schedule+0xe7/0x3a0
[ 1106.511468][    C1]  schedule_timeout+0x123/0x290
[ 1106.516316][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1106.521679][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1106.526960][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1106.532760][    C1]  ? prepare_to_swait_event+0xf5/0x480
[ 1106.538266][    C1]  rcu_gp_fqs_loop+0x1ea/0xaf0
[ 1106.543028][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1106.548309][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1106.553509][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[ 1106.558442][    C1]  ? rcu_gp_cleanup+0x7c1/0xe90
[ 1106.563292][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1106.569095][    C1]  rcu_gp_kthread+0x26d/0x380
[ 1106.573771][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1106.578962][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1106.583719][    C1]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1106.588915][    C1]  ? __kthread_parkme+0x19e/0x250
[ 1106.593933][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1106.599127][    C1]  kthread+0x3c5/0x780
[ 1106.603198][    C1]  ? __pfx_kthread+0x10/0x10
[ 1106.607783][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1106.612539][    C1]  ? __pfx_kthread+0x10/0x10
[ 1106.617126][    C1]  ret_from_fork+0x983/0xb10
[ 1106.621712][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1106.626820][    C1]  ? __switch_to+0x7af/0x10d0
[ 1106.631508][    C1]  ? __pfx_kthread+0x10/0x10
[ 1106.636093][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1106.640872][    C1]  </TASK>
[ 1106.643881][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1106.650188][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1106.655381][    C0] NMI backtrace for cpu 0
[ 1106.655395][    C0] CPU: 0 UID: 0 PID: 21564 Comm: syz.0.3888 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1106.655416][    C0] Tainted: [L]=SOFTLOCKUP
[ 1106.655421][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1106.655429][    C0] RIP: 0010:lock_release+0x116/0x2d0
[ 1106.655448][    C0] Code: 00 8b 50 24 85 d2 0f 85 94 01 00 00 66 83 78 22 1f 76 0c 66 83 68 22 20 66 83 78 22 1f 77 3c 8b 54 24 0c 41 89 96 28 0b 00 00 <48> 8b 00 49 89 86 20 0b 00 00 41 8d 47 ff 39 d0 74 1f 83 c2 01 48
[ 1106.655462][    C0] RSP: 0018:ffffc9000f9de9a0 EFLAGS: 00000097
[ 1106.655474][    C0] RAX: ffff888092540ba8 RBX: ffff8880b8424608 RCX: ffffc9000f9de9ac
[ 1106.655484][    C0] RDX: 0000000000000003 RSI: ffff8880b8424608 RDI: ffff888092540ba8
[ 1106.655493][    C0] RBP: 000000000000000a R08: 0000000000000000 R09: fffffbfff1c56c8a
[ 1106.655502][    C0] R10: ffffffff8e2b6457 R11: 0000000000000000 R12: ffffffff8198766e
[ 1106.655511][    C0] R13: 0000000000000083 R14: ffff888092540000 R15: 0000000000000004
[ 1106.655520][    C0] FS:  00007fef8741a6c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000
[ 1106.655536][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1106.655545][    C0] CR2: 000056269480dbe0 CR3: 0000000062065000 CR4: 00000000003526f0
[ 1106.655555][    C0] DR0: 0000000000000001 DR1: fffffffffffffff7 DR2: 0000000000000000
[ 1106.655563][    C0] DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1106.655572][    C0] Call Trace:
[ 1106.655577][    C0]  <TASK>
[ 1106.655584][    C0]  psi_task_change+0x2c1/0x540
[ 1106.655600][    C0]  psi_memstall_enter+0x1de/0x310
[ 1106.655614][    C0]  try_charge_memcg+0x40d/0xd30
[ 1106.655634][    C0]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1106.655652][    C0]  ? __print_lock_name+0xd1/0xe0
[ 1106.655671][    C0]  ? rcu_read_unlock+0x17/0x60
[ 1106.655693][    C0]  charge_memcg+0x8a/0x230
[ 1106.655710][    C0]  __mem_cgroup_charge+0x2b/0x1e0
[ 1106.655730][    C0]  shmem_alloc_and_add_folio+0x50c/0xc20
[ 1106.655759][    C0]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 1106.655781][    C0]  ? shmem_allowable_huge_orders+0xd4/0x3f0
[ 1106.655804][    C0]  shmem_get_folio_gfp+0x67f/0x1610
[ 1106.655827][    C0]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 1106.655851][    C0]  shmem_write_begin+0x1a4/0x3b0
[ 1106.655864][    C0]  ? __pfx_shmem_write_begin+0x10/0x10
[ 1106.655878][    C0]  ? balance_dirty_pages_ratelimited_flags+0x92/0x1260
[ 1106.655897][    C0]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1106.655916][    C0]  generic_perform_write+0x3c4/0x900
[ 1106.655938][    C0]  ? __pfx_generic_perform_write+0x10/0x10
[ 1106.655958][    C0]  ? file_update_time_flags+0x35c/0x520
[ 1106.655974][    C0]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 1106.655989][    C0]  shmem_file_write_iter+0x10e/0x140
[ 1106.656005][    C0]  __kernel_write_iter+0x31a/0xb10
[ 1106.656024][    C0]  ? __pfx___kernel_write_iter+0x10/0x10
[ 1106.656042][    C0]  ? cgroup1_freezing+0x12c/0x3b0
[ 1106.656057][    C0]  ? cgroup1_freezing+0x136/0x3b0
[ 1106.656071][    C0]  dump_user_range+0x413/0xb70
[ 1106.656094][    C0]  ? __pfx_dump_user_range+0x10/0x10
[ 1106.656115][    C0]  ? elf_coredump_extra_notes_write+0xbd/0x500
[ 1106.656132][    C0]  ? __pfx_writenote+0x10/0x10
[ 1106.656148][    C0]  elf_core_dump+0x29c3/0x3c10
[ 1106.656166][    C0]  ? __pfx_elf_core_dump+0x10/0x10
[ 1106.656179][    C0]  ? kasan_save_stack+0x33/0x60
[ 1106.656194][    C0]  ? kasan_save_track+0x14/0x30
[ 1106.656210][    C0]  ? __kasan_kmalloc+0xaa/0xb0
[ 1106.656224][    C0]  ? __kvmalloc_node_noprof+0x3ac/0xa40
[ 1106.656240][    C0]  ? vfs_coredump+0x1dd9/0x55e0
[ 1106.656260][    C0]  ? arch_do_signal_or_restart+0x8f/0x7e0
[ 1106.656278][    C0]  ? irqentry_exit+0x38a/0x8c0
[ 1106.656295][    C0]  ? asm_exc_page_fault+0x26/0x30
[ 1106.656310][    C0]  ? 0xffffffffff600000
[ 1106.656335][    C0]  ? vfs_coredump+0x2b85/0x55e0
[ 1106.656354][    C0]  vfs_coredump+0x2b85/0x55e0
[ 1106.656377][    C0]  ? __pfx_vfs_coredump+0x10/0x10
[ 1106.656397][    C0]  ? __lock_acquire+0x436/0x2890
[ 1106.656413][    C0]  ? __lock_acquire+0x436/0x2890
[ 1106.656430][    C0]  ? lock_acquire+0x179/0x330
[ 1106.656447][    C0]  ? lock_acquire+0x179/0x330
[ 1106.656468][    C0]  ? arch_stack_walk+0xa6/0x100
[ 1106.656489][    C0]  ? stack_trace_save+0x8e/0xc0
[ 1106.656504][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1106.656519][    C0]  ? stack_depot_save_flags+0x29/0x9b0
[ 1106.656540][    C0]  ? __lock_acquire+0x436/0x2890
[ 1106.656556][    C0]  ? kasan_save_stack+0x42/0x60
[ 1106.656586][    C0]  ? proc_coredump_connector+0x2d1/0x4f0
[ 1106.656603][    C0]  ? __pfx_proc_coredump_connector+0x10/0x10
[ 1106.656622][    C0]  ? rcu_is_watching+0x12/0xc0
[ 1106.656636][    C0]  get_signal+0x22e1/0x26d0
[ 1106.656659][    C0]  ? __pfx_get_signal+0x10/0x10
[ 1106.656681][    C0]  arch_do_signal_or_restart+0x8f/0x7e0
[ 1106.656699][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1106.656720][    C0]  ? __bad_area_nosemaphore+0x350/0x690
[ 1106.656739][    C0]  irqentry_exit+0x38a/0x8c0
[ 1106.656762][    C0]  asm_exc_page_fault+0x26/0x30
[ 1106.656774][    C0] RIP: 0033:0x7fef8658f751
[ 1106.656786][    C0] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1106.656799][    C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1106.656810][    C0] RAX: 0000000000000000 RBX: 00007fef867e5fa0 RCX: 00007fef8658f749
[ 1106.656819][    C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000000000
[ 1106.656828][    C0] RBP: 00007fef86613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1106.656837][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1106.656846][    C0] R13: 00007fef867e6038 R14: 00007fef867e5fa0 R15: 00007fffd9feb478
[ 1106.656860][    C0]  </TASK>