last executing test programs:

23m22.315774107s ago: executing program 1 (id=1311):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862)
pwritev(r0, &(0x7f0000000500), 0x0, 0x7, 0xfffffff9)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r6, 0x2, 0x0, 0x0, 0x0, [<r7=>0x0], [], [0x0, 0x0, 0x0, 0x4]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100))
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000002b80)={'nat\x00', 0x0, 0x4, 0x0, [0x1, 0x5, 0x0, 0x5, 0x17, 0x8], 0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00'})

23m18.995429675s ago: executing program 1 (id=1318):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc020000000000000000000000000001"], 0x36)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x1, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba7578", 0x42}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb31c60880c389d", 0xb7}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd9", 0x55}, {&(0x7f0000000700)="9af11ddfb8ceb516a838dd3cedbe8ce91e02bfabade423d9a4d0ec122b7037a6bffa4c8dff825b4bb6af22c579faf7cd32f8fa2c632ee236967cf01e81fd58fa7de7dc69417ed5b34378c0cecc6e594591c035a1492419209e9b5aff174a1d1462bd1e5a8b80fbb1ce5c906a977485c7ae6af8991a8adedcede4e0eef2d587cf0504", 0x82}, {&(0x7f0000000fc0)}], 0x3, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

23m18.303893213s ago: executing program 1 (id=1319):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc02"], 0x36)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f1", 0x2b}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c697", 0xa4}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a", 0xc9}], 0x3, 0x0, 0x0, 0x1}], 0x1, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

23m18.049354759s ago: executing program 1 (id=1321):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x800)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000000080))
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000500)={0x48})

23m16.854194018s ago: executing program 1 (id=1324):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4050000000000007110870000000000a6000400000000009500000004000000e43de4fbf0ba01ca0c758a65369a36f060837490a429835468fac65e0443bb873b66567f551a60f6b19ffd82f45d098f87ab1b3458de1908ec319901e5b1c0b201362c42ac016762b357a4e7f8d858cb1083b02cdc83cb228f5016aed881e41f68f8317860bc002354ae8d26a1859253ea607dce6e004f7ad36323f15ee45e819e1fa7629a4dafc721ce6cdd5514e9fcdde608e21310be96d67c126d97b3cb1080a9f182490713ca05cac74b8a00c61a1a38179de33a46525ca4b6f04e342506ea2434d7"], 0x0, 0x5}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000003000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000300012800c0001006d6163766c616e00200002"], 0x50}, 0x1, 0x0, 0x0, 0x20000881}, 0x20000090)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

23m16.621820474s ago: executing program 1 (id=1327):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d8, &(0x7f0000000040)={0x0, 0xe472, 0x0, 0x3, 0x25a}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x840000000002, 0x3, 0xfa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
getsockname$inet(r2, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0)
getresuid(&(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000002000000000000000000000000000000ac1e0101000000000000000000000000000000002b000000000000"], 0x23c}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425ecada9ff851c95a00eacd4d9b7fa82e4bd7000fddbdf25"], 0x20}}, 0x480c5)

23m1.345415206s ago: executing program 32 (id=1327):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d8, &(0x7f0000000040)={0x0, 0xe472, 0x0, 0x3, 0x25a}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x840000000002, 0x3, 0xfa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
getsockname$inet(r2, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0)
getresuid(&(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000002000000000000000000000000000000ac1e0101000000000000000000000000000000002b000000000000"], 0x23c}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425ecada9ff851c95a00eacd4d9b7fa82e4bd7000fddbdf25"], 0x20}}, 0x480c5)

18m1.324811112s ago: executing program 5 (id=2242):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46", 0x90}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4004090}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e", 0xc}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec", 0x59}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

18m0.699711492s ago: executing program 5 (id=2248):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
socket(0x400000000010, 0x3, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r3})
r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5})
r7 = socket(0x15, 0x5, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x4, 0x3)

17m58.566361427s ago: executing program 5 (id=2252):
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000ac0)={r3, 0xd0}, &(0x7f0000000b00)=0x8)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_DIRENTPLUS(r4, 0x0, 0xb0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)

17m55.740357325s ago: executing program 5 (id=2258):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46", 0x90}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4004090}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e", 0xc}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec", 0x59}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

17m54.300622344s ago: executing program 5 (id=2261):
fcntl$addseals(0xffffffffffffffff, 0x409, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xf4b8, 0x80, 0xfffa}, 0x3d, [0x8000, 0xc958, 0xf, 0x0, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x1, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x10000007, 0x5, 0x8006, 0x800009, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0xfffffffd, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x192, 0x6, 0x6, 0x454f, 0x1, 0x7, 0x8, 0x3ff, 0x1080, 0xfffffffd, 0x5, 0x6, 0x8, 0x0, 0x1, 0x40], [0x10000006, 0x9, 0x8000012f, 0x8004, 0xe, 0xfffffff3, 0x6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x4000001, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x8, 0x8, 0x5, 0x6, 0x47, 0xdddd, 0x40000001, 0xdca7, 0x8, 0x2, 0x4, 0x9, 0x10, 0x8f17, 0x4000009, 0x6, 0x3, 0x0, 0xbc45, 0x48c93691, 0x42, 0x10000003], [0x4, 0x1000408, 0x4, 0x5, 0xfffffffd, 0x100, 0x7fffffff, 0x800009, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x7, 0x2, 0x9, 0x20000008, 0x0, 0x6d01, 0x6, 0x38, 0x2, 0x200, 0xc0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x1, 0x9, 0xa9, 0x5, 0xfffffffe, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0x1, 0x5, 0x1938, 0x6, 0x100, 0x0, 0xb9, 0xcd46, 0x1ff, 0x4, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14b, 0x60a7, 0x6, 0x7, 0xffffffff, 0xffffd87b, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x8000, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x400005, 0x3, 0xd7, 0x200, 0xc, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

17m51.315230083s ago: executing program 5 (id=2262):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, 0x0, 0x20040040)
gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)})
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r5, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002)

17m35.114172369s ago: executing program 33 (id=2262):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, 0x0, 0x20040040)
gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)})
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r5, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002)

16m25.839817596s ago: executing program 2 (id=2373):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce90359", 0xab}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327", 0x23}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782", 0x97}], 0x4}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d299", 0x67}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8d", 0x9d}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b66bcac445bc7", 0xd3}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78bd0580b8545dde3724", 0x6a}, {&(0x7f00000021c0)="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", 0x325}], 0x5}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="fe", 0x1}], 0x1}}], 0x3, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

16m24.422612356s ago: executing program 2 (id=2377):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f05ebbee3, 0x8031, 0xffffffffffffffff, 0x6e716000)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x50, 0x7fff7ffc}]})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

16m22.960095617s ago: executing program 2 (id=2378):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
gettid()
socket(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

16m22.647723539s ago: executing program 2 (id=2381):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
r1 = socket$inet6(0xa, 0x1, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff00000000711070000000000095000000a477b7af"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0)
r3 = syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, &(0x7f0000000340), &(0x7f0000000080))
syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r3}, &(0x7f0000000200)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1})
io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'})
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000980)={0x1f4, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x93}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcd1d}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc33d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x71b76de}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb05}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6dc7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffb9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x929}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbad}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6db7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6bd1}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)={[{@usrquota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]})
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)
shutdown(r1, 0x0)
epoll_create1(0x80000)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)

16m18.451107273s ago: executing program 2 (id=2384):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket(0x10, 0x3, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x22)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140))

16m15.38085973s ago: executing program 2 (id=2391):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)}, 0x41)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x5)
r1 = open(&(0x7f00000002c0)='./file1\x00', 0x113000, 0xb)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r2 = open(0x0, 0x0, 0x0)
mkdirat(r2, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0xf00, 0x0)
fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x4, 0x8a6}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4)
renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1/../file0\x00', 0x2)

16m0.278502061s ago: executing program 34 (id=2391):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)}, 0x41)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x5)
r1 = open(&(0x7f00000002c0)='./file1\x00', 0x113000, 0xb)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r2 = open(0x0, 0x0, 0x0)
mkdirat(r2, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0xf00, 0x0)
fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x4, 0x8a6}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4)
renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1/../file0\x00', 0x2)

14m14.520260102s ago: executing program 3 (id=2547):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}})

14m14.25401607s ago: executing program 3 (id=2549):
socket$can_j1939(0x1d, 0x2, 0x7)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet_udp(0x2, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x3, 0x80000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x5)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
syz_usbip_server_init(0x5)
r1 = syz_io_uring_setup(0x42e6, &(0x7f0000000340)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000300))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0)

14m9.326504153s ago: executing program 3 (id=2552):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
ioctl$BLKRRPART(r5, 0x125f, 0x0)
capset(0x0, 0x0)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0)
getpriority(0x0, r1)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES64=r4, @ANYRES8=r5, @ANYRES16=0x0, @ANYRES64=r4, @ANYRESHEX=0x0, @ANYBLOB="dbaac820c4e384c7252db57ccf19c200531b072d", @ANYRES8=r0], 0x21f)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
dup(0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1002000f)
r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000a40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40064500"], 0x0, 0x0, 0x0, 0x0}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)

14m4.552497503s ago: executing program 3 (id=2555):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, <r6=>0x0], &(0x7f0000000040), 0x2, r5})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[r5], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r6, r6, r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff})

13m57.265013301s ago: executing program 3 (id=2562):
sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000280)={0x9, 0x3, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2)
close(r2)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000240)=""/59, 0x304000, 0x800, 0x7ffffeff, 0x3}, 0x20)
mremap(&(0x7f0000216000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000875000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x1})
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0)
r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
ftruncate(r5, 0xffff)

13m54.003402303s ago: executing program 3 (id=2564):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x83)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
r4 = getpid()
fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r4})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xdf59}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x74}, 0x1, 0x0, 0x0, 0x4089}, 0x40)
sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)

13m38.656328153s ago: executing program 35 (id=2564):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x83)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
r4 = getpid()
fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r4})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xdf59}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x74}, 0x1, 0x0, 0x0, 0x4089}, 0x40)
sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)

9m45.243617447s ago: executing program 4 (id=2975):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x1aba00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0xfe, 0x1, 0x9, 0x0, 0x80000001, 0x2, 0xb, 0xfc, 0xe, 0x8, 0xe, 0x0, 0x0, 0xd, 0x5, 0x4e, 0x9, 0x37, 0x9, '\x00', 0x6, 0x3})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_all\x00', 0x275a, 0x0)
write$dsp(r3, &(0x7f00000005c0)="930356264b", 0x5)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x2, 0x1, 0x7fffffffffffffff, 0x418da846})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000280)={0x10003, 0x0, {[0x7fffffffffffffff, 0x8, 0x1000, 0x5, 0x4, 0x0, 0x9, 0x7]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m41.939511246s ago: executing program 4 (id=2989):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce1", 0xa4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x2, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4004090}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d022", 0x2d}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4], 0x6f4}}, 0x0)

9m38.517392724s ago: executing program 4 (id=2992):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000040)="63ec00000000430103e6b5394f4e", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50)
pipe2(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x19, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40da7, 0x79269}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040)
r6 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYRES16=r6, @ANYRESHEX=r4, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d9fb8f341b24358d32f"])
syz_open_dev$usbmon(&(0x7f0000001040), 0xf04d414, 0x4a00)
io_uring_enter(r3, 0x173a, 0x4a21, 0xc, &(0x7f0000000040), 0x8)

9m37.947124326s ago: executing program 4 (id=2993):
ioprio_set$pid(0x0, 0x0, 0x2000)
syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

9m37.703321774s ago: executing program 4 (id=2994):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\xd7\x8fL\xa2o\x0f\t\'-J\x006y\xc9 a;\x04\xca\xb2\x9f/5\xb1\xb6i\xff\a\x00\x00\x19\xff\xda\xc3\x8a\x99q\x1e\xd3\xad@\x9f#Mw&\xdf\xab\xfd\xf8\xee\xa0\xff2|\x14\x89\x8a\xf0&Of\xc3\x1d5F\xf6N!\"\xd4|\xa4\xe0\x81\x88\xa3b\xcbZ}O\x84\xaf\xf9\xad\x9e\xaa\r\x85\x9fF\xbbs\x1b\x8e*T\x86\xca'}, {0x20, '/dev/loop#\x00,\xc5\x18\xf4tn\xbbq\xe9\x01 \x83zY\x14\xf5\xb69\x14\x11\xdc5\x95\xfb\x03~\x1b\x1d\v}\x11d 4\xbfA\x1e/\xfc\xc3\xb8\x02\xe7J\x00\v{\xd1\x9c\xe8C\x97@-g\xdee\x1b\xb8\x00\x00'}, {0x20, '-de\xecv/loop#\x00'}, {0x20, '&/&'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c2f03ce2c7c"}, 0x11f)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}})

9m37.605930566s ago: executing program 4 (id=2995):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d8, &(0x7f0000000040)={0x0, 0xe472, 0x0, 0x3, 0x25a}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x840000000002, 0x3, 0xfa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
getsockname$inet(r2, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0)
getresuid(&(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000002000000000000000000000000000000ac1e0101000000000000000000000000000000002b000000000000"], 0x23c}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

9m21.572062008s ago: executing program 36 (id=2995):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d8, &(0x7f0000000040)={0x0, 0xe472, 0x0, 0x3, 0x25a}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x840000000002, 0x3, 0xfa)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
getsockname$inet(r2, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0)
getresuid(&(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000002000000000000000000000000000000ac1e0101000000000000000000000000000000002b000000000000"], 0x23c}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

51.547592816s ago: executing program 8 (id=6184):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = syz_open_procfs(0x0, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
openat$dir(0xffffffffffffff9c, 0x0, 0x400, 0x168)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
memfd_create(0x0, 0x2)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, 0x0)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 1)

50.506287764s ago: executing program 8 (id=6193):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback, 0x77f}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="7ff0a35d71daf7dd4e6af2f935670863829e7c59d3cc941c10595a51d9031147e98e6a63762143dbe9e3813b6648b922ddac981cf002e54888150c3342b54b75a8be03f81c590093da591fa60ac35b29a3609847a6ead29b90bb03eaf08c2f785848e627eb2f84b21b3deef8a96610536375adbdcebf59db10de9a1572ae3167589af1eaa11391d6fe63dfde2eb7395794138a4068b62b4bffdee4f171", 0x9d}, {&(0x7f00000001c0)="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", 0xfe}, {&(0x7f0000000440)="17e79e9945f35a85fc178c01499a48809e01fdd5ad5a4a307425062ac907899d5d6eedde0a27b55b9bbd73392c220c0108249d6fa92818713e8f67f9874fc4093a3186de0074a5ba4b53dbab004756bd8784945a6c3213dae27e2d7fceac39de6bc1ed2c37ba58b18f0a440bb1ac273014d8c5dba32c7101963ae7beb02f286c48cd2198ef4d444de1f8708ee3d1a244a59a9bfefee4bdfaff68cc35bff924974fe53bb83082dd68cbc4b4b8002e9957c6ba51b3c4fbec0aca5561830e3312e9c3dc1abbfd415972c5b0b517a79587fe60a8b4f4ae7c8a385d", 0xd9}, {&(0x7f00000005c0)="a52e81de96a4a16da029cace528d7437178f9bcc3d2c74e7dc4e9c2d06f95d14ef3a794b9c1a03cbf0c0e6ccc553c886b4b963f1715e8e886ce0831588e6081931c1f39166c5ec2d5a5f76881f6dcf6c3a1c6aff4b1b3cad37e63894f5b130226b937ba6f2f3c6b0017f277c511cbe1e32dee4d8947a9a3c0a4c74839f3cc5441cff4470b11d5da353ca1e0dc698513ad188dd100d1e1e", 0x97}, {&(0x7f0000000680)="0e4aa4904301e41615ff5c290c8b14e767fbb843e9c7f33f3ae6a3386449f10b7f50cd6404ede5ca9dafc675fcc55605f4f24a5b0a7d8861fa507be3605bd9b5577deaa79cd8b215396c7ea9b94e006b86bc1df231282a84587a109618fc9158d44d5584ea585712b9670948c06556b8712db8043dac4dc4887c700f7a4c57fe7300e83b260948d8a916ce4beeb128a0807f883a5cf3a7e95af7f47d2068d5f7939d4c75f1fa8b149db2d29978ee024be3e07e1c7af0b280ed34bbb1223a0e4530c7950ecb3b2a5a", 0xc8}, {&(0x7f0000000780)="301142c150e0feaf5555f5f2f82c9e8d64e2f2bd7425d43a14764edfc3b8fbc03314e02f64d1709b2c3e0ede647fe271aef30afd9dfa9332cdc21a425b263b7efbfc283b4824a90717ca7023f1171d23f999b5b42d59a58b1f3c7016b8497418291664be96c5caa3a81004353c8825345acf69f86ae0d77078dad92ac23f651169109716", 0x84}], 0x6}}], 0x1, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c0014"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0)
r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r7, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "8bc1fcd7", {0x3, 0x2, 0x0, 0x6, 0x7, 0x39, 0x8}})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

50.297621251s ago: executing program 8 (id=6196):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4004090}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e", 0xc}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7", 0x21}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

49.86372552s ago: executing program 8 (id=6198):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @mcast2, 0xb}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x4, 0xff, 0x7fff0000}]})
socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000080)='./file1\x00', 0x62842, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x2c400}], 0x14, 0x7800, 0x0, 0x3)

49.727537668s ago: executing program 8 (id=6199):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x2, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4004090}, {0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d0", 0x2c}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

49.581539712s ago: executing program 8 (id=6200):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r1, &(0x7f0000002400)=""/102400, 0x19000)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, 0x0, 0x0)
io_setup(0x1, &(0x7f0000000380))
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}}, 0x0)
socket(0x10, 0x80002, 0x0)
syz_open_dev$usbfs(0x0, 0x1ff, 0xa601)
r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0xf7e)
read$dsp(r4, 0x0, 0x0)
write$dsp(r3, 0x0, 0x0)

17.820708696s ago: executing program 6 (id=6279):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000030000001b000000000000100c000000010000000000000b0300000000304fd219dda2e98ed7c0d847e39e00"], &(0x7f0000000180)=""/30, 0x33, 0x1e, 0x0, 0x3}, 0x28)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
r1 = getpgid(0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = pidfd_getfd(r2, r2, 0x0)
r4 = io_uring_setup(0x17b6, &(0x7f00000002c0)={0x0, 0xa, 0x100, 0x1, 0x393})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x6)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a380000000c0a010400000000000000000a0000060900020073797a31000000000900010073790031000000000c0003800800008004000180140000001100010000000000000000000700000a27ee51c63a1cb3bc6f1fbd6914284dde98777e64f9f2e189e5963e816e3f5caeb881125fa01787de901028243fcd86b0a5adf5feb3d6d3a7f6bd91fc092438de90e1c4795b13432198ba0374f3810e19d8b85ec2b20f2d42838049d23124f56497b09be604f38a546bf7147e8b94c3de56616130fff970"], 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
close_range(r4, 0xffffffffffffffff, 0x0)
setns(r3, 0x66020000)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000440)=0xffffffffffff5d43, 0x8)
connect$vsock_stream(r6, &(0x7f0000000900)={0x28, 0x0, 0x0, @local}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000000))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="000003000000c459268500000000df20850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.418892879s ago: executing program 0 (id=6284):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x33822}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x440c5}, 0x240088d0)
creat(&(0x7f00000000c0)='./bus\x00', 0x118)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x97}, 0x2)

14.97937013s ago: executing program 0 (id=6289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, 0x0, 0x24000080)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001540), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB="03f50000", @ANYRES16=r1, @ANYBLOB="090825bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040000)
io_setup(0x9, &(0x7f0000000340)=<r2=>0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x3, 'caif0\x00', {0xe6e0}, 0xb78})
socket$xdp(0x2c, 0x3, 0x0)
syz_usb_connect(0x1, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000210d7cd08ac05148583ea01020301090238000100aa900409049902000e010008052406000005240001010d240f0103000000070008000704"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

14.451890386s ago: executing program 6 (id=6291):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @mcast2, 0xb}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x62842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x2c400}], 0x14, 0x7800, 0x0, 0x3)

13.779425478s ago: executing program 9 (id=6294):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
writev(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000880)="eb287a10e738c9490634346bed81010c6760166416f538b1659af92f760e49b370bfe48d747a6d48fa6d950733f4f8d2562dfdb9f90ea4", 0x37}, {&(0x7f00000008c0)="b7f9045ae7e58b055f0759dd8d7f5334c2ce38be99387c7dab48f88e2fcecaaa070a7e1d904e1f195a9f06aacfe5e8cd63e68c78d18973569007e8bf29c2a12b8cf6a769d48f5c", 0x47}, {&(0x7f0000000940)="009032e6dfaa0d410ea226f6db72818f1f00ccb7965cb52d4c3e1269d0e5a75097e3d8b726305a60a6254cb5e23a6a791d18bac6bdfc1253cd27e4f18689b41692eef0492b07e970d020c52a96288ac766f95e192d228b2e210850857a2f26c397c413311e738a89ace45e264b078d698b2fc0e5056c8992f59100e289e532bdf84b2db201f78a16567213766bfeee599d59976b23b0e106d78345954311da580bb3c78e992f0df5dc63cbf94d584a7417ddd1945a90e7b747534982b516354767bd", 0xc2}, {&(0x7f0000000a40)="2740e4c09226869aa5e2809b6b8b78d317ca962a844bed9c5444279701fb35b3905dc7c4ecd4b9d93b6c1eebbcb2bb677a7b7896a13c6e8410077a6c686c99a42600df7abffe17817d1038aa55594d0878ff", 0x52}], 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e640, 0x87)
chown(&(0x7f0000000dc0)='./file1\x00', 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000002c00088028000080240001000000000000000000000000000000000000000000000000000000000000000000d892c92bd473f054ee0e7a9a69cfbf3bca9aef9aae728e70c460dd861b49442e4fc96dc2e3a1ddb47fb74a5ea9eca1159b687dedd042417b6e2189c25d2b80bfcfbe5afb"], 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000000)="8db1")
ioctl$VT_WAITACTIVE(r5, 0x5607)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
ptrace$pokeuser(0x6, r8, 0x3, 0xb5a)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffff3}]}}]}, 0x38}}, 0x0)
sendmsg$xdp(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, 0xc, r7, 0x8}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000b00)="ab86d446003e467beb3386ccb5fb3ec2fc9800e41944fb43a0388e8e2bb0930e6598e8642a6d306cba40e114d627eb51de7be95449f9f9f8e64d02c1fc5b558d70bb30c064d829fe02911a730b70b3d56ec77fd0a7fd8d3f7424c2fd7eb107734ea6814e451dbbe00e83262c602e236341e3b8bedc2a86485e4d63f189a592b91d6b48da15959f55c1c0a6931def5a37136b5c589194538d3f87f293e9e887452694929d66c43773efdf50cc386fb68859beb14f2d8a69cd225473b9e087e181b42b08450aebfa9b9685", 0xca}, {&(0x7f0000000240)="f6ba4e6983857ef167cff88e8d32f54451de40f1fca3d4fd43c354db2fad21b9a4fb0c2a88188b7d459794a36318f11d1839fd7331f3cf2c345284121bd42a3c140964d9", 0x44}, {&(0x7f00000003c0)="4df46bc3a1338b440690a36ab65c9dfd75f91b79b419db5acb5b16f2734f34cbf035d81ca3ec68a3053d5d346b116bcadb1eeb1718071fc2754a035048fa7b1a55c0665d7e72e9b020f569ada482a01f4251a49503", 0x55}, {&(0x7f0000000500)="e2fb37028eec1a28d47a1bb4a566ab4b9f9c0c315abea96bdeea41d536af0add8b0943f8440334aca57971656ca1c6796b7ef941bb15224acaf4eea68fe4ea19c93fe0929627bffe86766533b34411c507de913b0257bef84e1880d8c4d27a6d6997b8fd8f3e45fa6bd2fa389f11065dc26d70ba29bbcd36819e4e0ebd9ddc1ef1c9d8dc9ad124e9e505e84fa746fd5c5cfd552660bfb38e57d2643efaef41fb23281d71aac41b2201a17a8c9b7b4f3f3403f26b23c05e07b73af878e4d1b67c2fee4dbe2576c3c502e1db4dc37cb1dbc114a943", 0xd4}, {&(0x7f0000000600)="5661860ef2668a359b9f9556f9e0a3c3209c8a687f94a58326c13615afd61d407c599c3b5290043e9eab5fb76645a467ba643d9545ce92d5b985760a859b7651459504e6d6f5877a81728aeeeaad4412f264d7e3856a1638d4ad82ca4637d6db22282339700639e197b3b375c49885ce7774f68715d1e91f5467093ae5ca47583362cb51e168cad1b32f381775041c415774b6d97071f42a42d31fbb159b22d461de2627c40313fc51d668d8185a8f0a28bcf846a5244d1da4842586145fcad42c8e95af30c606790efe702d6e8aad1d78d82ef71335cc1386afe4120fe119c19f87936da8218204aad19cb20a26", 0xee}, {&(0x7f0000000100)="56e59f37859533f64775ed232c30cb1750b3dc1514d046fc78f61213de7cacb0e900bc0c463dffcfcef85ceaeaa6738bf1c8bdc666c66c2930fe3bd50c09a6d895420aa761325a9bb7014e81e57d72d408b8b27b8abebb432d751ac05270b8edbf2ff6cd9692ff4cd9c558de3080a833f6c242d2c2d8b2f0ee8f6155073949c8cbd1a71aee7ff14db83852ded2372d8b935da0fefb5a1403a848dae19aea887fa1b0338082047ae28d97", 0xaa}, {&(0x7f0000000c00)="69bb0850e78f65ca12ae15b6c9b965b491ad0883b7172b91b34eb3b95b1dd0b260cfacc0d3d60d9f4579bec9e0995804ac29fd82ae6d8e74939b81ca0088104c8ee15b200539", 0x46}], 0x7, 0x0, 0x0, 0x4040054}, 0x401c)
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000007c0)=""/26)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x900, 0x12)

12.459660296s ago: executing program 0 (id=6295):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffff5, 0x203}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) (fail_nth: 1)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x348}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)

12.027438236s ago: executing program 9 (id=6297):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc020000000000000000000000000001"], 0x36)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a41", 0xa8}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba7578", 0x42}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb31c60880c389d", 0xb7}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd9", 0x55}, {&(0x7f0000000700)="9af11ddfb8ceb516a838dd3cedbe8ce91e02bfabade423d9a4d0ec122b7037a6bffa4c8dff825b4bb6af22c579faf7cd32f8fa2c632ee236967cf01e81fd58fa7de7dc69417ed5b34378c0cecc6e594591c035a1492419209e9b5aff174a1d1462bd1e5a8b80fbb1ce5c906a977485c7ae6af8991a8adedcede4e0eef2d587cf05", 0x81}, {&(0x7f0000000fc0)}], 0x3, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

11.115657711s ago: executing program 9 (id=6298):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(0xffffffffffffffff, 0x1, 0x0)
fchdir(r5)
r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r6, r6, &(0x7f0000000080)=0x2, 0x7f03)

11.098666682s ago: executing program 0 (id=6299):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}})
rseq(0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000dc0)={0x2020}, 0x2020)
r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
r4 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8)
close(r4)
fcntl$setstatus(r4, 0x4, 0x2c00)
r5 = gettid()
fcntl$setown(r4, 0x8, r5)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r7, r6, 0x0, 0x3fffff)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x9d)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x24, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9b2}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @tail_call, @call={0x85, 0x0, 0x0, 0x3c}, @ldst={0x0, 0x3, 0x4, 0x3, 0x6, 0x100, 0xfffffffffffffffc}]}, &(0x7f0000000240)='syzkaller\x00', 0xffff8000, 0x8f, &(0x7f0000000580)=""/143, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r3, r4, r6, r8, r10], &(0x7f0000000740)=[{0x1, 0x1, 0x6, 0x5}, {0x1, 0x2, 0xb, 0x3}, {0x0, 0x5, 0x2, 0x4}, {0x0, 0x1, 0xe, 0x5}, {0x5, 0x1, 0x0, 0x3}], 0x10, 0x4}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x8, 0xffffeffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x7, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0)

11.085685033s ago: executing program 7 (id=6300):
r0 = socket$inet(0x2, 0x5, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000800)="07e7", 0x2, 0x40, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (fail_nth: 1)

10.495708365s ago: executing program 7 (id=6301):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
ioprio_set$pid(0x3, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000080)=0x2, 0x7f03)

10.359869999s ago: executing program 6 (id=6302):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce1", 0xa4}, {&(0x7f0000000a40)="a768e2d00ec5757e8f5f433f84c63a269953b038d5817617556310f9ee538468ee62c0d68b6b9fe9ade83c789bd6", 0x2e}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x3, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4004090}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb3", 0xb1}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

10.16294892s ago: executing program 6 (id=6303):
socket$can_j1939(0x1d, 0x2, 0x7)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet_udp(0x2, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x11, 0x3, 0x80000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x5)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x42e6, &(0x7f0000000340)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r0}, &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0))
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0)

9.749467305s ago: executing program 9 (id=6304):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff, 0x3}, 0x20)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x6a1, @loopback, 0x2a}, 0x1c)
syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="bb6233c1eb87", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, '\x00', 0x40, 0x3a, 0x2, @dev={0xfe, 0x80, '\x00', 0x5}, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0xd, '\x00', {0x7, 0x6, "4587af", 0x8, 0x2b, 0xfe, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@dstopts={0x3a, 0x0, '\x00', [@generic={0xf9}, @generic={0x1, 0x2, "7417"}]}]}}}}}}}, 0x0)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1}, 0x20)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000180)={'wg0\x00'})
connect$unix(r3, &(0x7f0000000080)=@file={0x0, './cgroup\x00'}, 0x6e)
r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x82)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x20)

9.595795457s ago: executing program 0 (id=6305):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448d4, 0x0)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0x4)
r2 = socket$xdp(0x2c, 0x3, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000080)={@random="b32a73e9dc0f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
r3 = syz_io_uring_setup(0xa2, &(0x7f0000000640)={0x0, 0xfe0a, 0x10000, 0x2, 0x2c5}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/211, 0xd3}], 0x1})
io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
ioctl$VIDIOC_S_AUDIO(r6, 0x40345622, &(0x7f0000000240)={0x8, "aa4f5c0162a4f81c519dcb2a2e9572ab004770b930bbb1cad875cec4aa4b0720", 0x2, 0x1})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r7}, 0x10)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x1, r7, 0x8000000, r2}, 0x10)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x518, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}}, 0x1, 0xff, 0x4, 0x0, 0x4}, &(0x7f0000000140)=0x98)
r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8)
ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000200)={0x1c, 0x3, 0x20, "3529524230c31a1c68dad367cb333ca289a9b56f5ea96d596a35a3895b1619fa", 0x2036315a})

9.481326405s ago: executing program 9 (id=6306):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
writev(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000880)="eb287a10e738c9490634346bed81010c6760166416f538b1659af92f760e49b370bfe48d747a6d48fa6d950733f4f8d2562dfdb9f90ea4", 0x37}, {&(0x7f00000008c0)="b7f9045ae7e58b055f0759dd8d7f5334c2ce38be99387c7dab48f88e2fcecaaa070a7e1d904e1f195a9f06aacfe5e8cd63e68c78d18973569007e8bf29c2a12b8cf6a769d48f5c", 0x47}, {&(0x7f0000000940)="009032e6dfaa0d410ea226f6db72818f1f00ccb7965cb52d4c3e1269d0e5a75097e3d8b726305a60a6254cb5e23a6a791d18bac6bdfc1253cd27e4f18689b41692eef0492b07e970d020c52a96288ac766f95e192d228b2e210850857a2f26c397c413311e738a89ace45e264b078d698b2fc0e5056c8992f59100e289e532bdf84b2db201f78a16567213766bfeee599d59976b23b0e106d78345954311da580bb3c78e992f0df5dc63cbf94d584a7417ddd1945a90e7b747534982b516354767bd", 0xc2}, {&(0x7f0000000a40)="2740e4c09226869aa5e2809b6b8b78d317ca962a844bed9c5444279701fb35b3905dc7c4ecd4b9d93b6c1eebbcb2bb677a7b7896a13c6e8410077a6c686c99a42600df7abffe17817d1038aa55594d0878ff", 0x52}], 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e640, 0x87)
chown(&(0x7f0000000dc0)='./file1\x00', 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000002c00088028000080240001000000000000000000000000000000000000000000000000000000000000000000d892c92bd473f054ee0e7a9a69cfbf3bca9aef9aae728e70c460dd861b49442e4fc96dc2e3a1ddb47fb74a5ea9eca1159b687dedd042417b6e2189c25d2b80bfcfbe5afb"], 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000000)="8db1")
ioctl$VT_WAITACTIVE(r5, 0x5607)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
ptrace$pokeuser(0x6, r8, 0x3, 0xb5a)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffff3}]}}]}, 0x38}}, 0x0)
sendmsg$xdp(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, 0xc, r7, 0x8}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000b00)="ab86d446003e467beb3386ccb5fb3ec2fc9800e41944fb43a0388e8e2bb0930e6598e8642a6d306cba40e114d627eb51de7be95449f9f9f8e64d02c1fc5b558d70bb30c064d829fe02911a730b70b3d56ec77fd0a7fd8d3f7424c2fd7eb107734ea6814e451dbbe00e83262c602e236341e3b8bedc2a86485e4d63f189a592b91d6b48da15959f55c1c0a6931def5a37136b5c589194538d3f87f293e9e887452694929d66c43773efdf50cc386fb68859beb14f2d8a69cd225473b9e087e181b42b08450aebfa9b9685", 0xca}, {&(0x7f0000000240)="f6ba4e6983857ef167cff88e8d32f54451de40f1fca3d4fd43c354db2fad21b9a4fb0c2a88188b7d459794a36318f11d1839fd7331f3cf2c345284121bd42a3c140964d9", 0x44}, {&(0x7f00000003c0)="4df46bc3a1338b440690a36ab65c9dfd75f91b79b419db5acb5b16f2734f34cbf035d81ca3ec68a3053d5d346b116bcadb1eeb1718071fc2754a035048fa7b1a55c0665d7e72e9b020f569ada482a01f4251a49503", 0x55}, {&(0x7f0000000500)="e2fb37028eec1a28d47a1bb4a566ab4b9f9c0c315abea96bdeea41d536af0add8b0943f8440334aca57971656ca1c6796b7ef941bb15224acaf4eea68fe4ea19c93fe0929627bffe86766533b34411c507de913b0257bef84e1880d8c4d27a6d6997b8fd8f3e45fa6bd2fa389f11065dc26d70ba29bbcd36819e4e0ebd9ddc1ef1c9d8dc9ad124e9e505e84fa746fd5c5cfd552660bfb38e57d2643efaef41fb23281d71aac41b2201a17a8c9b7b4f3f3403f26b23c05e07b73af878e4d1b67c2fee4dbe2576c3c502e1db4dc37cb1dbc114a943", 0xd4}, {&(0x7f0000000600)="5661860ef2668a359b9f9556f9e0a3c3209c8a687f94a58326c13615afd61d407c599c3b5290043e9eab5fb76645a467ba643d9545ce92d5b985760a859b7651459504e6d6f5877a81728aeeeaad4412f264d7e3856a1638d4ad82ca4637d6db22282339700639e197b3b375c49885ce7774f68715d1e91f5467093ae5ca47583362cb51e168cad1b32f381775041c415774b6d97071f42a42d31fbb159b22d461de2627c40313fc51d668d8185a8f0a28bcf846a5244d1da4842586145fcad42c8e95af30c606790efe702d6e8aad1d78d82ef71335cc1386afe4120fe119c19f87936da8218204aad19cb20a26", 0xee}, {&(0x7f0000000100)="56e59f37859533f64775ed232c30cb1750b3dc1514d046fc78f61213de7cacb0e900bc0c463dffcfcef85ceaeaa6738bf1c8bdc666c66c2930fe3bd50c09a6d895420aa761325a9bb7014e81e57d72d408b8b27b8abebb432d751ac05270b8edbf2ff6cd9692ff4cd9c558de3080a833f6c242d2c2d8b2f0ee8f6155073949c8cbd1a71aee7ff14db83852ded2372d8b935da0fefb5a1403a848dae19aea887fa1b0338082047ae28d97", 0xaa}, {&(0x7f0000000c00)="69bb0850e78f65ca12ae15b6c9b965b491ad0883b7172b91b34eb3b95b1dd0b260cfacc0d3d60d9f4579bec9e0995804ac29fd82ae6d8e74939b81ca0088104c8ee15b200539", 0x46}], 0x7, 0x0, 0x0, 0x4040054}, 0x401c)
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000007c0)=""/26)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x900, 0x12)

8.979429046s ago: executing program 6 (id=6307):
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc020000000000000000000000000001"], 0x36)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a41", 0xa8}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba7578", 0x42}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb31c60880c389d", 0xb7}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd9", 0x55}, {&(0x7f0000000700)="9af11ddfb8ceb516a838dd3cedbe8ce91e02bfabade423d9a4d0ec122b7037a6bffa4c8dff825b4bb6af22c579faf7cd32f8fa2c632ee236967cf01e81fd58fa7de7dc69417ed5b34378c0cecc6e594591c035a1492419209e9b5aff174a1d1462bd1e5a8b80fbb1ce5c906a977485c7ae6af8991a8adedcede4e0eef2d587cf05", 0x81}, {&(0x7f0000000fc0)}], 0x3, 0x0, 0x0, 0x84090}], 0x3, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

8.34170786s ago: executing program 7 (id=6308):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x3a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x0, 0x1, @none, 0x7f, 0x7, 0x9a, 0x2, 0x0, 0x1, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20, "6918ac9b0f1ad96a06a0415dde72dd8881cf5e557e01efb75bca6c67551b97c0"}]}}}}, 0x3d)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)

8.03577394s ago: executing program 7 (id=6309):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000006300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1a8}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5800, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4000000)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="c89bd049f0000000000000000002", 0x0, 0xeb7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

7.976170496s ago: executing program 7 (id=6310):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

69.288564ms ago: executing program 6 (id=6311):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @mcast2, 0xb}, 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x62842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x2c400}], 0x14, 0x7800, 0x0, 0x3)

68.425778ms ago: executing program 7 (id=6312):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce1", 0xa4}, {&(0x7f0000000a40)="a768e2d00ec5757e8f5f433f84c63a269953b038d5817617556310f9ee538468ee62c0d68b6b9fe9ade83c789bd6", 0x2e}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x3, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4004090}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb3", 0xb1}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

59.297519ms ago: executing program 9 (id=6313):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r6, r6, &(0x7f0000000080)=0x2, 0x7f03)

0s ago: executing program 0 (id=6314):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0)

kernel console output (not intermixed with test programs):

evsim6 netdevsim0: renamed from eth0
[ 1766.472506][ T5784] usb 1-1: USB disconnect, device number 80
[ 1766.490439][T23662] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1766.530166][T23662] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1766.562805][T23662] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1766.840499][T23662] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1766.892294][T23782] netlink: 'syz.8.5829': attribute type 23 has an invalid length.
[ 1766.892319][T23782] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5829'.
[ 1766.951706][T23662] 8021q: adding VLAN 0 to HW filter on device team0
[ 1766.981805][T12458] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1766.981998][T12458] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1767.021934][T12458] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1767.022099][T12458] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1767.222067][T23782] netlink: 'syz.8.5829': attribute type 3 has an invalid length.
[ 1769.495929][ T5868] usb 8-1: new full-speed USB device number 44 using dummy_hcd
[ 1769.811829][ T5868] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1769.811862][ T5868] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1769.813443][ T5868] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1769.813473][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1769.813493][ T5868] usb 8-1: SerialNumber: syz
[ 1770.821226][T23810] comedi comedi1: aio_iiro_16: I/O port conflict (0x4f23,8)
[ 1771.108173][ T5868] usb 8-1: 0:2 : does not exist
[ 1771.359086][ T5868] usb 8-1: USB disconnect, device number 44
[ 1771.439087][T23413] udevd[23413]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1771.632043][T23662] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1771.958394][ T5784] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[ 1771.966001][ T5868] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[ 1772.132691][ T5868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1772.132743][ T5868] usb 9-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[ 1772.132767][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1772.166943][ T5784] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1772.166975][ T5784] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1772.167033][ T5784] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[ 1772.167080][ T5784] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1772.167105][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1772.174103][ T5868] usb 9-1: config 0 descriptor??
[ 1772.246468][T23817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1772.266569][ T5784] hub 1-1:1.0: bad descriptor, ignoring hub
[ 1772.266614][ T5784] hub 1-1:1.0: probe with driver hub failed with error -5
[ 1772.267626][ T5784] cdc_wdm 1-1:1.0: skipping garbage
[ 1772.267642][ T5784] cdc_wdm 1-1:1.0: skipping garbage
[ 1772.275031][ T5784] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1772.275055][ T5784] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1772.486440][T15404] usb 8-1: new high-speed USB device number 45 using dummy_hcd
[ 1772.532839][    C1] wdm_int_callback: 246 callbacks suppressed
[ 1772.532873][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1772.532893][    C1] wdm_int_callback: 246 callbacks suppressed
[ 1772.532909][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1772.606625][ T5868] usbhid 9-1:0.0: can't add hid device: -71
[ 1772.606771][ T5868] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1772.634546][ T5868] usb 9-1: USB disconnect, device number 66
[ 1772.653903][T23662] veth0_vlan: entered promiscuous mode
[ 1772.667246][T15404] usb 8-1: Using ep0 maxpacket: 8
[ 1772.671343][T15404] usb 8-1: config 0 has an invalid interface number: 239 but max is 0
[ 1772.671377][T15404] usb 8-1: config 0 has no interface number 0
[ 1772.671432][T15404] usb 8-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[ 1772.671474][T15404] usb 8-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1772.671502][T15404] usb 8-1: config 0 interface 239 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1772.671531][T15404] usb 8-1: config 0 interface 239 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1772.671560][T15404] usb 8-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1772.672655][T23662] veth1_vlan: entered promiscuous mode
[ 1772.706594][T15404] usb 8-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[ 1772.706625][T15404] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1772.706644][T15404] usb 8-1: Product: syz
[ 1772.706658][T15404] usb 8-1: Manufacturer: syz
[ 1772.706672][T15404] usb 8-1: SerialNumber: syz
[ 1772.726939][T15404] usb 8-1: config 0 descriptor??
[ 1772.732613][T23825] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1772.905088][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1772.905121][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1772.905367][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1772.905390][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1772.905621][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1772.905637][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1772.905944][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1772.905965][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1772.906210][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1772.906231][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1772.906459][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1772.906476][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1772.906712][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1772.906731][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1772.906950][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1772.906967][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1772.907178][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1772.907195][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1773.050222][T23662] veth0_macvtap: entered promiscuous mode
[ 1773.114249][T23662] veth1_macvtap: entered promiscuous mode
[ 1773.145621][ T5868] usb 10-1: new full-speed USB device number 44 using dummy_hcd
[ 1773.238629][T23662] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1773.310774][ T5868] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1773.310803][ T5868] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1773.313447][T23662] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1773.330122][ T5868] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1773.330160][ T5868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1773.330181][ T5868] usb 10-1: SerialNumber: syz
[ 1773.508011][ T5868] usb 10-1: 0:2 : does not exist
[ 1773.508765][T23809] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1773.511795][T23809] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1773.549364][T23809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1773.549419][T23809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1773.956283][T23832] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5841'.
[ 1773.956318][T23832] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5841'.
[ 1773.986680][T23829] binder: BINDER_SET_CONTEXT_MGR already set
[ 1773.986699][T23829] binder: 23828:23829 ioctl 4018620d 200000000040 returned -16
[ 1774.183845][T15404] ath6kl: Failed to submit usb control message: -110
[ 1774.183907][T15404] ath6kl: unable to send the bmi data to the device: -110
[ 1774.183923][T15404] ath6kl: Unable to send get target info: -110
[ 1774.187875][T15404] ath6kl: Failed to init ath6kl core: -110
[ 1774.190649][T15404] ath6kl_usb 8-1:0.239: probe with driver ath6kl_usb failed with error -110
[ 1774.392553][ T5949] usb 8-1: USB disconnect, device number 45
[ 1774.512256][T16891] usb 10-1: USB disconnect, device number 44
[ 1775.156654][ T5784] usb 1-1: USB disconnect, device number 81
[ 1776.599497][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1776.599523][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1776.752228][T12458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1776.752256][T12458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1776.773185][T23853] 9p: Bad value for 'wfdno'
[ 1776.786781][T23853] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5845'.
[ 1776.907955][T23853] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[ 1776.970483][T23853] netdevsim netdevsim7 netdevsim0: left promiscuous mode
[ 1777.479276][T23863] FAULT_INJECTION: forcing a failure.
[ 1777.479276][T23863] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1777.479342][T23863] CPU: 1 UID: 0 PID: 23863 Comm: syz.8.5848 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1777.479374][T23863] Tainted: [L]=SOFTLOCKUP
[ 1777.479382][T23863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1777.479395][T23863] Call Trace:
[ 1777.479404][T23863]  <TASK>
[ 1777.479414][T23863]  dump_stack_lvl+0xe8/0x150
[ 1777.479450][T23863]  should_fail_ex+0x46b/0x600
[ 1777.479475][T23863]  _copy_from_user+0x2d/0xb0
[ 1777.479505][T23863]  __sys_bpf+0x229/0x920
[ 1777.479539][T23863]  ? __pfx___sys_bpf+0x10/0x10
[ 1777.479603][T23863]  __x64_sys_bpf+0x7c/0x90
[ 1777.479631][T23863]  do_syscall_64+0xe2/0xf80
[ 1777.479660][T23863]  ? rcu_is_watching+0x15/0xb0
[ 1777.479696][T23863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1777.479719][T23863]  ? clear_bhb_loop+0x60/0xb0
[ 1777.479746][T23863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1777.479768][T23863] RIP: 0033:0x7fd80f65aeb9
[ 1777.479788][T23863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1777.479808][T23863] RSP: 002b:00007fd80d874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1777.479833][T23863] RAX: ffffffffffffffda RBX: 00007fd80f8d6180 RCX: 00007fd80f65aeb9
[ 1777.479849][T23863] RDX: 0000000000000094 RSI: 0000200000000740 RDI: 0000000000000005
[ 1777.479864][T23863] RBP: 00007fd80d874090 R08: 0000000000000000 R09: 0000000000000000
[ 1777.479877][T23863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1777.479890][T23863] R13: 00007fd80f8d6218 R14: 00007fd80f8d6180 R15: 00007ffd61fe86c8
[ 1777.479926][T23863]  </TASK>
[ 1778.448192][T23877] FAULT_INJECTION: forcing a failure.
[ 1778.448192][T23877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1778.448234][T23877] CPU: 0 UID: 0 PID: 23877 Comm: syz.0.5853 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1778.448266][T23877] Tainted: [L]=SOFTLOCKUP
[ 1778.448274][T23877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1778.448288][T23877] Call Trace:
[ 1778.448297][T23877]  <TASK>
[ 1778.448307][T23877]  dump_stack_lvl+0xe8/0x150
[ 1778.448343][T23877]  should_fail_ex+0x46b/0x600
[ 1778.448373][T23877]  _copy_from_user+0x2d/0xb0
[ 1778.448404][T23877]  __sys_bind+0x1cc/0x410
[ 1778.448439][T23877]  ? __pfx___sys_bind+0x10/0x10
[ 1778.448483][T23877]  ? __pfx_ksys_write+0x10/0x10
[ 1778.448518][T23877]  __x64_sys_bind+0x7a/0x90
[ 1778.448552][T23877]  do_syscall_64+0xe2/0xf80
[ 1778.448582][T23877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1778.448603][T23877]  ? trace_irq_disable+0x37/0x100
[ 1778.448633][T23877]  ? clear_bhb_loop+0x60/0xb0
[ 1778.448661][T23877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1778.448683][T23877] RIP: 0033:0x7fc25702aeb9
[ 1778.448704][T23877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1778.448725][T23877] RSP: 002b:00007fc255286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1778.448759][T23877] RAX: ffffffffffffffda RBX: 00007fc2572a5fa0 RCX: 00007fc25702aeb9
[ 1778.448776][T23877] RDX: 0000000000000058 RSI: 0000200000000640 RDI: 0000000000000003
[ 1778.448791][T23877] RBP: 00007fc255286090 R08: 0000000000000000 R09: 0000000000000000
[ 1778.448806][T23877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1778.448820][T23877] R13: 00007fc2572a6038 R14: 00007fc2572a5fa0 R15: 00007fff00062788
[ 1778.448855][T23877]  </TASK>
[ 1778.856040][ T5868] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[ 1779.618545][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1779.618578][ T5868] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1779.621319][ T5868] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1779.621350][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1779.621371][ T5868] usb 7-1: SerialNumber: syz
[ 1779.833737][T23879] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5787'.
[ 1780.043715][ T5868] usb 7-1: 0:2 : does not exist
[ 1780.043835][ T5868] usb 7-1: unit 5: unexpected type 0x0b
[ 1780.120748][ T5868] usb 7-1: USB disconnect, device number 73
[ 1780.171526][T23413] udevd[23413]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1780.276215][T14690] usb 9-1: new full-speed USB device number 67 using dummy_hcd
[ 1780.433720][T14690] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1780.434361][T14690] usb 9-1: not running at top speed; connect to a high speed hub
[ 1780.453066][T14690] usb 9-1: config 2 has an invalid interface number: 254 but max is 0
[ 1780.453100][T14690] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1780.453121][T14690] usb 9-1: config 2 has no interface number 0
[ 1780.453160][T14690] usb 9-1: config 2 interface 254 has no altsetting 0
[ 1780.496070][T14690] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=20.52
[ 1780.496106][T14690] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1780.496129][T14690] usb 9-1: Product: syz
[ 1780.496145][T14690] usb 9-1: Manufacturer: syz
[ 1780.496160][T14690] usb 9-1: SerialNumber: syz
[ 1780.785033][T14690] ims_pcu 9-1:2.254: Missing CDC union descriptor
[ 1780.785106][T14690] ims_pcu 9-1:2.254: probe with driver ims_pcu failed with error -22
[ 1780.825328][T14690] usb 9-1: USB disconnect, device number 67
[ 1781.135999][T14690] usb 1-1: new low-speed USB device number 82 using dummy_hcd
[ 1781.288592][T14690] usb 1-1: config 0 has an invalid interface number: 153 but max is 0
[ 1781.288626][T14690] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1781.288647][T14690] usb 1-1: config 0 has no interface number 0
[ 1781.288681][T14690] usb 1-1: config 0 interface 153 has no altsetting 0
[ 1781.294584][T14690] usb 1-1: string descriptor 0 read error: -22
[ 1781.294761][T14690] usb 1-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[ 1781.294788][T14690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1781.551582][T14690] usb 1-1: config 0 descriptor??
[ 1781.880870][T14690] uvcvideo 1-1:0.153: probe with driver uvcvideo failed with error -22
[ 1781.920529][T14690] usb 1-1: USB disconnect, device number 82
[ 1783.535988][T14690] usb 7-1: new high-speed USB device number 74 using dummy_hcd
[ 1783.695981][T14690] usb 7-1: Using ep0 maxpacket: 32
[ 1783.699113][T14690] usb 7-1: config 0 has an invalid interface number: 138 but max is 0
[ 1783.699144][T14690] usb 7-1: config 0 has no interface number 0
[ 1783.699246][T14690] usb 7-1: config 0 interface 138 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1783.699276][T14690] usb 7-1: config 0 interface 138 has no altsetting 0
[ 1783.702541][T14690] usb 7-1: New USB device found, idVendor=103c, idProduct=1629, bcdDevice=d2.b3
[ 1783.702570][T14690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1783.702592][T14690] usb 7-1: Product: syz
[ 1783.702617][T14690] usb 7-1: Manufacturer: syz
[ 1783.702634][T14690] usb 7-1: SerialNumber: syz
[ 1783.794015][T14690] usb 7-1: config 0 descriptor??
[ 1783.795416][T23940] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1785.085802][T23940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1785.121584][T23940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1785.182340][T14690] usb 7-1: USB disconnect, device number 74
[ 1785.458253][T23964] netlink: 'syz.8.5878': attribute type 2 has an invalid length.
[ 1786.014730][T23972] FAULT_INJECTION: forcing a failure.
[ 1786.014730][T23972] name failslab, interval 1, probability 0, space 0, times 0
[ 1786.014774][T23972] CPU: 0 UID: 0 PID: 23972 Comm: syz.6.5880 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1786.014805][T23972] Tainted: [L]=SOFTLOCKUP
[ 1786.014814][T23972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1786.014828][T23972] Call Trace:
[ 1786.014837][T23972]  <TASK>
[ 1786.014847][T23972]  dump_stack_lvl+0xe8/0x150
[ 1786.014884][T23972]  should_fail_ex+0x46b/0x600
[ 1786.014915][T23972]  should_failslab+0xa8/0x100
[ 1786.014950][T23972]  __kmalloc_noprof+0xdf/0x7c0
[ 1786.014981][T23972]  ? kfree+0x4d/0x8f0
[ 1786.015006][T23972]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1786.015035][T23972]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1786.015060][T23972]  ? tomoyo_domain+0xd8/0x130
[ 1786.015089][T23972]  ? tomoyo_path_number_perm+0x219/0x630
[ 1786.015120][T23972]  tomoyo_path_number_perm+0x246/0x630
[ 1786.015153][T23972]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1786.015179][T23972]  ? __lock_acquire+0x6b5/0x2cf0
[ 1786.015208][T23972]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1786.015279][T23972]  ? __fget_files+0x2a/0x420
[ 1786.015304][T23972]  ? __fget_files+0x2a/0x420
[ 1786.015321][T23972]  ? __fget_files+0x3a6/0x420
[ 1786.015339][T23972]  ? __fget_files+0x2a/0x420
[ 1786.015365][T23972]  security_file_ioctl+0xc3/0x2a0
[ 1786.015399][T23972]  __se_sys_ioctl+0x47/0x170
[ 1786.015430][T23972]  do_syscall_64+0xe2/0xf80
[ 1786.015461][T23972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1786.015483][T23972]  ? trace_irq_disable+0x37/0x100
[ 1786.015511][T23972]  ? clear_bhb_loop+0x60/0xb0
[ 1786.015539][T23972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1786.015562][T23972] RIP: 0033:0x7f8a7fbcaeb9
[ 1786.015592][T23972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1786.015611][T23972] RSP: 002b:00007f8a7dde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1786.015636][T23972] RAX: ffffffffffffffda RBX: 00007f8a7fe46180 RCX: 00007f8a7fbcaeb9
[ 1786.015653][T23972] RDX: 0000200000000280 RSI: 00000000c05064a7 RDI: 0000000000000003
[ 1786.015667][T23972] RBP: 00007f8a7dde4090 R08: 0000000000000000 R09: 0000000000000000
[ 1786.015682][T23972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1786.015695][T23972] R13: 00007f8a7fe46218 R14: 00007f8a7fe46180 R15: 00007ffef052fd98
[ 1786.015732][T23972]  </TASK>
[ 1786.015742][T23972] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1786.175963][T16891] usb 10-1: new full-speed USB device number 45 using dummy_hcd
[ 1786.349163][T16891] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1786.349939][T16891] usb 10-1: not running at top speed; connect to a high speed hub
[ 1786.351486][T16891] usb 10-1: config 2 has an invalid interface number: 254 but max is 0
[ 1786.351515][T16891] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1786.351536][T16891] usb 10-1: config 2 has no interface number 0
[ 1786.351582][T16891] usb 10-1: config 2 interface 254 has no altsetting 0
[ 1786.354827][T16891] usb 10-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=20.52
[ 1786.354856][T16891] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1786.355025][T16891] usb 10-1: Product: syz
[ 1786.355042][T16891] usb 10-1: Manufacturer: syz
[ 1786.355058][T16891] usb 10-1: SerialNumber: syz
[ 1786.719504][T16891] ims_pcu 10-1:2.254: Missing CDC union descriptor
[ 1786.719579][T16891] ims_pcu 10-1:2.254: probe with driver ims_pcu failed with error -22
[ 1786.748547][T16891] usb 10-1: USB disconnect, device number 45
[ 1787.316075][T23982] netlink: 'syz.7.5884': attribute type 3 has an invalid length.
[ 1788.287360][T23994] 9p: Unknown Cache mode or invalid value fs
[ 1788.799974][T24002] FAULT_INJECTION: forcing a failure.
[ 1788.799974][T24002] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1788.800006][T24002] CPU: 1 UID: 0 PID: 24002 Comm: syz.0.5892 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1788.800025][T24002] Tainted: [L]=SOFTLOCKUP
[ 1788.800030][T24002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1788.800038][T24002] Call Trace:
[ 1788.800043][T24002]  <TASK>
[ 1788.800050][T24002]  dump_stack_lvl+0xe8/0x150
[ 1788.800072][T24002]  should_fail_ex+0x46b/0x600
[ 1788.800088][T24002]  _copy_from_user+0x2d/0xb0
[ 1788.800105][T24002]  ___sys_sendmsg+0x1c6/0x360
[ 1788.800118][T24002]  ? __lock_acquire+0x6b5/0x2cf0
[ 1788.800135][T24002]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1788.800166][T24002]  ? __fget_files+0x2a/0x420
[ 1788.800176][T24002]  ? __fget_files+0x3a6/0x420
[ 1788.800193][T24002]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1788.800207][T24002]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1788.800225][T24002]  ? __pfx_ksys_write+0x10/0x10
[ 1788.800247][T24002]  do_syscall_64+0xe2/0xf80
[ 1788.800263][T24002]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1788.800275][T24002]  ? trace_irq_disable+0x37/0x100
[ 1788.800290][T24002]  ? clear_bhb_loop+0x60/0xb0
[ 1788.800304][T24002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1788.800316][T24002] RIP: 0033:0x7fc25702aeb9
[ 1788.800328][T24002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1788.800339][T24002] RSP: 002b:00007fc255265028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1788.800354][T24002] RAX: ffffffffffffffda RBX: 00007fc2572a6090 RCX: 00007fc25702aeb9
[ 1788.800363][T24002] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003
[ 1788.800371][T24002] RBP: 00007fc255265090 R08: 0000000000000000 R09: 0000000000000000
[ 1788.800382][T24002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1788.800389][T24002] R13: 00007fc2572a6128 R14: 00007fc2572a6090 R15: 00007fff00062788
[ 1788.800407][T24002]  </TASK>
[ 1789.923058][T24017] netlink: 'syz.9.5896': attribute type 3 has an invalid length.
[ 1790.290867][T24029] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.5900'.
[ 1790.736239][T15404] usb 9-1: new low-speed USB device number 68 using dummy_hcd
[ 1790.816495][   T37] audit: type=1326 audit(1770257698.675:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24036 comm="syz.6.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7fbcaeb9 code=0x7ffc0000
[ 1790.817283][   T37] audit: type=1326 audit(1770257698.735:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24036 comm="syz.6.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7fbcaeb9 code=0x7ffc0000
[ 1790.818742][   T37] audit: type=1326 audit(1770257698.735:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24036 comm="syz.6.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f8a7fbcaeb9 code=0x7ffc0000
[ 1790.818992][   T37] audit: type=1326 audit(1770257698.735:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24036 comm="syz.6.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7fbcaeb9 code=0x7ffc0000
[ 1790.819163][   T37] audit: type=1326 audit(1770257698.735:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24036 comm="syz.6.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7fbcaeb9 code=0x7ffc0000
[ 1790.819653][   T37] audit: type=1326 audit(1770257698.735:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24036 comm="syz.6.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a7fbcaeb9 code=0x7ffc0000
[ 1790.820086][   T37] audit: type=1326 audit(1770257698.735:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24036 comm="syz.6.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7fbcaeb9 code=0x7ffc0000
[ 1790.820237][   T37] audit: type=1326 audit(1770257698.735:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24036 comm="syz.6.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7fbcaeb9 code=0x7ffc0000
[ 1790.827571][   T37] audit: type=1326 audit(1770257698.745:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24036 comm="syz.6.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a7fbcaeb9 code=0x7ffc0000
[ 1790.827708][T24039] netlink: 'syz.6.5905': attribute type 7 has an invalid length.
[ 1790.835434][   T37] audit: type=1326 audit(1770257698.745:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24036 comm="syz.6.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7fbcaeb9 code=0x7ffc0000
[ 1791.062173][T15404] usb 9-1: config 0 has an invalid interface number: 153 but max is 0
[ 1791.062206][T15404] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1791.062228][T15404] usb 9-1: config 0 has no interface number 0
[ 1791.062279][T15404] usb 9-1: config 0 interface 153 has no altsetting 0
[ 1791.101639][T15404] usb 9-1: string descriptor 0 read error: -22
[ 1791.101808][T15404] usb 9-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[ 1791.101834][T15404] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1791.142312][T15404] usb 9-1: config 0 descriptor??
[ 1791.169524][T15404] uvcvideo 9-1:0.153: probe with driver uvcvideo failed with error -22
[ 1791.366750][ T5784] usb 9-1: USB disconnect, device number 68
[ 1791.589224][T24051] netlink: 'syz.7.5909': attribute type 3 has an invalid length.
[ 1792.023239][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.731702][T24084] netlink: 'syz.6.5924': attribute type 23 has an invalid length.
[ 1792.731719][T24084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5924'.
[ 1792.786867][T24084] netlink: 'syz.6.5924': attribute type 3 has an invalid length.
[ 1792.966911][T24086] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5923'.
[ 1792.966942][T24086] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5923'.
[ 1794.333618][ T5784] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[ 1794.645929][T13619] Bluetooth: hci5: command 0x0405 tx timeout
[ 1794.956303][ T5784] usb 10-1: Using ep0 maxpacket: 16
[ 1794.964940][ T5784] usb 10-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1794.964977][ T5784] usb 10-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1794.965001][ T5784] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1794.991000][ T5784] usb 10-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.40
[ 1794.991034][ T5784] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1794.991053][ T5784] usb 10-1: Product: ӿ
[ 1794.991067][ T5784] usb 10-1: Manufacturer: 딮㽤끏䭎餛剡煜ꉁ梋˼茮掘刌煉쉀᪈䫾㘱눴촒痸郃歎왇玠県氰岛痘ゾ磺
[ 1794.991086][ T5784] usb 10-1: SerialNumber: Ъ
[ 1795.029158][T24114] netlink: 'syz.6.5935': attribute type 23 has an invalid length.
[ 1795.029239][T24114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5935'.
[ 1795.239304][T24103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1795.239919][T24103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1795.279568][ T5784] usbhid 10-1:1.0: can't add hid device: -71
[ 1795.279738][ T5784] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[ 1795.330266][ T5784] usb 10-1: USB disconnect, device number 46
[ 1795.406595][T24113] netlink: 'syz.6.5935': attribute type 3 has an invalid length.
[ 1797.915643][T24161] FAULT_INJECTION: forcing a failure.
[ 1797.915643][T24161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1797.915686][T24161] CPU: 0 UID: 0 PID: 24161 Comm: syz.9.5951 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1797.915718][T24161] Tainted: [L]=SOFTLOCKUP
[ 1797.915727][T24161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1797.915740][T24161] Call Trace:
[ 1797.915749][T24161]  <TASK>
[ 1797.915759][T24161]  dump_stack_lvl+0xe8/0x150
[ 1797.915796][T24161]  should_fail_ex+0x46b/0x600
[ 1797.915830][T24161]  _copy_from_user+0x2d/0xb0
[ 1797.915857][T24161]  ucma_write+0x166/0x2f0
[ 1797.915891][T24161]  ? __pfx_ucma_write+0x10/0x10
[ 1797.915924][T24161]  ? rw_verify_area+0x25b/0x4e0
[ 1797.915948][T24161]  ? __pfx_ucma_write+0x10/0x10
[ 1797.915978][T24161]  vfs_write+0x2a3/0xba0
[ 1797.916011][T24161]  ? __pfx_vfs_write+0x10/0x10
[ 1797.916038][T24161]  ? __fget_files+0x2a/0x420
[ 1797.916061][T24161]  ? __fget_files+0x2a/0x420
[ 1797.916078][T24161]  ? __fget_files+0x3a6/0x420
[ 1797.916097][T24161]  ? __fget_files+0x2a/0x420
[ 1797.916124][T24161]  ksys_write+0x156/0x270
[ 1797.916154][T24161]  ? __pfx_ksys_write+0x10/0x10
[ 1797.916192][T24161]  do_syscall_64+0xe2/0xf80
[ 1797.916218][T24161]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1797.916240][T24161]  ? trace_irq_disable+0x37/0x100
[ 1797.916267][T24161]  ? clear_bhb_loop+0x60/0xb0
[ 1797.916292][T24161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1797.916314][T24161] RIP: 0033:0x7f514c60aeb9
[ 1797.916334][T24161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1797.916353][T24161] RSP: 002b:00007f514a866028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1797.916377][T24161] RAX: ffffffffffffffda RBX: 00007f514c885fa0 RCX: 00007f514c60aeb9
[ 1797.916393][T24161] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1797.916407][T24161] RBP: 00007f514a866090 R08: 0000000000000000 R09: 0000000000000000
[ 1797.916422][T24161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1797.916435][T24161] R13: 00007f514c886038 R14: 00007f514c885fa0 R15: 00007ffeed11c2a8
[ 1797.916479][T24161]  </TASK>
[ 1798.564143][T24179] FAULT_INJECTION: forcing a failure.
[ 1798.564143][T24179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1798.564186][T24179] CPU: 1 UID: 0 PID: 24179 Comm: syz.6.5958 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1798.564217][T24179] Tainted: [L]=SOFTLOCKUP
[ 1798.564225][T24179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1798.564238][T24179] Call Trace:
[ 1798.564246][T24179]  <TASK>
[ 1798.564255][T24179]  dump_stack_lvl+0xe8/0x150
[ 1798.564291][T24179]  should_fail_ex+0x46b/0x600
[ 1798.564320][T24179]  _copy_from_user+0x2d/0xb0
[ 1798.564350][T24179]  ___sys_recvmsg+0x175/0x590
[ 1798.564373][T24179]  ? get_pid_task+0x20/0x1f0
[ 1798.564399][T24179]  ? get_pid_task+0x20/0x1f0
[ 1798.564430][T24179]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1798.564459][T24179]  ? __fget_files+0x2a/0x420
[ 1798.564510][T24179]  ? __fget_files+0x3a6/0x420
[ 1798.564542][T24179]  __x64_sys_recvmsg+0x1c0/0x2a0
[ 1798.564570][T24179]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[ 1798.564606][T24179]  ? __pfx_ksys_write+0x10/0x10
[ 1798.564647][T24179]  do_syscall_64+0xe2/0xf80
[ 1798.564678][T24179]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1798.564699][T24179]  ? trace_irq_disable+0x37/0x100
[ 1798.564728][T24179]  ? clear_bhb_loop+0x60/0xb0
[ 1798.564755][T24179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1798.564777][T24179] RIP: 0033:0x7f8a7fbcaeb9
[ 1798.564797][T24179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1798.564816][T24179] RSP: 002b:00007f8a7de26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1798.564841][T24179] RAX: ffffffffffffffda RBX: 00007f8a7fe45fa0 RCX: 00007f8a7fbcaeb9
[ 1798.564858][T24179] RDX: 0000000000010000 RSI: 0000200000000680 RDI: 0000000000000003
[ 1798.564873][T24179] RBP: 00007f8a7de26090 R08: 0000000000000000 R09: 0000000000000000
[ 1798.564886][T24179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1798.564900][T24179] R13: 00007f8a7fe46038 R14: 00007f8a7fe45fa0 R15: 00007ffef052fd98
[ 1798.564935][T24179]  </TASK>
[ 1800.738917][T24177] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5957'.
[ 1804.336121][ T5784] usb 1-1: new full-speed USB device number 83 using dummy_hcd
[ 1804.498413][ T5784] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1804.498445][ T5784] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1804.498516][ T5784] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[ 1804.498564][ T5784] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1804.498589][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1804.505556][T24221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1804.513617][ T5784] hub 1-1:1.0: bad descriptor, ignoring hub
[ 1804.513658][ T5784] hub 1-1:1.0: probe with driver hub failed with error -5
[ 1804.514593][ T5784] cdc_wdm 1-1:1.0: skipping garbage
[ 1804.514608][ T5784] cdc_wdm 1-1:1.0: skipping garbage
[ 1804.558009][ T5784] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1804.558034][ T5784] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1804.836363][    C1] wdm_int_callback: 5855 callbacks suppressed
[ 1804.836391][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1804.836410][    C1] wdm_int_callback: 5855 callbacks suppressed
[ 1804.836427][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1804.836670][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1804.836691][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1804.836935][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1804.836955][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1804.837194][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1804.837228][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1804.837459][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1804.837479][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1804.837713][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1804.837734][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1804.837797][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[ 1804.840863][T24233] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5973'.
[ 1805.113223][T24240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5974'.
[ 1805.248135][T24240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1805.281126][ T5784] usb 1-1: USB disconnect, device number 83
[ 1805.938876][T24257] netlink: 'syz.7.5982': attribute type 23 has an invalid length.
[ 1805.938905][T24257] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5982'.
[ 1806.060701][T24267] FAULT_INJECTION: forcing a failure.
[ 1806.060701][T24267] name failslab, interval 1, probability 0, space 0, times 0
[ 1806.060741][T24267] CPU: 0 UID: 0 PID: 24267 Comm: syz.6.5985 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1806.060772][T24267] Tainted: [L]=SOFTLOCKUP
[ 1806.060781][T24267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1806.060794][T24267] Call Trace:
[ 1806.060803][T24267]  <TASK>
[ 1806.060813][T24267]  dump_stack_lvl+0xe8/0x150
[ 1806.060849][T24267]  should_fail_ex+0x46b/0x600
[ 1806.060877][T24267]  ? getname_flags+0xb7/0x540
[ 1806.060909][T24267]  should_failslab+0xa8/0x100
[ 1806.060943][T24267]  ? getname_flags+0xb7/0x540
[ 1806.060971][T24267]  kmem_cache_alloc_noprof+0x83/0x6a0
[ 1806.060999][T24267]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1806.061028][T24267]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1806.061063][T24267]  getname_flags+0xb7/0x540
[ 1806.061101][T24267]  user_path_at+0x24/0x60
[ 1806.061126][T24267]  do_fchownat+0xf5/0x240
[ 1806.061162][T24267]  ? __pfx_do_fchownat+0x10/0x10
[ 1806.061194][T24267]  ? __pfx_ksys_write+0x10/0x10
[ 1806.061230][T24267]  __x64_sys_chown+0x82/0xa0
[ 1806.061264][T24267]  do_syscall_64+0xe2/0xf80
[ 1806.061294][T24267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1806.061315][T24267]  ? trace_irq_disable+0x37/0x100
[ 1806.061345][T24267]  ? clear_bhb_loop+0x60/0xb0
[ 1806.061372][T24267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1806.061402][T24267] RIP: 0033:0x7f8a7fbcaeb9
[ 1806.061422][T24267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1806.061442][T24267] RSP: 002b:00007f8a7de26028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c
[ 1806.061467][T24267] RAX: ffffffffffffffda RBX: 00007f8a7fe45fa0 RCX: 00007f8a7fbcaeb9
[ 1806.061484][T24267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000480
[ 1806.061499][T24267] RBP: 00007f8a7de26090 R08: 0000000000000000 R09: 0000000000000000
[ 1806.061513][T24267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1806.061527][T24267] R13: 00007f8a7fe46038 R14: 00007f8a7fe45fa0 R15: 00007ffef052fd98
[ 1806.061562][T24267]  </TASK>
[ 1806.193051][T24257] netlink: 'syz.7.5982': attribute type 3 has an invalid length.
[ 1806.238285][ T5949] usb 9-1: new low-speed USB device number 69 using dummy_hcd
[ 1806.391811][ T5949] usb 9-1: config 0 has an invalid interface number: 153 but max is 0
[ 1806.391845][ T5949] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1806.391866][ T5949] usb 9-1: config 0 has no interface number 0
[ 1806.391905][ T5949] usb 9-1: config 0 interface 153 has no altsetting 0
[ 1806.397228][ T5949] usb 9-1: string descriptor 0 read error: -22
[ 1806.397386][ T5949] usb 9-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[ 1806.397408][ T5949] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1806.431909][ T5949] usb 9-1: config 0 descriptor??
[ 1806.452510][ T5949] uvcvideo 9-1:0.153: probe with driver uvcvideo failed with error -22
[ 1806.635170][T24279] overlayfs: failed to resolve './file1': -2
[ 1806.712456][T24285] FAULT_INJECTION: forcing a failure.
[ 1806.712456][T24285] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1806.712497][T24285] CPU: 0 UID: 0 PID: 24285 Comm: syz.7.5992 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1806.712528][T24285] Tainted: [L]=SOFTLOCKUP
[ 1806.712537][T24285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1806.712550][T24285] Call Trace:
[ 1806.712560][T24285]  <TASK>
[ 1806.712570][T24285]  dump_stack_lvl+0xe8/0x150
[ 1806.712605][T24285]  should_fail_ex+0x46b/0x600
[ 1806.712633][T24285]  _copy_from_user+0x2d/0xb0
[ 1806.712663][T24285]  ___sys_sendmsg+0x1c6/0x360
[ 1806.712687][T24285]  ? __lock_acquire+0x6b5/0x2cf0
[ 1806.712715][T24285]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1806.712773][T24285]  ? __fget_files+0x2a/0x420
[ 1806.712794][T24285]  ? __fget_files+0x3a6/0x420
[ 1806.712824][T24285]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1806.712850][T24285]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1806.712882][T24285]  ? __pfx_ksys_write+0x10/0x10
[ 1806.712922][T24285]  do_syscall_64+0xe2/0xf80
[ 1806.712952][T24285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1806.712972][T24285]  ? trace_irq_disable+0x37/0x100
[ 1806.713000][T24285]  ? clear_bhb_loop+0x60/0xb0
[ 1806.713025][T24285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1806.713047][T24285] RIP: 0033:0x7fed0e62aeb9
[ 1806.713068][T24285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1806.713087][T24285] RSP: 002b:00007fed0c886028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1806.713111][T24285] RAX: ffffffffffffffda RBX: 00007fed0e8a5fa0 RCX: 00007fed0e62aeb9
[ 1806.713127][T24285] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1806.713141][T24285] RBP: 00007fed0c886090 R08: 0000000000000000 R09: 0000000000000000
[ 1806.713154][T24285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1806.713168][T24285] R13: 00007fed0e8a6038 R14: 00007fed0e8a5fa0 R15: 00007fffdb8911a8
[ 1806.713201][T24285]  </TASK>
[ 1806.784236][ T5784] usb 9-1: USB disconnect, device number 69
[ 1808.361263][T24307] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5996'.
[ 1808.619339][T24307] netlink: 7064 bytes leftover after parsing attributes in process `syz.8.5996'.
[ 1808.619380][T24307] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1809.383930][T24319] FAULT_INJECTION: forcing a failure.
[ 1809.383930][T24319] name failslab, interval 1, probability 0, space 0, times 0
[ 1809.384019][T24319] CPU: 1 UID: 0 PID: 24319 Comm: syz.7.5999 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1809.384051][T24319] Tainted: [L]=SOFTLOCKUP
[ 1809.384059][T24319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1809.384073][T24319] Call Trace:
[ 1809.384083][T24319]  <TASK>
[ 1809.384093][T24319]  dump_stack_lvl+0xe8/0x150
[ 1809.384129][T24319]  should_fail_ex+0x46b/0x600
[ 1809.384157][T24319]  ? __alloc_skb+0x1d7/0x390
[ 1809.384190][T24319]  should_failslab+0xa8/0x100
[ 1809.384224][T24319]  ? __alloc_skb+0x1d7/0x390
[ 1809.384254][T24319]  kmem_cache_alloc_node_noprof+0x8a/0x6d0
[ 1809.384285][T24319]  ? __local_bh_enable_ip+0x1c2/0x2b0
[ 1809.384312][T24319]  ? __alloc_skb+0x193/0x390
[ 1809.384345][T24319]  __alloc_skb+0x1d7/0x390
[ 1809.384391][T24319]  netlink_sendmsg+0x5d4/0xb40
[ 1809.384423][T24319]  ? irqentry_exit+0x59c/0x620
[ 1809.384459][T24319]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1809.384504][T24319]  sock_write_iter+0x509/0x550
[ 1809.384535][T24319]  ? __pfx_sock_write_iter+0x10/0x10
[ 1809.384585][T24319]  vfs_write+0x629/0xba0
[ 1809.384622][T24319]  ? __pfx_vfs_write+0x10/0x10
[ 1809.384661][T24319]  ? __fget_files+0x2a/0x420
[ 1809.384691][T24319]  ksys_write+0x156/0x270
[ 1809.384722][T24319]  ? __pfx_ksys_write+0x10/0x10
[ 1809.384761][T24319]  do_syscall_64+0xe2/0xf80
[ 1809.384789][T24319]  ? rcu_is_watching+0x15/0xb0
[ 1809.384816][T24319]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1809.384838][T24319]  ? clear_bhb_loop+0x60/0xb0
[ 1809.384865][T24319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1809.384887][T24319] RIP: 0033:0x7fed0e62aeb9
[ 1809.384908][T24319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1809.384927][T24319] RSP: 002b:00007fed0c844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1809.384951][T24319] RAX: ffffffffffffffda RBX: 00007fed0e8a6180 RCX: 00007fed0e62aeb9
[ 1809.384968][T24319] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006
[ 1809.384982][T24319] RBP: 00007fed0c844090 R08: 0000000000000000 R09: 0000000000000000
[ 1809.384996][T24319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1809.385010][T24319] R13: 00007fed0e8a6218 R14: 00007fed0e8a6180 R15: 00007fffdb8911a8
[ 1809.385045][T24319]  </TASK>
[ 1809.967014][T24314] pim6reg1: entered promiscuous mode
[ 1809.967045][T24314] pim6reg1: entered allmulticast mode
[ 1810.031724][T24316] loop8: detected capacity change from 0 to 8
[ 1810.033007][T24316] Dev loop8: unable to read RDB block 8
[ 1810.033053][T24316]  loop8: unable to read partition table
[ 1810.033322][T24316] loop8: partition table beyond EOD, truncated
[ 1810.033342][T24316] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1810.056027][T23581] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[ 1810.215931][T23581] usb 10-1: Using ep0 maxpacket: 32
[ 1810.247505][T23581] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1810.269820][T23581] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1810.269854][T23581] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1810.269876][T23581] usb 10-1: Product: syz
[ 1810.269889][T23581] usb 10-1: Manufacturer: syz
[ 1810.269903][T23581] usb 10-1: SerialNumber: syz
[ 1810.322164][T23581] usb 10-1: config 0 descriptor??
[ 1810.359475][T23581] cdc_ether 10-1:0.0: skipping garbage
[ 1810.359503][T23581] usb 10-1: bad CDC descriptors
[ 1810.361286][T23581] usb 10-1: unsupported MDLM descriptors
[ 1810.724911][T24329] FAULT_INJECTION: forcing a failure.
[ 1810.724911][T24329] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1810.724940][T24329] CPU: 1 UID: 0 PID: 24329 Comm: syz.8.6004 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1810.724959][T24329] Tainted: [L]=SOFTLOCKUP
[ 1810.724964][T24329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1810.724972][T24329] Call Trace:
[ 1810.724977][T24329]  <TASK>
[ 1810.724983][T24329]  dump_stack_lvl+0xe8/0x150
[ 1810.725004][T24329]  should_fail_ex+0x46b/0x600
[ 1810.725021][T24329]  _copy_from_user+0x2d/0xb0
[ 1810.725038][T24329]  ___sys_sendmsg+0x1c6/0x360
[ 1810.725052][T24329]  ? __lock_acquire+0x6b5/0x2cf0
[ 1810.725069][T24329]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1810.725100][T24329]  ? __fget_files+0x2a/0x420
[ 1810.725124][T24329]  ? __fget_files+0x3a6/0x420
[ 1810.725140][T24329]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1810.725155][T24329]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1810.725173][T24329]  ? __pfx_ksys_write+0x10/0x10
[ 1810.725195][T24329]  do_syscall_64+0xe2/0xf80
[ 1810.725211][T24329]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1810.725222][T24329]  ? trace_irq_disable+0x37/0x100
[ 1810.725237][T24329]  ? clear_bhb_loop+0x60/0xb0
[ 1810.725252][T24329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1810.725263][T24329] RIP: 0033:0x7fd80f65aeb9
[ 1810.725276][T24329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1810.725287][T24329] RSP: 002b:00007fd80d8b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1810.725301][T24329] RAX: ffffffffffffffda RBX: 00007fd80f8d5fa0 RCX: 00007fd80f65aeb9
[ 1810.725311][T24329] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[ 1810.725319][T24329] RBP: 00007fd80d8b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1810.725326][T24329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1810.725334][T24329] R13: 00007fd80f8d6038 R14: 00007fd80f8d5fa0 R15: 00007ffd61fe86c8
[ 1810.725352][T24329]  </TASK>
[ 1810.905962][T23581] usb 7-1: new high-speed USB device number 75 using dummy_hcd
[ 1811.073464][T23581] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1811.073502][T23581] usb 7-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[ 1811.073516][T23581] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1811.089359][T23581] usb 7-1: config 0 descriptor??
[ 1811.226035][T14690] usb 9-1: new low-speed USB device number 70 using dummy_hcd
[ 1811.394908][T14690] usb 9-1: config 0 has an invalid interface number: 153 but max is 0
[ 1811.394942][T14690] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1811.394964][T14690] usb 9-1: config 0 has no interface number 0
[ 1811.395059][T14690] usb 9-1: config 0 interface 153 has no altsetting 0
[ 1811.443719][T14690] usb 9-1: string descriptor 0 read error: -22
[ 1811.444244][T14690] usb 9-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[ 1811.444781][T14690] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1811.492983][T14690] usb 9-1: config 0 descriptor??
[ 1811.562286][T14690] uvcvideo 9-1:0.153: probe with driver uvcvideo failed with error -22
[ 1811.658875][T15404] usb 10-1: USB disconnect, device number 47
[ 1811.721873][ T5868] usb 9-1: USB disconnect, device number 70
[ 1811.754608][T23581] usbhid 7-1:0.0: can't add hid device: -71
[ 1811.754815][T23581] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1811.783924][T23581] usb 7-1: USB disconnect, device number 75
[ 1812.176096][T23581] usb 10-1: new full-speed USB device number 48 using dummy_hcd
[ 1812.336726][T23581] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1812.336758][T23581] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1812.336815][T23581] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[ 1812.336864][T23581] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1812.336890][T23581] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1812.383136][T24343] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1812.419725][T23581] hub 10-1:1.0: bad descriptor, ignoring hub
[ 1812.419767][T23581] hub 10-1:1.0: probe with driver hub failed with error -5
[ 1812.420445][T23581] cdc_wdm 10-1:1.0: skipping garbage
[ 1812.420456][T23581] cdc_wdm 10-1:1.0: skipping garbage
[ 1812.483423][T23581] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1812.483451][T23581] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1812.766790][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1812.766823][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1812.871630][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[ 1812.871664][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[ 1812.997386][T15404] usb 10-1: USB disconnect, device number 48
[ 1813.006132][ T5949] usb 9-1: new high-speed USB device number 71 using dummy_hcd
[ 1813.288430][ T5949] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1813.288461][ T5949] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00
[ 1813.288476][ T5949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1813.293500][ T5949] usb 9-1: config 0 descriptor??
[ 1813.381120][T24364] FAULT_INJECTION: forcing a failure.
[ 1813.381120][T24364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1813.381183][T24364] CPU: 1 UID: 0 PID: 24364 Comm: syz.6.6016 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1813.381216][T24364] Tainted: [L]=SOFTLOCKUP
[ 1813.381224][T24364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1813.381238][T24364] Call Trace:
[ 1813.381247][T24364]  <TASK>
[ 1813.381256][T24364]  dump_stack_lvl+0xe8/0x150
[ 1813.381293][T24364]  should_fail_ex+0x46b/0x600
[ 1813.381322][T24364]  _copy_from_user+0x2d/0xb0
[ 1813.381352][T24364]  ___sys_sendmsg+0x1c6/0x360
[ 1813.381384][T24364]  ? __lock_acquire+0x6b5/0x2cf0
[ 1813.381414][T24364]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1813.381442][T24364]  ? finish_task_switch+0x23c/0x920
[ 1813.381471][T24364]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1813.381514][T24364]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1813.381570][T24364]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1813.381597][T24364]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1813.381632][T24364]  ? rcu_is_watching+0x15/0xb0
[ 1813.381673][T24364]  do_syscall_64+0xe2/0xf80
[ 1813.381700][T24364]  ? rcu_is_watching+0x15/0xb0
[ 1813.381726][T24364]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1813.381748][T24364]  ? clear_bhb_loop+0x60/0xb0
[ 1813.381775][T24364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1813.381797][T24364] RIP: 0033:0x7f8a7fbcaeb9
[ 1813.381817][T24364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1813.381838][T24364] RSP: 002b:00007f8a7dde4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1813.381863][T24364] RAX: ffffffffffffffda RBX: 00007f8a7fe46180 RCX: 00007f8a7fbcaeb9
[ 1813.381880][T24364] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 1813.381895][T24364] RBP: 00007f8a7dde4090 R08: 0000000000000000 R09: 0000000000000000
[ 1813.381909][T24364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1813.381923][T24364] R13: 00007f8a7fe46218 R14: 00007f8a7fe46180 R15: 00007ffef052fd98
[ 1813.381958][T24364]  </TASK>
[ 1814.074870][T14690] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1814.387599][T14690] usb 1-1: Using ep0 maxpacket: 16
[ 1814.396327][T14690] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1814.396359][T14690] usb 1-1: config 0 has no interface number 0
[ 1814.396411][T14690] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1814.396440][T14690] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1814.396481][T14690] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1814.396504][T14690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1814.418693][T14690] usb 1-1: config 0 descriptor??
[ 1814.429071][ T5949] corsair-psu 0003:1B1C:1C1E.0019: item fetching failed at offset 2/5
[ 1814.439971][ T5949] corsair-psu 0003:1B1C:1C1E.0019: probe with driver corsair-psu failed with error -22
[ 1814.697822][ T5949] usb 9-1: USB disconnect, device number 71
[ 1814.893161][T24373] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6019'.
[ 1815.077116][T24360] netlink: 'syz.0.6015': attribute type 11 has an invalid length.
[ 1815.133488][T14690] uclogic 0003:28BD:0071.001A: pen parameters not found
[ 1815.133508][T14690] uclogic 0003:28BD:0071.001A: interface is invalid, ignoring
[ 1815.215334][ T5868] usb 1-1: USB disconnect, device number 84
[ 1815.236007][ T5949] usb 8-1: new low-speed USB device number 46 using dummy_hcd
[ 1815.334583][T15404] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 1815.390499][ T5949] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[ 1815.390532][ T5949] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1815.390553][ T5949] usb 8-1: config 0 has no interface number 0
[ 1815.390587][ T5949] usb 8-1: config 0 interface 153 has no altsetting 0
[ 1815.395481][ T5949] usb 8-1: string descriptor 0 read error: -22
[ 1815.398143][ T5949] usb 8-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[ 1815.398177][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1815.433166][ T5949] usb 8-1: config 0 descriptor??
[ 1815.497907][T15404] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1815.497949][T15404] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1815.497990][T15404] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1815.498014][T15404] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1815.504633][ T5949] uvcvideo 8-1:0.153: probe with driver uvcvideo failed with error -22
[ 1815.564521][T24379] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1815.610366][T15404] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1815.683394][ T5949] usb 8-1: USB disconnect, device number 46
[ 1816.620956][T24395] FAULT_INJECTION: forcing a failure.
[ 1816.620956][T24395] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1816.621489][T24395] CPU: 0 UID: 0 PID: 24395 Comm: syz.6.6027 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1816.621511][T24395] Tainted: [L]=SOFTLOCKUP
[ 1816.621516][T24395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1816.621523][T24395] Call Trace:
[ 1816.621528][T24395]  <TASK>
[ 1816.621534][T24395]  dump_stack_lvl+0xe8/0x150
[ 1816.621557][T24395]  should_fail_ex+0x46b/0x600
[ 1816.621573][T24395]  _copy_from_user+0x2d/0xb0
[ 1816.621594][T24395]  core_sys_select+0x57a/0xc30
[ 1816.621621][T24395]  ? __pfx_core_sys_select+0x10/0x10
[ 1816.621652][T24395]  ? __pfx_set_user_sigmask+0x10/0x10
[ 1816.621664][T24395]  ? rt_mutex_slowunlock+0x1cb/0x300
[ 1816.621678][T24395]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1816.621695][T24395]  __se_sys_pselect6+0x267/0x320
[ 1816.621715][T24395]  ? __pfx___se_sys_pselect6+0x10/0x10
[ 1816.621732][T24395]  ? __pfx_ksys_write+0x10/0x10
[ 1816.621751][T24395]  ? __x64_sys_pselect6+0x21/0xf0
[ 1816.621769][T24395]  do_syscall_64+0xe2/0xf80
[ 1816.621787][T24395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1816.621806][T24395]  ? trace_irq_disable+0x37/0x100
[ 1816.621832][T24395]  ? clear_bhb_loop+0x60/0xb0
[ 1816.621858][T24395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1816.621878][T24395] RIP: 0033:0x7f8a7fbcaeb9
[ 1816.621899][T24395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1816.621917][T24395] RSP: 002b:00007f8a7de05028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[ 1816.621932][T24395] RAX: ffffffffffffffda RBX: 00007f8a7fe46090 RCX: 00007f8a7fbcaeb9
[ 1816.621942][T24395] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040
[ 1816.621950][T24395] RBP: 00007f8a7de05090 R08: 0000000000000000 R09: 0000000000000000
[ 1816.621958][T24395] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[ 1816.621966][T24395] R13: 00007f8a7fe46128 R14: 00007f8a7fe46090 R15: 00007ffef052fd98
[ 1816.621985][T24395]  </TASK>
[ 1816.647218][T24397] Unsupported ieee802154 address type: 0
[ 1816.661127][T24397] fuse: Bad value for 'group_id'
[ 1816.661149][T24397] fuse: Bad value for 'group_id'
[ 1816.766082][ T5949] usb 10-1: USB disconnect, device number 49
[ 1817.061159][T24401] FAULT_INJECTION: forcing a failure.
[ 1817.061159][T24401] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1817.061198][T24401] CPU: 0 UID: 0 PID: 24401 Comm: syz.0.6029 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1817.061224][T24401] Tainted: [L]=SOFTLOCKUP
[ 1817.061231][T24401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1817.061241][T24401] Call Trace:
[ 1817.061249][T24401]  <TASK>
[ 1817.061256][T24401]  dump_stack_lvl+0xe8/0x150
[ 1817.061287][T24401]  should_fail_ex+0x46b/0x600
[ 1817.061322][T24401]  _copy_to_user+0x31/0xb0
[ 1817.061347][T24401]  simple_read_from_buffer+0xe1/0x170
[ 1817.061377][T24401]  proc_fail_nth_read+0x1be/0x230
[ 1817.061402][T24401]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1817.061425][T24401]  ? rw_verify_area+0x2ac/0x4e0
[ 1817.061446][T24401]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1817.061468][T24401]  vfs_read+0x212/0xa70
[ 1817.061498][T24401]  ? __pfx_vfs_read+0x10/0x10
[ 1817.061521][T24401]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1817.061546][T24401]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1817.061569][T24401]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1817.061593][T24401]  ? mutex_lock_nested+0x152/0x1d0
[ 1817.061612][T24401]  ? fdget_pos+0x252/0x320
[ 1817.061639][T24401]  ksys_read+0x156/0x270
[ 1817.061661][T24401]  ? __pfx_filldir+0x10/0x10
[ 1817.061686][T24401]  ? __pfx_ksys_read+0x10/0x10
[ 1817.061723][T24401]  do_syscall_64+0xe2/0xf80
[ 1817.061745][T24401]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1817.061766][T24401]  ? trace_irq_disable+0x37/0x100
[ 1817.061788][T24401]  ? clear_bhb_loop+0x60/0xb0
[ 1817.061813][T24401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1817.061833][T24401] RIP: 0033:0x7fc256feb78e
[ 1817.061852][T24401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1817.061869][T24401] RSP: 002b:00007fc255264fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1817.061892][T24401] RAX: ffffffffffffffda RBX: 00007fc2552656c0 RCX: 00007fc256feb78e
[ 1817.061908][T24401] RDX: 000000000000000f RSI: 00007fc2552650a0 RDI: 0000000000000004
[ 1817.061922][T24401] RBP: 00007fc255265090 R08: 0000000000000000 R09: 0000000000000000
[ 1817.061935][T24401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1817.061948][T24401] R13: 00007fc2572a6128 R14: 00007fc2572a6090 R15: 00007fff00062788
[ 1817.061983][T24401]  </TASK>
[ 1826.292574][T24462] netlink: 'syz.0.6049': attribute type 23 has an invalid length.
[ 1826.292602][T24462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6049'.
[ 1826.652829][T24471] loop4: detected capacity change from 0 to 524287936
[ 1826.978270][ T5949] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 1827.132775][ T5868] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[ 1827.153256][ T5949] usb 1-1: Using ep0 maxpacket: 32
[ 1827.177822][ T5949] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[ 1827.177856][ T5949] usb 1-1: config 0 has no interface number 0
[ 1827.177910][ T5949] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1827.184995][ T5949] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1827.185029][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1827.185051][ T5949] usb 1-1: Product: syz
[ 1827.185066][ T5949] usb 1-1: Manufacturer: syz
[ 1827.185083][ T5949] usb 1-1: SerialNumber: syz
[ 1827.258554][ T5949] usb 1-1: config 0 descriptor??
[ 1827.273450][ T5949] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1827.273492][ T5949] em28xx 1-1:0.132: Video interface 132 found:
[ 1827.306439][ T5868] usb 10-1: Using ep0 maxpacket: 16
[ 1827.819155][ T5868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1827.819195][ T5868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1827.819240][ T5868] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[ 1827.819263][ T5868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1827.917084][ T5868] usb 10-1: config 0 descriptor??
[ 1828.119093][ T5949] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[ 1828.191245][ T5949] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[ 1828.191285][ T5949] em28xx 1-1:0.132: board has no eeprom
[ 1828.245923][ T5949] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1828.245959][ T5949] em28xx 1-1:0.132: analog set to bulk mode.
[ 1828.246750][T12384] em28xx 1-1:0.132: Registering V4L2 extension
[ 1828.279888][ T5949] usb 1-1: USB disconnect, device number 85
[ 1828.282347][ T5949] em28xx 1-1:0.132: Disconnecting em28xx
[ 1828.419839][T24488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1828.420532][T24488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1828.716397][ T5868] usbhid 10-1:0.0: can't add hid device: -71
[ 1828.716545][ T5868] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1828.744890][ T5868] usb 10-1: USB disconnect, device number 50
[ 1828.896298][T12384] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[ 1828.896328][T12384] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[ 1828.896342][T12384] em28xx 1-1:0.132: No AC97 audio processor
[ 1828.961589][T12384] usb 1-1: Decoder not found
[ 1828.961612][T12384] em28xx 1-1:0.132: failed to create media graph
[ 1828.961696][T12384] em28xx 1-1:0.132: V4L2 device video103 deregistered
[ 1828.986002][ T9526] usb 7-1: new low-speed USB device number 76 using dummy_hcd
[ 1829.003079][T12384] em28xx 1-1:0.132: Remote control support is not available for this card.
[ 1829.003130][ T5949] em28xx 1-1:0.132: Closing input extension
[ 1829.009031][ T5949] em28xx 1-1:0.132: Freeing device
[ 1829.137944][ T9526] usb 7-1: config 0 has an invalid interface number: 153 but max is 0
[ 1829.137969][ T9526] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1829.137981][ T9526] usb 7-1: config 0 has no interface number 0
[ 1829.138001][ T9526] usb 7-1: config 0 interface 153 has no altsetting 0
[ 1829.140996][ T9526] usb 7-1: string descriptor 0 read error: -22
[ 1829.141100][ T9526] usb 7-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[ 1829.141115][ T9526] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1829.145108][ T9526] usb 7-1: config 0 descriptor??
[ 1829.176053][ T9526] uvcvideo 7-1:0.153: probe with driver uvcvideo failed with error -22
[ 1829.306234][ T5949] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[ 1829.354011][ T9526] usb 7-1: USB disconnect, device number 76
[ 1829.465258][ T5949] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1829.465288][ T5949] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1829.465346][ T5949] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1829.465372][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1829.509091][ T5949] usb 1-1: config 0 descriptor??
[ 1829.514926][ T5949] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1829.514984][ T5949] dvb-usb: bulk message failed: -22 (3/0)
[ 1829.539458][ T5949] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1829.540627][ T5949] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1829.540692][ T5949] usb 1-1: media controller created
[ 1829.544981][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1829.583807][ T5949] dvb-usb: bulk message failed: -22 (6/0)
[ 1829.583974][ T5949] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1829.589042][ T5949] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input74
[ 1829.617884][ T5949] dvb-usb: schedule remote query interval to 150 msecs.
[ 1829.617911][ T5949] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1829.788007][ T5949] dvb-usb: bulk message failed: -22 (1/0)
[ 1829.788080][ T5949] dvb-usb: error while querying for an remote control event.
[ 1829.947230][ T5949] dvb-usb: bulk message failed: -22 (1/0)
[ 1829.947270][ T5949] dvb-usb: error while querying for an remote control event.
[ 1830.024889][ T9526] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[ 1830.147955][T24520] FAULT_INJECTION: forcing a failure.
[ 1830.147955][T24520] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1830.147992][T24520] CPU: 0 UID: 0 PID: 24520 Comm: syz.8.6065 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1830.148020][T24520] Tainted: [L]=SOFTLOCKUP
[ 1830.148027][T24520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1830.148041][T24520] Call Trace:
[ 1830.148050][T24520]  <TASK>
[ 1830.148060][T24520]  dump_stack_lvl+0xe8/0x150
[ 1830.148098][T24520]  should_fail_ex+0x46b/0x600
[ 1830.148129][T24520]  _copy_from_user+0x2d/0xb0
[ 1830.148159][T24520]  io_unregister_pbuf_ring+0x11a/0x480
[ 1830.148203][T24520]  ? __pfx_io_unregister_pbuf_ring+0x10/0x10
[ 1830.148237][T24520]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1830.148267][T24520]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1830.148297][T24520]  ? mutex_lock_nested+0x152/0x1d0
[ 1830.148320][T24520]  ? __se_sys_io_uring_register+0x17a/0x1210
[ 1830.148353][T24520]  __se_sys_io_uring_register+0x995/0x1210
[ 1830.148389][T24520]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[ 1830.148416][T24520]  ? ksys_write+0x248/0x270
[ 1830.148449][T24520]  ? rcu_is_watching+0x15/0xb0
[ 1830.148491][T24520]  do_syscall_64+0xe2/0xf80
[ 1830.148519][T24520]  ? rcu_is_watching+0x15/0xb0
[ 1830.148546][T24520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1830.148568][T24520]  ? clear_bhb_loop+0x60/0xb0
[ 1830.148595][T24520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1830.148617][T24520] RIP: 0033:0x7fd80f65aeb9
[ 1830.148637][T24520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1830.148657][T24520] RSP: 002b:00007fd80d874028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 1830.148682][T24520] RAX: ffffffffffffffda RBX: 00007fd80f8d6180 RCX: 00007fd80f65aeb9
[ 1830.148698][T24520] RDX: 0000200000000300 RSI: 0000000000000017 RDI: 0000000000000008
[ 1830.148712][T24520] RBP: 00007fd80d874090 R08: 0000000000000000 R09: 0000000000000000
[ 1830.148727][T24520] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[ 1830.148740][T24520] R13: 00007fd80f8d6218 R14: 00007fd80f8d6180 R15: 00007ffd61fe86c8
[ 1830.148778][T24520]  </TASK>
[ 1830.937597][ T9526] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1830.937630][ T9526] usb 10-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[ 1830.937645][ T9526] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1830.951128][ T9526] usb 10-1: config 0 descriptor??
[ 1830.965275][ T5949] dvb-usb: bulk message failed: -22 (1/0)
[ 1830.965318][ T5949] dvb-usb: error while querying for an remote control event.
[ 1831.056321][T24513] ubi31: attaching mtd0
[ 1831.127329][T12384] dvb-usb: bulk message failed: -22 (1/0)
[ 1831.127369][T12384] dvb-usb: error while querying for an remote control event.
[ 1831.310617][ T5949] dvb-usb: bulk message failed: -22 (1/0)
[ 1831.310654][ T5949] dvb-usb: error while querying for an remote control event.
[ 1831.391204][T24513] ubi31: scanning is finished
[ 1831.391232][T24513] ubi31: empty MTD device detected
[ 1831.479231][ T5949] dvb-usb: bulk message failed: -22 (1/0)
[ 1831.479272][ T5949] dvb-usb: error while querying for an remote control event.
[ 1831.546074][ T5868] usb 9-1: new full-speed USB device number 72 using dummy_hcd
[ 1831.735242][ T9526] usbhid 10-1:0.0: can't add hid device: -71
[ 1831.735346][ T9526] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1831.746008][ T5949] dvb-usb: bulk message failed: -22 (1/0)
[ 1831.746044][ T5949] dvb-usb: error while querying for an remote control event.
[ 1831.750446][ T5868] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1831.750466][ T5868] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1831.750498][ T5868] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[ 1831.750526][ T5868] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1831.750540][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1831.763462][ T9526] usb 10-1: USB disconnect, device number 51
[ 1831.824574][T24524] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 1831.834473][ T5868] hub 9-1:1.0: bad descriptor, ignoring hub
[ 1831.834501][ T5868] hub 9-1:1.0: probe with driver hub failed with error -5
[ 1831.835042][ T5868] cdc_wdm 9-1:1.0: skipping garbage
[ 1831.835051][ T5868] cdc_wdm 9-1:1.0: skipping garbage
[ 1831.865710][ T5868] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1831.865733][ T5868] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1831.926023][T12384] dvb-usb: bulk message failed: -22 (1/0)
[ 1831.926059][T12384] dvb-usb: error while querying for an remote control event.
[ 1832.096385][T12384] dvb-usb: bulk message failed: -22 (1/0)
[ 1832.096421][T12384] dvb-usb: error while querying for an remote control event.
[ 1832.174993][T12384] usb 1-1: USB disconnect, device number 86
[ 1832.190731][ T9526] usb 9-1: USB disconnect, device number 72
[ 1832.323163][T12384] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1833.027275][T24513] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1833.441624][T24551] netlink: 324 bytes leftover after parsing attributes in process `syz.8.6073'.
[ 1833.948917][T24559] program syz.0.6077 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1834.045960][ T5868] usb 7-1: new high-speed USB device number 77 using dummy_hcd
[ 1834.407080][ T5868] usb 7-1: too many configurations: 102, using maximum allowed: 8
[ 1834.431439][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1834.431480][ T5868] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1834.437572][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1834.437631][ T5868] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1834.464776][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1834.464819][ T5868] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1834.516777][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1834.516821][ T5868] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1834.520554][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1834.520623][ T5868] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1834.527428][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1834.527475][ T5868] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1834.541732][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1834.541797][ T5868] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1834.543217][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1834.543274][ T5868] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1834.546528][ T5868] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1834.546560][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1834.546581][ T5868] usb 7-1: SerialNumber: syz
[ 1834.813648][ T5868] usb 7-1: bad CDC descriptors
[ 1834.896315][ T5868] usb 7-1: USB disconnect, device number 77
[ 1835.476018][T24365] usb 8-1: new full-speed USB device number 47 using dummy_hcd
[ 1835.726980][T24580] fuse: Unknown parameter 'fd00000000000000000005'
[ 1836.178643][T24365] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1836.178676][T24365] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1836.180256][T24365] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1836.180286][T24365] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1836.180309][T24365] usb 8-1: SerialNumber: syz
[ 1836.214939][T24365] usb 8-1: 0:2 : does not exist
[ 1836.583533][T24597] netlink: 324 bytes leftover after parsing attributes in process `syz.9.6088'.
[ 1837.893701][T24571] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[ 1837.915770][ T5949] usb 8-1: USB disconnect, device number 47
[ 1840.156847][T23201] Bluetooth: hci4: command 0x0406 tx timeout
[ 1840.255037][T24634] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6101'.
[ 1840.419935][T24635] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6101'.
[ 1844.440342][   T37] kauditd_printk_skb: 13 callbacks suppressed
[ 1844.440364][   T37] audit: type=1326 audit(1770257752.355:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24652 comm="syz.7.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0e62aeb9 code=0x7fc00000
[ 1844.538941][   T37] audit: type=1326 audit(1770257752.455:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24652 comm="syz.7.6106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fed0e624cd7 code=0x7fc00000
[ 1844.846603][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6111'.
[ 1844.847239][T24665] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[ 1846.012581][T24365] usb 10-1: new full-speed USB device number 52 using dummy_hcd
[ 1846.920712][T24365] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1846.921502][T24365] usb 10-1: not running at top speed; connect to a high speed hub
[ 1846.923079][T24365] usb 10-1: config 208 has an invalid interface number: 115 but max is 0
[ 1846.923107][T24365] usb 10-1: config 208 has no interface number 0
[ 1846.923144][T24365] usb 10-1: config 208 interface 115 has no altsetting 0
[ 1846.993574][T24365] usb 10-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice= 4.a3
[ 1846.993612][T24365] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1846.993635][T24365] usb 10-1: Manufacturer: 骖踈湥ꆘک☁㕦⏨縁Ꭵ㊹ꢏ骿糖跏饻疪긼틃腑髞늀枞땁硯䨺Ꮖ⏈刀
[ 1846.993657][T24365] usb 10-1: SerialNumber: syz
[ 1848.648453][   T37] audit: type=1326 audit(1770257756.565:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24688 comm="syz.7.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0e62aeb9 code=0x7ffc0000
[ 1848.648517][   T37] audit: type=1326 audit(1770257756.565:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24688 comm="syz.7.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0e62aeb9 code=0x7ffc0000
[ 1848.649745][   T37] audit: type=1326 audit(1770257756.565:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24688 comm="syz.7.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fed0e62aeb9 code=0x7ffc0000
[ 1848.649799][   T37] audit: type=1326 audit(1770257756.565:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24688 comm="syz.7.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0e62aeb9 code=0x7ffc0000
[ 1848.649847][   T37] audit: type=1326 audit(1770257756.565:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24688 comm="syz.7.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0e62aeb9 code=0x7ffc0000
[ 1848.776336][T24365] smsusb:smsusb_probe: board id=8, interface number 115
[ 1848.796304][T24365] usb 10-1: USB disconnect, device number 52
[ 1850.505973][ T9526] usb 8-1: new full-speed USB device number 48 using dummy_hcd
[ 1851.264898][ T9526] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1851.264930][ T9526] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1851.288118][ T9526] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1851.288150][ T9526] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1851.288170][ T9526] usb 8-1: SerialNumber: syz
[ 1851.366381][ T9526] usb 8-1: 0:2 : does not exist
[ 1851.748259][T24713] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[ 1851.754055][T10124] usb 8-1: USB disconnect, device number 48
[ 1852.003711][T24749] FAULT_INJECTION: forcing a failure.
[ 1852.003711][T24749] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1852.003764][T24749] CPU: 1 UID: 0 PID: 24749 Comm: syz.0.6141 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1852.003796][T24749] Tainted: [L]=SOFTLOCKUP
[ 1852.003805][T24749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1852.003818][T24749] Call Trace:
[ 1852.003828][T24749]  <TASK>
[ 1852.003839][T24749]  dump_stack_lvl+0xe8/0x150
[ 1852.003876][T24749]  should_fail_ex+0x46b/0x600
[ 1852.003906][T24749]  _copy_from_user+0x2d/0xb0
[ 1852.003936][T24749]  __x64_sys_clock_adjtime+0x11e/0x340
[ 1852.003966][T24749]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1852.003998][T24749]  ? __pfx___x64_sys_clock_adjtime+0x10/0x10
[ 1852.004022][T24749]  ? rt_mutex_slowunlock+0x1cb/0x300
[ 1852.004070][T24749]  ? __pfx_ksys_write+0x10/0x10
[ 1852.004113][T24749]  do_syscall_64+0xe2/0xf80
[ 1852.004142][T24749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1852.004164][T24749]  ? trace_irq_disable+0x37/0x100
[ 1852.004193][T24749]  ? clear_bhb_loop+0x60/0xb0
[ 1852.004220][T24749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1852.004242][T24749] RIP: 0033:0x7fc25702aeb9
[ 1852.004263][T24749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1852.004283][T24749] RSP: 002b:00007fc255286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[ 1852.004308][T24749] RAX: ffffffffffffffda RBX: 00007fc2572a5fa0 RCX: 00007fc25702aeb9
[ 1852.004325][T24749] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 00000000ffffffd3
[ 1852.004340][T24749] RBP: 00007fc255286090 R08: 0000000000000000 R09: 0000000000000000
[ 1852.004354][T24749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1852.004368][T24749] R13: 00007fc2572a6038 R14: 00007fc2572a5fa0 R15: 00007fff00062788
[ 1852.004404][T24749]  </TASK>
[ 1853.865143][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.870842][ T9526] usb 8-1: new high-speed USB device number 49 using dummy_hcd
[ 1854.018879][ T9526] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1854.018932][ T9526] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 1854.018960][ T9526] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1854.024936][ T9526] usb 8-1: config 0 descriptor??
[ 1854.641150][ T5868] usb 10-1: new full-speed USB device number 53 using dummy_hcd
[ 1854.663275][ T9526] lg-g15 0003:046D:C222.001B: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.7-1/input0
[ 1854.688788][ T9526] usb 8-1: USB disconnect, device number 49
[ 1854.808884][ T5868] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1854.808937][ T5868] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1854.808995][ T5868] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[ 1854.809055][ T5868] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1854.809080][ T5868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1854.825897][T24773] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1854.847629][ T5868] hub 10-1:1.0: bad descriptor, ignoring hub
[ 1854.847668][ T5868] hub 10-1:1.0: probe with driver hub failed with error -5
[ 1854.848549][ T5868] cdc_wdm 10-1:1.0: skipping garbage
[ 1854.848563][ T5868] cdc_wdm 10-1:1.0: skipping garbage
[ 1854.866987][ T5868] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1854.867010][ T5868] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1854.966594][T24791] fido_id[24791]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[ 1855.114131][T24797] FAULT_INJECTION: forcing a failure.
[ 1855.114131][T24797] name failslab, interval 1, probability 0, space 0, times 0
[ 1855.114175][T24797] CPU: 0 UID: 0 PID: 24797 Comm: syz.8.6162 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1855.114206][T24797] Tainted: [L]=SOFTLOCKUP
[ 1855.114213][T24797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1855.114227][T24797] Call Trace:
[ 1855.114235][T24797]  <TASK>
[ 1855.114245][T24797]  dump_stack_lvl+0xe8/0x150
[ 1855.114281][T24797]  should_fail_ex+0x46b/0x600
[ 1855.114309][T24797]  should_failslab+0xa8/0x100
[ 1855.114342][T24797]  __kmalloc_noprof+0xdf/0x7c0
[ 1855.114370][T24797]  ? kfree+0x4d/0x8f0
[ 1855.114392][T24797]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1855.114419][T24797]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1855.114444][T24797]  ? tomoyo_domain+0xd8/0x130
[ 1855.114472][T24797]  ? tomoyo_path_number_perm+0x219/0x630
[ 1855.114502][T24797]  tomoyo_path_number_perm+0x246/0x630
[ 1855.114536][T24797]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1855.114565][T24797]  ? __lock_acquire+0x6b5/0x2cf0
[ 1855.114595][T24797]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1855.114662][T24797]  ? __fget_files+0x2a/0x420
[ 1855.114685][T24797]  ? __fget_files+0x2a/0x420
[ 1855.114703][T24797]  ? __fget_files+0x3a6/0x420
[ 1855.114722][T24797]  ? __fget_files+0x2a/0x420
[ 1855.114746][T24797]  security_file_ioctl+0xc3/0x2a0
[ 1855.114790][T24797]  __se_sys_ioctl+0x47/0x170
[ 1855.114820][T24797]  do_syscall_64+0xe2/0xf80
[ 1855.114850][T24797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1855.114870][T24797]  ? trace_irq_disable+0x37/0x100
[ 1855.114898][T24797]  ? clear_bhb_loop+0x60/0xb0
[ 1855.114922][T24797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1855.114942][T24797] RIP: 0033:0x7fd80f65aeb9
[ 1855.114962][T24797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1855.114981][T24797] RSP: 002b:00007fd80d8b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1855.115006][T24797] RAX: ffffffffffffffda RBX: 00007fd80f8d5fa0 RCX: 00007fd80f65aeb9
[ 1855.115022][T24797] RDX: 0000200000000180 RSI: 00000000c0585605 RDI: 0000000000000003
[ 1855.115036][T24797] RBP: 00007fd80d8b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1855.115050][T24797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1855.115063][T24797] R13: 00007fd80f8d6038 R14: 00007fd80f8d5fa0 R15: 00007ffd61fe86c8
[ 1855.115099][T24797]  </TASK>
[ 1855.115108][T24797] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1855.227657][T15404] usb 10-1: USB disconnect, device number 53
[ 1856.538294][T24828] loop4: detected capacity change from 0 to 524287936
[ 1857.131409][   T37] audit: type=1326 audit(1770257765.045:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24838 comm="syz.9.6179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f514c60aeb9 code=0x0
[ 1857.225984][ T5868] usb 7-1: new full-speed USB device number 78 using dummy_hcd
[ 1857.396991][ T5868] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1857.397021][ T5868] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1857.397074][ T5868] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[ 1857.397101][ T5868] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1857.397115][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1857.403037][T24833] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1857.418835][ T5868] hub 7-1:1.0: bad descriptor, ignoring hub
[ 1857.418878][ T5868] hub 7-1:1.0: probe with driver hub failed with error -5
[ 1857.419804][ T5868] cdc_wdm 7-1:1.0: skipping garbage
[ 1857.419819][ T5868] cdc_wdm 7-1:1.0: skipping garbage
[ 1857.466029][ T5868] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1857.466052][ T5868] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1857.486294][T24840] mmap: syz.0.6180 (24840): VmData 37724160 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data.
[ 1857.697631][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1857.697664][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1857.697958][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1857.697980][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1857.698234][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1857.698255][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1857.698505][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1857.698525][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1857.698775][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1857.698795][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1857.699048][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1857.699068][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1857.699304][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1857.699325][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1857.699575][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1857.699594][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1857.699846][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1857.699866][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1857.700096][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[ 1857.700115][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[ 1858.001896][T24862] FAULT_INJECTION: forcing a failure.
[ 1858.001896][T24862] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1858.001936][T24862] CPU: 0 UID: 0 PID: 24862 Comm: syz.8.6184 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1858.001964][T24862] Tainted: [L]=SOFTLOCKUP
[ 1858.001971][T24862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1858.001983][T24862] Call Trace:
[ 1858.001991][T24862]  <TASK>
[ 1858.001999][T24862]  dump_stack_lvl+0xe8/0x150
[ 1858.002030][T24862]  should_fail_ex+0x46b/0x600
[ 1858.002053][T24862]  _copy_from_user+0x2d/0xb0
[ 1858.002077][T24862]  __sys_bpf+0x229/0x920
[ 1858.002103][T24862]  ? __pfx___sys_bpf+0x10/0x10
[ 1858.002124][T24862]  ? rt_mutex_slowunlock+0x1cb/0x300
[ 1858.002158][T24862]  ? ksys_write+0x248/0x270
[ 1858.002182][T24862]  ? __pfx_ksys_write+0x10/0x10
[ 1858.002211][T24862]  __x64_sys_bpf+0x7c/0x90
[ 1858.002233][T24862]  do_syscall_64+0xe2/0xf80
[ 1858.002255][T24862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1858.002271][T24862]  ? trace_irq_disable+0x37/0x100
[ 1858.002293][T24862]  ? clear_bhb_loop+0x60/0xb0
[ 1858.002314][T24862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1858.002331][T24862] RIP: 0033:0x7fd80f65aeb9
[ 1858.002348][T24862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1858.002363][T24862] RSP: 002b:00007fd80d895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1858.002383][T24862] RAX: ffffffffffffffda RBX: 00007fd80f8d6090 RCX: 00007fd80f65aeb9
[ 1858.002395][T24862] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[ 1858.002407][T24862] RBP: 00007fd80d895090 R08: 0000000000000000 R09: 0000000000000000
[ 1858.002418][T24862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1858.002429][T24862] R13: 00007fd80f8d6128 R14: 00007fd80f8d6090 R15: 00007ffd61fe86c8
[ 1858.002459][T24862]  </TASK>
[ 1858.247776][T24868] FAULT_INJECTION: forcing a failure.
[ 1858.247776][T24868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1858.247818][T24868] CPU: 0 UID: 0 PID: 24868 Comm: syz.9.6186 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1858.247848][T24868] Tainted: [L]=SOFTLOCKUP
[ 1858.247857][T24868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1858.247869][T24868] Call Trace:
[ 1858.247878][T24868]  <TASK>
[ 1858.247887][T24868]  dump_stack_lvl+0xe8/0x150
[ 1858.247934][T24868]  should_fail_ex+0x46b/0x600
[ 1858.247964][T24868]  _copy_from_user+0x2d/0xb0
[ 1858.247993][T24868]  ___sys_sendmsg+0x1c6/0x360
[ 1858.248015][T24868]  ? __lock_acquire+0x6b5/0x2cf0
[ 1858.248045][T24868]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1858.248101][T24868]  ? __fget_files+0x2a/0x420
[ 1858.248121][T24868]  ? __fget_files+0x3a6/0x420
[ 1858.248152][T24868]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1858.248180][T24868]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1858.248213][T24868]  ? __pfx_ksys_write+0x10/0x10
[ 1858.248250][T24868]  do_syscall_64+0xe2/0xf80
[ 1858.248284][T24868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1858.248304][T24868]  ? trace_irq_disable+0x37/0x100
[ 1858.248328][T24868]  ? clear_bhb_loop+0x60/0xb0
[ 1858.248353][T24868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1858.248373][T24868] RIP: 0033:0x7f514c60aeb9
[ 1858.248394][T24868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1858.248414][T24868] RSP: 002b:00007f514a866028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1858.248439][T24868] RAX: ffffffffffffffda RBX: 00007f514c885fa0 RCX: 00007f514c60aeb9
[ 1858.248456][T24868] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[ 1858.248470][T24868] RBP: 00007f514a866090 R08: 0000000000000000 R09: 0000000000000000
[ 1858.248485][T24868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1858.248497][T24868] R13: 00007f514c886038 R14: 00007f514c885fa0 R15: 00007ffeed11c2a8
[ 1858.248531][T24868]  </TASK>
[ 1859.178700][T24891] netlink: 324 bytes leftover after parsing attributes in process `syz.7.6195'.
[ 1859.239756][T24893] netlink: 260 bytes leftover after parsing attributes in process `syz.9.6197'.
[ 1859.325961][T15404] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1859.475936][T15404] usb 1-1: Using ep0 maxpacket: 16
[ 1859.481815][T15404] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1859.481850][T15404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1859.481872][T15404] usb 1-1: Product: syz
[ 1859.481888][T15404] usb 1-1: Manufacturer: syz
[ 1859.481902][T15404] usb 1-1: SerialNumber: syz
[ 1859.536798][T15404] usb 1-1: config 0 descriptor??
[ 1859.559134][T15404] visor 1-1:0.0: Sony Clie 3.5 converter detected
[ 1859.762929][T15404] usb 1-1: clie_3_5_startup: get config number bad return length: 0
[ 1859.763101][T15404] visor 1-1:0.0: probe with driver visor failed with error -5
[ 1859.830183][T15404] usb 7-1: USB disconnect, device number 78
[ 1859.972480][T24893] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1860.056003][ T5949] usb 1-1: USB disconnect, device number 87
[ 1860.195392][T24893] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1861.967149][T23201] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1861.972291][T23201] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1861.974086][T23201] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1861.977553][T23201] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1861.978371][T23201] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1862.029975][ T5868] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1862.366952][ T5868] usb 1-1: Using ep0 maxpacket: 16
[ 1862.369383][ T5868] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[ 1862.369431][ T5868] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1862.369480][ T5868] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1862.371051][ T5868] usb 1-1: New USB device found, idVendor=0525, idProduct=84a1, bcdDevice= 0.40
[ 1862.371080][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1862.371100][ T5868] usb 1-1: SerialNumber: syz
[ 1862.433280][T24927] FAULT_INJECTION: forcing a failure.
[ 1862.433280][T24927] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1862.433318][T24927] CPU: 1 UID: 0 PID: 24927 Comm: syz.6.6206 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1862.433345][T24927] Tainted: [L]=SOFTLOCKUP
[ 1862.433353][T24927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1862.433364][T24927] Call Trace:
[ 1862.433372][T24927]  <TASK>
[ 1862.433381][T24927]  dump_stack_lvl+0xe8/0x150
[ 1862.433412][T24927]  should_fail_ex+0x46b/0x600
[ 1862.433438][T24927]  _copy_from_user+0x2d/0xb0
[ 1862.433464][T24927]  ___sys_sendmsg+0x1c6/0x360
[ 1862.433483][T24927]  ? __lock_acquire+0x6b5/0x2cf0
[ 1862.433509][T24927]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1862.433561][T24927]  ? __fget_files+0x2a/0x420
[ 1862.433581][T24927]  ? __fget_files+0x3a6/0x420
[ 1862.433610][T24927]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1862.433633][T24927]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1862.433729][T24927]  ? __pfx_ksys_write+0x10/0x10
[ 1862.433763][T24927]  do_syscall_64+0xe2/0xf80
[ 1862.433788][T24927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1862.433807][T24927]  ? trace_irq_disable+0x37/0x100
[ 1862.433832][T24927]  ? clear_bhb_loop+0x60/0xb0
[ 1862.433855][T24927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1862.433875][T24927] RIP: 0033:0x7f8a7fbcaeb9
[ 1862.433892][T24927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1862.433910][T24927] RSP: 002b:00007f8a7dde4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1862.433932][T24927] RAX: ffffffffffffffda RBX: 00007f8a7fe46180 RCX: 00007f8a7fbcaeb9
[ 1862.433947][T24927] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006
[ 1862.433959][T24927] RBP: 00007f8a7dde4090 R08: 0000000000000000 R09: 0000000000000000
[ 1862.433972][T24927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1862.433984][T24927] R13: 00007f8a7fe46218 R14: 00007f8a7fe46180 R15: 00007ffef052fd98
[ 1862.434015][T24927]  </TASK>
[ 1862.697686][ T5868] cdc_acm 1-1:1.0: skipping garbage
[ 1862.960327][ T5868] usb 1-1: USB disconnect, device number 88
[ 1863.632982][T24938] netlink: 324 bytes leftover after parsing attributes in process `syz.7.6211'.
[ 1863.936013][T10124] usb 1-1: new full-speed USB device number 89 using dummy_hcd
[ 1864.076001][T23201] Bluetooth: hci6: command tx timeout
[ 1864.098389][T10124] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1864.098420][T10124] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1864.098467][T10124] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[ 1864.098496][T10124] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1864.098509][T10124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1864.107763][T24940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1864.314448][T10124] hub 1-1:1.0: bad descriptor, ignoring hub
[ 1864.314689][T10124] hub 1-1:1.0: probe with driver hub failed with error -5
[ 1864.325603][T10124] cdc_wdm 1-1:1.0: skipping garbage
[ 1864.325905][T10124] cdc_wdm 1-1:1.0: skipping garbage
[ 1865.026441][T10124] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1865.026468][T10124] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1865.255918][    C1] wdm_int_callback: 8288 callbacks suppressed
[ 1865.255948][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1865.255967][    C1] wdm_int_callback: 8288 callbacks suppressed
[ 1865.255982][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1865.256226][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1865.256249][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1865.256489][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1865.256510][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1865.256736][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1865.256754][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1865.256978][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1865.256995][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1865.257221][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1865.257240][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1865.258654][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1865.258673][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1865.258897][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1865.258923][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1865.259143][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1865.259160][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1865.259416][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[ 1865.259433][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[ 1866.156263][T23201] Bluetooth: hci6: command tx timeout
[ 1866.639168][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[ 1867.109697][T15404] usb 1-1: USB disconnect, device number 89
[ 1867.195644][   T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1867.730165][T24920] chnl_net:caif_netlink_parms(): no params data found
[ 1867.849122][T24976] netlink: 324 bytes leftover after parsing attributes in process `syz.9.6224'.
[ 1868.026093][T15404] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1868.051231][   T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1868.103098][T24980] netlink: 'syz.9.6226': attribute type 3 has an invalid length.
[ 1868.176384][T15404] usb 1-1: Using ep0 maxpacket: 32
[ 1868.178836][T15404] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1868.178868][T15404] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1868.178890][T15404] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1868.178913][T15404] usb 1-1: config 1 has no interface number 0
[ 1868.178965][T15404] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1868.178993][T15404] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1868.179039][T15404] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1868.179063][T15404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1868.464236][T23201] Bluetooth: hci6: command tx timeout
[ 1868.500175][T15404] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[ 1869.059155][T15404] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[ 1869.352448][   T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1870.084440][ T9526] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[ 1870.273968][T23201] Bluetooth: hci2: adv larger than maximum supported
[ 1870.476193][T23201] Bluetooth: hci6: command tx timeout
[ 1870.713903][   T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1870.819815][T25009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1870.840655][T24920] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1870.841954][T24920] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1870.853205][T24920] bridge_slave_0: entered allmulticast mode
[ 1870.868560][T24920] bridge_slave_0: entered promiscuous mode
[ 1870.902002][T24920] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1870.904339][T24920] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1870.904580][T24920] bridge_slave_1: entered allmulticast mode
[ 1870.919632][T24920] bridge_slave_1: entered promiscuous mode
[ 1870.953089][T25009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1871.026096][T10124] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[ 1871.186105][T10124] usb 10-1: Using ep0 maxpacket: 32
[ 1871.190551][T10124] usb 10-1: config 0 has an invalid interface number: 51 but max is 0
[ 1871.190584][T10124] usb 10-1: config 0 has no interface number 0
[ 1871.194348][T10124] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1871.194381][T10124] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1871.194403][T10124] usb 10-1: Product: syz
[ 1871.194419][T10124] usb 10-1: Manufacturer: syz
[ 1871.194435][T10124] usb 10-1: SerialNumber: syz
[ 1871.220595][T10124] usb 10-1: config 0 descriptor??
[ 1871.330102][T10124] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1871.349998][T24920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1871.549709][T24920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1871.642694][T10124] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1871.839045][T10124] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1871.992902][    C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1872.006645][T10124] usb 10-1: USB disconnect, device number 54
[ 1872.053574][T10124] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1872.060683][T25011] loop4: detected capacity change from 0 to 524287936
[ 1872.166376][T10124] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1872.210797][T10124] quatech2 10-1:0.51: device disconnected
[ 1872.367664][T25011] Dev loop4: unable to read RDB block 8
[ 1872.367840][T25011]  loop4: unable to read partition table
[ 1872.368122][T25011] loop_reread_partitions: partition scan of loop4 (3�����) failed (rc=-5)
[ 1872.446620][T24920] team0: Port device team_slave_0 added
[ 1872.450851][T24920] team0: Port device team_slave_1 added
[ 1873.446193][T24920] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1873.446208][T24920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1873.446226][T24920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1875.080841][T24920] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1875.081297][T24920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1875.081332][T24920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1875.405339][T23201] Bluetooth: hci1: adv larger than maximum supported
[ 1877.324027][T24920] hsr_slave_0: entered promiscuous mode
[ 1877.334993][T24920] hsr_slave_1: entered promiscuous mode
[ 1877.345590][T24920] debugfs: 'hsr0' already exists in 'hsr'
[ 1877.345624][T24920] Cannot create hsr debugfs directory
[ 1877.400663][   T13] bridge_slave_1: left allmulticast mode
[ 1877.400697][   T13] bridge_slave_1: left promiscuous mode
[ 1877.400933][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1877.493348][T25058] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6246'.
[ 1878.405190][   T13] bridge_slave_0: left allmulticast mode
[ 1878.405226][   T13] bridge_slave_0: left promiscuous mode
[ 1878.405606][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1879.982655][T25063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1879.983646][T25063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1881.163119][T13619] Bluetooth: hci1: command 0x0406 tx timeout
[ 1881.591472][T15375] usb 1-1: USB disconnect, device number 90
[ 1881.595258][T15375] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[ 1881.601958][T13619] Bluetooth: hci2: adv larger than maximum supported
[ 1881.605974][T10124] usb 7-1: new high-speed USB device number 79 using dummy_hcd
[ 1881.836156][T10124] usb 7-1: Using ep0 maxpacket: 8
[ 1881.841949][T10124] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 1881.841983][T10124] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1881.842005][T10124] usb 7-1: Product: syz
[ 1881.842020][T10124] usb 7-1: Manufacturer: syz
[ 1881.842036][T10124] usb 7-1: SerialNumber: syz
[ 1881.883823][T10124] usb 7-1: config 0 descriptor??
[ 1882.531720][T10124] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 1883.584151][T15375] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[ 1883.800686][T15375] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1883.800734][T15375] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00
[ 1883.800760][T15375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1883.814897][T15375] usb 8-1: config 0 descriptor??
[ 1884.236707][T15375] corsair-psu 0003:1B1C:1C1E.001C: item fetching failed at offset 2/5
[ 1884.237699][T15375] corsair-psu 0003:1B1C:1C1E.001C: probe with driver corsair-psu failed with error -22
[ 1884.275906][T10124] gspca_sonixj: i2c_w8 err -71
[ 1884.389490][T10124] sonixj 7-1:0.0: probe with driver sonixj failed with error -71
[ 1884.393276][T10124] usb 7-1: USB disconnect, device number 79
[ 1886.390805][   T13] team0: Port device geneve0 removed
[ 1886.537316][T15375] usb 7-1: new full-speed USB device number 80 using dummy_hcd
[ 1886.700340][T15375] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1886.700372][T15375] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1886.701559][T15375] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1886.701586][T15375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1886.701604][T15375] usb 7-1: SerialNumber: syz
[ 1886.755177][T15375] usb 7-1: 0:2 : does not exist
[ 1886.938692][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1887.016903][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1887.069321][   T13] bond0 (unregistering): Released all slaves
[ 1887.186755][T25097] kthread_run failed with err -4
[ 1887.282887][T10124] usb 8-1: USB disconnect, device number 50
[ 1887.304127][T25121] FAULT_INJECTION: forcing a failure.
[ 1887.304127][T25121] name failslab, interval 1, probability 0, space 0, times 0
[ 1887.304169][T25121] CPU: 0 UID: 0 PID: 25121 Comm: syz.0.6267 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1887.304200][T25121] Tainted: [L]=SOFTLOCKUP
[ 1887.304210][T25121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1887.304229][T25121] Call Trace:
[ 1887.304238][T25121]  <TASK>
[ 1887.304248][T25121]  dump_stack_lvl+0xe8/0x150
[ 1887.304283][T25121]  should_fail_ex+0x46b/0x600
[ 1887.304313][T25121]  should_failslab+0xa8/0x100
[ 1887.304347][T25121]  __kmalloc_noprof+0xdf/0x7c0
[ 1887.304375][T25121]  ? kfree+0x4d/0x8f0
[ 1887.304400][T25121]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1887.304429][T25121]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1887.304453][T25121]  ? tomoyo_domain+0xd8/0x130
[ 1887.304481][T25121]  ? tomoyo_path_number_perm+0x219/0x630
[ 1887.304509][T25121]  tomoyo_path_number_perm+0x246/0x630
[ 1887.304538][T25121]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1887.304566][T25121]  ? __lock_acquire+0x6b5/0x2cf0
[ 1887.304592][T25121]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1887.304669][T25121]  ? __fget_files+0x2a/0x420
[ 1887.304694][T25121]  ? __fget_files+0x2a/0x420
[ 1887.304712][T25121]  ? __fget_files+0x3a6/0x420
[ 1887.304729][T25121]  ? __fget_files+0x2a/0x420
[ 1887.304753][T25121]  security_file_ioctl+0xc3/0x2a0
[ 1887.304788][T25121]  __se_sys_ioctl+0x47/0x170
[ 1887.304817][T25121]  do_syscall_64+0xe2/0xf80
[ 1887.304846][T25121]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1887.304867][T25121]  ? trace_irq_disable+0x37/0x100
[ 1887.304895][T25121]  ? clear_bhb_loop+0x60/0xb0
[ 1887.304923][T25121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1887.304944][T25121] RIP: 0033:0x7fc25702aeb9
[ 1887.304965][T25121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1887.304983][T25121] RSP: 002b:00007fc255286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1887.305008][T25121] RAX: ffffffffffffffda RBX: 00007fc2572a5fa0 RCX: 00007fc25702aeb9
[ 1887.305024][T25121] RDX: 0000200000000000 RSI: 00000000c038563c RDI: 0000000000000003
[ 1887.305038][T25121] RBP: 00007fc255286090 R08: 0000000000000000 R09: 0000000000000000
[ 1887.305052][T25121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1887.305065][T25121] R13: 00007fc2572a6038 R14: 00007fc2572a5fa0 R15: 00007fff00062788
[ 1887.305101][T25121]  </TASK>
[ 1887.305211][T25121] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1887.659292][T25119] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[ 1887.787037][T15404] usb 7-1: USB disconnect, device number 80
[ 1887.975960][T15375] usb 8-1: new low-speed USB device number 51 using dummy_hcd
[ 1888.143631][T15375] usb 8-1: config 0 has an invalid interface number: 153 but max is 0
[ 1888.143664][T15375] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1888.143687][T15375] usb 8-1: config 0 has no interface number 0
[ 1888.143721][T15375] usb 8-1: config 0 interface 153 has no altsetting 0
[ 1888.195958][T15375] usb 8-1: string descriptor 0 read error: -22
[ 1888.226642][T15375] usb 8-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[ 1888.226676][T15375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1888.258183][T15375] usb 8-1: config 0 descriptor??
[ 1888.289685][T15375] uvcvideo 8-1:0.153: probe with driver uvcvideo failed with error -22
[ 1888.479787][T15375] usb 8-1: USB disconnect, device number 51
[ 1888.556239][   T37] audit: type=1326 audit(1770257796.475:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25144 comm="syz.6.6275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a7fbcaeb9 code=0x0
[ 1888.619696][   T37] audit: type=1326 audit(1770257796.535:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25144 comm="syz.6.6275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a7fbcaeb9 code=0x0
[ 1888.708722][T25151] FAULT_INJECTION: forcing a failure.
[ 1888.708722][T25151] name failslab, interval 1, probability 0, space 0, times 0
[ 1888.708763][T25151] CPU: 0 UID: 0 PID: 25151 Comm: syz.6.6275 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1888.708791][T25151] Tainted: [L]=SOFTLOCKUP
[ 1888.708799][T25151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1888.708810][T25151] Call Trace:
[ 1888.708819][T25151]  <TASK>
[ 1888.708828][T25151]  dump_stack_lvl+0xe8/0x150
[ 1888.708862][T25151]  should_fail_ex+0x46b/0x600
[ 1888.708886][T25151]  ? getname_flags+0xb7/0x540
[ 1888.708917][T25151]  should_failslab+0xa8/0x100
[ 1888.708949][T25151]  ? getname_flags+0xb7/0x540
[ 1888.708977][T25151]  kmem_cache_alloc_noprof+0x83/0x6a0
[ 1888.709015][T25151]  getname_flags+0xb7/0x540
[ 1888.709051][T25151]  __x64_sys_mkdir+0x5d/0x80
[ 1888.709081][T25151]  do_syscall_64+0xe2/0xf80
[ 1888.709112][T25151]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1888.709134][T25151]  ? trace_irq_disable+0x37/0x100
[ 1888.709162][T25151]  ? clear_bhb_loop+0x60/0xb0
[ 1888.709189][T25151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1888.709211][T25151] RIP: 0033:0x7f8a7fbcaeb9
[ 1888.709232][T25151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1888.709251][T25151] RSP: 002b:00007f8a7dde4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 1888.709275][T25151] RAX: ffffffffffffffda RBX: 00007f8a7fe46180 RCX: 00007f8a7fbcaeb9
[ 1888.709292][T25151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300
[ 1888.709306][T25151] RBP: 00007f8a7dde4090 R08: 0000000000000000 R09: 0000000000000000
[ 1888.709320][T25151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1888.709334][T25151] R13: 00007f8a7fe46218 R14: 00007f8a7fe46180 R15: 00007ffef052fd98
[ 1888.709369][T25151]  </TASK>
[ 1888.834234][T25150] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.6276'.
[ 1889.229828][   T13] C�: left promiscuous mode
[ 1889.716980][T25159] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6277'.
[ 1889.717009][T25159] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6277'.
[ 1894.358120][T25201] netlink: 324 bytes leftover after parsing attributes in process `syz.9.6288'.
[ 1894.556041][T10124] usb 8-1: new full-speed USB device number 52 using dummy_hcd
[ 1894.708676][T10124] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1894.708706][T10124] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1894.708759][T10124] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[ 1894.708806][T10124] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1894.708831][T10124] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1894.774439][T25199] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1894.791354][T10124] hub 8-1:1.0: bad descriptor, ignoring hub
[ 1894.791399][T10124] hub 8-1:1.0: probe with driver hub failed with error -5
[ 1894.792418][T10124] cdc_wdm 8-1:1.0: skipping garbage
[ 1894.792437][T10124] cdc_wdm 8-1:1.0: skipping garbage
[ 1894.815953][T24365] usb 1-1: new low-speed USB device number 91 using dummy_hcd
[ 1894.828715][T10124] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1894.828740][T10124] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1894.974508][T24365] usb 1-1: config 0 has an invalid interface number: 153 but max is 0
[ 1894.974540][T24365] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1894.974561][T24365] usb 1-1: config 0 has no interface number 0
[ 1894.974604][T24365] usb 1-1: config 0 interface 153 has no altsetting 0
[ 1895.005949][T24365] usb 1-1: string descriptor 0 read error: -22
[ 1895.006121][T24365] usb 1-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[ 1895.006148][T24365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1895.044269][T24365] usb 1-1: config 0 descriptor??
[ 1895.071456][T24365] uvcvideo 1-1:0.153: probe with driver uvcvideo failed with error -22
[ 1895.157758][    C0] wdm_int_callback: 3301 callbacks suppressed
[ 1895.157801][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1895.157820][    C0] wdm_int_callback: 3301 callbacks suppressed
[ 1895.157836][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1895.158084][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1895.158108][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1895.279708][ T5868] usb 1-1: USB disconnect, device number 91
[ 1895.301893][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1895.301926][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1895.302183][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1895.302204][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1895.302447][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1895.302469][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1895.302714][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1895.302735][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1895.302982][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1895.303003][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1895.303239][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1895.303259][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1895.303497][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1895.303518][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1895.303781][    C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71
[ 1895.303802][    C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes
[ 1897.190334][T24365] usb 8-1: USB disconnect, device number 52
[ 1898.589056][T25245] FAULT_INJECTION: forcing a failure.
[ 1898.589056][T25245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1898.589100][T25245] CPU: 1 UID: 0 PID: 25245 Comm: syz.7.6300 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1898.589133][T25245] Tainted: [L]=SOFTLOCKUP
[ 1898.589141][T25245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1898.589155][T25245] Call Trace:
[ 1898.589164][T25245]  <TASK>
[ 1898.589174][T25245]  dump_stack_lvl+0xe8/0x150
[ 1898.589211][T25245]  should_fail_ex+0x46b/0x600
[ 1898.589241][T25245]  _copy_from_user+0x2d/0xb0
[ 1898.589269][T25245]  __sys_sendto+0x2ab/0x7d0
[ 1898.589310][T25245]  ? __pfx___sys_sendto+0x10/0x10
[ 1898.589371][T25245]  ? ksys_write+0x248/0x270
[ 1898.589402][T25245]  ? __pfx_ksys_write+0x10/0x10
[ 1898.589437][T25245]  __x64_sys_sendto+0xde/0x100
[ 1898.589474][T25245]  do_syscall_64+0xe2/0xf80
[ 1898.589515][T25245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1898.589536][T25245]  ? trace_irq_disable+0x37/0x100
[ 1898.589565][T25245]  ? clear_bhb_loop+0x60/0xb0
[ 1898.589593][T25245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1898.589616][T25245] RIP: 0033:0x7fed0e62aeb9
[ 1898.589636][T25245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1898.589656][T25245] RSP: 002b:00007fed0c886028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1898.589681][T25245] RAX: ffffffffffffffda RBX: 00007fed0e8a5fa0 RCX: 00007fed0e62aeb9
[ 1898.589697][T25245] RDX: 0000000000000002 RSI: 0000200000000800 RDI: 0000000000000003
[ 1898.589711][T25245] RBP: 00007fed0c886090 R08: 00002000000002c0 R09: 0000000000000010
[ 1898.589726][T25245] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001
[ 1898.589740][T25245] R13: 00007fed0e8a6038 R14: 00007fed0e8a5fa0 R15: 00007fffdb8911a8
[ 1898.589775][T25245]  </TASK>
[ 1899.100936][T25251] netlink: 'syz.6.6302': attribute type 72 has an invalid length.
[ 1899.210793][T25253] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12)
[ 1899.210828][T25253] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1899.214165][T25253] vhci_hcd vhci_hcd.0: Device attached
[ 1899.291374][T25253] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(14)
[ 1899.291407][T25253] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1899.291472][T25253] vhci_hcd vhci_hcd.0: Device attached
[ 1899.291758][T25257] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(17)
[ 1899.291781][T25257] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1899.291833][T25257] vhci_hcd vhci_hcd.0: Device attached
[ 1899.346866][T25253] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(16)
[ 1899.346887][T25253] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1899.346982][T25253] vhci_hcd vhci_hcd.0: Device attached
[ 1899.370609][T25253] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(20)
[ 1899.370637][T25253] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1899.370743][T25253] vhci_hcd vhci_hcd.0: Device attached
[ 1899.433561][T25253] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1899.460380][T25253] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(24)
[ 1899.460413][T25253] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1899.460523][T25253] vhci_hcd vhci_hcd.0: Device attached
[ 1899.461898][T25253] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1899.560275][T14690] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[ 1899.590113][T25266] vhci_hcd: connection closed
[ 1899.602259][T25259] vhci_hcd: connection closed
[ 1899.602424][T25256] vhci_hcd: connection closed
[ 1899.602657][T25254] vhci_hcd: connection reset by peer
[ 1899.623423][T25264] vhci_hcd: connection closed
[ 1899.623582][T25262] vhci_hcd: connection closed
[ 1899.674489][T12460] vhci_hcd vhci_hcd.6: stop threads
[ 1899.674521][T12460] vhci_hcd vhci_hcd.6: release socket
[ 1899.674606][T12460] vhci_hcd vhci_hcd.6: disconnect device
[ 1899.674989][T12460] vhci_hcd vhci_hcd.6: stop threads
[ 1899.675005][T12460] vhci_hcd vhci_hcd.6: release socket
[ 1899.675071][T12460] vhci_hcd vhci_hcd.6: disconnect device
[ 1899.675752][T12460] vhci_hcd vhci_hcd.6: stop threads
[ 1899.680506][T12460] vhci_hcd vhci_hcd.6: release socket
[ 1899.680581][T12460] vhci_hcd vhci_hcd.6: disconnect device
[ 1899.680912][T12460] vhci_hcd vhci_hcd.6: stop threads
[ 1899.680928][T12460] vhci_hcd vhci_hcd.6: release socket
[ 1899.680962][T12460] vhci_hcd vhci_hcd.6: disconnect device
[ 1899.681242][T12460] vhci_hcd vhci_hcd.6: stop threads
[ 1899.681256][T12460] vhci_hcd vhci_hcd.6: release socket
[ 1899.681327][T12460] vhci_hcd vhci_hcd.6: disconnect device
[ 1899.681457][T12460] vhci_hcd vhci_hcd.6: stop threads
[ 1899.681470][T12460] vhci_hcd vhci_hcd.6: release socket
[ 1899.681526][T12460] vhci_hcd vhci_hcd.6: disconnect device
[ 1900.783026][   T13] hsr_slave_0: left promiscuous mode
[ 1900.837300][   T13] hsr_slave_1: left promiscuous mode
[ 1900.838764][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1900.838784][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1900.917130][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1900.917162][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1901.123753][T23201] Bluetooth: hci2: adv larger than maximum supported
[ 1901.164017][   T13] veth1_macvtap: left promiscuous mode
[ 1901.164145][   T13] veth0_macvtap: left promiscuous mode
[ 1901.164490][   T13] veth1_vlan: left promiscuous mode
[ 1901.164580][   T13] veth0_vlan: left promiscuous mode
[ 1904.706890][T14690] vhci_hcd vhci_hcd.6: vhci_device speed not set
[ 1905.397222][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1905.716966][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1906.075610][ T5868] usb usb46-port1: attempt power cycle
[ 1906.701028][ T5868] usb usb46-port1: unable to enumerate USB device
[ 1909.395215][T25311] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.6312'.
[ 1909.725908][T24920] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1909.757458][   T38] INFO: task syz-executor:13127 blocked for more than 143 seconds.
[ 1909.757500][   T38]       Tainted: G             L      syzkaller #0
[ 1909.757514][   T38]       Blocked by coredump.
[ 1909.757522][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1909.757533][   T38] task:syz-executor    state:D stack:22304 pid:13127 tgid:13127 ppid:1      task_flags:0x40054c flags:0x00080003
[ 1909.757606][   T38] Call Trace:
[ 1909.757615][   T38]  <TASK>
[ 1909.757631][   T38]  __schedule+0x1472/0x4fe0
[ 1909.757691][   T38]  ? look_up_lock_class+0x57/0x110
[ 1909.757727][   T38]  ? __pfx___schedule+0x10/0x10
[ 1909.757765][   T38]  ? schedule+0x90/0x360
[ 1909.757797][   T38]  schedule+0x164/0x360
[ 1909.757827][   T38]  schedule_timeout+0xc3/0x2c0
[ 1909.757852][   T38]  ? __lock_acquire+0x6b5/0x2cf0
[ 1909.757881][   T38]  ? __pfx_schedule_timeout+0x10/0x10
[ 1909.757908][   T38]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1909.757952][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1909.757979][   T38]  ? wait_for_completion+0x274/0x5e0
[ 1909.758010][   T38]  wait_for_completion+0x2cc/0x5e0
[ 1909.758053][   T38]  ? __pfx_wait_for_completion+0x10/0x10
[ 1909.758090][   T38]  ? __flush_work+0x104/0xda0
[ 1909.758121][   T38]  __flush_work+0x9e0/0xda0
[ 1909.758144][   T38]  ? __flush_work+0x104/0xda0
[ 1909.758174][   T38]  ? __pfx___flush_work+0x10/0x10
[ 1909.758201][   T38]  ? __pfx_wq_barrier_func+0x10/0x10
[ 1909.758234][   T38]  ? work_grab_pending+0x115/0x990
[ 1909.758269][   T38]  ? __cancel_work_sync+0x5c/0x110
[ 1909.758297][   T38]  __cancel_work_sync+0xbe/0x110
[ 1909.758326][   T38]  hci_cmd_sync_clear+0x30/0x230
[ 1909.758369][   T38]  hci_unregister_dev+0x194/0x5a0
[ 1909.758396][   T38]  vhci_release+0x155/0x1b0
[ 1909.758424][   T38]  ? __pfx_vhci_release+0x10/0x10
[ 1909.758448][   T38]  __fput+0x45e/0xa80
[ 1909.758492][   T38]  task_work_run+0x1d9/0x270
[ 1909.758522][   T38]  ? __pfx_task_work_run+0x10/0x10
[ 1909.758545][   T38]  ? do_exit+0x696/0x2320
[ 1909.758571][   T38]  ? do_exit+0x696/0x2320
[ 1909.758605][   T38]  do_exit+0x69b/0x2320
[ 1909.758636][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1909.758665][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1909.758696][   T38]  ? __pfx_do_exit+0x10/0x10
[ 1909.758722][   T38]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1909.758744][   T38]  ? reacquire_held_locks+0x104/0x190
[ 1909.758772][   T38]  ? rt_spin_lock+0x1e0/0x400
[ 1909.758806][   T38]  do_group_exit+0x21b/0x2d0
[ 1909.758834][   T38]  ? rt_spin_unlock+0x160/0x200
[ 1909.758857][   T38]  get_signal+0x125c/0x1310
[ 1909.758899][   T38]  arch_do_signal_or_restart+0xbc/0x830
[ 1909.758935][   T38]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1909.758973][   T38]  ? ksys_read+0x202/0x270
[ 1909.759007][   T38]  exit_to_user_mode_loop+0x86/0x480
[ 1909.759031][   T38]  ? rcu_is_watching+0x15/0xb0
[ 1909.759064][   T38]  do_syscall_64+0x2b7/0xf80
[ 1909.759093][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1909.759114][   T38]  ? trace_irq_disable+0x37/0x100
[ 1909.759142][   T38]  ? clear_bhb_loop+0x60/0xb0
[ 1909.759171][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1909.759194][   T38] RIP: 0033:0x7f584abdb78e
[ 1909.759215][   T38] RSP: 002b:00007ffe67d4c5b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1909.759237][   T38] RAX: fffffffffffffe00 RBX: 00005555756df500 RCX: 00007f584abdb78e
[ 1909.759265][   T38] RDX: 0000000000000030 RSI: 00007ffe67d4c6b0 RDI: 00000000000000f9
[ 1909.759279][   T38] RBP: 00007ffe67d4c65c R08: 0000000000000000 R09: 0000000000000000
[ 1909.759292][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000277
[ 1909.759306][   T38] R13: 00000000000927c0 R14: 00000000001abeda R15: 00007ffe67d4c6b0
[ 1909.759340][   T38]  </TASK>
[ 1909.759415][   T38] 
[ 1909.759415][   T38] Showing all locks held in the system:
[ 1909.759427][   T38] 4 locks held by kworker/u8:1/13:
[ 1909.759440][   T38]  #0: ffff88801aad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[ 1909.759776][   T38]  #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[ 1909.759843][   T38]  #2: ffffffff8ef2caa0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0
[ 1909.759901][   T38]  #3: ffff888033a1d7b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310
[ 1909.759953][   T38] 1 lock held by khungtaskd/38:
[ 1909.759965][   T38]  #0: ffffffff8dbc77c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1909.760047][   T38] 9 locks held by udevd/5165:
[ 1909.760063][   T38] 2 locks held by getty/5552:
[ 1909.760074][   T38]  #0: ffff88814d24b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1909.760134][   T38]  #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0
[ 1909.760188][   T38] 3 locks held by kworker/u9:4/5805:
[ 1909.760200][   T38]  #0: ffff8880111cc938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[ 1909.760260][   T38]  #1: ffffc90004c4fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[ 1909.760323][   T38]  #2: ffff88807661cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[ 1909.760395][   T38] 2 locks held by syz-executor/24920:
[ 1909.760409][   T38]  #0: ffffffff8ef3b3b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[ 1909.760466][   T38]  #1: ffff88805d5fce98 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: do_setlink+0x3d2/0x4590
[ 1909.760531][   T38] 4 locks held by syz.6.6311/25307:
[ 1909.760544][   T38] 5 locks held by syz.7.6312/25311:
[ 1909.760557][   T38] 2 locks held by syz.0.6314/25317:
[ 1909.760569][   T38]  #0: ffff888025244928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe4/0xe80
[ 1909.760626][   T38]  #1: ffffffff8ef3b3b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[ 1909.760683][   T38] 6 locks held by udevd/25318:
[ 1909.760697][   T38] 
[ 1909.760704][   T38] =============================================
[ 1909.760704][   T38] 
[ 1909.760714][   T38] NMI backtrace for cpu 1
[ 1909.760733][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1909.760761][   T38] Tainted: [L]=SOFTLOCKUP
[ 1909.760770][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1909.760783][   T38] Call Trace:
[ 1909.760793][   T38]  <TASK>
[ 1909.760802][   T38]  dump_stack_lvl+0xe8/0x150
[ 1909.760832][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 1909.760855][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1909.760880][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1909.760906][   T38]  sys_info+0x135/0x170
[ 1909.760938][   T38]  watchdog+0xf90/0xfe0
[ 1909.760974][   T38]  ? watchdog+0x209/0xfe0
[ 1909.761010][   T38]  kthread+0x726/0x8b0
[ 1909.761041][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1909.761069][   T38]  ? __pfx_kthread+0x10/0x10
[ 1909.761092][   T38]  ? rt_spin_unlock+0x14f/0x200
[ 1909.761120][   T38]  ? rt_spin_unlock+0x160/0x200
[ 1909.761140][   T38]  ? __pfx_kthread+0x10/0x10
[ 1909.761167][   T38]  ret_from_fork+0x51b/0xa40
[ 1909.761193][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1909.761214][   T38]  ? __switch_to+0xc82/0x1410
[ 1909.761250][   T38]  ? __pfx_kthread+0x10/0x10
[ 1909.761277][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1909.761327][   T38]  </TASK>
[ 1909.761336][   T38] Sending NMI from CPU 1 to CPUs 0:
[ 1909.761365][    C0] NMI backtrace for cpu 0
[ 1909.761385][    C0] CPU: 0 UID: 0 PID: 25318 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1909.761409][    C0] Tainted: [L]=SOFTLOCKUP
[ 1909.761416][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1909.761426][    C0] RIP: 0010:kasan_check_range+0x187/0x2c0
[ 1909.761454][    C0] Code: 00 00 41 29 ef 4d 01 fb 4d 29 de 4d 89 f4 4d 8d 6c 24 07 4d 85 e4 4d 0f 49 ec 49 c1 ed 03 45 85 ed 74 24 45 31 f6 4f 8b 3c 33 <4d> 85 ff 75 4b 49 83 c6 08 41 ff cd 75 ee 4d 89 cc 4d 29 dc 4d 29
[ 1909.761469][    C0] RSP: 0018:ffffc90005e0fc28 EFLAGS: 00000202
[ 1909.761486][    C0] RAX: ffffffff8252a701 RBX: dffffc0000000001 RCX: ffffffff8252a841
[ 1909.761499][    C0] RDX: 0000000000000001 RSI: 0000000000000138 RDI: ffffc90005e0fcc0
[ 1909.761511][    C0] RBP: 0000000000000000 R08: ffffc90005e0fdf7 R09: 1ffff92000bc1fbe
[ 1909.761522][    C0] R10: dffffc0000000000 R11: fffff52000bc1f98 R12: 0000000000000027
[ 1909.761535][    C0] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000000
[ 1909.761546][    C0] FS:  00007f539f11c880(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000
[ 1909.761561][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1909.761573][    C0] CR2: 00007f539f20a420 CR3: 0000000025e26000 CR4: 00000000003526f0
[ 1909.761591][    C0] Call Trace:
[ 1909.761598][    C0]  <TASK>
[ 1909.761607][    C0]  __asan_memset+0x22/0x50
[ 1909.761628][    C0]  locks_remove_posix+0x121/0x670
[ 1909.761653][    C0]  ? __pfx_locks_remove_posix+0x10/0x10
[ 1909.761675][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1909.761706][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1909.761728][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1909.761749][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1909.761771][    C0]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1909.761789][    C0]  ? reacquire_held_locks+0x104/0x190
[ 1909.761809][    C0]  ? rt_spin_lock+0x1e0/0x400
[ 1909.761827][    C0]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1909.761846][    C0]  ? dnotify_flush+0x1e7/0x5c0
[ 1909.761868][    C0]  filp_flush+0x119/0x190
[ 1909.761887][    C0]  __x64_sys_close+0x74/0x110
[ 1909.761904][    C0]  do_syscall_64+0xe2/0xf80
[ 1909.761925][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1909.761942][    C0]  ? trace_irq_disable+0x37/0x100
[ 1909.761964][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1909.761983][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1909.761999][    C0] RIP: 0033:0x7f539f20a407
[ 1909.762014][    C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1909.762027][    C0] RSP: 002b:00007fffe85d8470 EFLAGS: 00000202 ORIG_RAX: 0000000000000003
[ 1909.762044][    C0] RAX: ffffffffffffffda RBX: 00007f539f11c880 RCX: 00007f539f20a407
[ 1909.762056][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 1909.762066][    C0] RBP: 0000559ea2643910 R08: 0000000000000000 R09: 0000000000000000
[ 1909.762078][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559ea2665f30
[ 1909.762089][    C0] R13: 00007fffe85d8540 R14: 0000000000000000 R15: 0000000000000000
[ 1909.762109][    C0]  </TASK>
[ 1909.762362][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1909.762387][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1909.762415][   T38] Tainted: [L]=SOFTLOCKUP
[ 1909.762424][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1909.762436][   T38] Call Trace:
[ 1909.762445][   T38]  <TASK>
[ 1909.762453][   T38]  vpanic+0x1e0/0x670
[ 1909.762496][   T38]  panic+0xc5/0xd0
[ 1909.762523][   T38]  ? __pfx_panic+0x10/0x10
[ 1909.762563][   T38]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[ 1909.762592][   T38]  watchdog+0xfda/0xfe0
[ 1909.762626][   T38]  ? watchdog+0x209/0xfe0
[ 1909.762665][   T38]  kthread+0x726/0x8b0
[ 1909.762694][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1909.762724][   T38]  ? __pfx_kthread+0x10/0x10
[ 1909.762748][   T38]  ? rt_spin_unlock+0x14f/0x200
[ 1909.762776][   T38]  ? rt_spin_unlock+0x160/0x200
[ 1909.762797][   T38]  ? __pfx_kthread+0x10/0x10
[ 1909.762826][   T38]  ret_from_fork+0x51b/0xa40
[ 1909.762851][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1909.762871][   T38]  ? __switch_to+0xc82/0x1410
[ 1909.762905][   T38]  ? __pfx_kthread+0x10/0x10
[ 1909.762930][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1909.762975][   T38]  </TASK>
[ 1909.763164][   T38] Kernel Offset: disabled