last executing test programs:

35m13.029791034s ago: executing program 32 (id=1250):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f0000002880)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d0077d0dce90e5f4b293d864c3763a1d4fe4b25946342adb03ba38f97ee95ba77916c19005f8a1c2c1b76856e94f8acbab219f9fa477cd67e7a0fe7e2356b65a6e17dd08c2fcac5c05d1015a79904c01664c11a83b7886cf0070daf9b1318e9ff9cbd910b30fb935da2b0db6ecbfa891fdc467f3542aaba77490c7cb6", @ANYRES32], &(0x7f0000003b40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x7e, &(0x7f0000002940)=@string={0x7e, 0x3, "f1173c28ef18229ebc32341704ba4b447b038ae56d09be048eb3580b13230d339eba85ddfdf88f414fdf4d10917a8204405beda780e4916045e54d588caffb126a277d37a365a1db9c8726b062e20a5e21e704d10fa1d6dfc2914959ed125d11ded75c1df14720687b55cd05c04bd6f8e942ed3318ebad30f13f3e7a"}}, {0x4, &(0x7f0000003a40)=@lang_id={0x4, 0x3, 0x3401}}, {0x9e, &(0x7f0000003a80)=@string={0x9e, 0x3, "1cc18b6e3bbcdc8cd1227fc2003be94716bc8ae1f924f4143010b86a67e0e25f9fa4eeb65dd4cb6c282bc81af0a19ee6918991a946cd57c1a35964b888e22d1a0cbaf60ec4174d364b6ba533667091b91a89481d9c00d2effe687c1b82bf22a012f087b9588cac16fceb50b459f1b9c62265d9a5364a663e3c0b0db6bc1ca8e3ac7a7456ff31ed78ca1edc9676828c3cc7a533d61ecdd179543f4f0e"}}]})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r1, r1, 0x0, 0x20000005)
openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000240)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000002c0)={0x0, 0x0}, 0x8)
sendto$inet(r3, 0x0, 0x0, 0x20046f39, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f00000024c0)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000002580)=0x474c, 0x4)
setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f00000025c0)=0x6, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000002600)={0x2, 0x0, @local}, 0x10)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRESOCT, @ANYRES8=r4, @ANYRESOCT=r0, @ANYBLOB='laB}'], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x1, 0x19, &(0x7f0000002740)=ANY=[@ANYBLOB="180000000004000000000000feffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000010000007b8afaff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085008348c0be759ce2963e9464ca00000f000000bf91000000000000b7020000020000008500000084000000b7000000"], &(0x7f0000002840)='syzkaller\x00', 0x5, 0xfffffffffffffea8, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x6, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r0, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4096, 0x707}, {&(0x7f0000000000)=""/135, 0x87}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x0, 0x24}, 0x100)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0)

33m32.240933683s ago: executing program 33 (id=1723):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000200), 0x0, 0x2042)
io_setup(0x10, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
write$P9_RMKNOD(r1, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timer_gettime(r0, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = getpgid(0x0)
r5 = landlock_create_ruleset(&(0x7f0000000100)={0x2832, 0x0, 0x2}, 0x18, 0x0)
syz_clone3(&(0x7f0000000140)={0x800000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58)
landlock_restrict_self(r5, 0x0)
r6 = syz_pidfd_open(r4, 0x0)
pidfd_send_signal(r6, 0x21, 0x0, 0x4)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0x0, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x83, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8dab, 0x4, 0x80200, 0x2, 0x4, 0xe, 0x3, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x7c23, 0x6, 0x6, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x6, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x1, 0x1, 0xffffffff, 0x6, 0x3ff, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x4, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10002, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xfffffffb, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x1, 0x4, 0x4c, 0x2, 0x764, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3d, 0x20000001, 0x8000, 0x5, 0xb6d, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0x80000000, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x1, 0x7fffffff]}, 0x45c)
ioctl$UI_DEV_CREATE(r7, 0x5501)
readv(r7, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)
r8 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x4000)
ioctl$NBD_PRINT_DEBUG(r8, 0xab06)
epoll_create(0x8)

21m7.262109726s ago: executing program 0 (id=6796):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x400000000000009, 0xfffffffffffffff9, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21m7.026272299s ago: executing program 0 (id=6798):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r1 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2e5, 0x0, r0})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_emit_ethernet(0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)

21m5.881444464s ago: executing program 0 (id=6804):
r0 = io_uring_setup(0x7d1, &(0x7f0000000240)={0x0, 0xddf9, 0x100, 0xfffffffe, 0x183})
close_range(r0, r0, 0x0)
ioctl$FE_GET_EVENT(0xffffffffffffffff, 0x80286f4e, &(0x7f00000002c0))
ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000300)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}})

21m5.3172169s ago: executing program 0 (id=6808):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x366, 0x10, &(0x7f0000000440), 0x1dd}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x20, r3, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x48, r7, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @val={0x76, 0x6, {0x81, 0x1, 0x29}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc2}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'})
pwrite64(r0, 0x0, 0x0, 0x10001)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x40000)
r9 = io_uring_setup(0x7fc0, &(0x7f0000000700)={0x0, 0x7, 0x40, 0x0, 0x30d})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000780), 0x0)

21m5.017167566s ago: executing program 0 (id=6810):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x12f, &(0x7f00000000c0)=[{}]})

21m4.82553635s ago: executing program 6 (id=6811):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001100)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[], 0x0)

21m4.594804219s ago: executing program 6 (id=6815):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000240)={0x2, 0x2, 0x5, {0x70, 0x3, 0x3eb5, 0x3}})

21m3.608378376s ago: executing program 6 (id=6818):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000001a2, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)

21m1.656091271s ago: executing program 4 (id=6823):
socket$inet6(0xa, 0x3, 0x8000000003c)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.events\x00', 0x275a, 0x0)
syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c7, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
syz_ublk_setup_queues(r0, r1, 0x0, 0x0, 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3fff, 0xdbc, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94)

21m1.227026751s ago: executing program 0 (id=6824):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r0, 0x402, 0x8000004e)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000700)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000780)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000800), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000840), 0x4000087, 0x2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x368, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x52}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1}, {0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]})

21m1.182245783s ago: executing program 4 (id=6825):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001100)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[], 0x0)

21m0.903525652s ago: executing program 4 (id=6826):
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6)
write(r1, &(0x7f0000000080)='g', 0x1)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x7, 0x3, 0x6, 0x7fff, 0x17, "ee1dd756f560f25a63b2f119c3439425ea59d8"})

21m0.436075161s ago: executing program 4 (id=6827):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0x2a00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x0, 0x0, 0x1, 0xfffffff7}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8)

20m59.597535156s ago: executing program 1 (id=6828):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x366, 0x10, &(0x7f0000000440), 0x1dd}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x20, r3, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x48, r7, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @val={0x76, 0x6, {0x81, 0x1, 0x29}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc2}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'})
pwrite64(r0, 0x0, 0x0, 0x10001)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x40000)
r9 = io_uring_setup(0x7fc0, &(0x7f0000000700)={0x0, 0x7, 0x40, 0x0, 0x30d})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000780), 0x0)

20m59.223501783s ago: executing program 1 (id=6829):
syz_emit_ethernet(0x22, &(0x7f0000000e00)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @private=0xa010100}}}}}, 0x0)

20m59.102551877s ago: executing program 6 (id=6830):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000840)=@ethtool_cmd={0x3a, 0x0, 0x4, 0x0, 0x0, 0xf, 0xd0, 0x0, 0x87, 0x0, 0x80001, 0x0, 0x1, 0x1, 0x0, 0x80000045, [0xb, 0x6]}})

20m58.913334279s ago: executing program 1 (id=6832):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="02120000"], 0x10}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000240), 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect(0x0, 0x5d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d00624"], 0x0)
r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0xc0405627, 0x0)
sendmsg$key(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[], 0x10}}, 0x0)
ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f0000000a00))
sendmsg$key(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020a00"], 0x10}}, 0x0)
close(0x3)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(0xffffffffffffffff, r5, 0x0)

20m58.860264975s ago: executing program 4 (id=6833):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4004840)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x13a8, 0xffffffffffffffff, 0x1})
syz_clone3(0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x40800)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x15, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000640)={0x2, 0x15, @loopback}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
write(r2, &(0x7f0000000800)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c)

20m58.849128611s ago: executing program 6 (id=6834):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
msgctl$MSG_INFO(0x0, 0xc, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x12f, &(0x7f00000000c0)=[{}]})

20m58.426248772s ago: executing program 5 (id=6835):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
syz_emit_vhci(&(0x7f0000000680)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x83, 0x2}, {0x1}}}}, 0xf)

20m57.781760215s ago: executing program 5 (id=6836):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001100)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0)

20m57.718006708s ago: executing program 5 (id=6837):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r0, 0x0, 0x28)
io_setup(0x8, &(0x7f0000000140)=<r1=>0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00')
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}])

20m57.569434502s ago: executing program 4 (id=6838):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f0000000b00)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

20m57.366638183s ago: executing program 5 (id=6839):
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0xfffffffffffffcb9, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "2a995ffbee74ab1b3690842deee3df48f8806827d5c763698c4c288abc85bfcc", "9f6cf565ebbd4ddfc4f9c023b431968db6dbc868705956f8baf975b8cb6e17048850e8e89f732bced1e3baee50e5acb8", "112c482ee3d37cb1a7a31c450e403a6ee32477eaeb41d283c8618b26", {"6652725f56c59b04563b19a79d293550", "25b048c89cb27902d8d629c56b49c550"}}}}}}}, 0x0)

20m57.235179766s ago: executing program 1 (id=6840):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x366, 0x10, &(0x7f0000000440), 0x1dd}, 0x48)
socket$netlink(0x10, 0x3, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x20, r1, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000900)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x48, r5, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @val={0x76, 0x6, {0x81, 0x1, 0x29}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc2}, 0x0)

20m57.01934271s ago: executing program 5 (id=6841):
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x88102, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000006c0)=<r3=>0x0, &(0x7f0000000580)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x2000000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x3c00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4db7, 0x20, 0x2, 0x10008003, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x10, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x200, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x24f, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)

20m56.765531748s ago: executing program 6 (id=6842):
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000480)='0', 0x1)
sendmmsg$unix(r0, &(0x7f0000000500), 0x318, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000540)={0x19980330}, &(0x7f00000005c0)={0x200000, 0x200000, 0x4000000, 0x0, 0x2})

20m56.755048299s ago: executing program 1 (id=6843):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0x2a00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x0, 0x0, 0x1, 0xfffffff7}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8)

20m55.85369853s ago: executing program 5 (id=6844):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800f300", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xfffffeff, 0x3, 0xa21463d, 0x20a4}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
sendto(0xffffffffffffffff, &(0x7f0000000000)="2c000000370005000100000000000000010100000c00010011111111111111110c", 0x21, 0x0, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
io_setup(0x3, &(0x7f0000000300)=<r4=>0x0)
io_submit(r4, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x100, 0x2}, 'syz1\x00', 0x2d})
ioctl$UI_DEV_CREATE(r5, 0x5501)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0)
write(r7, &(0x7f0000000280)='252:0 1', 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000400)={<r8=>r0, 0x48343a01, 0x4, 0x9})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9})
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608})
close_range(r10, 0xffffffffffffffff, 0x0)

20m55.774205152s ago: executing program 1 (id=6845):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @loopback, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ad8efa05fd9614ff"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="8a3d", 0x2}], 0x1)
pipe(&(0x7f0000001200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)

20m36.383178093s ago: executing program 34 (id=6824):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r0, 0x402, 0x8000004e)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000700)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000780)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000800), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000840), 0x4000087, 0x2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x368, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x52}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1}, {0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]})

20m35.518949517s ago: executing program 35 (id=6845):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @loopback, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ad8efa05fd9614ff"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="8a3d", 0x2}], 0x1)
pipe(&(0x7f0000001200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0)

20m35.256651596s ago: executing program 36 (id=6842):
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000480)='0', 0x1)
sendmmsg$unix(r0, &(0x7f0000000500), 0x318, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000540)={0x19980330}, &(0x7f00000005c0)={0x200000, 0x200000, 0x4000000, 0x0, 0x2})

20m35.114605698s ago: executing program 37 (id=6844):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800f300", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b00"/98], 0x68}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xfffffeff, 0x3, 0xa21463d, 0x20a4}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xc0)
sendto(0xffffffffffffffff, &(0x7f0000000000)="2c000000370005000100000000000000010100000c00010011111111111111110c", 0x21, 0x0, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
io_setup(0x3, &(0x7f0000000300)=<r4=>0x0)
io_submit(r4, 0x200001a6, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}])
r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x100, 0x2}, 'syz1\x00', 0x2d})
ioctl$UI_DEV_CREATE(r5, 0x5501)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0)
write(r7, &(0x7f0000000280)='252:0 1', 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000400)={<r8=>r0, 0x48343a01, 0x4, 0x9})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9})
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608})
close_range(r10, 0xffffffffffffffff, 0x0)

20m34.889408675s ago: executing program 38 (id=6838):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f0000000b00)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

13.02969563s ago: executing program 2 (id=12619):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
move_mount(r0, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00')

12.892608575s ago: executing program 2 (id=12620):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

12.762924832s ago: executing program 2 (id=12622):
mknod$loop(&(0x7f0000000240)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(r0, &(0x7f0000002400)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000002480)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000006640)='./file0\x00', 0x80101, 0x101)
dup2(r1, r0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000008940)={0xb56, 0x9, 0x3, 0x8000, 0x5e8})

11.527372735s ago: executing program 2 (id=12630):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
move_mount(r0, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00')

11.459302548s ago: executing program 7 (id=12633):
r0 = socket$inet6(0xa, 0x3, 0x82)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@loopback, @in=@local, 0x0, 0x100, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff3, 0x0, 0x1, 0xfffffffffffffffd}, {0xbad, 0x80000001, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x2b}, 0x2, @in=@empty, 0x3504, 0x1, 0x0, 0x0, 0xffffffff, 0x88, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c)

11.412979671s ago: executing program 3 (id=12634):
set_mempolicy(0x3, 0x0, 0x40)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000640)={0x13, 0x10, 0xfa00, {&(0x7f0000000680), 0xffffffffffffffff, 0x1}}, 0x18)
r0 = socket$kcm(0x11, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000200)=@caif=@dbg={0x25, 0x9, 0xce}, 0x80, 0x0}, 0x88010)

11.313148926s ago: executing program 2 (id=12635):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300))
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f0000000580), 0x0, 0x0, 0x0, &(0x7f00000005c0))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
set_mempolicy(0x4005, &(0x7f0000000640)=0x7e, 0x6)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt(r1, 0x0, 0x483, &(0x7f0000000680), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000700)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r3, &(0x7f0000000780)=0x807, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000980), 0x2, 0x143102)
writev(r4, &(0x7f00000009c0)=[{&(0x7f0000000a00)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

11.299311258s ago: executing program 7 (id=12636):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80)
r0 = socket$kcm(0x1e, 0x4, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, 0x0, 0x0)
r2 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0cc5604, &(0x7f0000000500)={0x2, @sliced={0xfff, [0xf7f0, 0x2, 0x5, 0x10, 0x69c, 0xf70, 0x7, 0x0, 0x7f, 0x5ecc, 0x3, 0x5, 0x2, 0x8, 0x4, 0x7, 0x5, 0x7, 0x9, 0x204, 0x1, 0x3, 0x1, 0x1, 0x7, 0x7, 0xf1, 0x2, 0x0, 0x7, 0xffff, 0xe, 0x4, 0x5, 0x8, 0x9d, 0x5, 0x8, 0x7, 0x8, 0x0, 0x9, 0x1, 0x9, 0x101, 0x8, 0x101, 0xfff], 0x1}})
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0x80000001, 0x4)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x40000)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)=0x3)
r6 = socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10)
syz_usb_connect(0x0, 0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef01"], 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x22000042, 0x1, 0x3}, 0x10)
sendmsg$tipc(r6, &(0x7f00000006c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2002, 0x50000000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040041}, 0x200008c0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[@ANYBLOB="07010008c1010000f402000080000000f10000000900000000000000000000003a6c669c11df00cd66faafa6aa776247ed762079a7db53f59af69c836f53e420653248d82ba9efb4bb65868ebefda6be61dc04be482e3385b3417bd7e9c40600682509e86ff3bb7097f04d5c452abf279df653894e184405cb9f2a8dab1071fbd481af4ba9d3e4b5b78fee569657710926b02f1821eece7d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000572ed53b62ffa7219bcfb9190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00"/664], 0x298)
socket(0x10, 0x80002, 0xfffffffc)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

11.295900936s ago: executing program 3 (id=12637):
r0 = mmap$IORING_OFF_CQ_RING(0x3000, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0x8000000)
munmap$IORING_OFF_SQ_RING(r0, 0x2)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000280)={0x2, "fa02790d2a69a2610f0200000000000000110001000000c642000000677c00"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000340)={0x6, "34e64988e80e0000b56a0011b0d10000802700"})
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xff2e)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000004900), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000004940)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
symlinkat(&(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00')
mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x104000, 0x0)
socket$unix(0x1, 0x3, 0x0)
r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000004980), 0x22242, 0x0)
setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000180)=0x6, 0x4)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000049c0)={{0x100c, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
write$USERIO_CMD_REGISTER(r7, &(0x7f0000004b00), 0x2)
sendmsg$nl_route_sched(r4, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000004d00)=@newqdisc={0x324, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0xfff1, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xa19}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x8, 0x0, 0x4, 0x2, 0x8001, 0x254e000, 0x3}}, {0xa, 0x2, [0x9, 0x7, 0x7]}}, {{0x1c, 0x1, {0x5, 0x6c, 0x6, 0xff, 0x3, 0x8, 0x5, 0x1}}, {0x6, 0x2, [0xb]}}, {{0x1c, 0x1, {0xff, 0x52, 0xc8, 0x351, 0x1, 0x4, 0x6, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x8, 0x6, 0xc, 0x76d, 0x0, 0x6, 0x7, 0xa}}, {0x18, 0x2, [0x3ff, 0x4, 0x4, 0x7, 0x1bb1, 0x6, 0x4, 0x3, 0xe74f, 0x4000]}}, {{0x1c, 0x1, {0x4, 0x9, 0x4, 0x9, 0x2, 0x2, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x6, 0x9, 0x4, 0x125b7859, 0x1, 0x2, 0x3ff, 0x2}}, {0x8, 0x2, [0xb7, 0x4]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_RATE={0x6, 0x5, {0x12, 0xe}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xf, 0x3, 0x7, 0x0, 0x100062ee, 0x8, 0x5}}, {0xe, 0x2, [0x9, 0x83fa, 0x1, 0xff, 0x1c]}}, {{0x1c, 0x1, {0x4, 0x2f, 0x7, 0x62, 0x0, 0x7fffffff, 0x8001, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x1, 0x8, 0xa2, 0x9, 0x0, 0xf6e1, 0x6, 0x4}}, {0xc, 0x2, [0x62, 0x9, 0x5, 0x200]}}, {{0x1c, 0x1, {0x41, 0x5, 0x8, 0xe0e0, 0x1, 0x3, 0x3, 0x5}}, {0xe, 0x2, [0x20, 0x2, 0x9, 0x9, 0x4]}}, {{0x1c, 0x1, {0x6, 0x3, 0x1000, 0x9, 0x0, 0x10000, 0x10000, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x81, 0xff, 0x1, 0x10000, 0x1, 0x3, 0x3, 0x8}}, {0x14, 0x2, [0x1ff, 0x10, 0xfffe, 0x3, 0x3, 0x4, 0x8, 0x1]}}, {{0x1c, 0x1, {0xa, 0xa, 0x3ff, 0x1ff, 0x0, 0x7, 0x8, 0x2}}, {0x8, 0x2, [0xdc2a, 0xfbfd]}}, {{0x1c, 0x1, {0x2, 0xe, 0xf1b, 0x0, 0x2, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x1, 0x9, 0x3]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6a, 0x8, 0x7, 0x2, 0xa9, 0x6, 0x4}}, {0xc, 0x2, [0x2, 0xe, 0x9, 0x63]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x7, [0xc, 0x1, 0x2, 0x48, 0xf, 0x1, 0x9, 0xf, 0x4, 0x2, 0xe, 0x9, 0xe, 0x1, 0xe, 0x7], 0x1, [0x9, 0x8, 0x7f, 0x6, 0x6, 0xde, 0x0, 0xfffe, 0x0, 0x5, 0x2, 0x7ff, 0x8, 0x2, 0x8000, 0x400], [0x9, 0x0, 0x3ff, 0xf, 0x5, 0x101, 0x2, 0x101, 0x3, 0xfffc, 0x0, 0x8, 0xa322, 0x6, 0x1000, 0x87]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x42}]}}]}, 0x324}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004c40)={&(0x7f0000004c80)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x8, &(0x7f0000005040)=ANY=[@ANYBLOB="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", @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r2, @ANYBLOB="2c64656694756c74bfff000000696f6e73000000"], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r8, &(0x7f0000000580)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38d7b98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b3276342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440f97f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb526301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd437497320d383e752dd224aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee660debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6de640bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f2f7ee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc6c9a44c575738725815a9af1ced500", 0x2000, &(0x7f0000002580)={&(0x7f0000002600)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x5286b1c0, 0x4, 0x9, 0x2, 0xfffffffc, 0x0, 0x0, 0x190, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11.081446801s ago: executing program 2 (id=12638):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14)
syz_usb_connect$uac1(0x3, 0x82, &(0x7f00000004c0)=ANY=[@ANYBLOB="120110010000004082050c004000010203010902700003010030050904000000010100000a240105000a000201020904010000010200000904010101010200000724010a08000009240201ae0e87098d09050109000203b8a50725010c08fbff090402"], 0x0)
syz_usb_connect(0x4, 0x5bc, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000c80)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x200, 0x5, 0x5, 0x3, 0x8, 0xc4}, 0xb0, &(0x7f0000000d00)={0x5, 0xf, 0xb0, 0x1, [@generic={0xab, 0x10, 0x4, "3267c91251d256bbd6046dcd710f42c8ac2937326a85f7119de2f9e0323d1c29d6c6ad367473a5a01f3822f8331baf868d98e23145d320eca1e461c93dc25fe6f3b2ae42045d69c72a5e995af9cf71f4c146c7558a100bebbcc4c2de8d123cb354e3e156db87a1c590793b4ea36958013c4a8b3d90d1135d576569ccb4e5bd7e29e37800ecbb0de477b2079c2039925779f52149d4e1f48ca512fc8cdc2e7d12d49ee10fc40e1446"}]}, 0x4, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x409}}, {0xe0, &(0x7f0000000e80)=ANY=[@ANYBLOB="e003c2c316a3e734bf9719bce80ad1a4f0a86af38d514b7e17cb8e0534d8fd7a1d5912523f0ce43565b97fb44f9c783ec0049a8c558d769e3f0263d1759d3feb46c2407862cd77069d5abc928a580ca55a24d2ab7f5b6410c2d2ec204816446cf639b556006ff6f447e6e0e73a55c9914fa4a8210c37672e3180606a62cd09b2b9604373c52efdfcda5466b58e1b226282788a0df7e2c91f0818249c707c0fa7a98dd9da4c224e31363aa5abcca7607ec27463101db6751c53e4527dbb8778ee488c5bc455c5554b9543ac3ad60842213c92076d00cb463ccb1003acdd537bbc"]}]})
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x18)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x76, &(0x7f0000000f80)="1a00000002000000", 0x8)
ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f0000000fc0)={&(0x7f0000001000)=[{0x1, 0x0, 0x3, 0x6, 0x3, 0x7, 0x6, 0x4}, {0x0, 0x0, 0x80, 0xfffffffffffffff7, 0x8, 0xfffffffffffffff8, 0x0, 0x5}], 0x2, 0x38, 0x1, 0x9})
r3 = syz_open_dev$I2C(&(0x7f0000001080), 0x0, 0x0)
preadv(r3, &(0x7f00000010c0)=[{&(0x7f0000001100)=""/276, 0x114}], 0x1, 0x5, 0x7)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x3a)
fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0)
fchdir(r4)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001280)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r6, &(0x7f00000012c0)=0x900, 0x12)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001300), 0x2000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000001340)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'})
write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x1, 0x200, 0x1, 0x1}, 0x1, [0xfa, 0x21, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

10.743067017s ago: executing program 39 (id=12638):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14)
syz_usb_connect$uac1(0x3, 0x82, &(0x7f00000004c0)=ANY=[@ANYBLOB="120110010000004082050c004000010203010902700003010030050904000000010100000a240105000a000201020904010000010200000904010101010200000724010a08000009240201ae0e87098d09050109000203b8a50725010c08fbff090402"], 0x0)
syz_usb_connect(0x4, 0x5bc, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000c80)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x200, 0x5, 0x5, 0x3, 0x8, 0xc4}, 0xb0, &(0x7f0000000d00)={0x5, 0xf, 0xb0, 0x1, [@generic={0xab, 0x10, 0x4, "3267c91251d256bbd6046dcd710f42c8ac2937326a85f7119de2f9e0323d1c29d6c6ad367473a5a01f3822f8331baf868d98e23145d320eca1e461c93dc25fe6f3b2ae42045d69c72a5e995af9cf71f4c146c7558a100bebbcc4c2de8d123cb354e3e156db87a1c590793b4ea36958013c4a8b3d90d1135d576569ccb4e5bd7e29e37800ecbb0de477b2079c2039925779f52149d4e1f48ca512fc8cdc2e7d12d49ee10fc40e1446"}]}, 0x4, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x409}}, {0xe0, &(0x7f0000000e80)=ANY=[@ANYBLOB="e003c2c316a3e734bf9719bce80ad1a4f0a86af38d514b7e17cb8e0534d8fd7a1d5912523f0ce43565b97fb44f9c783ec0049a8c558d769e3f0263d1759d3feb46c2407862cd77069d5abc928a580ca55a24d2ab7f5b6410c2d2ec204816446cf639b556006ff6f447e6e0e73a55c9914fa4a8210c37672e3180606a62cd09b2b9604373c52efdfcda5466b58e1b226282788a0df7e2c91f0818249c707c0fa7a98dd9da4c224e31363aa5abcca7607ec27463101db6751c53e4527dbb8778ee488c5bc455c5554b9543ac3ad60842213c92076d00cb463ccb1003acdd537bbc"]}]})
r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x18)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x76, &(0x7f0000000f80)="1a00000002000000", 0x8)
ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f0000000fc0)={&(0x7f0000001000)=[{0x1, 0x0, 0x3, 0x6, 0x3, 0x7, 0x6, 0x4}, {0x0, 0x0, 0x80, 0xfffffffffffffff7, 0x8, 0xfffffffffffffff8, 0x0, 0x5}], 0x2, 0x38, 0x1, 0x9})
r3 = syz_open_dev$I2C(&(0x7f0000001080), 0x0, 0x0)
preadv(r3, &(0x7f00000010c0)=[{&(0x7f0000001100)=""/276, 0x114}], 0x1, 0x5, 0x7)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x3a)
fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0)
fchdir(r4)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001280)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r6, &(0x7f00000012c0)=0x900, 0x12)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001300), 0x2000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000001340)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'})
write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x1, 0x200, 0x1, 0x1}, 0x1, [0xfa, 0x21, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

10.493618433s ago: executing program 9 (id=12641):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0x1, 0x70bd2d, 0x2, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x60044090)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000240), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000000280), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x4}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x8417f, 0x3f00)
syz_create_resource$binfmt(&(0x7f0000000340)='./file1\x00')
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
keyctl$update(0x2, 0x0, 0x0, 0xffffffffffffff32)
sendmmsg(r2, &(0x7f0000000380), 0x800001d, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

4.493732436s ago: executing program 3 (id=12642):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = getpid()
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x0, 0x3, 0x3, 0x564da2fa82fcfe60}})
read(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f00000000c0), 0x318, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x6)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
syz_open_procfs$userns(r1, &(0x7f00000000c0))
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000b00)={0x0, @in6={{0xa, 0x20, 0x9, @empty}}, 0x9, 0xf1, 0x3, 0x0, 0x8a, 0x4}, 0x9c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f00000003c0)='X', 0x34000, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r5, 0x2)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x26000824)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
set_mempolicy(0x4005, &(0x7f0000000100)=0x4, 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000440)={'vcan0\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f0000000480)={0x1d, r8}, 0x10)
lchown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0)
sendmsg$can_bcm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="761f72ef765ebc5642a2aa4f568a6ca319ca2796465a98989df3806d45ed0f5ebdc9b855d182b59a1589fc37bce0ad696a763965be6d7175779b0494771319794dc589c8d1d80276dff9ab7cd05030c3f2fa2975aca4c5d937ff625823e6b95394535cba859154621d4e47287626ea89db679a7366283eadb7f9ca9bdcb8317d0c627594886e08b0dbfb0e9426c51887ff1aaf2771b6cee85d1da7e00477dd2b16bf9a114a"], 0x20000600}, 0x1, 0x0, 0x0, 0x48000}, 0x1)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000840)=ANY=[@ANYBLOB="56643f0a0bc10ec05c716a988e76e87509668128edd05cb8e0387ee84a681e515bc4ef187e0eff9895ec57121bce3ee64a79d14a56435f1b5adef91a3c0e3bd5a034d327aefd05288db4ac09ecb66b8e0b6833e92f5c23fc51f87cfa59d10ebd5c85767387797edcab19a067e08878bd67be6930c63861c089fb5a93995f1fd1d47bc195b069c0f99bc5aaa1a771768ad121de216d80ca8fdf4bd5f08dc00d9d742b4a385edb9bad182614a387eba21890e88c33a16931bff3d2f2b12e02ec7765dc19d12a6ba3fbfad6dcc9374520f56ec578f4", @ANYRES32=r6, @ANYRESDEC=r8, @ANYRESOCT=r2, @ANYRESOCT=0x0])

4.445962913s ago: executing program 7 (id=12643):
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0)
landlock_restrict_self(r0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
syz_usb_connect(0x5, 0x27, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x2, 0x5000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
socket$key(0xf, 0x3, 0x2)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="11f0fc0fde60f9fd2829046c014d2479df1921cf0e6444706ecb4ac4c6bcad526501957401eb29d0956e9c84cbea40bc306650a3517eedea789a46af1822863b9362daf96b14a0a5d27cc52d943b4b94fcc94c267f3e9ca0492606ee72873d1a5ab06d689c713ab7ff6f3c1d8ae2297b78d043b41ff1b95c", 0x78}, {&(0x7f0000000380)="c55d4062eae423df2a19e97ea668d4b5d129f20ea091e5a4c08f83e08e07744f65a61eb410c6cd9bc3dcfb443737c9b0eec6521fe25e7ab8478779d4a2b45ed229d231806d5640133b45178a450a01270103472718e34b05fd83fab333955f79a24b084ab1577da6e879c47ccf0e20558943bba648329d2011c0", 0x7a}, {&(0x7f0000000400)="4ba624ebd0d91b18d32c3009407af4f7ff17096a5e72f3e935e087cafc44a4e9ae9f852da9ede4e984e924cd8c5fded1cbd352afd93b6bab8c716fd225ae06ecf843cb19738185d077eb6fea65f6b2254e8699ab4cb57175243da31670ced3129aff3508f20aa88756be9b29beaf383d1124dca16b610d51b20d11863e726ec8320bf969f0903ab2d888606708", 0x8d}, {&(0x7f00000004c0)="d64300354f182f1ad87586d8", 0xc}], 0x4, &(0x7f0000000500)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@rr={0x7, 0x17, 0xba, [@multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0xa, [@empty, @dev={0xac, 0x14, 0x14, 0xb}, @remote]}, @noop, @cipso={0x86, 0x68, 0x3, [{0x7, 0xe, "edb3f0ae5bd69e11765288e4"}, {0x7, 0xa, "407ec7e8bdf5fdcf"}, {0x7, 0x12, "b7847508a10531a52ac32940e7a174f1"}, {0x5da6c9286ff2c777, 0x4, "966d"}, {0x6, 0xf, "155879e949f4659a374f857f98"}, {0x2, 0x12, "d67bc47c27dbf3c11324a39cf1659289"}, {0x1, 0xb, "c569557a9658f7cb4b"}, {0x0, 0x8, "89ca95ae6b73"}]}, @generic={0x83, 0x4, "e107"}, @timestamp={0x44, 0x4, 0x23, 0x0, 0x9}, @timestamp_addr={0x44, 0x14, 0xf5, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x10}]}, @timestamp_prespec={0x44, 0xc, 0x55, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x10}]}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0xdc}}, {{&(0x7f0000000600)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000680)="c00e3f3583fef3e02f42b37345f4273f1302f4", 0x13}, {&(0x7f00000006c0)="1f24a8e3a4c4d67b77de2e451a07a0537788d376a73f0b502789ad4839227388e53efe6f5872e67ef3472a1fbd93c57ab8cd4c85518c941d74", 0x39}, {&(0x7f0000000700)="f2b5f66df85d4b4897cebdc2b491210caec5fc04822d0b", 0x17}, {&(0x7f0000000740)="8a7e5a534daedbed94e306e44971956f0036aa39337136e6f9b8850e3a981912e0efaf106063ccab06d4b863a302b5c38e303a3597f916f938567675ac1b240f0e6b3afb7fc30648aa8f41e0ddd22fbf033ed3f08989f403734a250f0d63701dfa9713f3eac18c463fd8864e9255ac5a6017ff37d3fbb1752a99630c3c9de363452304957f087acc3130eff75715f13f4e753f6de23e7da2", 0x98}, {&(0x7f0000000800)="21954f36f33a20f41c1a2f5ccbabb6aae726407c38db581d02bd23b331983f4733bbf50f0ed2751b3e98f5ced8247ee0331b0cd07b1dfa6f028243e7e343d4cf92ceb2446ed89550032ba101e96cfddf3c3f3f85cbd0a8ba46c890a0d6bc9fee97a2f976d84d85aa71871fdc3ab4296febc8d4e76c0d921f6085f2d99e17d4cba7583b92be8b76a156d0a03985e85091e7964ff092fc2ae315aa97b3512b9fa331ec526aee3464acffb1bfd509bb4b7b1a119e81b798889cd0024026e00e13e5bb7635c9fa0bca7f5cf18ffbe28c3de0d47a80be31231e128d3bada39372439eb73882912ebb5a434dc15cc535c7f13f923808e0362bbe1df725dc431fa81b5b9cd7918084c6898c533da80eb1570c65faf7b315c51423622f53a2d30b934a10c2825cc4f2ccb11fc701253cc656320c1ce41441ca23d7ba70e0dcc697bf0b94e94d175a106c71ad94a8b0883a68bb551e5bacc8572ee7d586862995e218aeb053813367c5dfd29c0d6805b0c47f9f43b36d1e705407929fb212da97640e2ad0aef719fb701956cc41d40dd7179d862c3d8ed72ed9e8ab34351b4b5907d16da21d7cb4c4c2ae327c222c9d4da9bf23fcef79842027b1e8f6ce0b6084d10d3e78864bf9360b35f3dce97ede2ebac414f82e2d0ca5ca31b503b3cd2875f59a124b1a6c93939f20d32e73f10759a9682ba642b9ee461f5ff590da47d856fe8c3d66ecae5c17efa165ba9dba2c25edafe9fb386f065183c39a7a15dc32ab82fb7c1c725d67d0105c27164df1dfe912e31a99a2172fb62509cce9f2c3b39b6760b93f49b9c87786ed286d3a785aa9f8c8ae02ecfe3f57a885acde8fd22552556512ddea6e919f02782303efb5e3f44098c295d693fe6c421efdd559311c364803c6d3fea87d2c42ca22d138a7e0b3bce3ee5eecbbc794186b88594f85bcf01aec6d18faf0d245066e39ae5fd61c34c504b1aae15d0180946a687945b3cc740948adba9fe8ef5c6eac5c5a7dede89b38fa7d2a415b3365449d555461dc587d458f8fbc506abfca3041d30bd35306ad5e452cf9e1695d2690c903e8d90aa45884480c5d929423dd7a830bf441991ce2114a0758788a2f14b0783e35bcdde10d340194a5726d39015c4d42f66ba5d81537bfdb5196f21c98f32e6fb551fb94735c5581d1d224a85d71804c1aab4e88e962589f4c78519afea3450b209217bc7a5113234ada7d7ec41d3212ff1c37e1d7aa62ca0dd49d8457b425db53569288ef888ba984183257f039f43dc4d77f6de38d7b10e2b812ea47501a8593b1156d7772c777d7ac0415d7018a191c01ff0ef659d5418c74a7b82a74ed43bf35896cfe4c74b5042b15c5c75f670776e24b6391f3a98c6028bd584464014c0e6c57844da963cb2b215a56a47f9a6997286eb36f1accbccd4a289899b3dc7508271ead0e7fcbe74a76962e20d5c246251577584d17a845fbd617b54b8e6379d900a21eedf050c28ea371c03a4aa35428b49b0b9cd148f9c3d37e1303321151f6c3931acdb04a0bf6bd2a86bbb8c75de2a658543edb87fcc48bc06ac8bd6710276184a486759fbf8bfad56889a008ffa9dabe3ca9293b0e5bbae0ce0287b8ac28dc4fe263d3277e3c6a3b6d94b4db3b2844367c9bd3a2244b9c47e97df905de30888a1ad54346ba599c808a70357887bf0c0cbe653f21c964d6eb5bbd5dad68a9ef2752635b6bb32cfa0647bba298f13375197ead970e098b97298107e55c3d60a7fe81ac95ba7c8a09a6e99b0f86d284b54c0b403098c1b8e6e9ef6f1008f3b81de45fce5c88e5b6bd1d6d9f08ed8ad5df445373133076c9a87716c38b3e3c8bd8e2eb6196c563e4e3c67423f8eabdf6c7e93d56e86d7b04e9d7d704d79ff8b5040d18512c60054a2d92494445061c2449ca417912dc44ec5f1b511784bcb037ed4ab1d987e7e58e58af9de54cc85b52c17d66b6d07df837162ae91801df3ebc86bccb70abbee180c9f3e22a4fcaaf17cdb4641a23ae78152f87d461c224918d24d9a9d8f15473f66f44a55afe461f897f10737c2de39332aa377f2db5419819d6c8861078626ca3e154af78ef6fad85e1d1fefcc5267887c97e5dfbe07deb48c6fe080638409321beef1abbfc232114e015e10e27a59d349df3ee3ab5951a849a23c47e07a8706dbcfcc1f1f92a25f4b72bdbb8a49e14595e7647e28d4bacc05f4b439fe7c835a1de6d3f762b92b41ed63c73df0b22258ba13b0bd82544f9294e4b36e6bab4999d5f407b569e41372024b87d331de82e4f72c52bfd20ba0e4443f7d9c145fa26ba828e3b26dacae2c5ae4598c981cce2bba60dfa2b48c5a25cf4df6b5607930b9ca9d66533bc5508f35792599cb9a581b4ffdcf6153ca1c072abe88115652ea5363fb6428d291f0637e679178560ed19ffb6da0d62c10f6d800d2397e91ced6f8e0813c02036b5ea73d71372b04c87be2684b05737319c978ad4c435d1244463e3c2371212d71ca62f7f4299dba85c8c2f69a76c13c0da53a99ffaea2555e1fe3ab5286424b23c5426905888049fd10c465817ba1e9f62d3151b0a8f372457ca0e60a531ea7a7f7f22d9ddf8dbaef153cccb607524d368f35c1d58e8089a88ad2f328bd71b5ef7c8ae76598c667f7b6c80864faf8c5f92f954058486d9bb029eeb6de06533eaab90ed88966becf2bbc3ce329951c6641656baa799a72f8ee4b1c6821a31f21605bc6945323653c48398f57380db3dd2b40b0c006fe385fdbef0ae4649203b1b58c60a3ded6194f1a91b055291cdc649d957f48297529e6c457c71ae54bf592a1d612ffe74da6866142585b8f12cc2ff75717130a3841d6e2d07871966dba702e0b4653e39de58809d59926a9799d53668a9ca09281b8a301c53fc740e016b5ae064d2ba13761808e814a971345619654b562bee166901670c75ee9b088fa98d4ce7b4e61907555d9dde938dbda0126865c74520e2e4301b421312bbe51b7147f47dd372fe670fae37bd4b2220c68cb0787b63d23ad8930eefe9287c4740a9b68487b180e13d2b77cf5cfd61b5c2f27f976bef39cb3653b4275ca13b710f7c5819342df61b79b251b37053028ef25636102f0bb47b18f0085d20f735efd77a7e0ad52fc47ea2016d2b0e6274724640f6299d090217afa68f18649e938db7a7912b9e053a1b60d46b4f01227fa880081fcc79560e69cae2fc72b0ce5b1d24e9180768c803893f3ec3efe10764107c1748c3525f4dc04e448725d39949ad24c2f53ca08f4320ae7b77491b0ad68170c37ac86172f652fd920677761cbd31548dce50bf2e3f60c7b5892532f99ef23fc04525d6bc781ceb2b99c080a1cba0cf772e0e954688b9bd8d8da7727db928f9db4c9b9e1dcd5d24bdf1ad717274864479c8059f0cbb5b3f77651a35423f3665df0b8999a2bc0f18618242debca2939f3d71ffb945cd32a6e44408f32802b096e2e44b755186df24133affe2a3dfd9a9514effbfa66541e1976c74dea747e57b370c785edbb34b575e040c177c43d9a631ec871725a06d03a16252e79637e4541cbde8e6469fe14aeeb81d16833cb09b970edb36bf8845bc8f659568234f375bf79e23146938e70e3dfdb39e2850844c97700ece904daf553feda22a262b16746d9b4c31222796bf1bc0f3bac95e96db9be0dcf75fe6d1ba64a62bfc2f0eeaf4540240c2f0d1c47e36e291ad4c607a9941a0fa8a15f557756bc8f353eb39647505e0d7d99e6fa344eeaae0a3e68bbb9354bbb06e583143762ca60557e2a7cba0aac41f318e23245da683da08d14acfe0f32cf33e80bcc36576fe61d66b7a43a508a33944da28b163c227581aaf0e1d22ded7621fe750eeeed24af84a05c4a56559caca6291e13dd5ef87559d5bee878e31bb932adebdf076cf2d6109793106cc25c8587750f1d6c0b8c9bef423074660ad35f215dd6218949ca2297018112f07d2a73ee7eb3aa135c4ec858d9e1327b1d9017453d9e7dae87b690b16129a97c543c10d18d0a7fc55e4585141bdb3e3be06993a516b3d876a2b6ac2163972de9efa685a3206c8b1b3b7d657fa584d32d40c5b6b08c57911024225c398115ddc92e204f359d7d6439bfc919c8d9c995d266b4280671dbf1d1ebc37c5ea7a68fc7e0d1c1c2364aa2ed67ca31d221414fc586ffb844d70efead9e6cbb6d3a7c38990261803b0b79ca8efff377f03a10b4abbd3163880cd94e53ff06a99d5d4d707f96e79757fec4574abdf7fbc6abe8c081e2e5f69d61eec20b53a0abc97dc92546799bb5536e6eed652f9120b1eac0cd1433e24829d448398bb05c0bce7f6d49e2945f9ab449cbc862bcf9b85cc50f1bb8056d166e44c2c1c39a139cb2dd4838e5ebe51605007243f38ec88808859ec40c8b1cad833b83eab9eb7363fe878a208ff7bee8080f14d88762348814652ea0d76acd69e19bb4b8540194c3f7b498fa82a723070d540ad874e00f5c4ebe996a97402f0d284a7862b83899fbbc2b8b30dcbc1b774a28fb47f39dfaff28f481043985fe9137c093665927ca8a04c30ff09505bafbd741e356d20bc77790334225dcb3120a219a50e1213b8f28b6b3c0581509babf0d7f070d8d3e9d00e7f618f6a5cb41fe7ceb12fbba151e5d69f128a2cb3e34d90f7f94349c63914138de2ac7348938df9d6f3a9534c515be87798efb1d9e678695cc5f6e65be25edb6cf513f67c00a71893948aaa5976c7e68a90f557144a2034f8c58a010cc0f7d6261c5c11bf19517c3e0df89b0f664d91fab95fb96690094229248fff6367762b62efbf02b5356e045de309e124194cb9995782f2df1deabd89545c804a2d9fd9dd8e7041812ce78349bd1b9603b80c0bd686805bed351008a32ca3dc10dcdbe079769b711365fc09dfe0161eaba3a2c62c0227af3d00ba1c1a44bae91d69d4a2f99a63d315acc6b783ee2f38b0467f0f8a6010b43fd0257a7aefe9aa0ea454802804992cec931b130e970e8f940bafbb89e85e0e7878d1424c79df0537446e08ebb40ee29bae689b01e6e41d3092efe8ba516c3c9a60973db0739b995284d05e8983e3aa85f01ff937f0ab36d6c57b34af43fd0c65f5752704d809358ad83332a51799138573b4f753e5e63f3b167d8fb3b870c3ab7a6f88622ce34a9521726b3d068aa3f78b12a787acbd4b0523245e22378de848afe0b2a01a6a35b0c09e19098b130248b184cf0ab570962283f8ccad601cceffd38c378a6efd54828b399465c3c6480db80d43c1e2d74294471bc3581b7f9bed02e57dfa2c698d42f325e81816109d5c139fd3d765cafb0269a84feb88428d45451c9cf830767e38a50a6bf8210a84b630a3a922011b6d34ad601738db1265eea407bea2c216476f44fd3f049a2cf66e628c4e4c82df7282dfe5bb38eabd5f3d4a6bdcb9365404d9a70bf31cdcae376ebb03b0e3bf85af51450f3c9a8f04344631e1f6e9a7c87f1fa7d4fb953fae59c185dd44d93493aa8770afd3442f434df7d304acf1962ead784f2a0b715f2cb9573974467b0c80309bf00ae9042cb864896ff56f6d7d92182d63fe9053362d0ae8f0c774472ac5c3ab78a629aaffe2284d69e67c9594b77d561a5a1fe80a72dce85150cb45820a0dbbd01d334dc57c2cd916fa376850e23aa90b727eb2181e35d05b064360040d8ea68fadbe3f9b09f0bb47d1292834e61528a14385dd5ccac4ba2cc9665914c6793744b1e1f1797cf7bac73847d5c6dd2c490f8dd98ed44c26caeaaee79fb9e1c1eb110a2a422b4969f7287ea693066cfcdb5781de559c", 0x1000}], 0x5, &(0x7f0000001800)=ANY=[@ANYBLOB="0000000000000000070000000700f600000000ac1e000100000000ac1414387f000001640101000a01010544006921e000000200000002e000000100000004ffffffff00000008e00000020000000644003b50000000000000000000000dc4000089fb000000010000000944002211ac1e010100000002ac1414aa000001010000000000000007e000000100000009ac1414aa000000087f000001000000814400a5400000004000000fff00000006000000060000000500000010000000f800000100000000070000000000000000000000000000000200000009000000000000000000000002000000ff0f0000000000000000000002000000030000000073000000000000000000000600"/278, @ANYRES32=0x0, @ANYBLOB="ac1414aaac1414410000000000000000010000000002000000000000"]}}, {{&(0x7f0000001940)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f00000019c0)="9c2bbdaad5b1b18544b24f2a673c283be7da8d064a5b54c10b150a811d9f5ae33fc6f617c5a8ea23711d1e6f359f52d42898d311b3a52eed83aa0518dda2f101e0fce7bf4bb2ee7a83900a3ca0ae52d091284c42bede1b6d04122557ca9e55bf7859698f39164187f23df2e3ad5b2bff763eca4b5d5ebccae44ae856ac2656d1228de536f46e52b62c7bebba88bcab6f96152023f34056fb58d6131be811a9d6df63241a22a326dc20e49aa0", 0xac}, {&(0x7f0000001a80)="4b0be7b17de6e485fe134240952ef2c8ad2197edb262cf39be494384ec4ec0248af1722a10a90983ca315de431e18ffa0fe6ba9fec5c36b62933566c0f57f2121e5ce884adcf8e4cd15f79639544b7c0a093652bb7adb250924179e2e50804751a189806142cb3074d4317bd542c560712aa", 0x72}, {&(0x7f0000001b00)="bee0af8153f91d9db79b3f274dd31a9ddcfde91edf63e580b4252c4a0a8622a2741189223caa7c98e0075fa93baaebde38e539418c638c6aaba541", 0x3b}, {&(0x7f0000001b40)="cbc9e7b61a3cb0d0f3a25be7f779e25f0fd21c87ff8abb9a1ba0774830e6f52875487a51957aac6e970d339b18c9da0f1bfb61ec14cf5ada103db88af9b5a19bd7d08ab028abb0db09990df934da7bf3b4fcd4f955c090e96b7ef3dc8df3a6d3e1280112f6b20fcf64460f134c4ab328d396345b63d47dc9f0f4477da0c73a9fade3dc86f1d01911f9b5b8139028e95f7a52a31a327477cfba3227d4d1b79c6d93b0508fcc68d3e96e1dc2efcdf7094b5a822c0d0ecc689905d03c38784ae18a2b59d7b13ea3dda3467f11e7d0d318faa77220cb17daa0aed0450748556e81af9a35d3751eff8cd59547530816", 0xed}], 0x4}}, {{&(0x7f0000001c40)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001cc0)="a7d84c41ce05b4979c812ed105c59aec61d4687d0be98f3de5e0d4463906ea01454698a8943e64", 0x27}, {&(0x7f0000001d00)="791275f0385b021a3df2b16297cb639faa6fbbed2e77e3e599e35ea7ac70b71c203e6c623c6a36b568d55e006d4a13efde3ddef00ecd95db0e81749736af96b130ba49ade68c1327fab593bf51b7402db103e6f34f21694ef940d267", 0x5c}, {&(0x7f0000001d80)="2dfd55ed67eab869ff2866e1a233356034ac70304909b6fd8ff86a5ab1114795b43e7c5ddd9418a0b844470b0ee377e8ef049be761b8bfce3be2ed99ebc36401cdd3c5239ccfde39f42522af10b154f65c2f3e4c8aa1da", 0x57}, {&(0x7f0000001e00)="f81a4e449ada1f377130a0d6ddbf7d6aec00a5855fbd80740c794610b1c148efa16092ea9690ef0bbedd1525831aed5832bc69cbb311c373d2a7555781cd4606c3972475ecd8cba5d770d8c33ffc5192174284bc5948f2870e47d941b18bc32b02658cd082896ad3c4c0d8ac54463ecf1999e200ed09592f1d2c382c242050f218a651a3c9310a68c09deec32b559466", 0x90}, {0x0}, {&(0x7f0000001ec0)="dfedb6872407e81b06505dff542d92809e1f4d7a9c6f382a35e2c6248df989cefd01368f88a90551a1c787ef0872ee3cfb0780dc340a70d90d171a1bf87b1c9b5309bbf73024fdc7b2794179d296a6617dfbc7535bbc7b8f50012d2e6e2ad16809d9ae354f300dd2ed1772b2dab9bdd5c4208a75c6b654ddf19336cb19be254cff126728951f3d3820ab12db623b1471e2c89e5a3638dff782754e8ae9ab8d91a6e167de259e", 0xa6}], 0x6, &(0x7f0000001f80)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @private=0xa010100}}}], 0x68}}], 0x4, 0x4811)
sched_setattr(0x0, &(0x7f0000002000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdir(0x0, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000002040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)
r5 = openat$vim2m(0xffffff9c, &(0x7f0000002100), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000002140)={0x10000, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x585452c9, 0x2, 0x1, [{0x40, 0x1}, {0x8, 0xa}, {0x7, 0x1000}, {0x80000000, 0xa}, {0x100, 0x3}, {0x2, 0x4}, {0x1000101, 0x81}, {0xc, 0x8}], 0x10, 0x7e, 0x1, 0x0, 0x3}}})
r6 = syz_open_dev$dri(&(0x7f0000002240), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000002280)={&(0x7f00000022c0)=[<r7=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000002300)={0x0, 0x0, 0x0, r7})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002340)={0x1, &(0x7f0000002380)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000023c0)={0x1, &(0x7f0000002400)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

4.437765117s ago: executing program 8 (id=12644):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x24000885, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x2}, &(0x7f0000000200)=0x8)

4.40920341s ago: executing program 9 (id=12645):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
move_mount(r0, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00')

4.317517681s ago: executing program 8 (id=12646):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x4, 0x0, @time={0x3, 0x5a62}, {}, {}, @result={0x2, 0xe20}}, {0x0, 0x0, 0x0, 0x0, @tick=0x101, {}, {}, @quote}], 0x38)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_DELRULE={0x260, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xec, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_TTL={0x5, 0x2, 0x80}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xe1}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x55}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x3b}]}}}, {0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x1a}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x42, 0x7, 0x1, 0x0, "af7776709b7ce5d26c68ae2b2862b50505da33c1b01ce351da0801e8b0461ed64f66c1e201bc9886c6f1e2c3b7ebb05ba30cea44bda4cfd1e5177447695d"}]}], {0x14}}, 0x288}, 0x1, 0x0, 0x0, 0x4c841}, 0x4011)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x2, 0xddccb000, 0xa, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x18, 0x5, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x80a0000, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3, 0x6e}, {0x1000, 0x0, 0xd, 0x0, 0x70, 0x8, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0x8}, {0xa000, 0x3000, 0xf, 0x1, 0x0, 0x8f, 0x4, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0x200000, 0xe000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x83, 0x0, 0xb9, 0x4, 0xe}, {0x100000}, {0x1, 0xfffd}, 0x60010022, 0x0, 0x0, 0x10, 0x1000000000010001, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x7]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4140aecd, &(0x7f0000000100))

4.294238916s ago: executing program 9 (id=12647):
set_mempolicy(0x3, &(0x7f0000000180)=0x5, 0x40)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000200)=@caif=@dbg={0x25, 0x9, 0xce}, 0x80, 0x0}, 0x88010)

4.086045545s ago: executing program 9 (id=12648):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240008d1}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x20, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4)

3.886045214s ago: executing program 8 (id=12649):
ftruncate(0xffffffffffffffff, 0x51a9497)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x0, 0xa804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xfffffffe}, 0x50)
r0 = socket(0x1e, 0x1, 0x0)
listen(r0, 0x7f)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000500)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000580)=<r2=>0x0, &(0x7f00000005c0)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000640)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
shutdown(r0, 0x2)

3.743102065s ago: executing program 9 (id=12650):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300))
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f0000000580), 0x0, 0x0, 0x0, &(0x7f00000005c0))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
set_mempolicy(0x4005, &(0x7f0000000640)=0x7e, 0x6)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt(r1, 0x0, 0x483, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000700)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r3, &(0x7f0000000780)=0x807, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000900)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000980), 0x2, 0x143102)
writev(r4, &(0x7f00000009c0)=[{&(0x7f0000000a00)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

3.465450705s ago: executing program 8 (id=12651):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c)
recvfrom$inet(r0, &(0x7f0000001b40)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000180)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0x40, 0x0, 0x5}, @exit], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000240)=0x2, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000280)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @local, 0x9}], 0x1c)
listen(r3, 0x7)
fsetxattr$security_capability(r0, &(0x7f0000000080), 0x0, 0x0, 0x2)
shutdown(r0, 0x0)

3.182357093s ago: executing program 8 (id=12652):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000021c0)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x7, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0xc0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x1, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0x8d2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
close(0x3)
unshare(0x2040400)
ppoll(&(0x7f0000002180)=[{0xffffffffffffffff, 0x300}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.9312875s ago: executing program 8 (id=12653):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x3, "08c6e13d96e007fda10700000000000000000000f6ffe700000000000400", <r1=>0xffffffffffffffff})
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x8)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x4)
pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003090000000001010101", 0x2e}], 0x1, 0x0, 0x0)
pwritev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="002145000014000b0000400600000a0000010a000002005000500000000100000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x4007)
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000004c0)={"6739769f164d13b691ebe45b00e4f5b55800c2dc5c5e312662096c00", r1, <r3=>0xffffffffffffffff})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000500), 0x28d00, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000540)={0xbd5, "8a6035ceeae3ecc42317afad010000000000000400", <r5=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000580)={0x9, "34e649de7e6e361b2fd76750008d49000000000100000000000000019b4400", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000005c0)={"0e337b42cc00d331ff0007000000000000001a00", r6, <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000600)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r7})

2.854079479s ago: executing program 9 (id=12654):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x1a000, 0x0}, 0x1}], 0x1, 0x20, 0x0)

2.523646882s ago: executing program 3 (id=12655):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0x1, 0x70bd2d, 0x2, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x60044090)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000240), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000000280), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x4}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x8417f, 0x3f00)
syz_create_resource$binfmt(&(0x7f0000000340)='./file1\x00')
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
keyctl$update(0x2, 0x0, 0x0, 0xffffffffffffff32)
sendmmsg(r2, &(0x7f0000000380), 0x800001d, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d074200080002", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

738.023093ms ago: executing program 7 (id=12656):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x24000885, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x2}, &(0x7f0000000200)=0x8)

540.05623ms ago: executing program 7 (id=12657):
set_mempolicy(0x3, &(0x7f0000000180)=0x5, 0x40)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000200)=@caif=@dbg={0x25, 0x9, 0xce}, 0x80, 0x0}, 0x88010)

349.900443ms ago: executing program 7 (id=12658):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="00729c5b99b318e0645e00000000000000b7050000080000004600000076000000bf98000000000000b50800000000800000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', <r7=>0x0})
unshare(0x22020600)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1a, 0x7, 0x5, 0x93, 0x21000, 0xffffffffffffffff, 0x2, '\x00', r7, r2, 0x4, 0x4}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x1, r8}, 0x38)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r10 = socket(0x2, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000b40)={0x0, 0x10, &(0x7f0000000b80)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000bc0)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000c00)={0x1, [<r11=>0x0]}, &(0x7f0000000c40)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x82, &(0x7f0000000c80)={r11, 0x10, 0x7}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000cc0)={r11, @in6={{0xa, 0x4e23, 0xce, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, [0x4, 0x3, 0x1, 0x9, 0x5, 0xff, 0xfffffffffffffff8, 0x7, 0x3, 0x5, 0xc, 0x3, 0x1000, 0xfffffffffffffffa, 0x1]}, &(0x7f0000000dc0)=0xfc)
sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffe0, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
lsetxattr$security_ima(&(0x7f00000009c0)='./my_sys\x00', &(0x7f0000000a00), &(0x7f0000000a40)=ANY=[@ANYBLOB="e44a7313b964640464"], 0x9, 0x2)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0)
r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00')
fchdir(r12)
mkdir(&(0x7f00000001c0)='./my_sys\x00', 0xff)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), r12)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x44, r13, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x81}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x100}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x6}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7fff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x80000000}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

274.663767ms ago: executing program 3 (id=12659):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x4, 0x0, @time={0x3, 0x5a62}, {}, {}, @result={0x2, 0xe20}}, {0x0, 0x0, 0x0, 0x0, @tick=0x101, {}, {}, @quote}], 0x38)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_DELRULE={0x260, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xec, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_TTL={0x5, 0x2, 0x80}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xe1}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x55}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x3b}]}}}, {0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x1a}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x42, 0x7, 0x1, 0x0, "af7776709b7ce5d26c68ae2b2862b50505da33c1b01ce351da0801e8b0461ed64f66c1e201bc9886c6f1e2c3b7ebb05ba30cea44bda4cfd1e5177447695d"}]}], {0x14}}, 0x288}, 0x1, 0x0, 0x0, 0x4c841}, 0x4011)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x2, 0xddccb000, 0xa, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10000, 0x18, 0x5, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x80a0000, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3, 0x6e}, {0x1000, 0x0, 0xd, 0x0, 0x70, 0x8, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0x8}, {0xa000, 0x3000, 0xf, 0x1, 0x0, 0x8f, 0x4, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0x200000, 0xe000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x83, 0x0, 0xb9, 0x4, 0xe}, {0x100000}, {0x1, 0xfffd}, 0x60010022, 0x0, 0x0, 0x10, 0x1000000000010001, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x7]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4140aecd, &(0x7f0000000100))

0s ago: executing program 3 (id=12660):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000002000010025bd7000fedbdf2502101404000000060300000008ff0000e0000001080002100a01010208000b0000000000b35a3b85bb99899253513bab22927f63f7d33aee9df94490087a896dc0d1f72ed4bc891c175ec4d5f3bc01bb5971aaf02a3bb866130a880d19f91388d9d04b2f45d588bbde85993708615fabaa24"], 0x34}}, 0x40010)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000000c0)=0xb, 0x4)
r2 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000400), 0x318, 0x0)
recvmmsg(r4, &(0x7f0000000440), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38)
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000600)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x6, 0x0, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x4, 0x97, 0x200, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640})
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00')
preadv2(r10, 0x0, 0x0, 0x8, 0x5, 0x31)

kernel console output (not intermixed with test programs):

8-1: USB disconnect, device number 43
[ 2373.799676][ T6988] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 2373.950640][ T6988] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2373.952397][ T6988] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2373.952436][ T6988] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2373.952458][ T6988] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2373.952507][ T6988] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2373.952537][ T6988] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2373.958293][ T6988] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2373.958323][ T6988] usb 4-1: Product: syz
[ 2373.958341][ T6988] usb 4-1: Manufacturer: syz
[ 2374.074387][ T6988] cdc_wdm 4-1:1.0: skipping garbage
[ 2374.074420][ T6988] cdc_wdm 4-1:1.0: skipping garbage
[ 2374.093836][ T6988] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device
[ 2374.093859][ T6988] cdc_wdm 4-1:1.0: Unknown control protocol
[ 2374.273971][T13250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2374.276818][T13250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2374.501799][T13250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2374.502185][T13250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2374.569656][T13250] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1”'
[ 2374.569682][T13250] CPU: 1 UID: 0 PID: 13250 Comm: syz.3.12356 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2374.569718][T13250] Tainted: [L]=SOFTLOCKUP
[ 2374.569727][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2374.569743][T13250] Call Trace:
[ 2374.569753][T13250]  <TASK>
[ 2374.569764][T13250]  dump_stack_lvl+0xe8/0x150
[ 2374.569805][T13250]  sysfs_warn_dup+0x8e/0xa0
[ 2374.569834][T13250]  sysfs_do_create_link_sd+0xc0/0x110
[ 2374.569865][T13250]  device_add_class_symlinks+0x1cf/0x240
[ 2374.569907][T13250]  device_add+0x467/0xb80
[ 2374.569945][T13250]  wiphy_register+0x1fc8/0x2ff0
[ 2374.570000][T13250]  ? __pfx_wiphy_register+0x10/0x10
[ 2374.570037][T13250]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2374.570070][T13250]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 2374.570111][T13250]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 2374.570155][T13250]  ieee80211_register_hw+0x3dbb/0x4b00
[ 2374.570197][T13250]  ? ieee80211_register_hw+0x1971/0x4b00
[ 2374.570253][T13250]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2374.570285][T13250]  ? __asan_memset+0x22/0x50
[ 2374.570313][T13250]  ? __hrtimer_setup+0x1b7/0x260
[ 2374.570349][T13250]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2374.570392][T13250]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 2374.570472][T13250]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2374.570510][T13250]  ? kstrndup+0xbd/0x160
[ 2374.570550][T13250]  ? kstrndup+0xbd/0x160
[ 2374.570580][T13250]  hwsim_new_radio_nl+0xd8b/0xf90
[ 2374.570634][T13250]  genl_family_rcv_msg_doit+0x233/0x340
[ 2374.570668][T13250]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2374.570708][T13250]  ? bpf_lsm_capable+0x9/0x20
[ 2374.570735][T13250]  ? security_capable+0x7e/0x2c0
[ 2374.570780][T13250]  genl_rcv_msg+0x614/0x7a0
[ 2374.570812][T13250]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2374.570836][T13250]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2374.570886][T13250]  netlink_rcv_skb+0x226/0x4a0
[ 2374.570919][T13250]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2374.570944][T13250]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2374.570993][T13250]  ? down_read+0x2be/0x330
[ 2374.571030][T13250]  genl_rcv+0x28/0x40
[ 2374.571063][T13250]  netlink_unicast+0x8ef/0xa80
[ 2374.571106][T13250]  netlink_sendmsg+0x813/0xb40
[ 2374.571144][T13250]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2374.571180][T13250]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2374.571215][T13250]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2374.571244][T13250]  sock_sendmsg_nosec+0x13a/0x180
[ 2374.571278][T13250]  ____sys_sendmsg+0x54e/0x850
[ 2374.571309][T13250]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2374.571365][T13250]  ? preempt_schedule_thunk+0x16/0x40
[ 2374.571399][T13250]  ___sys_sendmsg+0x2a5/0x360
[ 2374.571430][T13250]  ? __lock_acquire+0x747/0x2de0
[ 2374.571460][T13250]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2374.571487][T13250]  ? futex_private_hash_put+0x132/0x160
[ 2374.571610][T13250]  ? futex_wake+0x51b/0x5f0
[ 2374.571629][T13250]  ? rcu_is_watching+0x16/0xb0
[ 2374.571691][T13250]  ? __fget_files+0x2a/0x420
[ 2374.571712][T13250]  ? __fget_files+0x3a2/0x420
[ 2374.571746][T13250]  __sys_sendmsg+0x177/0x240
[ 2374.571774][T13250]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2374.571822][T13250]  __do_fast_syscall_32+0x27a/0x6b0
[ 2374.571855][T13250]  ? do_fast_syscall_32+0x33/0x70
[ 2374.571887][T13250]  ? irqentry_exit+0x10f/0x920
[ 2374.571914][T13250]  ? trace_irq_disable+0x3b/0x140
[ 2374.571944][T13250]  do_fast_syscall_32+0x33/0x70
[ 2374.571975][T13250]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2374.572007][T13250] RIP: 0023:0xf7f050ec
[ 2374.572030][T13250] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2374.572052][T13250] RSP: 002b:00000000f53b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2374.572079][T13250] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240
[ 2374.572097][T13250] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[ 2374.572113][T13250] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2374.572128][T13250] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2374.572144][T13250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2374.572180][T13250]  </TASK>
[ 2374.786038][T13268] FAULT_INJECTION: forcing a failure.
[ 2374.786038][T13268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2374.786150][T13268] CPU: 0 UID: 0 PID: 13268 Comm: syz.7.12362 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2374.786225][T13268] Tainted: [L]=SOFTLOCKUP
[ 2374.786246][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2374.786285][T13268] Call Trace:
[ 2374.786308][T13268]  <TASK>
[ 2374.786342][T13268]  dump_stack_lvl+0xe8/0x150
[ 2374.786437][T13268]  should_fail_ex+0x410/0x560
[ 2374.786530][T13268]  _copy_from_iter+0x1d3/0x1660
[ 2374.786630][T13268]  ? __alloc_skb+0x27a/0x7a0
[ 2374.786693][T13268]  ? __alloc_skb+0x27a/0x7a0
[ 2374.786754][T13268]  ? __alloc_skb+0x27a/0x7a0
[ 2374.786807][T13268]  ? __pfx__copy_from_iter+0x10/0x10
[ 2374.786891][T13268]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[ 2374.786957][T13268]  ? __alloc_skb+0x27a/0x7a0
[ 2374.787007][T13268]  ? __alloc_skb+0x27a/0x7a0
[ 2374.787086][T13268]  ? netlink_sendmsg+0x650/0xb40
[ 2374.787165][T13268]  ? skb_put+0x112/0x210
[ 2374.787229][T13268]  netlink_sendmsg+0x6c0/0xb40
[ 2374.787300][T13268]  ? trace_irq_disable+0x3b/0x140
[ 2374.787378][T13268]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2374.787471][T13268]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2374.787555][T13268]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2374.787633][T13268]  sock_sendmsg_nosec+0x13a/0x180
[ 2374.787717][T13268]  ____sys_sendmsg+0x54e/0x850
[ 2374.787802][T13268]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2374.787848][T13268]  ___sys_sendmsg+0x2a5/0x360
[ 2374.787872][T13268]  ? __lock_acquire+0x747/0x2de0
[ 2374.787902][T13268]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2374.787986][T13268]  ? irqentry_exit+0x218/0x920
[ 2374.788134][T13268]  ? __fget_files+0x2a/0x420
[ 2374.788188][T13268]  ? __fget_files+0x3a2/0x420
[ 2374.788268][T13268]  __sys_sendmsg+0x177/0x240
[ 2374.788332][T13268]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2374.788438][T13268]  __do_fast_syscall_32+0x27a/0x6b0
[ 2374.788512][T13268]  ? do_fast_syscall_32+0x33/0x70
[ 2374.788575][T13268]  ? asm_int80_emulation+0x1a/0x20
[ 2374.788635][T13268]  ? do_int80_emulation+0x299/0x500
[ 2374.788706][T13268]  ? trace_irq_disable+0x3b/0x140
[ 2374.788780][T13268]  do_fast_syscall_32+0x33/0x70
[ 2374.788862][T13268]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2374.788936][T13268] RIP: 0023:0xf7f670ec
[ 2374.788989][T13268] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2374.789040][T13268] RSP: 002b:00000000f53f550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2374.789101][T13268] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[ 2374.789143][T13268] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2374.789182][T13268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2374.789215][T13268] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2374.789253][T13268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2374.789328][T13268]  </TASK>
[ 2375.418762][T13250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12356'.
[ 2375.472783][T13273] FAULT_INJECTION: forcing a failure.
[ 2375.472783][T13273] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2375.472812][T13273] CPU: 0 UID: 0 PID: 13273 Comm: syz.2.12364 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2375.472835][T13273] Tainted: [L]=SOFTLOCKUP
[ 2375.472842][T13273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2375.472853][T13273] Call Trace:
[ 2375.472859][T13273]  <TASK>
[ 2375.472867][T13273]  dump_stack_lvl+0xe8/0x150
[ 2375.472900][T13273]  should_fail_ex+0x410/0x560
[ 2375.472927][T13273]  _copy_from_iter+0x1d3/0x1660
[ 2375.472951][T13273]  ? __alloc_skb+0x27a/0x7a0
[ 2375.472968][T13273]  ? __alloc_skb+0x27a/0x7a0
[ 2375.472984][T13273]  ? __alloc_skb+0x27a/0x7a0
[ 2375.472999][T13273]  ? __pfx__copy_from_iter+0x10/0x10
[ 2375.473020][T13273]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[ 2375.473037][T13273]  ? __alloc_skb+0x27a/0x7a0
[ 2375.473051][T13273]  ? __alloc_skb+0x27a/0x7a0
[ 2375.473069][T13273]  ? netlink_sendmsg+0x650/0xb40
[ 2375.473090][T13273]  ? skb_put+0x112/0x210
[ 2375.473107][T13273]  netlink_sendmsg+0x6c0/0xb40
[ 2375.473135][T13273]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2375.473161][T13273]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2375.473185][T13273]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2375.473205][T13273]  sock_sendmsg_nosec+0x13a/0x180
[ 2375.473229][T13273]  ____sys_sendmsg+0x54e/0x850
[ 2375.473251][T13273]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2375.473282][T13273]  ___sys_sendmsg+0x2a5/0x360
[ 2375.473299][T13273]  ? __lock_acquire+0x747/0x2de0
[ 2375.473320][T13273]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2375.473337][T13273]  ? get_pid_task+0x20/0x1f0
[ 2375.473353][T13273]  ? get_pid_task+0x20/0x1f0
[ 2375.473367][T13273]  ? get_pid_task+0x20/0x1f0
[ 2375.473404][T13273]  ? __fget_files+0x2a/0x420
[ 2375.473419][T13273]  ? __fget_files+0x3a2/0x420
[ 2375.473440][T13273]  __sys_sendmsg+0x177/0x240
[ 2375.473459][T13273]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2375.473491][T13273]  __do_fast_syscall_32+0x27a/0x6b0
[ 2375.473512][T13273]  ? do_fast_syscall_32+0x33/0x70
[ 2375.473532][T13273]  ? asm_int80_emulation+0x1a/0x20
[ 2375.473548][T13273]  ? do_int80_emulation+0x299/0x500
[ 2375.473567][T13273]  ? trace_irq_disable+0x3b/0x140
[ 2375.473588][T13273]  do_fast_syscall_32+0x33/0x70
[ 2375.473608][T13273]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2375.473627][T13273] RIP: 0023:0xf743f0ec
[ 2375.473642][T13273] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2375.473656][T13273] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2375.473674][T13273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000880
[ 2375.473685][T13273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2375.473695][T13273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2375.473704][T13273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2375.473714][T13273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2375.473738][T13273]  </TASK>
[ 2376.061037][T13285] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12367'.
[ 2376.249422][ T6990] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 2376.401496][ T6990] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[ 2376.403234][ T6990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2376.404842][ T6990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2376.406294][ T6990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2376.406333][ T6990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2376.507181][ T6990] usb 3-1: config 0 descriptor??
[ 2376.611973][ T7005] usb 4-1: USB disconnect, device number 78
[ 2376.619743][ T6991] usb 8-1: new low-speed USB device number 44 using dummy_hcd
[ 2376.701792][T13301] team0: Port device veth0_to_hsr added
[ 2376.736639][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12366'.
[ 2376.737992][ T7003] usb 3-1: USB disconnect, device number 55
[ 2376.749634][ T6991] usb 8-1: device descriptor read/64, error -71
[ 2376.989814][ T6991] usb 8-1: new low-speed USB device number 45 using dummy_hcd
[ 2377.119710][ T6991] usb 8-1: device descriptor read/64, error -71
[ 2377.202208][T13310] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 2377.203712][T13310] bond2 (unregistering): Released all slaves
[ 2377.229941][ T6991] usb usb8-port1: attempt power cycle
[ 2377.236926][T13316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2377.237497][T13316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2377.237799][T13315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2377.238914][T13315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2377.259243][ T7003] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 2377.374945][T13311] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 2377.376826][T13311] bond2 (unregistering): Released all slaves
[ 2377.412727][T13319] netlink: 36 bytes leftover after parsing attributes in process `syz.8.12374'.
[ 2377.420126][ T7003] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2377.423964][ T7003] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2377.424046][ T7003] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2377.424100][ T7003] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2377.424318][ T7003] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2377.424413][ T7003] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2377.432140][ T7003] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2377.432214][ T7003] usb 4-1: Product: syz
[ 2377.432255][ T7003] usb 4-1: Manufacturer: syz
[ 2377.515824][ T7003] cdc_wdm 4-1:1.0: skipping garbage
[ 2377.515847][ T7003] cdc_wdm 4-1:1.0: skipping garbage
[ 2377.539860][ T7003] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device
[ 2377.539913][ T7003] cdc_wdm 4-1:1.0: Unknown control protocol
[ 2377.569606][ T6991] usb 8-1: new low-speed USB device number 46 using dummy_hcd
[ 2377.592275][ T6991] usb 8-1: device descriptor read/8, error -71
[ 2377.713188][T13306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2377.713877][T13306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2377.829373][ T6991] usb 8-1: new low-speed USB device number 47 using dummy_hcd
[ 2377.851255][ T6991] usb 8-1: device descriptor read/8, error -71
[ 2377.918334][T13306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2377.919670][T13306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2377.939767][T13306] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1”'
[ 2377.940014][T13306] CPU: 0 UID: 0 PID: 13306 Comm: syz.3.12373 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2377.940049][T13306] Tainted: [L]=SOFTLOCKUP
[ 2377.940060][T13306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2377.940075][T13306] Call Trace:
[ 2377.940084][T13306]  <TASK>
[ 2377.940096][T13306]  dump_stack_lvl+0xe8/0x150
[ 2377.940154][T13306]  sysfs_warn_dup+0x8e/0xa0
[ 2377.940181][T13306]  sysfs_do_create_link_sd+0xc0/0x110
[ 2377.940213][T13306]  device_add_class_symlinks+0x1cf/0x240
[ 2377.940254][T13306]  device_add+0x467/0xb80
[ 2377.940291][T13306]  wiphy_register+0x1fc8/0x2ff0
[ 2377.940345][T13306]  ? __pfx_wiphy_register+0x10/0x10
[ 2377.940383][T13306]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2377.940414][T13306]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 2377.940454][T13306]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 2377.940498][T13306]  ieee80211_register_hw+0x3dbb/0x4b00
[ 2377.940540][T13306]  ? ieee80211_register_hw+0x1971/0x4b00
[ 2377.940595][T13306]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2377.940626][T13306]  ? __asan_memset+0x22/0x50
[ 2377.940654][T13306]  ? __hrtimer_setup+0x1b7/0x260
[ 2377.940690][T13306]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2377.940732][T13306]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 2377.940807][T13306]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2377.940844][T13306]  ? kstrndup+0xbd/0x160
[ 2377.940879][T13306]  ? kstrndup+0xbd/0x160
[ 2377.940910][T13306]  hwsim_new_radio_nl+0xd8b/0xf90
[ 2377.940962][T13306]  genl_family_rcv_msg_doit+0x233/0x340
[ 2377.940997][T13306]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2377.941037][T13306]  ? bpf_lsm_capable+0x9/0x20
[ 2377.941064][T13306]  ? security_capable+0x7e/0x2c0
[ 2377.941116][T13306]  genl_rcv_msg+0x614/0x7a0
[ 2377.941152][T13306]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2377.941168][T13306]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2377.941205][T13306]  netlink_rcv_skb+0x226/0x4a0
[ 2377.941228][T13306]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2377.941245][T13306]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2377.941279][T13306]  ? down_read+0x2be/0x330
[ 2377.941304][T13306]  genl_rcv+0x28/0x40
[ 2377.941327][T13306]  netlink_unicast+0x8ef/0xa80
[ 2377.941360][T13306]  netlink_sendmsg+0x813/0xb40
[ 2377.941390][T13306]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2377.941419][T13306]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2377.941445][T13306]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2377.941490][T13306]  sock_sendmsg_nosec+0x13a/0x180
[ 2377.941533][T13306]  ____sys_sendmsg+0x54e/0x850
[ 2377.941557][T13306]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2377.941582][T13306]  ? __pfx_futex_wake_mark+0x10/0x10
[ 2377.941607][T13306]  ___sys_sendmsg+0x2a5/0x360
[ 2377.941625][T13306]  ? __lock_acquire+0x747/0x2de0
[ 2377.941648][T13306]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2377.941670][T13306]  ? futex_wait+0x2a2/0x390
[ 2377.941710][T13306]  ? __fget_files+0x2a/0x420
[ 2377.941725][T13306]  ? __fget_files+0x3a2/0x420
[ 2377.941749][T13306]  __sys_sendmsg+0x177/0x240
[ 2377.941770][T13306]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2377.941804][T13306]  __do_fast_syscall_32+0x27a/0x6b0
[ 2377.941827][T13306]  ? do_fast_syscall_32+0x33/0x70
[ 2377.941849][T13306]  ? irqentry_exit+0x10f/0x920
[ 2377.941867][T13306]  ? trace_irq_disable+0x3b/0x140
[ 2377.941889][T13306]  do_fast_syscall_32+0x33/0x70
[ 2377.941911][T13306]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2377.941932][T13306] RIP: 0023:0xf7f050ec
[ 2377.941948][T13306] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2377.941963][T13306] RSP: 002b:00000000f53b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2377.941981][T13306] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240
[ 2377.941993][T13306] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[ 2377.942009][T13306] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2377.942020][T13306] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2377.942030][T13306] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2377.942054][T13306]  </TASK>
[ 2378.040702][ T6991] usb usb8-port1: unable to enumerate USB device
[ 2379.816155][T13348] pim6reg: entered allmulticast mode
[ 2380.072700][ T7003] usb 4-1: USB disconnect, device number 79
[ 2380.359628][T13361] netlink: 36 bytes leftover after parsing attributes in process `syz.8.12386'.
[ 2380.902772][T13375] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[ 2380.924425][T13375] batman_adv: batadv0: Adding interface: gretap2
[ 2380.924487][T13375] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[ 2380.924569][T13375] batman_adv: batadv0: Interface activated: gretap2
[ 2382.198980][ T6988] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 2382.354029][ T6988] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00
[ 2382.358689][ T6988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 2382.358741][ T6988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 2382.358786][ T6988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2382.407067][ T6988] usb 3-1: config 0 descriptor??
[ 2382.579808][ T6999] usb 8-1: new high-speed USB device number 48 using dummy_hcd
[ 2382.721594][T13396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2382.722065][T13396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2382.750180][ T6999] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00
[ 2382.751792][ T6999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2383.271693][ T6988] usbhid 3-1:0.0: can't add hid device: -71
[ 2383.271834][ T6988] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2383.301043][ T6988] usb 3-1: USB disconnect, device number 56
[ 2383.432607][T13415] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12401'.
[ 2384.032442][ T6999] usb 8-1: Firmware version (0.0) predates our first public release.
[ 2384.032474][ T6999] usb 8-1: Please update to version 0.2 or newer
[ 2384.149342][T13421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2384.149812][T13421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2384.157183][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12403'.
[ 2384.190293][ T6999] usb 8-1: USB disconnect, device number 48
[ 2384.259022][ T7005] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 2384.420230][ T7005] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[ 2384.421432][ T7005] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2384.423027][ T7005] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2384.424370][ T7005] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2384.424423][ T7005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2384.428143][ T7005] usb 3-1: config 0 descriptor??
[ 2384.693712][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12402'.
[ 2384.709673][ T7005] usb 3-1: USB disconnect, device number 57
[ 2384.822296][T13444] FAULT_INJECTION: forcing a failure.
[ 2384.822296][T13444] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2384.822326][T13444] CPU: 0 UID: 0 PID: 13444 Comm: syz.8.12413 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2384.822348][T13444] Tainted: [L]=SOFTLOCKUP
[ 2384.822355][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2384.822365][T13444] Call Trace:
[ 2384.822373][T13444]  <TASK>
[ 2384.822380][T13444]  dump_stack_lvl+0xe8/0x150
[ 2384.822415][T13444]  should_fail_ex+0x410/0x560
[ 2384.822443][T13444]  _copy_to_user+0x31/0xb0
[ 2384.822461][T13444]  video_usercopy+0xdf4/0x1430
[ 2384.822489][T13444]  ? __pfx___video_do_ioctl+0x10/0x10
[ 2384.822513][T13444]  ? __pfx_video_usercopy+0x10/0x10
[ 2384.822547][T13444]  ? __fget_files+0x2a/0x420
[ 2384.822566][T13444]  v4l2_ioctl+0x18d/0x1e0
[ 2384.822589][T13444]  v4l2_compat_ioctl32+0x1c4/0x270
[ 2384.822619][T13444]  __ia32_compat_sys_ioctl+0x5ea/0x950
[ 2384.822643][T13444]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2384.822665][T13444]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2384.822686][T13444]  ? __fget_files+0x3a2/0x420
[ 2384.822706][T13444]  ? fput+0xa0/0xd0
[ 2384.822730][T13444]  ? ksys_write+0x242/0x270
[ 2384.822756][T13444]  __do_fast_syscall_32+0x27a/0x6b0
[ 2384.822778][T13444]  ? do_fast_syscall_32+0x33/0x70
[ 2384.822798][T13444]  ? asm_int80_emulation+0x1a/0x20
[ 2384.822814][T13444]  ? do_int80_emulation+0x299/0x500
[ 2384.822834][T13444]  ? trace_irq_disable+0x3b/0x140
[ 2384.822856][T13444]  do_fast_syscall_32+0x33/0x70
[ 2384.822881][T13444]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2384.822903][T13444] RIP: 0023:0xf73bf0ec
[ 2384.822919][T13444] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2384.822933][T13444] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2384.822951][T13444] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602
[ 2384.822963][T13444] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 2384.822973][T13444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2384.822983][T13444] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2384.822993][T13444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2384.823017][T13444]  </TASK>
[ 2384.885245][T13445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2384.891757][T13445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2384.929903][ T6991] usb 8-1: new high-speed USB device number 49 using dummy_hcd
[ 2384.970539][ T6999] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 2385.112476][ T6991] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2385.114791][ T6991] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2385.114822][ T6991] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2385.114845][ T6991] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2385.114893][ T6991] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2385.114923][ T6991] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2385.117141][ T6991] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2385.117170][ T6991] usb 8-1: Product: syz
[ 2385.117187][ T6991] usb 8-1: Manufacturer: syz
[ 2385.152562][ T6991] cdc_wdm 8-1:1.0: skipping garbage
[ 2385.152616][ T6991] cdc_wdm 8-1:1.0: skipping garbage
[ 2385.181444][ T6991] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device
[ 2385.181505][ T6991] cdc_wdm 8-1:1.0: Unknown control protocol
[ 2385.221599][ T6999] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2385.224317][ T6999] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2385.224347][ T6999] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2385.224367][ T6999] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2385.224432][ T6999] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2385.224463][ T6999] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2385.247368][ T6999] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2385.247405][ T6999] usb 4-1: Product: syz
[ 2385.247424][ T6999] usb 4-1: Manufacturer: syz
[ 2385.323803][ T6999] cdc_wdm 4-1:1.0: skipping garbage
[ 2385.323826][ T6999] cdc_wdm 4-1:1.0: skipping garbage
[ 2385.340179][ T6999] cdc_wdm 4-1:1.0: cdc-wdm2: USB WDM device
[ 2385.340202][ T6999] cdc_wdm 4-1:1.0: Unknown control protocol
[ 2385.367367][T13439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2385.367891][T13439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2385.533732][T13437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2385.535605][T13437] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2385.579187][T13439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2385.581060][T13439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2385.599228][T13439] debugfs: '1ùà^!‚lü1”' already exists in 'ieee80211'
[ 2385.741939][T13437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2385.742575][T13437] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2385.768164][T13437] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1”'
[ 2385.768198][T13437] CPU: 0 UID: 0 PID: 13437 Comm: syz.3.12411 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2385.768232][T13437] Tainted: [L]=SOFTLOCKUP
[ 2385.768243][T13437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2385.768257][T13437] Call Trace:
[ 2385.768267][T13437]  <TASK>
[ 2385.768278][T13437]  dump_stack_lvl+0xe8/0x150
[ 2385.768320][T13437]  sysfs_warn_dup+0x8e/0xa0
[ 2385.768357][T13437]  sysfs_do_create_link_sd+0xc0/0x110
[ 2385.768389][T13437]  device_add_class_symlinks+0x1cf/0x240
[ 2385.768430][T13437]  device_add+0x467/0xb80
[ 2385.768466][T13437]  wiphy_register+0x1fc8/0x2ff0
[ 2385.768520][T13437]  ? __pfx_wiphy_register+0x10/0x10
[ 2385.768556][T13437]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2385.768586][T13437]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 2385.768627][T13437]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 2385.768672][T13437]  ieee80211_register_hw+0x3dbb/0x4b00
[ 2385.768715][T13437]  ? ieee80211_register_hw+0x1971/0x4b00
[ 2385.768770][T13437]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2385.768806][T13437]  ? __asan_memset+0x22/0x50
[ 2385.768833][T13437]  ? __hrtimer_setup+0x1b7/0x260
[ 2385.768868][T13437]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2385.768909][T13437]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 2385.768980][T13437]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2385.769015][T13437]  ? kstrndup+0xbd/0x160
[ 2385.769050][T13437]  ? kstrndup+0xbd/0x160
[ 2385.769080][T13437]  hwsim_new_radio_nl+0xd8b/0xf90
[ 2385.769134][T13437]  genl_family_rcv_msg_doit+0x233/0x340
[ 2385.769167][T13437]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2385.769207][T13437]  ? bpf_lsm_capable+0x9/0x20
[ 2385.769241][T13437]  ? security_capable+0x7e/0x2c0
[ 2385.769291][T13437]  genl_rcv_msg+0x614/0x7a0
[ 2385.769322][T13437]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2385.769352][T13437]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2385.769404][T13437]  netlink_rcv_skb+0x226/0x4a0
[ 2385.769438][T13437]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2385.769464][T13437]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2385.769513][T13437]  ? down_read+0x2be/0x330
[ 2385.769551][T13437]  genl_rcv+0x28/0x40
[ 2385.769586][T13437]  netlink_unicast+0x8ef/0xa80
[ 2385.769634][T13437]  netlink_sendmsg+0x813/0xb40
[ 2385.769678][T13437]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2385.769721][T13437]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2385.769758][T13437]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2385.769789][T13437]  sock_sendmsg_nosec+0x13a/0x180
[ 2385.769827][T13437]  ____sys_sendmsg+0x54e/0x850
[ 2385.769860][T13437]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2385.769895][T13437]  ? __pfx_futex_wake_mark+0x10/0x10
[ 2385.769929][T13437]  ___sys_sendmsg+0x2a5/0x360
[ 2385.769954][T13437]  ? __lock_acquire+0x747/0x2de0
[ 2385.769987][T13437]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2385.770019][T13437]  ? futex_wait+0x2a2/0x390
[ 2385.770077][T13437]  ? __fget_files+0x2a/0x420
[ 2385.770100][T13437]  ? __fget_files+0x3a2/0x420
[ 2385.770134][T13437]  __sys_sendmsg+0x177/0x240
[ 2385.770178][T13437]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2385.770230][T13437]  __do_fast_syscall_32+0x27a/0x6b0
[ 2385.770264][T13437]  ? do_fast_syscall_32+0x33/0x70
[ 2385.770296][T13437]  ? irqentry_exit+0x10f/0x920
[ 2385.770352][T13437]  ? trace_irq_disable+0x3b/0x140
[ 2385.770385][T13437]  do_fast_syscall_32+0x33/0x70
[ 2385.770416][T13437]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2385.770446][T13437] RIP: 0023:0xf7f050ec
[ 2385.770468][T13437] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2385.770489][T13437] RSP: 002b:00000000f53b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2385.770516][T13437] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000240
[ 2385.770534][T13437] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[ 2385.770549][T13437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2385.770563][T13437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2385.770578][T13437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2385.770614][T13437]  </TASK>
[ 2385.921510][ T6991] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 2386.129188][ T6991] usb 9-1: device descriptor read/64, error -71
[ 2386.302702][T13463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2386.321425][T13463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2386.369225][ T6991] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 2386.435170][T13458] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12409'.
[ 2386.499059][ T6991] usb 9-1: device descriptor read/64, error -71
[ 2386.588704][T13468] FAULT_INJECTION: forcing a failure.
[ 2386.588704][T13468] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2386.588744][T13468] CPU: 0 UID: 0 PID: 13468 Comm: syz.2.12420 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2386.588785][T13468] Tainted: [L]=SOFTLOCKUP
[ 2386.588794][T13468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2386.588812][T13468] Call Trace:
[ 2386.588820][T13468]  <TASK>
[ 2386.588830][T13468]  dump_stack_lvl+0xe8/0x150
[ 2386.588868][T13468]  should_fail_ex+0x410/0x560
[ 2386.588905][T13468]  _copy_to_user+0x31/0xb0
[ 2386.588930][T13468]  simple_read_from_buffer+0xe1/0x170
[ 2386.588973][T13468]  proc_fail_nth_read+0x1bb/0x230
[ 2386.588998][T13468]  ? common_file_perm+0x20e/0x2b0
[ 2386.589036][T13468]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2386.589067][T13468]  ? rw_verify_area+0x24a/0x4c0
[ 2386.589093][T13468]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2386.589119][T13468]  vfs_read+0x213/0xa80
[ 2386.589149][T13468]  ? __pfx___mutex_lock+0x10/0x10
[ 2386.589179][T13468]  ? __pfx_vfs_read+0x10/0x10
[ 2386.589205][T13468]  ? __fget_files+0x2a/0x420
[ 2386.589232][T13468]  ? __fget_files+0x3a2/0x420
[ 2386.589252][T13468]  ? __fget_files+0x2a/0x420
[ 2386.589283][T13468]  ksys_read+0x150/0x270
[ 2386.589310][T13468]  ? __pfx_ksys_read+0x10/0x10
[ 2386.589339][T13468]  ? asm_int80_emulation+0x1a/0x20
[ 2386.589369][T13468]  do_int80_emulation+0x198/0x500
[ 2386.589398][T13468]  ? trace_irq_disable+0x3b/0x140
[ 2386.589425][T13468]  ? asm_int80_emulation+0x1a/0x20
[ 2386.589446][T13468]  ? clear_bhb_loop+0x70/0xc0
[ 2386.589469][T13468]  ? clear_bhb_loop+0x70/0xc0
[ 2386.589499][T13468]  asm_int80_emulation+0x1a/0x20
[ 2386.589521][T13468] RIP: 0023:0xf71977eb
[ 2386.589541][T13468] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 2386.589562][T13468] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2386.589586][T13468] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54565d0
[ 2386.589602][T13468] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 2386.589616][T13468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2386.589630][T13468] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2386.589644][T13468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2386.589678][T13468]  </TASK>
[ 2386.612171][ T6991] usb usb9-port1: attempt power cycle
[ 2386.622636][T13459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12411'.
[ 2386.949465][ T6991] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 2386.970645][ T6991] usb 9-1: device descriptor read/8, error -71
[ 2387.148962][ T6987] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 2387.208959][ T6991] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 2387.230834][ T6991] usb 9-1: device descriptor read/8, error -71
[ 2387.299766][ T6987] usb 3-1: Using ep0 maxpacket: 16
[ 2387.302235][ T6987] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2387.302272][ T6987] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[ 2387.303344][ T6987] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2387.303399][ T6987] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2387.303451][ T6987] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2387.305749][ T6987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2387.305776][ T6987] usb 3-1: Product: syz
[ 2387.305793][ T6987] usb 3-1: Manufacturer: syz
[ 2387.305810][ T6987] usb 3-1: SerialNumber: syz
[ 2387.340413][ T6991] usb usb9-port1: unable to enumerate USB device
[ 2387.525979][ T6987] usb 3-1: Audio class v2/v3 interfaces need an interface association
[ 2387.526337][ T6987] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 2387.708908][ T6999] usb 4-1: USB disconnect, device number 80
[ 2387.718960][ T6991] usb 8-1: USB disconnect, device number 49
[ 2387.930010][ T6987] usb 3-1: 2:1 : can't get Cluster Descriptor
[ 2388.139173][ T6999] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 2388.148645][ T6987] usb 3-1: USB disconnect, device number 58
[ 2388.299937][ T6999] usb 4-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00
[ 2388.301414][ T6999] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2388.301445][ T6999] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2388.303931][ T6999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2388.303959][ T6999] usb 4-1: Product: syz
[ 2388.303977][ T6999] usb 4-1: Manufacturer: syz
[ 2388.303994][ T6999] usb 4-1: SerialNumber: syz
[ 2388.331602][T13486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2388.333034][T13486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2388.360257][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12426'.
[ 2388.609958][ T6999] usb 4-1: USB disconnect, device number 81
[ 2388.615877][T13492] syzkaller0: entered promiscuous mode
[ 2388.615911][T13492] syzkaller0: entered allmulticast mode
[ 2389.305073][T13506] netlink: 36 bytes leftover after parsing attributes in process `syz.9.12432'.
[ 2389.638211][T13511] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12434'.
[ 2389.787138][T13513] FAULT_INJECTION: forcing a failure.
[ 2389.787138][T13513] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2389.787186][T13513] CPU: 1 UID: 0 PID: 13513 Comm: syz.2.12435 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2389.787216][T13513] Tainted: [L]=SOFTLOCKUP
[ 2389.787225][T13513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2389.787244][T13513] Call Trace:
[ 2389.787251][T13513]  <TASK>
[ 2389.787259][T13513]  dump_stack_lvl+0xe8/0x150
[ 2389.787289][T13513]  should_fail_ex+0x410/0x560
[ 2389.787318][T13513]  _copy_to_user+0x31/0xb0
[ 2389.787357][T13513]  simple_read_from_buffer+0xe1/0x170
[ 2389.787399][T13513]  proc_fail_nth_read+0x1bb/0x230
[ 2389.787426][T13513]  ? common_file_perm+0x20e/0x2b0
[ 2389.787462][T13513]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2389.787494][T13513]  ? rw_verify_area+0x24a/0x4c0
[ 2389.787513][T13513]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2389.787532][T13513]  vfs_read+0x213/0xa80
[ 2389.787554][T13513]  ? __pfx___mutex_lock+0x10/0x10
[ 2389.787575][T13513]  ? __pfx_vfs_read+0x10/0x10
[ 2389.787593][T13513]  ? __fget_files+0x2a/0x420
[ 2389.787632][T13513]  ? __fget_files+0x3a2/0x420
[ 2389.787654][T13513]  ? __fget_files+0x2a/0x420
[ 2389.787683][T13513]  ksys_read+0x150/0x270
[ 2389.787708][T13513]  ? __pfx_ksys_read+0x10/0x10
[ 2389.787736][T13513]  ? asm_int80_emulation+0x1a/0x20
[ 2389.787756][T13513]  do_int80_emulation+0x198/0x500
[ 2389.787777][T13513]  ? trace_irq_disable+0x3b/0x140
[ 2389.787794][T13513]  ? asm_int80_emulation+0x1a/0x20
[ 2389.787809][T13513]  ? clear_bhb_loop+0x70/0xc0
[ 2389.787825][T13513]  ? clear_bhb_loop+0x70/0xc0
[ 2389.787845][T13513]  asm_int80_emulation+0x1a/0x20
[ 2389.787860][T13513] RIP: 0023:0xf71977eb
[ 2389.787875][T13513] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 2389.787909][T13513] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2389.787934][T13513] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54565d0
[ 2389.787949][T13513] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 2389.787962][T13513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2389.787975][T13513] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2389.787992][T13513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2389.788015][T13513]  </TASK>
[ 2390.610082][ T6991] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[ 2390.741753][ T6991] usb 3-1: device descriptor read/64, error -71
[ 2391.003385][ T6991] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[ 2391.148981][ T6991] usb 3-1: device descriptor read/64, error -71
[ 2391.259523][ T6991] usb usb3-port1: attempt power cycle
[ 2391.598947][ T6991] usb 3-1: new full-speed USB device number 61 using dummy_hcd
[ 2391.657611][ T6991] usb 3-1: device descriptor read/8, error -71
[ 2391.898968][ T6991] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[ 2391.920061][ T6991] usb 3-1: device descriptor read/8, error -71
[ 2392.029678][ T6991] usb usb3-port1: unable to enumerate USB device
[ 2396.419338][ T6987] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[ 2396.419535][ T6991] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 2396.570258][ T6987] usb 8-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[ 2396.570501][ T6991] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2396.571780][ T6991] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2396.571810][ T6991] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2396.571833][ T6991] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2396.571890][ T6991] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2396.571920][ T6991] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2396.572099][ T6987] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2396.573288][ T6987] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2396.574977][ T6991] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2396.575004][ T6991] usb 9-1: Product: syz
[ 2396.575021][ T6991] usb 9-1: Manufacturer: syz
[ 2396.575154][ T6987] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2396.575207][ T6987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2396.579836][ T6987] usb 8-1: config 0 descriptor??
[ 2396.727288][ T6991] cdc_wdm 9-1:1.0: skipping garbage
[ 2396.727315][ T6991] cdc_wdm 9-1:1.0: skipping garbage
[ 2396.741030][ T7005] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 2396.744474][ T6991] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device
[ 2396.744498][ T6991] cdc_wdm 9-1:1.0: Unknown control protocol
[ 2396.824572][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12442'.
[ 2396.825942][ T7000] usb 8-1: USB disconnect, device number 50
[ 2396.910104][ T7005] usb 3-1: Using ep0 maxpacket: 16
[ 2396.913708][ T7005] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2396.932135][ T7005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2396.932168][ T7005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2396.932184][ T7005] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2396.932217][ T7005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2396.936471][ T7005] usb 3-1: config 0 descriptor??
[ 2397.010981][T13533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2397.011538][T13533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2397.244732][T13533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2397.253821][T13533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2397.283271][T13533] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1”'
[ 2397.283298][T13533] CPU: 0 UID: 0 PID: 13533 Comm: syz.8.12443 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2397.283341][T13533] Tainted: [L]=SOFTLOCKUP
[ 2397.283350][T13533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2397.283365][T13533] Call Trace:
[ 2397.283375][T13533]  <TASK>
[ 2397.283385][T13533]  dump_stack_lvl+0xe8/0x150
[ 2397.283425][T13533]  sysfs_warn_dup+0x8e/0xa0
[ 2397.283452][T13533]  sysfs_do_create_link_sd+0xc0/0x110
[ 2397.283482][T13533]  device_add_class_symlinks+0x1cf/0x240
[ 2397.283521][T13533]  device_add+0x467/0xb80
[ 2397.283556][T13533]  wiphy_register+0x1fc8/0x2ff0
[ 2397.283609][T13533]  ? __pfx_wiphy_register+0x10/0x10
[ 2397.283645][T13533]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2397.283675][T13533]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 2397.283714][T13533]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 2397.283759][T13533]  ieee80211_register_hw+0x3dbb/0x4b00
[ 2397.283800][T13533]  ? ieee80211_register_hw+0x1971/0x4b00
[ 2397.283855][T13533]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2397.283885][T13533]  ? __asan_memset+0x22/0x50
[ 2397.283912][T13533]  ? __hrtimer_setup+0x1b7/0x260
[ 2397.283946][T13533]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2397.283986][T13533]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 2397.284056][T13533]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2397.284092][T13533]  ? kstrndup+0xbd/0x160
[ 2397.284127][T13533]  ? kstrndup+0xbd/0x160
[ 2397.284157][T13533]  hwsim_new_radio_nl+0xd8b/0xf90
[ 2397.284209][T13533]  genl_family_rcv_msg_doit+0x233/0x340
[ 2397.284241][T13533]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2397.284279][T13533]  ? bpf_lsm_capable+0x9/0x20
[ 2397.284304][T13533]  ? security_capable+0x7e/0x2c0
[ 2397.284355][T13533]  genl_rcv_msg+0x614/0x7a0
[ 2397.284386][T13533]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2397.284407][T13533]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2397.284459][T13533]  netlink_rcv_skb+0x226/0x4a0
[ 2397.284491][T13533]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2397.284516][T13533]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2397.284562][T13533]  ? down_read+0x2be/0x330
[ 2397.284598][T13533]  genl_rcv+0x28/0x40
[ 2397.284632][T13533]  netlink_unicast+0x8ef/0xa80
[ 2397.284679][T13533]  netlink_sendmsg+0x813/0xb40
[ 2397.284720][T13533]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2397.284760][T13533]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2397.284797][T13533]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2397.284833][T13533]  sock_sendmsg_nosec+0x13a/0x180
[ 2397.284870][T13533]  ____sys_sendmsg+0x54e/0x850
[ 2397.284903][T13533]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2397.284938][T13533]  ? __pfx_futex_wake_mark+0x10/0x10
[ 2397.284971][T13533]  ___sys_sendmsg+0x2a5/0x360
[ 2397.284996][T13533]  ? __lock_acquire+0x747/0x2de0
[ 2397.285028][T13533]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2397.285059][T13533]  ? futex_wait+0x2a2/0x390
[ 2397.285115][T13533]  ? __fget_files+0x2a/0x420
[ 2397.285137][T13533]  ? __fget_files+0x3a2/0x420
[ 2397.285171][T13533]  __sys_sendmsg+0x177/0x240
[ 2397.285201][T13533]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2397.285250][T13533]  __do_fast_syscall_32+0x27a/0x6b0
[ 2397.285283][T13533]  ? do_fast_syscall_32+0x33/0x70
[ 2397.285320][T13533]  ? irqentry_exit+0x10f/0x920
[ 2397.285346][T13533]  ? trace_irq_disable+0x3b/0x140
[ 2397.285377][T13533]  do_fast_syscall_32+0x33/0x70
[ 2397.285408][T13533]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2397.285437][T13533] RIP: 0023:0xf73bf0ec
[ 2397.285459][T13533] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2397.285481][T13533] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2397.285507][T13533] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240
[ 2397.285524][T13533] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[ 2397.285540][T13533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2397.285554][T13533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2397.285568][T13533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2397.285604][T13533]  </TASK>
[ 2397.648547][ T7005] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0
[ 2397.648722][ T7005] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0
[ 2397.648909][ T7005] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0
[ 2397.648940][ T7005] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0
[ 2397.648994][ T7005] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0
[ 2397.649088][ T7005] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0
[ 2397.649164][ T7005] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0
[ 2397.660314][ T7005] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0
[ 2397.660431][ T7005] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0
[ 2397.660513][ T7005] microsoft 0003:045E:07DA.0065: unknown main item tag 0x0
[ 2397.816632][ T7005] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0065/input/input484
[ 2397.874472][ T7005] microsoft 0003:045E:07DA.0065: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 2398.184069][T13549] netlink: 36 bytes leftover after parsing attributes in process `syz.7.12446'.
[ 2398.214581][ T7005] usb 3-1: USB disconnect, device number 63
[ 2398.322080][T13551] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2398.322787][T13553] syzkaller0: entered promiscuous mode
[ 2398.322812][T13553] syzkaller0: entered allmulticast mode
[ 2398.375458][T13551] netlink: 'syz.3.12447': attribute type 39 has an invalid length.
[ 2398.829615][ T7000] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 2398.980576][ T7000] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 2398.981801][ T7000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2398.999772][ T7000] usb 3-1: config 0 descriptor??
[ 2399.282504][ T7000] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 2399.328610][ T7005] usb 9-1: USB disconnect, device number 37
[ 2399.442591][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12455'.
[ 2399.479390][T13572] FAULT_INJECTION: forcing a failure.
[ 2399.479390][T13572] name failslab, interval 1, probability 0, space 1, times 0
[ 2399.479433][T13572] CPU: 1 UID: 0 PID: 13572 Comm: syz.3.12455 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2399.479464][T13572] Tainted: [L]=SOFTLOCKUP
[ 2399.479474][T13572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2399.479488][T13572] Call Trace:
[ 2399.479498][T13572]  <TASK>
[ 2399.479509][T13572]  dump_stack_lvl+0xe8/0x150
[ 2399.479550][T13572]  should_fail_ex+0x410/0x560
[ 2399.479590][T13572]  should_failslab+0xa8/0x100
[ 2399.479624][T13572]  __kmalloc_cache_noprof+0xa3/0x600
[ 2399.479653][T13572]  ? igmp6_group_dropped+0x5f0/0x1190
[ 2399.479686][T13572]  ? igmp6_group_dropped+0x5f0/0x1190
[ 2399.479729][T13572]  igmp6_group_dropped+0x5f0/0x1190
[ 2399.479771][T13572]  ? __pfx___mutex_lock+0x10/0x10
[ 2399.479804][T13572]  ? __pfx_igmp6_group_dropped+0x10/0x10
[ 2399.479840][T13572]  ? __lock_acquire+0x747/0x2de0
[ 2399.479877][T13572]  __ipv6_dev_mc_dec+0x2c8/0x3a0
[ 2399.479923][T13572]  addrconf_leave_solict+0x11c/0x1a0
[ 2399.479957][T13572]  ? __pfx_addrconf_leave_solict+0x10/0x10
[ 2399.479994][T13572]  ? __local_bh_enable_ip+0xd6/0x140
[ 2399.480030][T13572]  __ipv6_dev_ac_dec+0x51d/0x660
[ 2399.480078][T13572]  __ipv6_sock_ac_close+0x23f/0x420
[ 2399.480126][T13572]  inet6_release+0x4f/0x70
[ 2399.480159][T13572]  __sock_release+0xa0/0x1f0
[ 2399.480191][T13572]  ? __pfx_sock_close+0x10/0x10
[ 2399.480221][T13572]  sock_close+0x1c/0x30
[ 2399.480249][T13572]  __fput+0x40d/0xa50
[ 2399.480291][T13572]  task_work_run+0x1d9/0x270
[ 2399.480321][T13572]  ? __pfx_task_work_run+0x10/0x10
[ 2399.480359][T13572]  exit_to_user_mode_loop+0x204/0x770
[ 2399.480387][T13572]  ? rcu_is_watching+0x16/0xb0
[ 2399.480418][T13572]  ? do_fast_syscall_32+0x33/0x70
[ 2399.480451][T13572]  __do_fast_syscall_32+0x437/0x6b0
[ 2399.480480][T13572]  ? do_fast_syscall_32+0x33/0x70
[ 2399.480509][T13572]  ? asm_int80_emulation+0x1a/0x20
[ 2399.480533][T13572]  ? do_int80_emulation+0x299/0x500
[ 2399.480559][T13572]  ? trace_irq_disable+0x3b/0x140
[ 2399.480596][T13572]  do_fast_syscall_32+0x33/0x70
[ 2399.480627][T13572]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2399.480655][T13572] RIP: 0023:0xf7f050ec
[ 2399.480675][T13572] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2399.480695][T13572] RSP: 002b:00000000f53b650c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4
[ 2399.480720][T13572] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000007
[ 2399.480734][T13572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2399.480747][T13572] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2399.480759][T13572] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2399.480773][T13572] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2399.480807][T13572]  </TASK>
[ 2399.842356][ T7000] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1
[ 2399.842385][ T7000] [drm] Initialized udl on minor 1
[ 2400.524179][T13589] xfrm0: Caught tx_queue_len zero misconfig
[ 2400.528203][T13588] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 2401.166473][ T7000] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2401.166941][ T7000] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 2401.206747][ T7000] usb 3-1: USB disconnect, device number 64
[ 2401.473790][T13616] netlink: 36 bytes leftover after parsing attributes in process `syz.9.12470'.
[ 2401.514472][T13617] netlink: 36 bytes leftover after parsing attributes in process `syz.7.12471'.
[ 2402.224150][ T6999] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 2402.389138][ T6987] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 2402.393313][ T6999] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2402.394489][ T6999] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2402.394510][ T6999] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2402.394525][ T6999] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2402.394558][ T6999] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2402.394578][ T6999] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2402.398748][ T6999] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2402.398768][ T6999] usb 9-1: Product: syz
[ 2402.398780][ T6999] usb 9-1: Manufacturer: syz
[ 2402.501634][ T6999] cdc_wdm 9-1:1.0: skipping garbage
[ 2402.503053][ T6999] cdc_wdm 9-1:1.0: skipping garbage
[ 2402.508368][ T6999] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device
[ 2402.508389][ T6999] cdc_wdm 9-1:1.0: Unknown control protocol
[ 2402.541189][ T6987] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[ 2402.542662][ T6987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2402.544346][ T6987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2402.545311][ T6987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2402.545365][ T6987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2402.600697][ T6987] usb 3-1: config 0 descriptor??
[ 2402.745960][T13622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2402.746283][T13622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2402.830459][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12474'.
[ 2402.834071][ T6987] usb 3-1: USB disconnect, device number 65
[ 2402.981852][T13622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2402.985094][T13622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2403.024784][T13622] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1”'
[ 2403.024803][T13622] CPU: 0 UID: 0 PID: 13622 Comm: syz.8.12473 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2403.024833][T13622] Tainted: [L]=SOFTLOCKUP
[ 2403.024839][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2403.024851][T13622] Call Trace:
[ 2403.024857][T13622]  <TASK>
[ 2403.024865][T13622]  dump_stack_lvl+0xe8/0x150
[ 2403.024902][T13622]  sysfs_warn_dup+0x8e/0xa0
[ 2403.024921][T13622]  sysfs_do_create_link_sd+0xc0/0x110
[ 2403.024942][T13622]  device_add_class_symlinks+0x1cf/0x240
[ 2403.024971][T13622]  device_add+0x467/0xb80
[ 2403.024996][T13622]  wiphy_register+0x1fc8/0x2ff0
[ 2403.025035][T13622]  ? __pfx_wiphy_register+0x10/0x10
[ 2403.025061][T13622]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2403.025082][T13622]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 2403.025111][T13622]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 2403.025142][T13622]  ieee80211_register_hw+0x3dbb/0x4b00
[ 2403.025171][T13622]  ? ieee80211_register_hw+0x1971/0x4b00
[ 2403.025209][T13622]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2403.025231][T13622]  ? __asan_memset+0x22/0x50
[ 2403.025250][T13622]  ? __hrtimer_setup+0x1b7/0x260
[ 2403.025274][T13622]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2403.025305][T13622]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 2403.025354][T13622]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2403.025380][T13622]  ? kstrndup+0xbd/0x160
[ 2403.025407][T13622]  ? kstrndup+0xbd/0x160
[ 2403.025429][T13622]  hwsim_new_radio_nl+0xd8b/0xf90
[ 2403.025467][T13622]  genl_family_rcv_msg_doit+0x233/0x340
[ 2403.025490][T13622]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2403.025517][T13622]  ? bpf_lsm_capable+0x9/0x20
[ 2403.025535][T13622]  ? security_capable+0x7e/0x2c0
[ 2403.025566][T13622]  genl_rcv_msg+0x614/0x7a0
[ 2403.025587][T13622]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2403.025603][T13622]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2403.025639][T13622]  netlink_rcv_skb+0x226/0x4a0
[ 2403.025662][T13622]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2403.025679][T13622]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2403.025713][T13622]  ? down_read+0x2be/0x330
[ 2403.025739][T13622]  genl_rcv+0x28/0x40
[ 2403.025764][T13622]  netlink_unicast+0x8ef/0xa80
[ 2403.025797][T13622]  netlink_sendmsg+0x813/0xb40
[ 2403.025827][T13622]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2403.025856][T13622]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2403.025882][T13622]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2403.025909][T13622]  sock_sendmsg_nosec+0x13a/0x180
[ 2403.025935][T13622]  ____sys_sendmsg+0x54e/0x850
[ 2403.025958][T13622]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2403.025983][T13622]  ? __pfx_futex_wake_mark+0x10/0x10
[ 2403.026005][T13622]  ___sys_sendmsg+0x2a5/0x360
[ 2403.026023][T13622]  ? __lock_acquire+0x747/0x2de0
[ 2403.026045][T13622]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2403.026068][T13622]  ? futex_wait+0x2a2/0x390
[ 2403.026107][T13622]  ? __fget_files+0x2a/0x420
[ 2403.026122][T13622]  ? __fget_files+0x3a2/0x420
[ 2403.026146][T13622]  __sys_sendmsg+0x177/0x240
[ 2403.026167][T13622]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2403.026201][T13622]  __do_fast_syscall_32+0x27a/0x6b0
[ 2403.026224][T13622]  ? do_fast_syscall_32+0x33/0x70
[ 2403.026246][T13622]  ? irqentry_exit+0x10f/0x920
[ 2403.026264][T13622]  ? trace_irq_disable+0x3b/0x140
[ 2403.026287][T13622]  do_fast_syscall_32+0x33/0x70
[ 2403.026309][T13622]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2403.026330][T13622] RIP: 0023:0xf73bf0ec
[ 2403.026346][T13622] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2403.026361][T13622] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2403.026379][T13622] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240
[ 2403.026392][T13622] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[ 2403.026406][T13622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2403.026416][T13622] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2403.026427][T13622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2403.026451][T13622]  </TASK>
[ 2403.817690][T13648] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 2404.758998][ T7000] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[ 2404.902940][T13664] FAULT_INJECTION: forcing a failure.
[ 2404.902940][T13664] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2404.902984][T13664] CPU: 1 UID: 0 PID: 13664 Comm: syz.3.12486 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2404.903014][T13664] Tainted: [L]=SOFTLOCKUP
[ 2404.903024][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2404.903038][T13664] Call Trace:
[ 2404.903047][T13664]  <TASK>
[ 2404.903058][T13664]  dump_stack_lvl+0xe8/0x150
[ 2404.903098][T13664]  should_fail_ex+0x410/0x560
[ 2404.903137][T13664]  _copy_from_iter+0x1d3/0x1660
[ 2404.903171][T13664]  ? __alloc_skb+0x27a/0x7a0
[ 2404.903196][T13664]  ? __alloc_skb+0x27a/0x7a0
[ 2404.903220][T13664]  ? __alloc_skb+0x27a/0x7a0
[ 2404.903243][T13664]  ? __pfx__copy_from_iter+0x10/0x10
[ 2404.903275][T13664]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[ 2404.903301][T13664]  ? __alloc_skb+0x27a/0x7a0
[ 2404.903321][T13664]  ? __alloc_skb+0x27a/0x7a0
[ 2404.903349][T13664]  ? netlink_sendmsg+0x650/0xb40
[ 2404.903380][T13664]  ? skb_put+0x112/0x210
[ 2404.903406][T13664]  netlink_sendmsg+0x6c0/0xb40
[ 2404.903446][T13664]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2404.903490][T13664]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2404.903526][T13664]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2404.903554][T13664]  sock_sendmsg_nosec+0x13a/0x180
[ 2404.903590][T13664]  ____sys_sendmsg+0x54e/0x850
[ 2404.903622][T13664]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2404.903666][T13664]  ___sys_sendmsg+0x2a5/0x360
[ 2404.903691][T13664]  ? __lock_acquire+0x747/0x2de0
[ 2404.903722][T13664]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2404.903758][T13664]  ? get_pid_task+0x20/0x1f0
[ 2404.903782][T13664]  ? get_pid_task+0x20/0x1f0
[ 2404.903802][T13664]  ? get_pid_task+0x20/0x1f0
[ 2404.903858][T13664]  ? __fget_files+0x2a/0x420
[ 2404.903879][T13664]  ? __fget_files+0x3a2/0x420
[ 2404.903912][T13664]  __sys_sendmsg+0x177/0x240
[ 2404.903941][T13664]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2404.903988][T13664]  __do_fast_syscall_32+0x27a/0x6b0
[ 2404.904019][T13664]  ? do_fast_syscall_32+0x33/0x70
[ 2404.904048][T13664]  ? asm_int80_emulation+0x1a/0x20
[ 2404.904070][T13664]  ? do_int80_emulation+0x299/0x500
[ 2404.904098][T13664]  ? trace_irq_disable+0x3b/0x140
[ 2404.904127][T13664]  do_fast_syscall_32+0x33/0x70
[ 2404.904156][T13664]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2404.904182][T13664] RIP: 0023:0xf7f050ec
[ 2404.904203][T13664] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2404.904223][T13664] RSP: 002b:00000000f539550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2404.904248][T13664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[ 2404.904265][T13664] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 2404.904280][T13664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2404.904294][T13664] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2404.904309][T13664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2404.904342][T13664]  </TASK>
[ 2404.946722][ T7000] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 2404.959864][ T7000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2405.107774][ T7000] usb 8-1: config 0 descriptor??
[ 2405.374216][ T7000] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 2405.396244][ T7005] usb 9-1: USB disconnect, device number 38
[ 2405.571086][T13668] netlink: 76 bytes leftover after parsing attributes in process `syz.9.12488'.
[ 2405.637119][ T7000] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1
[ 2405.637155][ T7000] [drm] Initialized udl on minor 1
[ 2405.834833][T13673] netlink: 36 bytes leftover after parsing attributes in process `syz.8.12487'.
[ 2406.154729][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 2406.154797][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 2406.605561][T13681] tipc: Enabled bearer <eth:batadv0>, priority 13
[ 2406.890086][ T6987] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 2407.042576][ T6987] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[ 2407.047941][ T6987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2407.075971][ T6987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2407.078127][ T6987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2407.078196][ T6987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2407.132687][ T6987] usb 3-1: config 0 descriptor??
[ 2407.364425][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12491'.
[ 2407.380519][ T6999] usb 3-1: USB disconnect, device number 66
[ 2408.307053][T13697] FAULT_INJECTION: forcing a failure.
[ 2408.307053][T13697] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2408.307221][T13697] CPU: 1 UID: 0 PID: 13697 Comm: syz.9.12498 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2408.307253][T13697] Tainted: [L]=SOFTLOCKUP
[ 2408.307262][T13697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2408.307276][T13697] Call Trace:
[ 2408.307285][T13697]  <TASK>
[ 2408.307295][T13697]  dump_stack_lvl+0xe8/0x150
[ 2408.307334][T13697]  should_fail_ex+0x410/0x560
[ 2408.307372][T13697]  _copy_to_user+0x31/0xb0
[ 2408.307398][T13697]  put_cmsg_compat+0x439/0x610
[ 2408.307438][T13697]  ? __pfx_put_cmsg_compat+0x10/0x10
[ 2408.307465][T13697]  ? __skb_wait_for_more_packets+0x2b0/0x590
[ 2408.307499][T13697]  ? lock_acquire+0x115/0x350
[ 2408.307526][T13697]  ? put_cmsg+0xf5/0x5c0
[ 2408.307564][T13697]  ip6_datagram_recv_specific_ctl+0x1284/0x1a60
[ 2408.307602][T13697]  ? _copy_to_iter+0x30e/0x1810
[ 2408.307638][T13697]  ? __pfx_ip6_datagram_recv_specific_ctl+0x10/0x10
[ 2408.307666][T13697]  ? __pfx_sk_busy_loop_end+0x10/0x10
[ 2408.307703][T13697]  ? ip6_datagram_recv_common_ctl+0x156/0x3e0
[ 2408.307730][T13697]  ? __pfx__copy_to_iter+0x10/0x10
[ 2408.307778][T13697]  udpv6_recvmsg+0xe37/0x1320
[ 2408.307841][T13697]  ? __pfx_udpv6_recvmsg+0x10/0x10
[ 2408.307880][T13697]  ? inet6_recvmsg+0xe7/0x490
[ 2408.307914][T13697]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 2408.307947][T13697]  ? security_socket_recvmsg+0x7e/0x2c0
[ 2408.307976][T13697]  ? __pfx_inet6_recvmsg+0x10/0x10
[ 2408.308009][T13697]  sock_recvmsg+0xfa/0x1e0
[ 2408.308044][T13697]  ____sys_recvmsg+0x1e6/0x4a0
[ 2408.308081][T13697]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 2408.308122][T13697]  ? __lock_acquire+0x747/0x2de0
[ 2408.308156][T13697]  ___sys_recvmsg+0x213/0x5a0
[ 2408.308189][T13697]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2408.308223][T13697]  ? lock_acquire+0x115/0x350
[ 2408.308287][T13697]  ? __fget_files+0x3a2/0x420
[ 2408.308322][T13697]  do_recvmmsg+0x38b/0x7f0
[ 2408.308360][T13697]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2408.308402][T13697]  ? __mutex_unlock_slowpath+0x731/0x900
[ 2408.308446][T13697]  __sys_recvmmsg+0x1a5/0x290
[ 2408.308477][T13697]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 2408.308506][T13697]  ? ksys_write+0x242/0x270
[ 2408.308539][T13697]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[ 2408.308575][T13697]  __do_fast_syscall_32+0x27a/0x6b0
[ 2408.308606][T13697]  ? do_fast_syscall_32+0x33/0x70
[ 2408.308636][T13697]  ? asm_int80_emulation+0x1a/0x20
[ 2408.308659][T13697]  ? do_int80_emulation+0x299/0x500
[ 2408.308688][T13697]  ? trace_irq_disable+0x3b/0x140
[ 2408.308718][T13697]  do_fast_syscall_32+0x33/0x70
[ 2408.308748][T13697]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2408.308776][T13697] RIP: 0023:0xf7f150ec
[ 2408.308948][T13697] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2408.308972][T13697] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[ 2408.308998][T13697] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[ 2408.309014][T13697] RDX: 0000000000000001 RSI: 0000000040000022 RDI: 0000000000000000
[ 2408.309028][T13697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2408.309042][T13697] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2408.309055][T13697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2408.309087][T13697]  </TASK>
[ 2408.688158][T13705] FAULT_INJECTION: forcing a failure.
[ 2408.688158][T13705] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2408.688196][T13705] CPU: 1 UID: 0 PID: 13705 Comm: syz.8.12501 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2408.688251][T13705] Tainted: [L]=SOFTLOCKUP
[ 2408.688260][T13705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2408.688275][T13705] Call Trace:
[ 2408.688285][T13705]  <TASK>
[ 2408.688295][T13705]  dump_stack_lvl+0xe8/0x150
[ 2408.688338][T13705]  should_fail_ex+0x410/0x560
[ 2408.688379][T13705]  _copy_from_user+0x2d/0xb0
[ 2408.688403][T13705]  kstrtouint_from_user+0xd6/0x180
[ 2408.688437][T13705]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 2408.688478][T13705]  ? lock_acquire+0x115/0x350
[ 2408.688511][T13705]  proc_fail_nth_write+0x8e/0x210
[ 2408.688539][T13705]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2408.688576][T13705]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2408.688603][T13705]  vfs_write+0x296/0xba0
[ 2408.688637][T13705]  ? __pfx_vfs_write+0x10/0x10
[ 2408.688664][T13705]  ? __fget_files+0x2a/0x420
[ 2408.688692][T13705]  ? __fget_files+0x3a2/0x420
[ 2408.688712][T13705]  ? __fget_files+0x2a/0x420
[ 2408.688743][T13705]  ksys_write+0x150/0x270
[ 2408.688772][T13705]  ? __pfx_ksys_write+0x10/0x10
[ 2408.688801][T13705]  ? asm_int80_emulation+0x1a/0x20
[ 2408.688836][T13705]  do_int80_emulation+0x198/0x500
[ 2408.688866][T13705]  ? trace_irq_disable+0x3b/0x140
[ 2408.688892][T13705]  ? asm_int80_emulation+0x1a/0x20
[ 2408.688914][T13705]  ? clear_bhb_loop+0x70/0xc0
[ 2408.688936][T13705]  ? clear_bhb_loop+0x70/0xc0
[ 2408.688964][T13705]  asm_int80_emulation+0x1a/0x20
[ 2408.688987][T13705] RIP: 0023:0xf71177eb
[ 2408.689008][T13705] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 2408.689029][T13705] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[ 2408.689053][T13705] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0
[ 2408.689070][T13705] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 2408.689084][T13705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2408.689097][T13705] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2408.689111][T13705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2408.689146][T13705]  </TASK>
[ 2409.319403][ T6991] usb 4-1: new low-speed USB device number 82 using dummy_hcd
[ 2409.469243][ T6991] usb 4-1: Invalid ep0 maxpacket: 64
[ 2409.598923][ T6991] usb 4-1: new low-speed USB device number 83 using dummy_hcd
[ 2409.749334][ T6991] usb 4-1: Invalid ep0 maxpacket: 64
[ 2409.749656][ T6991] usb usb4-port1: attempt power cycle
[ 2410.099037][ T6991] usb 4-1: new low-speed USB device number 84 using dummy_hcd
[ 2410.123517][ T6991] usb 4-1: Invalid ep0 maxpacket: 64
[ 2410.253256][ T6991] usb 4-1: new low-speed USB device number 85 using dummy_hcd
[ 2410.273478][ T6991] usb 4-1: Invalid ep0 maxpacket: 64
[ 2410.274013][ T6991] usb usb4-port1: unable to enumerate USB device
[ 2410.321052][T13739] kvm [13738]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3ffeb7
[ 2410.466676][ T6988] asus 0018:0B05:0101.0066: unknown main item tag 0x0
[ 2410.466730][ T6988] asus 0018:0B05:0101.0066: unknown main item tag 0x0
[ 2410.466771][ T6988] asus 0018:0B05:0101.0066: unknown main item tag 0x0
[ 2410.466800][ T6988] asus 0018:0B05:0101.0066: unknown main item tag 0x0
[ 2410.466820][ T6988] asus 0018:0B05:0101.0066: unknown main item tag 0x0
[ 2410.466839][ T6988] asus 0018:0B05:0101.0066: unknown main item tag 0x0
[ 2410.466881][ T6988] asus 0018:0B05:0101.0066: unknown main item tag 0x0
[ 2410.466911][ T6988] asus 0018:0B05:0101.0066: unknown main item tag 0x0
[ 2410.466937][ T6988] asus 0018:0B05:0101.0066: unknown main item tag 0x0
[ 2410.467010][ T6988] asus 0018:0B05:0101.0066: unknown main item tag 0x0
[ 2410.551062][ T6988] asus 0018:0B05:0101.0066: hidraw0: I2C HID vffffff.fe Device [syz0] on syz1
[ 2410.712608][ T7000] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[ 2410.718721][ T7000] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[ 2410.748375][ T7000] usb 8-1: USB disconnect, device number 51
[ 2411.199619][ T6999] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 2411.351321][ T6999] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2411.353777][ T6999] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2411.353798][ T6999] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2411.353813][ T6999] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2411.353845][ T6999] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2411.353886][ T6999] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2411.377977][ T6999] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2411.377999][ T6999] usb 3-1: Product: syz
[ 2411.378011][ T6999] usb 3-1: Manufacturer: syz
[ 2411.456326][ T6999] cdc_wdm 3-1:1.0: skipping garbage
[ 2411.456343][ T6999] cdc_wdm 3-1:1.0: skipping garbage
[ 2411.481504][ T6999] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[ 2411.481524][ T6999] cdc_wdm 3-1:1.0: Unknown control protocol
[ 2411.571321][T13756] syzkaller0: left promiscuous mode
[ 2411.571419][T13756] syzkaller0: left allmulticast mode
[ 2411.636519][T13760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2411.637164][T13760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2411.663531][T13760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2411.663999][T13760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2411.664539][T13747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2411.666112][T13747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2411.848917][ T6991] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 2411.868205][T13747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2411.869166][T13747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2411.886164][T13747] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1”'
[ 2411.886192][T13747] CPU: 0 UID: 0 PID: 13747 Comm: syz.2.12514 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2411.886226][T13747] Tainted: [L]=SOFTLOCKUP
[ 2411.886236][T13747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2411.886251][T13747] Call Trace:
[ 2411.886260][T13747]  <TASK>
[ 2411.886271][T13747]  dump_stack_lvl+0xe8/0x150
[ 2411.886312][T13747]  sysfs_warn_dup+0x8e/0xa0
[ 2411.886340][T13747]  sysfs_do_create_link_sd+0xc0/0x110
[ 2411.886373][T13747]  device_add_class_symlinks+0x1cf/0x240
[ 2411.886413][T13747]  device_add+0x467/0xb80
[ 2411.886450][T13747]  wiphy_register+0x1fc8/0x2ff0
[ 2411.886505][T13747]  ? __pfx_wiphy_register+0x10/0x10
[ 2411.886542][T13747]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2411.886648][T13747]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 2411.886752][T13747]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 2411.886865][T13747]  ieee80211_register_hw+0x3dbb/0x4b00
[ 2411.886971][T13747]  ? ieee80211_register_hw+0x1971/0x4b00
[ 2411.887123][T13747]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2411.887205][T13747]  ? __asan_memset+0x22/0x50
[ 2411.887277][T13747]  ? __hrtimer_setup+0x1b7/0x260
[ 2411.887362][T13747]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2411.887473][T13747]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 2411.887637][T13747]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2411.887729][T13747]  ? kstrndup+0xbd/0x160
[ 2411.887812][T13747]  ? kstrndup+0xbd/0x160
[ 2411.887904][T13747]  hwsim_new_radio_nl+0xd8b/0xf90
[ 2411.888076][T13747]  genl_family_rcv_msg_doit+0x233/0x340
[ 2411.888179][T13747]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2411.888275][T13747]  ? bpf_lsm_capable+0x9/0x20
[ 2411.888373][T13747]  ? security_capable+0x7e/0x2c0
[ 2411.888485][T13747]  genl_rcv_msg+0x614/0x7a0
[ 2411.888556][T13747]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2411.888610][T13747]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2411.888741][T13747]  netlink_rcv_skb+0x226/0x4a0
[ 2411.888822][T13747]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2411.888885][T13747]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2411.889005][T13747]  ? down_read+0x2be/0x330
[ 2411.889105][T13747]  genl_rcv+0x28/0x40
[ 2411.889198][T13747]  netlink_unicast+0x8ef/0xa80
[ 2411.889314][T13747]  netlink_sendmsg+0x813/0xb40
[ 2411.889434][T13747]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2411.889575][T13747]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2411.889669][T13747]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2411.889743][T13747]  sock_sendmsg_nosec+0x13a/0x180
[ 2411.889862][T13747]  ____sys_sendmsg+0x54e/0x850
[ 2411.889945][T13747]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2411.890074][T13747]  ? __pfx_futex_wake_mark+0x10/0x10
[ 2411.890157][T13747]  ___sys_sendmsg+0x2a5/0x360
[ 2411.890228][T13747]  ? __lock_acquire+0x747/0x2de0
[ 2411.890310][T13747]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2411.890391][T13747]  ? futex_wait+0x2a2/0x390
[ 2411.890530][T13747]  ? __fget_files+0x2a/0x420
[ 2411.890582][T13747]  ? __fget_files+0x3a2/0x420
[ 2411.890674][T13747]  __sys_sendmsg+0x177/0x240
[ 2411.890754][T13747]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2411.890907][T13747]  __do_fast_syscall_32+0x27a/0x6b0
[ 2411.890991][T13747]  ? do_fast_syscall_32+0x33/0x70
[ 2411.891080][T13747]  ? irqentry_exit+0x10f/0x920
[ 2411.891143][T13747]  ? trace_irq_disable+0x3b/0x140
[ 2411.891231][T13747]  do_fast_syscall_32+0x33/0x70
[ 2411.891312][T13747]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2411.891384][T13747] RIP: 0023:0xf743f0ec
[ 2411.891445][T13747] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2411.891496][T13747] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2411.891561][T13747] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240
[ 2411.891603][T13747] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[ 2411.891637][T13747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2411.891676][T13747] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2411.891716][T13747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2411.891801][T13747]  </TASK>
[ 2412.123102][ T6991] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2412.161077][ T6991] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2412.161113][ T6991] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2412.161136][ T6991] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2412.161189][ T6991] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2412.161221][ T6991] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2412.212330][ T6991] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2412.212360][ T6991] usb 9-1: Product: syz
[ 2412.212377][ T6991] usb 9-1: Manufacturer: syz
[ 2412.387335][ T6991] cdc_wdm 9-1:1.0: skipping garbage
[ 2412.387359][ T6991] cdc_wdm 9-1:1.0: skipping garbage
[ 2412.399934][ T6991] cdc_wdm 9-1:1.0: cdc-wdm2: USB WDM device
[ 2412.399967][ T6991] cdc_wdm 9-1:1.0: Unknown control protocol
[ 2412.593191][T13763] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1424729573 (182365385344 ns) > initial count (134528494848 ns). Using initial count to start timer.
[ 2412.643202][T13758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2412.643523][T13758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2412.742598][T13761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12514'.
[ 2412.873986][T13758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2412.874305][T13758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2412.914835][T13758] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1”'
[ 2412.914854][T13758] CPU: 0 UID: 0 PID: 13758 Comm: syz.8.12519 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2412.914882][T13758] Tainted: [L]=SOFTLOCKUP
[ 2412.914889][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2412.914899][T13758] Call Trace:
[ 2412.914906][T13758]  <TASK>
[ 2412.914914][T13758]  dump_stack_lvl+0xe8/0x150
[ 2412.914945][T13758]  sysfs_warn_dup+0x8e/0xa0
[ 2412.914964][T13758]  sysfs_do_create_link_sd+0xc0/0x110
[ 2412.914985][T13758]  device_add_class_symlinks+0x1cf/0x240
[ 2412.915014][T13758]  device_add+0x467/0xb80
[ 2412.915040][T13758]  wiphy_register+0x1fc8/0x2ff0
[ 2412.915078][T13758]  ? __pfx_wiphy_register+0x10/0x10
[ 2412.915104][T13758]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2412.915126][T13758]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 2412.915155][T13758]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 2412.915187][T13758]  ieee80211_register_hw+0x3dbb/0x4b00
[ 2412.915217][T13758]  ? ieee80211_register_hw+0x1971/0x4b00
[ 2412.915255][T13758]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2412.915276][T13758]  ? __asan_memset+0x22/0x50
[ 2412.915295][T13758]  ? __hrtimer_setup+0x1b7/0x260
[ 2412.915320][T13758]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2412.915350][T13758]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 2412.915399][T13758]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2412.915431][T13758]  ? kstrndup+0xbd/0x160
[ 2412.915455][T13758]  ? kstrndup+0xbd/0x160
[ 2412.915477][T13758]  hwsim_new_radio_nl+0xd8b/0xf90
[ 2412.915514][T13758]  genl_family_rcv_msg_doit+0x233/0x340
[ 2412.915537][T13758]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2412.915565][T13758]  ? bpf_lsm_capable+0x9/0x20
[ 2412.915583][T13758]  ? security_capable+0x7e/0x2c0
[ 2412.915614][T13758]  genl_rcv_msg+0x614/0x7a0
[ 2412.915635][T13758]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2412.915651][T13758]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2412.915687][T13758]  netlink_rcv_skb+0x226/0x4a0
[ 2412.915710][T13758]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2412.915728][T13758]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2412.915762][T13758]  ? down_read+0x2be/0x330
[ 2412.915788][T13758]  genl_rcv+0x28/0x40
[ 2412.915813][T13758]  netlink_unicast+0x8ef/0xa80
[ 2412.915846][T13758]  netlink_sendmsg+0x813/0xb40
[ 2412.915876][T13758]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2412.915905][T13758]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2412.915931][T13758]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2412.915952][T13758]  sock_sendmsg_nosec+0x13a/0x180
[ 2412.915979][T13758]  ____sys_sendmsg+0x54e/0x850
[ 2412.916002][T13758]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2412.916027][T13758]  ? __pfx_futex_wake_mark+0x10/0x10
[ 2412.916049][T13758]  ___sys_sendmsg+0x2a5/0x360
[ 2412.916067][T13758]  ? __lock_acquire+0x747/0x2de0
[ 2412.916092][T13758]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2412.916114][T13758]  ? futex_wait+0x2a2/0x390
[ 2412.916153][T13758]  ? __fget_files+0x2a/0x420
[ 2412.916168][T13758]  ? __fget_files+0x3a2/0x420
[ 2412.916191][T13758]  __sys_sendmsg+0x177/0x240
[ 2412.916212][T13758]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2412.916247][T13758]  __do_fast_syscall_32+0x27a/0x6b0
[ 2412.916270][T13758]  ? do_fast_syscall_32+0x33/0x70
[ 2412.916292][T13758]  ? irqentry_exit+0x10f/0x920
[ 2412.916310][T13758]  ? trace_irq_disable+0x3b/0x140
[ 2412.916332][T13758]  do_fast_syscall_32+0x33/0x70
[ 2412.916355][T13758]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2412.916376][T13758] RIP: 0023:0xf73bf0ec
[ 2412.916391][T13758] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2412.916411][T13758] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2412.916430][T13758] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000240
[ 2412.916442][T13758] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[ 2412.916452][T13758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2412.916462][T13758] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2412.916473][T13758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2412.916498][T13758]  </TASK>
[ 2413.579615][T13790] FAULT_INJECTION: forcing a failure.
[ 2413.579615][T13790] name failslab, interval 1, probability 0, space 1, times 0
[ 2413.579646][T13790] CPU: 1 UID: 0 PID: 13790 Comm: syz.7.12529 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2413.579669][T13790] Tainted: [L]=SOFTLOCKUP
[ 2413.579676][T13790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2413.579686][T13790] Call Trace:
[ 2413.579693][T13790]  <TASK>
[ 2413.579701][T13790]  dump_stack_lvl+0xe8/0x150
[ 2413.579730][T13790]  should_fail_ex+0x410/0x560
[ 2413.579758][T13790]  should_failslab+0xa8/0x100
[ 2413.579781][T13790]  ? skb_clone+0x212/0x3a0
[ 2413.579800][T13790]  kmem_cache_alloc_noprof+0xa1/0x600
[ 2413.579819][T13790]  ? skb_clone+0x212/0x3a0
[ 2413.579845][T13790]  skb_clone+0x212/0x3a0
[ 2413.579867][T13790]  __netlink_deliver_tap+0x413/0x860
[ 2413.579934][T13790]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2413.579958][T13790]  netlink_deliver_tap+0x19c/0x1b0
[ 2413.579981][T13790]  netlink_unicast+0x8c1/0xa80
[ 2413.580013][T13790]  netlink_sendmsg+0x813/0xb40
[ 2413.580041][T13790]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2413.580069][T13790]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2413.580095][T13790]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2413.580116][T13790]  sock_sendmsg_nosec+0x13a/0x180
[ 2413.580142][T13790]  ____sys_sendmsg+0x54e/0x850
[ 2413.580165][T13790]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2413.580196][T13790]  ___sys_sendmsg+0x2a5/0x360
[ 2413.580213][T13790]  ? __lock_acquire+0x747/0x2de0
[ 2413.580234][T13790]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2413.580251][T13790]  ? get_pid_task+0x20/0x1f0
[ 2413.580267][T13790]  ? get_pid_task+0x20/0x1f0
[ 2413.580281][T13790]  ? get_pid_task+0x20/0x1f0
[ 2413.580318][T13790]  ? __fget_files+0x2a/0x420
[ 2413.580333][T13790]  ? __fget_files+0x3a2/0x420
[ 2413.580361][T13790]  __sys_sendmsg+0x177/0x240
[ 2413.580381][T13790]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2413.580417][T13790]  __do_fast_syscall_32+0x27a/0x6b0
[ 2413.580457][T13790]  ? do_fast_syscall_32+0x33/0x70
[ 2413.580486][T13790]  ? asm_int80_emulation+0x1a/0x20
[ 2413.580508][T13790]  ? do_int80_emulation+0x299/0x500
[ 2413.580535][T13790]  ? trace_irq_disable+0x3b/0x140
[ 2413.580567][T13790]  do_fast_syscall_32+0x33/0x70
[ 2413.580594][T13790]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2413.580620][T13790] RIP: 0023:0xf7f670ec
[ 2413.580639][T13790] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2413.580658][T13790] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2413.580683][T13790] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800026c0
[ 2413.580699][T13790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2413.580713][T13790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2413.580728][T13790] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2413.580742][T13790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2413.580776][T13790]  </TASK>
[ 2414.036359][ T7003] usb 3-1: USB disconnect, device number 67
[ 2414.075320][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12533'.
[ 2414.249460][T13804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2414.251175][T13804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2415.083845][ T7003] usb 9-1: USB disconnect, device number 39
[ 2415.709225][ T7003] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 2415.799426][ T6999] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[ 2415.861957][ T7003] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2415.866971][ T7003] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2415.867004][ T7003] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2415.867026][ T7003] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2415.867073][ T7003] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2415.867101][ T7003] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2415.932305][ T7003] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2415.932337][ T7003] usb 3-1: Product: syz
[ 2415.932353][ T7003] usb 3-1: Manufacturer: syz
[ 2415.967839][ T6999] usb 8-1: descriptor type invalid, skip
[ 2415.967912][ T6999] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[ 2416.007060][ T6999] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2416.007094][ T6999] usb 8-1: Product: syz
[ 2416.007119][ T6999] usb 8-1: Manufacturer: syz
[ 2416.007137][ T6999] usb 8-1: SerialNumber: syz
[ 2416.052013][ T7003] cdc_wdm 3-1:1.0: skipping garbage
[ 2416.052030][ T7003] cdc_wdm 3-1:1.0: skipping garbage
[ 2416.074719][ T7003] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[ 2416.074737][ T7003] cdc_wdm 3-1:1.0: Unknown control protocol
[ 2416.251686][T13834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2416.255654][T13834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2416.481911][T13834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2416.483369][T13834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2416.536473][ T6999] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[ 2416.536550][ T6999] usb 8-1: MIDIStreaming interface descriptor not found
[ 2416.577604][T13834] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1”'
[ 2416.577629][T13834] CPU: 1 UID: 0 PID: 13834 Comm: syz.2.12545 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2416.577662][T13834] Tainted: [L]=SOFTLOCKUP
[ 2416.577671][T13834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2416.577686][T13834] Call Trace:
[ 2416.577696][T13834]  <TASK>
[ 2416.577707][T13834]  dump_stack_lvl+0xe8/0x150
[ 2416.577748][T13834]  sysfs_warn_dup+0x8e/0xa0
[ 2416.577776][T13834]  sysfs_do_create_link_sd+0xc0/0x110
[ 2416.577807][T13834]  device_add_class_symlinks+0x1cf/0x240
[ 2416.577851][T13834]  device_add+0x467/0xb80
[ 2416.577888][T13834]  wiphy_register+0x1fc8/0x2ff0
[ 2416.577945][T13834]  ? __pfx_wiphy_register+0x10/0x10
[ 2416.577980][T13834]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2416.578011][T13834]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 2416.578052][T13834]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 2416.578103][T13834]  ieee80211_register_hw+0x3dbb/0x4b00
[ 2416.578147][T13834]  ? ieee80211_register_hw+0x1971/0x4b00
[ 2416.578204][T13834]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2416.578235][T13834]  ? __asan_memset+0x22/0x50
[ 2416.578262][T13834]  ? __hrtimer_setup+0x1b7/0x260
[ 2416.578297][T13834]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2416.578340][T13834]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 2416.578411][T13834]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2416.578447][T13834]  ? kstrndup+0xbd/0x160
[ 2416.578483][T13834]  ? kstrndup+0xbd/0x160
[ 2416.578515][T13834]  hwsim_new_radio_nl+0xd8b/0xf90
[ 2416.578571][T13834]  genl_family_rcv_msg_doit+0x233/0x340
[ 2416.578603][T13834]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2416.578643][T13834]  ? bpf_lsm_capable+0x9/0x20
[ 2416.578670][T13834]  ? security_capable+0x7e/0x2c0
[ 2416.578714][T13834]  genl_rcv_msg+0x614/0x7a0
[ 2416.578747][T13834]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2416.578770][T13834]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2416.578819][T13834]  netlink_rcv_skb+0x226/0x4a0
[ 2416.578852][T13834]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2416.578876][T13834]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2416.578923][T13834]  ? down_read+0x2be/0x330
[ 2416.578957][T13834]  genl_rcv+0x28/0x40
[ 2416.578991][T13834]  netlink_unicast+0x8ef/0xa80
[ 2416.579039][T13834]  netlink_sendmsg+0x813/0xb40
[ 2416.579080][T13834]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2416.579131][T13834]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2416.579169][T13834]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2416.579202][T13834]  sock_sendmsg_nosec+0x13a/0x180
[ 2416.579242][T13834]  ____sys_sendmsg+0x54e/0x850
[ 2416.579278][T13834]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2416.579316][T13834]  ? preempt_schedule_thunk+0x16/0x40
[ 2416.579355][T13834]  ___sys_sendmsg+0x2a5/0x360
[ 2416.579383][T13834]  ? __lock_acquire+0x747/0x2de0
[ 2416.579417][T13834]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2416.579444][T13834]  ? futex_private_hash_put+0x132/0x160
[ 2416.579480][T13834]  ? futex_wake+0x51b/0x5f0
[ 2416.579503][T13834]  ? rcu_is_watching+0x16/0xb0
[ 2416.579572][T13834]  ? __fget_files+0x2a/0x420
[ 2416.579594][T13834]  ? __fget_files+0x3a2/0x420
[ 2416.579631][T13834]  __sys_sendmsg+0x177/0x240
[ 2416.579663][T13834]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2416.579716][T13834]  __do_fast_syscall_32+0x27a/0x6b0
[ 2416.579750][T13834]  ? do_fast_syscall_32+0x33/0x70
[ 2416.579783][T13834]  ? irqentry_exit+0x10f/0x920
[ 2416.579812][T13834]  ? trace_irq_disable+0x3b/0x140
[ 2416.579846][T13834]  do_fast_syscall_32+0x33/0x70
[ 2416.579878][T13834]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2416.579911][T13834] RIP: 0023:0xf743f0ec
[ 2416.579934][T13834] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2416.579957][T13834] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2416.579984][T13834] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240
[ 2416.580002][T13834] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[ 2416.580019][T13834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2416.580034][T13834] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2416.580051][T13834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2416.580095][T13834]  </TASK>
[ 2417.263128][T13834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12545'.
[ 2417.345556][ T6999] usb 8-1: USB disconnect, device number 52
[ 2417.359831][T13866] FAULT_INJECTION: forcing a failure.
[ 2417.359831][T13866] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2417.359862][T13866] CPU: 0 UID: 0 PID: 13866 Comm: syz.9.12556 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2417.359887][T13866] Tainted: [L]=SOFTLOCKUP
[ 2417.359894][T13866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2417.359904][T13866] Call Trace:
[ 2417.359910][T13866]  <TASK>
[ 2417.359917][T13866]  dump_stack_lvl+0xe8/0x150
[ 2417.359953][T13866]  should_fail_ex+0x410/0x560
[ 2417.359982][T13866]  _copy_from_iter+0x1d3/0x1660
[ 2417.360007][T13866]  ? __alloc_skb+0x27a/0x7a0
[ 2417.360024][T13866]  ? __alloc_skb+0x27a/0x7a0
[ 2417.360040][T13866]  ? __alloc_skb+0x27a/0x7a0
[ 2417.360056][T13866]  ? __pfx__copy_from_iter+0x10/0x10
[ 2417.360078][T13866]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[ 2417.360096][T13866]  ? __alloc_skb+0x27a/0x7a0
[ 2417.360109][T13866]  ? __alloc_skb+0x27a/0x7a0
[ 2417.360128][T13866]  ? netlink_sendmsg+0x650/0xb40
[ 2417.360150][T13866]  ? skb_put+0x112/0x210
[ 2417.360168][T13866]  netlink_sendmsg+0x6c0/0xb40
[ 2417.360196][T13866]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2417.360222][T13866]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2417.360247][T13866]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2417.360267][T13866]  sock_sendmsg_nosec+0x13a/0x180
[ 2417.360291][T13866]  ____sys_sendmsg+0x54e/0x850
[ 2417.360313][T13866]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2417.360342][T13866]  ___sys_sendmsg+0x2a5/0x360
[ 2417.360359][T13866]  ? __lock_acquire+0x747/0x2de0
[ 2417.360380][T13866]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2417.360397][T13866]  ? get_pid_task+0x20/0x1f0
[ 2417.360413][T13866]  ? get_pid_task+0x20/0x1f0
[ 2417.360427][T13866]  ? get_pid_task+0x20/0x1f0
[ 2417.360466][T13866]  ? __fget_files+0x2a/0x420
[ 2417.360481][T13866]  ? __fget_files+0x3a2/0x420
[ 2417.360504][T13866]  __sys_sendmsg+0x177/0x240
[ 2417.360524][T13866]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2417.360556][T13866]  __do_fast_syscall_32+0x27a/0x6b0
[ 2417.360578][T13866]  ? do_fast_syscall_32+0x33/0x70
[ 2417.360599][T13866]  ? asm_int80_emulation+0x1a/0x20
[ 2417.360615][T13866]  ? do_int80_emulation+0x299/0x500
[ 2417.360635][T13866]  ? trace_irq_disable+0x3b/0x140
[ 2417.360657][T13866]  do_fast_syscall_32+0x33/0x70
[ 2417.360678][T13866]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2417.360699][T13866] RIP: 0023:0xf7f150ec
[ 2417.360713][T13866] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2417.360727][T13866] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2417.360745][T13866] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[ 2417.360757][T13866] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000
[ 2417.360767][T13866] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2417.360777][T13866] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2417.360787][T13866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2417.360810][T13866]  </TASK>
[ 2417.839618][T13873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2417.840119][T13873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2418.086730][T12640] udevd[12640]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2418.556907][ T6987] usb 3-1: USB disconnect, device number 68
[ 2419.307058][T13915] IPv6: Can't replace route, no match found
[ 2419.719094][ T7000] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 2419.744133][T13931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2419.744538][T13931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2419.869004][ T7000] usb 3-1: Using ep0 maxpacket: 8
[ 2419.869765][ T7000] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2419.870345][ T7000] usb 3-1: config 0 has no interfaces?
[ 2419.870386][ T7000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2419.875225][ T7000] usb 3-1: config 0 descriptor??
[ 2419.890428][ T6999] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[ 2420.019325][T13933] binder: 13932:13933 ioctl 401845e0 800002c0 returned -22
[ 2420.025834][T13933] netlink: 'syz.3.12580': attribute type 4 has an invalid length.
[ 2420.060317][ T6999] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2420.064903][ T6999] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2420.064936][ T6999] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2420.064951][ T6999] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2420.064984][ T6999] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2420.065004][ T6999] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2420.095640][ T6999] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2420.095731][ T6999] usb 9-1: Product: syz
[ 2420.095766][ T6999] usb 9-1: Manufacturer: syz
[ 2420.177705][ T6999] cdc_wdm 9-1:1.0: skipping garbage
[ 2420.177721][ T6999] cdc_wdm 9-1:1.0: skipping garbage
[ 2420.236785][ T6999] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device
[ 2420.236815][ T6999] cdc_wdm 9-1:1.0: Unknown control protocol
[ 2420.262574][ T7000] usb 3-1: USB disconnect, device number 69
[ 2420.471479][T13929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2420.471867][T13929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2420.673653][T13929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2420.674193][T13929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2420.714659][T13929] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1”'
[ 2420.714678][T13929] CPU: 0 UID: 0 PID: 13929 Comm: syz.8.12578 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2420.714703][T13929] Tainted: [L]=SOFTLOCKUP
[ 2420.714710][T13929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2420.714721][T13929] Call Trace:
[ 2420.714728][T13929]  <TASK>
[ 2420.714736][T13929]  dump_stack_lvl+0xe8/0x150
[ 2420.714766][T13929]  sysfs_warn_dup+0x8e/0xa0
[ 2420.714787][T13929]  sysfs_do_create_link_sd+0xc0/0x110
[ 2420.714808][T13929]  device_add_class_symlinks+0x1cf/0x240
[ 2420.714843][T13929]  device_add+0x467/0xb80
[ 2420.714871][T13929]  wiphy_register+0x1fc8/0x2ff0
[ 2420.714910][T13929]  ? __pfx_wiphy_register+0x10/0x10
[ 2420.714937][T13929]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2420.714960][T13929]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 2420.714988][T13929]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 2420.715020][T13929]  ieee80211_register_hw+0x3dbb/0x4b00
[ 2420.715049][T13929]  ? ieee80211_register_hw+0x1971/0x4b00
[ 2420.715087][T13929]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2420.715109][T13929]  ? __asan_memset+0x22/0x50
[ 2420.715128][T13929]  ? __hrtimer_setup+0x1b7/0x260
[ 2420.715153][T13929]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2420.715184][T13929]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 2420.715238][T13929]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2420.715264][T13929]  ? kstrndup+0xbd/0x160
[ 2420.715288][T13929]  ? kstrndup+0xbd/0x160
[ 2420.715310][T13929]  hwsim_new_radio_nl+0xd8b/0xf90
[ 2420.715348][T13929]  genl_family_rcv_msg_doit+0x233/0x340
[ 2420.715372][T13929]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2420.715399][T13929]  ? bpf_lsm_capable+0x9/0x20
[ 2420.715417][T13929]  ? security_capable+0x7e/0x2c0
[ 2420.715448][T13929]  genl_rcv_msg+0x614/0x7a0
[ 2420.715469][T13929]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2420.715485][T13929]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2420.715521][T13929]  netlink_rcv_skb+0x226/0x4a0
[ 2420.715575][T13929]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2420.715601][T13929]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2420.715648][T13929]  ? down_read+0x2be/0x330
[ 2420.715691][T13929]  genl_rcv+0x28/0x40
[ 2420.715722][T13929]  netlink_unicast+0x8ef/0xa80
[ 2420.715755][T13929]  netlink_sendmsg+0x813/0xb40
[ 2420.715786][T13929]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2420.715815][T13929]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2420.715842][T13929]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2420.715864][T13929]  sock_sendmsg_nosec+0x13a/0x180
[ 2420.715890][T13929]  ____sys_sendmsg+0x54e/0x850
[ 2420.715914][T13929]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2420.715938][T13929]  ? __pfx_futex_wake_mark+0x10/0x10
[ 2420.715962][T13929]  ___sys_sendmsg+0x2a5/0x360
[ 2420.715980][T13929]  ? __lock_acquire+0x747/0x2de0
[ 2420.716003][T13929]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2420.716025][T13929]  ? futex_wait+0x2a2/0x390
[ 2420.716064][T13929]  ? __fget_files+0x2a/0x420
[ 2420.716080][T13929]  ? __fget_files+0x3a2/0x420
[ 2420.716103][T13929]  __sys_sendmsg+0x177/0x240
[ 2420.716124][T13929]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2420.716158][T13929]  __do_fast_syscall_32+0x27a/0x6b0
[ 2420.716181][T13929]  ? do_fast_syscall_32+0x33/0x70
[ 2420.716210][T13929]  ? irqentry_exit+0x10f/0x920
[ 2420.716229][T13929]  ? trace_irq_disable+0x3b/0x140
[ 2420.716251][T13929]  do_fast_syscall_32+0x33/0x70
[ 2420.716273][T13929]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2420.716295][T13929] RIP: 0023:0xf73bf0ec
[ 2420.716311][T13929] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2420.716326][T13929] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2420.716345][T13929] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240
[ 2420.716358][T13929] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[ 2420.716369][T13929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2420.716379][T13929] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2420.716389][T13929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2420.716413][T13929]  </TASK>
[ 2421.396615][T13946] netlink: 'syz.9.12586': attribute type 1 has an invalid length.
[ 2421.519176][T13946] bond2: entered promiscuous mode
[ 2421.519526][T13946] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2421.699384][ T6999] usb 3-1: new full-speed USB device number 70 using dummy_hcd
[ 2421.852836][ T6999] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2421.853082][T13958] fuse: Unknown parameter '@'
[ 2421.853508][ T6999] usb 3-1: not running at top speed; connect to a high speed hub
[ 2421.853540][ T6999] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[ 2421.854665][ T6999] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2421.854691][ T6999] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2421.857741][ T6999] usb 3-1: string descriptor 0 read error: -22
[ 2421.857887][ T6999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2421.934929][T13958] veth1_to_team: Caught tx_queue_len zero misconfig
[ 2422.238794][T13963] binder: 13962:13963 ioctl 401845e0 800002c0 returned -22
[ 2422.260837][T13963] netlink: 'syz.9.12592': attribute type 4 has an invalid length.
[ 2422.597452][ T6999] usb 3-1: USB disconnect, device number 70
[ 2422.689955][ T7000] usb 9-1: USB disconnect, device number 40
[ 2423.022368][T13987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2423.022889][T13987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2423.025287][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12601'.
[ 2423.459743][T14000] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 2423.899751][ T7000] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 2424.059819][ T7000] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2424.063816][ T7000] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2424.063839][ T7000] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2424.063854][ T7000] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2424.063911][ T7000] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2424.063932][ T7000] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2424.067621][ T7000] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2424.067641][ T7000] usb 4-1: Product: syz
[ 2424.067653][ T7000] usb 4-1: Manufacturer: syz
[ 2424.161761][ T7000] cdc_wdm 4-1:1.0: skipping garbage
[ 2424.161785][ T7000] cdc_wdm 4-1:1.0: skipping garbage
[ 2424.184972][ T7000] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device
[ 2424.184997][ T7000] cdc_wdm 4-1:1.0: Unknown control protocol
[ 2424.366097][T14004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2424.368732][T14004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2424.594671][T14004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2424.595029][T14004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2424.640273][T14004] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1”'
[ 2424.640302][T14004] CPU: 0 UID: 0 PID: 14004 Comm: syz.3.12606 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2424.640335][T14004] Tainted: [L]=SOFTLOCKUP
[ 2424.640354][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2424.640369][T14004] Call Trace:
[ 2424.640380][T14004]  <TASK>
[ 2424.640390][T14004]  dump_stack_lvl+0xe8/0x150
[ 2424.640432][T14004]  sysfs_warn_dup+0x8e/0xa0
[ 2424.640461][T14004]  sysfs_do_create_link_sd+0xc0/0x110
[ 2424.640495][T14004]  device_add_class_symlinks+0x1cf/0x240
[ 2424.640536][T14004]  device_add+0x467/0xb80
[ 2424.640574][T14004]  wiphy_register+0x1fc8/0x2ff0
[ 2424.640629][T14004]  ? __pfx_wiphy_register+0x10/0x10
[ 2424.640666][T14004]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2424.640697][T14004]  ? minstrel_ht_alloc+0x6e0/0x7e0
[ 2424.640736][T14004]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[ 2424.640780][T14004]  ieee80211_register_hw+0x3dbb/0x4b00
[ 2424.640822][T14004]  ? ieee80211_register_hw+0x1971/0x4b00
[ 2424.640879][T14004]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 2424.640911][T14004]  ? __asan_memset+0x22/0x50
[ 2424.640939][T14004]  ? __hrtimer_setup+0x1b7/0x260
[ 2424.640974][T14004]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 2424.641016][T14004]  mac80211_hwsim_new_radio+0x3258/0x56b0
[ 2424.641083][T14004]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 2424.641120][T14004]  ? kstrndup+0xbd/0x160
[ 2424.641154][T14004]  ? kstrndup+0xbd/0x160
[ 2424.641184][T14004]  hwsim_new_radio_nl+0xd8b/0xf90
[ 2424.641234][T14004]  genl_family_rcv_msg_doit+0x233/0x340
[ 2424.641268][T14004]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2424.641305][T14004]  ? bpf_lsm_capable+0x9/0x20
[ 2424.641331][T14004]  ? security_capable+0x7e/0x2c0
[ 2424.641385][T14004]  genl_rcv_msg+0x614/0x7a0
[ 2424.641415][T14004]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2424.641438][T14004]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 2424.641490][T14004]  netlink_rcv_skb+0x226/0x4a0
[ 2424.641521][T14004]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2424.641547][T14004]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2424.641594][T14004]  ? down_read+0x2be/0x330
[ 2424.641630][T14004]  genl_rcv+0x28/0x40
[ 2424.641666][T14004]  netlink_unicast+0x8ef/0xa80
[ 2424.641713][T14004]  netlink_sendmsg+0x813/0xb40
[ 2424.641755][T14004]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2424.641797][T14004]  ? apparmor_socket_sendmsg+0x98/0x360
[ 2424.641834][T14004]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2424.641865][T14004]  sock_sendmsg_nosec+0x13a/0x180
[ 2424.641902][T14004]  ____sys_sendmsg+0x54e/0x850
[ 2424.641935][T14004]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2424.641970][T14004]  ? __pfx_futex_wake_mark+0x10/0x10
[ 2424.642003][T14004]  ___sys_sendmsg+0x2a5/0x360
[ 2424.642028][T14004]  ? __lock_acquire+0x747/0x2de0
[ 2424.642060][T14004]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2424.642091][T14004]  ? futex_wait+0x2a2/0x390
[ 2424.642149][T14004]  ? __fget_files+0x2a/0x420
[ 2424.642173][T14004]  ? __fget_files+0x3a2/0x420
[ 2424.642208][T14004]  __sys_sendmsg+0x177/0x240
[ 2424.642238][T14004]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2424.642289][T14004]  __do_fast_syscall_32+0x27a/0x6b0
[ 2424.642322][T14004]  ? do_fast_syscall_32+0x33/0x70
[ 2424.642363][T14004]  ? irqentry_exit+0x10f/0x920
[ 2424.642391][T14004]  ? trace_irq_disable+0x3b/0x140
[ 2424.642425][T14004]  do_fast_syscall_32+0x33/0x70
[ 2424.642456][T14004]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2424.642486][T14004] RIP: 0023:0xf7f050ec
[ 2424.642508][T14004] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2424.642530][T14004] RSP: 002b:00000000f53b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2424.642557][T14004] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240
[ 2424.642573][T14004] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[ 2424.642589][T14004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2424.642602][T14004] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2424.642616][T14004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2424.642651][T14004]  </TASK>
[ 2425.448443][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12617'.
[ 2425.463844][T14016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12606'.
[ 2426.697091][ T6987] usb 4-1: USB disconnect, device number 86
[ 2426.764689][T14065] FAULT_INJECTION: forcing a failure.
[ 2426.764689][T14065] name failslab, interval 1, probability 0, space 1, times 0
[ 2426.764730][T14065] CPU: 0 UID: 0 PID: 14065 Comm: syz.8.12628 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2426.764790][T14065] Tainted: [L]=SOFTLOCKUP
[ 2426.764799][T14065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2426.764813][T14065] Call Trace:
[ 2426.764822][T14065]  <TASK>
[ 2426.764837][T14065]  dump_stack_lvl+0xe8/0x150
[ 2426.764879][T14065]  should_fail_ex+0x410/0x560
[ 2426.764918][T14065]  should_failslab+0xa8/0x100
[ 2426.764949][T14065]  ? security_file_alloc+0x34/0x310
[ 2426.764979][T14065]  kmem_cache_alloc_noprof+0xa1/0x600
[ 2426.765005][T14065]  ? rcu_is_watching+0x16/0xb0
[ 2426.765035][T14065]  ? security_file_alloc+0x34/0x310
[ 2426.765071][T14065]  security_file_alloc+0x34/0x310
[ 2426.765103][T14065]  init_file+0x90/0x2b0
[ 2426.765137][T14065]  alloc_empty_file+0x74/0x1d0
[ 2426.765170][T14065]  path_openat+0x9a/0x2090
[ 2426.765203][T14065]  ? __lock_acquire+0x747/0x2de0
[ 2426.765240][T14065]  do_file_open+0x23e/0x4a0
[ 2426.765273][T14065]  ? __pfx_do_file_open+0x10/0x10
[ 2426.765323][T14065]  ? _raw_spin_unlock+0x28/0x50
[ 2426.765346][T14065]  ? alloc_fd+0x651/0x6c0
[ 2426.765390][T14065]  do_sys_openat2+0x115/0x200
[ 2426.765422][T14065]  ? __fget_files+0x3a2/0x420
[ 2426.765444][T14065]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2426.765478][T14065]  ? fput+0xa0/0xd0
[ 2426.765508][T14065]  ? ksys_write+0x242/0x270
[ 2426.765536][T14065]  __ia32_compat_sys_openat+0x131/0x160
[ 2426.765575][T14065]  __do_fast_syscall_32+0x27a/0x6b0
[ 2426.765604][T14065]  ? do_fast_syscall_32+0x33/0x70
[ 2426.765631][T14065]  ? asm_int80_emulation+0x1a/0x20
[ 2426.765653][T14065]  ? do_int80_emulation+0x299/0x500
[ 2426.765680][T14065]  ? trace_irq_disable+0x3b/0x140
[ 2426.765711][T14065]  do_fast_syscall_32+0x33/0x70
[ 2426.765740][T14065]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2426.765775][T14065] RIP: 0023:0xf73bf0ec
[ 2426.765795][T14065] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 2426.765814][T14065] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[ 2426.765839][T14065] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040
[ 2426.765856][T14065] RDX: 0000000000080242 RSI: 00000000000001d3 RDI: 0000000000000000
[ 2426.765870][T14065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2426.765884][T14065] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2426.765898][T14065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2426.765929][T14065]  </TASK>
[ 2427.233264][T14073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2427.236989][T14073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2427.369568][T14070] syzkaller0: entered promiscuous mode
[ 2427.369589][T14070] syzkaller0: entered allmulticast mode
[ 2427.589009][ T7000] usb 8-1: new high-speed USB device number 53 using dummy_hcd
[ 2427.807510][ T7000] usb 8-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[ 2427.808699][ T7000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2427.829680][ T7000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2427.841422][ T7000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2427.841487][ T7000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2427.847109][ T7000] usb 8-1: config 0 descriptor??
[ 2428.058154][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12636'.
[ 2428.234894][ T3646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2428.259997][ T3646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2428.339525][ T3646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2428.441786][ T3646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2428.443760][ T3646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2430.558876][ T3646] Bluetooth: hci0: command tx timeout
[ 2432.641197][ T3646] Bluetooth: hci0: command tx timeout
[ 2434.102229][ T6999] usb 8-1: USB disconnect, device number 53
[ 2434.383881][T14111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2434.451598][ T7000] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 2434.617947][ T7000] usb 4-1: Using ep0 maxpacket: 32
[ 2434.625194][ T7000] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2434.627409][ T7000] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[ 2434.627430][ T7000] usb 4-1: config 0 has no interface number 0
[ 2434.631742][ T7000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2434.631813][ T7000] usb 4-1: Product: syz
[ 2434.631928][ T7000] usb 4-1: Manufacturer: syz
[ 2434.631981][ T7000] usb 4-1: SerialNumber: syz
[ 2434.647585][ T7000] usb 4-1: config 0 descriptor??
[ 2434.657465][ T7000] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2434.720268][ T3646] Bluetooth: hci0: command tx timeout
[ 2434.746982][T14121] syzkaller0: entered promiscuous mode
[ 2434.747013][T14121] syzkaller0: entered allmulticast mode
[ 2434.890427][ T7000] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 2434.907218][ T7000] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 2434.997515][T14095] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2434.997734][T14095] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2434.997931][T14095] bridge_slave_0: entered allmulticast mode
[ 2435.026877][T14095] bridge_slave_0: entered promiscuous mode
[ 2435.064250][T14095] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2435.068138][T14095] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2435.068355][T14095] bridge_slave_1: entered allmulticast mode
[ 2435.094782][T14095] bridge_slave_1: entered promiscuous mode
[ 2435.336645][T14095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2435.415233][T14095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2435.442664][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 2435.443268][ T6988] usb 4-1: USB disconnect, device number 87
[ 2435.465604][ T6988] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 2435.505682][ T6988] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 2435.507025][ T6988] quatech2 4-1:0.51: device disconnected
[ 2435.660942][T14095] team0: Port device team_slave_0 added
[ 2435.679336][T14095] team0: Port device team_slave_1 added
[ 2435.825026][T14095] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2435.825042][T14095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2435.826411][T14095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2435.866234][T14095] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2435.866302][T14095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2435.866377][T14095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2436.169532][T14095] hsr_slave_0: entered promiscuous mode
[ 2436.170603][T14095] hsr_slave_1: entered promiscuous mode
[ 2436.171292][T14095] debugfs: 'hsr0' already exists in 'hsr'
[ 2436.171313][T14095] Cannot create hsr debugfs directory
[ 2436.789118][ T3646] Bluetooth: hci0: command tx timeout
[ 2438.443597][T14167] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2438.692001][T14176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12660'.
[ 2438.931703][T14175] netlink: 144 bytes leftover after parsing attributes in process `syz.7.12658'.
[ 2441.493146][T14095] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2441.522289][T14095] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2441.523361][T14095] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2441.572545][T14095] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2441.592518][T14095] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2441.608115][T14222] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2441.657360][T14095] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2441.669851][T14095] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2441.696090][T14095] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2442.221486][T14095] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2442.278257][T14095] 8021q: adding VLAN 0 to HW filter on device team0
[ 2442.313956][  T325] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2442.314038][  T325] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2442.360316][  T325] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2442.360428][  T325] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2442.600577][T14095] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2442.714987][T14095] veth0_vlan: entered promiscuous mode
[ 2442.739361][T14095] veth1_vlan: entered promiscuous mode
[ 2442.807978][T14095] veth0_macvtap: entered promiscuous mode
[ 2442.833677][T14095] veth1_macvtap: entered promiscuous mode
[ 2442.868496][T14095] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2442.895112][T14095] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2442.969543][  T325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2443.013440][ T9943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2443.018048][T25010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2443.018582][T25010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2443.164524][T19613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2443.164549][T19613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2443.249303][  T325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2443.249328][  T325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2467.591938][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 2467.592013][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 2529.031153][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 2529.031221][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 2551.589197][ T6446] Bluetooth: hci0: command 0x0406 tx timeout
[ 2584.071180][   T33] INFO: task kworker/1:4:17349 blocked for more than 143 seconds.
[ 2584.071214][   T33]       Tainted: G             L      syzkaller #0
[ 2584.071228][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2584.071240][   T33] task:kworker/1:4     state:D stack:20952 pid:17349 tgid:17349 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 2584.071303][   T33] Workqueue: usb_hub_wq hub_event
[ 2584.071439][   T33] Call Trace:
[ 2584.071449][   T33]  <TASK>
[ 2584.071465][   T33]  __schedule+0x17db/0x58f0
[ 2584.071522][   T33]  ? __pfx___schedule+0x10/0x10
[ 2584.071559][   T33]  ? schedule+0x90/0x2b0
[ 2584.071587][   T33]  schedule+0x164/0x2b0
[ 2584.071616][   T33]  usb_kill_urb+0x1cf/0x2f0
[ 2584.071681][   T33]  ? __pfx_usb_kill_urb+0x10/0x10
[ 2584.071713][   T33]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2584.071761][   T33]  usb_start_wait_urb+0x22a/0x5b0
[ 2584.071825][   T33]  ? rcu_is_watching+0x16/0xb0
[ 2584.071858][   T33]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 2584.071916][   T33]  usb_control_msg+0x234/0x3e0
[ 2584.071957][   T33]  hub_port_init+0x1266/0x28c0
[ 2584.072002][   T33]  hub_event+0x24e8/0x4d30
[ 2584.072036][   T33]  ? do_raw_spin_unlock+0xf5/0x200
[ 2584.072121][   T33]  ? __pfx_hub_event+0x10/0x10
[ 2584.072165][   T33]  ? rcu_is_watching+0x16/0xb0
[ 2584.072189][   T33]  ? process_scheduled_works+0x97a/0x1630
[ 2584.072290][   T33]  process_scheduled_works+0xc3d/0x1630
[ 2584.072351][   T33]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2584.072425][   T33]  ? assign_work+0x3cf/0x5d0
[ 2584.072452][   T33]  worker_thread+0xa47/0xfb0
[ 2584.072509][   T33]  ? __kthread_parkme+0x71/0x1f0
[ 2584.072563][   T33]  kthread+0x38b/0x480
[ 2584.072580][   T33]  ? __pfx_worker_thread+0x10/0x10
[ 2584.072603][   T33]  ? __pfx_kthread+0x10/0x10
[ 2584.072621][   T33]  ret_from_fork+0x514/0xb70
[ 2584.072641][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[ 2584.072657][   T33]  ? __switch_to+0xc89/0x1420
[ 2584.072683][   T33]  ? __pfx_kthread+0x10/0x10
[ 2584.072701][   T33]  ret_from_fork_asm+0x1a/0x30
[ 2584.072729][   T33]  </TASK>
[ 2584.072818][   T33] 
[ 2584.072818][   T33] Showing all locks held in the system:
[ 2584.072828][   T33] locks held by khungtaskd/33: 1, last CPU#0:
[ 2584.072841][   T33]  #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2584.072907][   T33] locks held by getty/5374: 2, on CPU#1:
[ 2584.072918][   T33]  #0: ffff888036be40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2584.072960][   T33]  #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[ 2584.073010][   T33] locks held by kworker/1:4/17349: 5, on CPU#1:
[ 2584.073022][   T33]  #0: ffff88801fade140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 2584.073065][   T33]  #1: ffffc900045f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 2584.073108][   T33]  #2: ffff88802b7911d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[ 2584.073153][   T33]  #3: ffff88802be8c568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30
[ 2584.073198][   T33]  #4: ffff88802c791260 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30
[ 2584.073251][   T33] 
[ 2584.073256][   T33] =============================================
[ 2584.073256][   T33] 
[ 2584.073264][   T33] NMI backtrace for cpu 0
[ 2584.073278][   T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2584.073300][   T33] Tainted: [L]=SOFTLOCKUP
[ 2584.073306][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2584.073316][   T33] Call Trace:
[ 2584.073323][   T33]  <TASK>
[ 2584.073330][   T33]  dump_stack_lvl+0xe8/0x150
[ 2584.073355][   T33]  nmi_cpu_backtrace+0x274/0x2d0
[ 2584.073413][   T33]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2584.073473][   T33]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 2584.073502][   T33]  sys_info+0x135/0x170
[ 2584.073525][   T33]  watchdog+0xfd7/0x1030
[ 2584.073549][   T33]  ? watchdog+0x1c7/0x1030
[ 2584.073573][   T33]  kthread+0x38b/0x480
[ 2584.073589][   T33]  ? __pfx_watchdog+0x10/0x10
[ 2584.073605][   T33]  ? __pfx_kthread+0x10/0x10
[ 2584.073623][   T33]  ret_from_fork+0x514/0xb70
[ 2584.073640][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[ 2584.073657][   T33]  ? __switch_to+0xc89/0x1420
[ 2584.073682][   T33]  ? __pfx_kthread+0x10/0x10
[ 2584.073699][   T33]  ret_from_fork_asm+0x1a/0x30
[ 2584.073726][   T33]  </TASK>
[ 2584.073733][   T33] Sending NMI from CPU 0 to CPUs 1:
[ 2584.073811][    C1] NMI backtrace for cpu 1
[ 2584.073833][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2584.073864][    C1] Tainted: [L]=SOFTLOCKUP
[ 2584.073872][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2584.073891][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 2584.073916][    C1] Code: 0b 8b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 c5 20 00 fb f4 <e9> 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 2584.073933][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246
[ 2584.073950][    C1] RAX: 00000000015175db RBX: ffffffff819bedc0 RCX: 8000000000000001
[ 2584.073966][    C1] RDX: 0000000000000001 RSI: ffffffff8e469e53 RDI: ffffffff8c6ddc80
[ 2584.073980][    C1] RBP: ffffc90000197f10 R08: ffff8880b8533a1b R09: 1ffff110170a6743
[ 2584.073996][    C1] R10: dffffc0000000000 R11: ffffed10170a6744 R12: 0000000000000000
[ 2584.074011][    C1] R13: 1ffff11003e5b000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[ 2584.074027][    C1] FS:  0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000
[ 2584.074043][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2584.074057][    C1] CR2: 000055c2ef24f660 CR3: 000000000fb48000 CR4: 00000000003526f0
[ 2584.074075][    C1] Call Trace:
[ 2584.074082][    C1]  <TASK>
[ 2584.074090][    C1]  default_idle+0x9/0x20
[ 2584.074114][    C1]  default_idle_call+0x72/0xb0
[ 2584.074141][    C1]  do_idle+0x2e0/0x540
[ 2584.074188][    C1]  ? __pfx_do_idle+0x10/0x10
[ 2584.074213][    C1]  cpu_startup_entry+0x43/0x60
[ 2584.074232][    C1]  start_secondary+0x101/0x110
[ 2584.074283][    C1]  common_startup_64+0x13e/0x157
[ 2584.074318][    C1]  </TASK>
[ 2584.074788][   T33] Kernel panic - not syncing: hung_task: blocked tasks
[ 2584.675136][   T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2584.685835][   T33] Tainted: [L]=SOFTLOCKUP
[ 2584.690170][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2584.700266][   T33] Call Trace:
[ 2584.703572][   T33]  <TASK>
[ 2584.706526][   T33]  vpanic+0x56d/0xa60
[ 2584.710619][   T33]  ? __pfx_vpanic+0x10/0x10
[ 2584.715170][   T33]  ? console_srcu_read_unlock+0x3a/0x60
[ 2584.720852][   T33]  panic+0xc5/0xd0
[ 2584.724620][   T33]  ? __pfx_panic+0x10/0x10
[ 2584.729080][   T33]  ? wq_watchdog_touch+0xf9/0x160
[ 2584.734146][   T33]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[ 2584.740355][   T33]  watchdog+0x1030/0x1030
[ 2584.744727][   T33]  ? watchdog+0x1c7/0x1030
[ 2584.749174][   T33]  kthread+0x38b/0x480
[ 2584.753266][   T33]  ? __pfx_watchdog+0x10/0x10
[ 2584.757964][   T33]  ? __pfx_kthread+0x10/0x10
[ 2584.762584][   T33]  ret_from_fork+0x514/0xb70
[ 2584.767200][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[ 2584.772336][   T33]  ? __switch_to+0xc89/0x1420
[ 2584.777062][   T33]  ? __pfx_kthread+0x10/0x10
[ 2584.781681][   T33]  ret_from_fork_asm+0x1a/0x30
[ 2584.786476][   T33]  </TASK>
[ 2584.790119][   T33] Kernel Offset: disabled
[ 2584.794459][   T33] Rebooting in 86400 seconds..