last executing test programs:

5m9.433757951s ago: executing program 1 (id=96):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f00000003c0))
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdir(&(0x7f0000000240)='./file1\x00', 0x52b60aca6cea7709)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x48)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000001f80)=[{{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
r1 = openat$null(0xffffff9c, &(0x7f0000000000), 0x214782, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x3, 0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x3c, &(0x7f0000000200)="c67032476eed1abbc36525172ae208d8645971078fa72622e8532db4a96e1f054df377dfcf566ac3cdd48a6c344a922cca234b32c23f6fbd7aa641d1"})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r3, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000)
sendto$inet6(r3, &(0x7f0000000480)="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", 0x12f, 0x0, 0x0, 0x0)
ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000100)={0x8, r2})
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000265f1e60000000000000000001200320002000000000000000000000002020000000000000000000000000000030005000000000002000000ac1414aa000000000000000003000600000000000200"/128], 0x80}}, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
r7 = dup2(r5, r4)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, 0x0, 0x0, <r8=>0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000001380)={0xc, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f00000013c0)={0x48, 0xa, r8, 0x0, r9})

5m8.156417635s ago: executing program 1 (id=102):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4)

5m7.638540068s ago: executing program 1 (id=106):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$tipc(r0, &(0x7f0000001bc0)={&(0x7f0000000900)=@id, 0x10, 0x0}, 0x0)

5m6.482989694s ago: executing program 1 (id=111):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000ec0)=""/220, 0xdc}, {&(0x7f0000002140)=""/4058, 0xfda}, {&(0x7f0000001200)=""/197, 0xc5}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000001100)=""/210, 0xd2}, {&(0x7f0000000d40)=""/133, 0x85}, {&(0x7f0000000940)=""/228, 0xe4}], 0x9}, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@host, 0x8fd1}, @host, 0x8, 0xfffffffffffffff7, 0x40, 0x42, 0x3})

5m5.263704413s ago: executing program 1 (id=116):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x569b3643, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
lseek(r1, 0x5, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000002c0)=0xa0000)
r3 = dup(r2)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@my=0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0)=0x3)
sendto$inet6(r4, 0x0, 0x0, 0x4004044, &(0x7f0000000a40)={0xa, 0xe22, 0x4, @remote, 0x4000000}, 0x1c)
ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x2)
sendmmsg$inet(r4, 0x0, 0xf, 0xc800)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x400800, 0x0)
r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x200100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x23, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa52d}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x92, &(0x7f0000000580)=""/146, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000800)=[r3, 0x1, 0xffffffffffffffff, r4, r5, r6, r7, r8, 0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x4, 0xc, 0x1}, {0x5, 0x2, 0x4}, {0x5, 0x1, 0x2, 0x4}], 0x10, 0x10001, @void, @value}, 0x94)
getdents(r1, 0xfffffffffffffffd, 0x58)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mkdirat(r9, &(0x7f00000001c0)='./bus\x00', 0x34)
unlinkat(r9, &(0x7f0000000280)='./file0\x00', 0x200)

5m5.120808171s ago: executing program 1 (id=119):
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x2a, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r3 = dup(r2)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r4, &(0x7f00000082c0)=[{&(0x7f0000006e80)=""/102, 0x66}, {&(0x7f00000072c0)=""/4096, 0x1000}], 0x2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0xd8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000240)={0x3, @null, 0xee00})
ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}})
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
open(&(0x7f0000000080)='./file0\x00', 0x28480, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'})

4m49.915348568s ago: executing program 32 (id=119):
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x2a, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r3 = dup(r2)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r4, &(0x7f00000082c0)=[{&(0x7f0000006e80)=""/102, 0x66}, {&(0x7f00000072c0)=""/4096, 0x1000}], 0x2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0xd8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000240)={0x3, @null, 0xee00})
ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}})
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
open(&(0x7f0000000080)='./file0\x00', 0x28480, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'})

3m35.662037884s ago: executing program 0 (id=345):
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x2a, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r5 = dup(r4)
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r6, &(0x7f00000082c0)=[{&(0x7f0000006e80)=""/102, 0x66}, {&(0x7f00000072c0)=""/4096, 0x1000}], 0x2)
write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0xd8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000240)={0x3, @null, 0xee00})
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}})
open(&(0x7f0000000080)='./file0\x00', 0x28480, 0x80)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="6a78463726e5953d1923b134fb23137c810f2cef653b7302330c58ace47336fa4297c922cbdd68ea8db4b2c61e07ff896c16917624cdb6a5ff602e6a4c0f8a1d17b4fc120c4c607599a3a97c8b125aa9e800f1f617ee4542b7956cb6793a5b7462364ef5d072924eae3410f7c12de00e7a1f22a7380db87a5df53c3d879352f32edd4b6ec7fee896cc1f5e6b33dd9754ca950eb0a364c88f4baf1bdbfcc43cfc9cb1797e53d400e213b03b0c87f30bb130a85ea00039d80986353cce066dda063a825d28c9fb38ea4ea673c73652e6b2c607978699b57edf5bd3ab9195c55332e3413020e27529e46dc856e0b0c060b051498403b049", @ANYBLOB="010026bd7000fb9bdf2564000000080001004d000000080027000000000000004a25145082bf2c888e6cec8130ee931932c9777821528d3cbe0b2cfc29b2283e1ac624f4bcda621b79aabb143f824f5602b575eea2392d7ba952e72e948e7a34b9d87fc491188646b1d1277b43e69569f96fc5bc9cfb614a4b46de6c639f27432ff67f1d0c30a9b8f4614928360edab2ee092c9900c83c0c1ba26dd15060aba5df5bb1889aba90db68a6ad167b480de3e75864f1522a6926d64209e042e93229a79989bedfaf34eaa51952f7b76b25476fee5a45f0521d0a070d96d47e7c6f0493d525552b9d08101c4b6a44", @ANYRES32=r9, @ANYBLOB="0c009900010000004b000000", @ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x44400)

3m34.539838723s ago: executing program 0 (id=349):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9)
sendto$inet6(r0, &(0x7f0000000100)="ea", 0xe0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

3m33.211795131s ago: executing program 0 (id=353):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}, {&(0x7f0000002800)=""/4075, 0xfeb}], 0x2}, 0x0)
r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0)
personality(0x400000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fanotify_init(0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = fanotify_init(0x0, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001580)=ANY=[@ANYBLOB="30ffff00eb1f3370b0d81db15397a09c56af7bff7dedc858ddd8216bad4b26cd70162a30cb168e65df52527dc0de322d7f54e29a", @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="14005a8010000080050001004800000004000200"], 0x30}}, 0x0)
r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0)
poll(&(0x7f0000001500)=[{r3}, {r1, 0x2448}, {r1, 0x201}, {r5, 0x2024}, {r6, 0x6040}, {0xffffffffffffffff, 0x1204}, {r1, 0x200}, {r3, 0x8}, {r9}, {r2, 0x1000}], 0xa, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x10, 0x400000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x62}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x5, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4004)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x2, 0x0, 0x1}}, 0xb8}}, 0x0)

3m30.724659049s ago: executing program 0 (id=358):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000240)=0x3, 0x4)
bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10)
close(r0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x28)
r5 = accept4(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0x6}, &(0x7f0000000000)=0x8)
ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f0000000840)={{r0}, "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"})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x1b, &(0x7f0000000800), 0x4)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)

3m28.335993234s ago: executing program 0 (id=362):
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480), &(0x7f0000000500))
eventfd(0x6)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
r1 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x0, 0x100, 0xfffffffe, 0x335}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1})
io_uring_enter(r1, 0x8d1, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)

3m27.593978585s ago: executing program 0 (id=366):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffef9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x382f, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000380)=@x86={0xbb, 0x0, 0x0, 0x0, 0x8, 0xff, 0x67, 0xd2, 0x8, 0x34, 0x4, 0x2, 0x0, 0x9, 0xd66, 0x81, 0x10, 0x95, 0x7f, '\x00', 0x6, 0x80000001})
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67100000000000560602000fff00006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc67357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9ec7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dca20563e1c1e7624cc3b88b330ad416c4c1d8c60589b6445a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843240000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000640))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000)

3m11.89826199s ago: executing program 33 (id=366):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffef9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x382f, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000380)=@x86={0xbb, 0x0, 0x0, 0x0, 0x8, 0xff, 0x67, 0xd2, 0x8, 0x34, 0x4, 0x2, 0x0, 0x9, 0xd66, 0x81, 0x10, 0x95, 0x7f, '\x00', 0x6, 0x80000001})
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000640))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000)

35.11065551s ago: executing program 3 (id=741):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4c21, @rand_addr=0x64010100}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b887bd9356b0fc5e5479c0133683c922e936e6d9431f80a38a5f819c00801d677445ad545dd", 0xc5}, {&(0x7f0000001540)}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xcd, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21)
landlock_create_ruleset(&(0x7f0000000480)={0x800, 0x3, 0x1}, 0x18, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000f2fffffffbffffff0080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff})
accept4$llc(r3, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x80800)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sm3\x00'}})
bind$alg(r1, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)

30.626372782s ago: executing program 3 (id=747):
r0 = socket$kcm(0x10, 0x2, 0x10)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}, {&(0x7f0000002800)=""/4075, 0xfeb}], 0x2}, 0x0)
personality(0x400000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
fanotify_init(0x0, 0x1)

28.190316669s ago: executing program 3 (id=752):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x20001, 0x1a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000040)="09000000010001", 0x7)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendto(r5, &(0x7f00000001c0)="25ff8571999e1f778f0350a97e44f1b970763fa07dc8b9fe0b9017ffc8854e8baaf1413c31b7dba484267bac5aae083558afab07716cf0ad72832b1320411e32c81cd67fabb0652f0b850dfaf75004cfc278cdee43f3810d6f2d643c16f679b7697cb0", 0xfffffffffffffee9, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x70bd2a, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0)

25.386239482s ago: executing program 3 (id=761):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000a380)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2040}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000006380)="7f76242df47b442450d6f45e92ba5e590ab05624f3421752c64e5a329fe1e8827284d39a406c32f90ff1dbb22d52a49edd934a4ce77a3d1f10a40eaca1ae9ed70a9b4f652aea0374df70a874e7cc6094641ffb0e48b648de54729434402af613f9f4daa8b448dd071b10dce80d359a71774ae99f392fde83b337c3c8485bdcce39749b8e2935025fb8439a1eeb1f8eaf6edeb2d062b7047aa3d762fe1518673271bfd78f627a817e1db95e8670f7f505e080477f3e367b8cecf4f399a9b8f427d1c3f4b719571dc9d603d1730f79f28f7c7babf4cdc433326cc0f1e667cc7c61990c684d94d3a2384c0705745fcad2aecd3597140ef202d0025f4a792d325d0e4a1ad45de1e2d2a4353b8a32dcd003b973c7a02f122a03318182440a8d12b4c1eb6cc4249b90d86e64e106b9711a47a75dcfdd9158945daa848ceea266892fa2a116ce6d3c5dedc4dd0fca6c488692bfc9c3007f235ff9b97dec562999ca3107c28622dbed05c24c5b6a02e31f0e22596f87e4c93b9089ca4df3692926deac89a7f8ce24620ec2869cb41fa5be654ecf244a562e79517bb2ded67c7975196dd5baada554bbfa904656a4140e70f7e09ecad1391ca46e3e1dd9dfa89fe05b5b225df0ff0becf9e06ad1d93728a50fd68301fa372456751a806f21fca63fc657184ec7e54dc7b0fa695170ee6132f1831e88c6fd2a15f54d0032926e46808c77ff1daef2f69ba56830a065d385472ddaf60485f317f9ef7cdda285bbef0f5b9803b6ca23271e8a1a94aa5e71528430d558941e6466ffe76896e3050cee3cb0c0470e7b6be41c0112c9b1caed0f24a877ba2907814935e929d3581c0c14cb9be61235edf0f5fb6784498f714be9e3f7243cb718aa151e0557889ab59ca2c5079195dd422224356e8999bc28a6977bcb7d8a1df245b59fa02dd32bab61c0545d3d586a74af80187cc55a23864b6345d5aed2f4b6bbed0a04d9e4b9ebd95538660ada93a479ed6482755a2eb5c8b6d57acdd26d468f393aca7d94a194a17f8481de0ff79c88605958000000000000000875c5f600984805cb2a9d40b46f04799a23f5de5f565fa597746ab99119de3e75925780642d312d1631542494ff7d3d3b55acbaf83c0c6f16b853e074f9cb6902ea157e62bef0eb51bd86559c45d81f00916e64fc6cf93aa220b49de97a6cb80e5f8e7ca68f79d71fd11429fb441b4282b6c2d5fd64632c088e5e0fe34ee8e5cf545ad9d61d021fff9905ccd37cd9fb97b80fa97b3c46a6f674bc69a16e0ebc0caeee64bbd47ab992190e25aacb0c20ab6d1fa1eb6081128d650ae3f618a946e71c071b6af4d2e01135434779afe42e77dc70591792a8f2cc51344ebccef8635bc07a61776db57eee4cc24e97deef95820475cb3b6bf247fd511948c03a60e5d25002594ecb02b2d50ab2a94082b50134a330729b5553429512804155c2dffc5a38eec6177bfacde4b44d4a6231f93a9997ef478070192a0e80032d5bbda48d13bf57a6f11d928289972775dd1b3891c01a38dd63af85a0e5ba0ef644fd78caa21f1a35612781ee88a252470b2ffaf9300e7c3c6f9d2a1e3f4f727afd818b491c78bb47c8155d52a8e630e3cad25e437dd20b24fcfd3b8d399444633e250009d1f04c2d0de23c2e0e8c57c17690abbf7d53bd69d0a0f17bcc5ccbd813baefb5986696262335956b3c60be26ef0ae3442df951f50c5ff03a655bc4b5926293dc52b49488042db0ae4a55ebeaeb5e94fff4f09ebc849ca324088709ebf42e5aba120c216710f10b9274d17cc5a9808fbd222bba7609cee37e772f2e39f4a3c88aaf0798e62d895f581c79cc6b1babfa460734cc924005e07d433ee20213190673076c0436d7b9abe4a7a22198cfda41266b23b7f42e5277eb565c5a31b5c5e1070686113975abb451cb83fbc265487712ed97fe798bc0cc1862f25ce460ea6e708b888fe169a0ca4150947407797abec79ec933b384d584730afbc6a5dc953b602e92506de3ede88d4ac0e9e0a91744019a40544999061dde4ec32a413ce249ba1e0bd063f94977104de085c71d2efd716c5a3b948a86619ef99a70a175d8f0b39988d327120f7fefd46a2798316b5e2b95615d0fc54ad4a72206bf8d59f91aa1aee2555990fe56353e16adb4b6014f062831ae0dc8920398f77fb472de53c777d92947256bdcaff5b4bb77a7e9d9d140671f60b078d67b2ca950c8883a130e550781964400f684cfca068c7ae102ae88787c3840a2ca00a835c1ebe2d330bf14766d7d05bf31044cf609059bb46ac715ab37f8ac8ec9ee4a634cc451844544d24adb5e15f5868eb0cdb03dbe15592407077ad00f5283cbd9c254c2cfc41e07d287f66f24d017570e0a3271a4c01526fb7a676fb41d688ece4858b62dde21e1e720b575b6711bf5a581a10a357137db79c89a4740012468b75fbf5b8248a9771aea27a104a9e8d90a842a7e3a73d31b6d85a4acd0244e9cb98318ce66be3274301be28f6bf20279e2347ac8351d04b897f56c4c25f9817a229109efc06fa6b6e76cbf58d1425dfe3ff9b6a6a47dc297f5702b1e53845b17145079700a0a7cb524f4fba864dd2985c581953bb4e6cf130345a53d1ae0a31a8c56d3f181a93cbcc19599e44931ad5c757ab187956363ede23f31e486d4a3af7b7b2443fa3e7cf5761d431d2636ee210bc42fb8e0fc7e8c4b07176e9f1bd603d1efb0b350d71bcd2c740cb0a7c8fd67737be4ed91aa064473f63eeb9e764702ae6a65632669a11c2d828ca0e560d2ba5a51431b1c755633cf7f1e2e00773d345898dd866a1fdfa76601587cb1e1cb65b94bd3c7d4fd067016e31dda26da2d5be3064bcf5bd0af334a00d61290bd0ddbe7796cf8777d03330f70702b287210e0c8a55ebb041866bed7a3c5cf456e7192c70217d00cee6c172241a853e358a4fcf8da69571c7c6d75317d44523162034aeb7f7811a27569a74a85520b6eafb1d0a7cc412294ae0170c1e69bffce1936d959a20488a882f942e5f343a7acdb354654f52e2365e82adac70c86564f6383986437f3cc2cd310bd5d957df396fdb11aca5c8cb8f2f30bd393cc9d5b6f959fa5ced77c2a945286a445a9ad4c5371c9a69c3567c6c0c26a1abbe07344abcf7b93f9b87000179131b7c7657b382fae4f1c1ea616949f62ba287eabde34248706ee0108d69b9bc444e6afe0d167ce34aca4280d0da38cf305d9f80c5342ab3d313c661577ef8f71f7abaeb1708b30f94cdc23403099d7985eeb54c4e5269c4367b56269b0942c3cf3e08772eb06d069d728f1875d9918b566870249e3acfccb31ae802258a4cbef98dbfad52a147780ffbcce034dded0d4ea99c32c15bdfe7028940521947640996799652d32c0f95093586b6292c4f74f39e0aea44b14ea0ada743f0a9cd3a12780204bf22bd9dbab7a98e8dda7fdd7a88834b1583ee1d1bf82779c5f97419fc2060e19380ab83c13b02bfba1c9fdd4d00f4739df8ef67e00ce3f204ebcfc2923af4d5aedc5fa184e7ff70f1dfb6a3f9487a7d40b82a16e1dcf5be04e5ef6901dee052f951a7d50fa8bd7ddb1bb2673b791705bbc917930cb9b20200cfa9f4e923778cf37f8f1b8f240e0a6cc799d59318d252d3a5255ec02b3a62e675b4d0f2dcc2d6a73f3e69eda77c04e3ff01bb30be45ae2dfee9ce79ccf9073c54e32961f267c6a1f2409862a2614b4cbf2b4747a23e2dcd0e8bad1845ce6363afcc55bd308fa0a33583d300e51f03a64dd998ea7583e3c2bfd772f6ae25a5b82339eb364665c2257f82e6c8e07d24fa862b8500e9cb19d8f445c3cdff6651861ef49734050d3ba0464ac9083902a43dd822cefa032c8f5b438d8d272ec09ce002a7280cd13f43a7c863ad2b34723344f7221e454fe7759e044155d9ce6e32e03ea273d4f51e43d51ff189f203899b76d0651ea9cf181d2cdf08913f0a059af5adc5079f95bd61a0809e4ebf971385587d2bb61b9adf359427ba3c13486399916cd902f8ae9558aa87381043b1fd14c44fcfaafc9554ad849a8186ea4c979c824db8bdff7f2943bb347bdd09441f79e8169da269bf91f89bd61d046b8668d2a2bbb82256c26d2944d5b18b31e617f2766d4d35dbabe5dbfef5af58198c4b35aeaf809d58288dfb02731cee10692d4e2b91b4c5419eb68a60603f5f99e3c87f5a74d2da7e8ea9787c8a3bbdc3b9bc469653fbf1e5dda14ffcfc1621db917954cd754c3c5563a98f62875312865cb586c60c421c1b9aec29885917045ac27862dd02213496574496984ba1fc0d835cfc1d500c1d0c684033d7b33d1d82298d5f94eaea513f0aa0bbadc852c9dc31c9cfb7957b021884195b5a8ff87e5b93992871183fcdf100607e01e3d93f1402b965695810d24b632be610d4ae29fd3960020ab3b8d189dcf85dff2c7f912f97ba62a844b4f4370684e50cc2d77896cb462039820b76d5e13c95681af1ac286990d5aa3c914b4b392530ce6a3481b67c48fe782b3e30129e729d1b3d6f8cff95812f24a06ab15b9dc6abf9fc4196bb096069930ecb16c7a965588ca0f891f20b2f153e75cc1a8cbcbc6676f8275403922d2fe652b9b932758e447580df1706ea951f92970e36b1d9577c3f4a0a49b0bc027da9fff78852815d01991b4feff4c7e772f8f887222e61612d8aee1f7feb63e4d30b01f730221993e07a128c354684ddbb37c7b9e4646b9a0c0f2b5589f8acdea9c25ebd87d347c7b123ce3d13a2ddd6de1f9336850dd885fe824349a30d724599941bdbf5d769b6f106026ea03d86d4e6e26fd25290a1fa152d07cdae9b3532b0006d4c4489f47825659b11871fba50ae9d65481701a516c0cd125704e49c032242834f99e9d081dfb8068a7833a3911d4e37d62ac5774c07279cb449c98722037ced6e5a3074e171e065c95aeaca73487030b124d65991f13ea9a564286aedd1c0e6a812ece9d5f13c3873693a1b84a38d2398955528417d4a24d8f893422043cf1334665f3fd469ff5c281ab2edfa2e1f5eb53927091bcd71c86ad9d3cd4731f7cbd305a0c7d9eda7c6abe339a7aa7b370703ed1dc35990ec903457c6bfd99b3073f40f481deafc83623debd6be2394b6047ad912bf61501a4ad287e62b30a3e030c7dcec526f1e4a244f57365a6e52f99028d85e179d9eb4331ff0c9bad679d1ccc1016d416d97ed8fd199e054f4ea458b7f54c8a34fc2b55e197d2aa8d2c1b6dd233927721328b496516b17adf17c7a53558afd05b692b4663087a1a3b59bc0f7196007cdc53b33972de3e183f9da5821d1a560c559ee44b7de501620faacda7bb7870612fefa1c2045ddddb930880e6231e34c122aa46b60ba29d5731a0ccebb63bb33d7b56caab9a1d88e246154f429d4800415dbce5630f2e31413579d3cea758ce28c61986e6a6a5ce4f2d285b7b3e66fb26d2e50d5df1abf7566c790dde0c046529c17df21bbb73b426bdf7c324eaaa5e8af8a1a368dabfe97e93bcd84bd8ccd5a7fc0fa7b5a3ac75fcd9e39ac7762e63e5d8ffa0c59a42acb1b2d7964f0d04af1f20817a14078667597761e318ba1357cf74d7cc34309ca46bf0eb7490303529c90546390e271cc4af186e254fd623101ad70957c0e395eed5d47858856492cf4b406cca523066e1e869a980ba359aa01f1e2e2430145c91914440a4794666b99d8facf89664efe0a76cf88121292c93c2cd3bc1c73353a79d0eb831b5dfc1bc3dde1e2aaf5e8fddd66905844a4e639227feeecf95f037b6fb027ee32628404f4e597bc242f9bddbd876bc7cdfe0f5bd6748d904213de82c7c2d4a37c5fd6d349885e6a99494844cb0a0a54c47676157ea41961f3faa45a8d62bfae9f66b509e5bd0989766ea85eec82174b2c49e6a3d6763d32c2d6340e84a70f85f58f7d13ae083b27b0a83cddd27596647078ddfe1e4b82e4a7e5984f165f32b682358af94357f3d0df012ee0886a43c4cbb3ec26020df07eae637a57e78ba567232cca4e8370cbbac9bb557fb95bb03125a12ea7349242caffc513d028f4f06c64ccb4c6eb7f99d07214ab261e0e0e9995b6f93f0ed9aba02d92d37996ed488665455bca3b4f5598427dde4cd86b4d65d660d8f9218a709648db8d9aa182f2615f5e04edf6f7bb22842742e50f699a70000407e4da5ed3dc74027fb1fea83446437585156ec57ea9c097f1bc4c085ae305ae4312e5742cc9db43731dc7e506d9002821a9fd3400c42ba5d3327efec7b3c863e6b91fb17b5fca6941bc72341f542591c6d930381eabad3d2318f1672cc749ebef3f70dc590106cb57b234aa06744530cf208a362ab4a05f10eaaaf5db64f53ceb73a8dd723a6e7affb6c9b427d872588136a5d3086bc8d93aca2585b541ee8612f89c036ac8146de6109ae6d5252205fc20993ca9f40b682b89779f0331e815f221ce38ec5d137bdee1e51cb5479ca90985cf634d3c829f5f2e7b2dcf9d83c7766d67abe4c1968bdccb9a1ff0c5bc2f9dddbd284715c94f499c113c2afe04a8f816efd9d9fe23c9e05bf95363d214666f91bdc52e5d32c2f08a28ce205668e64eb14242819b1cf5c26b8d278b663101ca06f0d756d7cfb4414084683d4b7df6515419ec110a232f1132e296dcfa165c78ebaeb77daf7f56370f43edfbed4234fdad5dbdd850cf8bcffadbd60aa91710bf28b7df46e25a4f1022bc4efecaeabb563dd4a3981eaf44a9ae5d6a946acbba36c120a266f8a906d9dc48d10f4412690c57bce315cb320cd7cf71251bbac15b99c100c73b2b60414bc886214b459dfff40a6c2c2151d9a3a731e8aa459567730f4579b219bb5e325c574c28d170fb78cf1b93cfd1fbaffcf746ba1084e2ca4e0609de3366ae8cfbfb86275a512676eac6c26ffff336dadd2f628111988fcab96fe38679aa5c02def00e69f7ed09990d957e7b69654bf0163c97676154859bb4a07a0097dac408fb42aad6da9d51c719faeb81617d9fb34d4ef2d386c98ca972d4484bc50ea5216614209c8d16dd0e1e31433a7283e1a1ff0835a788244f62d75a5c72cc57a8e8b1380bf336b910476a33a4ace4991235cd6ce807b3180ef31c655361d567c3b48287189d151e6cdeb26356729c022151fac35c00682534e5d9323c8fcb9ec2f86515d936adfc55a6b08b1aad59c841e6c7f380629c9590866d207e3096d0c1a0fa8e5237b40f4ac242e6b812fbfc78265df9261b73f153c98cbf74fe9c3baad4eac71cdc7f627378ed46921d38fb7b1c630c867cfc7f732c630b500f19f3feaef666970184438095ccdb2e2c62c6bdc7e1c0d52b1f4f89a2a29364d1b8a5e7eb4f44b7b5370ed85d02121825e559714fd5b6eccad7a0497154e7b813c87736eefcd9603efe84ce35a189c42225c3327f11b20d74006f3b336dbfff0858cfc6b492893103d7de9d25a1889c9ef467649ebb1cb5337e9cfa220161247bf3cc58d6871df150350e85f544708f3f82ef8ae2d5b579bf6a0f24c9479e120df04b818798fa074a0c557769d3768ffa681c5e4eb85ff1bf3147037655e942e9e44c129106eabfcf5157805bdc9b0521d8a580165a98dbccdc1edaf50904075a79e4958f002a42071ac803bcd5d46c5814676db7bcba3841f83a33cf12ae476948546bcc683b92b7b8420d73106d777c306bcd9256384f314719baf3a50254e0361e24f024490d0dfc904b0261ce3724b3b455e4d295fec84a29d926531be04b8c83d67d4b6bee371bfe1734482757b8070f52040e6f6a71d77e4f879595003dcc71c6116f201c056109f848d8dc2b687da4cfece139f092686d6a41c62b893479b8606fe155f39fc0d064042cfcf285e9837fa61589f17819c1b808d99ccc444e2800e1070651f6d6370d42fa9ad88491e1ed708fde918f6e4bb84ec43fe95c5201050f76c4532878519e7da9fa863782f681e00dfee262e7605aacb1300cda899c6a029d7325e0db48fd9d686f86a35cab4680426c3aaa3c4fbdecff026437e6d75fd2cd95e0e63e5dd0e45a2d4ba1319a4b23cfe89e2f4d58c86aa39eae0e5cf21cb820b870034091ebfdda5d2550dcbe4472f94a5480ff5069c7b1e6ccc3505e8930bbef727e3abd92b66cf529293707a04979c1d8daa69f1a8a3f983661ac05ae486a9560fec558140c52c3b163048a49a7d2444b3b54eaacaadc3dbde40e65801f2198ef27a130ba7c63de416e8dfb084616ce10cb301a51c8fbd510cb0d10727c8f85b8effce7f759829dbee20780a722a3048a5256017a7af2f9a3315458968009c0e2695e0b7169d760ceedb3b6afb02c2bf7c1c56283afdece6679f3ebcd08fdff5f27716d559f1d307f8fba048f4fc807228ff00002452b8a6d76eede22ef8a49a636ffa3b981637efccc5435161832cf45222d41c436cdad072fed542b521e7fb7ff86dda4a505a8b076b3dd186740fc754c222b96f501d1a7af45723d54ad3b417f49030d3f9c2e3ed12ace0635eae4316aa87e7ca554b45e718da2c408850c79911cb4123ae7a71466dd69980480b9d6b808704bb91eb7a3f781298a6df0ef4247db9fed1e6903626198544a62a5206129417a670d885429ddf2646843b1f4f53cb9574e99e0538d27ca5f2480dbe9f7806e3c6f9cee92db8b63dd921642bf19eb6c5e4a53571e5220e6243577b9fa534ac6c84d478550953896242681161fcbc8a22976a09cd154500d7381e282ef6768f929763f3bd984bdb7caf586561a0e08c70d430cd0041f0f58dc5eb2ce1bd91482b7f28db15cdb4edd59448cdc85f7bd73bbbf6e3153d49a266f343950f0e29f5fd17a55d502834a132ddfa5ea76ed50951fb8ff548885044a8c027fb0d7e57dcef6fffc41f06625a88a90d3dbcbca6fb87962d6d2a055900bd8c683f1133bc6e9e52ec5c995b56168ea21b8bcf0bd2749f47e1606440880a5c5ac83b8456041984557aef535d6b2b02194f642179eabd6e420d402a18d50d592bdd2058adfabdbd3d18e2226c5292d78a78f264cd8ccd87248c250a005d015ad85645a9dfa6ec618f9269105025086663367109921f48b7134b115d6cf23239e7a3d5f26db0be2f3e26285bd9c51607fe001684bdf5450f072f8cceacb9c3e6efd989ad07c540a418835f683456357ef6c6873a085271ff421c9ee803a8f057d1970b8d457bd20075b9e3ca7cdd875e3783228a028540cb560979654924d5ea26d97bd0d06ed509754e479c20f63d27d7b8cc9571ee5217888537b3eccba6abea2d3a310edf7a17cb03073d9d032e4373ad503a912b2948e8a247e8a1c693e715172b5324cdf42d0e98ff7bde34e02e31a49cef9c4b9549584e3cd34070180c6578fea8372471a5399858861230b0399ab32ee8f2bfc5fee0ec935469d9292c58d2848fcf4e13d143b677a04978709a01b7643acd5d60ea3376239f3669ab4d0c8d88781c2737ef28ecd053fb4c1878be22c3244639453318dd2b602d556a08500cbfb6fcc4d90c08d619ba8763f79d0754057b4bbe8b254a4df5458a42b979d672662d6fb4bff6d3bb72a73c8d0b32c0e2f8074acf9e696a7f86f80f7cb4c07d5fb218019218d72e49c712b024a184438b3a1bb15ddfa939434e888c16840312039a8926b91ad140649a0468d9a13bf3b7f599ade61b360eae1845873f6a218608bd5e64872841ee46f36f1c43f870e273be9a282d1fefbd04e187cb23dda0552db11a47783a04491c6e42369af8c21aa334bb4e32ac08d2a6c35ddf13ee3da2d9c561a4605d17eb3d85eeaa7f68cb47e3a1906143ee5bb3a41ab82954d5cb623c3cbb3ee6e1b56423c9800b626cc59c71af0262d99679fc6817e82908a54456de7b711f03f6834bfbff97b3bf2df48142718d42ca4cfe982ee0191889becff34dfde522371f1bb8b35e466b92a91caf487cf84cb86cd341e519df9a6ec7f2d695d566b709fedd8f92da5fbd2584b3c193e36f0e46a12007ba1873cb740b915ecc3942e1f202f72d99ab83dfc2947ac9993ea2dc97b95ceede4c9dad593172d2fe453b157fe690eff17894220e9da1a4a993c0e4a5527f4a68ab3c94f12d1f4a5d448f09fd36943d05a0017e094ab45922c222099990c38980d05b0edc45e2ef54d4439ac94a770bdae460610d5661ebf213568dcea946ba322526b43d677ee37337c55d5671fcf3b21ff9ec0982076ffe2cd806d42f3904a1f70af0236fd23d9b19e627d47ecf1254ee2919d94240f885c76d30e402d76fde4f6971dceb85c606d240db569c8fb510cf2a918823bf875887ca4282225391db5395b016e0b6a938c0982083a794bf1239142bb3e785159aba1ba0fd3c17babbf307b4282ed4c0804ae034e853aaf62075a0d6c31112e5644884006c174c4523de36c5983b6bec2fc6ae579b8e8d176186882bb88bf254cb06900ab4e8511075e98711d6cf1b0057c29553fc7d80c9127b5c61357670ab8579f5ece8a770d78c8e2c17020d5cb8f4abe8dc236bd02724843834af17399ae5ee812ab5ff5825241f6b9fcb2fdd6aa85078deb50f988dada2426aadae49f2a20e5ff27d452e00d43aeb1ccaaad8342119745140d8795572e42da4e9e6897572566819d3dd5075d5b1ce3c0716e519bde76bcd8efcee14f5ccf9e8d9a8336968963484c9b14f33cfc8f97e675486fcc313c6b1233787765b5c5ef81cdb7c27583b2371b6fda3fdd6fb631dd1f73e64900bd91f97808712ba52a6c6e21daf17310e8caa80e7ebd8d7398d299592055fe3496abc2087d000a46a49c96eb4ebb468281366c46ecf72304021f7f2ab62872931be99089177e4ead4a7ad968990aee4c6d1dcf41c843be28547d16cc7d53de4c75ae7eedfd509830f6deeac7dd6f6f796878095805aaf74c231926621e938e02003001146ee499eb9417a3d6cd387fe69351d30355a0138e9363497ccf9a73631175d29118333a0d5b9f5667e04fbf644230ee10461f926cef209eacbd5dd49b6f132634be82a593512db936901d72d14743977d4b6203a1c813750588ca7a02ef48af5c6a40253c9b502016ec385299c1a9ae05d3b286d654d8267ee1918413f62f8ef860ff7ec00143d5f11efc42bfd3cbe226ef0666123c482b267e4b5ea71e9e346109cfca801cb164d54195ee7ae8beddf7319ab53391a60a9245e23750149970d592ee1ac456bd4df77c0fc4245d2bbd51f4c33d7f289d0db6b4a11f8c4fab92f9e13a5b0825c0ae27eac398669c8c7ff3b25f9e7bad4062a186a06bda5ee220e2298bb36fcedea1d5875b53f702ab8e96357643325ca1749586d2a4993bc319ab0fe6c7c954a6caa08777e202c1eff0599e90fc1cdedbb02c337f8a6df20467ab22b867e5f02a2212466bacbcbe0a731bc710d49c5d4dd0a70d4aa28a5f22a49106263c27c862fe6994a2eb5ff2071d024c7793d3ee57faddaa3e59e9dee5b725ab3ae0d9a0a3668f0638b6faa5936d540fce5a9bb3c1c54452aadab96cbcaba1083e5335b0c9e2be5d04c4c1ef6b39495436cc4a180336ad451dd72ad5faf2466e97508b231363b264cb75f9872ff95b15605dc10623dcb1ddb50071c65693c5d3207857db96bed8b827b1f856e7b", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="e8000000000000000002000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f09000000000000000000000000000000009a7f0000000000000000000000000000000000a0000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000040000000000000004c3070ad5092e52bb5267bb183458015e77c22f54c6aa588f12b54196493df69796f7fcc94e48669dd2ec096288e50fa3f0408000000000000352f"], 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x18)

15.873007342s ago: executing program 2 (id=770):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}, {&(0x7f0000002800)=""/4075, 0xfeb}], 0x2}, 0x0)
r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0)
personality(0x400000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fanotify_init(0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = fanotify_init(0x0, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001580)=ANY=[@ANYBLOB="30ffff00eb1f3370b0d81db15397a09c56af7bff7dedc858ddd8216bad4b26cd70162a30cb168e65df52527dc0de322d7f54e29a", @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="14005a8010000080050001004800000004000200"], 0x30}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, <r8=>0xffffffffffffffff})
r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0)
poll(&(0x7f0000001500)=[{r3}, {r1, 0x2448}, {r1, 0x201}, {r5, 0x2024}, {r6, 0x6040}, {r8, 0x1204}, {r1, 0x200}, {r3, 0x8}, {r9}, {r2, 0x1000}], 0xa, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x10, 0x400000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x62}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x5, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4004)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x2, 0x0, 0x1}}, 0xb8}}, 0x0)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r11, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
io_setup(0x8, &(0x7f00000002c0)=<r12=>0x0)
io_submit(r12, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x7}])

15.332022371s ago: executing program 3 (id=772):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x103)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, <r4=>0x0}, 0x2048)
write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
utime(&(0x7f00000000c0)='./file0\x00', 0x0)

14.083946912s ago: executing program 2 (id=774):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
pipe2$watch_queue(&(0x7f0000000240), 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b8000000130001000000000000000000e0000002000000000000000000000000fe0000000000000000000000000000aa00000000000000000a00300000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043e67c050000000000000000000000000000000000baab38e308c5e25d37081de76ab4ea92ccf69ec3cd28e938b342133257da1215af3e129d915a4e51e06e5019ff1a6f755d962c77b2cfcd9f862e9a6247173ca6547d90e68d74844dfcdca60749978e539f8d568079f378d533db84c1cc4eaea175967ff3fcde854086afee675dfd7ab37984cd41588078b9da2e81e85418680426175686767e9fa4352e66316b1fc3a4acf08000ef7240d63b5e6863200bad73b315db955796e3707840fdc69864986e0ab67a99f18a384ac2aa80a577f0698bf4adfea3ef4e902a40e7119d0478c1c9241d03082dc60846fd92ee845b22c276fbbd8d16fd0638039f901e1d9103e4831be7a9a9d25de074ad649d8e407af8f027cc14e5d09fd87143e9ce88c8ccf9a8357bd07d6b9ce69e9d01803667f9062f6d44f7d8481e10e2e70a7d46f1248972984d8e72da0cf79f8933766d516a1476c2132948a6693c2508310d3f90131290b349412492f6bd6aa53ad1"], 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
process_mrelease(0xffffffffffffffff, 0x1000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001180)=@delchain={0x510, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x428, 0x2, [@TCA_FW_ACT={0x404, 0x4, [@m_sample={0x144, 0x20, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5eb}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0xe8, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x5, 0x3, 0x27e, 0x6}, 0x3d}}]}, {0x9f, 0x6, "4c329bedaaa233551aa2e4ad75b4895dd47ee8ca0ef16afd68ea1f944fc0f3a819cb8bed8e0f225948f280ad3f94a8b47518da166b7f133f9f1b3b034e0a35cff288cbc20971d230fb3a442b60f511fa502400b63027f9ae8d65a6fa83beb98527615e56fc7f9f6291a208e8fd5093be12726a903ea016f5e7ef55970a4d2a35b0649ca963d08766a042bb1f9bb0620938127989e6420ae673af71"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_bpf={0xe4, 0xd, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x41d, 0xfffffffa, 0x5, 0x2}}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x410, 0x1c, 0x80, 0x1}, {0x4, 0x4, 0x9, 0x1}, {0x0, 0x4, 0x6, 0x72}, {0x4, 0x5, 0x6, 0x9}, {0x2, 0x58, 0xc, 0x1}, {0x1, 0x3, 0x3, 0xd}, {0x1, 0x2, 0x8b, 0x80}, {0x6, 0x3, 0x1, 0x4}, {0x81, 0x8, 0x8, 0x7}]}]}, {0x55, 0x6, "9174873fd926513b61b4effe06a401efe57895e2eea934d5de221e1e797e34536ec35a7c2e15b303d80b54cf293525416795ef994a0168e735c0940a59f206c89682518bf47665744ed5c8fe5c3bdb9d58"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xf0, 0x10, 0x0, 0x0, {{0x9}, {0x4}, {0xc3, 0x6, "b2a624892dc09954ab9abfc92d0c9e43ac2120cb816128651bb2d82f74e0347c52a83bc925ffe1d5d9a862302dccc56ca9dc51dfb436681ee86a9729059c12223560a20c42fbd64b83b0db0ed2b568dc1260d1ac23ba03b0ece7e95c7a06f5ecd833e0e64599e52d9b684ff7fff834a196217a09e843ecd864250c33aeb4095ba4e783e398308cd59fe834ea21a15f626a202600538e558c7318a0a82f5b363d791a9e18e0c6f577ab58cdc2d4c576439b926f3f2a0c31bc2df9e77436184c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xb}}, @TCA_FW_MASK={0x8, 0x5, 0x1}]}}, @filter_kind_options=@f_route={{0xa}, {0x9c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_ACT={0x84, 0x6, [@m_nat={0x80, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x7}, @multicast2, @loopback}}]}, {0x2d, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f9475668"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x510}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x1})
mmap(&(0x7f0000986000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x2352a000)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x15, 0x1, 0x200, &(0x7f0000000880)="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"})
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0xbc}, 0x1, 0xba01}, 0x0)

13.241905473s ago: executing program 3 (id=775):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000000c0)="b4a9dc66abb58908000000fa89bfa73038a0383cef6f51", 0x20000000}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x11, &(0x7f00000000c0), 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0xd, 0x1, 0x0, "bb1e000064000080007f28becf0500063475de71000077a16c80b6db943400"})
sendmsg$nl_netfilter(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000000003050000000000000000c50089cb5b22d698be0000000000"], 0x14}}, 0x0)
sendmmsg$inet(r3, 0x0, 0x0, 0xc0)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pptp(0x18, 0x1, 0x2)
socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCX_GET(r8, 0x40189206, &(0x7f00000002c0)={&(0x7f0000000280), 0x0, 0xfffffffffffffd98})
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)=@newtaction={0x894, 0x30, 0x0, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x1, 0x3, 0x3, 0x0, 0x89, 0x8, 0x2, 0x81, 0x8ad0, 0x29a8, 0x5, 0xfffffffe, 0x3, 0x1, 0x3, 0x7, 0x1, 0x6, 0x9, 0x7, 0x2, 0xffff, 0x1b1e88b6, 0x1b, 0x9, 0x6, 0x9, 0x7, 0xb, 0x5, 0x2, 0x5, 0x4, 0x654, 0x8001, 0x40007, 0x7dfb, 0x15b, 0x6, 0x8001, 0x7, 0x1, 0x5, 0x9, 0x4, 0x80000001, 0x83, 0x1, 0x1, 0x0, 0x1, 0x7, 0x7, 0x800, 0x7, 0xd, 0x6, 0x6, 0x0, 0xfffffff9, 0xfffffffa, 0x80000000, 0x6, 0x3, 0xc9, 0x7, 0x3, 0x3, 0x0, 0x7, 0xf, 0x2, 0x6, 0x389, 0x8, 0x7fff, 0x544, 0x0, 0xd12e, 0x6, 0x0, 0xdd7, 0x1, 0x3ff, 0x200, 0x0, 0x1, 0x8, 0xc, 0xfddd, 0x3, 0x7f, 0x0, 0xc1a, 0xa, 0x7fffffff, 0xffffffff, 0x7, 0xfffffffc, 0x5, 0x3, 0x1, 0x4, 0xa9, 0x5, 0x3ff, 0x6, 0x6, 0x8, 0xf33, 0x8, 0x6, 0x0, 0x3, 0x2, 0x1, 0x4, 0xfffffe00, 0x5, 0x7fffffff, 0x1, 0x5, 0x8, 0x81, 0x6, 0x7b, 0x4, 0x0, 0x3, 0x2, 0x6, 0x7, 0x4b1d, 0x80000000, 0x7, 0x2, 0x7ff, 0x1, 0x40, 0x1, 0x6, 0x0, 0x5, 0x7, 0x3, 0x9, 0x1, 0xfffffffd, 0x2a, 0x4, 0x3, 0x400000, 0x7, 0x9, 0x9, 0x4, 0x3, 0x4, 0x2a8f529d, 0x4c, 0x2, 0x7fffffff, 0x8, 0x7fff, 0x800, 0xe, 0xa92d, 0x0, 0x1, 0x6, 0xbf, 0x0, 0x1, 0x81, 0x5c, 0xfff, 0x5, 0x7a15, 0xfffffffd, 0x0, 0xac, 0x2e5bb190, 0xda3, 0x6, 0x1, 0x80000001, 0x2, 0x4, 0x7674, 0x7, 0x6, 0x7, 0x4932, 0x1, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8000, 0x4, 0x6, 0x25, 0x179, 0x0, 0x6d5, 0x4, 0x8, 0x2, 0x2, 0x0, 0x1, 0x5d, 0x6, 0x6c, 0x0, 0xe, 0x8, 0x53a, 0x2, 0x9, 0x4, 0x97, 0x3, 0x1f5, 0xbd0, 0x1, 0x5, 0xecfc, 0x5, 0x4, 0x9e38, 0x2, 0xffff, 0x2, 0xdb6f, 0xff, 0x1c, 0x9, 0x5, 0x800, 0xe685, 0xdb7, 0xfffffffa, 0x7, 0x2, 0x7ff, 0x997, 0xffff, 0x3, 0xd, 0x3, 0xe, 0x4, 0xbb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x2, 0x9, 0x6, 0x9, 0x2, 0xffff, 0xfffffff9, 0x81, 0x5, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x1, 0x8, 0x7, 0x7, 0xda8, 0xfffff800, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x200, 0x100, 0x8, 0x7, 0x1ff, 0x0, 0xf1, 0x3, 0x8, 0x3, 0x10001, 0xc, 0x9, 0x200, 0x3, 0x543d, 0x74, 0x2, 0x8, 0x4, 0x37, 0x81, 0xd425, 0x1, 0x10, 0x2a8, 0x6, 0x9, 0x9, 0x1, 0x10001, 0x400, 0x6, 0x10001, 0x5, 0x40, 0x6, 0x400, 0xd87d, 0xfffffff7, 0x8, 0x3, 0x10001, 0xd1e, 0x4c8000, 0x348, 0x2, 0x8, 0x5, 0x2, 0x7fffffff, 0x0, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0xfffffc00, 0xffff, 0x81, 0x3, 0x1d4, 0x7ff, 0x3, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x81, 0x4, 0x3, 0x10001, 0x80, 0x1, 0x5, 0x1, 0x9, 0x5, 0x5, 0x5, 0x8, 0xb, 0x5ca, 0xe, 0x6, 0xfff, 0x4, 0x80000000, 0x0, 0x4, 0x24, 0x5, 0x46, 0x3e994374, 0x7, 0x6, 0xa, 0x7f, 0x6, 0x6, 0x800, 0x4, 0x67, 0x800, 0x1ff, 0x0, 0x788, 0x0, 0x8000, 0x100, 0x9, 0xe, 0xb, 0x5, 0x7, 0xfffffff0, 0x0, 0x4, 0x4, 0xfffffffc, 0x2, 0x3, 0xfffffc01, 0x0, 0x6, 0x4, 0xf, 0x3850, 0x4, 0xe00000, 0xb9c, 0x0, 0xfffffff9, 0x0, 0x7, 0x2, 0x80, 0xfffffff9, 0x0, 0x1, 0x30, 0x0, 0x7, 0x140000, 0xfffffff8, 0x23, 0x6, 0x1, 0x5, 0x7ff, 0x40, 0x7, 0x200000, 0x8000, 0x3, 0xc, 0x6, 0x4, 0x9, 0xb95, 0x6, 0x7ff, 0x7fffffff, 0x9, 0xbdd1, 0x1, 0x132c, 0x4, 0x8, 0x0, 0x8, 0x9e, 0x8, 0x8, 0xfff, 0xffff, 0x7, 0x9d, 0x15, 0x2, 0x1, 0x0, 0xac, 0x6, 0x2, 0x6, 0x9e, 0xb, 0x10, 0x5, 0x4, 0xac, 0x7961481c, 0xf5c9, 0x27cf, 0x1, 0x6, 0x80, 0x7, 0x1, 0x7, 0x7, 0x7, 0x0, 0x4, 0xd3, 0x1, 0xff, 0x9, 0x7fffffff, 0x3, 0x9c7, 0x1, 0x6, 0x7, 0x1, 0x8, 0x8, 0x1746, 0x0, 0x9, 0x40, 0x1, 0x8001, 0x29fb, 0x0, 0x7, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x99}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x3, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x3, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x80, 0x5b2, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x894}}, 0x0)
recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/138, 0x8a}], 0x1, &(0x7f00000001c0)=""/107, 0x6b}, 0xa}, {{&(0x7f0000000240)=@can, 0x80, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000540)=""/249, 0xf9}, {&(0x7f00000006c0)=""/92, 0x5c}, {&(0x7f0000000740)=""/233, 0xfffffffffffffef0}], 0x7, &(0x7f00000008c0)=""/142, 0x8e}, 0x1}, {{&(0x7f0000000980)=@ieee802154, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/29, 0x1d}, {&(0x7f0000000a00)=""/232, 0xe8}], 0x2, &(0x7f0000001780)=""/252, 0xfb}, 0x2}, {{&(0x7f0000000c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=""/156, 0x9c}, 0x4}, {{&(0x7f0000000dc0)=@qipcrtr, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e40)=""/49, 0x31}, {&(0x7f0000000e80)=""/225, 0xe1}], 0x2}, 0x200}], 0x5, 0x43, 0x0)
socket$netlink(0x10, 0x3, 0x7)
recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x75)

10.692562745s ago: executing program 2 (id=778):
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x26, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x39, 0x3ac89870af0d3db0, 0x33, 0x65, 0x33, 0x66, 0x62, 0x63, 0x32, 0x63, 0x39, 0x268d523ee6cbde39, 0x39, 0x61, 0x62, 0x62]}, &(0x7f0000000280)={0x0, "cae9b7f70cc82d72efc37745739c35024ce2551bd6037bb80475e09dc38fcc7f471c1fc9654d8c846e276c40c7453a2c0bcb22a3e512902fa85429e41cc87494", 0x29}, 0x48, 0xfffffffffffffffd)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r3, 0x3c, 0xe9}, &(0x7f0000000300)={'enc=', 'oaep', ' hash=', {'tgr160\x00'}}, &(0x7f0000000380)="e41943a5c21067c2ede0f9c5b409b7462ec86d7476fe91ee3edae7147827524ecaf3bc3f26caa4795ce33b5569f383e1596cedae9ed49bea7350c5a2", &(0x7f00000004c0)="f5f018b2c221efb735cce54f333463967cabf7ab8ed79368c350f78ef39cf390d0331a2849c8baaa2a5c35cb999d66fe268a71f19cb383775ee0c6a508b229e03a07921550dcef0663cb1964ec05332a0536e88b3638376852af9089c8bbb742652c246296cca87557ff2c173be3066e50527f405fbb5a20f2982845401e4c36832108ccd89ddfb581a633b11b5bda3b7172c67ed6a14d22787c62860d49265e0149a3d58ddeeb6c9460a32ea868f32c6ef926dffd4ea480784efba141803de3d90d123eb2e472ab81cdd17ff752f0ad059037c383c9bd4a4fc2ece0eb1904b279045668c3f7c45f66")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
umount2(&(0x7f0000000180)='./file0\x00', 0xb)

10.192376055s ago: executing program 2 (id=779):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
socket$inet6(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f000000a380)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2040}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r4, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="e8000000000000000002000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f09000000000000000000000000000000009a7f0000000000000000000000000000000000a0000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000040000000000000004c3070ad5092e52bb5267bb183458015e77c22f54c6aa588f12b54196493df69796f7fcc94e48669dd2ec096288e50fa3f0408000000000000352f"], 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r6, 0x0, 0x18)

9.994702914s ago: executing program 6 (id=782):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x602460, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000004c0), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000280)="ed62223461f02d63e7dfbe4fe373357ef335ab9c0cb010aa2470877d93eb329226526203a9b89c74fe931be9bc2f7774f01481e849e8a1b02b9b380c0674", 0x3e, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r4, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}})
write$vga_arbiter(r0, 0x0, 0x8)

9.928026941s ago: executing program 4 (id=783):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}, {&(0x7f0000002800)=""/4075, 0xfeb}], 0x2}, 0x0)
r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0)
personality(0x400000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fanotify_init(0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = fanotify_init(0x0, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001580)=ANY=[@ANYBLOB="30ffff00eb1f3370b0d81db15397a09c56af7bff7dedc858ddd8216bad4b26cd70162a30cb168e65df52527dc0de322d7f54e29a", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="14005a8010000080050001004800000004000200"], 0x30}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, <r7=>0xffffffffffffffff})
poll(&(0x7f0000001500)=[{r3}, {r1, 0x2448}, {r1, 0x201}, {r4, 0x2024}, {0xffffffffffffffff, 0x6040}, {r7, 0x1204}, {r1, 0x200}, {r3, 0x8}, {}, {r2, 0x1000}], 0xa, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x2, 0x0, 0x1}}, 0xb8}}, 0x0)

8.464130786s ago: executing program 6 (id=784):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}, {&(0x7f0000002800)=""/4075, 0xfeb}], 0x2}, 0x0)
r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0)
personality(0x400000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fanotify_init(0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = fanotify_init(0x0, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001580)=ANY=[@ANYBLOB="30ffff00eb1f3370b0d81db15397a09c56af7bff7dedc858ddd8216bad4b26cd70162a30cb168e65df52527dc0de322d7f54e29a", @ANYRES16, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="14005a8010000080050001004800000004000200"], 0x30}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, <r8=>0xffffffffffffffff})
r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0)
poll(&(0x7f0000001500)=[{r3}, {r1, 0x2448}, {r1, 0x201}, {r5, 0x2024}, {r6, 0x6040}, {r8, 0x1204}, {r1, 0x200}, {r3, 0x8}, {r9}, {r2, 0x1000}], 0xa, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x10, 0x400000, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x62}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x5, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4004)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0x2, 0x0, 0x1}}, 0xb8}}, 0x0)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r11, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
io_setup(0x8, &(0x7f00000002c0)=<r12=>0x0)
io_submit(r12, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x7}])

7.445354314s ago: executing program 5 (id=785):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0xff7c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mknodat(r0, &(0x7f00000005c0)='./cgroup\x00', 0x20, 0xb12)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtclass={0x24, 0x28, 0x305, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0x7, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x4)
read(r2, &(0x7f00000004c0)=""/215, 0xd7)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000100)={0xa, 0x4e2b, 0x0, @mcast2, 0x2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x553}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="9e9e54281456940065bdbe8ecf", 0xd}, {&(0x7f0000000140)="3068f193c074faab3078e22ee67ee0608c3ce4aec74b8064733c57f8f1eb7f", 0x1f}, {&(0x7f0000000180)="360f365a2fbe7a746b369031300feeaf300d6930767a24e9e10eb0432a1fba0b31ca4a50d351f91b84a041f90129da8e6a21ed56bf39eba4e5dbf53a4d32342c6ebba0085f1579c497369e7babdd5526e554554657dad3c9cc9afa0e04ea", 0x5e}, {&(0x7f00000002c0)="55372c1eb15f2bac50de8efe5c7b2c29bfbccbf94751424f1c0e3a417958673f1e2e6fc57828756b05dd8fde97d692527f31ab5299c98fd68d81dfd17992d6a1dd98cb7e1a5ee33f75eb4584614f2939c2736d5b5c97ff2a6cc42875b28d3f44164458a6ee7117f265522be3092e02810e3dd89a9cd709507c69d3443201eb296b30d6f117892c96869c2cd9a3c7ff1bdd4a00aaf71f75", 0x97}, {&(0x7f0000000380)="31ebc44c0e6955f5abe727cd500c4fa0f2f4f4a833b63b504c0fa5097fb7474916f7f7d713f62aae8f880a9d7a7237a4c73badc0a749133a0f7cd3ac87e7cd1f500ec3dd7f25f2448ae718d6f1de513d1653e5dec19e2ec16fcd49f3632aa238eacc039223d49ba94c0adac15104bdf47039b282eccfb41b5af4b15c416fad98c759e58a04c90060c9468b4bf9307cbab49a87549b9dfca5e1e7539c0d03a09721416b08d91e950941265469c3fff066a93c279727f99d47e7b59c891fdd4184056a5f1c7a5025acf266a73ad827", 0xce}, {&(0x7f0000000480)="9732d5fc22eccb4402873799c06a96a28ba27fd777a17e5ea5099cdb11ca0adf4187ee09f2a544a675fd3d0e059c5570", 0x30}], 0x6, &(0x7f0000000540)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x3a}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x50}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x78}}], 0x2, 0x0)

7.443503595s ago: executing program 4 (id=786):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000007b00000008001e80"], 0x24}], 0x1}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000018"], 0x3c}, 0x1, 0x11}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup(r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1}, 0x20040051)

7.118082709s ago: executing program 5 (id=787):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mount$tmpfs(0x0, 0x0, 0x0, 0x4200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

6.66010808s ago: executing program 6 (id=788):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
dup(r1)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000040)=0x1f, 0x4)
getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000300))
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0x40505330, &(0x7f0000000400)={0x2000000})
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={<r4=>0x0}, 0x0)
prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)

6.179897844s ago: executing program 4 (id=789):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x6558, r6}, 0x14)

5.335956353s ago: executing program 6 (id=790):
write$smackfs_label(0xffffffffffffffff, 0x0, 0x89)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x191883, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0))
r3 = socket(0x23, 0x5, 0x0)
listen(r3, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x60000004})
pselect6(0x40, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000180)={0x4, [0x81, 0x401, 0xff, 0x1]}, 0xc)

4.118459724s ago: executing program 5 (id=791):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000400)=@in6={0x21, 0x4, 0x2, 0x0, {0xa, 0x4e24, 0xfffffffc, @mcast2, 0x200002}}, 0x18)
listen(r1, 0x0)
close(r1)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=<r3=>0x0)
sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000180), 0x0, 0x2, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0)
read$FUSE(r6, &(0x7f0000002b00)={0x2020}, 0x2020)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000004d40)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000004e40)=0xe4)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000004e80), &(0x7f0000004ec0)=0xc)
ioctl$TIOCL_SETVESABLANK(r6, 0x541c, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xffffffffffffff68}, 0x1, 0x0, 0x0, 0x14}, 0x44)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24)
r8 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0)
gettid()
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd27, 0x25ffdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004014}, 0x20044040)

3.952810958s ago: executing program 6 (id=792):
r0 = syz_clone(0x80040100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0xa0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x880}, [@IFLA_VFINFO_LIST={0x64, 0x16, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x27, @random="0f38cdd38657"}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7a6, 0x8a8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8001, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7fffffff, 0x873, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0xce}}]}]}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0xa0}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000410007010000000000000000017c000008000100", @ANYRES32=r0], 0x1c}}, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x77359400}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
gettid()
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000440)=0x1c)
listen(r5, 0x1000)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x18)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000640)={{}, 0x0, 0x0, @inherit={0x50, 0x0}, @name="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"})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x37f, 0x148, 0x150, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0)
recvmsg$unix(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/190, 0xbe}], 0x1}, 0x10140)
r8 = dup3(0xffffffffffffffff, r7, 0x0)
ioctl$RTC_RD_TIME(r8, 0x80247009, &(0x7f0000000080))
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x3, 0xf7, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x7, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x68, 0xe0}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x110, 0x2, 0xf6, 0xd, 0x40}, 0x27e, &(0x7f0000001640)={0x5, 0xf, 0x27e, 0x6, [@generic={0x6e, 0x10, 0x5d4eedf9f88a5a81, "5eb3d05001306fd0272f80043352cf52ff3adaecc3df99f6c3338d20b21e82fba8a37de25b957304841ed5706c6efc82ddf55c706e0c48f7a6fec5afabafcfa6e99eb479ff36da115b884eee2e483afd7b4e29d5394f5add302b20a02605132819cd652aa9ce2295a857f2"}, @generic={0xa5, 0x10, 0xa, "b1c5a9e5588b816da21c4bf0869f131e708a3d875e685f5935fde5792ee09b28fb620be1e5ccfb9c50deb11e07ce8ef432a49a3b5301d505b48167c18e1c829436595ecb0629e13210dfae829c9b0811ac22d19595bdd6b9cbcf16a4a27b46f51bc05b70a18fa39fb8b536f723b3637053bdd1b43d3fa8eee53012d69dc204c13ecdfa4b3f2e669fe4d0bea5c6eec4273973bf8240c25cd271146e8b9061ec199063"}, @generic={0x7e, 0x10, 0x2, "c8db830f7689a4f4a5c273edd78c7d2cc7c5e7ea12e12ea2536983b555027ee4981c4fda996a9dc8a7e27d92736223020250af99d6748dec5d71dde01ab3efb115e1c32d1ba796c0efeb971165610b6fbb1e6b55931d885d7fcd843b50963bfdc03addbd0aba2a17a5783761c40b11dc57a7f2fc9e6cca6304e3ac"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x6a, 0x0, 0x5, 0x9, 0x2}, @generic={0x2e, 0x10, 0x1, "95fc6235eb46091a3d656e306609b4a12bff4926f73aba22968a2591d04a42871906f9211bb7cc50368020"}, @generic={0xaf, 0x10, 0x3, "097ab33d9ed60e1ce84247b774b1c4bd3560d69cda94570ad52a8f899193caba0f9cbd68aafbbb12570cce9bf058c10182c2dc8e16028de0ad5dc268f62e1d71f363a04d4f14285a51cda3e8123987e129c84a6e193b553a6d13bab4d8ae626a2676be5b2e980d601fe7418067e0fd08086a765ae5aeca9f851429f2b7c60fd276781dd08352a311c002a9fa4317d3197b29365f9c1e362674b7c0acfd9091b1176c003e163f3549be104c1f"}]}, 0x3, [{0x3, &(0x7f0000000500)=@string={0x3, 0x3, "d5"}}, {0x34, &(0x7f0000000540)=@string={0x34, 0x3, "b2997e75a67ba2bcfefcee701714dbdddaadc75c072b68953647b738a90b907caf009d0bfd98a81ad2c028cd67829cbfa42e"}}, {0x58, &(0x7f0000000580)=@string={0x58, 0x3, "284488031c9fee9127766f81684a56a8fb2cc6b5f21f520c85d4983ab363d08cf35d62d97e44c8b7412cc8f1c95410b9d66a57326b32986a10d5a440342c0ddac0d6cff72d09399e5acb0c42c6bfa3bc3155409390cc"}}]})
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xfffffffffffffddf, &(0x7f0000000200)=ANY=[])
socket$nl_generic(0x10, 0x3, 0x10)

3.596890118s ago: executing program 4 (id=793):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
syz_emit_ethernet(0x56, &(0x7f00000001c0)={@random="080536fb3673", @remote, @void, {@mpls_uc={0x8847, {[{0x1}, {0x3}, {0xa}, {0x2, 0x0, 0x1}, {0xf4ddd, 0x0, 0x1}, {0x7, 0x0, 0x1}], @generic="cb1f3f5f1da576a3996be7db200d6a007602c089ca566392c591fa1be276da736992499ef6c12570694733b892b3883f"}}}}, 0x0) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "d9587b6f229fd54fd8331e225f5421c23d710eab780bb8916ea853e07d7f64d2", "487fbcc007793601d105c58277df5191d066c4d90598a7606a57df19f7a05acec6fc1ab9a3d19e0464eada8f80ffcaab", "47510ac65297662270e0606a8444e26b8c4c3520ae502a5614aafc44", {"663938a4773cfc3a4b2a56e81d3ef6ab", "a23fc3a2f05e08e7ea8d5c22e5a6aae0"}}}}}}}, 0x0)

3.391929131s ago: executing program 2 (id=794):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x602460, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f00000004c0), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000280)="ed62223461f02d63e7dfbe4fe373357ef335ab9c0cb010aa2470877d93eb329226526203a9b89c74fe931be9bc2f7774f01481e849e8a1b02b9b380c0674", 0x3e, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r4, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}})
write$vga_arbiter(r0, 0x0, 0x8)

3.391483299s ago: executing program 4 (id=795):
mount$9p_tcp(&(0x7f00000003c0), &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440), 0x800, &(0x7f0000000940)={'trans=tcp,', {'port', 0x3d, 0x4e24}})
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000006c0)=0x30000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000006c0)={<r3=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x1, {0xa, 0x4e21, 0x8, @remote, 0x3}, r3}}, 0x38)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007000000080000002200000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001000000000000000400200000000000600"/28], 0x50)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000120001280080001"], 0x40}, 0x1, 0x0, 0x0, 0xf7e1d8c92a9f430c}, 0x80)
syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100000841"], 0x0)
r6 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\8/\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7', 0x0)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
syz_usb_connect(0x2, 0x5f, &(0x7f0000000b40)={{0x12, 0x1, 0x250, 0x6c, 0x3c, 0x62, 0x10, 0x46d, 0x8d3, 0x300e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x2, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0xfc, 0x0, 0xe, 0x1, 0x0, 0x3, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "f01826"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x6, 0x400}, {0x6, 0x24, 0x1a, 0xf, 0x24}, [@acm={0x4, 0x24, 0x2, 0x1}, @acm={0x4}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x6, 0x5, 0x80, 0x0, 0x80}, @dmm={0x7, 0x24, 0x14, 0x2, 0x8}]}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000700)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0)

2.248882026s ago: executing program 2 (id=796):
r0 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x2, 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$key(0xf, 0x3, 0x2)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x81}, 0x8)
chmod(&(0x7f0000000080)='./file0\x00', 0x4a)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="2aed66", 0x3, 0x20000004, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44)
syz_usb_connect$hid(0xf00, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc532, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1.282987764s ago: executing program 5 (id=797):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000026c0)=@delchain={0x5a0, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0xffe0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x564, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x53c, 0x7, [@m_gact={0xb0, 0x8, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1eb, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1e14, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18f0, 0x8}}]}, {0x5d, 0x6, "016e0e8ccce8b438002b9a280a547f6dcc992613bee7e806d9e109449422cbe54423fbdabccd281045d5e6f219d08e9d8413a7e7c05279c68c7feb414ca2bdc1564df509a816a7534774b4ae6f8fa13216cf11f3899d1dc6cf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x168, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8, 0x8, 0x8, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x10000000, 0x2eca, 0x5}, 0x3}}]}, {0xd9, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc066125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d139e8371981dc62a4369aa602ac542d2123e008f091efa1ef638699b7da3eaf710563945"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x12c, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x304, 0x8, 0x6, 0x6, 0x7}, 0xb}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="a48ea8b24dc2"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="d830ffae9662"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xad, 0x6, "274fe8ad5464eac54caeb2c9bfafd0d27035c4d2ef2038d8e51fc32d91b5a8bb285779ed45eecdf6e53cc2a654c60fc1c69ab8bf54a2810705818519a2ec6d06c1b9f6d88fc0c993efbfea2e07d7cb41b65897ace41d0b63543be909e9ef56a7b5c41b308bf7c933caf377b77500c4b2a0831b5db55639e67466aea7e3de0e87540a4ce8343e518bc1b40859579c5897549d71e7ceeb1fede1cc05003db8e7bb9458d14d89f1542254"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x168, 0x12, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x0, 0x2, 0x7d}}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7ff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}]}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xc9, 0x6, "e429cc476e5a6b2bfe572c4920d343d428d2d62e337aedf0b81700410284c9b3bf0a511fffa6d416cc3b5ff995d0cd3e4f2656fb972f24e7c94b2df03aaad9835392bca70719cb1aa7cd3abe1c6df10410af14e75e2e761362bf9c813542b1375d5c28f2eb45a767eb9b182d3c67c24285c4482806a7087d1d4021f864e35922a41e9f5db9775b3d88b1058b40237c9a4d9c801ba52bae5aebc90c4cddd7b2c193e3fd550d29bb604246cdd79b7624d92c95813d7639db2837fff30928788aa929c8b28924"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x8c, 0x2, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x1}, 0x20000810)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}}, 0x24000000)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xffa1}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.011824268s ago: executing program 5 (id=798):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffef9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x382f, <r5=>0xffffffffffffffff, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000380)=@x86={0xbb, 0x0, 0x0, 0x0, 0x8, 0xff, 0x67, 0xd2, 0x8, 0x34, 0x4, 0x2, 0x0, 0x9, 0xd66, 0x81, 0x10, 0x95, 0x7f, '\x00', 0x6, 0x80000001})
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000)

433.349002ms ago: executing program 6 (id=799):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000680)={0x60, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}]}})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$sysctl(r3, &(0x7f0000000100)='7\x00', 0x2)
r4 = socket(0x1e, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a20303030303030303030303030303030303430393300004d2ff2623ec74cf4960e8e024347b37fc3750312de6c0276ca3b2c65c2c2d277554345e0f520932b48dc8d911ad58283307fe86aec3f0449c35b67f6c8b7c4cad528c14866b28d4dad2b8abceb6f65d7ab4efed46e24c2974d869152c9bf13e110157614e5b032b3c05f9d852585466decd72caae9810e5d1c05d387bb26b75fd43de7fbad8346bd2fec"], 0x2a, 0x0)
r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r5, &(0x7f0000000480)=""/112, 0x70)
sendmmsg$sock(r4, &(0x7f00000016c0)=[{{&(0x7f0000000200)=@tipc=@name={0x1e, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x80, 0x0}}], 0x2, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
io_setup(0x400, &(0x7f00000000c0))
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x48400, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
getsockopt$sock_int(r8, 0x1, 0x3e, 0x0, &(0x7f0000005ac0))
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="30003300c0000000080211000001080211000000505050505050"], 0x4c}}, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000001c0))
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220)
listen(r0, 0x8)
accept4(r0, 0x0, 0x0, 0x0)

207.669393ms ago: executing program 5 (id=800):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x2}, @const={0xf49, {0x5, 0xfffc, 0x200, 0x6}}})
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x42403)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104)
ioctl$NBD_SET_SOCK(r3, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0)

0s ago: executing program 4 (id=801):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mount$tmpfs(0x0, 0x0, 0x0, 0x4200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x40)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

kernel console output (not intermixed with test programs):

99.601947][ T6146]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.607166][ T6146]  ? __pfx__printk+0x10/0x10
[   99.611782][ T6146]  ? kmem_cache_alloc_noprof+0x44/0x2a0
[   99.617355][ T6146]  ? __pfx___might_resched+0x10/0x10
[   99.622691][ T6146]  should_fail_ex+0x3b0/0x4e0
[   99.627424][ T6146]  ? mas_alloc_nodes+0x26c/0x840
[   99.632408][ T6146]  should_failslab+0xac/0x100
[   99.637121][ T6146]  ? mas_alloc_nodes+0x26c/0x840
[   99.642088][ T6146]  kmem_cache_alloc_noprof+0x6c/0x2a0
[   99.647508][ T6146]  mas_alloc_nodes+0x26c/0x840
[   99.652312][ T6146]  mas_preallocate+0x554/0x8c0
[   99.657127][ T6146]  ? __pfx_mas_preallocate+0x10/0x10
[   99.662448][ T6146]  ? __mas_set_range+0x133/0x3c0
[   99.667407][ T6146]  vma_link+0x13e/0x500
[   99.671589][ T6146]  ? __pfx_up_write+0x10/0x10
[   99.676297][ T6146]  ? __pfx_vma_link+0x10/0x10
[   99.681042][ T6146]  ? anon_vma_clone+0x483/0x4e0
[   99.685960][ T6146]  ? hugetlb_vm_op_open+0x24d/0x560
[   99.691200][ T6146]  ? __pfx_hugetlb_vm_op_open+0x10/0x10
[   99.696774][ T6146]  copy_vma+0x9b0/0xc60
[   99.700965][ T6146]  ? __pfx_copy_vma+0x10/0x10
[   99.705703][ T6146]  move_vma+0x69f/0x1990
[   99.709978][ T6146]  ? __pfx_move_vma+0x10/0x10
[   99.714700][ T6146]  ? security_mmap_addr+0x6f/0x250
[   99.719848][ T6146]  ? __get_unmapped_area+0x3e1/0x450
[   99.725184][ T6146]  __se_sys_mremap+0xf39/0x1a00
[   99.730074][ T6146]  ? __pfx___se_sys_mremap+0x10/0x10
[   99.735387][ T6146]  ? __fget_files+0x2a/0x410
[   99.740001][ T6146]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   99.745996][ T6146]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[   99.752335][ T6146]  ? do_syscall_64+0x100/0x230
[   99.757128][ T6146]  ? __x64_sys_mremap+0x20/0xc0
[   99.761994][ T6146]  do_syscall_64+0xf3/0x230
[   99.766510][ T6146]  ? clear_bhb_loop+0x35/0x90
[   99.771199][ T6146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.777105][ T6146] RIP: 0033:0x7fafc757e819
[   99.781547][ T6146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.801171][ T6146] RSP: 002b:00007fafc82b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[   99.809624][ T6146] RAX: ffffffffffffffda RBX: 00007fafc7735fa0 RCX: 00007fafc757e819
[   99.817611][ T6146] RDX: 0000000000600000 RSI: 0000000000a00000 RDI: 0000000020000000
[   99.825594][ T6146] RBP: 00007fafc82b5090 R08: 0000000020a00000 R09: 0000000000000000
[   99.833580][ T6146] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002
[   99.841562][ T6146] R13: 0000000000000000 R14: 00007fafc7735fa0 R15: 00007fffb1d98568
[   99.849555][ T6146]  </TASK>
[   99.905155][ T6150] 9pnet_fd: Insufficient options for proto=fd
[   99.907732][ T5931] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   99.923321][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.945106][ T5931] usb 3-1: Product: syz
[   99.961199][ T5931] usb 3-1: Manufacturer: syz
[   99.980036][ T5931] usb 3-1: SerialNumber: syz
[  100.033585][ T5931] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  100.056337][ T5919] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  100.397182][ T6154] block device autoloading is deprecated and will be removed.
[  100.954993][ T5886] usb 3-1: USB disconnect, device number 3
[  101.823805][ T5919] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  101.831663][ T5919] ath9k_htc: Failed to initialize the device
[  101.846943][ T5886] usb 3-1: ath9k_htc: USB layer deinitialized
[  102.121774][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[  102.258667][ T6179] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.139217][ T6201] netlink: 52 bytes leftover after parsing attributes in process `syz.1.80'.
[  104.367887][ T6209] 9pnet_fd: Insufficient options for proto=fd
[  104.572748][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'.
[  104.698700][ T6206] syz.0.79: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  104.698991][ T6206] CPU: 1 UID: 0 PID: 6206 Comm: syz.0.79 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[  104.699020][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  104.699035][ T6206] Call Trace:
[  104.699045][ T6206]  <TASK>
[  104.699056][ T6206]  dump_stack_lvl+0x241/0x360
[  104.699093][ T6206]  ? __pfx_dump_stack_lvl+0x10/0x10
[  104.699121][ T6206]  ? __pfx__printk+0x10/0x10
[  104.699152][ T6206]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  104.699184][ T6206]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  104.699227][ T6206]  warn_alloc+0x278/0x410
[  104.699265][ T6206]  ? stack_depot_save_flags+0x6e4/0x830
[  104.699298][ T6206]  ? __vmalloc_node_range_noprof+0x106/0x13f0
[  104.699336][ T6206]  ? __pfx_warn_alloc+0x10/0x10
[  104.699374][ T6206]  ? kasan_save_track+0x3f/0x80
[  104.699397][ T6206]  ? __kasan_kmalloc+0x98/0xb0
[  104.699423][ T6206]  ? xsk_setsockopt+0x598/0x950
[  104.699456][ T6206]  ? do_sock_setsockopt+0x3af/0x720
[  104.699482][ T6206]  ? __x64_sys_setsockopt+0x1ee/0x280
[  104.699506][ T6206]  ? do_syscall_64+0xf3/0x230
[  104.699531][ T6206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.699567][ T6206]  __vmalloc_node_range_noprof+0x126/0x13f0
[  104.699635][ T6206]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  104.699677][ T6206]  ? __kasan_kmalloc+0x98/0xb0
[  104.699702][ T6206]  ? xskq_create+0x54/0x170
[  104.699741][ T6206]  vmalloc_user_noprof+0x74/0x80
[  104.699779][ T6206]  ? xskq_create+0xb6/0x170
[  104.699813][ T6206]  xskq_create+0xb6/0x170
[  104.699851][ T6206]  xsk_init_queue+0xa1/0x100
[  104.699890][ T6206]  xsk_setsockopt+0x598/0x950
[  104.699928][ T6206]  ? __pfx_xsk_setsockopt+0x10/0x10
[  104.699971][ T6206]  ? __pfx_lock_acquire+0x10/0x10
[  104.699996][ T6206]  ? __fget_files+0x2a/0x410
[  104.700030][ T6206]  ? __pfx_xsk_setsockopt+0x10/0x10
[  104.700063][ T6206]  do_sock_setsockopt+0x3af/0x720
[  104.700097][ T6206]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  104.700129][ T6206]  ? __fget_files+0x395/0x410
[  104.700158][ T6206]  ? __fget_files+0x2a/0x410
[  104.700199][ T6206]  __x64_sys_setsockopt+0x1ee/0x280
[  104.700246][ T6206]  do_syscall_64+0xf3/0x230
[  104.700272][ T6206]  ? clear_bhb_loop+0x35/0x90
[  104.700302][ T6206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.700326][ T6206] RIP: 0033:0x7ff20077e819
[  104.700349][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.700369][ T6206] RSP: 002b:00007ff201623038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  104.700396][ T6206] RAX: ffffffffffffffda RBX: 00007ff200936080 RCX: 00007ff20077e819
[  104.700414][ T6206] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  104.700430][ T6206] RBP: 00007ff2007f175e R08: 0000000000000020 R09: 0000000000000000
[  104.700447][ T6206] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
[  104.700463][ T6206] R13: 0000000000000000 R14: 00007ff200936080 R15: 00007fff4e49d448
[  104.700498][ T6206]  </TASK>
[  104.700509][ T6206] Mem-Info:
[  104.700529][ T6206] active_anon:342 inactive_anon:10096 isolated_anon:0
[  104.700529][ T6206]  active_file:4680 inactive_file:44476 isolated_file:0
[  104.700529][ T6206]  unevictable:768 dirty:159 writeback:0
[  104.700529][ T6206]  slab_reclaimable:9807 slab_unreclaimable:98325
[  104.700529][ T6206]  mapped:38584 shmem:7172 pagetables:821
[  104.700529][ T6206]  sec_pagetables:0 bounce:0
[  104.700529][ T6206]  kernel_misc_reclaimable:0
[  104.700529][ T6206]  free:1332832 free_pcp:506 free_cma:0
[  104.700590][ T6206] Node 0 active_anon:1368kB inactive_anon:40384kB active_file:18644kB inactive_file:177904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:154336kB dirty:632kB writeback:0kB shmem:27152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11252kB pagetables:3284kB sec_pagetables:0kB all_unreclaimable? no
[  104.700651][ T6206] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  104.700707][ T6206] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  104.700772][ T6206] lowmem_reserve[]: 0 2465 2466 0 0
[  104.700829][ T6206] Node 0 DMA32 free:1406200kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1364kB inactive_anon:40348kB active_file:17856kB inactive_file:177852kB unevictable:1536kB writepending:632kB present:3129332kB managed:2552508kB mlocked:0kB bounce:0kB free_pcp:2024kB local_pcp:1208kB free_cma:0kB
[  104.700896][ T6206] lowmem_reserve[]: 0 0 0 0 0
[  104.700951][ T6206] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:788kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  104.701012][ T6206] lowmem_reserve[]: 0 0 0 0 0
[  104.701067][ T6206] Node 1 Normal free:3909768kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  104.701131][ T6206] lowmem_reserve[]: 0 0 0 0 0
[  104.701186][ T6206] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  104.701393][ T6206] Node 0 DMA32: 634*4kB (UM) 564*8kB (UM) 471*16kB (UME) 137*32kB (UME) 189*64kB (UME) 52*128kB (UME) 25*256kB (UM) 14*512kB (UME) 7*1024kB (UME) 4*2048kB (ME) 327*4096kB (UM) = 1406040kB
[  104.701636][ T6206] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  104.701782][ T6206] Node 1 Normal: 180*4kB (UME) 49*8kB (UME) 45*16kB (UME) 179*32kB (UME) 80*64kB (UME) 30*128kB (UME) 12*256kB (UME) 10*512kB (UME) 6*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3909768kB
[  104.702022][ T6206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  104.702043][ T6206] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  104.702063][ T6206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  104.702083][ T6206] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  104.702102][ T6206] 56328 total pagecache pages
[  104.702120][ T6206] 0 pages in swap cache
[  104.702130][ T6206] Free swap  = 124996kB
[  104.702141][ T6206] Total swap = 124996kB
[  104.702152][ T6206] 2097051 pages RAM
[  104.702162][ T6206] 0 pages HighMem/MovableOnly
[  104.702172][ T6206] 427072 pages reserved
[  104.702182][ T6206] 0 pages cma reserved
[  104.755550][ T6206] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  105.098336][ T6222] warning: `syz.4.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  105.408487][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.441270][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.471880][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.499562][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.536451][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.646161][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.817527][ T6219] tty tty3: ldisc open failed (-12), clearing slot 2
[  111.465766][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  111.645959][ T5886] usb 3-1: Using ep0 maxpacket: 32
[  111.663308][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.686157][ T5886] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  111.698671][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.732360][ T5886] usb 3-1: Product: syz
[  111.745243][ T5886] usb 3-1: Manufacturer: syz
[  111.759824][ T5886] usb 3-1: SerialNumber: syz
[  111.791173][ T5886] usb 3-1: config 0 descriptor??
[  111.813319][ T5886] usb 3-1: bad CDC descriptors
[  111.823931][ T5886] usb 3-1: unsupported MDLM descriptors
[  112.028216][ T6282] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  112.058789][   T46] usb 3-1: USB disconnect, device number 4
[  114.082608][ T6325] netlink: 'syz.1.111': attribute type 29 has an invalid length.
[  114.150698][ T6325] netlink: 'syz.1.111': attribute type 29 has an invalid length.
[  114.373724][ T6329] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  114.410411][ T6329] macsec1: entered allmulticast mode
[  114.453655][ T6329] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  114.472851][ T6329] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  114.483028][ T6329] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  117.956102][ T6361] vcan0: entered allmulticast mode
[  118.217004][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.128'.
[  119.623263][ T6379] netlink: 44 bytes leftover after parsing attributes in process `syz.4.132'.
[  119.633318][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.132'.
[  119.652958][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.660960][ T6379] FAULT_INJECTION: forcing a failure.
[  119.660960][ T6379] name failslab, interval 1, probability 0, space 0, times 0
[  119.673861][ T6379] CPU: 0 UID: 0 PID: 6379 Comm: syz.4.132 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[  119.684141][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  119.694234][ T6379] Call Trace:
[  119.697542][ T6379]  <TASK>
[  119.700498][ T6379]  dump_stack_lvl+0x241/0x360
[  119.705218][ T6379]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.710453][ T6379]  ? __pfx__printk+0x10/0x10
[  119.715079][ T6379]  ? consume_skb+0xce/0xf0
[  119.719522][ T6379]  should_fail_ex+0x3b0/0x4e0
[  119.724225][ T6379]  ? switchdev_deferred_enqueue+0x44/0x260
[  119.730046][ T6379]  should_failslab+0xac/0x100
[  119.734740][ T6379]  ? switchdev_deferred_enqueue+0x44/0x260
[  119.740556][ T6379]  __kmalloc_noprof+0xd8/0x400
[  119.745341][ T6379]  ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10
[  119.752113][ T6379]  switchdev_deferred_enqueue+0x44/0x260
[  119.757754][ T6379]  ? switchdev_port_attr_set+0xdf/0x2e0
[  119.763310][ T6379]  switchdev_port_attr_set+0xf8/0x2e0
[  119.768721][ T6379]  ? __pfx_switchdev_port_attr_set+0x10/0x10
[  119.774742][ T6379]  ? __pfx_br_rtr_notify+0x10/0x10
[  119.779911][ T6379]  br_multicast_add_router+0x4e1/0x590
[  119.785413][ T6379]  ? __pfx_br_multicast_add_router+0x10/0x10
[  119.791431][ T6379]  ? __pfx___timer_delete+0x10/0x10
[  119.796684][ T6379]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  119.802703][ T6379]  ? br_port_state_selection+0x3a4/0x600
[  119.808377][ T6379]  ? br_multicast_set_port_router+0x161/0xcd0
[  119.814470][ T6379]  br_multicast_set_port_router+0x4e8/0xcd0
[  119.820405][ T6379]  ? __local_bh_enable_ip+0x168/0x200
[  119.825811][ T6379]  ? lockdep_hardirqs_on+0x99/0x150
[  119.831027][ T6379]  ? br_port_state_selection+0x3a4/0x600
[  119.836685][ T6379]  ? __pfx_br_multicast_set_port_router+0x10/0x10
[  119.843134][ T6379]  ? br_port_state_selection+0x3a4/0x600
[  119.848818][ T6379]  ? do_raw_spin_unlock+0x13c/0x8b0
[  119.854062][ T6379]  ? br_port_state_selection+0x57e/0x600
[  119.859730][ T6379]  br_setport+0xef9/0x16d0
[  119.864180][ T6379]  ? __pfx_br_setport+0x10/0x10
[  119.869051][ T6379]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  119.874476][ T6379]  br_port_slave_changelink+0x135/0x150
[  119.880127][ T6379]  rtnl_newlink+0x16a1/0x20a0
[  119.884856][ T6379]  ? __pfx_rtnl_newlink+0x10/0x10
[  119.889924][ T6379]  ? rcu_is_watching+0x15/0xb0
[  119.894706][ T6379]  ? trace_contention_end+0x3c/0x120
[  119.900015][ T6379]  ? __mutex_lock+0x37f/0xee0
[  119.904740][ T6379]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  119.909890][ T6379]  ? __pfx___mutex_lock+0x10/0x10
[  119.914954][ T6379]  ? __pfx_rtnl_newlink+0x10/0x10
[  119.920003][ T6379]  rtnetlink_rcv_msg+0x73f/0xcf0
[  119.924965][ T6379]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  119.930100][ T6379]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  119.935582][ T6379]  ? ref_tracker_free+0x643/0x7e0
[  119.940641][ T6379]  netlink_rcv_skb+0x1e3/0x430
[  119.945426][ T6379]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  119.951251][ T6379]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  119.956605][ T6379]  ? netlink_deliver_tap+0x2e/0x1b0
[  119.961816][ T6379]  netlink_unicast+0x7f6/0x990
[  119.966608][ T6379]  ? __pfx_netlink_unicast+0x10/0x10
[  119.971933][ T6379]  ? __virt_addr_valid+0x183/0x530
[  119.977060][ T6379]  ? __check_object_size+0x48e/0x900
[  119.982362][ T6379]  netlink_sendmsg+0x8e4/0xcb0
[  119.987148][ T6379]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.992460][ T6379]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.997764][ T6379]  __sock_sendmsg+0x221/0x270
[  120.002465][ T6379]  ____sys_sendmsg+0x52a/0x7e0
[  120.007256][ T6379]  ? __pfx_____sys_sendmsg+0x10/0x10
[  120.012556][ T6379]  ? __fget_files+0x2a/0x410
[  120.017167][ T6379]  ? __fget_files+0x2a/0x410
[  120.021779][ T6379]  __sys_sendmsg+0x269/0x350
[  120.026385][ T6379]  ? __pfx_lock_release+0x10/0x10
[  120.031428][ T6379]  ? __pfx___sys_sendmsg+0x10/0x10
[  120.036567][ T6379]  ? __pfx_vfs_write+0x10/0x10
[  120.041374][ T6379]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  120.047721][ T6379]  ? do_syscall_64+0x100/0x230
[  120.052508][ T6379]  ? do_syscall_64+0xb6/0x230
[  120.057391][ T6379]  do_syscall_64+0xf3/0x230
[  120.061936][ T6379]  ? clear_bhb_loop+0x35/0x90
[  120.066636][ T6379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.072540][ T6379] RIP: 0033:0x7fafc757e819
[  120.076965][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.096592][ T6379] RSP: 002b:00007fafc82b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.105037][ T6379] RAX: ffffffffffffffda RBX: 00007fafc7735fa0 RCX: 00007fafc757e819
[  120.113115][ T6379] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005
[  120.121102][ T6379] RBP: 00007fafc82b5090 R08: 0000000000000000 R09: 0000000000000000
[  120.129085][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  120.137065][ T6379] R13: 0000000000000000 R14: 00007fafc7735fa0 R15: 00007fffb1d98568
[  120.145063][ T6379]  </TASK>
[  120.179552][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.186797][ T6379] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.150940][ T6415] capability: warning: `syz.0.138' uses 32-bit capabilities (legacy support in use)
[  123.175859][ T5919] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  123.494413][ T5919] usb 1-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=83.b4
[  123.509780][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.520316][ T5919] usb 1-1: Product: syz
[  123.524538][ T5919] usb 1-1: Manufacturer: syz
[  123.658744][ T5919] usb 1-1: SerialNumber: syz
[  123.753062][ T5919] usb 1-1: config 0 descriptor??
[  123.790207][ T5919] gspca_main: spca500-2.14.0 probing 8086:0630
[  124.006012][ T5887] usb 1-1: USB disconnect, device number 3
[  124.547016][ T6442] 9pnet_fd: Insufficient options for proto=fd
[  125.730980][ T6461] netlink: 'syz.3.148': attribute type 1 has an invalid length.
[  125.750668][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'.
[  126.212360][ T6471] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  126.366700][ T5886] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  126.546488][ T5886] usb 1-1: device descriptor read/64, error -71
[  126.614485][   T46] libceph: connect (1)[c::]:6789 error -101
[  126.622382][ T6486] lo speed is unknown, defaulting to 1000
[  126.629547][ T6486] lo speed is unknown, defaulting to 1000
[  126.637695][ T6486] lo speed is unknown, defaulting to 1000
[  126.650755][   T46] libceph: mon0 (1)[c::]:6789 connect error
[  126.653373][ T6486] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  126.680341][ T6486] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  126.708721][   T46] libceph: connect (1)[c::]:6789 error -101
[  126.726633][   T46] libceph: mon0 (1)[c::]:6789 connect error
[  126.751923][ T6486] lo speed is unknown, defaulting to 1000
[  126.764048][ T6486] lo speed is unknown, defaulting to 1000
[  126.773877][ T6486] lo speed is unknown, defaulting to 1000
[  126.784117][ T6486] lo speed is unknown, defaulting to 1000
[  126.795799][ T5886] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  126.814825][ T6486] lo speed is unknown, defaulting to 1000
[  126.936032][ T5886] usb 1-1: device descriptor read/64, error -71
[  126.986256][ T6479] ceph: No mds server is up or the cluster is laggy
[  126.997553][   T46] libceph: connect (1)[c::]:6789 error -101
[  127.004592][   T46] libceph: mon0 (1)[c::]:6789 connect error
[  127.047972][ T5886] usb usb1-port1: attempt power cycle
[  127.949987][ T6496] Bluetooth: MGMT ver 1.23
[  128.238553][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  128.279249][ T5886] usb 1-1: device descriptor read/8, error -71
[  129.415234][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'.
[  130.485418][ T5884] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  130.607553][ T6524] FAULT_INJECTION: forcing a failure.
[  130.607553][ T6524] name failslab, interval 1, probability 0, space 0, times 0
[  130.620594][ T6524] CPU: 0 UID: 0 PID: 6524 Comm: syz.3.166 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[  130.630879][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  130.640980][ T6524] Call Trace:
[  130.644339][ T6524]  <TASK>
[  130.647312][ T6524]  dump_stack_lvl+0x241/0x360
[  130.652036][ T6524]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.657278][ T6524]  ? __pfx__printk+0x10/0x10
[  130.661925][ T6524]  should_fail_ex+0x3b0/0x4e0
[  130.666653][ T6524]  ? skb_clone+0x20c/0x390
[  130.671112][ T6524]  should_failslab+0xac/0x100
[  130.675840][ T6524]  ? skb_clone+0x20c/0x390
[  130.680304][ T6524]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  130.685731][ T6524]  skb_clone+0x20c/0x390
[  130.690016][ T6524]  ? dev_queue_xmit_nit+0x220/0xc10
[  130.695267][ T6524]  dev_queue_xmit_nit+0x419/0xc10
[  130.700358][ T6524]  ? dev_queue_xmit_nit+0x2b/0xc10
[  130.705526][ T6524]  ? validate_xmit_skb+0x977/0xf90
[  130.710692][ T6524]  dev_hard_start_xmit+0x15f/0x7e0
[  130.715848][ T6524]  ? __pfx_validate_xmit_skb+0x10/0x10
[  130.721355][ T6524]  __dev_queue_xmit+0x1b11/0x3ed0
[  130.726416][ T6524]  ? kasan_save_track+0x51/0x80
[  130.731302][ T6524]  ? do_syscall_64+0xf3/0x230
[  130.736004][ T6524]  ? __dev_queue_xmit+0x2da/0x3ed0
[  130.741140][ T6524]  ? __pfx___dev_queue_xmit+0x10/0x10
[  130.746546][ T6524]  ? __copy_skb_header+0x437/0x5b0
[  130.751672][ T6524]  ? __asan_memcpy+0x40/0x70
[  130.756282][ T6524]  ? __copy_skb_header+0x437/0x5b0
[  130.761410][ T6524]  ? __skb_clone+0x454/0x6c0
[  130.766018][ T6524]  ? skb_clone+0x240/0x390
[  130.770452][ T6524]  __netlink_deliver_tap+0x54d/0x7c0
[  130.775760][ T6524]  ? netlink_deliver_tap+0x2e/0x1b0
[  130.780966][ T6524]  netlink_deliver_tap+0x19d/0x1b0
[  130.786087][ T6524]  netlink_unicast+0x7c4/0x990
[  130.790882][ T6524]  ? __pfx_netlink_unicast+0x10/0x10
[  130.796184][ T6524]  ? __virt_addr_valid+0x183/0x530
[  130.801312][ T6524]  ? __check_object_size+0x48e/0x900
[  130.806619][ T6524]  netlink_sendmsg+0x8e4/0xcb0
[  130.811413][ T6524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.816721][ T6524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  130.822019][ T6524]  __sock_sendmsg+0x221/0x270
[  130.826717][ T6524]  ____sys_sendmsg+0x52a/0x7e0
[  130.831502][ T6524]  ? __pfx_____sys_sendmsg+0x10/0x10
[  130.836802][ T6524]  ? __fget_files+0x2a/0x410
[  130.841411][ T6524]  ? __fget_files+0x2a/0x410
[  130.846043][ T6524]  __sys_sendmsg+0x269/0x350
[  130.850680][ T6524]  ? __pfx_lock_release+0x10/0x10
[  130.855736][ T6524]  ? __pfx___sys_sendmsg+0x10/0x10
[  130.860873][ T6524]  ? __pfx_vfs_write+0x10/0x10
[  130.865686][ T6524]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  130.872026][ T6524]  ? do_syscall_64+0x100/0x230
[  130.876809][ T6524]  ? do_syscall_64+0xb6/0x230
[  130.881502][ T6524]  do_syscall_64+0xf3/0x230
[  130.886020][ T6524]  ? clear_bhb_loop+0x35/0x90
[  130.890715][ T6524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.896622][ T6524] RIP: 0033:0x7f483217e819
[  130.901050][ T6524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  130.920665][ T6524] RSP: 002b:00007f4832fc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  130.929100][ T6524] RAX: ffffffffffffffda RBX: 00007f4832335fa0 RCX: 00007f483217e819
[  130.937170][ T6524] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000c
[  130.945153][ T6524] RBP: 00007f4832fc2090 R08: 0000000000000000 R09: 0000000000000000
[  130.953138][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  130.961124][ T6524] R13: 0000000000000000 R14: 00007f4832335fa0 R15: 00007ffe6c63fed8
[  130.969122][ T6524]  </TASK>
[  130.993330][ T6524] vlan2: entered promiscuous mode
[  131.013812][ T5884] usb 3-1: device descriptor read/64, error -71
[  131.021379][ T6524] team_slave_0: entered promiscuous mode
[  131.027490][ T6524] team_slave_1: entered promiscuous mode
[  131.057806][ T6524] team0: entered promiscuous mode
[  131.101339][ T6524] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  131.263112][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  131.276907][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  131.285572][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.345759][ T5884] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  131.383012][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.403843][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  131.421949][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.495756][ T5884] usb 3-1: device descriptor read/64, error -71
[  131.620949][ T5884] usb usb3-port1: attempt power cycle
[  132.020398][ T3483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.502885][ T3483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.585730][ T5884] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  132.630354][ T6530] lo speed is unknown, defaulting to 1000
[  132.805713][ T5884] usb 3-1: device not accepting address 7, error -71
[  132.955380][ T3483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.130889][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  133.139244][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  133.605993][ T5144] Bluetooth: hci5: command tx timeout
[  133.630105][ T3483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.930893][ T3483] bridge_slave_1: left allmulticast mode
[  133.930998][ T3483] bridge_slave_1: left promiscuous mode
[  133.932371][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.998954][ T3483] bridge_slave_0: left allmulticast mode
[  133.998985][ T3483] bridge_slave_0: left promiscuous mode
[  133.999211][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.459292][ T6573] 9pnet_fd: Insufficient options for proto=fd
[  135.686466][ T5144] Bluetooth: hci5: command tx timeout
[  135.772814][ T5884] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  135.946089][ T5884] usb 5-1: Using ep0 maxpacket: 8
[  135.953181][ T5884] usb 5-1: config 1 has an invalid interface number: 6 but max is 0
[  135.968557][ T5884] usb 5-1: config 1 has no interface number 0
[  136.000225][ T5884] usb 5-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b
[  136.010949][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'.
[  136.021065][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.041221][ T5884] usb 5-1: Product: syz
[  136.066953][ T5884] usb 5-1: Manufacturer: syz
[  136.071860][ T5884] usb 5-1: SerialNumber: syz
[  136.202725][ T3483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.221694][ T3483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.248616][ T3483] bond0 (unregistering): Released all slaves
[  136.267382][ T6530] chnl_net:caif_netlink_parms(): no params data found
[  137.112237][ T6610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'.
[  137.812320][ T5144] Bluetooth: hci5: command tx timeout
[  137.923387][ T5884] usb 5-1: palm_os_4_probe - error -71 getting connection info
[  137.934577][ T6601] FAULT_INJECTION: forcing a failure.
[  137.934577][ T6601] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  137.957767][ T5884] visor 5-1:1.6: Handspring Visor / Palm OS converter detected
[  137.974024][ T6601] CPU: 0 UID: 0 PID: 6601 Comm: syz.3.184 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[  137.984324][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  137.994410][ T6601] Call Trace:
[  137.997720][ T6601]  <TASK>
[  138.000681][ T6601]  dump_stack_lvl+0x241/0x360
[  138.005401][ T6601]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.010641][ T6601]  ? __pfx__printk+0x10/0x10
[  138.015282][ T6601]  ? __pfx_lock_release+0x10/0x10
[  138.020354][ T6601]  should_fail_ex+0x3b0/0x4e0
[  138.025112][ T6601]  _copy_from_user+0x2f/0xc0
[  138.029742][ T6601]  br_ioctl_stub+0x184/0xb00
[  138.034378][ T6601]  ? sock_ioctl+0x5c3/0x8e0
[  138.038925][ T6601]  ? __pfx_br_ioctl_stub+0x10/0x10
[  138.044070][ T6601]  ? __pfx___mutex_lock+0x10/0x10
[  138.049144][ T6601]  ? __asan_memset+0x23/0x50
[  138.053783][ T6601]  ? smack_file_ioctl+0x29e/0x3a0
[  138.058851][ T6601]  ? __pfx_br_ioctl_stub+0x10/0x10
[  138.064004][ T6601]  sock_ioctl+0x5eb/0x8e0
[  138.068384][ T6601]  ? __pfx_sock_ioctl+0x10/0x10
[  138.073281][ T6601]  ? __fget_files+0x2a/0x410
[  138.077913][ T6601]  ? __fget_files+0x2a/0x410
[  138.082547][ T6601]  ? __pfx_sock_ioctl+0x10/0x10
[  138.087441][ T6601]  __se_sys_ioctl+0xf5/0x170
[  138.092099][ T6601]  do_syscall_64+0xf3/0x230
[  138.096641][ T6601]  ? clear_bhb_loop+0x35/0x90
[  138.101355][ T6601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.107283][ T6601] RIP: 0033:0x7f483217e819
[  138.111732][ T6601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.131379][ T6601] RSP: 002b:00007f4832fc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  138.139838][ T6601] RAX: ffffffffffffffda RBX: 00007f4832335fa0 RCX: 00007f483217e819
[  138.147889][ T6601] RDX: 0000000020000200 RSI: 00000000000089a0 RDI: 0000000000000003
[  138.155899][ T6601] RBP: 00007f4832fc2090 R08: 0000000000000000 R09: 0000000000000000
[  138.163926][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.171940][ T6601] R13: 0000000000000000 R14: 00007f4832335fa0 R15: 00007ffe6c63fed8
[  138.179973][ T6601]  </TASK>
[  138.963787][ T5884] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  138.984682][ T5884] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  139.028305][ T5884] usb 5-1: USB disconnect, device number 4
[  139.043577][ T5884] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  139.096458][ T5884] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  139.192594][ T5884] visor 5-1:1.6: device disconnected
[  139.845928][ T5144] Bluetooth: hci5: command tx timeout
[  140.152046][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.178601][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.200621][ T6530] bridge_slave_0: entered allmulticast mode
[  140.216824][ T6530] bridge_slave_0: entered promiscuous mode
[  140.229802][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.241520][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.256167][ T6530] bridge_slave_1: entered allmulticast mode
[  140.273165][ T6530] bridge_slave_1: entered promiscuous mode
[  140.374158][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.401044][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.427457][ T5884] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  140.448259][ T3483] hsr_slave_0: left promiscuous mode
[  140.462957][ T3483] hsr_slave_1: left promiscuous mode
[  140.472350][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.488898][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.526021][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.533934][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.562768][ T3483] veth1_macvtap: left promiscuous mode
[  140.570110][ T3483] veth0_macvtap: left promiscuous mode
[  140.578816][ T5884] usb 5-1: device descriptor read/64, error -71
[  140.587013][ T3483] veth1_vlan: left promiscuous mode
[  140.595481][ T3483] veth0_vlan: left promiscuous mode
[  141.376491][ T5884] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  141.842490][ T5884] usb 5-1: device descriptor read/64, error -71
[  141.975675][ T5884] usb usb5-port1: attempt power cycle
[  142.356152][ T5884] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  142.740589][ T5884] usb 5-1: device descriptor read/8, error -71
[  142.954693][ T6664] syz.2.198 (6664): /proc/6659/oom_adj is deprecated, please use /proc/6659/oom_score_adj instead.
[  144.466566][ T3483] team0 (unregistering): Port device team_slave_1 removed
[  144.536842][ T3483] team0 (unregistering): Port device team_slave_0 removed
[  145.615895][   T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  145.754307][ T6530] team0: Port device team_slave_0 added
[  145.762965][ T6530] team0: Port device team_slave_1 added
[  145.788791][ T6668] lo speed is unknown, defaulting to 1000
[  145.797071][   T46] usb 3-1: Using ep0 maxpacket: 8
[  145.818063][   T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  145.830891][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.833093][   T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  145.840531][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.870575][   T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  145.894934][   T46] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  145.912387][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.916897][   T46] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  145.942301][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.992335][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.013178][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.040728][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.184152][ T6704] Invalid logical block size (1536)
[  146.214651][   T46] usb 3-1: GET_CAPABILITIES returned 0
[  146.220391][   T46] usbtmc 3-1:16.0: can't read capabilities
[  146.599511][ T6530] hsr_slave_0: entered promiscuous mode
[  146.644860][ T6530] hsr_slave_1: entered promiscuous mode
[  146.665127][ T6530] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.666835][   T46] usb 3-1: USB disconnect, device number 9
[  146.701393][ T6530] Cannot create hsr debugfs directory
[  147.927606][ T6727] dlm: no local IP address has been set
[  147.933668][ T6727] dlm: cannot start dlm midcomms -107
[  149.164878][ T6733] netlink: 'syz.4.213': attribute type 7 has an invalid length.
[  149.478627][ T6530] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  149.532494][ T6530] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  149.652285][ T6530] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  149.719041][ T6530] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  150.101224][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.182274][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'.
[  150.218385][ T6746] erspan0: entered promiscuous mode
[  150.224215][ T6746] macvtap1: entered promiscuous mode
[  150.235128][ T6746] macvtap1: entered allmulticast mode
[  150.241268][ T6746] erspan0: entered allmulticast mode
[  150.262348][ T6753] netlink: 44 bytes leftover after parsing attributes in process `syz.4.216'.
[  150.264300][ T6530] 8021q: adding VLAN 0 to HW filter on device team0
[  150.308176][ T6752] erspan0: left allmulticast mode
[  150.313573][ T6752] erspan0: left promiscuous mode
[  150.411132][ T6749] lo speed is unknown, defaulting to 1000
[  150.412569][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.424205][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.461097][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.469424][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.785242][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.871214][ T6811] lo speed is unknown, defaulting to 1000
[  155.147922][ T6530] veth0_vlan: entered promiscuous mode
[  155.313239][ T6530] veth1_vlan: entered promiscuous mode
[  155.321746][ T6827] netlink: 44 bytes leftover after parsing attributes in process `syz.2.227'.
[  155.338396][ T5884] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  155.416717][ T5887] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  155.449102][ T6530] veth0_macvtap: entered promiscuous mode
[  155.463928][ T6530] veth1_macvtap: entered promiscuous mode
[  155.520230][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.538193][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.552830][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.563830][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.574899][ T5884] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00
[  155.584368][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.596383][ T5887] usb 5-1: Using ep0 maxpacket: 32
[  155.601705][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.609656][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.613640][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short
[  155.627407][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.627440][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.627453][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.627469][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.629091][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.668411][ T5884] usb 4-1: config 0 descriptor??
[  155.690426][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  156.060845][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.066249][ T5887] usb 5-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe
[  156.108270][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.151062][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.305359][ T5887] usb 5-1: Product: syz
[  156.318729][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.339445][ T5887] usb 5-1: Manufacturer: syz
[  156.357353][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.359520][ T5887] usb 5-1: SerialNumber: syz
[  156.388088][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.409339][ T5887] usb 5-1: config 0 descriptor??
[  156.425182][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.443886][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.490177][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.503571][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.579779][ T6530] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.580639][ T6822] Invalid source name
[  156.599335][ T6530] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.620456][ T6822] UBIFS error (pid: 6822): cannot open "/dev/iommu", error -22
[  156.639574][ T5887] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6
[  156.644235][ T6530] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.668818][ T5884] wacom 0003:056A:0315.0002: Unknown device_type for 'HID 056a:0315'. Assuming pen.
[  156.676668][ T6530] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.713804][ T5884] wacom 0003:056A:0315.0002: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.3-1/input0
[  156.747393][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'.
[  156.765996][ T6843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'.
[  156.788026][ T5884] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0315.0002/input/input7
[  156.857133][ T6843] vlan2: entered allmulticast mode
[  157.227435][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.235374][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.304436][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.383973][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.529011][ T5884] usb 5-1: USB disconnect, device number 9
[  158.231480][ T5884] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  158.713026][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'.
[  158.786313][ T5884] usb 6-1: Using ep0 maxpacket: 16
[  158.795531][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  158.818969][ T5884] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  158.834911][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.867371][ T5884] usb 6-1: Product: syz
[  158.883008][ T5884] usb 6-1: Manufacturer: syz
[  158.925810][ T5884] usb 6-1: SerialNumber: syz
[  158.993648][ T5884] usb 6-1: config 0 descriptor??
[  159.034141][ T5884] hub 6-1:0.0: bad descriptor, ignoring hub
[  159.040440][ T5884] hub 6-1:0.0: probe with driver hub failed with error -5
[  159.050423][ T5884] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input10
[  159.383423][ T6891] fuse: Bad value for 'fd'
[  160.181971][ T6865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.332170][ T6865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.890137][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.920515][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.931488][ T5887] usb 4-1: USB disconnect, device number 3
[  160.953753][ T5931] usb 6-1: USB disconnect, device number 2
[  161.264686][ T6899] lo speed is unknown, defaulting to 1000
[  162.838148][ T6911] ip6gre1: entered allmulticast mode
[  163.720115][ T6924] netlink: 44 bytes leftover after parsing attributes in process `syz.3.245'.
[  164.059624][ T6927] IPVS: Error joining to the multicast group
[  164.513785][ T6942] netlink: 72 bytes leftover after parsing attributes in process `syz.5.247'.
[  164.595731][ T5887] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  164.757416][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  164.767668][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  164.795736][ T5884] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  164.806950][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 50106, setting to 1024
[  164.832441][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[  164.841187][ T6956] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  164.857069][ T5887] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  164.870908][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.921373][ T5887] usb 4-1: config 0 descriptor??
[  164.943174][ T6934] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  165.131016][ T5884] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  165.140254][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.155871][ T5884] usb 5-1: Product: syz
[  165.160140][ T5884] usb 5-1: Manufacturer: syz
[  165.164811][ T5884] usb 5-1: SerialNumber: syz
[  165.178878][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.200498][ T5884] usb 5-1: config 0 descriptor??
[  165.221337][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.261210][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.300097][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.576253][ T5884] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  166.058968][ T5884] usb 5-1: USB disconnect, device number 10
[  166.225833][ T5887] hdpvr 4-1:0.0: unexpected answer of status request, len -71
[  166.233773][ T5887] hdpvr 4-1:0.0: device init failed
[  166.239451][ T5887] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  166.291392][ T5887] usb 4-1: USB disconnect, device number 4
[  166.548608][ T6988] ip6gre1: entered allmulticast mode
[  166.656055][ T5884] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  166.839572][ T6992] netlink: 44 bytes leftover after parsing attributes in process `syz.5.256'.
[  166.856464][ T5884] usb 5-1: Using ep0 maxpacket: 16
[  166.884502][ T5884] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  166.915238][ T6997] fuse: Unknown parameter '0000000000000000000000000000000000000000'
[  166.925955][ T6996] fuse: Unknown parameter '0000000000000000000000000000000000000000'
[  166.936104][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.944172][ T5884] usb 5-1: Product: syz
[  166.953454][ T5884] usb 5-1: Manufacturer: syz
[  166.962094][ T5884] usb 5-1: SerialNumber: syz
[  167.197444][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  167.586330][    T9] usb 4-1: Using ep0 maxpacket: 8
[  167.609160][ T5884] usb 5-1: config 0 descriptor??
[  167.661215][    T9] usb 4-1: config index 0 descriptor too short (expected 16402, got 18)
[  167.715843][    T9] usb 4-1: config 0 has an invalid interface number: 224 but max is 0
[  167.756528][    T9] usb 4-1: config 0 has no interface number 0
[  167.769190][ T5884] usb 5-1: can't set config #0, error -71
[  167.785719][    T9] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e
[  167.810341][ T5884] usb 5-1: USB disconnect, device number 11
[  167.855811][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.888023][    T9] usb 4-1: config 0 descriptor??
[  168.181908][ T5837] usb 4-1: USB disconnect, device number 5
[  169.219572][ T5919] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  169.426239][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.463636][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  169.536831][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  169.713259][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  169.814400][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  169.877691][ T5919] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  169.903040][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  170.079823][ T5919] usb 6-1: Product: syz
[  170.086813][ T5919] usb 6-1: Manufacturer: syz
[  171.057939][ T5919] usb 6-1: SerialNumber: syz
[  171.116662][ T5919] usb 6-1: config 0 descriptor??
[  171.182536][ T5919] usb 6-1: can't set config #0, error -71
[  171.476312][ T5919] usb 6-1: USB disconnect, device number 3
[  172.302812][ T7052] ip6gre1: entered allmulticast mode
[  176.018021][ T7096] netlink: 'syz.5.279': attribute type 1 has an invalid length.
[  176.059877][ T7096] netlink: 3 bytes leftover after parsing attributes in process `syz.5.279'.
[  176.079928][ T7096] batadv1: entered promiscuous mode
[  176.085244][ T7096] batadv1: entered allmulticast mode
[  176.140413][ T7076] lo speed is unknown, defaulting to 1000
[  176.146050][ T7099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.279'.
[  176.285700][ T5887] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  176.616336][ T5887] usb 1-1: device descriptor read/64, error -71
[  176.927773][ T5887] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  177.004133][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.282'.
[  177.295932][ T5887] usb 1-1: device descriptor read/64, error -71
[  177.348145][ T7112] netlink: 48 bytes leftover after parsing attributes in process `syz.5.282'.
[  177.456147][ T5887] usb usb1-port1: attempt power cycle
[  177.533935][ T7112] netlink: 'syz.5.282': attribute type 4 has an invalid length.
[  177.713451][ T7113] ip6t_srh: unknown srh invflags 4000
[  178.061363][ T5887] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  178.145708][ T5887] usb 1-1: device descriptor read/8, error -71
[  178.332411][ T7129] ip6gre1: entered allmulticast mode
[  178.464199][ T5887] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  179.795433][ T5887] usb 1-1: device descriptor read/8, error -71
[  179.909306][ T5887] usb usb1-port1: unable to enumerate USB device
[  184.100015][ T7150] lo speed is unknown, defaulting to 1000
[  185.218183][ T7153] syz.5.294 (7153) used greatest stack depth: 16632 bytes left
[  185.725909][ T5884] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  186.497006][ T5884] usb 5-1: Using ep0 maxpacket: 32
[  186.844369][ T5144] Bluetooth: hci2: command tx timeout
[  187.137579][ T7210] tipc: Started in network mode
[  187.142813][ T7210] tipc: Node identity aaaaaaaaaa34, cluster identity 4711
[  187.151759][ T7210] tipc: Enabled bearer <eth:macvlan0>, priority 0
[  187.193331][ T5884] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33374, setting to 64
[  187.204470][ T5884] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  187.213751][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.254123][ T5884] hub 5-1:4.0: bad descriptor, ignoring hub
[  187.260521][ T5884] hub 5-1:4.0: probe with driver hub failed with error -5
[  187.268120][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'.
[  187.268155][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'.
[  187.289416][ T5884] usbhid 5-1:4.0: couldn't find an input interrupt endpoint
[  187.547306][ T5885] usb 5-1: USB disconnect, device number 12
[  188.316187][ T5909] tipc: Node number set to 10398378
[  189.010491][ T5887] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  189.795764][ T5887] usb 3-1: Using ep0 maxpacket: 16
[  189.815761][ T5909] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  190.044393][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.644737][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  190.650281][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.657113][ T5887] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  190.673507][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.681707][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.681764][ T5909] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  190.681863][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.694724][ T5887] usb 3-1: Product: syz
[  190.694749][ T5887] usb 3-1: Manufacturer: syz
[  190.694777][ T5887] usb 3-1: SerialNumber: syz
[  191.586069][ T5909] usb 4-1: config 0 descriptor??
[  191.624680][ T5909] usb 4-1: can't set config #0, error -71
[  191.645245][ T5909] usb 4-1: USB disconnect, device number 6
[  191.663842][ T5887] usb 3-1: config 0 descriptor??
[  192.528807][ T5887] usb 3-1: can't set config #0, error -71
[  192.536161][ T5887] usb 3-1: USB disconnect, device number 10
[  195.122166][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  195.129014][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  195.975489][ T5887] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  197.765085][ T5851] Bluetooth: hci2: command 0x0406 tx timeout
[  197.771899][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  197.869932][ T5887] usb 4-1: Using ep0 maxpacket: 32
[  197.890445][ T7314] netlink: 176 bytes leftover after parsing attributes in process `syz.4.326'.
[  198.499804][ T5887] usb 4-1: device descriptor read/all, error -71
[  199.755928][ T5887] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  199.770808][ T7342] dvmrp0: entered allmulticast mode
[  199.925804][ T5887] usb 4-1: Using ep0 maxpacket: 16
[  199.933798][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  199.948116][ T5887] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  199.975676][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.983752][ T5887] usb 4-1: Product: syz
[  200.015050][ T5887] usb 4-1: Manufacturer: syz
[  200.037109][ T7351] bridge_slave_1: left allmulticast mode
[  200.043435][ T5887] usb 4-1: SerialNumber: syz
[  200.067585][ T5887] usb 4-1: config 0 descriptor??
[  200.072956][ T7351] bridge_slave_1: left promiscuous mode
[  200.099236][ T5887] hub 4-1:0.0: bad descriptor, ignoring hub
[  200.116471][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.140452][ T5887] hub 4-1:0.0: probe with driver hub failed with error -5
[  200.200457][ T7355] netlink: 68 bytes leftover after parsing attributes in process `syz.4.332'.
[  200.216271][ T5887] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11
[  200.540077][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.332'.
[  201.136659][ T5887] usb 4-1: USB disconnect, device number 8
[  202.191488][ T5851] Bluetooth: hci3: command 0x0406 tx timeout
[  202.197978][ T5851] Bluetooth: hci4: command 0x0406 tx timeout
[  202.715744][ T5885] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  202.970801][ T5885] usb 5-1: Using ep0 maxpacket: 32
[  203.218366][ T5885] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33374, setting to 64
[  203.387642][ T5885] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  203.440906][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.504659][ T5885] hub 5-1:4.0: bad descriptor, ignoring hub
[  203.568123][ T5885] hub 5-1:4.0: probe with driver hub failed with error -5
[  203.622073][ T5885] usbhid 5-1:4.0: couldn't find an input interrupt endpoint
[  203.746738][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'.
[  203.916159][ T5887] usb 5-1: USB disconnect, device number 13
[  205.974533][ T7428] =======================================================
[  205.974533][ T7428] WARNING: The mand mount option has been deprecated and
[  205.974533][ T7428]          and is ignored by this kernel. Remove the mand
[  205.974533][ T7428]          option from the mount to silence this warning.
[  205.974533][ T7428] =======================================================
[  208.936854][ T7462] 9pnet_fd: p9_fd_create_unix (7462): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  209.147028][ T7468] sctp: [Deprecated]: syz.0.358 (pid 7468) Use of struct sctp_assoc_value in delayed_ack socket option.
[  209.147028][ T7468] Use struct sctp_sack_info instead
[  216.822908][ T7544] netlink: 'syz.5.373': attribute type 21 has an invalid length.
[  216.827681][ T7541] FAULT_INJECTION: forcing a failure.
[  216.827681][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.859061][ T7541] CPU: 1 UID: 0 PID: 7541 Comm: syz.2.372 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[  216.869823][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  216.879893][ T7541] Call Trace:
[  216.883180][ T7541]  <TASK>
[  216.886120][ T7541]  dump_stack_lvl+0x241/0x360
[  216.890858][ T7541]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.896068][ T7541]  ? __pfx__printk+0x10/0x10
[  216.900674][ T7541]  ? snprintf+0xda/0x120
[  216.904949][ T7541]  should_fail_ex+0x3b0/0x4e0
[  216.909648][ T7541]  _copy_to_user+0x31/0xb0
[  216.914085][ T7541]  simple_read_from_buffer+0xca/0x150
[  216.919498][ T7541]  proc_fail_nth_read+0x1e9/0x250
[  216.924559][ T7541]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  216.930144][ T7541]  ? rw_verify_area+0x55e/0x6f0
[  216.935049][ T7541]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  216.940625][ T7541]  vfs_read+0x1fc/0xb70
[  216.944818][ T7541]  ? __pfx___mutex_lock+0x10/0x10
[  216.949871][ T7541]  ? __pfx_vfs_read+0x10/0x10
[  216.954615][ T7541]  ? __fget_files+0x2a/0x410
[  216.959230][ T7541]  ? __fget_files+0x395/0x410
[  216.964038][ T7541]  ? __fget_files+0x2a/0x410
[  216.968670][ T7541]  ksys_read+0x18f/0x2b0
[  216.972945][ T7541]  ? __pfx_ksys_read+0x10/0x10
[  216.977744][ T7541]  ? do_syscall_64+0x100/0x230
[  216.982528][ T7541]  ? do_syscall_64+0xb6/0x230
[  216.987217][ T7541]  do_syscall_64+0xf3/0x230
[  216.991734][ T7541]  ? clear_bhb_loop+0x35/0x90
[  216.996440][ T7541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.002342][ T7541] RIP: 0033:0x7f0e3737d25c
[  217.006790][ T7541] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  217.026404][ T7541] RSP: 002b:00007f0e38189030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  217.034826][ T7541] RAX: ffffffffffffffda RBX: 00007f0e37535fa0 RCX: 00007f0e3737d25c
[  217.042807][ T7541] RDX: 000000000000000f RSI: 00007f0e381890a0 RDI: 0000000000000004
[  217.050786][ T7541] RBP: 00007f0e38189090 R08: 0000000000000000 R09: 0000000000000000
[  217.058768][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  217.066838][ T7541] R13: 0000000000000000 R14: 00007f0e37535fa0 R15: 00007ffe783ccaf8
[  217.074838][ T7541]  </TASK>
[  219.627322][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.383'.
[  221.491616][ T7608] overlayfs: workdir and upperdir must be separate subtrees
[  221.959136][ T7612] netlink: 9412 bytes leftover after parsing attributes in process `syz.5.392'.
[  224.927783][ T7644] FAULT_INJECTION: forcing a failure.
[  224.927783][ T7644] name failslab, interval 1, probability 0, space 0, times 0
[  224.940699][ T7644] CPU: 0 UID: 0 PID: 7644 Comm: syz.4.399 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[  224.950979][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  224.961044][ T7644] Call Trace:
[  224.964325][ T7644]  <TASK>
[  224.967283][ T7644]  dump_stack_lvl+0x241/0x360
[  224.971979][ T7644]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.977187][ T7644]  ? __pfx__printk+0x10/0x10
[  224.981783][ T7644]  ? fs_reclaim_acquire+0x93/0x130
[  224.986914][ T7644]  ? __pfx___might_resched+0x10/0x10
[  224.992214][ T7644]  should_fail_ex+0x3b0/0x4e0
[  224.996934][ T7644]  ? tomoyo_encode+0x26f/0x540
[  224.997764][ T7641] 9pnet_fd: Insufficient options for proto=fd
[  225.001726][ T7644]  should_failslab+0xac/0x100
[  225.012558][ T7644]  ? tomoyo_encode+0x26f/0x540
[  225.017377][ T7644]  __kmalloc_noprof+0xd8/0x400
[  225.022204][ T7644]  tomoyo_encode+0x26f/0x540
[  225.026832][ T7644]  tomoyo_realpath_from_path+0x59e/0x5e0
[  225.032501][ T7644]  tomoyo_path_number_perm+0x236/0x860
[  225.037989][ T7644]  ? __lock_acquire+0x1397/0x2100
[  225.043060][ T7644]  ? tomoyo_path_number_perm+0x206/0x860
[  225.048782][ T7644]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  225.054858][ T7644]  ? __fget_files+0x2a/0x410
[  225.059519][ T7644]  ? __fget_files+0x2a/0x410
[  225.064176][ T7644]  security_file_ioctl+0xc6/0x2a0
[  225.069256][ T7644]  __se_sys_ioctl+0x46/0x170
[  225.073891][ T7644]  do_syscall_64+0xf3/0x230
[  225.078421][ T7644]  ? clear_bhb_loop+0x35/0x90
[  225.083124][ T7644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.089032][ T7644] RIP: 0033:0x7fafc757e819
[  225.093453][ T7644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.113091][ T7644] RSP: 002b:00007fafc8294038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  225.121532][ T7644] RAX: ffffffffffffffda RBX: 00007fafc7736080 RCX: 00007fafc757e819
[  225.129525][ T7644] RDX: 0000000020000000 RSI: 00000000802c550a RDI: 0000000000000004
[  225.137526][ T7644] RBP: 00007fafc8294090 R08: 0000000000000000 R09: 0000000000000000
[  225.145505][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.153868][ T7644] R13: 0000000000000000 R14: 00007fafc7736080 R15: 00007fffb1d98568
[  225.161890][ T7644]  </TASK>
[  225.167774][ T7644] ERROR: Out of memory at tomoyo_realpath_from_path.
[  225.179629][ T7644] usb usb7: usbfs: process 7644 (syz.4.399) did not claim interface 7 before use
[  226.195719][ T5837] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  226.365852][ T5837] usb 6-1: Using ep0 maxpacket: 16
[  226.630228][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.642061][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.652516][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  226.666389][ T5837] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  226.675735][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.722277][ T5837] usb 6-1: config 0 descriptor??
[  228.343173][ T5837] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[  229.242852][ T5837] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0003/input/input12
[  229.365386][ T5837] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  230.203578][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  230.233185][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  230.241909][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  230.264417][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  230.276027][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  230.283746][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  230.487791][   T46] usb 6-1: reset high-speed USB device number 4 using dummy_hcd
[  230.952450][ T7708] lo speed is unknown, defaulting to 1000
[  232.492651][ T5884] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  232.508232][ T5144] Bluetooth: hci0: command tx timeout
[  232.711637][ T7708] chnl_net:caif_netlink_parms(): no params data found
[  232.825713][ T5884] usb 3-1: Using ep0 maxpacket: 16
[  232.840237][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  232.860813][ T5884] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  232.870430][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.917196][ T5884] usb 3-1: Product: syz
[  232.937810][ T5884] usb 3-1: Manufacturer: syz
[  232.943387][ T5884] usb 3-1: SerialNumber: syz
[  232.966942][ T5884] usb 3-1: config 0 descriptor??
[  232.985451][ T5884] hub 3-1:0.0: bad descriptor, ignoring hub
[  233.163680][ T5884] hub 3-1:0.0: probe with driver hub failed with error -5
[  233.174164][ T5884] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13
[  233.188346][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.198494][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.214832][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.223795][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.230126][ T5837] usb 6-1: USB disconnect, device number 4
[  234.296522][ T5884] usb 3-1: USB disconnect, device number 11
[  234.328446][   T29] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.463183][ T7708] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.480779][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.501738][ T7708] bridge_slave_0: entered allmulticast mode
[  234.524580][ T7708] bridge_slave_0: entered promiscuous mode
[  234.566278][ T5144] Bluetooth: hci0: command tx timeout
[  234.728965][   T29] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.747468][   T29] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.952019][   T29] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.117393][ T7708] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.124574][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.131974][ T7708] bridge_slave_1: entered allmulticast mode
[  236.139401][ T7708] bridge_slave_1: entered promiscuous mode
[  236.240150][ T7708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.318406][ T7708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.645869][ T5144] Bluetooth: hci0: command tx timeout
[  236.655784][ T5887] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  236.828213][ T5887] usb 6-1: Using ep0 maxpacket: 32
[  236.835041][ T5887] usb 6-1: no configurations
[  236.844358][ T5887] usb 6-1: can't read configurations, error -22
[  236.921676][ T7708] team0: Port device team_slave_0 added
[  236.932025][ T7708] team0: Port device team_slave_1 added
[  237.005967][ T5887] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  237.032026][   T29] bridge_slave_1: left allmulticast mode
[  237.080665][   T29] bridge_slave_1: left promiscuous mode
[  237.126367][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.163697][   T29] bridge_slave_0: left allmulticast mode
[  237.174369][   T29] bridge_slave_0: left promiscuous mode
[  237.184090][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.227315][ T5887] usb 6-1: Using ep0 maxpacket: 32
[  237.233726][ T5887] usb 6-1: no configurations
[  237.245049][ T5887] usb 6-1: can't read configurations, error -22
[  237.280657][ T5887] usb usb6-port1: attempt power cycle
[  237.646388][ T5887] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  237.679515][ T5887] usb 6-1: Using ep0 maxpacket: 32
[  237.689754][ T5887] usb 6-1: no configurations
[  237.694882][ T5887] usb 6-1: can't read configurations, error -22
[  237.835810][ T5887] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  237.876577][   T29] dvmrp0 (unregistering): left allmulticast mode
[  237.896654][ T5887] usb 6-1: Using ep0 maxpacket: 32
[  237.902674][ T5887] usb 6-1: no configurations
[  237.935794][ T5887] usb 6-1: can't read configurations, error -22
[  237.953966][ T5887] usb usb6-port1: unable to enumerate USB device
[  238.521996][   T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.574902][   T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.601600][   T29] bond0 (unregistering): Released all slaves
[  238.629630][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.636782][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.664921][ T7708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.730842][ T5144] Bluetooth: hci0: command tx timeout
[  238.779237][ T7708] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.787823][ T7708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.831625][ T7708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.863950][   T29] tipc: Disabling bearer <eth:macvlan0>
[  238.933214][   T29] tipc: Left network mode
[  239.075722][ T5837] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  239.923940][ T7708] hsr_slave_0: entered promiscuous mode
[  239.979955][ T7708] hsr_slave_1: entered promiscuous mode
[  240.073438][ T7708] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.105783][ T5837] usb 5-1: Using ep0 maxpacket: 16
[  240.123001][ T7708] Cannot create hsr debugfs directory
[  240.138727][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  240.221142][ T5837] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  240.235747][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.244529][ T5837] usb 5-1: Product: syz
[  240.249029][ T5837] usb 5-1: Manufacturer: syz
[  240.254828][ T5837] usb 5-1: SerialNumber: syz
[  240.424959][ T5887] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  240.807840][ T5837] usb 5-1: config 0 descriptor??
[  240.831782][ T5837] hub 5-1:0.0: bad descriptor, ignoring hub
[  240.846322][ T5837] hub 5-1:0.0: probe with driver hub failed with error -5
[  240.968530][ T5887] usb 6-1: Using ep0 maxpacket: 16
[  240.977005][ T5837] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14
[  241.023490][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.041552][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.053035][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.073568][ T5887] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  241.084289][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.087308][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.141063][ T5887] usb 6-1: config 0 descriptor??
[  241.154700][   T29] hsr_slave_0: left promiscuous mode
[  241.170068][   T29] hsr_slave_1: left promiscuous mode
[  241.208638][   T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.246382][   T29] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.259384][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.295430][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.804132][   T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.840172][   T29] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.907583][   T29] veth1_macvtap: left promiscuous mode
[  241.914542][   T29] veth0_macvtap: left promiscuous mode
[  241.929308][   T29] veth1_vlan: left promiscuous mode
[  241.944587][   T29] veth0_vlan: left promiscuous mode
[  242.202314][ T5887] usbhid 6-1:0.0: can't add hid device: -71
[  242.208694][ T5887] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  242.260837][ T5887] usb 6-1: USB disconnect, device number 9
[  246.569683][   T29] team0 (unregistering): Port device team_slave_1 removed
[  246.624549][   T29] team0 (unregistering): Port device team_slave_0 removed
[  247.075306][ T5884] usb 5-1: USB disconnect, device number 14
[  247.163604][ T7841] ip6gre1: entered allmulticast mode
[  247.488005][ T7708] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  247.534851][ T7708] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  247.819860][ T7865] netlink: 52 bytes leftover after parsing attributes in process `syz.2.439'.
[  250.306200][ T7708] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  250.402009][ T7708] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  251.414080][ T7708] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.687184][ T7708] 8021q: adding VLAN 0 to HW filter on device team0
[  251.737087][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.744355][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.754527][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.761730][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.105517][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.445'.
[  252.158242][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'.
[  252.453900][ T7918] netlink: 124 bytes leftover after parsing attributes in process `syz.5.447'.
[  252.554369][ T7920] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.447'.
[  252.592687][ T7708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.139634][ T7708] veth0_vlan: entered promiscuous mode
[  253.235037][ T7708] veth1_vlan: entered promiscuous mode
[  254.137187][ T7708] veth0_macvtap: entered promiscuous mode
[  254.147366][ T7708] veth1_macvtap: entered promiscuous mode
[  254.164898][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.175466][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.186129][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.197073][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.207437][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.218578][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.228839][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.239699][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.258929][ T7708] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.809576][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.831056][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.869640][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.893151][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.931517][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.975784][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.993376][ T7708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  255.037572][ T7708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.067680][ T7708] batman_adv: batadv0: Interface activated: batadv_slave_1
[  255.113072][ T7708] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.227147][ T7708] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.258475][ T7708] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.295723][ T7708] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.299368][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  256.305842][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  256.439318][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.508036][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.611209][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.717390][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.905974][ T7961] netlink: 52 bytes leftover after parsing attributes in process `syz.4.451'.
[  258.115764][ T5846] Bluetooth: hci5: command 0x0406 tx timeout
[  259.825230][   T46] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  260.019814][   T46] usb 7-1: too many configurations: 239, using maximum allowed: 8
[  261.487163][   T46] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  261.500720][   T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.802747][   T46] usb 7-1: Product: syz
[  261.808173][   T46] usb 7-1: Manufacturer: syz
[  261.826157][   T46] usb 7-1: SerialNumber: syz
[  263.694072][   T46] usb 7-1: can't set config #1, error -71
[  263.715737][   T46] usb 7-1: USB disconnect, device number 2
[  264.072847][ T8034] FAULT_INJECTION: forcing a failure.
[  264.072847][ T8034] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  264.160550][ T8034] CPU: 0 UID: 0 PID: 8034 Comm: syz.2.468 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[  264.170877][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  264.180952][ T8034] Call Trace:
[  264.184239][ T8034]  <TASK>
[  264.187177][ T8034]  dump_stack_lvl+0x241/0x360
[  264.191878][ T8034]  ? __pfx_dump_stack_lvl+0x10/0x10
[  264.197088][ T8034]  ? __pfx__printk+0x10/0x10
[  264.201694][ T8034]  ? snprintf+0xda/0x120
[  264.205957][ T8034]  should_fail_ex+0x3b0/0x4e0
[  264.210826][ T8034]  _copy_to_user+0x31/0xb0
[  264.215265][ T8034]  simple_read_from_buffer+0xca/0x150
[  264.220681][ T8034]  proc_fail_nth_read+0x1e9/0x250
[  264.225724][ T8034]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  264.231282][ T8034]  ? rw_verify_area+0x55e/0x6f0
[  264.236147][ T8034]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  264.241716][ T8034]  vfs_read+0x1fc/0xb70
[  264.245901][ T8034]  ? __pfx_vfs_read+0x10/0x10
[  264.250592][ T8034]  ? do_sys_openat2+0x17a/0x1d0
[  264.255470][ T8034]  ksys_read+0x18f/0x2b0
[  264.259822][ T8034]  ? __pfx_ksys_read+0x10/0x10
[  264.264610][ T8034]  ? do_syscall_64+0x100/0x230
[  264.269400][ T8034]  ? do_syscall_64+0xb6/0x230
[  264.274106][ T8034]  do_syscall_64+0xf3/0x230
[  264.278644][ T8034]  ? clear_bhb_loop+0x35/0x90
[  264.283360][ T8034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.289260][ T8034] RIP: 0033:0x7f0e3737d25c
[  264.293681][ T8034] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  264.313297][ T8034] RSP: 002b:00007f0e38189030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  264.321732][ T8034] RAX: ffffffffffffffda RBX: 00007f0e37535fa0 RCX: 00007f0e3737d25c
[  264.329741][ T8034] RDX: 000000000000000f RSI: 00007f0e381890a0 RDI: 0000000000000004
[  264.337764][ T8034] RBP: 00007f0e38189090 R08: 0000000000000000 R09: 0000000000000000
[  264.345798][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  264.353819][ T8034] R13: 0000000000000000 R14: 00007f0e37535fa0 R15: 00007ffe783ccaf8
[  264.361863][ T8034]  </TASK>
[  264.911315][ T8030] 9pnet_virtio: no channels available for device 127.0.0.1
[  265.153679][ T8043] netlink: 'syz.4.465': attribute type 3 has an invalid length.
[  265.170484][ T8043] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.465'.
[  266.814928][ T5909] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  268.330696][ T5909] usb 6-1: Using ep0 maxpacket: 16
[  269.052483][ T5909] usb 6-1: device descriptor read/all, error -71
[  269.330200][ T8085] lo speed is unknown, defaulting to 1000
[  270.437944][ T8100] 9pnet_fd: Insufficient options for proto=fd
[  274.592203][ T5886] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  276.007505][ T5886] usb 3-1: Using ep0 maxpacket: 16
[  276.936131][ T5886] usb 3-1: device descriptor read/all, error -71
[  278.364583][ T8184] usb usb7: usbfs: interface 0 claimed by hub while 'syz.5.494' resets device
[  279.467360][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  279.542382][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'.
[  279.571352][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'.
[  279.856054][ T8203] syzkaller1: entered promiscuous mode
[  281.087085][ T5909] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  281.265919][ T5909] usb 3-1: Using ep0 maxpacket: 32
[  281.300696][ T5909] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33374, setting to 64
[  281.350896][ T8229] lo speed is unknown, defaulting to 1000
[  281.371516][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  281.404009][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.450963][ T5909] hub 3-1:4.0: bad descriptor, ignoring hub
[  281.457841][ T5909] hub 3-1:4.0: probe with driver hub failed with error -5
[  281.554369][ T5909] usbhid 3-1:4.0: couldn't find an input interrupt endpoint
[  281.656366][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.498'.
[  281.916390][ T5909] usb 3-1: USB disconnect, device number 14
[  285.005644][ T5909] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  285.203394][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  285.235753][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  285.286081][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.326839][ T5909] usb 3-1: config 0 descriptor??
[  285.358413][ T5909] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  285.558082][ T5919] usb 3-1: USB disconnect, device number 15
[  287.940335][ T5919] kernel write not supported for file /402/net/psched (pid: 5919 comm: kworker/1:5)
[  288.117501][ T5918] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  288.504783][ T8328] 9pnet_fd: Insufficient options for proto=fd
[  295.646189][ T5918] IPVS: starting estimator thread 0...
[  296.375257][ T8401] IPVS: using max 18 ests per chain, 43200 per kthread
[  296.442342][ T8415] netlink: 40 bytes leftover after parsing attributes in process `syz.5.531'.
[  296.990309][ T8431] FAULT_INJECTION: forcing a failure.
[  296.990309][ T8431] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  297.096750][ T8431] CPU: 0 UID: 0 PID: 8431 Comm: syz.2.537 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[  297.107072][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  297.117239][ T8431] Call Trace:
[  297.120539][ T8431]  <TASK>
[  297.123480][ T8431]  dump_stack_lvl+0x241/0x360
[  297.128178][ T8431]  ? __pfx_dump_stack_lvl+0x10/0x10
[  297.133421][ T8431]  ? __pfx__printk+0x10/0x10
[  297.138055][ T8431]  ? __pfx_lock_release+0x10/0x10
[  297.143182][ T8431]  ? __lock_acquire+0x1397/0x2100
[  297.148233][ T8431]  should_fail_ex+0x3b0/0x4e0
[  297.152956][ T8431]  _copy_from_user+0x2f/0xc0
[  297.157564][ T8431]  io_submit_one+0xc1/0x18a0
[  297.162185][ T8431]  ? __pfx_io_submit_one+0x10/0x10
[  297.167313][ T8431]  ? __might_fault+0xaa/0x120
[  297.172009][ T8431]  ? __pfx_lock_release+0x10/0x10
[  297.177048][ T8431]  ? lookup_ioctx+0x94/0x6a0
[  297.181653][ T8431]  ? __might_fault+0xaa/0x120
[  297.186361][ T8431]  ? __might_fault+0xc6/0x120
[  297.191082][ T8431]  __se_sys_io_submit+0x171/0x2e0
[  297.196136][ T8431]  ? __pfx___se_sys_io_submit+0x10/0x10
[  297.201725][ T8431]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  297.207730][ T8431]  ? do_syscall_64+0x100/0x230
[  297.212617][ T8431]  ? do_syscall_64+0xb6/0x230
[  297.217316][ T8431]  do_syscall_64+0xf3/0x230
[  297.221853][ T8431]  ? clear_bhb_loop+0x35/0x90
[  297.226547][ T8431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.232452][ T8431] RIP: 0033:0x7f0e3737e819
[  297.236883][ T8431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  297.256512][ T8431] RSP: 002b:00007f0e38189038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  297.264948][ T8431] RAX: ffffffffffffffda RBX: 00007f0e37535fa0 RCX: 00007f0e3737e819
[  297.272969][ T8431] RDX: 0000000020000440 RSI: 0000000000000002 RDI: 00007f0e38168000
[  297.280970][ T8431] RBP: 00007f0e38189090 R08: 0000000000000000 R09: 0000000000000000
[  297.288973][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.296975][ T8431] R13: 0000000000000000 R14: 00007f0e37535fa0 R15: 00007ffe783ccaf8
[  297.304980][ T8431]  </TASK>
[  302.094862][ T8471] [U] ^R
[  302.571702][ T8482] binder_alloc: 8480: binder_alloc_buf, no vma
[  302.935710][ T5909] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  303.124967][ T5909] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  303.168172][ T5909] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  303.611922][ T5909] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  303.645992][ T5909] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  303.715835][ T5909] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  303.766784][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.817242][ T5909] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  303.861571][ T5909] usb 5-1: invalid MIDI out EP 0
[  304.169523][ T5144] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  304.187476][ T5846] Bluetooth: hci4: command 0x1003 tx timeout
[  304.896333][ T5909] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  304.980090][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  305.056876][ T5909] usb 5-1: USB disconnect, device number 15
[  308.276071][ T5931] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  308.455923][ T5931] usb 4-1: Using ep0 maxpacket: 16
[  308.472475][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  308.489078][ T5931] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  308.505714][ T5885] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  308.525881][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.534355][ T5931] usb 4-1: Product: syz
[  308.546190][ T5931] usb 4-1: Manufacturer: syz
[  308.551300][ T5931] usb 4-1: SerialNumber: syz
[  308.603720][ T5931] usb 4-1: config 0 descriptor??
[  308.629338][ T5931] hub 4-1:0.0: bad descriptor, ignoring hub
[  308.646481][ T5931] hub 4-1:0.0: probe with driver hub failed with error -5
[  308.675641][ T5885] usb 7-1: Using ep0 maxpacket: 16
[  308.685669][ T5931] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15
[  308.693134][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  308.727795][ T5885] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  308.757931][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.814484][ T5885] usb 7-1: Product: syz
[  308.844099][ T5885] usb 7-1: Manufacturer: syz
[  308.860839][ T5885] usb 7-1: SerialNumber: syz
[  308.919881][ T5885] usb 7-1: config 0 descriptor??
[  308.967798][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.973413][ T5885] hub 7-1:0.0: bad descriptor, ignoring hub
[  309.013826][ T5885] hub 7-1:0.0: probe with driver hub failed with error -5
[  309.076282][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.081183][ T5885] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input16
[  309.328716][ T8560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.356101][ T8560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.275143][ T8606] hugetlbfs: syz.3.568 (8606): Using mlock ulimits for SHM_HUGETLB is obsolete
[  311.750823][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'.
[  312.107121][ T5884] usb 7-1: USB disconnect, device number 3
[  313.646206][ T5918] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  313.695824][ T5887] usb 4-1: USB disconnect, device number 9
[  314.075927][ T5918] usb 7-1: Using ep0 maxpacket: 32
[  314.083491][ T5918] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33374, setting to 64
[  314.115643][ T5918] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  314.124801][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.188465][ T8626] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  314.213733][ T5918] hub 7-1:4.0: bad descriptor, ignoring hub
[  314.255678][ T5887] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  314.263555][ T5918] hub 7-1:4.0: probe with driver hub failed with error -5
[  314.287799][ T5918] usbhid 7-1:4.0: couldn't find an input interrupt endpoint
[  314.422402][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.571'.
[  314.588907][ T5887] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  314.598878][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.608294][ T5887] usb 4-1: Product: syz
[  314.617054][ T5887] usb 4-1: Manufacturer: syz
[  314.622161][ T5887] usb 4-1: SerialNumber: syz
[  314.665964][ T5918] usb 7-1: USB disconnect, device number 4
[  314.704289][ T5887] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  314.731251][ T5885] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  315.043252][ T8659] Bluetooth: MGMT ver 1.23
[  318.445666][ T5885] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  318.452702][ T5885] ath9k_htc: Failed to initialize the device
[  318.458727][    C0] sched: DL replenish lagged too much
[  318.481887][ T5884] usb 4-1: USB disconnect, device number 10
[  318.482080][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  318.495697][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  318.529962][ T5884] usb 4-1: ath9k_htc: USB layer deinitialized
[  320.475909][ T5885] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  321.965648][ T8722] nbd5: detected capacity change from 0 to 20
[  321.975978][ T5885] usb 4-1: Using ep0 maxpacket: 16
[  321.988135][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  322.011311][ T5853] block nbd5: Send control failed (result -89)
[  322.041088][ T5885] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  322.061027][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.066193][ T5853] block nbd5: Request send failed, requeueing
[  322.103506][ T5144] block nbd5: Receive control failed (result -32)
[  322.106488][   T26] block nbd5: Dead connection, failed to find a fallback
[  322.128434][   T26] block nbd5: shutting down sockets
[  322.139303][   T26] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  322.144327][ T5885] usb 4-1: Product: syz
[  322.149445][ T5918] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  322.162610][   T26] Buffer I/O error on dev nbd5, logical block 0, async page read
[  322.238769][ T5885] usb 4-1: Manufacturer: syz
[  322.259545][ T5853] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  322.336115][ T5918] usb 7-1: Using ep0 maxpacket: 32
[  322.336239][ T5885] usb 4-1: SerialNumber: syz
[  322.343503][ T5918] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33374, setting to 64
[  322.364526][ T5918] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  322.374122][ T5853] Buffer I/O error on dev nbd5, logical block 0, async page read
[  322.374723][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.404096][ T5885] usb 4-1: config 0 descriptor??
[  322.412677][ T5918] hub 7-1:4.0: bad descriptor, ignoring hub
[  322.417916][ T5853] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  322.436032][ T5918] hub 7-1:4.0: probe with driver hub failed with error -5
[  322.440553][ T5885] hub 4-1:0.0: bad descriptor, ignoring hub
[  322.446999][ T5918] usbhid 7-1:4.0: couldn't find an input interrupt endpoint
[  322.492369][ T5853] Buffer I/O error on dev nbd5, logical block 0, async page read
[  322.513426][ T5885] hub 4-1:0.0: probe with driver hub failed with error -5
[  322.617105][ T5853] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  322.629167][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.592'.
[  322.685450][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.819206][ T5918] usb 7-1: USB disconnect, device number 5
[  322.828645][ T5853] Buffer I/O error on dev nbd5, logical block 0, async page read
[  322.829590][ T5885] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17
[  322.837311][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.948703][ T5853] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  323.002278][ T5853] Buffer I/O error on dev nbd5, logical block 0, async page read
[  323.030312][ T5853] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  323.039732][ T5853] Buffer I/O error on dev nbd5, logical block 0, async page read
[  323.051107][ T5853] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  323.061006][ T5853] Buffer I/O error on dev nbd5, logical block 0, async page read
[  323.070245][ T5853] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  323.079630][ T5853] Buffer I/O error on dev nbd5, logical block 0, async page read
[  323.088335][ T5853] ldm_validate_partition_table(): Disk read failed.
[  323.095886][ T5853] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  323.104978][ T5853] Buffer I/O error on dev nbd5, logical block 0, async page read
[  323.113522][ T5853] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  323.123294][ T5853] Buffer I/O error on dev nbd5, logical block 0, async page read
[  323.131707][ T5853] Dev nbd5: unable to read RDB block 0
[  323.137701][ T5853]  nbd5: unable to read partition table
[  323.143730][ T5853] nbd5: partition table beyond EOD, truncated
[  323.158808][ T5853] ldm_validate_partition_table(): Disk read failed.
[  323.166037][ T5853] Dev nbd5: unable to read RDB block 0
[  323.171919][ T5853]  nbd5: unable to read partition table
[  323.178497][ T5853] nbd5: partition table beyond EOD, truncated
[  323.187470][ T8733] 9pnet_fd: Insufficient options for proto=fd
[  323.283039][ T8722] ldm_validate_partition_table(): Disk read failed.
[  323.293754][ T8722] Dev nbd5: unable to read RDB block 0
[  323.321151][ T8722]  nbd5: unable to read partition table
[  323.334100][ T8722] nbd5: partition table beyond EOD, truncated
[  323.353075][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  323.416490][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=9, location=9
[  323.466145][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8, location=8
[  323.481271][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=7, location=7
[  323.523914][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  323.604166][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  323.753312][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=4, location=4
[  323.843865][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=3, location=3
[  324.078205][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=2, location=2
[  324.283832][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  324.344112][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  324.402231][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=1, location=1
[  324.456080][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=0, location=0
[  324.467385][ T8722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  324.477923][ T8722] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[  326.710524][ T8787] RDS: rds_bind could not find a transport for ::ffff:172.20.20.10, load rds_tcp or rds_rdma?
[  329.136436][ T5192] usb 4-1: reset high-speed USB device number 11 using dummy_hcd
[  329.888518][ T5885] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  330.085905][ T5885] usb 5-1: Using ep0 maxpacket: 32
[  330.555749][ T5885] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33374, setting to 64
[  330.575713][ T5885] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  330.591067][ T8812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.610865][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.622259][ T8812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.643360][ T5885] hub 5-1:4.0: bad descriptor, ignoring hub
[  330.650391][ T5885] hub 5-1:4.0: probe with driver hub failed with error -5
[  330.662810][ T5885] usbhid 5-1:4.0: couldn't find an input interrupt endpoint
[  331.496076][ T5837] usb 4-1: USB disconnect, device number 11
[  331.603217][ T5918] usb 5-1: USB disconnect, device number 16
[  336.056491][ T5887] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  336.275638][ T5887] usb 3-1: Using ep0 maxpacket: 16
[  336.282760][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  336.301440][ T5887] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  336.323099][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.357630][ T5887] usb 3-1: Product: syz
[  336.388581][ T5887] usb 3-1: Manufacturer: syz
[  336.416440][ T5887] usb 3-1: SerialNumber: syz
[  336.441624][ T5887] usb 3-1: config 0 descriptor??
[  336.526257][ T5887] hub 3-1:0.0: bad descriptor, ignoring hub
[  336.537257][ T5887] hub 3-1:0.0: probe with driver hub failed with error -5
[  336.608016][ T5887] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18
[  337.015802][ T8903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.097802][ T8903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.545700][ T5884] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  337.555780][ T5918] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  337.837822][ T5918] usb 7-1: Using ep0 maxpacket: 8
[  337.845200][ T5918] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  337.856098][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.858816][ T5884] usb 5-1: Using ep0 maxpacket: 8
[  337.871529][ T5918] usb 7-1: config 0 descriptor??
[  337.903911][ T5884] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=14.e5
[  337.920638][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.943862][ T5884] usb 5-1: config 0 descriptor??
[  337.963243][ T5884] usb 5-1: selecting invalid altsetting 1
[  337.977238][ T5884] catc 5-1:0.0: Can't set altsetting 1.
[  337.990352][ T5884] catc 5-1:0.0: probe with driver catc failed with error -5
[  338.174697][ T5884] usb 5-1: USB disconnect, device number 17
[  339.705898][ T5884] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  340.016624][ T5884] usb 6-1: Using ep0 maxpacket: 16
[  340.139156][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  340.164008][ T5884] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  340.185678][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.211087][ T5884] usb 6-1: Product: syz
[  340.215330][ T5884] usb 6-1: Manufacturer: syz
[  340.220333][ T5884] usb 6-1: SerialNumber: syz
[  340.279019][ T5884] usb 6-1: config 0 descriptor??
[  340.336310][ T5884] hub 6-1:0.0: bad descriptor, ignoring hub
[  340.342329][ T5884] hub 6-1:0.0: probe with driver hub failed with error -5
[  340.353426][ T5884] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19
[  340.384349][ T8957] netlink: 'syz.4.642': attribute type 6 has an invalid length.
[  340.699425][ T5919] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  340.916385][ T5919] usb 5-1: Using ep0 maxpacket: 16
[  341.355184][ T5919] usb 5-1: unable to get BOS descriptor or descriptor too short
[  341.372108][ T5919] usb 5-1: config 1 has an invalid interface number: 193 but max is 0
[  341.389288][ T5919] usb 5-1: config 1 has no interface number 0
[  341.402982][ T5919] usb 5-1: New USB device found, idVendor=04f2, idProduct=b67c, bcdDevice=18.3f
[  341.420492][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.443414][ T5918] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  341.476010][ T8951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.493711][ T5918] asix 7-1:0.0: probe with driver asix failed with error -71
[  341.511885][ T8951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.554536][ T5918] usb 7-1: USB disconnect, device number 6
[  341.594869][ T5919] usb 5-1: Product: syz
[  341.608703][ T5919] usb 5-1: Manufacturer: syz
[  341.633906][ T5919] usb 5-1: SerialNumber: syz
[  341.648853][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.675155][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.105065][ T5919] usb 5-1: Found UVC 0.00 device syz (04f2:b67c)
[  342.112934][ T5919] usb 5-1: No valid video chain found.
[  342.899097][    T9] usb 3-1: USB disconnect, device number 17
[  342.917657][ T5884] usb 6-1: USB disconnect, device number 12
[  343.026026][ T5919] usb 5-1: USB disconnect, device number 18
[  345.156957][ T8989] xt_TCPMSS: Only works on TCP SYN packets
[  345.166265][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  345.180248][ T8989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.650'.
[  345.189325][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.650'.
[  345.198337][ T8989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.650'.
[  345.207511][ T8989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.650'.
[  348.345353][ T9008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  348.397840][ T9008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  349.961784][ T5909] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  350.115864][ T5909] usb 7-1: Using ep0 maxpacket: 16
[  350.127299][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  350.180193][ T5909] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  350.231689][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.265938][ T5909] usb 7-1: Product: syz
[  350.270186][ T5909] usb 7-1: Manufacturer: syz
[  350.492322][ T5909] usb 7-1: SerialNumber: syz
[  350.681705][ T5909] usb 7-1: config 0 descriptor??
[  350.764979][ T5909] hub 7-1:0.0: bad descriptor, ignoring hub
[  350.771932][ T5909] hub 7-1:0.0: probe with driver hub failed with error -5
[  350.807024][ T5909] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input20
[  351.031229][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.060071][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.170019][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  351.179147][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.199406][ T5884] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  351.230650][ T5909] usb 7-1: USB disconnect, device number 7
[  351.970625][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024
[  351.982002][ T5884] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024
[  351.992863][ T5884] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12
[  352.002327][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.036588][ T5884] usb 3-1: config 0 descriptor??
[  352.046292][ T5884] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  352.781073][ T5884] usb 3-1: USB disconnect, device number 18
[  353.672884][ T7142] udevd[7142]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  354.829815][ T5909] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  356.087464][ T5846] Bluetooth: hci0: command 0x0406 tx timeout
[  357.474207][ T5909] usb 7-1: device descriptor read/all, error -71
[  358.595762][ T5837] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  358.975786][ T5931] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  359.005761][ T5837] usb 6-1: Using ep0 maxpacket: 16
[  359.019422][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  359.065314][ T5837] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  359.176179][ T5931] usb 3-1: Using ep0 maxpacket: 32
[  359.195777][ T5909] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  359.243552][ T5931] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33374, setting to 64
[  359.419954][ T5909] usb 7-1: Using ep0 maxpacket: 16
[  359.460022][ T5909] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  359.615760][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  359.625049][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.644263][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  359.667878][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.687482][ T5837] usb 6-1: Product: syz
[  359.691724][ T5837] usb 6-1: Manufacturer: syz
[  359.711667][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  359.734226][ T5931] hub 3-1:4.0: bad descriptor, ignoring hub
[  359.746028][ T5837] usb 6-1: SerialNumber: syz
[  359.776995][ T5931] hub 3-1:4.0: probe with driver hub failed with error -5
[  359.785656][ T5909] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  359.797134][ T5931] usbhid 3-1:4.0: couldn't find an input interrupt endpoint
[  359.805982][ T5909] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  359.853864][ T5837] usb 6-1: config 0 descriptor??
[  359.876720][ T5837] hub 6-1:0.0: bad descriptor, ignoring hub
[  359.883740][ T5837] hub 6-1:0.0: probe with driver hub failed with error -5
[  359.893855][ T5837] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input21
[  359.904237][ T5909] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  359.913688][ T5909] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  359.922158][ T5909] usb 7-1: Manufacturer: syz
[  359.934383][ T5909] usb 7-1: config 0 descriptor??
[  359.940569][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.683'.
[  360.082109][    T9] usb 3-1: USB disconnect, device number 19
[  360.171059][ T9121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.203621][ T9121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.238444][ T9121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.330416][ T9121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.476181][ T5884] usb 6-1: USB disconnect, device number 13
[  360.705661][ T5909] rc_core: IR keymap rc-hauppauge not found
[  360.711646][ T5909] Registered IR keymap rc-empty
[  360.718198][ T5909] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  360.777209][ T5909] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  360.831772][ T5909] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  360.863837][ T5909] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input22
[  360.892251][ T5909] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  361.885873][ T5909] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  361.906171][ T5909] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  361.927342][ T5909] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  361.956599][ T5909] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  362.945959][ T5909] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  362.992449][ T9135] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  363.146461][ T5909] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.207440][ T5909] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.255673][ T5909] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.339909][ T5909] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  363.367457][ T5909] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  363.393583][ T5909] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  363.442804][ T5909] usb 7-1: USB disconnect, device number 9
[  365.845639][ T5919] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  365.995750][ T5919] usb 7-1: Using ep0 maxpacket: 32
[  366.003106][ T5919] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  366.019830][ T5919] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  366.061040][ T5919] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  366.070391][ T5837] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  366.098974][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  366.121809][ T5919] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  366.159968][ T5919] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  366.194945][ T5919] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  366.222251][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.244223][ T5919] usb 7-1: config 0 descriptor??
[  366.336124][ T5837] usb 4-1: Using ep0 maxpacket: 32
[  366.366333][ T5837] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33374, setting to 64
[  366.416718][ T5837] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  366.454427][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.468362][ T5919] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  366.899442][ T5919] usb 7-1: USB disconnect, device number 10
[  367.005477][ T5837] hub 4-1:4.0: bad descriptor, ignoring hub
[  367.012241][ T5837] hub 4-1:4.0: probe with driver hub failed with error -5
[  367.043683][ T5837] usbhid 4-1:4.0: couldn't find an input interrupt endpoint
[  367.090979][ T5919] usblp0: removed
[  367.511809][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'.
[  367.717413][ T5919] usb 4-1: USB disconnect, device number 12
[  368.715854][ T5887] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  369.862244][ T5887] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  369.871651][ T5887] usb 3-1: config 0 has no interface number 0
[  369.881050][ T5887] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.893882][ T5887] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.905998][ T5887] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  370.277872][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.448008][ T5887] usb 3-1: config 0 descriptor??
[  371.237545][ T5887] uclogic 0003:5543:0522.0004: unknown main item tag 0x0
[  371.270373][ T5887] uclogic 0003:5543:0522.0004: unknown main item tag 0x0
[  371.435361][ T5887] uclogic 0003:5543:0522.0004: unknown main item tag 0x0
[  371.443493][ T5887] uclogic 0003:5543:0522.0004: unknown main item tag 0x0
[  371.451912][ T5887] uclogic 0003:5543:0522.0004: unknown main item tag 0x0
[  371.460204][ T5887] uclogic 0003:5543:0522.0004: No inputs registered, leaving
[  371.477817][ T5887] uclogic 0003:5543:0522.0004: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input2
[  371.861773][ T5887] usb 3-1: USB disconnect, device number 20
[  373.655743][ T5887] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  373.856088][ T5887] usb 5-1: Using ep0 maxpacket: 16
[  375.936675][ T5887] usb 5-1: unable to read config index 0 descriptor/start: -71
[  375.944319][ T5887] usb 5-1: can't read configurations, error -71
[  378.820631][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  378.829660][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  382.389958][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'.
[  385.012664][ T9326] ip6gre1: entered allmulticast mode
[  391.775902][ T5884] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  392.060655][ T9383] netlink: 200 bytes leftover after parsing attributes in process `syz.6.753'.
[  392.576197][ T5884] usb 3-1: Using ep0 maxpacket: 16
[  392.649491][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  392.683101][ T5884] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  392.698891][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.707349][ T5884] usb 3-1: Product: syz
[  392.711662][ T5884] usb 3-1: Manufacturer: syz
[  392.716536][ T5884] usb 3-1: SerialNumber: syz
[  392.830863][ T5884] usb 3-1: config 0 descriptor??
[  392.850542][ T5884] hub 3-1:0.0: bad descriptor, ignoring hub
[  392.865596][ T5884] hub 3-1:0.0: probe with driver hub failed with error -5
[  392.883102][ T5884] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23
[  393.116902][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.131513][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.227769][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.257286][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.132120][ T5884] usb 3-1: USB disconnect, device number 21
[  405.522000][ T9461] fuse: Bad value for 'group_id'
[  405.527504][ T9461] fuse: Bad value for 'group_id'
[  407.892133][ T9477] FAULT_INJECTION: forcing a failure.
[  407.892133][ T9477] name failslab, interval 1, probability 0, space 0, times 0
[  407.892241][ T9477] CPU: 0 UID: 0 PID: 9477 Comm: syz.5.777 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[  407.892268][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  407.892289][ T9477] Call Trace:
[  407.892299][ T9477]  <TASK>
[  407.892310][ T9477]  dump_stack_lvl+0x241/0x360
[  407.892348][ T9477]  ? __pfx_dump_stack_lvl+0x10/0x10
[  407.892375][ T9477]  ? __pfx__printk+0x10/0x10
[  407.892402][ T9477]  ? __kmalloc_node_track_caller_noprof+0xb2/0x440
[  407.892437][ T9477]  ? __pfx___might_resched+0x10/0x10
[  407.892470][ T9477]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  407.892508][ T9477]  should_fail_ex+0x3b0/0x4e0
[  407.892544][ T9477]  should_failslab+0xac/0x100
[  407.892575][ T9477]  __kmalloc_node_track_caller_noprof+0xda/0x440
[  407.892606][ T9477]  ? kobject_set_name_vargs+0x61/0x120
[  407.892638][ T9477]  kstrdup+0x3a/0x80
[  407.892672][ T9477]  kobject_set_name_vargs+0x61/0x120
[  407.892701][ T9477]  dev_set_name+0xd5/0x120
[  407.892746][ T9477]  ? __pfx_dev_set_name+0x10/0x10
[  407.892779][ T9477]  ? device_initialize+0x266/0x460
[  407.892812][ T9477]  netdev_register_kobject+0xb7/0x310
[  407.892850][ T9477]  register_netdevice+0x12c5/0x1b00
[  407.892899][ T9477]  ? __pfx_register_netdevice+0x10/0x10
[  407.892922][ T9477]  ? ____sys_sendmsg+0x52a/0x7e0
[  407.892947][ T9477]  ? __sys_sendmsg+0x269/0x350
[  407.892970][ T9477]  ? do_syscall_64+0xf3/0x230
[  407.892993][ T9477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.893039][ T9477]  macsec_newlink+0x5f9/0x1100
[  407.893088][ T9477]  ? __pfx_macsec_newlink+0x10/0x10
[  407.893125][ T9477]  ? read_word_at_a_time+0xe/0x20
[  407.893149][ T9477]  ? sized_strscpy+0x8d/0x220
[  407.893177][ T9477]  ? alloc_netdev_mqs+0xcda/0x1000
[  407.893203][ T9477]  ? validate_linkmsg+0x71e/0x900
[  407.893233][ T9477]  ? rtnl_create_link+0x91c/0xc20
[  407.893260][ T9477]  ? __pfx_macsec_newlink+0x10/0x10
[  407.893291][ T9477]  rtnl_newlink+0x1591/0x20a0
[  407.893347][ T9477]  ? __pfx_rtnl_newlink+0x10/0x10
[  407.893375][ T9477]  ? rcu_is_watching+0x15/0xb0
[  407.893403][ T9477]  ? trace_contention_end+0x3c/0x120
[  407.893433][ T9477]  ? __mutex_lock+0x37f/0xee0
[  407.893467][ T9477]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  407.893502][ T9477]  ? __pfx___mutex_lock+0x10/0x10
[  407.893543][ T9477]  ? __pfx_rtnl_newlink+0x10/0x10
[  407.893571][ T9477]  rtnetlink_rcv_msg+0x73f/0xcf0
[  407.893601][ T9477]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  407.893638][ T9477]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  407.893678][ T9477]  ? ref_tracker_free+0x643/0x7e0
[  407.893716][ T9477]  netlink_rcv_skb+0x1e3/0x430
[  407.893741][ T9477]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  407.893775][ T9477]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  407.893822][ T9477]  ? netlink_deliver_tap+0x2e/0x1b0
[  407.893848][ T9477]  netlink_unicast+0x7f6/0x990
[  407.893896][ T9477]  ? __pfx_netlink_unicast+0x10/0x10
[  407.893926][ T9477]  ? __virt_addr_valid+0x183/0x530
[  407.893954][ T9477]  ? __check_object_size+0x48e/0x900
[  407.893987][ T9477]  netlink_sendmsg+0x8e4/0xcb0
[  407.894023][ T9477]  ? __pfx_netlink_sendmsg+0x10/0x10
[  407.894060][ T9477]  ? __pfx_netlink_sendmsg+0x10/0x10
[  407.894082][ T9477]  __sock_sendmsg+0x221/0x270
[  407.894116][ T9477]  ____sys_sendmsg+0x52a/0x7e0
[  407.894153][ T9477]  ? __pfx_____sys_sendmsg+0x10/0x10
[  407.894177][ T9477]  ? __fget_files+0x2a/0x410
[  407.894209][ T9477]  ? __fget_files+0x2a/0x410
[  407.894247][ T9477]  __sys_sendmsg+0x269/0x350
[  407.894272][ T9477]  ? __pfx_lock_release+0x10/0x10
[  407.894299][ T9477]  ? __pfx___sys_sendmsg+0x10/0x10
[  407.894338][ T9477]  ? __pfx_vfs_write+0x10/0x10
[  407.894401][ T9477]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  407.894426][ T9477]  ? do_syscall_64+0x100/0x230
[  407.894455][ T9477]  ? do_syscall_64+0xb6/0x230
[  407.894482][ T9477]  do_syscall_64+0xf3/0x230
[  407.894506][ T9477]  ? clear_bhb_loop+0x35/0x90
[  407.894534][ T9477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.894557][ T9477] RIP: 0033:0x7fed2f17e819
[  407.894582][ T9477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  407.894602][ T9477] RSP: 002b:00007fed3005a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  407.894629][ T9477] RAX: ffffffffffffffda RBX: 00007fed2f335fa0 RCX: 00007fed2f17e819
[  407.894647][ T9477] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000012
[  407.894662][ T9477] RBP: 00007fed3005a090 R08: 0000000000000000 R09: 0000000000000000
[  407.894677][ T9477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  407.894691][ T9477] R13: 0000000000000000 R14: 00007fed2f335fa0 R15: 00007ffc7d15af78
[  407.894725][ T9477]  </TASK>
[  409.446700][ T9487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.781'.
[  416.160406][ T5919] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  416.395642][ T5919] usb 7-1: Using ep0 maxpacket: 16
[  416.404453][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  416.408478][ T9546] 9pnet_fd: p9_fd_create_tcp (9546): problem connecting socket to 127.0.0.1
[  417.370149][ T5919] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  417.379672][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.387914][ T5919] usb 7-1: Product: syz
[  417.392240][ T5919] usb 7-1: Manufacturer: syz
[  417.397461][ T5919] usb 7-1: SerialNumber: syz
[  417.411722][ T5919] usb 7-1: config 0 descriptor??
[  417.419519][ T5919] hub 7-1:0.0: bad descriptor, ignoring hub
[  417.425923][ T5919] hub 7-1:0.0: probe with driver hub failed with error -5
[  417.436469][ T5919] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input24
[  418.256606][ T9535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  418.268799][ T9535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.307137][ T9535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  418.316211][ T9535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.536053][ T5931] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  418.566770][ T5909] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  419.196105][ T5931] usb 5-1: Using ep0 maxpacket: 16
[  419.212783][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  419.233152][ T5931] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  419.263476][ T5931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  419.299496][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  419.346082][ T5931] usb 5-1: config 0 has no interface number 0
[  419.356412][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.367480][ T9564] trusted_key: encrypted_key: insufficient parameters specified
[  419.436516][ T5909] usb 3-1: config 0 descriptor??
[  419.517469][ T5909] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  419.541388][ T5931] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  419.581073][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.644794][ T5931] usb 5-1: config 0 descriptor??
[  419.699634][ T5931] usb 5-1: can't set config #0, error -71
[  419.749444][ T5931] usb 5-1: USB disconnect, device number 21
[  419.756677][ T9572] 
[  419.759051][ T9572] ======================================================
[  419.766103][ T9572] WARNING: possible circular locking dependency detected
[  419.773157][ T9572] 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 Not tainted
[  419.779949][ T9572] ------------------------------------------------------
[  419.786992][ T9572] syz.5.800/9572 is trying to acquire lock:
[  419.792912][ T9572] ffff888142b9fb38 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[  419.803170][ T9572] 
[  419.803170][ T9572] but task is already holding lock:
[  419.810564][ T9572] ffff888142b9f608 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0
[  419.820910][ T9572] 
[  419.820910][ T9572] which lock already depends on the new lock.
[  419.820910][ T9572] 
[  419.831953][ T9572] 
[  419.831953][ T9572] the existing dependency chain (in reverse order) is:
[  419.841005][ T9572] 
[  419.841005][ T9572] -> #4 (&q->q_usage_counter(io)#54){++++}-{0:0}:
[  419.849681][ T9572]        lock_acquire+0x1ed/0x550
[  419.854750][ T9572]        blk_mq_submit_bio+0x1536/0x23a0
[  419.860423][ T9572]        __submit_bio+0x2c6/0x560
[  419.865494][ T9572]        submit_bio_noacct_nocheck+0x4d3/0xe30
[  419.871686][ T9572]        block_read_full_folio+0x93b/0xcd0
[  419.877544][ T9572]        filemap_read_folio+0x14b/0x630
[  419.883171][ T9572]        filemap_get_pages+0x17af/0x2540
[  419.888850][ T9572]        filemap_read+0x45c/0xf50
[  419.893907][ T9572]        blkdev_read_iter+0x2d8/0x430
[  419.899313][ T9572]        vfs_read+0x991/0xb70
[  419.904048][ T9572]        ksys_read+0x18f/0x2b0
[  419.908868][ T9572]        do_syscall_64+0xf3/0x230
[  419.913954][ T9572]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.920384][ T9572] 
[  419.920384][ T9572] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}:
[  419.929528][ T9572]        lock_acquire+0x1ed/0x550
[  419.934557][ T9572]        down_read+0xb1/0xa40
[  419.939241][ T9572]        filemap_fault+0x6e8/0x1950
[  419.944445][ T9572]        __do_fault+0x135/0x460
[  419.949299][ T9572]        handle_pte_fault+0x2d1c/0x6820
[  419.954862][ T9572]        handle_mm_fault+0x1053/0x1ad0
[  419.960344][ T9572]        exc_page_fault+0x2b9/0x8c0
[  419.966010][ T9572]        asm_exc_page_fault+0x26/0x30
[  419.971439][ T9572]        rep_movs_alternative+0x30/0x70
[  419.977029][ T9572]        _copy_from_user+0x7f/0xc0
[  419.982260][ T9572]        copy_msghdr_from_user+0xae/0x680
[  419.988019][ T9572]        do_recvmmsg+0x3bd/0xab0
[  419.992991][ T9572]        __x64_sys_recvmmsg+0x199/0x250
[  419.998570][ T9572]        do_syscall_64+0xf3/0x230
[  420.003628][ T9572]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.010099][ T9572] 
[  420.010099][ T9572] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[  420.017722][ T9572]        lock_acquire+0x1ed/0x550
[  420.022815][ T9572]        __might_fault+0xc6/0x120
[  420.027902][ T9572]        _copy_from_user+0x2a/0xc0
[  420.033410][ T9572]        blk_trace_setup+0xd2/0x1e0
[  420.038741][ T9572]        sg_ioctl+0xa46/0x2e80
[  420.043549][ T9572]        __se_sys_ioctl+0xf5/0x170
[  420.048704][ T9572]        do_syscall_64+0xf3/0x230
[  420.053779][ T9572]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.060228][ T9572] 
[  420.060228][ T9572] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[  420.068186][ T9572]        lock_acquire+0x1ed/0x550
[  420.073248][ T9572]        __mutex_lock+0x1ac/0xee0
[  420.078305][ T9572]        blk_register_queue+0x156/0x460
[  420.083892][ T9572]        add_disk_fwnode+0x648/0xf80
[  420.089220][ T9572]        brd_alloc+0x547/0x790
[  420.094020][ T9572]        brd_init+0x126/0x1b0
[  420.098730][ T9572]        do_one_initcall+0x248/0x880
[  420.104063][ T9572]        do_initcall_level+0x157/0x210
[  420.109561][ T9572]        do_initcalls+0x3f/0x80
[  420.114451][ T9572]        kernel_init_freeable+0x435/0x5d0
[  420.120211][ T9572]        kernel_init+0x1d/0x2b0
[  420.125119][ T9572]        ret_from_fork+0x4b/0x80
[  420.130102][ T9572]        ret_from_fork_asm+0x1a/0x30
[  420.135429][ T9572] 
[  420.135429][ T9572] -> #0 (&q->sysfs_lock){+.+.}-{4:4}:
[  420.143093][ T9572]        validate_chain+0x18ef/0x5920
[  420.148503][ T9572]        __lock_acquire+0x1397/0x2100
[  420.153927][ T9572]        lock_acquire+0x1ed/0x550
[  420.158985][ T9572]        __mutex_lock+0x1ac/0xee0
[  420.164087][ T9572]        blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[  420.170462][ T9572]        nbd_start_device+0x16c/0xaa0
[  420.175865][ T9572]        nbd_ioctl+0x5dc/0xf40
[  420.180697][ T9572]        blkdev_ioctl+0x57d/0x6a0
[  420.185775][ T9572]        __se_sys_ioctl+0xf5/0x170
[  420.190937][ T9572]        do_syscall_64+0xf3/0x230
[  420.196115][ T9572]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.202561][ T9572] 
[  420.202561][ T9572] other info that might help us debug this:
[  420.202561][ T9572] 
[  420.212814][ T9572] Chain exists of:
[  420.212814][ T9572]   &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#54
[  420.212814][ T9572] 
[  420.227673][ T9572]  Possible unsafe locking scenario:
[  420.227673][ T9572] 
[  420.235144][ T9572]        CPU0                    CPU1
[  420.240543][ T9572]        ----                    ----
[  420.245929][ T9572]   lock(&q->q_usage_counter(io)#54);
[  420.251355][ T9572]                                lock(mapping.invalidate_lock#2);
[  420.259209][ T9572]                                lock(&q->q_usage_counter(io)#54);
[  420.267146][ T9572]   lock(&q->sysfs_lock);
[  420.271510][ T9572] 
[  420.271510][ T9572]  *** DEADLOCK ***
[  420.271510][ T9572] 
[  420.279672][ T9572] 4 locks held by syz.5.800/9572:
[  420.284719][ T9572]  #0: ffff888025d74198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x13c/0xf40
[  420.294110][ T9572]  #1: ffff888025d740d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc2/0x1ae0
[  420.305673][ T9572]  #2: ffff888142b9f608 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0
[  420.316503][ T9572]  #3: ffff888142b9f640 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xaa0
[  420.327551][ T9572] 
[  420.327551][ T9572] stack backtrace:
[  420.333465][ T9572] CPU: 1 UID: 0 PID: 9572 Comm: syz.5.800 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[  420.343825][ T9572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  420.353954][ T9572] Call Trace:
[  420.357262][ T9572]  <TASK>
[  420.360220][ T9572]  dump_stack_lvl+0x241/0x360
[  420.364936][ T9572]  ? __pfx_dump_stack_lvl+0x10/0x10
[  420.370166][ T9572]  ? __pfx__printk+0x10/0x10
[  420.374797][ T9572]  print_circular_bug+0x13a/0x1b0
[  420.379863][ T9572]  check_noncircular+0x36a/0x4a0
[  420.384840][ T9572]  ? __pfx_check_noncircular+0x10/0x10
[  420.390346][ T9572]  validate_chain+0x18ef/0x5920
[  420.395242][ T9572]  ? __pfx_validate_chain+0x10/0x10
[  420.400503][ T9572]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  420.406628][ T9572]  ? mark_lock+0x9a/0x360
[  420.411000][ T9572]  __lock_acquire+0x1397/0x2100
[  420.415897][ T9572]  lock_acquire+0x1ed/0x550
[  420.420432][ T9572]  ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[  420.426467][ T9572]  ? __pfx_lock_acquire+0x10/0x10
[  420.431523][ T9572]  ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0
[  420.437553][ T9572]  ? nbd_start_device+0x16c/0xaa0
[  420.442609][ T9572]  ? __pfx___might_resched+0x10/0x10
[  420.447944][ T9572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.454049][ T9572]  __mutex_lock+0x1ac/0xee0
[  420.458586][ T9572]  ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[  420.464712][ T9572]  ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[  420.470739][ T9572]  ? __pfx___mutex_lock+0x10/0x10
[  420.475806][ T9572]  ? __kasan_kmalloc+0x98/0xb0
[  420.480608][ T9572]  ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0
[  420.486629][ T9572]  ? __kmalloc_cache_noprof+0x19c/0x2c0
[  420.492222][ T9572]  blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[  420.498072][ T9572]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  420.504006][ T9572]  ? lockdep_hardirqs_on+0x99/0x150
[  420.509234][ T9572]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  420.515179][ T9572]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  420.521515][ T9572]  ? rcu_is_watching+0x15/0xb0
[  420.526316][ T9572]  ? __mutex_lock+0xaf9/0xee0
[  420.531028][ T9572]  ? __mutex_lock+0x5ef/0xee0
[  420.535745][ T9572]  ? nbd_ioctl+0x13c/0xf40
[  420.540200][ T9572]  ? __pfx___mutex_lock+0x10/0x10
[  420.545258][ T9572]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  420.551282][ T9572]  nbd_start_device+0x16c/0xaa0
[  420.556258][ T9572]  nbd_ioctl+0x5dc/0xf40
[  420.560539][ T9572]  ? __pfx_nbd_ioctl+0x10/0x10
[  420.565330][ T9572]  ? __asan_memset+0x23/0x50
[  420.569997][ T9572]  ? smack_file_ioctl+0x29e/0x3a0
[  420.575061][ T9572]  ? __pfx_smack_file_ioctl+0x10/0x10
[  420.580472][ T9572]  ? file_to_blk_mode+0xcc/0x140
[  420.585463][ T9572]  ? __pfx_nbd_ioctl+0x10/0x10
[  420.590261][ T9572]  blkdev_ioctl+0x57d/0x6a0
[  420.594807][ T9572]  ? __pfx_blkdev_ioctl+0x10/0x10
[  420.599872][ T9572]  ? __pfx_blkdev_ioctl+0x10/0x10
[  420.604935][ T9572]  __se_sys_ioctl+0xf5/0x170
[  420.609574][ T9572]  do_syscall_64+0xf3/0x230
[  420.614113][ T9572]  ? clear_bhb_loop+0x35/0x90
[  420.618820][ T9572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.624745][ T9572] RIP: 0033:0x7fed2f17e819
[  420.629191][ T9572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  420.648838][ T9572] RSP: 002b:00007fed30039038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  420.657298][ T9572] RAX: ffffffffffffffda RBX: 00007fed2f336080 RCX: 00007fed2f17e819
[  420.665305][ T9572] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004
[  420.673314][ T9572] RBP: 00007fed2f1f175e R08: 0000000000000000 R09: 0000000000000000
[  420.681330][ T9572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  420.689339][ T9572] R13: 0000000000000000 R14: 00007fed2f336080 R15: 00007ffc7d15af78
[  420.697354][ T9572]  </TASK>
[  420.769831][    T9] usb 3-1: USB disconnect, device number 22
[  420.903455][ T5144] block nbd5: Receive control failed (result -32)
[  420.910500][ T5846] block nbd5: Receive control failed (result -32)
[  420.923305][ T9569] block nbd5: shutting down sockets
[  422.077503][ T5919] usb 7-1: USB disconnect, device number 11