last executing test programs:

16m38.71404353s ago: executing program 2 (id=340):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50)

16m37.409789991s ago: executing program 2 (id=341):
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0xd2, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x20)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x4)

16m35.826899766s ago: executing program 2 (id=346):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
io_uring_setup(0x27e3, &(0x7f0000000400)={0x0, 0xd320, 0x800, 0x2, 0x1a0})
syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="0f20c00f22c0f30fc7fb0f01c366420f3a0bfc2266ba6100b8cf5d00006cefef0f32362e0fc4d8c3660f382a2e0f8fcf612753", 0x33}], 0x1, 0xc1, 0x0, 0x0)
r3 = dup(r1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16m31.541406294s ago: executing program 2 (id=352):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9)

16m27.828179876s ago: executing program 2 (id=356):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x6a}, 0x28)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1f, @ipv4={'\x00', '\xff\xff', @empty=0xffffffff}, 0x9373}, 0x1c)
write$binfmt_elf32(r1, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0xd, 0x35, 0x2, 0x7f, 0x8000000000, 0x2, 0x6, 0x3, 0x2fd, 0x38, 0x366, 0x5, 0x0, 0x20, 0x2, 0x3, 0xfff, 0x3}, [{0x3, 0x0, 0x0, 0xffffffff, 0x10000, 0x32c5, 0x4, 0x1}, {0x1474e550, 0x7, 0x3, 0xe, 0x9, 0x7fff, 0x10, 0xff}]}, 0x78)

16m25.008173769s ago: executing program 2 (id=363):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

16m9.431469205s ago: executing program 32 (id=363):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

14m36.935474384s ago: executing program 3 (id=483):
r0 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000000040)=0xfffffffc, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002080)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24004881}, 0xc041)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0)
write(r3, &(0x7f0000000070)='syz0:127.0.0.1', 0xe)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff)
mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0)

14m25.812498999s ago: executing program 3 (id=495):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)

14m22.811186226s ago: executing program 3 (id=496):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000000)={0x0, 0x40001000})

14m20.171731558s ago: executing program 3 (id=500):
socket$inet6(0xa, 0x400000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b405f4aeb70326b50000000000007110263fd3dad2d3895b3fd7e7f81d0000000000c600000000003f009500b31ca0"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1)

14m16.651708181s ago: executing program 3 (id=503):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0)
ioctl$TCXONC(r4, 0x540a, 0x0)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
r5 = open(0x0, 0x200081, 0x19c)
timer_settime(0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000500)={0x7, 0x0, 0x10, 0xfb6, 0x40, 0x1000, 0x1, 0x8, 0x82, 0x1, 0x100, 0xaaf4, &(0x7f0000000240), 0x0, &(0x7f0000000440)="b333c268763463b68f98c35e048aafea97b239e23fbb3d69e90fe07c1a38be148ee0242901d1f797d42d28f70c4e3231b74ec8bb431730ac92bcaf0655f45294d4646304fb1b129713ae5414e9ee9990add8aba20f79fc2c5139122284a493203b767a4ed0f749dd49c784a6039496fdbba107c8247a867cfec20a67f16064cbe56d20403ac08eb33521fb42842ba4b4d0d08f3accee", 0x96})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x2000080, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, r5}, 0x94)

14m6.045201011s ago: executing program 3 (id=509):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f00000016c0)=0xc, 0x4)
pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000480)=@req3={0xaba, 0x6, 0xba7, 0x40000f, 0x8, 0x3, 0x7}, 0x1c)
socket(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x500000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

13m50.644426034s ago: executing program 33 (id=509):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f00000016c0)=0xc, 0x4)
pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x2f)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000480)=@req3={0xaba, 0x6, 0xba7, 0x40000f, 0x8, 0x3, 0x7}, 0x1c)
socket(0x1e, 0x4, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x500000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

11m40.908917344s ago: executing program 4 (id=648):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0)
prlimit64(r0, 0xe, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
r4 = socket(0x10, 0x803, 0x0)
write(r4, 0x0, 0x0)
sendto(r4, &(0x7f0000000380), 0x0, 0x20000090, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000})

11m39.478123473s ago: executing program 4 (id=650):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x800000}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2}, 0x38)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r6=>r4})
ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x2)

11m36.376986835s ago: executing program 4 (id=652):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000009f600000", @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r3 = syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2)
ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000280)={0xd, @capture={0x1000, 0x0, {0x40, 0x5}, 0x8001, 0x3}})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
r4 = openat$hwrng(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000240)=0x1014408, 0x4)
listen(r2, 0x4)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

11m32.975821501s ago: executing program 4 (id=655):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_type(r1, &(0x7f0000000240), 0x9)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r4, &(0x7f0000000380), 0x12)

11m30.966243468s ago: executing program 4 (id=657):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
dup(r2)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"})
r3 = syz_open_pts(r2, 0x80)
dup3(r3, r2, 0x80000)
ioctl$TCSETSW2(r2, 0x402c542c, 0x0)
read(r2, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
getpgid(r1)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x1234, 0x4e22, 0x10002001, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0)

11m25.913224055s ago: executing program 4 (id=661):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r2 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
unshare(0x20060400)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000140)={0x20, 0x6, 0x0, 0x7c, 0x4})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, 0xffffffffffffffff, 0x4})
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write$sysctl(r6, &(0x7f0000000040)='1\x00', 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3}, {0x0, 0xfd}, {0x4, 0x0, 0xfe, 0x10000000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

11m10.372735064s ago: executing program 34 (id=661):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r2 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
unshare(0x20060400)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00')
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000140)={0x20, 0x6, 0x0, 0x7c, 0x4})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, 0xffffffffffffffff, 0x4})
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write$sysctl(r6, &(0x7f0000000040)='1\x00', 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3}, {0x0, 0xfd}, {0x4, 0x0, 0xfe, 0x10000000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

2m49.835215401s ago: executing program 6 (id=1562):
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]})
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})

2m49.655559117s ago: executing program 6 (id=1563):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0xe9d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m49.480673621s ago: executing program 6 (id=1565):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28)
writev(r0, &(0x7f0000003680)=[{&(0x7f0000000140)='X', 0x1}, {&(0x7f0000000300)="2ea6", 0x2}, {&(0x7f0000000580)="63e7", 0x2}, {&(0x7f0000000500)="de", 0x1}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50a", 0xb41}, {&(0x7f0000000640)="15e09d", 0x3}, {&(0x7f0000000740)='\r', 0x1}, {&(0x7f0000000440)="11ac", 0x2}, {&(0x7f0000000540)="fd", 0x1}, {&(0x7f0000000900)="94da", 0x2}, {&(0x7f00000022c0)="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", 0xd41}, {&(0x7f00000032c0)="f6", 0x1}, {&(0x7f0000003380)='P', 0x1}, {&(0x7f0000003440)='C', 0x1}, {&(0x7f0000003500)="cb", 0x1}, {&(0x7f0000003540)="58c2", 0x2}], 0x10)

2m49.351131638s ago: executing program 6 (id=1566):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0)
r0 = syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

2m49.155768304s ago: executing program 6 (id=1568):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000080)=0xc, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

2m46.827524792s ago: executing program 6 (id=1585):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x8)
connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

2m46.211806678s ago: executing program 35 (id=1585):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x8)
connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1m14.484307146s ago: executing program 5 (id=1903):
socket$inet6(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10)

1m12.250144295s ago: executing program 5 (id=1907):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000300)={0x2a, 0x1, 0x13})

1m10.721874091s ago: executing program 5 (id=1908):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0)

1m8.897109397s ago: executing program 5 (id=1910):
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48d5}, 0x8010)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x20800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x14004040)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

1m2.296497962s ago: executing program 5 (id=1925):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x1, 0x0, 0x0, 0xf}]}}, 0x0, 0x26, 0x0, 0x5}, 0x28)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), 0x0)

1m0.082357014s ago: executing program 5 (id=1928):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
chroot(0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011)

43.978969578s ago: executing program 36 (id=1928):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
chroot(0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011)

30.894130594s ago: executing program 8 (id=1960):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x42)

26.945320356s ago: executing program 8 (id=1967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0)

25.656035033s ago: executing program 8 (id=1970):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
r1 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2)
r2 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2)
read(r2, 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x29}, "d52fc25c0d124c156efe12650197f41a541dd95174213049b3a67cee194ba1aee5063bd1582d937157"}, 0x2d)
keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
syz_open_dev$vbi(0x0, 0x0, 0x2)
io_setup(0xb, &(0x7f0000004200)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
mq_notify(0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000680)={0x80})
sendto$rxrpc(r5, &(0x7f0000000100), 0x0, 0x40, 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041})

23.671481031s ago: executing program 0 (id=1972):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

23.230837297s ago: executing program 0 (id=1973):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

23.218774268s ago: executing program 8 (id=1974):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x180001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x5422, 0x0)
r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2})
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r3 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000080)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r7}})
io_uring_enter(r3, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x31, {0x7, 0x8000000000000003}, 0xb}, 0x1)

21.835795063s ago: executing program 8 (id=1977):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x1, {}, 0xfd}, 0x18)
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x0, {0x1, 0x0, 0x4}, 0x4769c32eaf764bef}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

20.132791681s ago: executing program 8 (id=1979):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x28, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
socket$inet6(0xa, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00')
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

16.50873391s ago: executing program 7 (id=1982):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0xff)
socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r0], 0x20)

16.339091303s ago: executing program 0 (id=1983):
syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x401, 0x70bd26, 0xffffffbd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
socketpair(0x28, 0x1, 0x1, &(0x7f0000000100))
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
readv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1)
r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2)
read(r3, &(0x7f0000001e80)=""/96, 0x60)
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0)
r4 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$MON_IOCG_STATS(r4, 0x80089203, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x10, 0x1, 0x0, "3b3ad6f32e978900d10052d0002000000000000000f3ffff05000000ff5bffe8", 0x31435750})
r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020)

16.107534238s ago: executing program 7 (id=1984):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
clock_nanosleep(0x2, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff)
timer_create(0x1, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)

16.050680423s ago: executing program 1 (id=1985):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$key(0xf, 0x3, 0x2)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0)

14.282663367s ago: executing program 7 (id=1986):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="035a02003537a940280012800b00010065727370616e000018000280060010004e2100000500160002"], 0x48}, 0x1, 0x0, 0x0, 0x4000015}, 0x60)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x80c0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)
write(r0, &(0x7f0000000200)='md0', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r2, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001")
ioctl(r2, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006")
ioctl(r2, 0x400c0930, 0x0)
ioctl(r2, 0x933, &(0x7f0000000440)="02")
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000001c0))

13.064415946s ago: executing program 1 (id=1987):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
capset(0x0, 0x0)
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b48, &(0x7f0000000040))
recvmmsg(r2, &(0x7f0000005700), 0x0, 0x0, 0x0)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0)
close(0x3)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020)

12.787607787s ago: executing program 1 (id=1988):
openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0)
fcntl$setpipe(r4, 0x407, 0x100004)
write$eventfd(r4, 0x0, 0x0)

11.150975204s ago: executing program 1 (id=1989):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200076a0ec20749380000000a0304004e234e2202000100ffff00000000000100"/56, @ANYRES32=0x0, @ANYBLOB="050000001306000008000001000000000800030011"], 0x54}}, 0x20004010)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000)
unlink(0x0)

9.936134795s ago: executing program 1 (id=1990):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)
ioctl$RTC_AIE_ON(r6, 0x7001)
ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1})
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0)

9.759531423s ago: executing program 0 (id=1991):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="ab0a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000030086caca"], 0x50)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
dup3(r0, r1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="948bfa8781", 0x5}], 0x1}, 0x8040)
recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x800, 0x0)

7.94100687s ago: executing program 1 (id=1992):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$video(0x0, 0x8, 0x101840)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r5 = semget$private(0x0, 0x3, 0x0)
semctl$GETALL(r5, 0x0, 0xd, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x4b, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

7.606128188s ago: executing program 0 (id=1993):
getrandom(0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)

4.752465493s ago: executing program 37 (id=1979):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x28, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
socket$inet6(0xa, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00')
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

4.682620599s ago: executing program 0 (id=1995):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x20003)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_timeval(r3, 0x1, 0x14, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000002000000732a80ff00000000632ac8ff00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3.905468123s ago: executing program 7 (id=1996):
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x36, 0x2, 0x4, "3bd9e82ea206e410020000cf00e89a00000000268cd21806000000000000007e", 0xb5315258})
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20)
unshare(0x20000400)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
r3 = openat(r2, &(0x7f00000000c0)='./dev/kmsg\x00', 0x0, 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @private=0xa010102}, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001740)={&(0x7f0000000300)={0x1424, r5, 0x800, 0xb, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0x88, 0x3, "52fb7e9ec267c97f9a8214e2c5263fe2ea06b2bd0d6f2916391609d8da9e61e997a6cde5261e77eb648cf8f52274b702ec3e85d241110fba0055de22f907371668288cad5f907f45eabcbefa51139668c5a24cd87929150cb2edb4a0345b3259d024654a709083f4a57e0f7855308b512a9620008aacede205e79c40c1e915ab47de57b1"}, @ETHTOOL_A_WOL_MODES={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff9ac1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf764}]}, @ETHTOOL_A_WOL_MODES={0x10c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0x50, 0x5, "c94357675e6e67b0a588c850c87a5e8dbc67d2a300ff16284c1432b31faadc628c0ef18c9b5aa40f92b5d1531dfb13a5e5a8ca4a66c4a1d785a63467051341d10f6458146a8ce136ef8c75d5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "2f1551692d5bae4fd194a11bcab1da713013237b5f00967e11361b5029f35cd5f884635a05e3ba90678779affc08f04b04be92e3cf544cca5923cd29f242fbad00485abe351297528d5d41afc06b78156cc3095affba50dfc0928149af18cd37f65f3cc2170691eff512ca3e96667660e03fea949acae4c7940c72c7e2e261ccd7a45ba7e55537ac5d32374458d72f2b424e5173b9925beadb454113d723b597221e20"}]}, @ETHTOOL_A_WOL_MODES={0x1090, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x6b, 0x4, "130acd5239da05a546a93e4ae91f7fa9fc201c060963a164cb2fd18b8bca64d771eabbe2c715f7d0549cb5ca6bce40cfe34ea8ff2ed065a6bfedb2394eb6283efd981f8cbbf5436aca4120b9a24af8c7ea2c70350064f9781923318f10bfbf856bcc33382a43c8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_WOL_MODES={0x19c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "04d05736ac161cbff94a787760d400f683569a6450229b6d6a6c1bd678d2883cf1c6a3127325c354cf1db76e30037f74368d25f2544b23ae7118c01d7b28f0f0c33338d930207074bfcb26e9db2dcd6f04224b98dd1a7f779e52155815989d1cf8f4f135d59562c2c2fc7f3098a3a3bcb846896ca5315c42c822700637393c8c309ba3b2678125307378c0ab186e6f12bfe760944db88bb6dd73ca4e683a013f1cc2df2d291f5a1f1bd30224609a33119d79ce"}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "4dbc0fa609156c30d60a114d966af04081bfa81422d65e727c2f8c5c387d5edcdd2bff4999e56ee1fb289d6783855e718db039ab80f648dfa5a4a4d94172eaaff46869abf43e6d4df745718bc16f60d142708649b7ca0a2d3db8a8a23861047e4dd2013f12c8a27fe515d285a91c2a622951c7da0b05c312c8cbcfac201568781b7aa21f0dc1bfc92bb94de63acf21ed3d75053d4f8f1d18f15c1af391f93ead6ba8cf95a55f1a822847567fe8fd83399980231e491087cacb5910b3f00ef28ed2dd0c053d8fd3d0ec2e4b08a5ad76cbea41fb6d505fd631"}]}, @ETHTOOL_A_WOL_SOPASS={0x39, 0x3, "500548e3c6f0c226e8217ab0b70a17d40d7de847413a9c70e32d59f0a857f5bc1f9468ae419f197012e87c6d1d9b6297c100af10fc"}]}, 0x1424}, 0x1, 0x0, 0x0, 0xc458}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20)

2.303484923s ago: executing program 7 (id=1997):
syz_usb_connect(0x3, 0x32, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getrlimit(0xb, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)

0s ago: executing program 7 (id=1998):
timer_create(0x9379631d9b1800b6, &(0x7f0000001c80)={0x0, 0x4, 0x4, @thr={&(0x7f0000000280)="3014a21f7da98a4bc30e905008ab5bf3298c673835a7a6541bf5727a7b20f3389654b6a578d792ac4e2e95833bbaec8056c0635fd58cb07a2a8d4c7f0fd698541a871081e477f6b835b8d76685eba1c9a0bd32d6", &(0x7f0000000c80)}}, &(0x7f0000001cc0)=<r0=>0x0)
timer_delete(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x4, "216827dd"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000340)={0x40, 0xf31fc3f363fd4406, 0x2, {0x2, 0x21}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, &(0x7f0000000780)={0x34, &(0x7f0000000400)={0x0, 0x7, 0xe2, "ecbc801ee80f6dda6cc5f15e7f538182fc0f2603569801cf281903b0b2ef877f69b7fb68feefeb126e2737852cde8392d2268ebdd6dcf14084e45989eb166952f8a7d8a11401628bdec8d2a4ba5b079650147161ae4ba865c651f48eea550c2315986e9951e16240ce60f081514fa2d1709dc18fc0ffe48cec27a2679bbaba5d3e6fda1b3b5a5eb2ed85c2ae80076470eb3793d9c07fd6156b66831f0e80a6ddb7d31a14c9cf9bf68cce3827ddccf7c523dc2e7671cb68f4544e63f34af06c55f303b1f60806f5d530ad25e3397ba90b63d368b0eecc42f38d2d47da98e832cca248"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000640)={0x20, 0x0, 0xb2, {0xb0, "235bc65c7c35cb90cb9c20efb779a27bf76dd9ab6af8911e72f43b01669376859190d8ba95ecee9a8e279e58ad4eb3e11365743b7f88810db3f9fda4698d674e8a6626dc03dccd7c854581541303b9b953cf262b7ae4d33decf386c8b4534b69717eb21ec4d7b201ea124734ee5882ef9cd9d338611056938170c09cdf6327d224c2b7019853c7acfab9ed64c002658dde2e1ab6bed957cc095ee2257a62e7c60b23a4a88080226f8de436677f0c7c97"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0xa}})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000300)={0x1, 'veth1_to_bond\x00', {}, 0x6})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32, @ANYBLOB="140001800800010003000100050003"], 0x2c}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x40, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x733, 0x70bd28, 0x259fdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000080))
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884)
r6 = syz_io_uring_setup(0x7337, &(0x7f0000000100)={0x0, 0xa57b, 0x200, 0x3, 0x111}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))
io_uring_enter(r6, 0x7fa1, 0x2f7c, 0x1, &(0x7f0000000240)={[0xfff]}, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x8000)

kernel console output (not intermixed with test programs):

1 - 0
[  995.949475][   T66] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  996.519361][T10262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  996.519445][T10262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  996.568447][T10998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  997.151016][T11222] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  997.208564][T11222] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  997.219498][T11222] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  997.438876][T11222] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  997.456892][T11222] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  997.571861][T11222] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  997.597852][T11222] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  997.646973][T11222] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  998.032699][T10998] veth0_vlan: entered promiscuous mode
[  998.104925][T10998] veth1_vlan: entered promiscuous mode
[  998.263125][T10998] veth0_macvtap: entered promiscuous mode
[  998.317206][T10998] veth1_macvtap: entered promiscuous mode
[  998.391727][T11222] 8021q: adding VLAN 0 to HW filter on device bond0
[  998.412096][T10998] batman_adv: batadv0: Interface activated: batadv_slave_0
[  998.462310][T10998] batman_adv: batadv0: Interface activated: batadv_slave_1
[  998.512994][T11222] 8021q: adding VLAN 0 to HW filter on device team0
[  998.557082][T10262] bridge0: port 1(bridge_slave_0) entered blocking state
[  998.557382][T10262] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1001.089037][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1001.096439][ T6686] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1001.567303][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'.
[ 1002.218918][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1002.218952][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1002.377987][T10153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1002.761068][   T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1002.763062][ T5895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1002.876294][T11407] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”à�I�ƺ¥þ àø§%
[ 1002.906939][T11411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1163'.
[ 1002.968142][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1002.968224][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1003.399948][   T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.436974][T11222] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1006.497573][T11222] veth0_vlan: entered promiscuous mode
[ 1006.527617][T11222] veth1_vlan: entered promiscuous mode
[ 1006.696522][T11222] veth0_macvtap: entered promiscuous mode
[ 1006.734380][T11222] veth1_macvtap: entered promiscuous mode
[ 1006.872921][T11222] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1007.147581][T11222] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1007.216744][ T5789] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.216869][ T5789] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.217038][ T5789] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1007.217465][ T5789] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1009.129701][T11504] jffs2: notice: (11504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1009.504325][T11510] netlink: 'syz.5.1187': attribute type 2 has an invalid length.
[ 1010.062240][T11516] jffs2: notice: (11516) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1011.248868][T11529] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5586] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11529]
[ 1011.307086][ T5895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1011.307174][ T5895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1011.766268][ T5895] nvmet: connect request for invalid subsystem t!
[ 1011.826891][T11526] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t"
[ 1011.836567][  T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1011.836650][  T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1014.463369][T11572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1014.464523][T11572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1014.580472][T11576] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1213'.
[ 1014.779772][ T5703] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1014.954847][ T5703] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1014.963356][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1014.963416][ T5703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1014.963443][ T5703] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1014.963491][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.062616][ T5703] usb 6-1: config 0 descriptor??
[ 1015.517448][ T5703] hid_parser_main: 30 callbacks suppressed
[ 1015.523646][ T5703] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[ 1015.542356][ T5703] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[ 1015.542394][ T5703] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[ 1015.542425][ T5703] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[ 1015.542454][ T5703] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[ 1015.542483][ T5703] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[ 1015.542513][ T5703] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[ 1015.542543][ T5703] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[ 1015.542571][ T5703] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[ 1015.542599][ T5703] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[ 1015.792983][ T5703] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1016.046129][ T5703] usb 6-1: USB disconnect, device number 2
[ 1016.999775][T10449] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1017.149783][T10449] usb 6-1: Using ep0 maxpacket: 32
[ 1017.152033][T10449] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1017.161617][T10449] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[ 1017.161693][T10449] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1017.161741][T10449] usb 6-1: config 0 has no interface number 0
[ 1017.161837][T10449] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1017.241869][T10449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.241956][T10449] usb 6-1: Product: syz
[ 1017.241975][T10449] usb 6-1: Manufacturer: syz
[ 1017.242043][T10449] usb 6-1: SerialNumber: syz
[ 1017.291148][T10449] usb 6-1: config 0 descriptor??
[ 1017.433902][T10449] radio-si470x 6-1:0.35: could not find interrupt in endpoint
[ 1017.434054][T10449] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5
[ 1017.577270][T10449] radio-raremono 6-1:0.35: this is not Thanko's Raremono.
[ 1017.606620][T10449] usbhid 6-1:0.35: couldn't find an input interrupt endpoint
[ 1019.489448][T11643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1019.500114][T11643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1020.134620][T11650] program syz.0.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1020.327621][ T9116] usb 6-1: USB disconnect, device number 3
[ 1022.399110][T11668] macvlan0: entered promiscuous mode
[ 1022.408656][T11668] netlink: 'syz.6.1252': attribute type 1 has an invalid length.
[ 1022.408685][T11668] netlink: 'syz.6.1252': attribute type 2 has an invalid length.
[ 1022.855682][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1022.862620][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1025.834717][T11702] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2)
[ 1026.670028][T11724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1026.679280][T11724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1031.566448][T11764] FAULT_INJECTION: forcing a failure.
[ 1031.566448][T11764] name failslab, interval 1, probability 0, space 0, times 0
[ 1031.566565][T11764] CPU: 1 UID: 0 PID: 11764 Comm: syz.6.1291 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1031.566706][T11764] Tainted: [L]=SOFTLOCKUP
[ 1031.566729][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1031.566770][T11764] Call Trace:
[ 1031.566799][T11764]  <TASK>
[ 1031.566823][T11764]  dump_stack_lvl+0xe8/0x150
[ 1031.566941][T11764]  should_fail_ex+0x46b/0x600
[ 1031.567038][T11764]  should_failslab+0xa8/0x100
[ 1031.567141][T11764]  ? alloc_empty_file+0x5b/0x1d0
[ 1031.567238][T11764]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1031.567334][T11764]  ? alloc_empty_file+0x5b/0x1d0
[ 1031.567442][T11764]  alloc_empty_file+0x5b/0x1d0
[ 1031.567537][T11764]  alloc_file_pseudo+0x115/0x1e0
[ 1031.567636][T11764]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1031.567731][T11764]  anon_inode_getfile_fmode+0xb0/0x1c0
[ 1031.567849][T11764]  __se_sys_fanotify_init+0x82a/0xb20
[ 1031.567934][T11764]  ? __pfx___se_sys_fanotify_init+0x10/0x10
[ 1031.568034][T11764]  do_syscall_64+0x166/0x520
[ 1031.568064][T11764]  ? trace_irq_disable+0x3b/0x140
[ 1031.568160][T11764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.568240][T11764]  ? clear_bhb_loop+0x70/0xc0
[ 1031.568316][T11764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.568391][T11764] RIP: 0033:0x7fe56ed2e159
[ 1031.568453][T11764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1031.568515][T11764] RSP: 002b:00007fe56cf86028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c
[ 1031.568579][T11764] RAX: ffffffffffffffda RBX: 00007fe56efb5fa0 RCX: 00007fe56ed2e159
[ 1031.568624][T11764] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000008
[ 1031.568661][T11764] RBP: 00007fe56edc503b R08: 0000000000000000 R09: 0000000000000000
[ 1031.568705][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1031.568747][T11764] R13: 00007fe56efb6038 R14: 00007fe56efb5fa0 R15: 00007fff8ea3b9f8
[ 1031.568846][T11764]  </TASK>
[ 1032.792798][T11778] fuse: Bad value for 'fd'
[ 1033.151878][T11786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1299'.
[ 1036.194044][T11806] FAULT_INJECTION: forcing a failure.
[ 1036.194044][T11806] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1036.194154][T11806] CPU: 1 UID: 0 PID: 11806 Comm: syz.6.1307 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1036.194217][T11806] Tainted: [L]=SOFTLOCKUP
[ 1036.194253][T11806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1036.194303][T11806] Call Trace:
[ 1036.194326][T11806]  <TASK>
[ 1036.194351][T11806]  dump_stack_lvl+0xe8/0x150
[ 1036.194439][T11806]  should_fail_ex+0x46b/0x600
[ 1036.194475][T11806]  strncpy_from_user+0x36/0x2c0
[ 1036.194508][T11806]  path_getxattrat+0x162/0x460
[ 1036.194592][T11806]  ? __pfx_path_getxattrat+0x10/0x10
[ 1036.194740][T11806]  ? rcu_is_watching+0x16/0xb0
[ 1036.194881][T11806]  do_syscall_64+0x166/0x520
[ 1036.194964][T11806]  ? trace_irq_disable+0x3b/0x140
[ 1036.195051][T11806]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1036.195128][T11806]  ? clear_bhb_loop+0x70/0xc0
[ 1036.195205][T11806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1036.195280][T11806] RIP: 0033:0x7fe56ed2e159
[ 1036.195343][T11806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1036.195399][T11806] RSP: 002b:00007fe56cf86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1
[ 1036.195471][T11806] RAX: ffffffffffffffda RBX: 00007fe56efb5fa0 RCX: 00007fe56ed2e159
[ 1036.195522][T11806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[ 1036.195565][T11806] RBP: 00007fe56edc503b R08: 0000000000000000 R09: 0000000000000000
[ 1036.195581][T11806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1036.195595][T11806] R13: 00007fe56efb6038 R14: 00007fe56efb5fa0 R15: 00007fff8ea3b9f8
[ 1036.195634][T11806]  </TASK>
[ 1041.466835][T11830] netlink: zone id is out of range
[ 1041.517509][T11831] openvswitch: netlink: Message has 1 unknown bytes.
[ 1041.519427][T11830] netlink: zone id is out of range
[ 1041.519468][T11830] netlink: zone id is out of range
[ 1041.519489][T11830] netlink: zone id is out of range
[ 1041.519517][T11830] netlink: zone id is out of range
[ 1041.684779][T11833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1041.696475][T11833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1042.606032][T11842] FAULT_INJECTION: forcing a failure.
[ 1042.606032][T11842] name failslab, interval 1, probability 0, space 0, times 0
[ 1042.656690][T11842] CPU: 0 UID: 0 PID: 11842 Comm: syz.5.1321 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1042.656730][T11842] Tainted: [L]=SOFTLOCKUP
[ 1042.656739][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1042.656755][T11842] Call Trace:
[ 1042.656764][T11842]  <TASK>
[ 1042.656775][T11842]  dump_stack_lvl+0xe8/0x150
[ 1042.656817][T11842]  should_fail_ex+0x46b/0x600
[ 1042.656854][T11842]  should_failslab+0xa8/0x100
[ 1042.656892][T11842]  ? vm_area_dup+0x28/0x750
[ 1042.656927][T11842]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1042.656960][T11842]  ? vm_area_dup+0x28/0x750
[ 1042.657001][T11842]  vm_area_dup+0x28/0x750
[ 1042.657034][T11842]  ? __split_vma+0x1b7/0xa00
[ 1042.657063][T11842]  __split_vma+0x1d7/0xa00
[ 1042.657100][T11842]  ? __pfx___split_vma+0x10/0x10
[ 1042.657140][T11842]  ? mas_find+0x6d9/0xcb0
[ 1042.657328][T11842]  vms_gather_munmap_vmas+0x4e3/0x1370
[ 1042.657385][T11842]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[ 1042.657431][T11842]  ? mas_walk+0x381/0x490
[ 1042.657469][T11842]  mmap_region+0x940/0x2240
[ 1042.657511][T11842]  ? __pfx_mmap_region+0x10/0x10
[ 1042.657545][T11842]  ? rcu_is_watching+0x16/0xb0
[ 1042.657586][T11842]  ? trace_hrtimer_start+0x82/0x200
[ 1042.657619][T11842]  ? hrtimer_start_range_ns_common+0x841/0xb90
[ 1042.657679][T11842]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1042.657800][T11842]  ? futex_unqueue+0x22/0x240
[ 1042.657861][T11842]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[ 1042.657903][T11842]  ? cap_mmap_addr+0xaf/0x100
[ 1042.657934][T11842]  ? bpf_lsm_mmap_addr+0x9/0x50
[ 1042.657958][T11842]  ? security_mmap_addr+0x71/0x240
[ 1042.657997][T11842]  do_mmap+0xe0e/0x1310
[ 1042.658031][T11842]  ? __pfx_do_mmap+0x10/0x10
[ 1042.658066][T11842]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1042.658129][T11842]  ? rwbase_write_lock+0x550/0x720
[ 1042.658176][T11842]  vm_mmap_pgoff+0x275/0x4e0
[ 1042.658212][T11842]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1042.658240][T11842]  ? rcu_is_watching+0x16/0xb0
[ 1042.658282][T11842]  ? __x64_sys_mmap+0x7f/0x140
[ 1042.658313][T11842]  do_syscall_64+0x166/0x520
[ 1042.658342][T11842]  ? trace_irq_disable+0x3b/0x140
[ 1042.658372][T11842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1042.658397][T11842]  ? clear_bhb_loop+0x70/0xc0
[ 1042.658427][T11842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1042.658452][T11842] RIP: 0033:0x7f06e2c3e159
[ 1042.658474][T11842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1042.658495][T11842] RSP: 002b:00007f06e0e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1042.658522][T11842] RAX: ffffffffffffffda RBX: 00007f06e2ec5fa0 RCX: 00007f06e2c3e159
[ 1042.658583][T11842] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[ 1042.658602][T11842] RBP: 00007f06e2cd503b R08: ffffffffffffffff R09: 0000000000000000
[ 1042.658619][T11842] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[ 1042.658635][T11842] R13: 00007f06e2ec6038 R14: 00007f06e2ec5fa0 R15: 00007ffd9477bc28
[ 1042.658674][T11842]  </TASK>
[ 1043.154496][T11844] kvm [11843]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[ 1044.172978][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'.
[ 1044.308935][T11869] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801
[ 1044.814483][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1044.998147][T11881] block device autoloading is deprecated and will be removed.
[ 1045.030991][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1045.044872][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1045.046453][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1045.046519][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1045.046560][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1045.046585][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1045.046611][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1045.088450][    T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1045.088482][    T9] usb 6-1: Manufacturer: syz
[ 1045.179126][    T9] usb 6-1: config 0 descriptor??
[ 1045.652281][T11891] FAULT_INJECTION: forcing a failure.
[ 1045.652281][T11891] name failslab, interval 1, probability 0, space 0, times 0
[ 1045.652374][T11891] CPU: 1 UID: 0 PID: 11891 Comm: syz.6.1337 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1045.652410][T11891] Tainted: [L]=SOFTLOCKUP
[ 1045.652419][T11891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1045.652434][T11891] Call Trace:
[ 1045.652444][T11891]  <TASK>
[ 1045.652454][T11891]  dump_stack_lvl+0xe8/0x150
[ 1045.652499][T11891]  should_fail_ex+0x46b/0x600
[ 1045.652532][T11891]  ? __d_alloc+0x37/0x6f0
[ 1045.652562][T11891]  should_failslab+0xa8/0x100
[ 1045.652609][T11891]  kmem_cache_alloc_lru_noprof+0xa2/0x680
[ 1045.652644][T11891]  ? __d_alloc+0x37/0x6f0
[ 1045.652677][T11891]  __d_alloc+0x37/0x6f0
[ 1045.652711][T11891]  d_alloc_pseudo+0x21/0xc0
[ 1045.652742][T11891]  alloc_path_pseudo+0x107/0x220
[ 1045.652783][T11891]  ? __pfx_alloc_path_pseudo+0x10/0x10
[ 1045.652832][T11891]  alloc_file_pseudo+0xa8/0x1e0
[ 1045.652872][T11891]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1045.652907][T11891]  ? __kmalloc_cache_noprof+0x3d5/0x680
[ 1045.652940][T11891]  ? __se_sys_memfd_secret+0x14a/0x580
[ 1045.652975][T11891]  ? __se_sys_memfd_secret+0x14a/0x580
[ 1045.653019][T11891]  __se_sys_memfd_secret+0x254/0x580
[ 1045.653062][T11891]  do_syscall_64+0x166/0x520
[ 1045.653092][T11891]  ? trace_irq_disable+0x3b/0x140
[ 1045.653126][T11891]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1045.653152][T11891]  ? clear_bhb_loop+0x70/0xc0
[ 1045.653182][T11891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1045.653214][T11891] RIP: 0033:0x7fe56ed2e159
[ 1045.653236][T11891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1045.653258][T11891] RSP: 002b:00007fe56cf86028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[ 1045.653285][T11891] RAX: ffffffffffffffda RBX: 00007fe56efb5fa0 RCX: 00007fe56ed2e159
[ 1045.653304][T11891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1045.653320][T11891] RBP: 00007fe56edc503b R08: 0000000000000000 R09: 0000000000000000
[ 1045.653335][T11891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1045.653350][T11891] R13: 00007fe56efb6038 R14: 00007fe56efb5fa0 R15: 00007fff8ea3b9f8
[ 1045.653389][T11891]  </TASK>
[ 1045.743093][    T9] rc_core: IR keymap rc-hauppauge not found
[ 1045.743113][    T9] Registered IR keymap rc-empty
[ 1045.916990][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1045.940095][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1045.994416][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1046.022505][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input11
[ 1046.107165][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1046.129890][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1046.149928][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1046.170615][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1046.189848][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1046.211757][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1046.229817][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1046.249989][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1046.269851][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1046.289748][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1046.320440][    T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1046.331736][    T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1046.366345][    T9] usb 6-1: USB disconnect, device number 4
[ 1047.069785][T11910] FAULT_INJECTION: forcing a failure.
[ 1047.069785][T11910] name failslab, interval 1, probability 0, space 0, times 0
[ 1047.083635][T11910] CPU: 0 UID: 0 PID: 11910 Comm: syz.1.1346 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1047.083675][T11910] Tainted: [L]=SOFTLOCKUP
[ 1047.083684][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1047.083699][T11910] Call Trace:
[ 1047.083709][T11910]  <TASK>
[ 1047.083720][T11910]  dump_stack_lvl+0xe8/0x150
[ 1047.083764][T11910]  should_fail_ex+0x46b/0x600
[ 1047.083799][T11910]  should_failslab+0xa8/0x100
[ 1047.083837][T11910]  ? prepare_creds+0x30/0x820
[ 1047.083864][T11910]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1047.083903][T11910]  ? prepare_creds+0x30/0x820
[ 1047.083937][T11910]  prepare_creds+0x30/0x820
[ 1047.083970][T11910]  __sys_setresuid+0x62f/0xc40
[ 1047.084012][T11910]  do_syscall_64+0x166/0x520
[ 1047.084042][T11910]  ? trace_irq_disable+0x3b/0x140
[ 1047.084073][T11910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.084106][T11910]  ? clear_bhb_loop+0x70/0xc0
[ 1047.084137][T11910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.084162][T11910] RIP: 0033:0x7f49314de159
[ 1047.084183][T11910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1047.084204][T11910] RSP: 002b:00007f492f736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075
[ 1047.084231][T11910] RAX: ffffffffffffffda RBX: 00007f4931765fa0 RCX: 00007f49314de159
[ 1047.084250][T11910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[ 1047.084265][T11910] RBP: 00007f493157503b R08: 0000000000000000 R09: 0000000000000000
[ 1047.084280][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1047.084294][T11910] R13: 00007f4931766038 R14: 00007f4931765fa0 R15: 00007ffdce9ad638
[ 1047.084331][T11910]  </TASK>
[ 1047.489778][T11914] FAULT_INJECTION: forcing a failure.
[ 1047.489778][T11914] name failslab, interval 1, probability 0, space 0, times 0
[ 1047.506822][T11914] CPU: 1 UID: 0 PID: 11914 Comm: syz.5.1349 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1047.506864][T11914] Tainted: [L]=SOFTLOCKUP
[ 1047.506874][T11914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1047.506889][T11914] Call Trace:
[ 1047.506899][T11914]  <TASK>
[ 1047.506910][T11914]  dump_stack_lvl+0xe8/0x150
[ 1047.506954][T11914]  should_fail_ex+0x46b/0x600
[ 1047.506988][T11914]  ? __d_alloc+0x37/0x6f0
[ 1047.507016][T11914]  should_failslab+0xa8/0x100
[ 1047.507056][T11914]  kmem_cache_alloc_lru_noprof+0xa2/0x680
[ 1047.507092][T11914]  ? __d_alloc+0x37/0x6f0
[ 1047.507156][T11914]  __d_alloc+0x37/0x6f0
[ 1047.507192][T11914]  d_alloc_pseudo+0x21/0xc0
[ 1047.507221][T11914]  alloc_path_pseudo+0x107/0x220
[ 1047.507265][T11914]  ? __pfx_alloc_path_pseudo+0x10/0x10
[ 1047.507310][T11914]  ? rt_spin_lock+0x1e2/0x400
[ 1047.507350][T11914]  alloc_file_pseudo+0xa8/0x1e0
[ 1047.507391][T11914]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1047.507432][T11914]  ? alloc_fd+0x654/0x6d0
[ 1047.507460][T11914]  sock_alloc_file+0xb8/0x2f0
[ 1047.507484][T11914]  ? __sys_socket+0x12b/0x1b0
[ 1047.507515][T11914]  __sys_socket+0x13f/0x1b0
[ 1047.507547][T11914]  __x64_sys_socket+0x7a/0x90
[ 1047.507584][T11914]  do_syscall_64+0x166/0x520
[ 1047.507613][T11914]  ? trace_irq_disable+0x3b/0x140
[ 1047.507643][T11914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.507668][T11914]  ? clear_bhb_loop+0x70/0xc0
[ 1047.507697][T11914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.507724][T11914] RIP: 0033:0x7f06e2c3e159
[ 1047.507748][T11914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1047.507769][T11914] RSP: 002b:00007f06e0e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1047.507796][T11914] RAX: ffffffffffffffda RBX: 00007f06e2ec5fa0 RCX: 00007f06e2c3e159
[ 1047.507815][T11914] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000018
[ 1047.507830][T11914] RBP: 00007f06e2cd503b R08: 0000000000000000 R09: 0000000000000000
[ 1047.507846][T11914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1047.507861][T11914] R13: 00007f06e2ec6038 R14: 00007f06e2ec5fa0 R15: 00007ffd9477bc28
[ 1047.507899][T11914]  </TASK>
[ 1048.010943][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1048.022692][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1048.043355][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1048.065642][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1048.146187][T11930] ALSA: mixer_oss: invalid OSS volume 'ISO'
[ 1048.233836][T11934] tipc: Started in network mode
[ 1048.238903][T11934] tipc: Node identity 7f000001, cluster identity 4711
[ 1048.258586][T11934] tipc: New replicast peer: 127.0.0.1
[ 1048.297400][T11934] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1048.315717][T11936] tipc: Disabling bearer <udp:syz0>
[ 1048.737026][T11948] jffs2: notice: (11948) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found.
[ 1049.165041][T11958] input: syz1 as /devices/virtual/input/input12
[ 1051.294614][T12006] FAULT_INJECTION: forcing a failure.
[ 1051.294614][T12006] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1051.294718][T12006] CPU: 1 UID: 0 PID: 12006 Comm: syz.6.1384 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1051.294762][T12006] Tainted: [L]=SOFTLOCKUP
[ 1051.294774][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1051.294790][T12006] Call Trace:
[ 1051.294799][T12006]  <TASK>
[ 1051.294809][T12006]  dump_stack_lvl+0xe8/0x150
[ 1051.294852][T12006]  should_fail_ex+0x46b/0x600
[ 1051.294888][T12006]  get_futex_key+0x1b4/0x1580
[ 1051.294937][T12006]  ? __pfx_get_futex_key+0x10/0x10
[ 1051.294971][T12006]  ? __pfx_futex_requeue+0x10/0x10
[ 1051.295009][T12006]  futex_wake+0x119/0x600
[ 1051.295043][T12006]  ? __pfx_futex_wake+0x10/0x10
[ 1051.295071][T12006]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1051.295113][T12006]  do_futex+0x458/0x4e0
[ 1051.295141][T12006]  ? __pfx_do_futex+0x10/0x10
[ 1051.295177][T12006]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1051.295223][T12006]  __se_sys_futex+0x3a8/0x450
[ 1051.295254][T12006]  ? __pfx___se_sys_futex+0x10/0x10
[ 1051.295278][T12006]  ? rcu_is_watching+0x16/0xb0
[ 1051.295321][T12006]  ? __x64_sys_futex+0x21/0xf0
[ 1051.295347][T12006]  do_syscall_64+0x166/0x520
[ 1051.295377][T12006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1051.295402][T12006]  ? clear_bhb_loop+0x70/0xc0
[ 1051.295431][T12006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1051.295455][T12006] RIP: 0033:0x7fe56ed2e159
[ 1051.295477][T12006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1051.295497][T12006] RSP: 002b:00007fe56cf860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1051.295524][T12006] RAX: ffffffffffffffda RBX: 00007fe56efb5fa8 RCX: 00007fe56ed2e159
[ 1051.295542][T12006] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe56efb5fac
[ 1051.295558][T12006] RBP: 00007fe56efb5fa0 R08: 3fffffffffffffff R09: 0000000000000000
[ 1051.295574][T12006] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1051.295590][T12006] R13: 00007fe56efb6038 R14: 00007fff8ea3b910 R15: 00007fff8ea3b9f8
[ 1051.295627][T12006]  </TASK>
[ 1053.679250][T12051] FAULT_INJECTION: forcing a failure.
[ 1053.679250][T12051] name failslab, interval 1, probability 0, space 0, times 0
[ 1053.696457][T12051] CPU: 0 UID: 0 PID: 12051 Comm: syz.6.1402 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1053.696496][T12051] Tainted: [L]=SOFTLOCKUP
[ 1053.696506][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1053.696521][T12051] Call Trace:
[ 1053.696531][T12051]  <TASK>
[ 1053.696631][T12051]  dump_stack_lvl+0xe8/0x150
[ 1053.696682][T12051]  should_fail_ex+0x46b/0x600
[ 1053.696718][T12051]  should_failslab+0xa8/0x100
[ 1053.696767][T12051]  ? __send_signal_locked+0x22c/0xeb0
[ 1053.696796][T12051]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1053.696830][T12051]  ? __send_signal_locked+0x22c/0xeb0
[ 1053.696857][T12051]  ? sig_get_ucounts+0x3e4/0x450
[ 1053.696893][T12051]  __send_signal_locked+0x22c/0xeb0
[ 1053.696929][T12051]  send_signal_locked+0x138/0x9e0
[ 1053.696964][T12051]  ? __pfx_send_signal_locked+0x10/0x10
[ 1053.696989][T12051]  ? rt_spin_lock+0x2d0/0x400
[ 1053.697015][T12051]  ? __pfx_rt_spin_lock+0x10/0x10
[ 1053.697052][T12051]  force_sig_info_to_task+0x31d/0x4b0
[ 1053.697091][T12051]  force_sig_fault+0xf0/0x150
[ 1053.697124][T12051]  ? __pfx_force_sig_fault+0x10/0x10
[ 1053.697160][T12051]  ? __bad_area_nosemaphore+0x31e/0x6a0
[ 1053.697193][T12051]  exc_page_fault+0x6a/0xc0
[ 1053.697222][T12051]  asm_exc_page_fault+0x26/0x30
[ 1053.697246][T12051] RIP: 0033:0x7fe56ed172df
[ 1053.697268][T12051] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c 22 04 00 00 c5 c1 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 21 04 00 00 <c5> fe 6f 06 c5 c5 74 f0 c5 fd d7 ce 48 89 f8 48 83 fa 1f 0f 86 79
[ 1053.697289][T12051] RSP: 002b:00007fe56cf85bd8 EFLAGS: 00010283
[ 1053.697311][T12051] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 1053.697326][T12051] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007fe56cf85c00
[ 1053.697343][T12051] RBP: 00007fe56cf85c00 R08: 0000000000000000 R09: 0000000000000000
[ 1053.697359][T12051] R10: 0000000000000000 R11: 0000000000000000 R12: cccccccccccccccd
[ 1053.697375][T12051] R13: 00007fe56efb6038 R14: 00007fe56efb5fa0 R15: 00007fff8ea3b9f8
[ 1053.697414][T12051]  </TASK>
[ 1054.104590][T12056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1405'.
[ 1054.810810][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.306504][T12085] device-mapper: table: 248:2: thin-pool: Invalid argument count (-EINVAL)
[ 1055.322752][T12086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1055.325265][T12086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1055.355854][T12085] device-mapper: ioctl: error adding target to table
[ 1056.466242][T12109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1056.476708][T12109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1057.147055][T12121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1057.149440][T12121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1057.199723][ T5901] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1057.351758][ T5901] usb 6-1: Using ep0 maxpacket: 32
[ 1057.358992][ T5901] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1057.365061][ T5901] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1057.365140][ T5901] usb 6-1: config 0 has no interface number 0
[ 1057.382495][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1057.382576][ T5901] usb 6-1: Product: syz
[ 1057.382599][ T5901] usb 6-1: Manufacturer: syz
[ 1057.382616][ T5901] usb 6-1: SerialNumber: syz
[ 1057.416904][ T5901] usb 6-1: config 0 descriptor??
[ 1057.471970][ T5901] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1057.472152][ T5901] usb 6-1: selecting invalid altsetting 1
[ 1057.472173][ T5901] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1057.559403][T12130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1057.610733][ T5901] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1057.617829][ T5901] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1057.618047][ T5901] usb 6-1: media controller created
[ 1057.753296][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1058.005661][ T5901] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1058.048964][ T5901] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1058.049912][ T5901] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1058.349519][ T5901] usb 6-1: USB disconnect, device number 5
[ 1059.474523][T12167] fuse: fd is not a fuse device
[ 1059.529714][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1059.689222][    T9] usb 6-1: Using ep0 maxpacket: 8
[ 1059.695071][    T9] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[ 1059.699298][    T9] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[ 1059.699334][    T9] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1059.699451][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1059.699489][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.792650][    T9] usb 6-1: config 0 descriptor??
[ 1060.305386][T12178] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 1060.401335][    T9] input: HID 1532:011d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1532:011D.0004/input/input13
[ 1060.792533][T12183] random: crng reseeded on system resumption
[ 1060.926836][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1459'.
[ 1061.092611][    T9] hid-rmi 0003:1532:011D.0004: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 1532:011d] on usb-dummy_hcd.5-1/input0
[ 1061.135180][    T9] usb 6-1: USB disconnect, device number 6
[ 1061.218078][T12183] FAULT_INJECTION: forcing a failure.
[ 1061.218078][T12183] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1061.218133][T12183] CPU: 1 UID: 0 PID: 12183 Comm: syz.6.1457 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1061.218168][T12183] Tainted: [L]=SOFTLOCKUP
[ 1061.218178][T12183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1061.218192][T12183] Call Trace:
[ 1061.218202][T12183]  <TASK>
[ 1061.218212][T12183]  dump_stack_lvl+0xe8/0x150
[ 1061.218256][T12183]  should_fail_ex+0x46b/0x600
[ 1061.218293][T12183]  prepare_alloc_pages+0x223/0x650
[ 1061.218337][T12183]  __alloc_frozen_pages_noprof+0x1a1/0x5c0
[ 1061.218377][T12183]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1061.218418][T12183]  ? __pfx_policy_nodemask+0x10/0x10
[ 1061.218467][T12183]  alloc_pages_mpol+0xd4/0x280
[ 1061.218510][T12183]  alloc_pages_noprof+0xd2/0x2f0
[ 1061.218537][T12183]  get_zeroed_page_noprof+0x1a/0x90
[ 1061.218573][T12183]  get_image_page+0x36/0x330
[ 1061.218608][T12183]  memory_bm_create+0x738/0xf70
[ 1061.218653][T12183]  create_basic_memory_bitmaps+0x98/0x360
[ 1061.218689][T12183]  snapshot_open+0x1b0/0x290
[ 1061.218723][T12183]  ? __pfx_snapshot_open+0x10/0x10
[ 1061.218762][T12183]  misc_open+0x2de/0x350
[ 1061.218805][T12183]  chrdev_open+0x4dc/0x600
[ 1061.218842][T12183]  ? __pfx_chrdev_open+0x10/0x10
[ 1061.218877][T12183]  ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0
[ 1061.218918][T12183]  ? __pfx_chrdev_open+0x10/0x10
[ 1061.218951][T12183]  do_dentry_open+0x849/0x1420
[ 1061.219001][T12183]  vfs_open+0x3b/0x350
[ 1061.219034][T12183]  ? path_openat+0x142d/0x1d60
[ 1061.219066][T12183]  path_openat+0x1448/0x1d60
[ 1061.219121][T12183]  do_file_open+0x23e/0x4a0
[ 1061.219158][T12183]  ? __pfx_do_file_open+0x10/0x10
[ 1061.219217][T12183]  ? alloc_fd+0x654/0x6d0
[ 1061.219254][T12183]  do_sys_openat2+0x115/0x200
[ 1061.219292][T12183]  ? __se_sys_futex+0x3a8/0x450
[ 1061.219317][T12183]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1061.219359][T12183]  ? rcu_is_watching+0x16/0xb0
[ 1061.219400][T12183]  __x64_sys_openat+0x138/0x170
[ 1061.219444][T12183]  do_syscall_64+0x166/0x520
[ 1061.219480][T12183]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1061.219506][T12183]  ? clear_bhb_loop+0x70/0xc0
[ 1061.219537][T12183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1061.219560][T12183] RIP: 0033:0x7fe56ed2e159
[ 1061.219582][T12183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1061.219603][T12183] RSP: 002b:00007fe56cf86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1061.219629][T12183] RAX: ffffffffffffffda RBX: 00007fe56efb5fa0 RCX: 00007fe56ed2e159
[ 1061.219646][T12183] RDX: 0000000000042801 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1061.219662][T12183] RBP: 00007fe56edc503b R08: 0000000000000000 R09: 0000000000000000
[ 1061.219678][T12183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1061.219692][T12183] R13: 00007fe56efb6038 R14: 00007fe56efb5fa0 R15: 00007fff8ea3b9f8
[ 1061.219730][T12183]  </TASK>
[ 1061.553938][T12189] fido_id[12189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1062.920773][ T1983] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1063.090514][ T1983] usb 6-1: Using ep0 maxpacket: 32
[ 1063.097784][ T1983] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1063.099110][ T1983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.142672][ T1983] usb 6-1: config 0 descriptor??
[ 1063.164963][ T1983] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1063.681939][T12231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1063.692992][T12231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1065.032400][ T1983] gspca_sunplus: reg_w_riv err -71
[ 1065.032575][ T1983] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[ 1065.125546][ T1983] usb 6-1: USB disconnect, device number 7
[ 1073.227457][T12307] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1502'.
[ 1075.264438][T12329] CUSE: unknown device info ""
[ 1075.269519][T12329] CUSE: unknown device info "Ö"
[ 1075.275237][T12329] CUSE: unknown device info "ÚË"
[ 1075.275252][T12329] CUSE: unknown device info ""
[ 1075.275262][T12329] CUSE: unknown device info ""
[ 1075.275272][T12329] CUSE: unknown device info ""
[ 1075.275282][T12329] CUSE: unknown device info "þ"
[ 1075.275292][T12329] CUSE: unknown device info ""
[ 1075.275302][T12329] CUSE: unknown device info "@"
[ 1075.275311][T12329] CUSE: unknown device info "ÿ
"
[ 1075.275320][T12329] CUSE: unknown device info ""
[ 1075.275330][T12329] CUSE: unknown device info "#Û"
[ 1075.275340][T12329] CUSE: unknown device info "ÿÿÿÿ"
[ 1075.275350][T12329] CUSE: unknown device info ""
[ 1075.275359][T12329] CUSE: unknown device info "€"
[ 1075.275371][T12329] CUSE: DEVNAME unspecified
[ 1075.698289][T12342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1075.723360][T12342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1076.280291][ T5593] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[ 1076.440656][ T5593] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[ 1076.451821][ T5593] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1076.457923][ T5593] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 1076.457955][ T5593] usb 6-1: Product: syz
[ 1076.457972][ T5593] usb 6-1: Manufacturer: syz
[ 1076.457988][ T5593] usb 6-1: SerialNumber: syz
[ 1076.501017][ T5593] usb 6-1: config 0 descriptor??
[ 1076.518776][ T5593] keyspan 6-1:0.0: Keyspan 4 port adapter converter detected
[ 1076.526981][ T5593] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81
[ 1076.527103][ T5593] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 88
[ 1076.570772][ T5593] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1
[ 1076.625122][ T5593] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[ 1076.703202][ T5593] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2
[ 1076.843433][ T5593] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[ 1077.888900][ T5593] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4
[ 1077.964533][ T5593] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[ 1077.997927][ T5593] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6
[ 1078.009266][ T5593] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[ 1078.041647][ T5593] usb 6-1: USB disconnect, device number 8
[ 1079.914580][ T5593] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[ 1080.080778][ T5593] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[ 1080.104343][ T5593] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[ 1080.203050][ T5593] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[ 1080.250374][ T5593] keyspan 6-1:0.0: device disconnected
[ 1082.803187][ T8291] Bluetooth: hci4: command 0x0406 tx timeout
[ 1084.051933][T12420] sg_write: data in/out 467008/136 bytes for SCSI command 0x0-- guessing data in;
[ 1084.051933][T12420]    program syz.6.1544 not setting count and/or reply_len properly
[ 1086.306824][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1536'.
[ 1088.615400][ T8690] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1088.632935][ T8291] Bluetooth: hci1: command 0x0406 tx timeout
[ 1093.430635][ T1983] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1093.612989][ T1983] usb 6-1: Using ep0 maxpacket: 32
[ 1093.621688][ T1983] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1093.633884][ T1983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1093.645078][ T1983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1093.645141][ T1983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1093.686934][ T1983] usb 6-1: config 0 descriptor??
[ 1094.078086][ T8690] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1094.152003][ T8690] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1094.155451][ T8690] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1094.157951][ T8690] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1094.191621][ T8690] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1094.295870][ T1983] hid_parser_main: 28 callbacks suppressed
[ 1094.305338][ T1983] ft260 0003:0403:6030.0005: unknown main item tag 0x0
[ 1094.305384][ T1983] ft260 0003:0403:6030.0005: unknown main item tag 0x0
[ 1094.518633][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1094.775444][ T1983] ft260 0003:0403:6030.0005: failed to retrieve chip version
[ 1094.806111][ T1983] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -32
[ 1095.174945][T12587] FAULT_INJECTION: forcing a failure.
[ 1095.174945][T12587] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1095.175043][T12587] CPU: 0 UID: 0 PID: 12587 Comm: syz.1.1597 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1095.175135][T12587] Tainted: [L]=SOFTLOCKUP
[ 1095.175172][T12587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1095.175225][T12587] Call Trace:
[ 1095.175289][T12587]  <TASK>
[ 1095.175329][T12587]  dump_stack_lvl+0xe8/0x150
[ 1095.175435][T12587]  should_fail_ex+0x46b/0x600
[ 1095.175520][T12587]  get_futex_key+0x1b4/0x1580
[ 1095.175640][T12587]  ? __pfx_get_futex_key+0x10/0x10
[ 1095.175759][T12587]  futex_wake+0x119/0x600
[ 1095.175847][T12587]  ? __pfx_futex_wake+0x10/0x10
[ 1095.175913][T12587]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1095.176022][T12587]  do_futex+0x458/0x4e0
[ 1095.176083][T12587]  ? __pfx_do_futex+0x10/0x10
[ 1095.176191][T12587]  ? __might_fault+0xaf/0x130
[ 1095.176282][T12587]  mm_exit_exec_release+0x10d/0x290
[ 1095.176371][T12587]  exit_mm+0x50/0x240
[ 1095.176443][T12587]  do_exit+0x6cd/0x2360
[ 1095.176499][T12587]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1095.176541][T12587]  ? __pfx_do_exit+0x10/0x10
[ 1095.176587][T12587]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1095.176682][T12587]  ? rt_spin_unlock+0x159/0x200
[ 1095.176763][T12587]  do_group_exit+0x22d/0x2f0
[ 1095.176819][T12587]  ? rt_spin_unlock+0x165/0x200
[ 1095.176889][T12587]  get_signal+0x121b/0x12c0
[ 1095.177026][T12587]  arch_do_signal_or_restart+0xbb/0x860
[ 1095.177127][T12587]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1095.177254][T12587]  ? ksys_write+0x248/0x270
[ 1095.177344][T12587]  exit_to_user_mode_loop+0x10e/0x770
[ 1095.177429][T12587]  ? rcu_is_watching+0x16/0xb0
[ 1095.177526][T12587]  do_syscall_64+0x328/0x520
[ 1095.177600][T12587]  ? trace_irq_disable+0x3b/0x140
[ 1095.177680][T12587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1095.177745][T12587]  ? clear_bhb_loop+0x70/0xc0
[ 1095.177814][T12587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1095.177880][T12587] RIP: 0033:0x7f49314de159
[ 1095.177936][T12587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1095.177995][T12587] RSP: 002b:00007f492f7360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1095.178028][T12587] RAX: fffffffffffffe00 RBX: 00007f4931765fa8 RCX: 00007f49314de159
[ 1095.178080][T12587] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4931765fa8
[ 1095.178124][T12587] RBP: 00007f4931765fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1095.178175][T12587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1095.178208][T12587] R13: 00007f4931766038 R14: 00007ffdce9ad550 R15: 00007ffdce9ad638
[ 1095.178303][T12587]  </TASK>
[ 1096.251210][    T9] usb 6-1: USB disconnect, device number 9
[ 1096.521642][   T59] Bluetooth: hci2: command tx timeout
[ 1097.226582][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1097.481991][T12612] FAULT_INJECTION: forcing a failure.
[ 1097.481991][T12612] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1097.537452][T12612] CPU: 0 UID: 0 PID: 12612 Comm: syz.7.1606 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1097.537493][T12612] Tainted: [L]=SOFTLOCKUP
[ 1097.537502][T12612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1097.537518][T12612] Call Trace:
[ 1097.537529][T12612]  <TASK>
[ 1097.537540][T12612]  dump_stack_lvl+0xe8/0x150
[ 1097.537584][T12612]  should_fail_ex+0x46b/0x600
[ 1097.537617][T12612]  copy_folio_from_iter_atomic+0x67d/0x1a30
[ 1097.537664][T12612]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[ 1097.537699][T12612]  ? folio_mapping+0x16f/0x1f0
[ 1097.537737][T12612]  ? shmem_write_begin+0x1ce/0x320
[ 1097.537780][T12612]  generic_perform_write+0x5a8/0x8b0
[ 1097.537821][T12612]  ? __pfx_generic_perform_write+0x10/0x10
[ 1097.537851][T12612]  ? mnt_put_write_access_file+0xc9/0x100
[ 1097.537883][T12612]  ? file_update_time_flags+0x3b1/0x450
[ 1097.537918][T12612]  shmem_file_write_iter+0xfb/0x120
[ 1097.537955][T12612]  do_iter_readv_writev+0x624/0x8d0
[ 1097.537988][T12612]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 1097.538039][T12612]  vfs_writev+0x34c/0x990
[ 1097.538085][T12612]  ? __pfx_vfs_writev+0x10/0x10
[ 1097.538145][T12612]  ? __fget_files+0x2a/0x420
[ 1097.538178][T12612]  ? __fget_files+0x3a8/0x420
[ 1097.538203][T12612]  ? __fget_files+0x2a/0x420
[ 1097.538261][T12612]  __se_sys_pwritev2+0x17a/0x2a0
[ 1097.538299][T12612]  ? __pfx___se_sys_pwritev2+0x10/0x10
[ 1097.538339][T12612]  ? __x64_sys_pwritev2+0x20/0xc0
[ 1097.538374][T12612]  do_syscall_64+0x166/0x520
[ 1097.538408][T12612]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1097.538433][T12612]  ? clear_bhb_loop+0x70/0xc0
[ 1097.538464][T12612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1097.538489][T12612] RIP: 0033:0x7fc95b6be159
[ 1097.538512][T12612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1097.538533][T12612] RSP: 002b:00007fc959916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 1097.538559][T12612] RAX: ffffffffffffffda RBX: 00007fc95b945fa0 RCX: 00007fc95b6be159
[ 1097.538578][T12612] RDX: 000000000000001c RSI: 0000200000000500 RDI: 0000000000000003
[ 1097.538595][T12612] RBP: 00007fc95b75503b R08: 0000000000000000 R09: 0000000000000022
[ 1097.538610][T12612] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000
[ 1097.538625][T12612] R13: 00007fc95b946038 R14: 00007fc95b945fa0 R15: 00007ffcb9ec44c8
[ 1097.538664][T12612]  </TASK>
[ 1098.601980][   T59] Bluetooth: hci2: command tx timeout
[ 1099.116076][T12641] kvm: emulating exchange as write
[ 1099.156957][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1099.956287][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.682001][   T59] Bluetooth: hci2: command tx timeout
[ 1102.040831][T12567] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1102.041323][T12567] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1102.041962][T12567] bridge_slave_0: entered allmulticast mode
[ 1102.062008][T12567] bridge_slave_0: entered promiscuous mode
[ 1102.098750][T12567] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1102.099127][T12567] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1102.105620][T12567] bridge_slave_1: entered allmulticast mode
[ 1102.148337][T12567] bridge_slave_1: entered promiscuous mode
[ 1102.438387][T12709] af_packet: packet size is too long (198146 > 2016)
[ 1102.716846][T12567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1102.767010][   T59] Bluetooth: hci2: command tx timeout
[ 1102.805378][T12567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1103.395226][T12567] team0: Port device team_slave_0 added
[ 1103.697189][T12567] team0: Port device team_slave_1 added
[ 1104.007557][   T13] bridge_slave_1: left allmulticast mode
[ 1104.009830][   T13] bridge_slave_1: left promiscuous mode
[ 1104.010115][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1104.392997][   T13] bridge_slave_0: left allmulticast mode
[ 1104.393097][   T13] bridge_slave_0: left promiscuous mode
[ 1104.393721][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1104.516225][T12776] Bluetooth: hci0: load_link_keys: too big key_count value 65280
[ 1104.789289][T12781] FAULT_INJECTION: forcing a failure.
[ 1104.789289][T12781] name failslab, interval 1, probability 0, space 0, times 0
[ 1104.808648][T12781] CPU: 1 UID: 0 PID: 12781 Comm: syz.7.1657 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1104.808687][T12781] Tainted: [L]=SOFTLOCKUP
[ 1104.808696][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1104.808710][T12781] Call Trace:
[ 1104.808720][T12781]  <TASK>
[ 1104.808730][T12781]  dump_stack_lvl+0xe8/0x150
[ 1104.808773][T12781]  should_fail_ex+0x46b/0x600
[ 1104.808808][T12781]  should_failslab+0xa8/0x100
[ 1104.808841][T12781]  ? __anon_vma_prepare+0x10e/0x4d0
[ 1104.808868][T12781]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1104.808901][T12781]  ? __anon_vma_prepare+0xc3/0x4d0
[ 1104.808927][T12781]  ? __anon_vma_prepare+0x10e/0x4d0
[ 1104.808961][T12781]  __anon_vma_prepare+0x10e/0x4d0
[ 1104.808994][T12781]  do_pte_missing+0x1d2a/0x28f0
[ 1104.809039][T12781]  ? rt_spin_unlock+0x165/0x200
[ 1104.809066][T12781]  ? __pmd_alloc+0x41b/0x5e0
[ 1104.809097][T12781]  handle_mm_fault+0xf64/0x28c0
[ 1104.809140][T12781]  ? handle_mm_fault+0xeb/0x28c0
[ 1104.809165][T12781]  ? mt_find+0x186/0x630
[ 1104.809204][T12781]  ? __pfx_mt_find+0x10/0x10
[ 1104.809243][T12781]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1104.809298][T12781]  __get_user_pages+0x1676/0x2650
[ 1104.809359][T12781]  get_user_pages_remote+0x307/0xb10
[ 1104.809388][T12781]  ? __pfx_down_read+0x10/0x10
[ 1104.809422][T12781]  ? __pfx_get_user_pages_remote+0x10/0x10
[ 1104.809451][T12781]  ? mmap_read_lock_maybe_expand+0xd7/0x3b0
[ 1104.809487][T12781]  copy_string_kernel+0x2f9/0x5f0
[ 1104.809534][T12781]  ? __pfx_copy_string_kernel+0x10/0x10
[ 1104.809562][T12781]  ? rt_spin_unlock+0x165/0x200
[ 1104.809585][T12781]  ? alloc_bprm+0x588/0x640
[ 1104.809613][T12781]  do_execveat_common+0x373/0x670
[ 1104.809646][T12781]  __x64_sys_execve+0x97/0xc0
[ 1104.809674][T12781]  do_syscall_64+0x166/0x520
[ 1104.809702][T12781]  ? trace_irq_disable+0x3b/0x140
[ 1104.809737][T12781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.809761][T12781]  ? clear_bhb_loop+0x70/0xc0
[ 1104.809788][T12781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1104.809810][T12781] RIP: 0033:0x7fc95b6be159
[ 1104.809833][T12781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1104.809853][T12781] RSP: 002b:00007fc959916028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[ 1104.809878][T12781] RAX: ffffffffffffffda RBX: 00007fc95b945fa0 RCX: 00007fc95b6be159
[ 1104.809895][T12781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000019100
[ 1104.809910][T12781] RBP: 00007fc95b75503b R08: 0000000000000000 R09: 0000000000000000
[ 1104.809925][T12781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1104.809940][T12781] R13: 00007fc95b946038 R14: 00007fc95b945fa0 R15: 00007ffcb9ec44c8
[ 1104.809976][T12781]  </TASK>
[ 1106.310571][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1106.372821][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1106.412735][   T13] bond0 (unregistering): Released all slaves
[ 1106.838242][T12795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1106.850509][T12795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1106.900422][ T5242] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1107.125114][T12802] FAULT_INJECTION: forcing a failure.
[ 1107.125114][T12802] name failslab, interval 1, probability 0, space 0, times 0
[ 1107.140280][T12802] CPU: 0 UID: 0 PID: 12802 Comm: syz.1.1664 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1107.140390][T12802] Tainted: [L]=SOFTLOCKUP
[ 1107.140414][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1107.140454][T12802] Call Trace:
[ 1107.140482][T12802]  <TASK>
[ 1107.140506][T12802]  dump_stack_lvl+0xe8/0x150
[ 1107.140623][T12802]  should_fail_ex+0x46b/0x600
[ 1107.140719][T12802]  should_failslab+0xa8/0x100
[ 1107.140822][T12802]  kmem_cache_alloc_node_noprof+0xac/0x660
[ 1107.140901][T12802]  ? __alloc_skb+0x1db/0x7a0
[ 1107.140984][T12802]  ? __alloc_skb+0x1db/0x7a0
[ 1107.141081][T12802]  __alloc_skb+0x1db/0x7a0
[ 1107.141157][T12802]  tipc_msg_build+0x15f/0xf50
[ 1107.141351][T12802]  ? __pfx_tipc_msg_build+0x10/0x10
[ 1107.141474][T12802]  ? tipc_sk_filtering+0x13c/0x510
[ 1107.141627][T12802]  __tipc_sendstream+0x8f4/0x12a0
[ 1107.141799][T12802]  ? __pfx___tipc_sendstream+0x10/0x10
[ 1107.141871][T12802]  ? __pfx_woken_wake_function+0x10/0x10
[ 1107.141950][T12802]  ? __local_bh_enable_ip+0x1ad/0x2b0
[ 1107.142036][T12802]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1107.142133][T12802]  tipc_sendstream+0x55/0x70
[ 1107.142197][T12802]  ? __pfx_tipc_sendstream+0x10/0x10
[ 1107.142259][T12802]  sock_sendmsg_nosec+0x13a/0x180
[ 1107.142344][T12802]  ____sys_sendmsg+0x565/0x870
[ 1107.142473][T12802]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1107.142600][T12802]  ? import_iovec+0x73/0xa0
[ 1107.142667][T12802]  ___sys_sendmsg+0x2a5/0x360
[ 1107.142701][T12802]  ? __lock_acquire+0x747/0x2de0
[ 1107.142743][T12802]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1107.142870][T12802]  ? futex_wait+0x2a2/0x390
[ 1107.143040][T12802]  ? __fget_files+0x2a/0x420
[ 1107.143103][T12802]  ? __fget_files+0x3a8/0x420
[ 1107.143205][T12802]  __x64_sys_sendmsg+0x1b7/0x290
[ 1107.143313][T12802]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1107.143474][T12802]  do_syscall_64+0x166/0x520
[ 1107.143545][T12802]  ? trace_irq_disable+0x3b/0x140
[ 1107.143628][T12802]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1107.143697][T12802]  ? clear_bhb_loop+0x70/0xc0
[ 1107.143771][T12802]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1107.143835][T12802] RIP: 0033:0x7f49314de159
[ 1107.143903][T12802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1107.143951][T12802] RSP: 002b:00007f492f715028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1107.144021][T12802] RAX: ffffffffffffffda RBX: 00007f4931766090 RCX: 00007f49314de159
[ 1107.144065][T12802] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004
[ 1107.144106][T12802] RBP: 00007f493157503b R08: 0000000000000000 R09: 0000000000000000
[ 1107.144157][T12802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1107.144191][T12802] R13: 00007f4931766128 R14: 00007f4931766090 R15: 00007ffdce9ad638
[ 1107.144251][T12802]  </TASK>
[ 1107.661463][T12808] FAULT_INJECTION: forcing a failure.
[ 1107.661463][T12808] name failslab, interval 1, probability 0, space 0, times 0
[ 1107.721928][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.0.1667 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1107.721959][T12808] Tainted: [L]=SOFTLOCKUP
[ 1107.721965][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1107.721998][T12808] Call Trace:
[ 1107.722010][T12808]  <TASK>
[ 1107.722023][T12808]  dump_stack_lvl+0xe8/0x150
[ 1107.722071][T12808]  should_fail_ex+0x46b/0x600
[ 1107.722116][T12808]  should_failslab+0xa8/0x100
[ 1107.722145][T12808]  ? radix_tree_node_alloc+0xd0/0x400
[ 1107.722231][T12808]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1107.722255][T12808]  ? radix_tree_node_alloc+0xd0/0x400
[ 1107.722281][T12808]  radix_tree_node_alloc+0xd0/0x400
[ 1107.722308][T12808]  idr_get_free+0x295/0xa20
[ 1107.722338][T12808]  idr_alloc_u32+0x190/0x340
[ 1107.722389][T12808]  ? __pfx_idr_alloc_u32+0x10/0x10
[ 1107.722415][T12808]  ? rt_spin_lock+0x210/0x400
[ 1107.722437][T12808]  idr_alloc_cyclic+0xa2/0x1c0
[ 1107.722461][T12808]  ? btf_new_fd+0x738/0xc10
[ 1107.722513][T12808]  btf_new_fd+0x770/0xc10
[ 1107.722556][T12808]  __sys_bpf+0xd2e/0xd90
[ 1107.722603][T12808]  ? __pfx___sys_bpf+0x10/0x10
[ 1107.722641][T12808]  ? do_futex+0x3e7/0x4e0
[ 1107.722684][T12808]  ? rcu_is_watching+0x16/0xb0
[ 1107.722717][T12808]  __x64_sys_bpf+0xba/0xd0
[ 1107.722742][T12808]  do_syscall_64+0x166/0x520
[ 1107.722764][T12808]  ? trace_irq_disable+0x3b/0x140
[ 1107.722786][T12808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1107.722805][T12808]  ? clear_bhb_loop+0x70/0xc0
[ 1107.722826][T12808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1107.722845][T12808] RIP: 0033:0x7fbcb0bee159
[ 1107.722887][T12808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1107.722907][T12808] RSP: 002b:00007fbcaee46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1107.722933][T12808] RAX: ffffffffffffffda RBX: 00007fbcb0e75fa0 RCX: 00007fbcb0bee159
[ 1107.722952][T12808] RDX: 0000000000000028 RSI: 0000200000000200 RDI: 0000000000000012
[ 1107.722967][T12808] RBP: 00007fbcb0c8503b R08: 0000000000000000 R09: 0000000000000000
[ 1107.722983][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1107.722997][T12808] R13: 00007fbcb0e76038 R14: 00007fbcb0e75fa0 R15: 00007ffd7b9c2198
[ 1107.723038][T12808]  </TASK>
[ 1108.088616][T12567] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1108.095928][T12567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1108.095962][T12567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1108.172570][T12567] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1108.172659][T12567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1108.172695][T12567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1108.376694][T12812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1108.387402][T12812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1108.729888][T12567] hsr_slave_0: entered promiscuous mode
[ 1108.731999][T12567] hsr_slave_1: entered promiscuous mode
[ 1108.734285][T12567] debugfs: 'hsr0' already exists in 'hsr'
[ 1108.734361][T12567] Cannot create hsr debugfs directory
[ 1109.231607][ T9116] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1109.389747][ T9116] usb 6-1: Using ep0 maxpacket: 32
[ 1109.395917][ T9116] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1109.398044][ T9116] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1109.398081][ T9116] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1109.398136][ T9116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1109.472308][ T9116] usb 6-1: config 0 descriptor??
[ 1109.501561][ T9116] hub 6-1:0.0: USB hub found
[ 1109.722044][ T9116] hub 6-1:0.0: 1 port detected
[ 1110.406979][ T5901] hub 6-1:0.0: activate --> -90
[ 1110.671314][ T5242] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1110.826024][    T9] usb 6-1: USB disconnect, device number 10
[ 1110.902543][ T9551] usb 6-1: Failed to suspend device, error -19
[ 1110.966945][   T13] hsr_slave_0: left promiscuous mode
[ 1111.003403][   T13] hsr_slave_1: left promiscuous mode
[ 1111.011289][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1111.013279][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1111.045871][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1111.045968][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1111.315776][   T13] veth1_macvtap: left promiscuous mode
[ 1111.316026][   T13] veth0_macvtap: left promiscuous mode
[ 1111.317748][   T13] veth1_vlan: left promiscuous mode
[ 1111.318119][   T13] veth0_vlan: left promiscuous mode
[ 1114.688574][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1697'.
[ 1114.955891][T12910] loop5: detected capacity change from 0 to 7
[ 1114.969508][T12910]  loop5: p1 < > p3 p4 < p5 >
[ 1114.980625][T12910] loop5: partition table partially beyond EOD, truncated
[ 1115.557866][T12367] udevd[12367]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[ 1115.577532][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1115.610292][T12898] udevd[12898]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[ 1115.631704][T12370] udevd[12370]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[ 1115.644103][T12284] udevd[12284]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[ 1115.782277][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1116.044908][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.352956][T12917] Invalid option length (1048488) for dns_resolver key
[ 1116.397790][T12897] FAULT_INJECTION: forcing a failure.
[ 1116.397790][T12897] name failslab, interval 1, probability 0, space 0, times 0
[ 1116.397833][T12897] CPU: 0 UID: 0 PID: 12897 Comm: syz.1.1693 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1116.397872][T12897] Tainted: [L]=SOFTLOCKUP
[ 1116.397881][T12897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1116.397895][T12897] Call Trace:
[ 1116.397904][T12897]  <TASK>
[ 1116.397915][T12897]  dump_stack_lvl+0xe8/0x150
[ 1116.397964][T12897]  should_fail_ex+0x46b/0x600
[ 1116.398000][T12897]  should_failslab+0xa8/0x100
[ 1116.398041][T12897]  kmem_cache_alloc_node_noprof+0xac/0x660
[ 1116.398075][T12897]  ? __alloc_skb+0x1db/0x7a0
[ 1116.398104][T12897]  ? __alloc_skb+0x1db/0x7a0
[ 1116.398143][T12897]  __alloc_skb+0x1db/0x7a0
[ 1116.398184][T12897]  netlink_ack+0x136/0xb30
[ 1116.398219][T12897]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1116.398248][T12897]  ? ref_tracker_free+0x668/0x820
[ 1116.398280][T12897]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1116.398307][T12897]  ? __asan_memcpy+0x40/0x70
[ 1116.398369][T12897]  netlink_rcv_skb+0x2a4/0x4a0
[ 1116.398395][T12897]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1116.398438][T12897]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1116.398475][T12897]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1116.398497][T12897]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1116.398527][T12897]  netlink_unicast+0x7f5/0x990
[ 1116.398575][T12897]  netlink_sendmsg+0x813/0xb40
[ 1116.398605][T12897]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1116.398638][T12897]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1116.398665][T12897]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1116.398713][T12897]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1116.398737][T12897]  sock_sendmsg_nosec+0x13a/0x180
[ 1116.398769][T12897]  ____sys_sendmsg+0x565/0x870
[ 1116.398813][T12897]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1116.398861][T12897]  ? import_iovec+0x73/0xa0
[ 1116.398896][T12897]  ___sys_sendmsg+0x2a5/0x360
[ 1116.398930][T12897]  ? __lock_acquire+0x747/0x2de0
[ 1116.398972][T12897]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1116.399014][T12897]  ? futex_wait+0x2a2/0x390
[ 1116.399073][T12897]  ? __fget_files+0x2a/0x420
[ 1116.399098][T12897]  ? __fget_files+0x3a8/0x420
[ 1116.399134][T12897]  __x64_sys_sendmsg+0x1b7/0x290
[ 1116.399172][T12897]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1116.399232][T12897]  do_syscall_64+0x166/0x520
[ 1116.399260][T12897]  ? trace_irq_disable+0x3b/0x140
[ 1116.399290][T12897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.399315][T12897]  ? clear_bhb_loop+0x70/0xc0
[ 1116.399343][T12897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.399372][T12897] RIP: 0033:0x7f49314de159
[ 1116.399394][T12897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1116.399415][T12897] RSP: 002b:00007f492f736028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1116.399440][T12897] RAX: ffffffffffffffda RBX: 00007f4931765fa0 RCX: 00007f49314de159
[ 1116.399481][T12897] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1116.399496][T12897] RBP: 00007f493157503b R08: 0000000000000000 R09: 0000000000000000
[ 1116.399510][T12897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1116.399524][T12897] R13: 00007f4931766038 R14: 00007f4931765fa0 R15: 00007ffdce9ad638
[ 1116.399558][T12897]  </TASK>
[ 1116.890168][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1702'.
[ 1117.661573][   T57] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1117.661800][   T57] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1117.661845][   T57] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1117.661896][   T57] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1120.407776][T12977] FAULT_INJECTION: forcing a failure.
[ 1120.407776][T12977] name failslab, interval 1, probability 0, space 0, times 0
[ 1120.421918][T12977] CPU: 1 UID: 0 PID: 12977 Comm: syz.7.1718 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1120.421959][T12977] Tainted: [L]=SOFTLOCKUP
[ 1120.421967][T12977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1120.421982][T12977] Call Trace:
[ 1120.421993][T12977]  <TASK>
[ 1120.422003][T12977]  dump_stack_lvl+0xe8/0x150
[ 1120.422050][T12977]  should_fail_ex+0x46b/0x600
[ 1120.422086][T12977]  should_failslab+0xa8/0x100
[ 1120.422123][T12977]  ? alloc_empty_file+0x5b/0x1d0
[ 1120.422161][T12977]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1120.422193][T12977]  ? alloc_empty_file+0x5b/0x1d0
[ 1120.422235][T12977]  alloc_empty_file+0x5b/0x1d0
[ 1120.422268][T12977]  alloc_file_pseudo+0x115/0x1e0
[ 1120.422307][T12977]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1120.422347][T12977]  ? alloc_fd+0x654/0x6d0
[ 1120.422375][T12977]  sock_alloc_file+0xb8/0x2f0
[ 1120.422400][T12977]  ? __sys_socket+0x12b/0x1b0
[ 1120.422431][T12977]  __sys_socket+0x13f/0x1b0
[ 1120.422465][T12977]  __x64_sys_socket+0x7a/0x90
[ 1120.422496][T12977]  do_syscall_64+0x166/0x520
[ 1120.422527][T12977]  ? trace_irq_disable+0x3b/0x140
[ 1120.422558][T12977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1120.422583][T12977]  ? clear_bhb_loop+0x70/0xc0
[ 1120.422611][T12977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1120.422634][T12977] RIP: 0033:0x7fc95b6be159
[ 1120.422657][T12977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1120.422687][T12977] RSP: 002b:00007fc959915fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1120.422712][T12977] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fc95b6be159
[ 1120.422731][T12977] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000024
[ 1120.422745][T12977] RBP: 00007fc95b75503b R08: 0000000000000000 R09: 0000000000000000
[ 1120.422761][T12977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1120.422774][T12977] R13: 00007fc95b946038 R14: 00007fc95b945fa0 R15: 00007ffcb9ec44c8
[ 1120.422809][T12977]  </TASK>
[ 1121.013961][ T5242] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1121.254093][T12994] FAULT_INJECTION: forcing a failure.
[ 1121.254093][T12994] name failslab, interval 1, probability 0, space 0, times 0
[ 1121.303539][T12994] CPU: 0 UID: 0 PID: 12994 Comm: syz.0.1724 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1121.303580][T12994] Tainted: [L]=SOFTLOCKUP
[ 1121.303590][T12994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1121.303605][T12994] Call Trace:
[ 1121.303615][T12994]  <TASK>
[ 1121.303625][T12994]  dump_stack_lvl+0xe8/0x150
[ 1121.303669][T12994]  should_fail_ex+0x46b/0x600
[ 1121.303706][T12994]  should_failslab+0xa8/0x100
[ 1121.303745][T12994]  __kmalloc_noprof+0xfb/0x790
[ 1121.303778][T12994]  ? security_sb_alloc+0x48/0x310
[ 1121.303810][T12994]  ? security_sb_alloc+0x48/0x310
[ 1121.303850][T12994]  security_sb_alloc+0x48/0x310
[ 1121.303888][T12994]  sget_fc+0x984/0x1a60
[ 1121.303924][T12994]  ? __pfx_set_anon_super_fc+0x10/0x10
[ 1121.303953][T12994]  ? __pfx_sget_fc+0x10/0x10
[ 1121.303985][T12994]  ? rcu_is_watching+0x16/0xb0
[ 1121.304029][T12994]  ? cap_capable+0x123/0x460
[ 1121.304054][T12994]  ? __pfx_bpf_fill_super+0x10/0x10
[ 1121.304088][T12994]  get_tree_nodev+0x2a/0x150
[ 1121.304119][T12994]  vfs_get_tree+0x92/0x2a0
[ 1121.304152][T12994]  vfs_cmd_create+0xa2/0x200
[ 1121.304191][T12994]  __se_sys_fsconfig+0x6bf/0x810
[ 1121.304234][T12994]  ? __pfx___se_sys_fsconfig+0x10/0x10
[ 1121.304272][T12994]  ? rcu_is_watching+0x16/0xb0
[ 1121.304317][T12994]  ? __x64_sys_fsconfig+0x20/0xc0
[ 1121.304354][T12994]  do_syscall_64+0x166/0x520
[ 1121.304385][T12994]  ? trace_irq_disable+0x3b/0x140
[ 1121.304416][T12994]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1121.304442][T12994]  ? clear_bhb_loop+0x70/0xc0
[ 1121.304478][T12994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1121.304513][T12994] RIP: 0033:0x7fbcb0bee159
[ 1121.304536][T12994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1121.304558][T12994] RSP: 002b:00007fbcaee46028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[ 1121.304586][T12994] RAX: ffffffffffffffda RBX: 00007fbcb0e75fa0 RCX: 00007fbcb0bee159
[ 1121.304604][T12994] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 1121.304619][T12994] RBP: 00007fbcb0c8503b R08: 0000000000000000 R09: 0000000000000000
[ 1121.304635][T12994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1121.304650][T12994] R13: 00007fbcb0e76038 R14: 00007fbcb0e75fa0 R15: 00007ffd7b9c2198
[ 1121.304690][T12994]  </TASK>
[ 1122.400283][T12567] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1122.566364][T12567] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1122.590830][T12567] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1122.657554][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1730'.
[ 1122.732302][T12567] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1122.779739][T12567] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1122.852360][T12567] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1122.884378][T12567] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1123.046504][T12567] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1123.647037][T13044] input: syz1 as /devices/virtual/input/input14
[ 1123.793812][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1123.845808][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1124.087689][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1124.088387][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1124.100847][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1124.102512][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1124.245125][ T5242] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1124.311575][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1124.322849][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1124.569142][T10449] kernel read not supported for file /trace_pipe (pid: 10449 comm: kworker/0:6)
[ 1124.592378][T12567] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1124.708758][T12567] 8021q: adding VLAN 0 to HW filter on device team0
[ 1124.785241][T10153] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1124.785469][T10153] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1124.836554][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1124.922344][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1127.185289][T12567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1129.380052][T12567] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1130.314082][T12567] veth0_vlan: entered promiscuous mode
[ 1130.356288][T12567] veth1_vlan: entered promiscuous mode
[ 1130.739898][T12567] veth0_macvtap: entered promiscuous mode
[ 1130.807490][T12567] veth1_macvtap: entered promiscuous mode
[ 1130.886204][T12567] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1131.093674][T12567] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1131.454032][ T5896] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1131.454713][ T5896] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1131.455144][ T5896] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1131.459661][ T5896] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1133.226071][  T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1133.234184][  T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1134.241235][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1134.249263][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1135.042817][T13220] FAULT_INJECTION: forcing a failure.
[ 1135.042817][T13220] name failslab, interval 1, probability 0, space 0, times 0
[ 1135.130211][T13220] CPU: 1 UID: 0 PID: 13220 Comm: syz.1.1772 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1135.130251][T13220] Tainted: [L]=SOFTLOCKUP
[ 1135.130260][T13220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1135.130273][T13220] Call Trace:
[ 1135.130282][T13220]  <TASK>
[ 1135.130292][T13220]  dump_stack_lvl+0xe8/0x150
[ 1135.130332][T13220]  should_fail_ex+0x46b/0x600
[ 1135.130377][T13220]  should_failslab+0xa8/0x100
[ 1135.130414][T13220]  __kmalloc_cache_noprof+0xa1/0x680
[ 1135.130444][T13220]  ? tipc_net+0x45/0x270
[ 1135.130470][T13220]  ? tipc_topsrv_queue_evt+0xec/0x300
[ 1135.130494][T13220]  ? tipc_topsrv_queue_evt+0xec/0x300
[ 1135.130528][T13220]  tipc_topsrv_queue_evt+0xec/0x300
[ 1135.130560][T13220]  tipc_sub_report_overlap+0x4bd/0x8b0
[ 1135.130601][T13220]  tipc_nametbl_insert_publ+0xe12/0x1380
[ 1135.130640][T13220]  ? tipc_nametbl_insert_publ+0x4e9/0x1380
[ 1135.130683][T13220]  ? tipc_nametbl_publish+0x9d/0x2c0
[ 1135.130717][T13220]  tipc_nametbl_publish+0x13e/0x2c0
[ 1135.130747][T13220]  ? tipc_nametbl_publish+0x9d/0x2c0
[ 1135.130782][T13220]  tipc_sk_publish+0x1cd/0x430
[ 1135.130825][T13220]  ? __pfx_tipc_sk_publish+0x10/0x10
[ 1135.130868][T13220]  ? tipc_nametbl_build_group+0x2e/0x530
[ 1135.130897][T13220]  ? tipc_nametbl_build_group+0x4f9/0x530
[ 1135.130927][T13220]  ? tipc_nametbl_build_group+0x2e/0x530
[ 1135.130965][T13220]  tipc_sk_join+0x3b3/0x6a0
[ 1135.130998][T13220]  ? __pfx_tipc_sk_join+0x10/0x10
[ 1135.131024][T13220]  ? __local_bh_enable_ip+0x1ad/0x2b0
[ 1135.131056][T13220]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1135.131090][T13220]  tipc_setsockopt+0x73e/0x9a0
[ 1135.131120][T13220]  ? __pfx_tipc_setsockopt+0x10/0x10
[ 1135.131142][T13220]  ? __fget_files+0x2a/0x420
[ 1135.131169][T13220]  ? __fget_files+0x2a/0x420
[ 1135.131190][T13220]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1135.131211][T13220]  ? __pfx_tipc_setsockopt+0x10/0x10
[ 1135.131236][T13220]  do_sock_setsockopt+0x17c/0x1b0
[ 1135.131278][T13220]  __x64_sys_setsockopt+0x143/0x1b0
[ 1135.131318][T13220]  do_syscall_64+0x166/0x520
[ 1135.131349][T13220]  ? trace_irq_disable+0x3b/0x140
[ 1135.131381][T13220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1135.131405][T13220]  ? clear_bhb_loop+0x70/0xc0
[ 1135.131434][T13220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1135.131457][T13220] RIP: 0033:0x7f49314de159
[ 1135.131480][T13220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1135.131500][T13220] RSP: 002b:00007f492f736028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1135.131526][T13220] RAX: ffffffffffffffda RBX: 00007f4931765fa0 RCX: 00007f49314de159
[ 1135.131541][T13220] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005
[ 1135.131555][T13220] RBP: 00007f493157503b R08: 0000000000000010 R09: 0000000000000000
[ 1135.131568][T13220] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[ 1135.131581][T13220] R13: 00007f4931766038 R14: 00007f4931765fa0 R15: 00007ffdce9ad638
[ 1135.131614][T13220]  </TASK>
[ 1136.347491][   T38] audit: type=1800 audit(1788909751.057:16): pid=13232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1774" name="(" dev="sda1" ino=2088 res=0 errno=0
[ 1136.804963][T13225] tcpci 0-0002: probe with driver tcpci failed with error -5
[ 1136.805795][T13225] i2c i2c-0: new_device: Instantiated device tcpci at 0x02
[ 1137.772775][ T5696] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1137.950586][ T5696] usb 9-1: Using ep0 maxpacket: 16
[ 1137.954848][ T5696] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1137.980578][ T5696] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1137.981717][ T5696] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1138.051266][ T5696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1138.055153][ T5696] usb 9-1: Product: syz
[ 1138.055175][ T5696] usb 9-1: Manufacturer: syz
[ 1138.055190][ T5696] usb 9-1: SerialNumber: syz
[ 1138.084755][   T38] audit: type=1800 audit(1788909752.757:17): pid=13240 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1776" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[ 1138.238010][ T5696] usb 9-1: 0:2 : does not exist
[ 1138.501272][ T5696] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 1139.007123][ T5696] usb 9-1: USB disconnect, device number 2
[ 1139.645777][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1788'.
[ 1139.769259][T12370] udevd[12370]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1139.860663][T13293] FAULT_INJECTION: forcing a failure.
[ 1139.860663][T13293] name failslab, interval 1, probability 0, space 0, times 0
[ 1139.879755][T13293] CPU: 0 UID: 0 PID: 13293 Comm: syz.8.1789 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1139.879792][T13293] Tainted: [L]=SOFTLOCKUP
[ 1139.879800][T13293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1139.879813][T13293] Call Trace:
[ 1139.879823][T13293]  <TASK>
[ 1139.879833][T13293]  dump_stack_lvl+0xe8/0x150
[ 1139.879874][T13293]  should_fail_ex+0x46b/0x600
[ 1139.879906][T13293]  should_failslab+0xa8/0x100
[ 1139.879938][T13293]  ? security_file_alloc+0x34/0x310
[ 1139.879969][T13293]  kmem_cache_alloc_noprof+0x9e/0x690
[ 1139.879998][T13293]  ? rcu_is_watching+0x16/0xb0
[ 1139.880032][T13293]  ? security_file_alloc+0x34/0x310
[ 1139.880056][T13293]  ? alloc_empty_file+0x5b/0x1d0
[ 1139.880095][T13293]  security_file_alloc+0x34/0x310
[ 1139.880122][T13293]  init_file+0x96/0x2d0
[ 1139.880157][T13293]  alloc_empty_file+0x74/0x1d0
[ 1139.880191][T13293]  dentry_open+0x44/0xa0
[ 1139.880234][T13293]  ovl_dir_read+0x85/0x4a0
[ 1139.880264][T13293]  ? __pfx_ovl_dir_read+0x10/0x10
[ 1139.880283][T13293]  ? ovl_path_upper+0x105/0x170
[ 1139.880316][T13293]  ? ovl_path_next+0x21a/0x430
[ 1139.880349][T13293]  ovl_dir_read_merged+0x2fb/0x520
[ 1139.880373][T13293]  ? __pfx_ovl_dir_read_merged+0x10/0x10
[ 1139.880398][T13293]  ? __pfx_ovl_fill_merge+0x10/0x10
[ 1139.880430][T13293]  ? __kasan_kmalloc+0x93/0xb0
[ 1139.880464][T13293]  ? __kmalloc_cache_noprof+0x3d5/0x680
[ 1139.880496][T13293]  ? ovl_iterate+0xcce/0x2170
[ 1139.880515][T13293]  ? ovl_iterate+0xcce/0x2170
[ 1139.880542][T13293]  ovl_iterate+0xd6c/0x2170
[ 1139.880573][T13293]  ? check_path+0x21/0x40
[ 1139.880612][T13293]  ? __pfx_ovl_iterate+0x10/0x10
[ 1139.880634][T13293]  ? __lock_acquire+0x747/0x2de0
[ 1139.880690][T13293]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1139.880727][T13293]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1139.880774][T13293]  ? rwbase_write_lock+0x550/0x720
[ 1139.880816][T13293]  ? __pfx_ovl_iterate+0x10/0x10
[ 1139.880841][T13293]  wrap_directory_iterator+0x99/0xe0
[ 1139.880879][T13293]  iterate_dir+0x2f1/0x4e0
[ 1139.880910][T13293]  __se_sys_getdents64+0xf1/0x280
[ 1139.880941][T13293]  ? __pfx___se_sys_getdents64+0x10/0x10
[ 1139.880969][T13293]  ? __pfx_filldir64+0x10/0x10
[ 1139.881000][T13293]  ? rcu_is_watching+0x16/0xb0
[ 1139.881046][T13293]  do_syscall_64+0x166/0x520
[ 1139.881073][T13293]  ? trace_irq_disable+0x3b/0x140
[ 1139.881103][T13293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1139.881126][T13293]  ? clear_bhb_loop+0x70/0xc0
[ 1139.881153][T13293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1139.881176][T13293] RIP: 0033:0x7f5804f4e159
[ 1139.881196][T13293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1139.881217][T13293] RSP: 002b:00007f58031a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 1139.881242][T13293] RAX: ffffffffffffffda RBX: 00007f58051d5fa0 RCX: 00007f5804f4e159
[ 1139.881260][T13293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 1139.881279][T13293] RBP: 00007f5804fe503b R08: 0000000000000000 R09: 0000000000000000
[ 1139.881294][T13293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1139.881310][T13293] R13: 00007f58051d6038 R14: 00007f58051d5fa0 R15: 00007fff4faca2e8
[ 1139.881346][T13293]  </TASK>
[ 1140.543764][T13294] vlan2: entered allmulticast mode
[ 1140.548968][T13294] bridge1: entered allmulticast mode
[ 1140.842294][T13304] FAULT_INJECTION: forcing a failure.
[ 1140.842294][T13304] name failslab, interval 1, probability 0, space 0, times 0
[ 1140.842400][T13304] CPU: 1 UID: 0 PID: 13304 Comm: syz.5.1793 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1140.842509][T13304] Tainted: [L]=SOFTLOCKUP
[ 1140.842538][T13304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1140.842571][T13304] Call Trace:
[ 1140.842594][T13304]  <TASK>
[ 1140.842631][T13304]  dump_stack_lvl+0xe8/0x150
[ 1140.842747][T13304]  should_fail_ex+0x46b/0x600
[ 1140.842846][T13304]  should_failslab+0xa8/0x100
[ 1140.842954][T13304]  __kmalloc_cache_noprof+0xa1/0x680
[ 1140.843047][T13304]  ? snd_card_file_add+0x58/0x250
[ 1140.843115][T13304]  ? snd_card_file_add+0x58/0x250
[ 1140.843189][T13304]  ? snd_lookup_oss_minor_data+0x11e/0x150
[ 1140.843289][T13304]  snd_card_file_add+0x58/0x250
[ 1140.843370][T13304]  snd_pcm_oss_open+0x180/0x1c10
[ 1140.843448][T13304]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1140.843537][T13304]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1140.843623][T13304]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[ 1140.843697][T13304]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1140.843783][T13304]  ? rt_spin_unlock+0x159/0x200
[ 1140.843849][T13304]  ? rt_spin_unlock+0x165/0x200
[ 1140.843883][T13304]  chrdev_open+0x4dc/0x600
[ 1140.843997][T13304]  ? __pfx_chrdev_open+0x10/0x10
[ 1140.844098][T13304]  ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0
[ 1140.844202][T13304]  ? __pfx_chrdev_open+0x10/0x10
[ 1140.844274][T13304]  do_dentry_open+0x849/0x1420
[ 1140.844399][T13304]  vfs_open+0x3b/0x350
[ 1140.844478][T13304]  ? path_openat+0x142d/0x1d60
[ 1140.844572][T13304]  path_openat+0x1448/0x1d60
[ 1140.844703][T13304]  do_file_open+0x23e/0x4a0
[ 1140.844808][T13304]  ? __pfx_do_file_open+0x10/0x10
[ 1140.844950][T13304]  ? alloc_fd+0x654/0x6d0
[ 1140.845044][T13304]  do_sys_openat2+0x115/0x200
[ 1140.845142][T13304]  ? __se_sys_futex+0x3a8/0x450
[ 1140.845207][T13304]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1140.845328][T13304]  ? rcu_is_watching+0x16/0xb0
[ 1140.845450][T13304]  __x64_sys_openat+0x138/0x170
[ 1140.845565][T13304]  do_syscall_64+0x166/0x520
[ 1140.845646][T13304]  ? trace_irq_disable+0x3b/0x140
[ 1140.845723][T13304]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1140.845799][T13304]  ? clear_bhb_loop+0x70/0xc0
[ 1140.845875][T13304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1140.845958][T13304] RIP: 0033:0x7f06e2c3e159
[ 1140.846019][T13304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1140.846072][T13304] RSP: 002b:00007f06e0e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1140.846137][T13304] RAX: ffffffffffffffda RBX: 00007f06e2ec5fa0 RCX: 00007f06e2c3e159
[ 1140.846190][T13304] RDX: 0000000000009101 RSI: 0000200000000280 RDI: ffffffffffffff9c
[ 1140.846234][T13304] RBP: 00007f06e2cd503b R08: 0000000000000000 R09: 0000000000000000
[ 1140.846270][T13304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1140.846306][T13304] R13: 00007f06e2ec6038 R14: 00007f06e2ec5fa0 R15: 00007ffd9477bc28
[ 1140.846405][T13304]  </TASK>
[ 1141.192426][   T38] audit: type=1326 audit(1788909755.897:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.192563][   T38] audit: type=1326 audit(1788909755.897:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.192720][   T38] audit: type=1326 audit(1788909755.897:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.192848][   T38] audit: type=1326 audit(1788909755.907:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.192976][   T38] audit: type=1326 audit(1788909755.907:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.193096][   T38] audit: type=1326 audit(1788909755.907:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.193214][   T38] audit: type=1326 audit(1788909755.907:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.193338][   T38] audit: type=1326 audit(1788909755.907:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.232299][T13303] FAULT_INJECTION: forcing a failure.
[ 1141.232299][T13303] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1141.232420][T13303] CPU: 1 UID: 0 PID: 13303 Comm: syz.8.1791 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1141.232504][T13303] Tainted: [L]=SOFTLOCKUP
[ 1141.232526][T13303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1141.232567][T13303] Call Trace:
[ 1141.232589][T13303]  <TASK>
[ 1141.232620][T13303]  dump_stack_lvl+0xe8/0x150
[ 1141.232726][T13303]  should_fail_ex+0x46b/0x600
[ 1141.232828][T13303]  _copy_from_user+0x2d/0xb0
[ 1141.232912][T13303]  sctp_setsockopt+0x1c4/0x12c0
[ 1141.233106][T13303]  ? sock_common_setsockopt+0x36/0xc0
[ 1141.233191][T13303]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1141.233278][T13303]  do_sock_setsockopt+0x17c/0x1b0
[ 1141.233384][T13303]  __x64_sys_setsockopt+0x143/0x1b0
[ 1141.233483][T13303]  do_syscall_64+0x166/0x520
[ 1141.233563][T13303]  ? trace_irq_disable+0x3b/0x140
[ 1141.233658][T13303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1141.233726][T13303]  ? clear_bhb_loop+0x70/0xc0
[ 1141.233811][T13303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1141.233875][T13303] RIP: 0033:0x7f5804f4e159
[ 1141.233933][T13303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1141.233993][T13303] RSP: 002b:00007f58031a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1141.234070][T13303] RAX: ffffffffffffffda RBX: 00007f58051d5fa0 RCX: 00007f5804f4e159
[ 1141.234136][T13303] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000005
[ 1141.234178][T13303] RBP: 00007f5804fe503b R08: 0000000000000008 R09: 0000000000000000
[ 1141.234213][T13303] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000
[ 1141.234256][T13303] R13: 00007f58051d6038 R14: 00007f58051d5fa0 R15: 00007fff4faca2e8
[ 1141.234356][T13303]  </TASK>
[ 1141.600607][   T38] kauditd_printk_skb: 9 callbacks suppressed
[ 1141.600698][   T38] audit: type=1326 audit(1788909756.307:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.600844][   T38] audit: type=1326 audit(1788909756.317:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.659196][   T38] audit: type=1326 audit(1788909756.367:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.689642][   T38] audit: type=1326 audit(1788909756.387:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.689737][   T38] audit: type=1326 audit(1788909756.397:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1141.689776][   T38] audit: type=1326 audit(1788909756.397:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13307 comm="syz.0.1794" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcb0bee159 code=0x7ffc0000
[ 1142.148274][T13318] FAULT_INJECTION: forcing a failure.
[ 1142.148274][T13318] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1142.186678][T13318] CPU: 1 UID: 0 PID: 13318 Comm: syz.8.1797 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1142.186720][T13318] Tainted: [L]=SOFTLOCKUP
[ 1142.186730][T13318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1142.186745][T13318] Call Trace:
[ 1142.186755][T13318]  <TASK>
[ 1142.186765][T13318]  dump_stack_lvl+0xe8/0x150
[ 1142.186808][T13318]  should_fail_ex+0x46b/0x600
[ 1142.186846][T13318]  prepare_alloc_pages+0x223/0x650
[ 1142.186894][T13318]  __alloc_frozen_pages_noprof+0x1a1/0x5c0
[ 1142.186936][T13318]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1142.186973][T13318]  ? __alloc_frozen_pages_noprof+0x2b7/0x5c0
[ 1142.187012][T13318]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1142.187055][T13318]  ? __pfx_policy_nodemask+0x10/0x10
[ 1142.187100][T13318]  __alloc_pages_noprof+0x10/0x100
[ 1142.187136][T13318]  alloc_pages_bulk_noprof+0x683/0x890
[ 1142.187171][T13318]  ? alloc_pages_mpol+0x11b/0x280
[ 1142.187215][T13318]  ? alloc_pages_noprof+0x161/0x2f0
[ 1142.187244][T13318]  __kasan_populate_vmalloc+0xb7/0x1c0
[ 1142.187277][T13318]  ? rt_spin_unlock+0x165/0x200
[ 1142.187304][T13318]  alloc_vmap_area+0xd1a/0x1420
[ 1142.187352][T13318]  ? __pfx_alloc_vmap_area+0x10/0x10
[ 1142.187383][T13318]  ? __get_vm_area_node+0x155/0x2f0
[ 1142.187418][T13318]  __get_vm_area_node+0x200/0x2f0
[ 1142.187456][T13318]  __vmalloc_node_range_noprof+0x343/0x1540
[ 1142.187487][T13318]  ? n_tty_open+0x1d/0x150
[ 1142.187517][T13318]  ? lock_acquire+0x115/0x350
[ 1142.187556][T13318]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1142.187603][T13318]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1142.187642][T13318]  ? rt_spin_unlock+0x159/0x200
[ 1142.187670][T13318]  ? n_tty_open+0x1d/0x150
[ 1142.187698][T13318]  vzalloc_noprof+0xb2/0xe0
[ 1142.187728][T13318]  ? n_tty_open+0x1d/0x150
[ 1142.187759][T13318]  n_tty_open+0x1d/0x150
[ 1142.187792][T13318]  tty_ldisc_setup+0xcc/0x270
[ 1142.187820][T13318]  tty_init_dev+0x279/0x4d0
[ 1142.187862][T13318]  tty_open+0x7e5/0xcd0
[ 1142.187904][T13318]  ? __pfx_tty_open+0x10/0x10
[ 1142.187930][T13318]  ? rt_spin_unlock+0x159/0x200
[ 1142.187957][T13318]  ? rt_spin_unlock+0x165/0x200
[ 1142.187983][T13318]  chrdev_open+0x4dc/0x600
[ 1142.188020][T13318]  ? __pfx_chrdev_open+0x10/0x10
[ 1142.188057][T13318]  ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0
[ 1142.188098][T13318]  ? __pfx_chrdev_open+0x10/0x10
[ 1142.188130][T13318]  do_dentry_open+0x849/0x1420
[ 1142.188180][T13318]  vfs_open+0x3b/0x350
[ 1142.188212][T13318]  ? path_openat+0x142d/0x1d60
[ 1142.188245][T13318]  path_openat+0x1448/0x1d60
[ 1142.188299][T13318]  do_file_open+0x23e/0x4a0
[ 1142.188336][T13318]  ? __pfx_do_file_open+0x10/0x10
[ 1142.188394][T13318]  ? alloc_fd+0x654/0x6d0
[ 1142.188431][T13318]  do_sys_openat2+0x115/0x200
[ 1142.188467][T13318]  ? __se_sys_futex+0x3a8/0x450
[ 1142.188490][T13318]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1142.188532][T13318]  ? rcu_is_watching+0x16/0xb0
[ 1142.188571][T13318]  __x64_sys_openat+0x138/0x170
[ 1142.188614][T13318]  do_syscall_64+0x166/0x520
[ 1142.188649][T13318]  ? trace_irq_disable+0x3b/0x140
[ 1142.188679][T13318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1142.188704][T13318]  ? clear_bhb_loop+0x70/0xc0
[ 1142.188733][T13318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1142.188756][T13318] RIP: 0033:0x7f5804f0e98e
[ 1142.188778][T13318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1142.188798][T13318] RSP: 002b:00007f58031a5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1142.188824][T13318] RAX: ffffffffffffffda RBX: 00007f58031a66c0 RCX: 00007f5804f0e98e
[ 1142.188842][T13318] RDX: 0000000000000002 RSI: 00007f58031a5c00 RDI: ffffffffffffff9c
[ 1142.188859][T13318] RBP: 00007f5804fe503b R08: 0000000000000000 R09: 0000000000000000
[ 1142.188874][T13318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1142.188888][T13318] R13: 00007f58051d6038 R14: 00007f58051d5fa0 R15: 00007fff4faca2e8
[ 1142.188926][T13318]  </TASK>
[ 1142.205351][T13318] syz.8.1797: vmalloc error: size 9096, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1142.525590][T13318] CPU: 1 UID: 0 PID: 13318 Comm: syz.8.1797 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1142.525676][T13318] Tainted: [L]=SOFTLOCKUP
[ 1142.525699][T13318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1142.525740][T13318] Call Trace:
[ 1142.525763][T13318]  <TASK>
[ 1142.525796][T13318]  dump_stack_lvl+0xe8/0x150
[ 1142.525871][T13318]  warn_alloc+0x24d/0x270
[ 1142.525973][T13318]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1142.526068][T13318]  ? __pfx_warn_alloc+0x10/0x10
[ 1142.526155][T13318]  ? kfree+0x1c5/0x6d0
[ 1142.526235][T13318]  ? __get_vm_area_node+0x219/0x2f0
[ 1142.526295][T13318]  __vmalloc_node_range_noprof+0x36b/0x1540
[ 1142.526374][T13318]  ? lock_acquire+0x115/0x350
[ 1142.526471][T13318]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1142.526596][T13318]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1142.526673][T13318]  ? rt_spin_unlock+0x159/0x200
[ 1142.526728][T13318]  ? n_tty_open+0x1d/0x150
[ 1142.526757][T13318]  vzalloc_noprof+0xb2/0xe0
[ 1142.526786][T13318]  ? n_tty_open+0x1d/0x150
[ 1142.526816][T13318]  n_tty_open+0x1d/0x150
[ 1142.526847][T13318]  tty_ldisc_setup+0xcc/0x270
[ 1142.526874][T13318]  tty_init_dev+0x279/0x4d0
[ 1142.526915][T13318]  tty_open+0x7e5/0xcd0
[ 1142.526956][T13318]  ? __pfx_tty_open+0x10/0x10
[ 1142.526982][T13318]  ? rt_spin_unlock+0x159/0x200
[ 1142.527009][T13318]  ? rt_spin_unlock+0x165/0x200
[ 1142.527036][T13318]  chrdev_open+0x4dc/0x600
[ 1142.527074][T13318]  ? __pfx_chrdev_open+0x10/0x10
[ 1142.527114][T13318]  ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0
[ 1142.527155][T13318]  ? __pfx_chrdev_open+0x10/0x10
[ 1142.527188][T13318]  do_dentry_open+0x849/0x1420
[ 1142.527237][T13318]  vfs_open+0x3b/0x350
[ 1142.527269][T13318]  ? path_openat+0x142d/0x1d60
[ 1142.527303][T13318]  path_openat+0x1448/0x1d60
[ 1142.527357][T13318]  do_file_open+0x23e/0x4a0
[ 1142.527395][T13318]  ? __pfx_do_file_open+0x10/0x10
[ 1142.527453][T13318]  ? alloc_fd+0x654/0x6d0
[ 1142.527489][T13318]  do_sys_openat2+0x115/0x200
[ 1142.527526][T13318]  ? __se_sys_futex+0x3a8/0x450
[ 1142.527549][T13318]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1142.527592][T13318]  ? rcu_is_watching+0x16/0xb0
[ 1142.527632][T13318]  __x64_sys_openat+0x138/0x170
[ 1142.527675][T13318]  do_syscall_64+0x166/0x520
[ 1142.527703][T13318]  ? trace_irq_disable+0x3b/0x140
[ 1142.527732][T13318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1142.527755][T13318]  ? clear_bhb_loop+0x70/0xc0
[ 1142.527785][T13318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1142.527810][T13318] RIP: 0033:0x7f5804f0e98e
[ 1142.527833][T13318] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1142.527853][T13318] RSP: 002b:00007f58031a5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1142.527878][T13318] RAX: ffffffffffffffda RBX: 00007f58031a66c0 RCX: 00007f5804f0e98e
[ 1142.527896][T13318] RDX: 0000000000000002 RSI: 00007f58031a5c00 RDI: ffffffffffffff9c
[ 1142.527913][T13318] RBP: 00007f5804fe503b R08: 0000000000000000 R09: 0000000000000000
[ 1142.527929][T13318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1142.527944][T13318] R13: 00007f58051d6038 R14: 00007f58051d5fa0 R15: 00007fff4faca2e8
[ 1142.527983][T13318]  </TASK>
[ 1142.626729][T13318] Mem-Info:
[ 1142.626747][T13318] active_anon:5955 inactive_anon:43053 isolated_anon:0
[ 1142.626747][T13318]  active_file:27140 inactive_file:36246 isolated_file:0
[ 1142.626747][T13318]  unevictable:0 dirty:271 writeback:0
[ 1142.626747][T13318]  slab_reclaimable:13031 slab_unreclaimable:110575
[ 1142.626747][T13318]  mapped:32315 shmem:41771 pagetables:1881
[ 1142.626747][T13318]  sec_pagetables:0 bounce:0
[ 1142.626747][T13318]  kernel_misc_reclaimable:0
[ 1142.626747][T13318]  free:1241562 free_pcp:3198 free_cma:0
[ 1142.626897][T13318] Node 0 active_anon:23820kB inactive_anon:172212kB active_file:108352kB inactive_file:144984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129260kB dirty:1072kB writeback:0kB shmem:167084kB kernel_stack:14788kB pagetables:7376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1142.627060][T13318] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1142.627211][T13318] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1142.627395][T13318] lowmem_reserve[]: 0 2498 2500 2500 2500
[ 1142.627522][T13318] Node 0 DMA32 free:1010680kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23820kB inactive_anon:172212kB active_file:108352kB inactive_file:144984kB unevictable:0kB writepending:1072kB zspages:1536kB present:3129332kB managed:2558836kB mlocked:0kB bounce:0kB free_pcp:12784kB local_pcp:7128kB free_cma:0kB
[ 1142.627938][T13318] lowmem_reserve[]: 0 0 1 1 1
[ 1142.628046][T13318] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1812kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[ 1142.628245][T13318] lowmem_reserve[]: 0 0 0 0 0
[ 1142.664976][T13318] Node 1 Normal free:3940208kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB writepending:12kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1142.665171][T13318] lowmem_reserve[]: 0 0 0 0 0
[ 1142.665292][T13318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1142.665724][T13318] Node 0 DMA32: 61*4kB (UME) 6*8kB (UE) 92*16kB (U) 230*32kB (UME) 46*64kB (UME) 115*128kB (UM) 161*256kB (UME) 105*512kB (UME) 62*1024kB (UME) 33*2048kB (ME) 185*4096kB (UM) = 1010596kB
[ 1142.771952][T13318] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1142.772812][T13318] Node 1 Normal: 2*4kB (UM) 7*8kB (UM) 11*16kB (UM) 12*32kB (UM) 4*64kB (UM) 4*128kB (UM) 8*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3940208kB
[ 1142.773536][T13318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1142.773617][T13318] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1142.773667][T13318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1142.773713][T13318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1142.773765][T13318] 105153 total pagecache pages
[ 1142.773804][T13318] 0 pages in swap cache
[ 1142.773826][T13318] Free swap  = 123752kB
[ 1142.773850][T13318] Total swap = 124996kB
[ 1142.773881][T13318] 2097051 pages RAM
[ 1142.773904][T13318] 0 pages HighMem/MovableOnly
[ 1142.773927][T13318] 425273 pages reserved
[ 1142.773960][T13318] 0 pages cma reserved
[ 1142.819729][T13318] tty tty1: ldisc open failed (-12), clearing slot 0
[ 1144.433728][T13341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1144.446337][T13341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1145.715668][T13367] Unknown status report in ack skb
[ 1146.548192][T13388] FAULT_INJECTION: forcing a failure.
[ 1146.548192][T13388] name failslab, interval 1, probability 0, space 0, times 0
[ 1146.583671][T13388] CPU: 0 UID: 0 PID: 13388 Comm: syz.5.1815 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1146.583711][T13388] Tainted: [L]=SOFTLOCKUP
[ 1146.583720][T13388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1146.583735][T13388] Call Trace:
[ 1146.583745][T13388]  <TASK>
[ 1146.583756][T13388]  dump_stack_lvl+0xe8/0x150
[ 1146.583799][T13388]  should_fail_ex+0x46b/0x600
[ 1146.583837][T13388]  should_failslab+0xa8/0x100
[ 1146.583877][T13388]  __kmalloc_node_track_caller_noprof+0xfb/0x7b0
[ 1146.583915][T13388]  ? __kernfs_new_node+0xac/0xa70
[ 1146.583944][T13388]  ? __kernfs_new_node+0xac/0xa70
[ 1146.583984][T13388]  kstrdup+0x42/0x100
[ 1146.584024][T13388]  __kernfs_new_node+0xac/0xa70
[ 1146.584057][T13388]  ? vsnprintf+0xe42/0xef0
[ 1146.584087][T13388]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1146.584126][T13388]  ? kernfs_root+0x1c/0x230
[ 1146.584163][T13388]  ? kernfs_root+0x1c/0x230
[ 1146.584191][T13388]  ? kernfs_root+0x1c/0x230
[ 1146.584228][T13388]  kernfs_new_node+0xea/0x140
[ 1146.584266][T13388]  __kernfs_create_file+0x4b/0x2e0
[ 1146.584307][T13388]  cgroup_addrm_files+0x837/0xd70
[ 1146.584352][T13388]  ? __pfx_cgroup_addrm_files+0x10/0x10
[ 1146.584386][T13388]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1146.584421][T13388]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1146.584465][T13388]  ? __local_bh_enable+0x1e3/0x2f0
[ 1146.584508][T13388]  css_populate_dir+0x123/0x3d0
[ 1146.584541][T13388]  ? cgroup_apply_control_enable+0x95b/0xd40
[ 1146.584579][T13388]  cgroup_apply_control_enable+0x764/0xd40
[ 1146.584635][T13388]  cgroup_mkdir+0xd22/0xf70
[ 1146.584682][T13388]  ? __pfx_cgroup_mkdir+0x10/0x10
[ 1146.584719][T13388]  kernfs_iop_mkdir+0x213/0x360
[ 1146.584758][T13388]  vfs_mkdir+0x408/0x620
[ 1146.584800][T13388]  filename_mkdirat+0x289/0x520
[ 1146.584841][T13388]  ? __pfx_filename_mkdirat+0x10/0x10
[ 1146.584879][T13388]  ? do_getname+0x151/0x250
[ 1146.584920][T13388]  __se_sys_mkdirat+0x35/0x150
[ 1146.584956][T13388]  do_syscall_64+0x166/0x520
[ 1146.584985][T13388]  ? trace_irq_disable+0x3b/0x140
[ 1146.585018][T13388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1146.585044][T13388]  ? clear_bhb_loop+0x70/0xc0
[ 1146.585075][T13388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1146.585108][T13388] RIP: 0033:0x7f06e2c3e159
[ 1146.585131][T13388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1146.585151][T13388] RSP: 002b:00007f06e0e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1146.585178][T13388] RAX: ffffffffffffffda RBX: 00007f06e2ec5fa0 RCX: 00007f06e2c3e159
[ 1146.585197][T13388] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1146.585214][T13388] RBP: 00007f06e2cd503b R08: 0000000000000000 R09: 0000000000000000
[ 1146.585230][T13388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1146.585245][T13388] R13: 00007f06e2ec6038 R14: 00007f06e2ec5fa0 R15: 00007ffd9477bc28
[ 1146.585286][T13388]  </TASK>
[ 1146.588272][T13388] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12
[ 1148.781526][T13430] fuse: fd is not a fuse device
[ 1150.340214][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027a72800: rx timeout, send abort
[ 1150.840324][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027a72800: abort rx timeout. Force session deactivation
[ 1150.840488][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805f3ec000: rx timeout, send abort
[ 1151.340602][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805f3ec000: abort rx timeout. Force session deactivation
[ 1158.688521][T13512] input: syz1 as /devices/virtual/input/input15
[ 1158.771202][T10451] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1158.970726][T10451] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[ 1158.984947][T10451] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1158.985044][T10451] usb 9-1: config 0 has no interface number 0
[ 1158.985116][T10451] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1158.985166][T10451] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1158.985208][T10451] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1159.101234][T10451] usb 9-1: config 0 descriptor??
[ 1159.882361][T10451] prodikeys 0003:041E:2801.0006: unknown main item tag 0x2
[ 1159.956629][T10451] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.8-1/input1
[ 1160.563545][T10451] hid_prodikeys: hid-prodikeys: failed to find output report
[ 1160.563545][T10451] 
[ 1161.514787][ T5696] usb 9-1: USB disconnect, device number 3
[ 1164.037742][T13536] fido_id[13536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[ 1166.720084][T13567] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1167.185068][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1868'.
[ 1168.520393][T13600] FAULT_INJECTION: forcing a failure.
[ 1168.520393][T13600] name failslab, interval 1, probability 0, space 0, times 0
[ 1168.545362][T13600] CPU: 0 UID: 0 PID: 13600 Comm: syz.0.1872 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1168.545404][T13600] Tainted: [L]=SOFTLOCKUP
[ 1168.545414][T13600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1168.545428][T13600] Call Trace:
[ 1168.545438][T13600]  <TASK>
[ 1168.545449][T13600]  dump_stack_lvl+0xe8/0x150
[ 1168.545492][T13600]  should_fail_ex+0x46b/0x600
[ 1168.545537][T13600]  should_failslab+0xa8/0x100
[ 1168.545577][T13600]  __kmalloc_noprof+0xfb/0x790
[ 1168.545611][T13600]  ? tomoyo_supervisor+0xc53/0x1560
[ 1168.545644][T13600]  ? tomoyo_supervisor+0xc53/0x1560
[ 1168.545685][T13600]  tomoyo_supervisor+0xc53/0x1560
[ 1168.545733][T13600]  ? __pfx_tomoyo_supervisor+0x10/0x10
[ 1168.545788][T13600]  ? tomoyo_check_path_acl+0x137/0x1d0
[ 1168.545825][T13600]  ? tomoyo_check_acl+0x386/0x400
[ 1168.545853][T13600]  ? __pfx_tomoyo_check_path_acl+0x10/0x10
[ 1168.545886][T13600]  tomoyo_path_permission+0x262/0x3b0
[ 1168.545919][T13600]  tomoyo_check_open_permission+0x2b2/0x470
[ 1168.545949][T13600]  ? tomoyo_check_open_permission+0x1d3/0x470
[ 1168.545977][T13600]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1168.546007][T13600]  ? __asan_memset+0x22/0x50
[ 1168.546043][T13600]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1168.546103][T13600]  ? tomoyo_file_open+0x167/0x220
[ 1168.546141][T13600]  security_file_open+0xa9/0x240
[ 1168.546171][T13600]  do_dentry_open+0x4be/0x1420
[ 1168.546222][T13600]  vfs_open+0x3b/0x350
[ 1168.546254][T13600]  ? path_openat+0x142d/0x1d60
[ 1168.546288][T13600]  path_openat+0x1448/0x1d60
[ 1168.546342][T13600]  do_file_open+0x23e/0x4a0
[ 1168.546380][T13600]  ? __pfx_do_file_open+0x10/0x10
[ 1168.546438][T13600]  ? alloc_fd+0x654/0x6d0
[ 1168.546473][T13600]  do_sys_openat2+0x115/0x200
[ 1168.546517][T13600]  ? __se_sys_futex+0x3a8/0x450
[ 1168.546542][T13600]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1168.546586][T13600]  ? rcu_is_watching+0x16/0xb0
[ 1168.546629][T13600]  __x64_sys_openat+0x138/0x170
[ 1168.546678][T13600]  do_syscall_64+0x166/0x520
[ 1168.546707][T13600]  ? trace_irq_disable+0x3b/0x140
[ 1168.546737][T13600]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1168.546762][T13600]  ? clear_bhb_loop+0x70/0xc0
[ 1168.546791][T13600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1168.546816][T13600] RIP: 0033:0x7fbcb0bae98e
[ 1168.546838][T13600] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1168.546858][T13600] RSP: 002b:00007fbcaee45f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1168.546885][T13600] RAX: ffffffffffffffda RBX: 00007fbcaee466c0 RCX: 00007fbcb0bae98e
[ 1168.546903][T13600] RDX: 0000000000000000 RSI: 00007fbcb0c84776 RDI: ffffffffffffff9c
[ 1168.546920][T13600] RBP: 00007fbcb0c8503b R08: 0000000000000000 R09: 0000000000000000
[ 1168.546936][T13600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1168.546951][T13600] R13: 00007fbcb0e76038 R14: 00007fbcb0e75fa0 R15: 00007ffd7b9c2198
[ 1168.546990][T13600]  </TASK>
[ 1169.054342][T13605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1169.064496][T13605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1169.239858][T10449] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1169.399836][T10449] usb 6-1: Using ep0 maxpacket: 32
[ 1169.405675][T10449] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1169.407399][T10449] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1169.438354][T10449] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1169.451001][T10449] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1169.451043][T10449] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1169.491027][T10449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1169.492765][T10449] usb 6-1: Product: syz
[ 1169.492786][T10449] usb 6-1: Manufacturer: syz
[ 1169.492802][T10449] usb 6-1: SerialNumber: syz
[ 1169.515942][T13605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1169.533635][T13605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1169.685585][    C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1169.736100][T10449] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input16
[ 1170.803203][T10449] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1171.847680][T10449]  (id 0x00)
[ 1172.206091][T10449] rc_core: IR keymap rc-imon-pad not found
[ 1172.212092][T10449] Registered IR keymap rc-empty
[ 1172.212189][T10449] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1172.212230][T10449] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1173.686248][T10449] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0
[ 1175.058310][T10449] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input17
[ 1175.343994][T10449] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:11> initialized
[ 1175.375904][T10449] usb 6-1: USB disconnect, device number 11
[ 1175.564441][T13656] loop9: detected capacity change from 0 to 7
[ 1175.584427][T13658] lo: entered promiscuous mode
[ 1175.596141][T13656] Dev loop9: unable to read RDB block 7
[ 1175.616994][T13658] tunl0: entered promiscuous mode
[ 1175.622367][T13656]  loop9: unable to read partition table
[ 1175.635961][T13656] loop9: partition table beyond EOD, truncated
[ 1175.636049][T13656] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1175.683966][T13658] gre0: entered promiscuous mode
[ 1175.902204][T13658] gretap0: entered promiscuous mode
[ 1177.484215][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.795245][T13658] erspan0: entered promiscuous mode
[ 1177.891234][T13658] ip_vti0: entered promiscuous mode
[ 1177.902739][T13658] ip6_vti0: entered promiscuous mode
[ 1178.625323][T13658] sit0: entered promiscuous mode
[ 1178.818557][T13658] ip6tnl0: entered promiscuous mode
[ 1178.964576][T13658] ip6gre0: entered promiscuous mode
[ 1179.036044][T13658] syz_tun: entered promiscuous mode
[ 1179.177565][T13658] ip6gretap0: entered promiscuous mode
[ 1179.252153][T13658] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1179.280622][T13658] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1179.320728][T13658] bridge0: entered promiscuous mode
[ 1185.558467][T13708] syzkaller0: entered promiscuous mode
[ 1185.558568][T13708] syzkaller0: entered allmulticast mode
[ 1185.660969][T13711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1906'.
[ 1187.015130][T13716] bond1: entered promiscuous mode
[ 1187.023283][T13716] bond1: entered allmulticast mode
[ 1190.389073][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1910'.
[ 1190.630152][T13738] bridge_slave_1: left allmulticast mode
[ 1190.636012][T13738] bridge_slave_1: left promiscuous mode
[ 1190.636318][T13738] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1193.046795][T13738] bridge_slave_0: left allmulticast mode
[ 1195.089718][T13738] bridge_slave_0: left promiscuous mode
[ 1195.090025][T13738] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1196.145471][T13766] fuse: fd is not a fuse device
[ 1211.061324][T10451] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1212.686425][T10451] usb 9-1: device descriptor read/all, error -71
[ 1213.692693][T13839] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1218.248696][ T8690] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1218.395143][ T8690] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1218.425381][ T8690] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1218.490156][ T8690] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1218.492553][ T8690] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1221.713185][   T59] Bluetooth: hci5: command tx timeout
[ 1223.443767][T13909] FAULT_INJECTION: forcing a failure.
[ 1223.443767][T13909] name failslab, interval 1, probability 0, space 0, times 0
[ 1223.485767][T13909] CPU: 1 UID: 0 PID: 13909 Comm: syz.0.1954 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1223.485808][T13909] Tainted: [L]=SOFTLOCKUP
[ 1223.485818][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1223.485834][T13909] Call Trace:
[ 1223.485843][T13909]  <TASK>
[ 1223.485855][T13909]  dump_stack_lvl+0xe8/0x150
[ 1223.485900][T13909]  should_fail_ex+0x46b/0x600
[ 1223.485936][T13909]  should_failslab+0xa8/0x100
[ 1223.485978][T13909]  __kmalloc_noprof+0xfb/0x790
[ 1223.486012][T13909]  ? handler_new_ref+0x244/0x930
[ 1223.486035][T13909]  ? handler_new_ref+0x244/0x930
[ 1223.486065][T13909]  handler_new_ref+0x244/0x930
[ 1223.486096][T13909]  ? __pfx_v4l2_ctrl_type_op_init+0x10/0x10
[ 1223.486138][T13909]  v4l2_ctrl_new+0x1395/0x1820
[ 1223.486177][T13909]  v4l2_ctrl_new_std+0x24e/0x300
[ 1223.486217][T13909]  ? __pfx_v4l2_ctrl_new_std+0x10/0x10
[ 1223.486239][T13909]  ? rcu_is_watching+0x16/0xb0
[ 1223.486290][T13909]  ? v4l2_ctrl_handler_init_class+0x1a1/0x2c0
[ 1223.486335][T13909]  ? trace_kmalloc+0x2a/0xf0
[ 1223.486368][T13909]  ? v4l2_ctrl_handler_init_class+0x1a1/0x2c0
[ 1223.486407][T13909]  ? __kvmalloc_node_noprof+0x5d4/0x890
[ 1223.486453][T13909]  ? media_request_object_init+0x8d/0xf0
[ 1223.486480][T13909]  ? v4l2_ctrl_handler_init_class+0x1fb/0x2c0
[ 1223.486522][T13909]  vim2m_open+0x15d/0x620
[ 1223.486561][T13909]  v4l2_open+0x1bf/0x3a0
[ 1223.486592][T13909]  chrdev_open+0x4dc/0x600
[ 1223.486629][T13909]  ? __pfx_chrdev_open+0x10/0x10
[ 1223.486663][T13909]  ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0
[ 1223.486703][T13909]  ? __pfx_chrdev_open+0x10/0x10
[ 1223.486737][T13909]  do_dentry_open+0x849/0x1420
[ 1223.486785][T13909]  vfs_open+0x3b/0x350
[ 1223.486818][T13909]  ? path_openat+0x142d/0x1d60
[ 1223.486851][T13909]  path_openat+0x1448/0x1d60
[ 1223.486904][T13909]  do_file_open+0x23e/0x4a0
[ 1223.486941][T13909]  ? __pfx_do_file_open+0x10/0x10
[ 1223.486999][T13909]  ? alloc_fd+0x654/0x6d0
[ 1223.487035][T13909]  do_sys_openat2+0x115/0x200
[ 1223.487075][T13909]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1223.487114][T13909]  ? exc_page_fault+0x6a/0xc0
[ 1223.487148][T13909]  ? do_user_addr_fault+0xc4c/0x1340
[ 1223.487178][T13909]  __x64_sys_openat+0x138/0x170
[ 1223.487222][T13909]  do_syscall_64+0x166/0x520
[ 1223.487251][T13909]  ? trace_irq_disable+0x3b/0x140
[ 1223.487282][T13909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1223.487307][T13909]  ? clear_bhb_loop+0x70/0xc0
[ 1223.487345][T13909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1223.487369][T13909] RIP: 0033:0x7fbcb0bae98e
[ 1223.487393][T13909] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1223.487421][T13909] RSP: 002b:00007fbcaee45b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1223.487449][T13909] RAX: ffffffffffffffda RBX: 00007fbcaee466c0 RCX: 00007fbcb0bae98e
[ 1223.487468][T13909] RDX: 0000000000000002 RSI: 00007fbcaee45c00 RDI: ffffffffffffff9c
[ 1223.487485][T13909] RBP: 00007fbcaee45c00 R08: 0000000000000000 R09: 0000000000000000
[ 1223.487501][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1223.487518][T13909] R13: 00007fbcb0e76038 R14: 00007fbcb0e75fa0 R15: 00007ffd7b9c2198
[ 1223.487558][T13909]  </TASK>
[ 1223.811578][   T59] Bluetooth: hci5: command tx timeout
[ 1225.294987][ T9551] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1225.890818][   T59] Bluetooth: hci5: command tx timeout
[ 1227.970908][   T59] Bluetooth: hci5: command tx timeout
[ 1228.186685][   T59] Bluetooth: hci2: link tx timeout
[ 1228.203294][   T59] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1229.996483][T13948] netlink: 'syz.8.1960': attribute type 1 has an invalid length.
[ 1230.285385][ T8690] Bluetooth: hci2: command 0x0406 tx timeout
[ 1231.973072][T13950] veth3: entered allmulticast mode
[ 1232.075539][T13950] bond1: (slave veth3): Enslaving as an active interface with a down link
[ 1233.974752][   T59] Bluetooth: hci2: SCO packet for unknown connection handle 201
[ 1234.336399][T13979] vivid-001: disconnect
[ 1235.336387][T13982] overlayfs: missing 'workdir'
[ 1235.730931][ T5593] vivid-001: reconnect
[ 1235.806892][ T9551] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1239.048161][ T1327] ieee802154 phy1 wpan1: encryption failed: -22
[ 1245.092564][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1245.671438][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1245.792854][ T9551] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1254.172594][ T9551] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1256.123538][ T8690] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1256.273147][ T8690] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1256.284659][ T8690] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1256.325483][ T8690] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1256.331843][ T8690] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1258.877748][   T59] Bluetooth: hci1: command tx timeout
[ 1260.925374][   T59] Bluetooth: hci1: command tx timeout
[ 1261.381855][T14051] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] SMP KASAN PTI
[ 1261.393817][T14051] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f]
[ 1261.402267][T14051] CPU: 0 UID: 0 PID: 14051 Comm: syz.8.1979 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1261.413740][T14051] Tainted: [L]=SOFTLOCKUP
[ 1261.418089][T14051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1261.428154][T14051] RIP: 0010:klist_remove+0x159/0x340
[ 1261.433475][T14051] Code: 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd cb e5 f6 4d 8b 26 49 83 e4 fe 49 8d bc 24 98 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 bb cb e5 f6 49 8b 84 24 98 00 00 00 48 89
[ 1261.453236][T14051] RSP: 0018:ffffc9000690f640 EFLAGS: 00010202
[ 1261.459320][T14051] RAX: 0000000000000013 RBX: ffff88802dc35dc0 RCX: 0000000000000046
[ 1261.467304][T14051] RDX: 0000000000000001 RSI: ffffffff8db3cbac RDI: 0000000000000098
[ 1261.475290][T14051] RBP: ffffc9000690f740 R08: ffffffff8fb1e77f R09: 1ffffffff1f63cef
[ 1261.483284][T14051] R10: dffffc0000000000 R11: fffffbfff1f63cf0 R12: 0000000000000000
[ 1261.491293][T14051] R13: 1ffff1100c61fc14 R14: ffff8880630fe0a0 R15: dffffc0000000000
[ 1261.499272][T14051] FS:  0000000000000000(0000) GS:ffff888125bd1000(0000) knlGS:0000000000000000
[ 1261.508208][T14051] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1261.514822][T14051] CR2: 00007ffd73e31f10 CR3: 0000000088a4e000 CR4: 00000000003526f0
[ 1261.522812][T14051] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[ 1261.530828][T14051] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1261.538805][T14051] Call Trace:
[ 1261.542087][T14051]  <TASK>
[ 1261.545028][T14051]  ? __pfx_klist_remove+0x10/0x10
[ 1261.550062][T14051]  ? kobject_move+0x5e4/0x720
[ 1261.554750][T14051]  ? __pfx_kobject_move+0x10/0x10
[ 1261.559783][T14051]  ? get_device_parent+0x370/0x3a0
[ 1261.564922][T14051]  device_move+0x194/0x720
[ 1261.569353][T14051]  hci_conn_del_sysfs+0xb8/0x1a0
[ 1261.574443][T14051]  hci_conn_del+0xc3d/0x1200
[ 1261.579082][T14051]  ? __pfx_iso_disconn_cfm+0x10/0x10
[ 1261.584397][T14051]  hci_conn_hash_flush+0x189/0x260
[ 1261.589530][T14051]  hci_dev_close_sync+0x7fc/0x10c0
[ 1261.594719][T14051]  ? __pfx_hci_dev_close_sync+0x10/0x10
[ 1261.600278][T14051]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1261.606096][T14051]  ? mutex_lock_nested+0x152/0x1d0
[ 1261.611226][T14051]  ? hci_unregister_dev+0x22a/0x5b0
[ 1261.616434][T14051]  hci_unregister_dev+0x232/0x5b0
[ 1261.621508][T14051]  vhci_release+0x170/0x1c0
[ 1261.626051][T14051]  ? __pfx_vhci_release+0x10/0x10
[ 1261.631118][T14051]  __fput+0x42a/0xa80
[ 1261.635121][T14051]  task_work_run+0x1d9/0x270
[ 1261.639730][T14051]  ? __pfx_task_work_run+0x10/0x10
[ 1261.644865][T14051]  ? do_exit+0x735/0x2360
[ 1261.649222][T14051]  ? kmem_cache_free+0x187/0x6d0
[ 1261.654172][T14051]  ? put_net+0x191/0x260
[ 1261.658439][T14051]  ? do_exit+0x735/0x2360
[ 1261.662773][T14051]  do_exit+0x73a/0x2360
[ 1261.666931][T14051]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1261.672749][T14051]  ? __pfx_do_exit+0x10/0x10
[ 1261.677346][T14051]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1261.683016][T14051]  ? rt_spin_unlock+0x159/0x200
[ 1261.687880][T14051]  do_group_exit+0x22d/0x2f0
[ 1261.692478][T14051]  ? rt_spin_unlock+0x165/0x200
[ 1261.697336][T14051]  get_signal+0x121b/0x12c0
[ 1261.701866][T14051]  arch_do_signal_or_restart+0xbb/0x860
[ 1261.707437][T14051]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1261.713636][T14051]  exit_to_user_mode_loop+0x10e/0x770
[ 1261.719038][T14051]  ? rcu_is_watching+0x16/0xb0
[ 1261.723844][T14051]  do_syscall_64+0x328/0x520
[ 1261.728487][T14051]  ? trace_irq_disable+0x3b/0x140
[ 1261.733524][T14051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1261.739605][T14051]  ? clear_bhb_loop+0x70/0xc0
[ 1261.744295][T14051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1261.750199][T14051] RIP: 0033:0x7f5804f4e159
[ 1261.754625][T14051] Code: Unable to access opcode bytes at 0x7f5804f4e12f.
[ 1261.761654][T14051] RSP: 002b:00007fff4faca448 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1261.770087][T14051] RAX: 0000000000000000 RBX: 00007f58051d7da0 RCX: 00007f5804f4e159
[ 1261.778079][T14051] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1261.786075][T14051] RBP: 00007f58051d7da0 R08: 0000000000000006 R09: 0000000000000000
[ 1261.794052][T14051] R10: 00007f58051d7cb0 R11: 0000000000000246 R12: 000000000013148c
[ 1261.802028][T14051] R13: 00007f58051d5fac R14: 0000000000130fba R15: 00007fff4faca550
[ 1261.810028][T14051]  </TASK>
[ 1261.813062][T14051] Modules linked in:
[ 1261.817041][T14051] ---[ end trace 0000000000000000 ]---
[ 1263.012100][   T59] Bluetooth: hci1: command tx timeout
[ 1263.208875][T14051] RIP: 0010:klist_remove+0x159/0x340
[ 
** replaying previous printk message **
[ 1263.208986][T14051] Code: 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd cb e5 f6 4d 8b 26 49 83 e4 fe 49 8d bc 24 98 00 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 bb cb e5 f6 49 8b 84 24 98 00 00 00 48 89
[ 1263.209007][T14051] RSP: 0018:ffffc9000690f640 EFLAGS: 00010202
[ 1263.209074][T14051] RAX: 0000000000000013 RBX: ffff88802dc35dc0 RCX: 0000000000000046
[ 1263.209128][T14051] RDX: 0000000000000001 RSI: ffffffff8db3cbac RDI: 0000000000000098
[ 1263.209170][T14051] RBP: ffffc9000690f740 R08: ffffffff8fb1e77f R09: 1ffffffff1f63cef
[ 1263.209251][T14051] R10: dffffc0000000000 R11: fffffbfff1f63cf0 R12: 0000000000000000
[ 1263.209295][T14051] R13: 1ffff1100c61fc14 R14: ffff8880630fe0a0 R15: dffffc0000000000
[ 1263.209346][T14051] FS:  0000000000000000(0000) GS:ffff888125bd1000(0000) knlGS:0000000000000000
[ 1263.209393][T14051] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1263.209437][T14051] CR2: 00007fb06aff5286 CR3: 0000000034dea000 CR4: 00000000003526f0
[ 1263.214289][T14051] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[ 1263.214336][T14051] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1263.214376][T14051] Kernel panic - not syncing: Fatal exception
[ 1263.330117][T14051] Kernel Offset: disabled
[ 1263.334457][T14051] Rebooting in 86400 seconds..