last executing test programs:

10m24.798161432s ago: executing program 32 (id=236):
r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x6000000, 0x98, &(0x7f0000000100)={0xec, 0x6, 0x6}})

10m1.669968248s ago: executing program 4 (id=312):
syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d05, 0x0, 0xcb}]})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

10m1.00731889s ago: executing program 4 (id=403):
move_pages(0x0, 0x8, &(0x7f0000000200)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f00000002c0)=[0x101, 0x9, 0xd4, 0x5, 0x6, 0x6], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x3, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x9d0]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xc, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0})
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000940)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000980)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f00000009c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000a00)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20004006}}}, 0x10)
bind$tipc(r3, &(0x7f0000000a40)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r3, &(0x7f0000000a80)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000240)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000480)={'syz1\x00', {0x7, 0xc, 0x101, 0x1}, 0x4b, [0x7fffffff, 0xfffffffa, 0x4, 0x0, 0x80000000, 0x6, 0x5b, 0x8, 0xfffffffa, 0x1, 0x4, 0x4, 0x3ff, 0x8, 0x80, 0xf, 0x4, 0xfffffff7, 0x9, 0x5, 0x3, 0xff, 0xffffffff, 0x0, 0x0, 0x3, 0xfa6, 0x9, 0x5, 0x6, 0x4, 0xe794, 0x1d91, 0x1, 0x0, 0x1, 0xbe, 0x1, 0x3, 0x18000000, 0x1ff, 0xd, 0x5, 0x6, 0x9, 0x7, 0x9, 0xfffffffe, 0xf, 0x3, 0x31, 0x8, 0x7, 0x401, 0x8001, 0x800, 0x80, 0x6, 0x1, 0x2, 0x8, 0x33e, 0x3, 0x3], [0xab, 0x6088, 0x0, 0x0, 0x3, 0x1, 0x10001, 0x8, 0x8, 0x0, 0x4, 0x90, 0x5, 0x4, 0xfff, 0x6, 0x3, 0x8000, 0x6, 0x7f, 0x80, 0x3, 0xfffffff5, 0x7, 0x4, 0x6, 0x1, 0x2, 0x3, 0x2, 0x1, 0x2, 0x101, 0x1, 0x43, 0x8001, 0x2, 0xa, 0x2c22438c, 0x9, 0x4, 0xffff, 0x1, 0xffffff81, 0x7, 0x3ff, 0x3, 0xcf6, 0x5, 0x1, 0x6, 0xfffffff9, 0x401, 0x9, 0x2, 0x4, 0x0, 0x7fffffff, 0x5, 0x7ff, 0x4, 0x1, 0x6, 0x8001], [0x3ff, 0x2, 0xffffffff, 0x3, 0x6, 0x401, 0x2c, 0xb, 0xfff, 0x4, 0x5, 0x5, 0x6, 0x7ff, 0x7fffffff, 0x1000, 0xfffffffa, 0x4, 0x67f, 0xb85d, 0xc, 0x7, 0x4, 0x0, 0x5, 0x10, 0x8, 0x7f, 0x4, 0x10, 0x3, 0x0, 0x80, 0x0, 0x7, 0x8, 0x8, 0xf74, 0x8, 0x2, 0x7, 0x4, 0xf, 0x2, 0x8, 0x2e, 0x8, 0x1, 0x8, 0x7, 0x9, 0x2, 0xf18, 0xffffff00, 0x95e, 0x7c, 0x0, 0x2ef2, 0x2, 0x5, 0x68, 0x9, 0x9, 0x4], [0x200, 0x9, 0x22fe, 0xb48, 0x2, 0x6, 0x0, 0x100, 0x6, 0x468, 0x80000001, 0x1, 0x84f, 0xfffffffa, 0x9, 0x6, 0x2, 0x1, 0x256, 0x640, 0x6, 0x4, 0x8, 0x8, 0xd720, 0xd, 0x1, 0x6, 0xc, 0x5, 0x4, 0x3ff, 0x1, 0x8, 0x10, 0x1, 0x0, 0xcabc, 0x5, 0x4, 0x4, 0x6, 0x80bc, 0x3, 0xdf, 0x8, 0x4, 0x7fff, 0x8, 0x8, 0x5, 0x1, 0x994, 0x401, 0x200, 0x10, 0x81, 0x2, 0x7fffffff, 0x6, 0x2, 0x0, 0x3, 0x8]}, 0x45c)
write$cgroup_subtree(r5, &(0x7f0000000900)={[{0x2b, 'hugetlb'}, {0x2b, 'devices'}]}, 0x12)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @broadcast})
write$tun(r4, &(0x7f0000000440)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)

9m58.163986874s ago: executing program 4 (id=414):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async, rerun: 32)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async, rerun: 32)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000140))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61) (async, rerun: 32)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

9m57.695876005s ago: executing program 4 (id=417):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x715})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000200)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x3, 0x6040000})
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mlock(&(0x7f0000158000/0x4000)=nil, 0x4000)
munlockall()
r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80009, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x8927, &(0x7f0000000140)={0xfffffffffffffffb, 0xd93a, 0x0, 0x2, 0x1, [0x0, 0x401]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
syz_clone3(&(0x7f0000000080)={0x204801600, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
write(r1, &(0x7f0000000040)="0781", 0x2)

9m40.205933998s ago: executing program 33 (id=412):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000001414df25"], 0x10}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi2\x00', 0x1, 0x0)
setns(0xc9, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001680)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
mlock(&(0x7f0000158000/0x4000)=nil, 0x4000)
write(r4, &(0x7f00000016c0)='\a', 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000001700)={0x7}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="200000001200010a0000008da600000080000000cf"], 0x26}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
socket$key(0xf, 0x3, 0x2)
r9 = accept4(r0, &(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000240)=0x80, 0xc0800)
ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f0000001540)=@get={0x1, &(0x7f0000000540)=""/4096, 0x6})
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001800)=ANY=[@ANYRESOCT=r9], 0x68}}, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000140)={0x2, 0x4, 0x3, 0xc, 0x6, 0x5, 0xfe, 0x9, 0x1f, 0x1, 0xf6, 0x6, 0x81, 0x4b}, 0xe)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000002c0)={'pcl812\x00', [0x140, 0x2, 0x43, 0x2, 0x20, 0x1, 0x8002, 0x1000, 0x686, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x6, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x35, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]})

9m39.948439875s ago: executing program 34 (id=417):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x715})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000200)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x3, 0x6040000})
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mlock(&(0x7f0000158000/0x4000)=nil, 0x4000)
munlockall()
r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80009, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '2\x00'}}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x8927, &(0x7f0000000140)={0xfffffffffffffffb, 0xd93a, 0x0, 0x2, 0x1, [0x0, 0x401]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
syz_clone3(&(0x7f0000000080)={0x204801600, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58)
write(r1, &(0x7f0000000040)="0781", 0x2)

9m39.884631553s ago: executing program 3 (id=436):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
r1 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000001000/0x1000)=nil], 0x0, &(0x7f0000000100), 0x0)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000015, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
write$binfmt_misc(r3, &(0x7f0000000080), 0x91)
splice(r2, 0x0, r0, &(0x7f00000000c0)=0x8008, 0x9, 0x7)
r4 = getpgrp(0x0)
setpriority(0x0, r4, 0x100)

9m39.016076373s ago: executing program 3 (id=438):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040005ba3e7900"/50], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9m35.335785304s ago: executing program 3 (id=441):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0)
r1 = dup(r0)
setrlimit(0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff})
brk(0x600000000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./debug\x00', &(0x7f00000003c0)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r2, &(0x7f0000000440)='1,0x400000,0x401000,', 0x14)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000140)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x318, 0x0)
ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0x0, r3})
recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x10106, 0x2, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0)
pread64(r4, 0x0, 0x0, 0x200)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

9m20.41198233s ago: executing program 3 (id=455):
r0 = socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a00ff80000000000000000000000000010000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x8, r2, 0x1, 0xba, 0x6, @broadcast}, 0x14)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3, 0x11, r0, 0x61f4a000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='10', 0x2)
openat$dm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async)
r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000680)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}})
inotify_init1(0xc0800)
ioctl$DM_TARGET_MSG(r4, 0xc138fd0e, &(0x7f00000007c0)={0x4, 0x0, 0x0, 0x168, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x800, @stats_create={'@stats_create ', '1024+4096', 0x20, '/16', ' 0 syz aux'}}})
ioctl$DM_DEV_REMOVE(r4, 0xc138fd04, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}})
ioctl$DM_DEV_CREATE(r4, 0xc138fd03, 0x0) (async)
ioctl$DM_DEV_CREATE(r4, 0xc138fd03, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f00000004c0)='./file0/file0\x00', 0xc) (async)
umount2(&(0x7f00000004c0)='./file0/file0\x00', 0xc)
rename(&(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='./proc\x00') (async)
rename(&(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='./proc\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0)

9m19.110556338s ago: executing program 3 (id=456):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wrmsr={0x65, 0x20, {0x40000095, 0x9}}], 0x20})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/mdstat\x00', 0x0, 0x0)

9m16.37971204s ago: executing program 3 (id=458):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(&(0x7f0000000280)=@filename='mtd0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close_range(r2, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac3(0x2, 0x121, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1027, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10f, 0x3, 0x1, 0x58, 0xb0, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x26, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x7e, 0x3}, [@selector_unit={0x9, 0x24, 0xc, 0x5, 0x4, "59531d37"}, @processing_unit={0x1d, 0x24, 0x9, 0x4, 0x3, [0x2, 0x1, 0x0, 0x2, 0x3, 0x0]}, @power_domain={0xd, 0x24, 0x10, 0x2, 0x7, 0x5, 0xb, "6a44ea54"}, @power_domain={0xf, 0x24, 0x10, 0x6, 0xa800, 0xe862, 0xe, "be91afa49fee"}, @processing_unit={0x15, 0x24, 0x9, 0x3, 0x5, [0x2, 0x3, 0x3, 0x3]}, @extension_unit={0x1d, 0x24, 0xa, 0x2, 0x3, [0xb0e24814dc779834, 0x3, 0x3, 0x2, 0x3, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x3, 0x2a, 0x8, "052cf536a0d383"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x2, 0x7f, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x4, 0x1, 0x2, "0bb2"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0xbd, 0x6, {0xa, 0x25, 0x25, 0x7, 0x9, 0xf100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0xe7, 0x0, {0xa, 0x25, 0x25, 0x6, 0x3, 0x10}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x310, 0x40, 0xa1, 0x7, 0x10, 0x1}, 0x5e, &(0x7f00000007c0)={0x5, 0xf, 0x5e, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x2, 0xf, 0xc, [0x3e80, 0x3f00, 0xc0c0, 0xff, 0xf0, 0x3f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0xfd, 0xa9f}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "44c59bbca954810ffc4903ed8ce4d984"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "f5eb7162f3ee358c02c9073e4548f518"}, @ptm_cap={0x3}]}, 0x1, [{0x24, &(0x7f0000000840)=@string={0x24, 0x3, "bed490567000f5f379dc80d6ef3a8fcd9dcfb6338861b2ae86d19e8fb96fce9ed0b4"}}]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x8417f, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)={0xd4, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @private1, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3f04}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0xffffffffffffffea, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

9m15.402331708s ago: executing program 35 (id=458):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(&(0x7f0000000280)=@filename='mtd0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close_range(r2, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect$uac3(0x2, 0x121, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1027, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10f, 0x3, 0x1, 0x58, 0xb0, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x26, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x7e, 0x3}, [@selector_unit={0x9, 0x24, 0xc, 0x5, 0x4, "59531d37"}, @processing_unit={0x1d, 0x24, 0x9, 0x4, 0x3, [0x2, 0x1, 0x0, 0x2, 0x3, 0x0]}, @power_domain={0xd, 0x24, 0x10, 0x2, 0x7, 0x5, 0xb, "6a44ea54"}, @power_domain={0xf, 0x24, 0x10, 0x6, 0xa800, 0xe862, 0xe, "be91afa49fee"}, @processing_unit={0x15, 0x24, 0x9, 0x3, 0x5, [0x2, 0x3, 0x3, 0x3]}, @extension_unit={0x1d, 0x24, 0xa, 0x2, 0x3, [0xb0e24814dc779834, 0x3, 0x3, 0x2, 0x3, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x3, 0x2a, 0x8, "052cf536a0d383"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x2, 0x7f, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x4, 0x1, 0x2, "0bb2"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0xbd, 0x6, {0xa, 0x25, 0x25, 0x7, 0x9, 0xf100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0xe7, 0x0, {0xa, 0x25, 0x25, 0x6, 0x3, 0x10}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x310, 0x40, 0xa1, 0x7, 0x10, 0x1}, 0x5e, &(0x7f00000007c0)={0x5, 0xf, 0x5e, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x2, 0xf, 0xc, [0x3e80, 0x3f00, 0xc0c0, 0xff, 0xf0, 0x3f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0xfd, 0xa9f}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "44c59bbca954810ffc4903ed8ce4d984"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "f5eb7162f3ee358c02c9073e4548f518"}, @ptm_cap={0x3}]}, 0x1, [{0x24, &(0x7f0000000840)=@string={0x24, 0x3, "bed490567000f5f379dc80d6ef3a8fcd9dcfb6338861b2ae86d19e8fb96fce9ed0b4"}}]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x8417f, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)={0xd4, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @private1, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3f04}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0xffffffffffffffea, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

8m22.519717091s ago: executing program 6 (id=594):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000780)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0x9bb, 0x0, 0x0, 0x1000, 0x90000000, 0x0, 0x0, 0x144}}}, &(0x7f0000000800)=<r2=>0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb0}, 0x80)
pipe2(0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2000, 0x1, 0xcd}}], 0x1, 0x0, 0x0)

8m22.009799284s ago: executing program 6 (id=597):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x2000ff1f)

8m21.021744738s ago: executing program 6 (id=603):
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c000680"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='27', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0xd, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80)

8m20.793565771s ago: executing program 6 (id=604):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000100)='8', 0x1)
unshare(0x2e000480)

8m20.283896565s ago: executing program 6 (id=605):
r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x1, 0x2)
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f00000003c0)={0x4, "6816d6d64309719f8db9029258c1a34f9d2adc3c97eb3af1929fb38c9ceeb696", 0x1, 0x1000, 0x4, 0x3, 0x4, 0x0, 0x10, 0x7})
socket$netlink(0x10, 0x3, 0x0)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/1, 0x1f80}], 0x310, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/1, 0x2034afa5}], 0x1, 0x0)
syz_clone3(&(0x7f0000000300)={0x100, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'})
bind(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000007c0)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, 0x0, 0xcb6b, 0x4e, 0x4e, 0x3f, 0x7e})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32], 0x20}}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f00000005c0)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ptrace$poke(0x5, r4, &(0x7f0000000780), 0x6)
connect$pptp(r3, &(0x7f0000000600)={0x18, 0x2, {0x1, @multicast2}}, 0x1e)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0xc0001, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000680)=0x1)
writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000700)='}m', 0x2}], 0x1)
write(r2, &(0x7f0000000180)='27', 0x2)

8m19.94109168s ago: executing program 6 (id=606):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000780)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0x9bb, 0x0, 0x0, 0x1000, 0x90000000, 0x0, 0x0, 0x144}}}, &(0x7f0000000800)=<r2=>0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb0}, 0x80)
pipe2(0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2000, 0x1, 0xcd}}], 0x1, 0x0, 0x0)

8m4.831984496s ago: executing program 36 (id=606):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000780)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0x9bb, 0x0, 0x0, 0x1000, 0x90000000, 0x0, 0x0, 0x144}}}, &(0x7f0000000800)=<r2=>0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb0}, 0x80)
pipe2(0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2000, 0x1, 0xcd}}], 0x1, 0x0, 0x0)

7m25.351671342s ago: executing program 7 (id=790):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x181002, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000180)=0x1, 0x4)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000002140)={r0, &(0x7f0000000300)='[\x89-\x00', 0x4040, &(0x7f0000002080)={@align=0x9, {0x1ff, 0x100, 0x1000, 0x1}}, 0xfffffffc, &(0x7f00000020c0), &(0x7f0000002100)=0x4})
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x44)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000001bc0)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000003, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x0, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0xffffffff, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$input_event(r2, &(0x7f0000002040)={{0x77359400}, 0x2, 0x0, 0xfa000000}, 0x14)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000100)="0b032200e0ff25000200475400f6a13bb10000a8880088f74803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={<r7=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000001b00)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {}, 0x5, 0xffffffff7fffffff, 0xcd41}}}, 0x90)
sendmsg$nl_route_sched_retired(r3, &(0x7f0000001ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000380)=@deltfilter={0x16d4, 0x2d, 0x300, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6, 0xffe0}, {0xffff, 0x5}, {0x7, 0xffe0}}, [@f_rsvp6={{0xa}, {0x16a4, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0x27e91464608e3054}}, @TCA_RSVP_SRC={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfff, 0x3, 0x4c}, {0x6, 0x6, 0x80000001}, 0x21, 0xdb, 0x3}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xf6, 0x5, 0x2}, {0xff, 0x8, 0x724c}, 0x2, 0x3, 0x8}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xc690, 0x8, 0x1}, {0x0, 0x200, 0x7}, 0x6c, 0x40, 0x80}}, @TCA_RSVP_ACT={0x1624, 0x6, [@m_skbedit={0x120, 0xe, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0xeb, 0x6, "47be96730e17bbeddd756963c594d4e1c67fd7b8a0afd3b28c61061a85803238b0e310dda97d4a06e50ad376f8444b259d8414c3ef8fb5653c69bc71cb638c2e0558875c56bce6f9a2ee98919746b969c5031e97151492e78fcd39ff659753bb6e278d5118332108b403e90f98d9f795a7dfdaf4ef555e097f190679a11916521f9199632f7021d146216fd9a15355a766902382d679c329575392d0bf4ba3108fb8c0771703468ec15053386b411e6392b297ebd92476bb46fb8068c08be84f77071198c7413e6ed477fbf8276c5793c5876673e243cba34396aa01992605d4c5855f1c9fc079"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0xe6052c2fe6d8303f}}}}, @m_mpls={0x1068, 0x1d, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x888e}, @TCA_MPLS_LABEL={0x8, 0x5, 0x372a1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x154, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x200, 0x5, 0x75c, 0x7fffffff}}, @TCA_DEF_DATA={0xe, 0x3, '/dev/ptmx\x00'}]}, {0xfd, 0x6, "318c7cb18228b7169a0eec802d8d056f4577beb9c49866ba1aa0d6106e662fb97255ed851f8c7f896f2c4e53a32baca3eeaa24be54d58a00364e09cc92d4f66670d3d2d56fb14db46d81d881b52adc50f8e48faa7bef7d5f6e38f873b88630b92a557a7647f9041fd2c767196c1b9bdeed78bb46b75ce16f1931294a25cfbbf675c64ba9337978932f51294c68d819f60a8d14655454b713061907efd201ebabe684338b3a64cac7be7be31a296299194a0ddfb259856078aa79c489c1c2cc7aa434226c8df0330bccd6e612e123ea96c9021c26f51a5f433c914aff764fb0a02e95e7da3185e1f9b22b0246bb407e1cc0c9d4b56fff8e9d58"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x144, 0x12, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x562, 0x10000000, 0x5, 0x3}, 0x7e}}]}, {0xf9, 0x6, "cc619cd9ab4309a8375a57e12f3980d10a0012c02b1ff70e39ef79ca894c11ff8237b8f3933daf3d6759f99f1f4fb2ed9335f8e7a18a0291dc85c297246285524cadd662d588a16e8bbf0412691ae0963cf7cb7f370ee56267864f4e80e29724fe3b6d9ed0eb98caf869758efa88ccc9f4ba3e2a9283843c79471999e0337a1ea4a7236677dd0bd2db52a4a1185c28fcbd076123ee823b8efe4da530c01f2104e3e12d03fd51efb7b33bf96d045d3dcb937db9e9f62d51909b5db0707a8057ac6bcb5aa771421af6b23dd8a778ebc2b8ccfaa678216f0b45db01681fecdf5c3efd3426c6841ae3954089c7e8a7583ce01b98a4c1a5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x200, 0x12, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x4, 0x6, 0x3, 0x2}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x3, 0x75a}, 0x58}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff3cb, 0x153, 0xffffffffffffffff, 0x67e, 0xfff}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x8001, 0x5, 0x800, 0x61}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x4, 0x1, 0x0, 0xd}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x0, 0x10001, 0x3}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x40, 0x8, 0x3, 0x1ff}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0x4, 0xffffffffffffffff, 0x3, 0xb}, 0x24}}]}, {0xf1, 0x6, "baeacee6d70af79ca4559fbc1d9e6481a0bac0fcc8cbb9312e7d9eeda4676f8b1ec538a79edbf5a4b60dd4a5c82190398e25576815a4522c25b82bb1f4dfdcc608797d2213250f92783a295b914bda28f5ee40b0af268179981bff3a24979ba5a4acdca292c4c064f0dce43ca089b39004e1a60ded7d668f08d40f5b5fe4d3e69c05e87169c2cdac51126dbefea5b813c833f33fd128e64fea4381653758ba0c71cb3616de4313f3abea360b39d7f291f0d353db64fd9736804a90f44865a48fac836dbaffd1a0d200473c7442db5bab6247ff1595c227a51eff968abb3cfa9482228e6dffb3637ca7190c4ac8"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x16d4}, 0x1, 0x0, 0x0, 0x40}, 0x8000)

7m23.761363335s ago: executing program 7 (id=794):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002b40), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000002d00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '0\x00'}}})
mknodat$dm(0xffffffffffffff9c, &(0x7f0000003000)='./dm0\x00', 0x6180, r1)
openat$dm_dev(0xffffffffffffff9c, &(0x7f0000003040)='./dm0\x00', 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x490000, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000002c00)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x400000, 0x5e}, 0x2c)
socket$kcm(0xa, 0x2, 0x0)
socket(0x40000000015, 0x5, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003080)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003140)={0x28, r5, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000003180)={0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000003200)="2e00110010008188e6b62aa73f72cc9f0ba1f848460000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850)

7m22.420912274s ago: executing program 7 (id=801):
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000040)={@private=0xa010100, @multicast2, 0x1, "822fae6e6f6a5c07871a935c160087ab7d7cb2cd309844201641ee569e68692c", 0x3ff, 0x5, 0x8, 0x3}, 0x3c)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4)
bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0)
write(r2, &(0x7f0000000000)="01", 0x1)

7m21.506404562s ago: executing program 7 (id=802):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x4080040)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)="616c676f3d7a73746420646963743d6469637430206c6576656c3d31cb", 0x1d)

7m20.991805555s ago: executing program 7 (id=804):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{&(0x7f0000002040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x40)

7m20.195086129s ago: executing program 7 (id=805):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) (async)
move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syz_tun\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050010010b"], 0xa)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000805001001", @ANYRES32=r0], 0xa) (async)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000805001001", @ANYRES32=r0], 0xa)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

7m4.618491877s ago: executing program 37 (id=805):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) (async)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) (async)
move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syz_tun\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050010010b"], 0xa)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000805001001", @ANYRES32=r0], 0xa) (async)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000805001001", @ANYRES32=r0], 0xa)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

4m56.561029253s ago: executing program 9 (id=1381):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x1}, r1, 0x8001}}, 0x48)
close(0x3)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = getpgrp(0x0)
r3 = gettid()
rt_tgsigqueueinfo(r2, r3, 0x42, &(0x7f00000004c0)={0x28, 0x8000006, 0xfffffffd})

4m54.443200939s ago: executing program 9 (id=1395):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0)
r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000004c0)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000540), r4, 0x0, 0x3, 0x1}}, 0x20) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x44, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff5b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x400c840)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa1de}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
flock(r1, 0x6)
mkdir(&(0x7f0000000180)='./control\x00', 0x8) (async)
rmdir(&(0x7f00000001c0)='./control\x00') (async)
ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000040))
r6 = socket(0x3, 0x5, 0x80000001)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c)
sendto$unix(r6, 0x0, 0x0, 0x4000804, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e)

4m53.938739244s ago: executing program 9 (id=1401):
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r0, &(0x7f0000001280)='\\', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000001300))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001340), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000001380)={0x0, "728d0ae58b510f0deee5ed95fe49bc4ac10b67b1b99eeeaa180443525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f267418500", {0x80000001, 0x1}})
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001480))

4m53.688642298s ago: executing program 9 (id=1403):
r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@nested_create_vm={0x12d, 0x18, 0x2}, @uexit={0x0, 0x18, 0x6}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control16, 0x1, 0x8, 0x5}}, @nested_amd_clgi={0x17f, 0x10}], 0x88}) (async)
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe211002e)

4m53.174322064s ago: executing program 9 (id=1406):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663000000000000000000000080005000600000014001780040007"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0016008100000005000000000000004fd7ee63000000009a4200000000000005000000"], 0x10000)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, 0x0)
unshare(0x8000280)
io_setup(0x11, &(0x7f00000000c0))
io_setup(0x1000, &(0x7f0000000100))
io_setup(0x4, &(0x7f0000000140))
io_setup(0x76, &(0x7f0000000180))
io_setup(0x800, &(0x7f00000001c0))
r4 = socket$rds(0x15, 0x5, 0x0)
r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x6e)
sendmsg$unix(r5, &(0x7f0000002580)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000000340)="67578ebc314e3ed2dbdd3a27f4fbf43376b232aa2a1f1515793e6617a4bbae33c0752d3386a3828b92b3710068d9cd2a1412b463bb9d03e34e3b", 0x3a}, {&(0x7f0000000380)="35ea9988a79b284a66997f8677a7c1943cd6155b01cc7b6e8ec75a66f374a8ce442d200daabf9461fce2cc413908ebdf502b5ce6c25d573569eac732b96cf2328ed546b24f21696ba0e782606ac9075307662674fba04039b5f28ae2603f8374dae6855285e04141ba0c247a0330dc274dcd29fb9e014351d90f4ee1e76004a902915c6c8e6ad54b7fc547dee4a8f5c0ff9c12ca208471f9ed3dc8316e2d8668481a419ba00c926f5bd6837f708329c9f35e4fd96170e444d29461fa48d6d30f70b7f8c17e8c6536b7134ee2b0589e1f6399a54fde76dae44a85dfb1ebbbe417edf4b33fda62bc4e865fa30ccb70313307a138e39d1fbf8fa63a5a421049fbe058dcfbb9867d09fb01017eb209d776ff7b041b76ef19b511adbbb6d65ee562de7f90de65612cfc33af576b5a2008e7445a66e399068ebb353c02a58054f1a22d6d804827e5079a66f138e00d3cf2fafc1b5962c755ff14463bf8b216da7ad26a0633cd0aeaeb2c011dddece55bd63e77c6d38d3d6fe68106ce2419f7282cc27880616f27ba896d62db7c397780e265c5f28cd679708c2a1770b96c65f0c01c2b110a1e401e669c06b404a147085b722f19b39b3a363196333a3681ce382468946eafdee563d06163c50b2108953134f4e03dc511501385c0cde9b284fd13188bd5fb3e6afae7eb8e260499e70095843c6a1bae65750471cf02d0dc5dbc018181a399bd2f11971d42eb9420c37d18dbc7eca85006f933ceec13d27c5f4203c4b6d0b56c7204ab4b044f8097931085d95ed3b20791980c571b48c4d1a9c138aca3f38e2658c63a155eb8c89458f2545a7cfa98955bdc49c23869d5871be6784f30e7b4e20a627e4a7ae0ba7f29be9c0f0e411b8eced76659bac87843e05a03a483a4e7e137fc03477ee89a6552ff140b13a3dc48318412bfd74da2aef3e37214f49a383f269adaf7cbfff319d72ef7142391387f19e15ea051f83fe602878ccf4d169f06211b777251405fb085ff154cb66198ab7de7a6213b7313ec09689adb37863da9547c255f048615c8962df2d31827e7c55eef6be0d8cbee35071486fdcd57acb74f710873cda6854f4ce1e5ca75dff2731f9ff6dbefd64d8f689a51284c7ee46acf935e6a85ff61b52db7e123274f76054be9df90958a2f32834ff49dc65386f2e2f3545bdd7aebd09d19f36bb3442c71c37785c9bb98130aa5a2ee35b359f6511cd8e644c33ae78790f35d78ca35022ad123188ff8369690dd0e217b8e9f2080effad399091234d264e84148fee98880e8c5b83984808d1bb944a2417994eb042d381f78b10f2db0eae6de6e304dfdff9526ae2033c3b10af45201621a575f4369050d60be2fe52541d8c5039621a3dc75079c7e40755956d9b1c28dcc17d0bf65065408fcb7ad8a6cebce5fcdc45cb61ae0a63cd0bef37ab9574a1de4234527e3c58b7295dd6d363e6287b61780f2e6ee80083cae032854887049793925bed8d6ef005aa0fbf855249ace46098944f6bae2181f376fb2e6b340cf6cf8228ee0ff32d46db69923163218d33108e201ec68e664245dae56498d9e9b740e4d025b825b95c7b54fb9d788bd7eb5215baafd4b4fa7d25896b646c994b7134980a1742f7d6f1cdf79cd2aa163e87f4e41a6b218fc52eee2cde3dd949c95e43b8d0fe14622da17f14c14e60e0e9f1e3c112947e176fb57e28696499663350f56e430086213712801ed42dac8906110a435e52d1acf5ec7293672c57f457d49a87d02dbd9794f1b66dbdaac55eebdd531a960024478c62b569f66a16ede00c3fa06048250f4d8713bc3d8caa9b16c6eaf1ca25f094265dd6ad4c46fbdca32d5cdb686130166f3597c0db4ad549dbdffdbd1d03bbf7d103bceb4e702bebf7506cc46329972df421da64c374814a514e894e0e8edd06b13ac38a4cf2b2bb916a088b49a515e705a32cae3fda32a7269105401c121fa7937859e02de2171d9e5ca3406c57990a9b92cd2ba4ce4fdabb7de63bf85ec5d0e0d05a70eac50799600aed2d53388a56d572f69cd9e80f78708492967fed359cceb96af0557ba89fd4352783263451fc7bbbe91c90e273cf4dc0045580f012c7aa2695f977e20e9ea0bf0afc5b6d528ed6967da5d09d6aec08d7c3230feeba191b3d49bf4f793f1f83036691dae8d3b63f0773b834f51874d4d3011f80599a9fe150b35edcdcc1daa1386c50e5f0b6416a2230c50f9064883cec9f67092fc1a9ee434ced6638e5f172b8917ac90364214850df27b3f54ee8c1e43cb28fc4d79191c12dc9ac6f1a05fc3f90bda08ccb25cdda889a5db0e8eb3702d217a9b88d266ac0835f237861373eca23512d99711fbd3d780975803bb4020ee5479fc7f5ca9c9f19b84a1ff25cd17b001f1a0851f317bc39eca24de684dc80891d4c19c6f0a91b5ddc0172b1f92fb17962bc3812eee93a1e568dcdf7707b265ad2230ae95c79a13554810d8bbf3082581e6cd3f7e9b9781e32cc22084d16a59315677cfd17adb4b35bd3a9d7244a5c9094211440e7ca8a420b0db06a290166c4893648f0436bad2fdd1cce6b4bd5da415410068ac1a2716f878c7965d7ebab8bcaa3c79dbc3decb5a7f16784bc5cc7646f94c6b756ab94a10a883b97c1ced5c3277aed5ae0940dcac591cae33ee4f1849cfab4c41528b58d6b46470a20ccd7216ad3a110f183a487c4e1598d8c1883de3a78e9deec5bf2916eaa08c23d073c774064e98142236a28c679916c23146ec3587126f5f9ec76f3dd3cdb5a439b6ac91eade70f032deb4686ef54f987fee50bd2b251f0cc93c5c98db63419e89a25018574dbdfb657432a3c38a4db95dd2e76b739bc0584ff36ccda12c0e8373d26ce406d32b4d8ca03e8f8f7c3bb684803c2e65df1d3c29aa4519d43e32247b8dce3008156a11fa1258a9786a6403e6e38f9facd98457bff44c9c0cf909da90bda2fc25422ce34f8486ae7798b181686e6a7e737f6567442bb8296355c439d942ffa645e5eefd293e553f073c74b1ac53567ae004e9389f807b5ffcaaa4fb801f60104f68544b575dc145a481821ab693928175b99f27b23c469876545d1ca68a7eae76a3a93cd2fa8dff7978ffa34e5a8a74043c91ac9a2f291eccbb87a3e074111531d48c887bb1a30904c56d146832c18799b691cdcedb685a437c840208ac0fcb59b4f786b9d2724ed06177b58b2cd862f1ef5eb8cf3df4c9fcc6468dd94c266168f3f86a22408ff06ea052dc9b24d45d858bf35dc94f3f09b46ee5887e8d1111f0014e27cede880530005ec4209224faf3894459a59bf8c18657e26cb64b91b1cf5b6e4bf1d24a94ade4b5fce3b63e89ca64c1c77bd167b270971d82ebc29fc0f54251e0429061766400c808dfa24b41b88af36aa5cd5f061a0ede05c8199ceade70081ff3727e4d2ce25f61582434a111b7156e726d56390d3ade00d56e503dbeef9462067e96c6aeef9f23e81dd178fae21913f61d0a368233f41c90ab8c0122daeb9aed76dc833b7aef76f3f9bee1c07e16df14d387586e75677ae2db486ec1aac6aa071758b66fdb55458b4590b75af6a2bd45e2e85def5c85482853a0deb08a0480ef71ca5c62138877d3c681ad73d8529731917e63be24458b9247b5be3cf67c263b7db7aeff04066577cf4b3c37100d18642a766368729ee76770aa7b47b185aacdd73ebb4bd3113f3e9db7044d90b3be3f5ea0ecc1bb6729cf4f9a455cf5b24d68ba60f72fac4da10228f1059f127f7a8b87aa35b496254396aed35357229bed7dfe77d7707e11c5e858b848c363c7c8143f0e8a4735bdef1ffa215ae43d9b65f2f91ccdd2bebc466e3fecc3bd2357d98ebfa7fa1c73297965e8c4165de9e042514b5c1273f7e5a16fe7256c060c128a1a68d6d82ddf766f95530a0d4a15c96d3cd5192bdaf0901d0d745cbe2760d278e64eafce0acdf8fccf0af4075b033275b7d3e262d5eeffd3a2b3c7a51b41379fb0198f9618eab669ece5dbb2820061ce48d59b83282b39aebe53ce4e75cec34a01a4d8fb2b83070f11869ba4f02f96c7ebd77946c5e02829133fd39c6ba56a54e8c2a03b829160eb8b65fe1ff745fad5ffce4e0f8c1397024da3ad20d050527b9da8c315651534cc2f1339e106ee3a4d58138dda35135a46d6baa8c7dd9c7c408875bffd2f53eac810790988a332aeb99b5ed4bc6efc32a0a65e84ebbfa60516365aac8c65ef41a7090e00e2060e049969ef350bfbe57c081bb1297ca050548510b051762052fcaeba0cd103dc0f2b05fd99b603bb8c40ce94caf51bc55f843cda920e2666b8f1658c5db21baebcc3d9f67d145ebeaaf0e01aa082efe974162892c1096596ca0b8f7e2eb5e97f06db24168c9cca100760a963aac69b3198df75a2cf2e0af88fa51b8907c290f93b78ca615a5a48d680c89255a23df59b93ecdca9d43468a34a28517db41e8326702659c5b21e034e0b0934b10d1272f84adc2c677d320c34d29f2a4a0262e9164d768ef95556c2196c7aac9b7b5070f214079f78cf77f64dd4fbc2b68136ef7962464917c7310bd140922965c77d561857f1ee173b4a9577d62501ef41a3e0e171f36dd19751dc38b39143cffa14a0f586888f211324eaa1202812b6ef05819f3b3ed1848887c2f53117e50673549566a4d740440c24fd39787c60c9b625da5860c57735f760e1e522ff60a579216f3f059551989d7730d2e72356c9deb6e0d8c9b76774eed37d5c7c6b7b77a39bbbf69191f68ded65caa98677f6fd6db810b0fa051c4bbbfb08fb88adb390e6c5eaf0cbb35e1811286515cf7d989c49a998f8cd08a4af8b360a57a21dca04445939c55d0fd673544937ee0475f6198cbf94735918250203015a386d805d7d1950d7b8d9977832d2508146217b8c32371f419f89dbf377f1163cd676fe0e02891da195e3b72f0bb802b49d312b1e8e64e7759c132df0bd654bd7a90fd872a59d61743034ed911594acb7f16d7fc15708dc1a8f30d4e1a2aeee5afdfc66ffcc5eb7e31d1b7bc7474386b615e0f9275e10fbf8c8155d729e18c893fa6b1822be4da2e4805e76fbd1e183c5d026c9086fa55c287e439fff40cda872154ff03f07f25a57312c4fc818c665f4cf592b268749a778cb21978e8f43f02056ea550cc1f3887d703436e0af59e261c1ecee3911420174a6b4a5a9dc2d70e70f06b097381f38930d0ff69b66b9f0cdd462329cf8ba2ed840a1822663101f593e4faed8a1df28f02c53cfbaf5300df9e9de880a6540a94a1230a4f9d28d1a27020fb3d02e702cbad48c6585c7ac59b987fec77bc3200d4411bb3d7ce12abc51bfa665dd2ba1d7dfbf7940946eef727faa49392375078677c1a7c2e7e66c57c6236c191b3ca879ce2f96d04cb119a53c2ff8be1d80034e30456365938e794e57f7a8095fefdc66144fba0474aee9ae3f69206d0863612e835574cb489223bdbc78626a9902834651ae07d2c11365b84a933e61a72f0c74f9926ffed451a0895a26e63e329adbde0e1ca261db9ab4412998d34b1fc2e6cde1dd35ab6cd7103bc784c04c93b332b2407a3b053d46535e43ce335c7975efff105dc5776b8a3a364d4940dda9409475246ad2980f13c8dac9e0b545ac4559f0d9eb32701a76f0390982979118f02b2a9a15c68fbc0bfbf22ff67fa75019d8092588dd311410feb6b15ba5c9ccbf1c5ad3a22191b0d12b61aa55349d7f69eb354b39d89e43976f49abec2ba7b73cc6de3f50591ff5b936ed9ee79ef94c525ce919570a89473dc7567bb22d07c0a79da4e3", 0x1000}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002880)="ffceb0553bbbdc4311fcb7f83552664acda63cca58cc3c0d3d8afd7e681c269ad98eb8e49e43772a4174561b2df7c7c3a4210808ee2d076666550c0adf2dbe348efde655ce08b03db7861d95a2aaf58257725ff33b7f8e8c09aa550db233b416f7457dfa588b9e188f0e47e60f46e3e00fd7c7afb3a12d3d772c651b28654b", 0x7f}, {&(0x7f0000002400)="c9f218593d8bcd4c9eab204978ebdc37d13e9c6b04e2615d4f829b0bd8250889748e21e0c9f10efea4361f3996c0e7db7ea176bcdb1cd4ef8bdf9b875889530cc86dee99cf0ea6825d0a7d6bb9af15fe11474dd4f0247d27054b88e7728c0473287fa1defbd8ecb93c5e42f2d03808ba955634175d9fdd7a340af1c0c3b0dc099a6d42375f84ffa602dd3580b9906a58f4463c192f707a51aea190f245e651789c2107db2e8ab45f54faa2986883eca7411db09c62b05086b7b569", 0xbb}], 0x5, &(0x7f0000002380)=ANY=[@ANYBLOB="20000000000000000100000001d8db0447f1c408b5002300", @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32=r4], 0x20, 0x890}, 0x10)
setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6d}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000025c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002600)='./sys\x00', &(0x7f0000002640)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000002680)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0)
write$binfmt_format(r6, &(0x7f00000026c0)='-1\x00', 0x3)
write$binfmt_format(r6, &(0x7f0000002700)='1\x00', 0x2)
syz_clone(0x100000, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0)
setresuid(0x0, 0xee01, 0xee00)
semget$private(0x0, 0x4, 0x29b)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

4m51.619446929s ago: executing program 9 (id=1411):
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r0, &(0x7f0000001280)='\\', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000001300))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001340), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000001380)={0x0, "728d0ae58b510f0deee5ed95fe49bc4ac10b67b1b99eeeaa180443525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f267418500", {0x80000001, 0x1}})
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001480))

4m36.512874954s ago: executing program 38 (id=1411):
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r0, &(0x7f0000001280)='\\', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000001300))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001340), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000001380)={0x0, "728d0ae58b510f0deee5ed95fe49bc4ac10b67b1b99eeeaa180443525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f267418500", {0x80000001, 0x1}})
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000001480))

3m21.30171869s ago: executing program 2 (id=1565):
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\x00\x00\x00\x00\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\x02\xc1\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\x03\x00\x00\x00\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1\xa1\xcc!\x16\xfc\x92oB/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xcf\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\x01\x98\x96c\xda7\t,\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x95\xf7F\vDlW{\xe3\x8f\x8e\xcf\xd3}m\x03z\xf1\x85\xd9\xbaM\xb2\nO\xdfRE\x10\xc4\xe85\xf7\x81\xbe\xb8#~N\xc7\xc8\xb8\xd2\x8bu\x9f(\xa5CC|\xff\x7f\xfcT\x97\x80H\xcbeh&\x03\xb5D\xaaFV(\xad\x84-\x970\xcau;6\xe5\xf9\xd6\xad\x05\xd9\b\x14\xd6|\xc6\xba\xf3\xb9\x00\x83\x8a\x80w\xc7\"\x03\xb8\xb7\'\x02l\xc0\xdd\xa7^\x00\xd5:\xc4\xa5\xf2*e\xe1\x92\xd2a\xe8\xf9<\x92,\xb2\bZ\xaa\xdf\xcfS\b\xe5\xcb,\xf3y\x14!\xbd\fo\xc2\x1d\x95\x8f\xef\xe2@M\x1b\xa90\xfe\xcc\xb2c\xa7X\xc9\xd7j\n\xe0X*!\xc8\b\x01\x82\x1c\xf0\x0f\x8a\x03\xa7P\xd2B\xc9^O_T?R\xa1.\x99\xd9\x16~\ah\xf2\x8a\xe6\'\x85\\\x92\x02\xca\xca\x93\x10\xfd\x04\xa1<\x1aZ\xccq\xb3\x8f\x8a\r\x97\xfd\xee\x8fx\xdaA\x84\xd7\xb7\x8d\xe7x\x00\xb1Z\xfa\xd3;v\xfd\x8a\x1d\xc9\x01\\\xe5x\x90\x8d\xf2\xe1\xb8W\x95\xb8\xa5\xaf\xd2\x8d\xa8\x1c[(\x84\xb2?\xf2\x10\xa5\x8a\xbd\xa2qziX\x91\xc3\xc6\x8d\x9f\xaf\x89$:\n\xe3\xacB\xdcx\x13\xf7\xac\x87kz\xb4\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xd)
ftruncate(r0, 0x2)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000780)={0x48, 0x2, r2})
ioctl(r1, 0x3b8f, &(0x7f00000000c0)="2800000006000000010000000400000000081f00000000000010")

3m20.629456406s ago: executing program 2 (id=1568):
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80800)
ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000000c0)=0x100) (async)
syz_usb_connect$uac1(0x2, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000020cc17111040000102030109026800030106f0090904000000010100000a240108000a0002"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

3m18.848031635s ago: executing program 2 (id=1570):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="60000000320005060100000000000000000000004c0001804800018007000100637400003c0002801800010001000000000000000300000000000000000000000600030008000000080010006674700005001100020000000500120006000000", 0x60}], 0x1}, 0x0)

3m18.503259653s ago: executing program 2 (id=1572):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000002c0)={'pcl812\x00', [0x140, 0x2, 0x43, 0x2, 0x20, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x6, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x35, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x2f00, 0x9, 0x1, 0x4]})

3m17.99585511s ago: executing program 2 (id=1573):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000180)={0xa, 0x4e20, 0x400001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000290000003b0000002f000000000000001800000000000000290000000476e64113eef4131ab1b4d13e8f37c34dc0b6aece7ab7492ce5fa0bf7b15e184e2905cae5c835addebe7fff9281d43ff8ad5534f36d6f247b1f3524042ef5f38a9b82c3a8c878a6868ca39d931ec422b3e6186bdd46a3b30a7678"], 0x30}, 0x40440c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000001c0)={'ip6tnl0\x00', 0x5})
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0xb)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000200)={0x1000001}, 0x8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f00000009c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a00)=ANY=[@ANYRESHEX=r1, @ANYRES16=r4, @ANYBLOB="010025bd7000fcffffff8900000008000300", @ANYRES32=r6, @ANYBLOB="0438452c"], 0x20}}, 0x4004031)
r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f00000005c0)='syzkaller\x00', 0x0, &(0x7f0000000600)="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", 0x1d8, r7)
sendmmsg$inet6(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0), 0x171}}], 0x400000000000172, 0x4001c00)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r8, 0x0, 0x83, &(0x7f00000002c0)={'broute\x00', 0x0, 0x3, 0x0, [0x0, 0x6e0559d8, 0xffffffff80000001, 0x8, 0x8000000000000000, 0x8], 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x78)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x111400, 0x128)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r9, 0x84, 0x81, &(0x7f0000000940)="1a00000002000000", 0x8)
setsockopt(r9, 0x84, 0x81, &(0x7f0000000980)="1400001f09000000", 0x8)
r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000900), 0x1, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000b00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone3(&(0x7f0000000b80)={0x100081100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$vga_arbiter(r10, &(0x7f0000000ac0)=ANY=[@ANYBLOB='target '], 0x13)

3m16.297194728s ago: executing program 2 (id=1575):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$sequencer2(0xffffff9c, &(0x7f0000002280), 0x1, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f00000022c0)=@x={0x94, 0x2, "4828281b325d"})
r4 = syz_open_procfs(0x0, &(0x7f0000001200)='net/ip6_tables_matches\x00')
preadv(r4, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x141, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x1, @remote, 0x4}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001100)={0x1, [<r5=>0x0]}, &(0x7f0000001140)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000001180)={r5}, &(0x7f00000011c0)=0x8)
write$UHID_INPUT(r1, &(0x7f00000000c0)={0x1a, {"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", 0x1000}}, 0x1006)

3m1.082896111s ago: executing program 39 (id=1575):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = openat$sequencer2(0xffffff9c, &(0x7f0000002280), 0x1, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f00000022c0)=@x={0x94, 0x2, "4828281b325d"})
r4 = syz_open_procfs(0x0, &(0x7f0000001200)='net/ip6_tables_matches\x00')
preadv(r4, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x141, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x1, @remote, 0x4}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001100)={0x1, [<r5=>0x0]}, &(0x7f0000001140)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000001180)={r5}, &(0x7f00000011c0)=0x8)
write$UHID_INPUT(r1, &(0x7f00000000c0)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d33101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439d9921b379a3aca07f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14bef83545e3608ceca7c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f19cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8a96d5308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283894a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

4.906808134s ago: executing program 0 (id=2386):
r0 = openat$sw_sync(0xffffff9c, &(0x7f0000000300), 0x8000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0xfffff171, "1a03e5944740030091000000000008000000000000000000fffff17100"})

4.721032862s ago: executing program 1 (id=2388):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x16f3ba41, @mcast2, 0x47}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x6400}, 0x30}], 0x1, 0x4001c00)

4.659806552s ago: executing program 0 (id=2389):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
alarm(0x947)
alarm(0x1)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000a40)={0x0, 0x2, 0x6, 0x2, 0x10801, 0x3}, 0x14)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000a80)={'NETMAP\x00'}, &(0x7f0000000ac0)=0x1e)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000b00)={0x0, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f0000000b40)="5ec78db485c534bdf7a2172f3f1f30da", 0x10)
sendmmsg(r2, &(0x7f0000000400)=[{{&(0x7f0000000440)=@nl=@kern={0x10, 0x0, 0x0, 0x800}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)="07f63b61ec83194f7bdaa45d7f3f0aad8cb2e9e2549c3c91f9f34897cf34946e713cbe3e9915b92cd61c55ed391710136637152e144c29aa3512c5a422189281784c04e58710afb952b62ba1104c411334e6c4730d7538444fa83e41b1a384f055d86f2864e1fefe4d625d4dd032356a66cd865c3c7e9cc9c1431cf22b264cb4d215cf031763173865abfe21c54e0e970ae297ed41c1db3378e8f495d504ad791c5d3ee5317308028e367a1b012e2a5ad22e281dac86c9dc187354070842776ee631", 0xc2}, {&(0x7f0000000600)="fad3e0b5aa2400a5700c", 0xa}, {&(0x7f0000000640)="839362c575af759c7b2b5be70ff3b782174d90060a2ddc2891244f17abd7f9178774c19f80f881e537e04c1fca223d17d7f507bc46860ccb315a4914324e422c24bfbf9677e4575bfaaaf782d32aeb81bf6994f3e12574086d9e20dc118165ff9fb6635e37d9411edc330952671d7df07f2a91b56e6f9318fa5dcf30af1da4622fe1131443ef5189324a5619178afe8a25ecd0abb9e70120a9651fc6675252af5aa47ebc273aa348f1e58c52e5eb61175896bc3981012f351134b289fa4729b8be51e0b9063898f157aeac95efd9bc7515084832f97b5aba8dba4b73a55fb7cd", 0xe0}, {&(0x7f0000000740)="2837480aaf240dc36b9a6b61fc108fbc71b77a68c76e70d74df22f485e3c2d6ad812963229ca2e55fe9dd5b0343867acdcfdf544c5feedc2f4fdd16fa905c7a3d33a9feabbb34dd349aae03167d844", 0x4f}], 0x4}}], 0x1, 0x8044)
add_key$keyring(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc_mnt\x00', 0x1ed)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000880))
mount(0x0, &(0x7f00000008c0)='./proc_mnt\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0)
write$P9_RLERRORu(r6, &(0x7f0000000980)=ANY=[@ANYRES64=r2, @ANYRESDEC=r2], 0xd)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40400d4)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000b80)='ubifs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/node/node0/compact\x00', 0x1, 0x0)
write(r7, &(0x7f0000000100)='1', 0x1)

4.48758266s ago: executing program 1 (id=2390):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000100)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000280)=""/218, 0xda}], 0x2, &(0x7f00000003c0)=""/168, 0xa8}, 0x40000062)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000000206010800000000000000000200fffd14008a44080012400000000605001500480000000400010006000000050005000a000000050004000000000009000073797a3000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x400, 0x4)

4.323464259s ago: executing program 0 (id=2392):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x100000000000000}, 0x6048800)

4.143616696s ago: executing program 1 (id=2394):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r4 = syz_ublk_setup_io_uring(0x31cf, &(0x7f0000000280)={0x0, 0x5000, 0x400, 0x0, 0x1005}, &(0x7f0000000300)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000380)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r1, 0x0, 0x0)
r8 = syz_open_procfs(0x0, 0x0)
read$eventfd(r8, 0x0, 0x0)

3.679409839s ago: executing program 8 (id=2396):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000005c0))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r5)

3.218497607s ago: executing program 1 (id=2398):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi1\x00', 0x581102, 0x0)
syz_usb_connect(0x3, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040f71d00250001000000010902220001010080000904"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mydev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mydev/swradio24\x00', 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r4, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/rt_acct\x00')
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000340)={0xfb}, 0x4)
ioctl(r1, 0x80685600, &(0x7f00000002c0))
time(0xffffffffffffffff)
ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f00000004c0)={0x10002, 0x30000, 0xffffffbf, 0x8401, 0x4, 0x0, 0x2, 0xfffffed8, 0x4, 0x4711, 0x2, 0x1, &(0x7f0000000380), 0x0, 0x0})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sec/safesetid/gid_allowlist_policy\x00', 0x2, 0x0)
write$binfmt_script(r7, &(0x7f00000003c0)={'#! ', './file0'}, 0xb)
ioctl$UBLK_U_CMD_SET_PARAMS(r1, 0xc0207508, &(0x7f0000000540)={0x0, 0xffff, 0x70, &(0x7f0000000400)={0x70, 0x32ed8e0c17efba6d, {0x2, 0xc, 0x9, 0x0, 0x9, 0x5, 0x8, 0x7d, 0x6}, {0x80000, 0xfffffffa, 0x9, 0x7, 0x9}, {0x7ff, 0x1, 0xfffffffe, 0x1c}, {0x6, 0x8, 0xfffffff8}}})
r8 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r8, 0x8010671f, 0x0)
ioctl$UI_SET_PROPBIT(r8, 0x4004556e, 0x11d)
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, &(0x7f0000000040)={0x4, 0x8000})
r10 = mq_open(&(0x7f0000000080)='{!\x00', 0x800, 0x120, &(0x7f0000000100)={0x7b, 0x4, 0x2, 0x6})
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r9, 0x6628)
ioctl$XFS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000000140))
listen(0xffffffffffffffff, 0xeb5)

2.958539031s ago: executing program 5 (id=2399):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./rpc_pipefs\x00', &(0x7f0000000300)='rpc_pipefs\x00', 0x0, 0x0) (fail_nth: 58)

2.827840491s ago: executing program 8 (id=2400):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]}, 0x24}, 0x1, 0x0, 0x2000000, 0x4040000}, 0x0)

2.176580664s ago: executing program 5 (id=2401):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000200)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0), 0x171, 0x0, 0x0, 0x97ff}}], 0x400000000000172, 0x4001c00)
write(r0, &(0x7f0000000140)='1', 0x1)

2.163235599s ago: executing program 8 (id=2402):
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000640)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xff}, @broadcast, @device_b, @random="1a370e1973e2", {0xa, 0x80}, "", @value={0xf, 0x1, 0x1}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x3, 0x0, 0x1, 0x1}}, @a_msdu}, 0x1e) (fail_nth: 53)

2.011949647s ago: executing program 0 (id=2403):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000308000300", @ANYRES32=r2, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e008000", @ANYBLOB="04000100"], 0x460}}, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)

1.213326797s ago: executing program 5 (id=2404):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002600)="2e00000011008b88040f80ec59acbc0413a1f8480f0009005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x4)

1.064158187s ago: executing program 5 (id=2405):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x802, 0x165)
write(r0, &(0x7f00000002c0)='100', 0x3)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000480))
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x31, 0x9, 0x70bd25, 0x4000, {0x4}}, 0x14}, 0x1, 0x6000, 0x0, 0x1}, 0x4080040)

1.011945164s ago: executing program 8 (id=2406):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x3000000}, 0x80)

424.872284ms ago: executing program 8 (id=2407):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100000000f5000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24042840)

368.474107ms ago: executing program 0 (id=2408):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}, 0x1, 0x2000, 0x0, 0x8000}, 0x0)

300.014899ms ago: executing program 5 (id=2409):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x608000)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}})

267.512365ms ago: executing program 1 (id=2410):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x40}, 0x19}, 0x0)

153.956187ms ago: executing program 8 (id=2411):
r0 = fsopen(&(0x7f0000000200)='adfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='uid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000006c0)=0x7)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000980)={<r2=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x10001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="18000000041401002d017000fedbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000bc0)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @multicast2}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118)
r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000840)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f0000000180)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f0000000200), 0x318, 0x0)
mkdir(&(0x7f0000000240)='./file0\x00', 0x97)
mkdir(&(0x7f0000000280)='./file1\x00', 0x13b)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x8000, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r10, 0xae78, &(0x7f00000008c0)=0x2)
open(&(0x7f0000000400)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)

63.912446ms ago: executing program 0 (id=2412):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000580)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000000a4000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110)

63.686909ms ago: executing program 5 (id=2413):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000008400000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001"], 0x17d4}}, 0x4)

0s ago: executing program 1 (id=2414):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000005c0)="671723d7c6012c", 0x7}, {&(0x7f0000000000)="9e91d91a92dc7c8fa2c24fbe79d9344d0c668de5d6c228230000555f0000000000", 0x21}], 0x2}, 0x20008b88)

kernel console output (not intermixed with test programs):

502] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  708.927224][T13502] CPU: 0 UID: 0 PID: 13502 Comm: syz.1.2065 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  708.927246][T13502] Tainted: [L]=SOFTLOCKUP
[  708.927252][T13502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  708.927263][T13502] Call Trace:
[  708.927272][T13502]  <TASK>
[  708.927279][T13502]  dump_stack_lvl+0xe8/0x150
[  708.927308][T13502]  should_fail_ex+0x3eb/0x540
[  708.927338][T13502]  _copy_to_iter+0x1e4/0x17e0
[  708.927379][T13502]  ? __pfx__copy_to_iter+0x10/0x10
[  708.927406][T13502]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  708.927431][T13502]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  708.927457][T13502]  __skb_datagram_iter+0xf8/0x980
[  708.927481][T13502]  ? __pfx_sk_busy_loop_end+0x10/0x10
[  708.927499][T13502]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  708.927530][T13502]  skb_copy_datagram_iter+0xb5/0x240
[  708.927558][T13502]  netlink_recvmsg+0x2c8/0xa70
[  708.927583][T13502]  ? __pfx_netlink_recvmsg+0x10/0x10
[  708.927607][T13502]  ? aa_sock_msg_perm+0x144/0x210
[  708.927634][T13502]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  708.927653][T13502]  ? security_socket_recvmsg+0x7e/0x2c0
[  708.927670][T13502]  ? __pfx_netlink_recvmsg+0x10/0x10
[  708.927689][T13502]  sock_recvmsg+0x196/0x1e0
[  708.927708][T13502]  __sys_recvfrom+0x231/0x3a0
[  708.927732][T13502]  ? __pfx___sys_recvfrom+0x10/0x10
[  708.927773][T13502]  ? do_user_addr_fault+0xd3f/0x1480
[  708.927795][T13502]  __x64_sys_recvfrom+0xde/0x100
[  708.927818][T13502]  do_syscall_64+0x166/0x520
[  708.927842][T13502]  ? trace_irq_disable+0x3b/0x140
[  708.927863][T13502]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.927880][T13502]  ? clear_bhb_loop+0x70/0xc0
[  708.927900][T13502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  708.927916][T13502] RIP: 0033:0x7f807c15fd8e
[  708.927932][T13502] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  708.927947][T13502] RSP: 002b:00007f807d04cea8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  708.927964][T13502] RAX: ffffffffffffffda RBX: 00007f807d04e6c0 RCX: 00007f807c15fd8e
[  708.927977][T13502] RDX: 0000000000001000 RSI: 00007f807d04cfe0 RDI: 0000000000000004
[  708.927988][T13502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  708.927997][T13502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  708.928007][T13502] R13: 0000000000000000 R14: 00007f807d04cfe0 R15: 0000000000000000
[  708.928030][T13502]  </TASK>
[  709.047474][ T5753] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  709.240663][ T5753] usb 9-1: Using ep0 maxpacket: 16
[  709.251401][ T5753] usb 9-1: New USB device found: idVendor=41de, idProduct=4351, bcdDevice=84.53
[  709.269629][T13502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  709.271427][ T5753] usb 9-1: config 12 has an invalid interface number: 159 but max is 0
[  709.271445][ T5753] usb 9-1: config 12 has no interface number 0
[  709.271476][ T5753] usb 9-1: config 12 interface 159 altsetting 234 bulk endpoint 0xC has invalid maxpacket 8
[  709.271495][ T5753] usb 9-1: config 12 interface 159 altsetting 234 bulk endpoint 0xF has invalid maxpacket 32
[  709.271514][ T5753] usb 9-1: config 12 interface 159 has no altsetting 0
[  709.274198][ T5753] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.274214][ T5753] usb 9-1: Product: syz
[  709.274225][ T5753] usb 9-1: Manufacturer: syz
[  709.274237][ T5753] usb 9-1: SerialNumber: syz
[  709.368953][T13498] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  709.369041][T13498] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  709.766416][T13511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2067'.
[  709.766440][T13511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2067'.
[  710.038994][T13514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  710.044212][T13514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  710.082532][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2069'.
[  710.118780][T13517] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2070'.
[  710.479279][T13525] gadgetfs: bound to dummy_udc driver
[  711.591341][T13542] FAULT_INJECTION: forcing a failure.
[  711.591341][T13542] name failslab, interval 1, probability 0, space 0, times 0
[  711.591364][T13542] CPU: 0 UID: 0 PID: 13542 Comm: syz.5.2080 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  711.591395][T13542] Tainted: [L]=SOFTLOCKUP
[  711.591403][T13542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  711.591416][T13542] Call Trace:
[  711.591423][T13542]  <TASK>
[  711.591430][T13542]  dump_stack_lvl+0xe8/0x150
[  711.591461][T13542]  should_fail_ex+0x3eb/0x540
[  711.591492][T13542]  ? __alloc_skb+0x1db/0x7a0
[  711.591513][T13542]  should_failslab+0xa8/0x100
[  711.591544][T13542]  ? __alloc_skb+0x1db/0x7a0
[  711.591563][T13542]  kmem_cache_alloc_node_noprof+0x9c/0x600
[  711.591582][T13542]  ? __alloc_skb+0x18d/0x7a0
[  711.591602][T13542]  ? __alloc_skb+0x1db/0x7a0
[  711.591627][T13542]  __alloc_skb+0x1db/0x7a0
[  711.591651][T13542]  alloc_uevent_skb+0x7d/0x230
[  711.591677][T13542]  kobject_uevent_net_broadcast+0x2fa/0x560
[  711.591704][T13542]  kobject_uevent_env+0x566/0x9e0
[  711.591732][T13542]  device_bind_driver+0x4f/0x60
[  711.591757][T13542]  mac80211_hwsim_new_radio+0x3c0/0x5990
[  711.591807][T13542]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  711.591833][T13542]  ? trace_kmalloc+0x2a/0xf0
[  711.591856][T13542]  hwsim_new_radio_nl+0xd8b/0xf90
[  711.591892][T13542]  genl_family_rcv_msg_doit+0x233/0x340
[  711.591922][T13542]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  711.591957][T13542]  ? bpf_lsm_capable+0x9/0x20
[  711.591980][T13542]  ? security_capable+0x7e/0x2c0
[  711.592007][T13542]  genl_rcv_msg+0x614/0x7a0
[  711.592035][T13542]  ? __pfx_genl_rcv_msg+0x10/0x10
[  711.592058][T13542]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  711.592092][T13542]  netlink_rcv_skb+0x226/0x4a0
[  711.592121][T13542]  ? __pfx_genl_rcv_msg+0x10/0x10
[  711.592145][T13542]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  711.592177][T13542]  ? down_read+0x2b9/0x320
[  711.592197][T13542]  genl_rcv+0x28/0x40
[  711.592219][T13542]  netlink_unicast+0x8ef/0xa80
[  711.592261][T13542]  netlink_sendmsg+0x7f0/0xb20
[  711.592285][T13542]  ? __pfx_netlink_sendmsg+0x10/0x10
[  711.592307][T13542]  ? aa_sock_msg_perm+0x144/0x210
[  711.592336][T13542]  ? apparmor_socket_sendmsg+0x98/0x360
[  711.592359][T13542]  ? __pfx_netlink_sendmsg+0x10/0x10
[  711.592377][T13542]  sock_sendmsg_nosec+0x14e/0x190
[  711.592397][T13542]  ____sys_sendmsg+0x54e/0x850
[  711.592424][T13542]  ? __pfx_____sys_sendmsg+0x10/0x10
[  711.592461][T13542]  ? import_iovec+0x73/0xa0
[  711.592491][T13542]  ___sys_sendmsg+0x2a6/0x360
[  711.592512][T13542]  ? __lock_acquire+0x747/0x2de0
[  711.592536][T13542]  ? __pfx____sys_sendmsg+0x10/0x10
[  711.592562][T13542]  ? futex_wake+0x51b/0x5f0
[  711.592604][T13542]  ? __fget_files+0x3a2/0x420
[  711.592623][T13542]  ? __fget_files+0x2a/0x420
[  711.592650][T13542]  __x64_sys_sendmsg+0x1b1/0x290
[  711.592676][T13542]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  711.592716][T13542]  do_syscall_64+0x166/0x520
[  711.592741][T13542]  ? trace_irq_disable+0x3b/0x140
[  711.592761][T13542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.592778][T13542]  ? clear_bhb_loop+0x70/0xc0
[  711.592799][T13542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.592816][T13542] RIP: 0033:0x7f404199f559
[  711.592832][T13542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  711.592847][T13542] RSP: 002b:00007f404292d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  711.592865][T13542] RAX: ffffffffffffffda RBX: 00007f4041c25fa0 RCX: 00007f404199f559
[  711.592878][T13542] RDX: 0000000004080040 RSI: 0000200000000380 RDI: 0000000000000006
[  711.592889][T13542] RBP: 00007f4041a36b50 R08: 0000000000000000 R09: 0000000000000000
[  711.592900][T13542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  711.592910][T13542] R13: 00007f4041c26038 R14: 00007f4041c25fa0 R15: 00007ffdda124708
[  711.592937][T13542]  </TASK>
[  712.052632][T13548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2081'.
[  712.382784][ T5753] usb-storage 9-1:12.159: USB Mass Storage device detected
[  712.532798][ T5753] usb 9-1: USB disconnect, device number 31
[  712.559853][T13552] FAULT_INJECTION: forcing a failure.
[  712.559853][T13552] name failslab, interval 1, probability 0, space 0, times 0
[  712.559882][T13552] CPU: 0 UID: 0 PID: 13552 Comm: syz.1.2082 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  712.559905][T13552] Tainted: [L]=SOFTLOCKUP
[  712.559921][T13552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  712.559932][T13552] Call Trace:
[  712.559938][T13552]  <TASK>
[  712.559946][T13552]  dump_stack_lvl+0xe8/0x150
[  712.559975][T13552]  should_fail_ex+0x3eb/0x540
[  712.560006][T13552]  should_failslab+0xa8/0x100
[  712.560029][T13552]  ? security_inode_alloc+0x39/0x310
[  712.560054][T13552]  kmem_cache_alloc_noprof+0x9c/0x600
[  712.560073][T13552]  ? __pfx_make_kgid+0x10/0x10
[  712.560091][T13552]  ? security_inode_alloc+0x39/0x310
[  712.560120][T13552]  security_inode_alloc+0x39/0x310
[  712.560146][T13552]  inode_init_always_gfp+0x97e/0xd30
[  712.560168][T13552]  ? __pfx_rpc_alloc_inode+0x10/0x10
[  712.560191][T13552]  alloc_inode+0x82/0x1b0
[  712.560209][T13552]  new_inode+0x1f/0x170
[  712.560229][T13552]  rpc_new_dir+0x8f/0x370
[  712.560255][T13552]  rpc_fill_super+0x287/0x420
[  712.560277][T13552]  ? __pfx_rpc_fill_super+0x10/0x10
[  712.560300][T13552]  get_tree_keyed+0xe5/0x170
[  712.560323][T13552]  vfs_get_tree+0x92/0x2a0
[  712.560346][T13552]  do_new_mount+0x325/0xb00
[  712.560368][T13552]  ? __pfx_do_new_mount+0x10/0x10
[  712.560388][T13552]  ? ns_capable+0x84/0xe0
[  712.560410][T13552]  ? path_mount+0x647/0x1050
[  712.560430][T13552]  ? user_path_at+0xd4/0x160
[  712.560452][T13552]  __se_sys_mount+0x31d/0x420
[  712.560475][T13552]  ? __pfx___se_sys_mount+0x10/0x10
[  712.560498][T13552]  ? __x64_sys_mount+0x20/0xc0
[  712.560517][T13552]  do_syscall_64+0x166/0x520
[  712.560542][T13552]  ? trace_irq_disable+0x3b/0x140
[  712.560563][T13552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.560580][T13552]  ? clear_bhb_loop+0x70/0xc0
[  712.560601][T13552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  712.560618][T13552] RIP: 0033:0x7f807c19f559
[  712.560634][T13552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.560649][T13552] RSP: 002b:00007f807d04e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  712.560666][T13552] RAX: ffffffffffffffda RBX: 00007f807c425fa0 RCX: 00007f807c19f559
[  712.560678][T13552] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000
[  712.560690][T13552] RBP: 00007f807d04e090 R08: 0000000000000000 R09: 0000000000000000
[  712.560700][T13552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  712.560710][T13552] R13: 00007f807c426038 R14: 00007f807c425fa0 R15: 00007ffdcdfead98
[  712.560736][T13552]  </TASK>
[  713.084954][    C0] net_ratelimit: 454 callbacks suppressed
[  713.575229][T13572] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20265
[  713.577383][T13574] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2090'.
[  713.749732][T13576] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2091'.
[  714.144636][T13584] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2094'.
[  714.144701][T13584] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2094'.
[  714.376488][T13587] overlayfs: workdir and upperdir must be separate subtrees
[  714.675907][T13595] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2098'.
[  714.675958][T13595] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2098'.
[  714.916398][T13603] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2101'.
[  714.942199][T13604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.942743][T13604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  715.313352][T13608] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  715.349150][T13608] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  715.796542][T13615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  715.808186][T13615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  716.916499][T13628] FAULT_INJECTION: forcing a failure.
[  716.916499][T13628] name failslab, interval 1, probability 0, space 0, times 0
[  716.916522][T13628] CPU: 0 UID: 0 PID: 13628 Comm: syz.5.2112 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  716.916549][T13628] Tainted: [L]=SOFTLOCKUP
[  716.916557][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  716.916570][T13628] Call Trace:
[  716.916576][T13628]  <TASK>
[  716.916584][T13628]  dump_stack_lvl+0xe8/0x150
[  716.916613][T13628]  should_fail_ex+0x3eb/0x540
[  716.916643][T13628]  should_failslab+0xa8/0x100
[  716.916668][T13628]  __kmalloc_cache_noprof+0x9e/0x600
[  716.916687][T13628]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  716.916713][T13628]  ? device_add+0xb6/0xb80
[  716.916740][T13628]  ? device_add+0xb6/0xb80
[  716.916765][T13628]  device_add+0xb6/0xb80
[  716.916785][T13628]  ? iommu_mock_device_add+0x6d/0x1e0
[  716.916809][T13628]  iommu_mock_device_add+0x83/0x1e0
[  716.916832][T13628]  iommufd_test+0x38d1/0x6360
[  716.916863][T13628]  ? __lock_acquire+0x747/0x2de0
[  716.916883][T13628]  ? __pfx_iommufd_test+0x10/0x10
[  716.916915][T13628]  ? tomoyo_path_number_perm+0x219/0x5f0
[  716.916938][T13628]  ? tomoyo_path_number_perm+0x219/0x5f0
[  716.916961][T13628]  ? lock_acquire+0x115/0x350
[  716.916993][T13628]  ? __might_fault+0xaf/0x130
[  716.917024][T13628]  iommufd_fops_ioctl+0x465/0x600
[  716.917045][T13628]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  716.917066][T13628]  ? __fget_files+0x2a/0x420
[  716.917094][T13628]  ? bpf_lsm_file_ioctl+0x9/0x20
[  716.917116][T13628]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  716.917134][T13628]  __se_sys_ioctl+0xfc/0x170
[  716.917159][T13628]  do_syscall_64+0x166/0x520
[  716.917183][T13628]  ? trace_irq_disable+0x3b/0x140
[  716.917204][T13628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.917221][T13628]  ? clear_bhb_loop+0x70/0xc0
[  716.917243][T13628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.917260][T13628] RIP: 0033:0x7f404199f559
[  716.917277][T13628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  716.917291][T13628] RSP: 002b:00007f404292d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  716.917308][T13628] RAX: ffffffffffffffda RBX: 00007f4041c25fa0 RCX: 00007f404199f559
[  716.917321][T13628] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000003
[  716.917332][T13628] RBP: 00007f404292d090 R08: 0000000000000000 R09: 0000000000000000
[  716.917342][T13628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  716.917352][T13628] R13: 00007f4041c26038 R14: 00007f4041c25fa0 R15: 00007ffdda124708
[  716.917378][T13628]  </TASK>
[  717.292588][T13632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2113'.
[  717.309388][T13631] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2111'.
[  717.539729][T13639] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  717.774130][T13643] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2117'.
[  718.130885][T13651] FAULT_INJECTION: forcing a failure.
[  718.130885][T13651] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  718.130910][T13651] CPU: 0 UID: 0 PID: 13651 Comm: syz.0.2121 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  718.130933][T13651] Tainted: [L]=SOFTLOCKUP
[  718.130939][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  718.130950][T13651] Call Trace:
[  718.130957][T13651]  <TASK>
[  718.130967][T13651]  dump_stack_lvl+0xe8/0x150
[  718.130996][T13651]  should_fail_ex+0x3eb/0x540
[  718.131027][T13651]  prepare_alloc_pages+0x21e/0x5f0
[  718.131052][T13651]  __alloc_frozen_pages_noprof+0x17c/0x410
[  718.131076][T13651]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  718.131099][T13651]  ? sock_recvmsg+0x196/0x1e0
[  718.131121][T13651]  ? policy_nodemask+0x31b/0x980
[  718.131150][T13651]  alloc_pages_mpol+0x21e/0x390
[  718.131178][T13651]  folio_alloc_mpol_noprof+0x39/0x160
[  718.131204][T13651]  vma_alloc_folio_noprof+0xe1/0x1e0
[  718.131230][T13651]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  718.131258][T13651]  ? vma_has_anon_rmap+0xc9/0x270
[  718.131282][T13651]  do_wp_page+0x1166/0x4b80
[  718.131318][T13651]  ? __pfx_do_wp_page+0x10/0x10
[  718.131339][T13651]  ? do_raw_spin_lock+0x12b/0x2f0
[  718.131368][T13651]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  718.131403][T13651]  handle_mm_fault+0x19c9/0x2f80
[  718.131436][T13651]  ? handle_mm_fault+0xee/0x2f80
[  718.131466][T13651]  ? __pfx_handle_mm_fault+0x10/0x10
[  718.131489][T13651]  ? lock_vma_under_rcu+0x45a/0x500
[  718.131534][T13651]  do_user_addr_fault+0xb35/0x1480
[  718.131561][T13651]  ? trace_page_fault_user+0x84/0x1e0
[  718.131580][T13651]  exc_page_fault+0x6a/0xc0
[  718.131612][T13651]  asm_exc_page_fault+0x26/0x30
[  718.131628][T13651] RIP: 0033:0x7f788a95f345
[  718.131644][T13651] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 <f0> 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00
[  718.131659][T13651] RSP: 002b:00007f7888bf4e00 EFLAGS: 00010293
[  718.131674][T13651] RAX: 0000000000000008 RBX: 00007f788b757e20 RCX: 0000000000000000
[  718.131685][T13651] RDX: 0000000000000000 RSI: 00007f788aa54983 RDI: 00007f788b757e20
[  718.131696][T13651] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005
[  718.131707][T13651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f788aa5469b
[  718.131718][T13651] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007f788aa54983
[  718.131744][T13651]  </TASK>
[  718.288931][    C0] net_ratelimit: 494 callbacks suppressed
[  718.422452][T13651] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  718.423472][T13651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  719.138979][T13656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2123'.
[  719.139000][T13656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2123'.
[  719.565081][T12036] Bluetooth: hci1: command 0x0406 tx timeout
[  719.565247][T13636] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  720.453882][T13636] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  720.454240][T13636] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  720.454330][T13636] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  720.484538][T13636] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  720.738239][T13667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2126'.
[  721.280588][T13679] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  721.321508][T13679] overlayfs: missing 'lowerdir'
[  721.402775][T13682] FAULT_INJECTION: forcing a failure.
[  721.402775][T13682] name failslab, interval 1, probability 0, space 0, times 0
[  721.402798][T13682] CPU: 0 UID: 0 PID: 13682 Comm: syz.8.2133 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  721.402827][T13682] Tainted: [L]=SOFTLOCKUP
[  721.402833][T13682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  721.402845][T13682] Call Trace:
[  721.402852][T13682]  <TASK>
[  721.402860][T13682]  dump_stack_lvl+0xe8/0x150
[  721.402891][T13682]  should_fail_ex+0x3eb/0x540
[  721.402920][T13682]  ? __pfx_dev_uevent_name+0x10/0x10
[  721.402940][T13682]  should_failslab+0xa8/0x100
[  721.402967][T13682]  __kmalloc_cache_noprof+0x9e/0x600
[  721.402990][T13682]  ? kobject_uevent_env+0x289/0x9e0
[  721.403012][T13682]  ? kobject_uevent_env+0x289/0x9e0
[  721.403036][T13682]  ? __pfx_dev_uevent_name+0x10/0x10
[  721.403054][T13682]  kobject_uevent_env+0x289/0x9e0
[  721.403084][T13682]  device_bind_driver+0x4f/0x60
[  721.403113][T13682]  mac80211_hwsim_new_radio+0x3c0/0x5990
[  721.403165][T13682]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  721.403192][T13682]  ? trace_kmalloc+0x2a/0xf0
[  721.403216][T13682]  hwsim_new_radio_nl+0xd8b/0xf90
[  721.403252][T13682]  genl_family_rcv_msg_doit+0x233/0x340
[  721.403282][T13682]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  721.403323][T13682]  ? bpf_lsm_capable+0x9/0x20
[  721.403348][T13682]  ? security_capable+0x7e/0x2c0
[  721.403378][T13682]  genl_rcv_msg+0x614/0x7a0
[  721.403407][T13682]  ? __pfx_genl_rcv_msg+0x10/0x10
[  721.403430][T13682]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  721.403458][T13682]  ? __asan_memcpy+0x40/0x70
[  721.403483][T13682]  netlink_rcv_skb+0x226/0x4a0
[  721.403503][T13682]  ? __pfx_genl_rcv_msg+0x10/0x10
[  721.403528][T13682]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  721.403558][T13682]  ? down_read+0x2b9/0x320
[  721.403578][T13682]  genl_rcv+0x28/0x40
[  721.403600][T13682]  netlink_unicast+0x8ef/0xa80
[  721.403644][T13682]  netlink_sendmsg+0x7f0/0xb20
[  721.403668][T13682]  ? __pfx_netlink_sendmsg+0x10/0x10
[  721.403690][T13682]  ? aa_sock_msg_perm+0x144/0x210
[  721.403718][T13682]  ? apparmor_socket_sendmsg+0x98/0x360
[  721.403746][T13682]  ? __pfx_netlink_sendmsg+0x10/0x10
[  721.403765][T13682]  sock_sendmsg_nosec+0x14e/0x190
[  721.403788][T13682]  ____sys_sendmsg+0x54e/0x850
[  721.403819][T13682]  ? __pfx_____sys_sendmsg+0x10/0x10
[  721.403855][T13682]  ? import_iovec+0x73/0xa0
[  721.403887][T13682]  ___sys_sendmsg+0x2a6/0x360
[  721.403908][T13682]  ? __lock_acquire+0x747/0x2de0
[  721.403930][T13682]  ? __pfx____sys_sendmsg+0x10/0x10
[  721.403956][T13682]  ? futex_wait+0x2a2/0x390
[  721.403998][T13682]  ? __fget_files+0x3a2/0x420
[  721.404016][T13682]  ? __fget_files+0x2a/0x420
[  721.404042][T13682]  __x64_sys_sendmsg+0x1b1/0x290
[  721.404067][T13682]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  721.404106][T13682]  do_syscall_64+0x166/0x520
[  721.404130][T13682]  ? trace_irq_disable+0x3b/0x140
[  721.404151][T13682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.404168][T13682]  ? clear_bhb_loop+0x70/0xc0
[  721.404188][T13682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.404205][T13682] RIP: 0033:0x7f526cb9f559
[  721.404222][T13682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  721.404236][T13682] RSP: 002b:00007f526adf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  721.404254][T13682] RAX: ffffffffffffffda RBX: 00007f526ce25fa0 RCX: 00007f526cb9f559
[  721.404266][T13682] RDX: 0000000004080040 RSI: 0000200000000380 RDI: 0000000000000006
[  721.404278][T13682] RBP: 00007f526cc36b50 R08: 0000000000000000 R09: 0000000000000000
[  721.404289][T13682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  721.404300][T13682] R13: 00007f526ce26038 R14: 00007f526ce25fa0 R15: 00007fff236713c8
[  721.404335][T13682]  </TASK>
[  721.647034][T12036] Bluetooth: hci2: command 0x0c1a tx timeout
[  722.230889][T13675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  722.231391][T13675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.317504][T13680] rxe_eth0 speed is unknown, defaulting to 1000
[  722.357974][T13686] 0x000000000000-0x000000010000 : ""
[  722.379429][T13686] ftl_cs: FTL header not found.
[  722.413339][T13688] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.525203][T12036] Bluetooth: hci4: command 0x0c1a tx timeout
[  722.678510][T13688] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.888382][T13688] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  722.947083][T13694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2138'.
[  723.032089][T13688] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  723.188585][T13696] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2139'.
[  723.325006][    C0] net_ratelimit: 642 callbacks suppressed
[  723.475457][ T8681] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  723.636101][ T8681] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  723.698611][T13702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'.
[  723.698633][T13702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'.
[  723.698647][T13702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'.
[  723.928259][T13702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'.
[  723.928280][T13702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'.
[  724.363631][T13702] __nla_validate_parse: 3 callbacks suppressed
[  724.363648][T13702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'.
[  724.363664][T13702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'.
[  724.363678][T13702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'.
[  724.462547][T13711] netlink: 'syz.8.2145': attribute type 21 has an invalid length.
[  724.607621][T12036] Bluetooth: hci4: command 0x0c1a tx timeout
[  724.703067][T13715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2147'.
[  724.703132][T13715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2147'.
[  724.814663][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2148'.
[  724.850184][ T8681] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  724.852028][T11275] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  726.685144][T12036] Bluetooth: hci4: command 0x0c1a tx timeout
[  726.838404][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2159'.
[  726.869000][T13745] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  727.051576][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2162'.
[  727.074121][T13749] FAULT_INJECTION: forcing a failure.
[  727.074121][T13749] name failslab, interval 1, probability 0, space 0, times 0
[  727.074142][T13749] CPU: 0 UID: 0 PID: 13749 Comm: syz.5.2161 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  727.074164][T13749] Tainted: [L]=SOFTLOCKUP
[  727.074170][T13749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  727.074181][T13749] Call Trace:
[  727.074263][T13749]  <TASK>
[  727.074271][T13749]  dump_stack_lvl+0xe8/0x150
[  727.074301][T13749]  should_fail_ex+0x3eb/0x540
[  727.074332][T13749]  should_failslab+0xa8/0x100
[  727.074357][T13749]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  727.074377][T13749]  ? __lock_acquire+0x747/0x2de0
[  727.074396][T13749]  ? __kernfs_new_node+0xa9/0x980
[  727.074421][T13749]  ? __kernfs_new_node+0xa9/0x980
[  727.074451][T13749]  kstrdup+0x42/0x100
[  727.074468][T13749]  __kernfs_new_node+0xa9/0x980
[  727.074499][T13749]  ? __pfx___kernfs_new_node+0x10/0x10
[  727.074525][T13749]  ? kernfs_root+0x1c/0x230
[  727.074553][T13749]  ? kernfs_root+0x1c/0x230
[  727.074575][T13749]  ? kernfs_root+0x1c/0x230
[  727.074597][T13749]  ? kernfs_root+0x1c/0x230
[  727.074623][T13749]  kernfs_create_dir_ns+0xf7/0x220
[  727.074643][T13749]  sysfs_create_dir_ns+0x12f/0x2a0
[  727.074669][T13749]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  727.074695][T13749]  ? do_raw_spin_unlock+0xf5/0x200
[  727.074722][T13749]  kobject_add_internal+0x622/0xcd0
[  727.074748][T13749]  kobject_add+0x163/0x240
[  727.074770][T13749]  ? __pfx_kobject_add+0x10/0x10
[  727.074798][T13749]  ? bus_get_dev_root+0x127/0x160
[  727.074821][T13749]  ? get_device_parent+0x38c/0x3a0
[  727.074841][T13749]  ? __pfx_klist_children_get+0x10/0x10
[  727.074860][T13749]  device_add+0x3fa/0xb80
[  727.074884][T13749]  iommu_mock_device_add+0x83/0x1e0
[  727.074909][T13749]  iommufd_test+0x38d1/0x6360
[  727.074940][T13749]  ? __lock_acquire+0x747/0x2de0
[  727.074957][T13749]  ? __pfx_iommufd_test+0x10/0x10
[  727.074990][T13749]  ? tomoyo_path_number_perm+0x219/0x5f0
[  727.075012][T13749]  ? tomoyo_path_number_perm+0x219/0x5f0
[  727.075036][T13749]  ? lock_acquire+0x115/0x350
[  727.075065][T13749]  ? __might_fault+0xaf/0x130
[  727.075095][T13749]  iommufd_fops_ioctl+0x465/0x600
[  727.075117][T13749]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  727.075137][T13749]  ? __fget_files+0x2a/0x420
[  727.075166][T13749]  ? bpf_lsm_file_ioctl+0x9/0x20
[  727.075187][T13749]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  727.075204][T13749]  __se_sys_ioctl+0xfc/0x170
[  727.075229][T13749]  do_syscall_64+0x166/0x520
[  727.075253][T13749]  ? trace_irq_disable+0x3b/0x140
[  727.075274][T13749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.075291][T13749]  ? clear_bhb_loop+0x70/0xc0
[  727.075313][T13749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.075329][T13749] RIP: 0033:0x7f404199f559
[  727.075344][T13749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  727.075358][T13749] RSP: 002b:00007f404292d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  727.075376][T13749] RAX: ffffffffffffffda RBX: 00007f4041c25fa0 RCX: 00007f404199f559
[  727.075388][T13749] RDX: 0000200000000440 RSI: 0000000000003ba0 RDI: 0000000000000003
[  727.075398][T13749] RBP: 00007f404292d090 R08: 0000000000000000 R09: 0000000000000000
[  727.075408][T13749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  727.075418][T13749] R13: 00007f4041c26038 R14: 00007f4041c25fa0 R15: 00007ffdda124708
[  727.075443][T13749]  </TASK>
[  727.523034][T13749] kobject: kobject_add_internal failed for iommufd_mock0 (error: -12 parent: devices)
[  727.854571][T12036] Bluetooth: hci2: Malformed MSFT vendor event: 0x02
[  728.106894][ T5801] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  728.255124][ T5801] usb 6-1: Using ep0 maxpacket: 16
[  728.264755][ T5801] usb 6-1: New USB device found: idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  728.295826][ T5801] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  728.303131][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.303146][ T5801] usb 6-1: Product: syz
[  728.303158][ T5801] usb 6-1: Manufacturer: syz
[  728.303169][ T5801] usb 6-1: SerialNumber: syz
[  728.344236][ T5801] usb 6-1: config 0 descriptor??
[  728.357878][T13768] gfs2: path_lookup on  returned error -2
[  728.364986][    C0] net_ratelimit: 617 callbacks suppressed
[  728.443141][T13771] 0x0000000000ec-0x0000000000f2 : ""
[  728.459088][T13771] FAULT_INJECTION: forcing a failure.
[  728.459088][T13771] name failslab, interval 1, probability 0, space 0, times 0
[  728.459112][T13771] CPU: 0 UID: 0 PID: 13771 Comm: syz.1.2169 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  728.459134][T13771] Tainted: [L]=SOFTLOCKUP
[  728.459140][T13771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  728.459151][T13771] Call Trace:
[  728.459158][T13771]  <TASK>
[  728.459165][T13771]  dump_stack_lvl+0xe8/0x150
[  728.459195][T13771]  should_fail_ex+0x3eb/0x540
[  728.459224][T13771]  should_failslab+0xa8/0x100
[  728.459250][T13771]  __kmalloc_cache_noprof+0x9e/0x600
[  728.459269][T13771]  ? __kmalloc_cache_noprof+0x148/0x600
[  728.459286][T13771]  ? nvmem_register+0x11a/0x12f0
[  728.459307][T13771]  ? nvmem_register+0x11a/0x12f0
[  728.459333][T13771]  nvmem_register+0x11a/0x12f0
[  728.459355][T13771]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  728.459381][T13771]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  728.459405][T13771]  add_mtd_device+0xf3d/0x17b0
[  728.459436][T13771]  ? __pfx_add_mtd_device+0x10/0x10
[  728.459463][T13771]  ? __pfx_mtd_nvmem_reg_read+0x10/0x10
[  728.459483][T13771]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  728.459520][T13771]  mtd_add_partition+0x388/0x590
[  728.459544][T13771]  ? __pfx_mtd_add_partition+0x10/0x10
[  728.459568][T13771]  ? __might_fault+0xaf/0x130
[  728.459598][T13771]  mtdchar_blkpg_ioctl+0x28a/0x2c0
[  728.459620][T13771]  ? __pfx___dynamic_pr_debug+0x10/0x10
[  728.459644][T13771]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[  728.459680][T13771]  ? __might_fault+0xaf/0x130
[  728.459709][T13771]  mtdchar_ioctl+0x14f7/0x1bc0
[  728.459735][T13771]  ? __pfx_mtdchar_ioctl+0x10/0x10
[  728.459763][T13771]  ? __lock_acquire+0x747/0x2de0
[  728.459794][T13771]  ? tomoyo_path_number_perm+0x219/0x5f0
[  728.459822][T13771]  ? __mutex_trylock_common+0x15f/0x270
[  728.459847][T13771]  ? __pfx___mutex_trylock_common+0x10/0x10
[  728.459873][T13771]  ? rcu_is_watching+0x16/0xb0
[  728.459896][T13771]  ? trace_contention_end+0x3d/0x140
[  728.459920][T13771]  ? __mutex_lock+0x305/0x15a0
[  728.459954][T13771]  ? mtdchar_unlocked_ioctl+0xa1/0xd0
[  728.459976][T13771]  ? __pfx___mutex_lock+0x10/0x10
[  728.460012][T13771]  ? __fget_files+0x2a/0x420
[  728.460032][T13771]  ? __fget_files+0x2a/0x420
[  728.460053][T13771]  mtdchar_unlocked_ioctl+0xae/0xd0
[  728.460074][T13771]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[  728.460095][T13771]  __se_sys_ioctl+0xfc/0x170
[  728.460120][T13771]  do_syscall_64+0x166/0x520
[  728.460144][T13771]  ? trace_irq_disable+0x3b/0x140
[  728.460165][T13771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.460181][T13771]  ? clear_bhb_loop+0x70/0xc0
[  728.460202][T13771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.460218][T13771] RIP: 0033:0x7f807c19f559
[  728.460234][T13771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.460249][T13771] RSP: 002b:00007f807d04e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  728.460266][T13771] RAX: ffffffffffffffda RBX: 00007f807c425fa0 RCX: 00007f807c19f559
[  728.460278][T13771] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000003
[  728.460289][T13771] RBP: 00007f807d04e090 R08: 0000000000000000 R09: 0000000000000000
[  728.460300][T13771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  728.460310][T13771] R13: 00007f807c426038 R14: 00007f807c425fa0 R15: 00007ffdcdfead98
[  728.460336][T13771]  </TASK>
[  729.114134][ T5801] usb 6-1: USB disconnect, device number 79
[  729.125659][T13756] block nbd5: shutting down sockets
[  729.337362][T13779] netlink: 1028 bytes leftover after parsing attributes in process `syz.8.2172'.
[  729.555594][T13782] syzkaller1: entered promiscuous mode
[  729.555607][T13782] syzkaller1: entered allmulticast mode
[  729.783626][T13775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2170'.
[  730.750211][T13804] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2180'.
[  730.771321][T13804] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  730.823003][T13800] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  730.862120][T13804] overlayfs: missing 'lowerdir'
[  730.902627][T13800] VFS: Can't find a romfs filesystem on dev nullb0.
[  730.902627][T13800] 
[  731.458127][T13814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2182'.
[  731.749504][T13821] jffs2: notice: (13821) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  731.809415][T13822] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2186'.
[  732.053050][T13835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  732.067439][T13835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  732.085098][ T5751] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  732.151886][T13837] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2189'.
[  732.154682][T13837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2189'.
[  732.244965][ T5751] usb 9-1: Using ep0 maxpacket: 8
[  732.254558][ T5751] usb 9-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40
[  732.271240][ T5751] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  732.271257][ T5751] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  732.271326][ T5751] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  732.273348][ T5751] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.273364][ T5751] usb 9-1: Product: syz
[  732.273375][ T5751] usb 9-1: Manufacturer: syz
[  732.273386][ T5751] usb 9-1: SerialNumber: syz
[  732.464142][T13842] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2191'.
[  732.464177][T13842] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2191'.
[  732.464196][T13842] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2191'.
[  732.623309][T13842] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2191'.
[  732.912233][T13850] FAULT_INJECTION: forcing a failure.
[  732.912233][T13850] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  732.912259][T13850] CPU: 0 UID: 0 PID: 13850 Comm: syz.0.2192 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  732.912284][T13850] Tainted: [L]=SOFTLOCKUP
[  732.912291][T13850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  732.912302][T13850] Call Trace:
[  732.912310][T13850]  <TASK>
[  732.912319][T13850]  dump_stack_lvl+0xe8/0x150
[  732.912358][T13850]  should_fail_ex+0x3eb/0x540
[  732.912389][T13850]  _copy_from_user+0x2d/0xb0
[  732.912407][T13850]  ___sys_sendmsg+0x1c6/0x360
[  732.912436][T13850]  ? __pfx____sys_sendmsg+0x10/0x10
[  732.912458][T13850]  ? __lock_acquire+0x747/0x2de0
[  732.912516][T13850]  __sys_sendmmsg+0x273/0x4e0
[  732.912543][T13850]  ? __pfx___sys_sendmmsg+0x10/0x10
[  732.912565][T13850]  ? do_futex+0x3e7/0x4e0
[  732.912597][T13850]  ? __sys_connect+0x3a1/0x450
[  732.912635][T13850]  ? rcu_is_watching+0x16/0xb0
[  732.912665][T13850]  __x64_sys_sendmmsg+0xa0/0xc0
[  732.912697][T13850]  do_syscall_64+0x166/0x520
[  732.912723][T13850]  ? trace_irq_disable+0x3b/0x140
[  732.912744][T13850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.912762][T13850]  ? clear_bhb_loop+0x70/0xc0
[  732.912784][T13850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.912801][T13850] RIP: 0033:0x7f788a99f559
[  732.912817][T13850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  732.912840][T13850] RSP: 002b:00007f7888bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  732.912859][T13850] RAX: ffffffffffffffda RBX: 00007f788ac25fa0 RCX: 00007f788a99f559
[  732.912872][T13850] RDX: 0400000000000172 RSI: 0000200000000280 RDI: 0000000000000004
[  732.912884][T13850] RBP: 00007f788aa36b50 R08: 0000000000000000 R09: 0000000000000000
[  732.912895][T13850] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000000
[  732.912907][T13850] R13: 00007f788ac26038 R14: 00007f788ac25fa0 R15: 00007ffc89daa558
[  732.912932][T13850]  </TASK>
[  732.985996][T13821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  733.170339][T13821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  733.565031][    C0] net_ratelimit: 602 callbacks suppressed
[  733.772568][ T5751] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  733.772587][ T5751] usb 9-1: clock source 0 is not valid, cannot use
[  733.791812][ T5751] usb 9-1: 1:1: cannot get freq (v2/v3): err -71
[  733.792661][ T5751] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  734.079039][ T5751] usb 9-1: USB disconnect, device number 32
[  734.148662][ T5801] usb 6-1: new full-speed USB device number 80 using dummy_hcd
[  734.298338][ T5801] usb 6-1: New USB device found: idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  734.302547][ T5801] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[  734.302565][ T5801] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  734.302586][ T5801] usb 6-1: config 0 has no interface number 0
[  734.302619][ T5801] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  734.302640][ T5801] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  734.302664][ T5801] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  734.389248][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.389264][ T5801] usb 6-1: Product: syz
[  734.389274][ T5801] usb 6-1: Manufacturer: syz
[  734.389285][ T5801] usb 6-1: SerialNumber: syz
[  734.444460][ T5801] usb 6-1: config 0 descriptor??
[  734.784535][T13870] rxe_eth0 speed is unknown, defaulting to 1000
[  734.888232][ T5801] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71
[  734.920318][ T5801] usb 6-1: USB disconnect, device number 80
[  735.417337][T13885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  735.417844][T13885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  735.461104][T13885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  735.475472][T13885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  735.635537][ T5801] usb 9-1: new full-speed USB device number 33 using dummy_hcd
[  735.788529][ T5801] usb 9-1: not running at top speed; connect to a high speed hub
[  735.788554][ T5801] usb 9-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00
[  735.794382][ T5801] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  735.794497][ T5801] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.904473][ T5801] uvcvideo 9-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  735.904525][ T5801] uvcvideo 9-1:1.0: No streaming interface found for terminal 32770.
[  735.964452][T13889] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  736.050606][ T5801] usb 9-1: USB disconnect, device number 33
[  736.348155][T13895] __nla_validate_parse: 7 callbacks suppressed
[  736.348165][T13895] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2206'.
[  736.385213][T13897] binder: Write failure EINVAL in pid:1641
[  736.859392][   T32] audit: type=1326 audit(1793561806.581:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.8.2210" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f526cb9f559 code=0x0
[  736.929571][   T32] audit: type=1326 audit(1793561806.651:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.8.2210" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=317 compat=0 ip=0x7f526cb9f559 code=0x0
[  737.174315][T13914] comedi comedi2: comedi_config --init_data is deprecated
[  737.384739][T13915] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  737.402820][T13920] 0x0000000000ec-0x0000000000f2 : ""
[  737.404075][T13920] FAULT_INJECTION: forcing a failure.
[  737.404075][T13920] name failslab, interval 1, probability 0, space 0, times 0
[  737.404096][T13920] CPU: 0 UID: 0 PID: 13920 Comm: syz.0.2213 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  737.404118][T13920] Tainted: [L]=SOFTLOCKUP
[  737.404125][T13920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  737.404139][T13920] Call Trace:
[  737.404145][T13920]  <TASK>
[  737.404152][T13920]  dump_stack_lvl+0xe8/0x150
[  737.404181][T13920]  should_fail_ex+0x3eb/0x540
[  737.404212][T13920]  should_failslab+0xa8/0x100
[  737.404237][T13920]  __kmalloc_cache_noprof+0x9e/0x600
[  737.404257][T13920]  ? init_srcu_struct_fields+0x83/0xbd0
[  737.404277][T13920]  ? init_srcu_struct_fields+0x83/0xbd0
[  737.404303][T13920]  init_srcu_struct_fields+0x83/0xbd0
[  737.404322][T13920]  ? nvmem_register+0x11a/0x12f0
[  737.404350][T13920]  nvmem_register+0x285/0x12f0
[  737.404373][T13920]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  737.404413][T13920]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  737.404438][T13920]  add_mtd_device+0xf3d/0x17b0
[  737.404469][T13920]  ? __pfx_add_mtd_device+0x10/0x10
[  737.404496][T13920]  ? __pfx_mtd_nvmem_reg_read+0x10/0x10
[  737.404517][T13920]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  737.404555][T13920]  mtd_add_partition+0x388/0x590
[  737.404578][T13920]  ? __pfx_mtd_add_partition+0x10/0x10
[  737.404602][T13920]  ? __might_fault+0xaf/0x130
[  737.404633][T13920]  mtdchar_blkpg_ioctl+0x28a/0x2c0
[  737.404655][T13920]  ? __pfx___dynamic_pr_debug+0x10/0x10
[  737.404672][T13920]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[  737.404708][T13920]  ? __might_fault+0xaf/0x130
[  737.404738][T13920]  mtdchar_ioctl+0x14f7/0x1bc0
[  737.404763][T13920]  ? __pfx_mtdchar_ioctl+0x10/0x10
[  737.404792][T13920]  ? __lock_acquire+0x747/0x2de0
[  737.404822][T13920]  ? tomoyo_path_number_perm+0x219/0x5f0
[  737.404850][T13920]  ? __mutex_trylock_common+0x15f/0x270
[  737.404875][T13920]  ? __pfx___mutex_trylock_common+0x10/0x10
[  737.404926][T13920]  ? rcu_is_watching+0x16/0xb0
[  737.404949][T13920]  ? trace_contention_end+0x3d/0x140
[  737.404973][T13920]  ? __mutex_lock+0x305/0x15a0
[  737.405006][T13920]  ? mtdchar_unlocked_ioctl+0xa1/0xd0
[  737.405029][T13920]  ? __pfx___mutex_lock+0x10/0x10
[  737.405061][T13920]  ? __fget_files+0x2a/0x420
[  737.405080][T13920]  ? __fget_files+0x2a/0x420
[  737.405102][T13920]  mtdchar_unlocked_ioctl+0xae/0xd0
[  737.405123][T13920]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[  737.405144][T13920]  __se_sys_ioctl+0xfc/0x170
[  737.405169][T13920]  do_syscall_64+0x166/0x520
[  737.405193][T13920]  ? trace_irq_disable+0x3b/0x140
[  737.405214][T13920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.405232][T13920]  ? clear_bhb_loop+0x70/0xc0
[  737.405252][T13920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.405269][T13920] RIP: 0033:0x7f788a99f559
[  737.405285][T13920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  737.405299][T13920] RSP: 002b:00007f7888bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  737.405317][T13920] RAX: ffffffffffffffda RBX: 00007f788ac25fa0 RCX: 00007f788a99f559
[  737.405329][T13920] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000003
[  737.405340][T13920] RBP: 00007f7888bf6090 R08: 0000000000000000 R09: 0000000000000000
[  737.405350][T13920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  737.405360][T13920] R13: 00007f788ac26038 R14: 00007f788ac25fa0 R15: 00007ffc89daa558
[  737.405385][T13920]  </TASK>
[  737.942902][T13915] VFS: Can't find a romfs filesystem on dev nullb0.
[  737.942902][T13915] 
[  738.335075][   T12] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  738.366479][ T5751] usb 9-1: new low-speed USB device number 34 using dummy_hcd
[  738.488559][   T12] usb 6-1: New USB device found: idVendor=05c6, idProduct=9211, bcdDevice=0.00
[  738.491377][   T12] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  738.491395][   T12] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  738.494086][   T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.494102][   T12] usb 6-1: Product: syz
[  738.494113][   T12] usb 6-1: Manufacturer: syz
[  738.494125][   T12] usb 6-1: SerialNumber: syz
[  738.551748][ T5751] usb 9-1: New USB device found: idVendor=a168, idProduct=0617, bcdDevice=a7.e8
[  738.566579][ T5751] usb 9-1: config 0 has an invalid interface number: 90 but max is 0
[  738.566597][ T5751] usb 9-1: config 0 has no interface number 0
[  738.566618][ T5751] usb 9-1: config 0 interface 90 has no altsetting 0
[  738.572141][ T5751] usb 9-1: string descriptor 0 read error: -22
[  738.572252][ T5751] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.613320][   T13] net_ratelimit: 484 callbacks suppressed
[  738.651894][ T5751] usb 9-1: config 0 descriptor??
[  738.688813][T13930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2217'.
[  738.690184][ T5751] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0617
[  738.723403][   T12] qcserial 6-1:1.0: Qualcomm USB modem converter detected
[  738.826730][T13929] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  738.883562][ T5801] usb 6-1: USB disconnect, device number 81
[  738.920381][ T5801] qcserial 6-1:1.0: device disconnected
[  739.156697][ T5751] gspca_sn9c20x: Write register 1001 failed -71
[  739.156713][ T5751] gspca_sn9c20x: Device initialization failed
[  739.156769][ T5751] gspca_sn9c20x 9-1:0.90: probe with driver gspca_sn9c20x failed with error -71
[  739.204063][ T5751] usb 9-1: USB disconnect, device number 34
[  740.348213][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  740.368260][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  740.369375][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  740.390073][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  740.400453][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  740.578919][ T5643] Bluetooth: hci2: ACL packet for unknown connection handle 400
[  740.677406][ T5643] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  740.795349][ T5751] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  740.946249][ T5751] usb 9-1: Using ep0 maxpacket: 32
[  740.947074][ T5751] usb 9-1: New USB device found: idVendor=065a, idProduct=0009, bcdDevice=60.65
[  740.948183][ T5751] usb 9-1: config 4 has an invalid interface number: 8 but max is 0
[  740.948199][ T5751] usb 9-1: config 4 has no interface number 0
[  740.948231][ T5751] usb 9-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  740.948249][ T5751] usb 9-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0
[  740.948267][ T5751] usb 9-1: config 4 interface 8 has no altsetting 0
[  740.950220][ T5751] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.950236][ T5751] usb 9-1: Product: syz
[  740.950247][ T5751] usb 9-1: Manufacturer: syz
[  740.950259][ T5751] usb 9-1: SerialNumber: syz
[  741.218768][   T12] usb 2-1: USB disconnect, device number 63
[  741.373800][ T5751] opticon 9-1:4.8: opticon converter detected
[  741.408359][ T5751] usb 9-1: opticon converter now attached to ttyUSB0
[  741.449453][ T5751] usb 9-1: USB disconnect, device number 35
[  741.543138][ T5751] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  741.543800][ T5751] opticon 9-1:4.8: device disconnected
[  741.618437][ T8687] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.842750][ T8687] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  741.944503][T13963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2227'.
[  741.970304][ T8687] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.121595][ T8687] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.396705][   T12] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  742.439140][T13944] rxe_eth0 speed is unknown, defaulting to 1000
[  742.493583][T13969] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2229'.
[  742.529715][ T5643] Bluetooth: hci3: command tx timeout
[  742.559473][   T12] usb 9-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  742.561133][   T12] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  742.561153][   T12] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  742.561170][   T12] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  742.561225][   T12] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.638111][   T12] usb 9-1: config 0 descriptor??
[  742.890130][   T12] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  742.890153][   T12] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  742.890172][   T12] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  742.890198][   T12] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  742.890218][   T12] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  742.890238][   T12] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  742.890276][   T12] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  742.890296][   T12] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  742.890315][   T12] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  742.890335][   T12] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  743.038702][   T12] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  743.571019][T13978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  743.571518][T13978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  743.709438][ T8687] bridge_slave_1: left allmulticast mode
[  743.709453][ T8687] bridge_slave_1: left promiscuous mode
[  743.709620][ T8687] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.738561][ T8687] bridge_slave_0: left allmulticast mode
[  743.738601][ T8687] bridge_slave_0: left promiscuous mode
[  743.738772][ T8687] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.791304][ T8687] pim6reg: left allmulticast mode
[  743.804960][    C0] net_ratelimit: 731 callbacks suppressed
[  744.423975][T13997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2235'.
[  744.424073][T13997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2235'.
[  744.606759][ T5643] Bluetooth: hci3: command tx timeout
[  744.697220][T13999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2236'.
[  744.848343][ T8687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  744.851778][ T8687] bond0 (unregistering): Released all slaves
[  745.028565][ T8687] tipc: Disabling bearer <eth:hsr0>
[  745.045213][ T8687] tipc: Left network mode
[  745.499753][   T12] usb 9-1: USB disconnect, device number 36
[  745.516059][ T5751] usb 6-1: new full-speed USB device number 82 using dummy_hcd
[  745.685843][ T5751] usb 6-1: not running at top speed; connect to a high speed hub
[  745.685869][ T5751] usb 6-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01
[  745.707460][ T5751] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  745.707483][ T5751] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  745.707503][ T5751] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  745.707522][ T5751] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  745.716415][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.716430][ T5751] usb 6-1: Product: syz
[  745.716441][ T5751] usb 6-1: Manufacturer: syz
[  745.716452][ T5751] usb 6-1: SerialNumber: syz
[  745.766011][T14005] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  745.766092][T14005] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  745.820544][ T5751] ums-onetouch 6-1:1.0: USB Mass Storage device detected
[  745.859497][ T5751] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/input/input94
[  745.859577][ T5751] input input94: usb_submit_urb failed
[  745.948751][ T5751] input: failed to attach handler kbd to device input94, error: -5
[  745.967464][ T4990] input input94: usb_submit_urb failed
[  745.970219][ T5751] scsi host1: usb-storage 6-1:1.0
[  745.991019][ T4990] input input94: usb_submit_urb failed
[  746.178759][T14013] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  746.253130][T14013] /dev/nullb0: Can't open blockdev
[  746.312971][   T32] audit: type=1326 audit(1793561816.031:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14004 comm="syz.5.2238" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f404199f559 code=0x0
[  746.540709][T14014] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.685702][ T5643] Bluetooth: hci3: command tx timeout
[  746.893381][T14014] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.007813][T14014] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.198061][T14014] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.651305][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  748.016156][ T8676] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  748.300169][ T5753] usb 6-1: USB disconnect, device number 82
[  748.473564][T13944] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.473639][T13944] bridge0: port 1(bridge_slave_0) entered disabled state
[  748.473793][T13944] bridge_slave_0: entered allmulticast mode
[  748.501502][T13944] bridge_slave_0: entered promiscuous mode
[  748.598700][T13944] bridge0: port 2(bridge_slave_1) entered blocking state
[  748.598770][T13944] bridge0: port 2(bridge_slave_1) entered disabled state
[  748.599647][T13944] bridge_slave_1: entered allmulticast mode
[  748.642522][T13944] bridge_slave_1: entered promiscuous mode
[  748.656285][  T736] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  748.666544][ T8681] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  748.768246][ T5643] Bluetooth: hci3: command tx timeout
[  749.105702][ T8681] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  749.164519][T13944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  749.241889][T13944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  749.244921][    C0] net_ratelimit: 454 callbacks suppressed
[  749.491497][T14041] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2246'.
[  749.718802][T13944] team0: Port device team_slave_0 added
[  749.773711][T13944] team0: Port device team_slave_1 added
[  750.226907][ T8687] hsr_slave_0: left promiscuous mode
[  750.239662][ T8687] hsr_slave_1: left promiscuous mode
[  750.252108][ T8687] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  750.252140][ T8687] batman_adv: batadv0: Removing interface: batadv_slave_0
[  750.278874][ T8687] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  750.278890][ T8687] batman_adv: batadv0: Removing interface: batadv_slave_1
[  750.345135][T14048] FAULT_INJECTION: forcing a failure.
[  750.345135][T14048] name failslab, interval 1, probability 0, space 0, times 0
[  750.345168][T14048] CPU: 0 UID: 0 PID: 14048 Comm: syz.5.2249 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  750.345193][T14048] Tainted: [L]=SOFTLOCKUP
[  750.345200][T14048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  750.345210][T14048] Call Trace:
[  750.345218][T14048]  <TASK>
[  750.345226][T14048]  dump_stack_lvl+0xe8/0x150
[  750.345259][T14048]  should_fail_ex+0x3eb/0x540
[  750.345290][T14048]  ? __alloc_skb+0x1db/0x7a0
[  750.345311][T14048]  should_failslab+0xa8/0x100
[  750.345337][T14048]  ? __alloc_skb+0x1db/0x7a0
[  750.345355][T14048]  kmem_cache_alloc_node_noprof+0x9c/0x600
[  750.345374][T14048]  ? __alloc_skb+0x18d/0x7a0
[  750.345394][T14048]  ? __alloc_skb+0x1db/0x7a0
[  750.345419][T14048]  __alloc_skb+0x1db/0x7a0
[  750.345443][T14048]  alloc_skb_with_frags+0xc6/0x760
[  750.345475][T14048]  sock_alloc_send_pskb+0xc69/0xd90
[  750.345500][T14048]  ? apparmor_capable+0x126/0x170
[  750.345535][T14048]  ? __pfx_mm_account_pinned_pages+0x10/0x10
[  750.345561][T14048]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  750.345588][T14048]  ? sock_omalloc+0x115/0x1d0
[  750.345615][T14048]  ? msg_zerocopy_realloc+0x2be/0x840
[  750.345642][T14048]  __ip6_append_data+0x2de9/0x40c0
[  750.345675][T14048]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  750.345698][T14048]  ? __ip6_append_data+0xf81/0x40c0
[  750.345729][T14048]  ? ip6_mtu+0x7d/0x4a0
[  750.345748][T14048]  ? __pfx___ip6_append_data+0x10/0x10
[  750.345764][T14048]  ? ip6_mtu+0x38c/0x4a0
[  750.345780][T14048]  ? __pfx_ip6_mtu+0x10/0x10
[  750.345794][T14048]  ? ip6_setup_cork+0x631/0xfb0
[  750.345809][T14048]  ? lock_acquire+0x115/0x350
[  750.345832][T14048]  ip6_make_skb+0x2af/0x320
[  750.345852][T14048]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  750.345876][T14048]  ? __pfx_ip6_make_skb+0x10/0x10
[  750.345904][T14048]  ? ip6_dst_hoplimit+0x65/0x3e0
[  750.345928][T14048]  ? ip6_dst_hoplimit+0x65/0x3e0
[  750.345957][T14048]  udpv6_sendmsg+0x1dfb/0x2610
[  750.345986][T14048]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  750.346042][T14048]  ? __pfx_current_check_autobind_udp_socket+0x10/0x10
[  750.346083][T14048]  ? inet_send_prepare+0x5b/0x260
[  750.346108][T14048]  ? inet6_sendmsg+0xe4/0x120
[  750.346133][T14048]  ? __pfx_inet6_sendmsg+0x10/0x10
[  750.346156][T14048]  sock_sendmsg_nosec+0x90/0x190
[  750.346175][T14048]  ____sys_sendmsg+0x54e/0x850
[  750.346204][T14048]  ? __pfx_____sys_sendmsg+0x10/0x10
[  750.346235][T14048]  ? import_iovec+0x73/0xa0
[  750.346265][T14048]  ___sys_sendmsg+0x2a6/0x360
[  750.346287][T14048]  ? __lock_acquire+0x747/0x2de0
[  750.346312][T14048]  ? __pfx____sys_sendmsg+0x10/0x10
[  750.346336][T14048]  ? __lock_acquire+0x747/0x2de0
[  750.346359][T14048]  ? __pfx_futex_wake_mark+0x10/0x10
[  750.346408][T14048]  __sys_sendmmsg+0x273/0x4e0
[  750.346435][T14048]  ? __pfx___sys_sendmmsg+0x10/0x10
[  750.346457][T14048]  ? do_futex+0x3e7/0x4e0
[  750.346489][T14048]  ? __sys_connect+0x3a1/0x450
[  750.346521][T14048]  ? rcu_is_watching+0x16/0xb0
[  750.346550][T14048]  __x64_sys_sendmmsg+0xa0/0xc0
[  750.346575][T14048]  do_syscall_64+0x166/0x520
[  750.346599][T14048]  ? trace_irq_disable+0x3b/0x140
[  750.346621][T14048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.346639][T14048]  ? clear_bhb_loop+0x70/0xc0
[  750.346659][T14048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.346676][T14048] RIP: 0033:0x7f404199f559
[  750.346694][T14048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  750.346710][T14048] RSP: 002b:00007f404292d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  750.346729][T14048] RAX: ffffffffffffffda RBX: 00007f4041c25fa0 RCX: 00007f404199f559
[  750.346741][T14048] RDX: 0400000000000172 RSI: 0000200000000280 RDI: 0000000000000004
[  750.346753][T14048] RBP: 00007f4041a36b50 R08: 0000000000000000 R09: 0000000000000000
[  750.346763][T14048] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000000
[  750.346774][T14048] R13: 00007f4041c26038 R14: 00007f4041c25fa0 R15: 00007ffdda124708
[  750.346799][T14048]  </TASK>
[  750.843669][ T8687] veth1_vlan: left promiscuous mode
[  750.843731][ T8687] veth0_vlan: left promiscuous mode
[  751.466943][   T12] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  751.590342][T14066] FAULT_INJECTION: forcing a failure.
[  751.590342][T14066] name failslab, interval 1, probability 0, space 0, times 0
[  751.590366][T14066] CPU: 0 UID: 0 PID: 14066 Comm: syz.8.2253 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  751.590388][T14066] Tainted: [L]=SOFTLOCKUP
[  751.590394][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  751.590405][T14066] Call Trace:
[  751.590412][T14066]  <TASK>
[  751.590419][T14066]  dump_stack_lvl+0xe8/0x150
[  751.590448][T14066]  should_fail_ex+0x3eb/0x540
[  751.590479][T14066]  should_failslab+0xa8/0x100
[  751.590503][T14066]  ? vm_area_dup+0x32/0x8e0
[  751.590529][T14066]  kmem_cache_alloc_noprof+0x9c/0x600
[  751.590549][T14066]  ? vm_area_dup+0x32/0x8e0
[  751.590578][T14066]  vm_area_dup+0x32/0x8e0
[  751.590606][T14066]  __split_vma+0x2c2/0xa40
[  751.590708][T14066]  ? __pfx___split_vma+0x10/0x10
[  751.590737][T14066]  ? mas_find+0x6d6/0xcb0
[  751.590763][T14066]  vms_gather_munmap_vmas+0x4e3/0x1370
[  751.590797][T14066]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  751.590824][T14066]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  751.590854][T14066]  do_vmi_align_munmap+0x2b4/0x4b0
[  751.590890][T14066]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  751.590929][T14066]  ? mas_walk+0x37e/0x490
[  751.590955][T14066]  ? mas_find+0x642/0xcb0
[  751.590973][T14066]  do_vmi_munmap+0x252/0x2d0
[  751.590999][T14066]  __vm_munmap+0x240/0x420
[  751.591024][T14066]  ? __pfx___vm_munmap+0x10/0x10
[  751.591045][T14066]  ? vm_mmap_pgoff+0x378/0x520
[  751.591072][T14066]  ? do_user_addr_fault+0xd3f/0x1480
[  751.591096][T14066]  __x64_sys_munmap+0x60/0x70
[  751.591144][T14066]  do_syscall_64+0x166/0x520
[  751.591169][T14066]  ? trace_irq_disable+0x3b/0x140
[  751.591191][T14066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.591208][T14066]  ? clear_bhb_loop+0x70/0xc0
[  751.591228][T14066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.591245][T14066] RIP: 0033:0x7f526cb9f387
[  751.591261][T14066] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  751.591275][T14066] RSP: 002b:00007f526adf4d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[  751.591292][T14066] RAX: ffffffffffffffda RBX: 00007f5264000000 RCX: 00007f526cb9f387
[  751.591304][T14066] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 00007f5262c00000
[  751.591315][T14066] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[  751.591325][T14066] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[  751.591336][T14066] R13: 0000000000001000 R14: 00007f5268000000 R15: 0000000001400000
[  751.591360][T14066]  </TASK>
[  751.727747][   T12] usb 6-1: Using ep0 maxpacket: 8
[  751.895607][   T12] usb 6-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  751.898479][T14066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  751.909291][   T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.909307][   T12] usb 6-1: Product: syz
[  751.909318][   T12] usb 6-1: Manufacturer: syz
[  751.909331][   T12] usb 6-1: SerialNumber: syz
[  751.961020][   T12] usb 6-1: config 0 descriptor??
[  752.204338][   T12] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  752.551337][T14075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2255'.
[  753.319097][ T8687] team0 (unregistering): Port device team_slave_1 removed
[  753.430658][ T8687] team0 (unregistering): Port device team_slave_0 removed
[  753.842393][   T12] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  753.871896][   T12] usb 6-1: USB disconnect, device number 83
[  754.539973][    C0] net_ratelimit: 595 callbacks suppressed
[  754.619021][T14096] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2260'.
[  754.647936][T14096] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  754.673271][T13944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  754.673280][T13944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  754.673301][T13944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  754.732527][T13944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  754.732537][T13944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  754.732559][T13944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  754.832528][T14096] overlayfs: missing 'lowerdir'
[  755.149043][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2261'.
[  755.280691][T14104] netlink: 144 bytes leftover after parsing attributes in process `syz.8.2263'.
[  755.303674][T14104] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2263'.
[  755.327431][T13944] hsr_slave_0: entered promiscuous mode
[  755.342640][T13944] hsr_slave_1: entered promiscuous mode
[  755.367510][T13944] debugfs: 'hsr0' already exists in 'hsr'
[  755.367520][T13944] Cannot create hsr debugfs directory
[  755.436095][ T5751] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[  755.575876][ T5751] usb 6-1: device descriptor read/64, error -71
[  755.827848][ T5751] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[  755.948118][ T8687] IPVS: stop unused estimator thread 0...
[  755.965766][ T5751] usb 6-1: device descriptor read/64, error -71
[  756.075693][ T5751] usb usb6-port1: attempt power cycle
[  756.417776][ T5751] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[  756.436369][ T5751] usb 6-1: device descriptor read/8, error -71
[  756.675878][ T5751] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[  756.700082][ T5751] usb 6-1: device descriptor read/8, error -71
[  756.806589][ T5751] usb usb6-port1: unable to enumerate USB device
[  757.649718][T14131] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2269'.
[  758.356306][T14142] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2272'.
[  759.103705][T13944] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  759.187415][T13944] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  759.203602][T13944] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  759.242204][T14157] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2277'.
[  759.271023][T13944] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  759.284724][T13944] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  759.341523][T13944] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  759.355979][T13944] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  759.402962][T13944] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  759.499168][T14163] comedi comedi2: comedi_config --init_data is deprecated
[  759.804915][    C0] net_ratelimit: 449 callbacks suppressed
[  760.040427][T13944] 8021q: adding VLAN 0 to HW filter on device bond0
[  760.068705][T14179] FAULT_INJECTION: forcing a failure.
[  760.068705][T14179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  760.068743][T14179] CPU: 0 UID: 0 PID: 14179 Comm: syz.0.2281 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  760.068768][T14179] Tainted: [L]=SOFTLOCKUP
[  760.068775][T14179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  760.068786][T14179] Call Trace:
[  760.068793][T14179]  <TASK>
[  760.068802][T14179]  dump_stack_lvl+0xe8/0x150
[  760.068834][T14179]  should_fail_ex+0x3eb/0x540
[  760.068867][T14179]  _copy_from_user+0x2d/0xb0
[  760.068886][T14179]  ___sys_sendmsg+0x1c6/0x360
[  760.068918][T14179]  ? __pfx____sys_sendmsg+0x10/0x10
[  760.068940][T14179]  ? __lock_acquire+0x747/0x2de0
[  760.068997][T14179]  __sys_sendmmsg+0x273/0x4e0
[  760.069025][T14179]  ? __pfx___sys_sendmmsg+0x10/0x10
[  760.069046][T14179]  ? do_futex+0x3e7/0x4e0
[  760.069078][T14179]  ? __sys_connect+0x3a1/0x450
[  760.069110][T14179]  ? rcu_is_watching+0x16/0xb0
[  760.069139][T14179]  __x64_sys_sendmmsg+0xa0/0xc0
[  760.069163][T14179]  do_syscall_64+0x166/0x520
[  760.069188][T14179]  ? trace_irq_disable+0x3b/0x140
[  760.069208][T14179]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.069225][T14179]  ? clear_bhb_loop+0x70/0xc0
[  760.069245][T14179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  760.069262][T14179] RIP: 0033:0x7f788a99f559
[  760.069278][T14179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  760.069292][T14179] RSP: 002b:00007f7888bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  760.069310][T14179] RAX: ffffffffffffffda RBX: 00007f788ac25fa0 RCX: 00007f788a99f559
[  760.069322][T14179] RDX: 0400000000000172 RSI: 0000200000000280 RDI: 0000000000000004
[  760.069333][T14179] RBP: 00007f788aa36b50 R08: 0000000000000000 R09: 0000000000000000
[  760.069344][T14179] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000000
[  760.069354][T14179] R13: 00007f788ac26038 R14: 00007f788ac25fa0 R15: 00007ffc89daa558
[  760.069380][T14179]  </TASK>
[  760.206801][ T5751] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  760.372011][T13944] 8021q: adding VLAN 0 to HW filter on device team0
[  760.412521][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state
[  760.412592][ T8676] bridge0: port 1(bridge_slave_0) entered forwarding state
[  760.463751][ T8681] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.463830][ T8681] bridge0: port 2(bridge_slave_1) entered forwarding state
[  761.289563][T14199] netlink: 1028 bytes leftover after parsing attributes in process `syz.8.2284'.
[  761.432155][T14203] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2285'.
[  761.466519][T14203] FAULT_INJECTION: forcing a failure.
[  761.466519][T14203] name failslab, interval 1, probability 0, space 0, times 0
[  761.466548][T14203] CPU: 0 UID: 0 PID: 14203 Comm: syz.5.2285 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  761.466571][T14203] Tainted: [L]=SOFTLOCKUP
[  761.466578][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  761.466589][T14203] Call Trace:
[  761.466596][T14203]  <TASK>
[  761.466604][T14203]  dump_stack_lvl+0xe8/0x150
[  761.466635][T14203]  should_fail_ex+0x3eb/0x540
[  761.466669][T14203]  should_failslab+0xa8/0x100
[  761.466696][T14203]  ? create_new_namespaces+0x33/0x6b0
[  761.466723][T14203]  kmem_cache_alloc_noprof+0x9c/0x600
[  761.466743][T14203]  ? create_new_namespaces+0x33/0x6b0
[  761.466771][T14203]  create_new_namespaces+0x33/0x6b0
[  761.466823][T14203]  ? __fget_files+0x2a/0x420
[  761.466856][T14203]  __se_sys_setns+0x2a8/0x1dc0
[  761.466887][T14203]  ? fd_install+0x39e/0x4e0
[  761.466905][T14203]  ? __pfx___se_sys_setns+0x10/0x10
[  761.466928][T14203]  ? fd_install+0x95/0x4e0
[  761.466956][T14203]  do_syscall_64+0x166/0x520
[  761.466983][T14203]  ? trace_irq_disable+0x3b/0x140
[  761.467006][T14203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  761.467024][T14203]  ? clear_bhb_loop+0x70/0xc0
[  761.467045][T14203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  761.467061][T14203] RIP: 0033:0x7f40419a0857
[  761.467078][T14203] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  761.467093][T14203] RSP: 002b:00007f404292cfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134
[  761.467112][T14203] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f40419a0857
[  761.467124][T14203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  761.467134][T14203] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000
[  761.467143][T14203] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f404292d6a8
[  761.467154][T14203] R13: 000000000000000e R14: 00007f4041c25fa0 R15: 00007ffdda124708
[  761.467179][T14203]  </TASK>
[  762.135347][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2286'.
[  762.256316][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'.
[  762.314410][T14215] netlink: 'syz.8.2287': attribute type 1 has an invalid length.
[  762.615477][T14222] device-mapper: ioctl: device name cannot be "control", ".", or ".."
[  762.712186][T14225] fuse: Unknown parameter '@'
[  763.378276][T14236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2294'.
[  763.378341][T14236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2294'.
[  763.419751][T14235] Format for adding new device is "id port_count num_queues" (uint uint uint).
[  763.482616][T13944] 8021q: adding VLAN 0 to HW filter on device batadv0
[  763.568795][T14235] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2293'.
[  763.860346][T13944] veth0_vlan: entered promiscuous mode
[  763.920520][T13944] veth1_vlan: entered promiscuous mode
[  763.956406][   T12] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  764.132579][T13944] veth0_macvtap: entered promiscuous mode
[  764.135002][   T12] usb 9-1: Using ep0 maxpacket: 8
[  764.137363][   T12] usb 9-1: New USB device found: idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  764.140635][   T12] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  764.140658][   T12] usb 9-1: config 0 interface 0 has no altsetting 0
[  764.166608][   T12] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.166623][   T12] usb 9-1: Product: syz
[  764.166634][   T12] usb 9-1: Manufacturer: syz
[  764.166646][   T12] usb 9-1: SerialNumber: syz
[  764.226444][   T12] usb 9-1: config 0 descriptor??
[  764.239324][   T12] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found
[  764.241979][T13944] veth1_macvtap: entered promiscuous mode
[  764.409307][T13944] batman_adv: batadv0: Interface activated: batadv_slave_0
[  764.447693][   T12] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected
[  764.456476][T13944] batman_adv: batadv0: Interface activated: batadv_slave_1
[  764.490852][   T12] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  764.663917][T14235] netlink: 176 bytes leftover after parsing attributes in process `syz.8.2293'.
[  764.680574][  T736] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  764.681047][  T736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  764.681257][  T736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  764.681286][  T736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  764.840606][T13944] net_ratelimit: 369 callbacks suppressed
[  765.123251][T14255] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2297'.
[  765.215457][T11275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  765.215471][T11275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  765.380022][T11275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  765.380034][T11275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  765.716431][T14261] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2298'.
[  766.412902][ T5642] usb 9-1: USB disconnect, device number 38
[  766.454905][ T5753] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  766.651101][ T5753] usb 2-1: unable to get BOS descriptor or descriptor too short
[  766.651136][ T5753] usb 2-1: New USB device found: idVendor=2b53, idProduct=0031, bcdDevice=0.40
[  766.665626][ T5753] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  766.665727][ T5753] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  766.718798][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.718813][ T5753] usb 2-1: Product: syz
[  766.718825][ T5753] usb 2-1: Manufacturer: syz
[  766.718835][ T5753] usb 2-1: SerialNumber: syz
[  766.992650][   T13] IPVS: starting estimator thread 0...
[  767.125645][T14285] IPVS: using max 38 ests per chain, 91200 per kthread
[  767.141168][T14271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.141835][T14271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.249280][T14271] __nla_validate_parse: 1 callbacks suppressed
[  767.249298][T14271] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2300'.
[  767.372438][ T5753] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  767.524725][ T5753] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22
[  767.707350][   T12] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  768.186366][ T5753] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22
[  768.223752][ T5753] usb 2-1: USB disconnect, device number 64
[  768.310537][T14305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2305'.
[  768.594288][T14308] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2306'.
** 800 printk messages dropped **
[  769.559034][T14317] netlink: 'syz.1.2309': attribute type 10 has an invalid length.
[  769.582793][T14317] team0: Cannot enslave team device to itself
[  769.846771][ T5753] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  770.027199][ T5753] usb 2-1: Using ep0 maxpacket: 8
[  770.043576][ T5753] usb 2-1: unable to get BOS descriptor or descriptor too short
[  770.043612][ T5753] usb 2-1: New USB device found: idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  770.046438][  T736] net_ratelimit: 474 callbacks suppressed
[  770.054222][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  770.054243][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  770.054261][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  770.054278][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  770.054317][ T5753] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  770.054336][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  770.054352][ T5753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  770.054368][ T5753] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  770.107670][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.107685][ T5753] usb 2-1: Product: syz
[  770.107696][ T5753] usb 2-1: Manufacturer: syz
[  770.107707][ T5753] usb 2-1: SerialNumber: syz
[  770.110922][ T5753] usb 2-1: config 0 descriptor??
[  770.111962][T14317] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  770.226452][ T5753] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  770.310622][T14319] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2310'.
[  770.310663][T14319] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2310'.
[  770.731614][T14322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  770.732156][T14322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  770.762168][T14324] tmpfs: Unknown parameter 'vers'
** 628 printk messages dropped **
[  770.886420][ T5753] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12
[  770.905127][ T5753] usb 2-1: USB disconnect, device number 65
[  770.977178][ T5751] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  771.171837][ T5751] usb 9-1: Using ep0 maxpacket: 32
[  771.177884][ T5751] usb 9-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00
[  771.184709][ T5751] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  771.184729][ T5751] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  771.184772][ T5751] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  771.238738][ T5751] usb 9-1: config 0 descriptor??
[  771.660811][T14332] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2315'.
[  771.684312][ T5751] hid_parser_main: 5 callbacks suppressed
[  771.684325][ T5751] ft260 0003:0403:6030.0012: unknown main item tag 0x0
[  771.684346][ T5751] ft260 0003:0403:6030.0012: unknown main item tag 0x0
[  771.712522][ T5751] ft260 0003:0403:6030.0012: failed to retrieve chip version
[  771.712791][ T5751] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -32
[  772.071349][T14334] FAULT_INJECTION: forcing a failure.
[  772.071349][T14334] name failslab, interval 1, probability 0, space 0, times 0
[  772.071371][T14334] CPU: 0 UID: 0 PID: 14334 Comm: syz.5.2316 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  772.071393][T14334] Tainted: [L]=SOFTLOCKUP
[  772.071399][T14334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  772.071410][T14334] Call Trace:
[  772.071417][T14334]  <TASK>
[  772.071424][T14334]  dump_stack_lvl+0xe8/0x150
[  772.071455][T14334]  should_fail_ex+0x3eb/0x540
[  772.071487][T14334]  should_failslab+0xa8/0x100
[  772.071511][T14334]  ? __kernfs_new_node+0xe6/0x980
[  772.071539][T14334]  kmem_cache_alloc_noprof+0x9c/0x600
[  772.071559][T14334]  ? __kernfs_new_node+0xe6/0x980
[  772.071590][T14334]  __kernfs_new_node+0xe6/0x980
[  772.071616][T14334]  ? lock_acquire+0x115/0x350
[  772.071640][T14334]  ? __pfx___kernfs_new_node+0x10/0x10
[  772.071665][T14334]  ? kernfs_root+0x1c/0x230
[  772.071695][T14334]  ? kernfs_root+0x1c/0x230
[  772.071719][T14334]  ? kernfs_root+0x1c/0x230
[  772.071748][T14334]  kernfs_new_node+0xeb/0x140
[  772.071777][T14334]  kernfs_create_link+0xe3/0x240
[  772.071801][T14334]  sysfs_do_create_link_sd+0x83/0x110
[  772.071827][T14334]  driver_sysfs_add+0xec/0x210
[  772.071854][T14334]  device_bind_driver+0x17/0x60
[  772.071879][T14334]  mac80211_hwsim_new_radio+0x3c0/0x5990
[  772.071934][T14334]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  772.071960][T14334]  ? trace_kmalloc+0x2a/0xf0
[  772.071984][T14334]  hwsim_new_radio_nl+0xd8b/0xf90
[  772.072019][T14334]  genl_family_rcv_msg_doit+0x233/0x340
[  772.072049][T14334]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  772.072091][T14334]  ? bpf_lsm_capable+0x9/0x20
[  772.072115][T14334]  ? security_capable+0x7e/0x2c0
[  772.072144][T14334]  genl_rcv_msg+0x614/0x7a0
[  772.072172][T14334]  ? __pfx_genl_rcv_msg+0x10/0x10
[  772.072194][T14334]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  772.072221][T14334]  ? __asan_memcpy+0x40/0x70
[  772.072245][T14334]  netlink_rcv_skb+0x226/0x4a0
[  772.072264][T14334]  ? __pfx_genl_rcv_msg+0x10/0x10
[  772.072288][T14334]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  772.072318][T14334]  ? down_read+0x2b9/0x320
[  772.072338][T14334]  genl_rcv+0x28/0x40
[  772.072359][T14334]  netlink_unicast+0x8ef/0xa80
[  772.072400][T14334]  netlink_sendmsg+0x7f0/0xb20
[  772.072423][T14334]  ? __pfx_netlink_sendmsg+0x10/0x10
[  772.072445][T14334]  ? aa_sock_msg_perm+0x144/0x210
[  772.072474][T14334]  ? apparmor_socket_sendmsg+0x98/0x360
[  772.072497][T14334]  ? __pfx_netlink_sendmsg+0x10/0x10
[  772.072515][T14334]  sock_sendmsg_nosec+0x14e/0x190
[  772.072535][T14334]  ____sys_sendmsg+0x54e/0x850
[  772.072562][T14334]  ? __pfx_____sys_sendmsg+0x10/0x10
[  772.072592][T14334]  ? import_iovec+0x73/0xa0
[  772.072622][T14334]  ___sys_sendmsg+0x2a6/0x360
[  772.072643][T14334]  ? __lock_acquire+0x747/0x2de0
[  772.072666][T14334]  ? __pfx____sys_sendmsg+0x10/0x10
[  772.072692][T14334]  ? futex_wait+0x2a2/0x390
[  772.072734][T14334]  ? __fget_files+0x3a2/0x420
[  772.072752][T14334]  ? __fget_files+0x2a/0x420
[  772.072778][T14334]  __x64_sys_sendmsg+0x1b1/0x290
[  772.072803][T14334]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  772.072843][T14334]  do_syscall_64+0x166/0x520
[  772.072867][T14334]  ? trace_irq_disable+0x3b/0x140
[  772.072888][T14334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  772.072905][T14334]  ? clear_bhb_loop+0x70/0xc0
[  772.072926][T14334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  772.072943][T14334] RIP: 0033:0x7f404199f559
[  772.072958][T14334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  772.072973][T14334] RSP: 002b:00007f404292d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  772.072991][T14334] RAX: ffffffffffffffda RBX: 00007f4041c25fa0 RCX: 00007f404199f559
[  772.073003][T14334] RDX: 0000000004080040 RSI: 0000200000000380 RDI: 0000000000000006
[  772.073014][T14334] RBP: 00007f4041a36b50 R08: 0000000000000000 R09: 0000000000000000
[  772.073025][T14334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  772.073035][T14334] R13: 00007f4041c26038 R14: 00007f4041c25fa0 R15: 00007ffdda124708
[  772.073061][T14334]  </TASK>
[  772.827293][T14340] FAULT_INJECTION: forcing a failure.
[  772.827293][T14340] name failslab, interval 1, probability 0, space 0, times 0
[  772.827323][T14340] CPU: 0 UID: 0 PID: 14340 Comm: syz.1.2317 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  772.827346][T14340] Tainted: [L]=SOFTLOCKUP
[  772.827354][T14340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  772.827365][T14340] Call Trace:
[  772.827372][T14340]  <TASK>
[  772.827380][T14340]  dump_stack_lvl+0xe8/0x150
[  772.827413][T14340]  should_fail_ex+0x3eb/0x540
[  772.827444][T14340]  should_failslab+0xa8/0x100
[  772.827471][T14340]  __kmalloc_cache_noprof+0x9e/0x600
[  772.827492][T14340]  ? input_allocate_device+0x4e/0x2a0
[  772.827513][T14340]  ? input_allocate_device+0x4e/0x2a0
[  772.827541][T14340]  input_allocate_device+0x4e/0x2a0
[  772.827564][T14340]  uinput_ioctl_handler+0x187/0x15a0
[  772.827589][T14340]  ? __pfx_uinput_ioctl_handler+0x10/0x10
[  772.827615][T14340]  ? __fget_files+0x2a/0x420
[  772.827641][T14340]  ? bpf_lsm_file_ioctl+0x9/0x20
[  772.827665][T14340]  ? __pfx_uinput_ioctl+0x10/0x10
[  772.827683][T14340]  __se_sys_ioctl+0xfc/0x170
[  772.827709][T14340]  do_syscall_64+0x166/0x520
[  772.827735][T14340]  ? trace_irq_disable+0x3b/0x140
[  772.827757][T14340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  772.827774][T14340]  ? clear_bhb_loop+0x70/0xc0
[  772.827795][T14340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  772.827813][T14340] RIP: 0033:0x7f0d8c99f559
[  772.827831][T14340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  772.827846][T14340] RSP: 002b:00007f0d8d906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  772.827863][T14340] RAX: ffffffffffffffda RBX: 00007f0d8cc26090 RCX: 00007f0d8c99f559
[  772.827876][T14340] RDX: 0000000000000000 RSI: 000000008010671f RDI: 000000000000000a
[  772.827887][T14340] RBP: 00007f0d8ca36b50 R08: 0000000000000000 R09: 0000000000000000
[  772.827897][T14340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  772.827907][T14340] R13: 00007f0d8cc26128 R14: 00007f0d8cc26090 R15: 00007ffe03a78888
[  772.827933][T14340]  </TASK>
[  773.604213][T14348] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2321'.
[  773.980733][T14356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2325'.
[  774.258110][ T5753] usb 9-1: USB disconnect, device number 39
[  774.415623][T14363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2327'.
[  774.415694][T14363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2327'.
[  774.499151][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2329'.
[  774.499172][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2329'.
[  774.499185][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2329'.
[  774.580379][T14367] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  774.779112][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2329'.
[  774.779136][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2329'.
[  774.779149][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2329'.
[  775.167813][  T736] net_ratelimit: 353 callbacks suppressed
[  775.195750][ T5753] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  775.369633][ T5753] usb 9-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00
[  775.371172][ T5753] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  775.371219][ T5753] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.672990][ T5753] qmi_wwan 9-1:1.0: cdc-wdm0: USB WDM device
[  775.809847][ T5753] wwan wwan0: port wwan0qmi0 attached
[  775.978741][ T5753] qmi_wwan 9-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.8-1, WWAN/QMI device, 0a:44:b6:e0:f9:12
[  776.000216][ T5753] usb 9-1: USB disconnect, device number 40
[  776.022488][ T5753] qmi_wwan 9-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.8-1, WWAN/QMI device
[  776.165271][ T5751] usb 6-1: new full-speed USB device number 89 using dummy_hcd
[  776.293381][ T5753] wwan wwan0: port wwan0qmi0 disconnected
[  776.337111][ T5751] usb 6-1: New USB device found: idVendor=0596, idProduct=0001, bcdDevice=5.f5
[  776.343906][ T5751] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  776.343925][ T5751] usb 6-1: config 0 has no interface number 0
[  776.343954][ T5751] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  776.385974][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  776.385990][ T5751] usb 6-1: Manufacturer: syz
[  776.386002][ T5751] usb 6-1: SerialNumber: syz
[  776.443313][ T5751] usb 6-1: config 0 descriptor??
[  777.819204][ T5643] Bluetooth: hci2: unexpected event for opcode 0x2023
[  777.968049][T14437] 0x0000000000ec-0x0000000000f2 : ""
[  777.972950][T14437] FAULT_INJECTION: forcing a failure.
[  777.972950][T14437] name failslab, interval 1, probability 0, space 0, times 0
[  777.972972][T14437] CPU: 0 UID: 0 PID: 14437 Comm: syz.0.2350 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  777.972994][T14437] Tainted: [L]=SOFTLOCKUP
[  777.973000][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  777.973011][T14437] Call Trace:
[  777.973018][T14437]  <TASK>
[  777.973025][T14437]  dump_stack_lvl+0xe8/0x150
[  777.973055][T14437]  should_fail_ex+0x3eb/0x540
[  777.973087][T14437]  should_failslab+0xa8/0x100
[  777.973112][T14437]  ? __kernfs_new_node+0xe6/0x980
[  777.973138][T14437]  kmem_cache_alloc_noprof+0x9c/0x600
[  777.973158][T14437]  ? __kernfs_new_node+0xe6/0x980
[  777.973184][T14437]  ? kernfs_add_one+0xfc/0x510
[  777.973211][T14437]  __kernfs_new_node+0xe6/0x980
[  777.973235][T14437]  ? up_write+0x19d/0x4a0
[  777.973259][T14437]  ? kernfs_activate_one+0x22d/0x340
[  777.973289][T14437]  ? __pfx___kernfs_new_node+0x10/0x10
[  777.973313][T14437]  ? lock_acquire+0x115/0x350
[  777.973331][T14437]  ? kernfs_root+0x1c/0x230
[  777.973359][T14437]  ? kernfs_root+0x1c/0x230
[  777.973382][T14437]  ? kernfs_root+0x1c/0x230
[  777.973413][T14437]  ? kernfs_root+0x1c/0x230
[  777.973441][T14437]  kernfs_new_node+0xeb/0x140
[  777.973470][T14437]  __kernfs_create_file+0x4b/0x2e0
[  777.973492][T14437]  sysfs_add_file_mode_ns+0x237/0x300
[  777.973519][T14437]  sysfs_create_file_ns+0x12b/0x1b0
[  777.973542][T14437]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  777.973567][T14437]  ? device_create_file+0xf4/0x1b0
[  777.973591][T14437]  device_add+0x432/0xb80
[  777.973614][T14437]  nvmem_register+0xdd4/0x12f0
[  777.973649][T14437]  add_mtd_device+0xf3d/0x17b0
[  777.973680][T14437]  ? __pfx_add_mtd_device+0x10/0x10
[  777.973706][T14437]  ? __pfx_mtd_nvmem_reg_read+0x10/0x10
[  777.973727][T14437]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  777.973765][T14437]  mtd_add_partition+0x388/0x590
[  777.973789][T14437]  ? __pfx_mtd_add_partition+0x10/0x10
[  777.973813][T14437]  ? __might_fault+0xaf/0x130
[  777.973844][T14437]  mtdchar_blkpg_ioctl+0x28a/0x2c0
[  777.973866][T14437]  ? __pfx___dynamic_pr_debug+0x10/0x10
[  777.973883][T14437]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[  777.973919][T14437]  ? __might_fault+0xaf/0x130
[  777.973949][T14437]  mtdchar_ioctl+0x14f7/0x1bc0
[  777.973974][T14437]  ? __pfx_mtdchar_ioctl+0x10/0x10
[  777.974002][T14437]  ? __lock_acquire+0x747/0x2de0
[  777.974032][T14437]  ? tomoyo_path_number_perm+0x219/0x5f0
[  777.974060][T14437]  ? __mutex_trylock_common+0x15f/0x270
[  777.974085][T14437]  ? __pfx___mutex_trylock_common+0x10/0x10
[  777.974110][T14437]  ? rcu_is_watching+0x16/0xb0
[  777.974133][T14437]  ? trace_contention_end+0x3d/0x140
[  777.974158][T14437]  ? __mutex_lock+0x305/0x15a0
[  777.974191][T14437]  ? mtdchar_unlocked_ioctl+0xa1/0xd0
[  777.974213][T14437]  ? __pfx___mutex_lock+0x10/0x10
[  777.974246][T14437]  ? __fget_files+0x2a/0x420
[  777.974266][T14437]  ? __fget_files+0x2a/0x420
[  777.974287][T14437]  mtdchar_unlocked_ioctl+0xae/0xd0
[  777.974308][T14437]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[  777.974329][T14437]  __se_sys_ioctl+0xfc/0x170
[  777.974354][T14437]  do_syscall_64+0x166/0x520
[  777.974379][T14437]  ? trace_irq_disable+0x3b/0x140
[  777.974406][T14437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  777.974424][T14437]  ? clear_bhb_loop+0x70/0xc0
[  777.974444][T14437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  777.974461][T14437] RIP: 0033:0x7f788a99f559
[  777.974476][T14437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  777.974491][T14437] RSP: 002b:00007f7888bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  777.974508][T14437] RAX: ffffffffffffffda RBX: 00007f788ac25fa0 RCX: 00007f788a99f559
[  777.974521][T14437] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000003
[  777.974531][T14437] RBP: 00007f7888bf6090 R08: 0000000000000000 R09: 0000000000000000
[  777.974542][T14437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  777.974552][T14437] R13: 00007f788ac26038 R14: 00007f788ac25fa0 R15: 00007ffc89daa558
[  777.974578][T14437]  </TASK>
[  779.106659][T14448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  779.227362][ T5753] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  779.378095][ T5753] usb 2-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47
[  779.383362][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.408843][ T5753] usb 2-1: config 0 descriptor??
[  779.432931][ T5753] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  779.538911][T14432] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input96
[  779.960401][T14454] __nla_validate_parse: 6 callbacks suppressed
[  779.960411][T14454] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2356'.
[  779.996952][T14456] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2357'.
[  780.004237][ T5642] usb 6-1: USB disconnect, device number 89
[  780.207841][ T8687] net_ratelimit: 487 callbacks suppressed
[  780.603848][T14469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  780.604428][T14469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  780.756976][T14472] netlink: 'syz.8.2363': attribute type 10 has an invalid length.
[  780.835944][   T12] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  780.941972][T14472] bond0: (slave bond_slave_0): Releasing backup interface
[  780.985665][   T12] usb 6-1: Using ep0 maxpacket: 32
[  780.988327][   T12] usb 6-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  780.989864][   T12] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  780.989887][   T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  780.989907][   T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  780.989926][   T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  780.989946][   T12] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  780.992090][   T12] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.992106][   T12] usb 6-1: Product: syz
[  780.992117][   T12] usb 6-1: Manufacturer: syz
[  780.992148][   T12] usb 6-1: SerialNumber: syz
[  781.131380][   T12] usb 6-1: config 0 descriptor??
[  781.424755][   T12] input input97: Device does not respond to id packet M
[  781.688319][   T12] iforce 6-1:0.0: usb_submit_urb failed: -71
[  781.688357][   T12] input input97: Device does not respond to id packet P
[  781.703553][   T12] iforce 6-1:0.0: usb_submit_urb failed: -71
[  781.703625][   T12] input input97: Device does not respond to id packet B
[  781.705176][   T12] iforce 6-1:0.0: usb_submit_urb failed: -71
[  781.705371][   T12] input input97: Device does not respond to id packet N
[  781.723564][   T12] iforce 6-1:0.0: usb_submit_urb failed: -71
[  781.746059][   T12] iforce 6-1:0.0: usb_submit_urb failed: -71
[  781.753575][   T12] iforce 6-1:0.0: usb_submit_urb failed: -71
[  781.762687][   T12] iforce 6-1:0.0: usb_submit_urb failed: -71
[  781.804198][   T12] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input97
[  781.899186][ T5753] usb 2-1: USB disconnect, device number 66
[  781.916996][   T12] usb 6-1: USB disconnect, device number 90
[  782.470011][T14483] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  782.520936][T14483] overlayfs: missing 'lowerdir'
[  782.687905][T14487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2368'.
[  782.964122][T14496] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2372'.
[  782.964969][T14496] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2372'.
[  782.997325][T14494] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  783.062728][ T5753] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  783.078991][ T5753] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  783.501053][   T32] audit: type=1326 audit(1793561853.221:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14503 comm="syz.1.2376" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d8c99f559 code=0x0
[  783.641508][T14506] FAULT_INJECTION: forcing a failure.
[  783.641508][T14506] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  783.641539][T14506] CPU: 0 UID: 0 PID: 14506 Comm: syz.1.2376 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  783.641563][T14506] Tainted: [L]=SOFTLOCKUP
[  783.641570][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  783.641582][T14506] Call Trace:
[  783.641589][T14506]  <TASK>
[  783.641597][T14506]  dump_stack_lvl+0xe8/0x150
[  783.641627][T14506]  should_fail_ex+0x3eb/0x540
[  783.641659][T14506]  prepare_alloc_pages+0x21e/0x5f0
[  783.641685][T14506]  __alloc_frozen_pages_noprof+0x17c/0x410
[  783.641711][T14506]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  783.641740][T14506]  ? policy_nodemask+0x31b/0x980
[  783.641769][T14506]  alloc_pages_mpol+0x21e/0x390
[  783.641798][T14506]  folio_alloc_mpol_noprof+0x39/0x160
[  783.641825][T14506]  shmem_alloc_and_add_folio+0x43e/0xf60
[  783.641847][T14506]  ? filemap_get_entry+0xcd/0x3f0
[  783.641951][T14506]  ? filemap_map_pages+0x1d1/0x2170
[  783.641974][T14506]  ? __pfx_filemap_get_entry+0x10/0x10
[  783.641995][T14506]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  783.642029][T14506]  shmem_get_folio_gfp+0x594/0x1330
[  783.642062][T14506]  shmem_fault+0x179/0x390
[  783.642090][T14506]  __do_fault+0x138/0x2a0
[  783.642116][T14506]  ? do_pte_missing+0x139f/0x3570
[  783.642134][T14506]  do_pte_missing+0x21d2/0x3570
[  783.642160][T14506]  ? handle_mm_fault+0xee/0x2f80
[  783.642188][T14506]  handle_mm_fault+0x1807/0x2f80
[  783.642222][T14506]  ? handle_mm_fault+0xee/0x2f80
[  783.642253][T14506]  ? follow_page_pte+0x660/0xf10
[  783.642277][T14506]  ? __pfx_handle_mm_fault+0x10/0x10
[  783.642302][T14506]  ? follow_page_pte+0x748/0xf10
[  783.642331][T14506]  ? __pfx_follow_page_pte+0x10/0x10
[  783.642363][T14506]  __get_user_pages+0x1670/0x2750
[  783.642407][T14506]  populate_vma_page_range+0x311/0x3f0
[  783.642430][T14506]  ? __pfx_populate_vma_page_range+0x10/0x10
[  783.642454][T14506]  ? down_read+0x2b9/0x320
[  783.642474][T14506]  __mm_populate+0x25f/0x390
[  783.642495][T14506]  ? __pfx___mm_populate+0x10/0x10
[  783.642523][T14506]  vm_mmap_pgoff+0x36e/0x520
[  783.642546][T14506]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  783.642565][T14506]  ? rcu_is_watching+0x16/0xb0
[  783.642590][T14506]  ? ksys_mmap_pgoff+0xf3/0x760
[  783.642614][T14506]  ? __x64_sys_mmap+0x7f/0x140
[  783.642634][T14506]  do_syscall_64+0x166/0x520
[  783.642658][T14506]  ? trace_irq_disable+0x3b/0x140
[  783.642679][T14506]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.642696][T14506]  ? clear_bhb_loop+0x70/0xc0
[  783.642716][T14506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.642732][T14506] RIP: 0033:0x7f0d8c99f559
[  783.642749][T14506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  783.642764][T14506] RSP: 002b:00007f0d8d906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  783.642783][T14506] RAX: ffffffffffffffda RBX: 00007f0d8cc26090 RCX: 00007f0d8c99f559
[  783.642796][T14506] RDX: b635773f05ebbee1 RSI: 0000000000b36000 RDI: 0000200000000000
[  783.642808][T14506] RBP: 00007f0d8ca36b50 R08: ffffffffffffffff R09: 0000000000000000
[  783.642820][T14506] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  783.642831][T14506] R13: 00007f0d8cc26128 R14: 00007f0d8cc26090 R15: 00007ffe03a78888
[  783.642858][T14506]  </TASK>
[  784.362224][T14515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2379'.
[  784.513919][T14517] overlayfs: failed to resolve './file2': -2
[  785.081788][ T5643] Bluetooth: hci2: unexpected event for opcode 0x140b
[  785.098067][ T5643] Bluetooth: hci2: unexpected event for opcode 0x140b
[  785.110032][ T5643] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  785.409532][T11275] net_ratelimit: 467 callbacks suppressed
[  785.615413][T14541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2389'.
[  785.844232][T14544] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2390'.
[  785.934366][T14546] comedi comedi2: comedi_config --init_data is deprecated
[  786.019671][T14548] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.114193][T14551] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2393'.
[  786.114211][T14551] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2393'.
[  786.153318][T14548] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.233553][T14554] 0x0000000000ec-0x0000000000f2 : ""
[  786.249489][T14554] FAULT_INJECTION: forcing a failure.
[  786.249489][T14554] name failslab, interval 1, probability 0, space 0, times 0
[  786.249512][T14554] CPU: 0 UID: 0 PID: 14554 Comm: syz.5.2395 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  786.249534][T14554] Tainted: [L]=SOFTLOCKUP
[  786.249541][T14554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  786.249551][T14554] Call Trace:
[  786.249558][T14554]  <TASK>
[  786.249589][T14554]  dump_stack_lvl+0xe8/0x150
[  786.249622][T14554]  should_fail_ex+0x3eb/0x540
[  786.249654][T14554]  should_failslab+0xa8/0x100
[  786.249678][T14554]  ? __kernfs_new_node+0xe6/0x980
[  786.249705][T14554]  kmem_cache_alloc_noprof+0x9c/0x600
[  786.249726][T14554]  ? __kernfs_new_node+0xe6/0x980
[  786.249751][T14554]  ? kernfs_add_one+0xfc/0x510
[  786.249779][T14554]  __kernfs_new_node+0xe6/0x980
[  786.249803][T14554]  ? up_write+0x19d/0x4a0
[  786.249827][T14554]  ? kernfs_activate_one+0x22d/0x340
[  786.249857][T14554]  ? __pfx___kernfs_new_node+0x10/0x10
[  786.249882][T14554]  ? lock_acquire+0x115/0x350
[  786.249899][T14554]  ? kernfs_root+0x1c/0x230
[  786.249929][T14554]  ? kernfs_root+0x1c/0x230
[  786.249952][T14554]  ? kernfs_root+0x1c/0x230
[  786.249974][T14554]  ? kernfs_root+0x1c/0x230
[  786.250001][T14554]  kernfs_new_node+0xeb/0x140
[  786.250030][T14554]  __kernfs_create_file+0x4b/0x2e0
[  786.250053][T14554]  sysfs_add_file_mode_ns+0x237/0x300
[  786.250087][T14554]  sysfs_create_file_ns+0x12b/0x1b0
[  786.250110][T14554]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  786.250135][T14554]  ? device_create_file+0xf4/0x1b0
[  786.250159][T14554]  device_add+0x432/0xb80
[  786.250185][T14554]  nvmem_register+0xdd4/0x12f0
[  786.250218][T14554]  add_mtd_device+0xf3d/0x17b0
[  786.250250][T14554]  ? __pfx_add_mtd_device+0x10/0x10
[  786.250289][T14554]  ? __pfx_mtd_nvmem_reg_read+0x10/0x10
[  786.250310][T14554]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  786.250354][T14554]  mtd_add_partition+0x388/0x590
[  786.250379][T14554]  ? __pfx_mtd_add_partition+0x10/0x10
[  786.250403][T14554]  ? __might_fault+0xaf/0x130
[  786.250449][T14554]  mtdchar_blkpg_ioctl+0x28a/0x2c0
[  786.250472][T14554]  ? __pfx___dynamic_pr_debug+0x10/0x10
[  786.250490][T14554]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[  786.250527][T14554]  ? __might_fault+0xaf/0x130
[  786.250557][T14554]  mtdchar_ioctl+0x14f7/0x1bc0
[  786.250588][T14554]  ? __pfx_mtdchar_ioctl+0x10/0x10
[  786.250617][T14554]  ? __lock_acquire+0x747/0x2de0
[  786.250648][T14554]  ? tomoyo_path_number_perm+0x219/0x5f0
[  786.250675][T14554]  ? __mutex_trylock_common+0x15f/0x270
[  786.250700][T14554]  ? __pfx___mutex_trylock_common+0x10/0x10
[  786.250739][T14554]  ? rcu_is_watching+0x16/0xb0
[  786.250764][T14554]  ? trace_contention_end+0x3d/0x140
[  786.250803][T14554]  ? __mutex_lock+0x305/0x15a0
[  786.250836][T14554]  ? mtdchar_unlocked_ioctl+0xa1/0xd0
[  786.250859][T14554]  ? __pfx___mutex_lock+0x10/0x10
[  786.250892][T14554]  ? __fget_files+0x2a/0x420
[  786.250912][T14554]  ? __fget_files+0x2a/0x420
[  786.250934][T14554]  mtdchar_unlocked_ioctl+0xae/0xd0
[  786.250954][T14554]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[  786.250976][T14554]  __se_sys_ioctl+0xfc/0x170
[  786.251001][T14554]  do_syscall_64+0x166/0x520
[  786.251026][T14554]  ? trace_irq_disable+0x3b/0x140
[  786.251048][T14554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.251081][T14554]  ? clear_bhb_loop+0x70/0xc0
[  786.251103][T14554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.251120][T14554] RIP: 0033:0x7f404199f559
[  786.251137][T14554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  786.251152][T14554] RSP: 002b:00007f404292d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  786.251170][T14554] RAX: ffffffffffffffda RBX: 00007f4041c25fa0 RCX: 00007f404199f559
[  786.251183][T14554] RDX: 00002000000000c0 RSI: 0000000000001269 RDI: 0000000000000003
[  786.251194][T14554] RBP: 00007f404292d090 R08: 0000000000000000 R09: 0000000000000000
[  786.251205][T14554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  786.251215][T14554] R13: 00007f4041c26038 R14: 00007f4041c25fa0 R15: 00007ffdda124708
[  786.251241][T14554]  </TASK>
[  786.783421][T14548] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.902647][T14548] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  787.208357][ T8681] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  787.299552][ T8687] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  787.328414][ T5753] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  787.363430][T14563] FAULT_INJECTION: forcing a failure.
[  787.363430][T14563] name failslab, interval 1, probability 0, space 0, times 0
[  787.363457][T14563] CPU: 0 UID: 0 PID: 14563 Comm: syz.5.2399 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  787.363480][T14563] Tainted: [L]=SOFTLOCKUP
[  787.363487][T14563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  787.363497][T14563] Call Trace:
[  787.363504][T14563]  <TASK>
[  787.363511][T14563]  dump_stack_lvl+0xe8/0x150
[  787.363542][T14563]  should_fail_ex+0x3eb/0x540
[  787.363575][T14563]  should_failslab+0xa8/0x100
[  787.363600][T14563]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  787.363628][T14563]  ? __d_alloc+0x37/0x820
[  787.363647][T14563]  ? __d_alloc+0x37/0x820
[  787.363672][T14563]  __d_alloc+0x37/0x820
[  787.363695][T14563]  d_alloc+0x4b/0x190
[  787.363712][T14563]  ? lookup_one_qstr_excl+0xc4/0x360
[  787.363739][T14563]  lookup_one_qstr_excl+0xd8/0x360
[  787.363759][T14563]  ? lookup_noperm_common+0x245/0x430
[  787.363781][T14563]  start_dirop+0x5c/0x90
[  787.363798][T14563]  simple_start_creating+0xcc/0x110
[  787.363821][T14563]  ? __pfx_simple_start_creating+0x10/0x10
[  787.363843][T14563]  ? d_lookup+0x80/0xa0
[  787.363865][T14563]  ? rpc_d_lookup_sb+0xb1/0xf0
[  787.363889][T14563]  rpc_mkpipe_dentry+0xd5/0x440
[  787.363914][T14563]  rpc_pipefs_event+0x103/0x170
[  787.364034][T14563]  notifier_call_chain+0x1a5/0x3d0
[  787.364058][T14563]  blocking_notifier_call_chain+0x6a/0x90
[  787.364078][T14563]  rpc_fill_super+0x36f/0x420
[  787.364100][T14563]  ? __pfx_rpc_fill_super+0x10/0x10
[  787.364123][T14563]  get_tree_keyed+0xe5/0x170
[  787.364147][T14563]  vfs_get_tree+0x92/0x2a0
[  787.364171][T14563]  do_new_mount+0x325/0xb00
[  787.364193][T14563]  ? __pfx_do_new_mount+0x10/0x10
[  787.364213][T14563]  ? ns_capable+0x84/0xe0
[  787.364235][T14563]  ? path_mount+0x647/0x1050
[  787.364255][T14563]  ? user_path_at+0xd4/0x160
[  787.364276][T14563]  __se_sys_mount+0x31d/0x420
[  787.364300][T14563]  ? __pfx___se_sys_mount+0x10/0x10
[  787.364323][T14563]  ? __x64_sys_mount+0x20/0xc0
[  787.364343][T14563]  do_syscall_64+0x166/0x520
[  787.364368][T14563]  ? trace_irq_disable+0x3b/0x140
[  787.364391][T14563]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.364408][T14563]  ? clear_bhb_loop+0x70/0xc0
[  787.364429][T14563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.364445][T14563] RIP: 0033:0x7f404199f559
[  787.364462][T14563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  787.364476][T14563] RSP: 002b:00007f404292d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  787.364495][T14563] RAX: ffffffffffffffda RBX: 00007f4041c25fa0 RCX: 00007f404199f559
[  787.364507][T14563] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000
[  787.364518][T14563] RBP: 00007f404292d090 R08: 0000000000000000 R09: 0000000000000000
[  787.364529][T14563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  787.364538][T14563] R13: 00007f4041c26038 R14: 00007f4041c25fa0 R15: 00007ffdda124708
[  787.364566][T14563]  </TASK>
[  787.520426][ T5753] usb 2-1: New USB device found: idVendor=1df7, idProduct=2500, bcdDevice=1.00
[  787.561617][ T5753] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  787.561669][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.769869][T14563] rpc_mkpipe_dentry() failed to create pipe nfs/blocklayout (errno = -12)
[  787.785084][ T8687] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  787.915428][T11275] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  788.137476][ T5753] msi2500 2-1:1.0: Registered as swradio24
[  788.137489][ T5753] msi2500 2-1:1.0: SDR API is still slightly experimental and functionality changes may follow
[  788.174117][T14572] FAULT_INJECTION: forcing a failure.
[  788.174117][T14572] name failslab, interval 1, probability 0, space 0, times 0
[  788.174142][T14572] CPU: 0 UID: 0 PID: 14572 Comm: syz.8.2402 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  788.174164][T14572] Tainted: [L]=SOFTLOCKUP
[  788.174171][T14572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  788.174182][T14572] Call Trace:
[  788.174188][T14572]  <TASK>
[  788.174196][T14572]  dump_stack_lvl+0xe8/0x150
[  788.174225][T14572]  should_fail_ex+0x3eb/0x540
[  788.174255][T14572]  should_failslab+0xa8/0x100
[  788.174278][T14572]  ? vm_area_dup+0x32/0x8e0
[  788.174306][T14572]  kmem_cache_alloc_noprof+0x9c/0x600
[  788.174326][T14572]  ? vm_area_dup+0x32/0x8e0
[  788.174355][T14572]  vm_area_dup+0x32/0x8e0
[  788.174382][T14572]  __split_vma+0x2c2/0xa40
[  788.174409][T14572]  ? __pfx___split_vma+0x10/0x10
[  788.174427][T14572]  ? rcu_is_watching+0x16/0xb0
[  788.174460][T14572]  ? __pfx___up_read+0x10/0x10
[  788.174490][T14572]  vms_gather_munmap_vmas+0x322/0x1370
[  788.174512][T14572]  ? vms_complete_munmap_vmas+0x996/0xc10
[  788.174543][T14572]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  788.174580][T14572]  do_vmi_align_munmap+0x2b4/0x4b0
[  788.174619][T14572]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  788.174656][T14572]  ? mas_walk+0x37e/0x490
[  788.174682][T14572]  ? mas_find+0x642/0xcb0
[  788.174700][T14572]  do_vmi_munmap+0x252/0x2d0
[  788.174726][T14572]  __vm_munmap+0x240/0x420
[  788.174751][T14572]  ? __pfx___vm_munmap+0x10/0x10
[  788.174773][T14572]  ? vm_mmap_pgoff+0x378/0x520
[  788.174808][T14572]  ? rcu_is_watching+0x16/0xb0
[  788.174837][T14572]  __x64_sys_munmap+0x60/0x70
[  788.174864][T14572]  do_syscall_64+0x166/0x520
[  788.174888][T14572]  ? trace_irq_disable+0x3b/0x140
[  788.174909][T14572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  788.174926][T14572]  ? clear_bhb_loop+0x70/0xc0
[  788.174947][T14572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  788.174963][T14572] RIP: 0033:0x7f526cb9f387
[  788.174979][T14572] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  788.174993][T14572] RSP: 002b:00007f526adf4d38 EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[  788.175010][T14572] RAX: ffffffffffffffda RBX: 00007f5264000000 RCX: 00007f526cb9f387
[  788.175023][T14572] RDX: 0000000000000000 RSI: 0000000002c00000 RDI: 00007f5268000000
[  788.175033][T14572] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000
[  788.175044][T14572] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000
[  788.175054][T14572] R13: 0000000000001000 R14: 00007f5268000000 R15: 0000000001400000
[  788.175079][T14572]  </TASK>
[  788.478697][T14572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  788.504504][ T5753] usb 2-1: USB disconnect, device number 67
[  788.583082][T14571] FAULT_INJECTION: forcing a failure.
[  788.583082][T14571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  788.583106][T14571] CPU: 0 UID: 0 PID: 14571 Comm: syz.5.2401 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  788.583128][T14571] Tainted: [L]=SOFTLOCKUP
[  788.583135][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  788.583146][T14571] Call Trace:
[  788.583153][T14571]  <TASK>
[  788.583160][T14571]  dump_stack_lvl+0xe8/0x150
[  788.583190][T14571]  should_fail_ex+0x3eb/0x540
[  788.583221][T14571]  _copy_from_user+0x2d/0xb0
[  788.583238][T14571]  ___sys_sendmsg+0x1c6/0x360
[  788.583265][T14571]  ? __pfx____sys_sendmsg+0x10/0x10
[  788.583286][T14571]  ? __lock_acquire+0x747/0x2de0
[  788.583341][T14571]  __sys_sendmmsg+0x273/0x4e0
[  788.583368][T14571]  ? __pfx___sys_sendmmsg+0x10/0x10
[  788.583389][T14571]  ? do_futex+0x3e7/0x4e0
[  788.583420][T14571]  ? __sys_connect+0x3a1/0x450
[  788.583451][T14571]  ? rcu_is_watching+0x16/0xb0
[  788.583480][T14571]  __x64_sys_sendmmsg+0xa0/0xc0
[  788.583504][T14571]  do_syscall_64+0x166/0x520
[  788.583528][T14571]  ? trace_irq_disable+0x3b/0x140
[  788.583548][T14571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  788.583565][T14571]  ? clear_bhb_loop+0x70/0xc0
[  788.583585][T14571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  788.583601][T14571] RIP: 0033:0x7f404199f559
[  788.583617][T14571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  788.583638][T14571] RSP: 002b:00007f404292d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  788.583657][T14571] RAX: ffffffffffffffda RBX: 00007f4041c25fa0 RCX: 00007f404199f559
[  788.583669][T14571] RDX: 0400000000000172 RSI: 0000200000000280 RDI: 0000000000000004
[  788.583681][T14571] RBP: 00007f4041a36b50 R08: 0000000000000000 R09: 0000000000000000
[  788.583692][T14571] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000000
[  788.583703][T14571] R13: 00007f4041c26038 R14: 00007f4041c25fa0 R15: 00007ffdda124708
[  788.583728][T14571]  </TASK>
[  788.834671][T14577] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.2403'.
[  788.989616][T14579] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2404'.
[  789.161613][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2406'.
[  789.188964][T14583] FAULT_INJECTION: forcing a failure.
[  789.188964][T14583] name failslab, interval 1, probability 0, space 0, times 0
[  789.188986][T14583] CPU: 0 UID: 0 PID: 14583 Comm: syz.5.2405 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  789.189008][T14583] Tainted: [L]=SOFTLOCKUP
[  789.189015][T14583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  789.189026][T14583] Call Trace:
[  789.189032][T14583]  <TASK>
[  789.189040][T14583]  dump_stack_lvl+0xe8/0x150
[  789.189070][T14583]  should_fail_ex+0x3eb/0x540
[  789.189102][T14583]  should_failslab+0xa8/0x100
[  789.189126][T14583]  ? __kernfs_new_node+0xe6/0x980
[  789.189157][T14583]  kmem_cache_alloc_noprof+0x9c/0x600
[  789.189174][T14583]  ? kstrdup+0x81/0x100
[  789.189190][T14583]  ? __kernfs_new_node+0xe6/0x980
[  789.189220][T14583]  __kernfs_new_node+0xe6/0x980
[  789.189252][T14583]  ? __pfx___kernfs_new_node+0x10/0x10
[  789.189277][T14583]  ? kernfs_root+0x1c/0x230
[  789.189306][T14583]  ? kernfs_root+0x1c/0x230
[  789.189329][T14583]  ? kernfs_root+0x1c/0x230
[  789.189360][T14583]  kernfs_new_node+0xeb/0x140
[  789.189397][T14583]  kernfs_create_link+0xe3/0x240
[  789.189424][T14583]  sysfs_do_create_link_sd+0x83/0x110
[  789.189451][T14583]  driver_sysfs_add+0x89/0x210
[  789.189480][T14583]  device_bind_driver+0x17/0x60
[  789.189510][T14583]  mac80211_hwsim_new_radio+0x3c0/0x5990
[  789.189560][T14583]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  789.189586][T14583]  ? trace_kmalloc+0x2a/0xf0
[  789.189618][T14583]  hwsim_new_radio_nl+0xd8b/0xf90
[  789.189654][T14583]  genl_family_rcv_msg_doit+0x233/0x340
[  789.189684][T14583]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  789.189718][T14583]  ? bpf_lsm_capable+0x9/0x20
[  789.189742][T14583]  ? security_capable+0x7e/0x2c0
[  789.189770][T14583]  genl_rcv_msg+0x614/0x7a0
[  789.189799][T14583]  ? __pfx_genl_rcv_msg+0x10/0x10
[  789.189821][T14583]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  789.189847][T14583]  ? __asan_memcpy+0x40/0x70
[  789.189871][T14583]  netlink_rcv_skb+0x226/0x4a0
[  789.189890][T14583]  ? __pfx_genl_rcv_msg+0x10/0x10
[  789.189915][T14583]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  789.189945][T14583]  ? down_read+0x2b9/0x320
[  789.189965][T14583]  genl_rcv+0x28/0x40
[  789.189987][T14583]  netlink_unicast+0x8ef/0xa80
[  789.190027][T14583]  netlink_sendmsg+0x7f0/0xb20
[  789.190050][T14583]  ? __pfx_netlink_sendmsg+0x10/0x10
[  789.190072][T14583]  ? aa_sock_msg_perm+0x144/0x210
[  789.190102][T14583]  ? apparmor_socket_sendmsg+0x98/0x360
[  789.190125][T14583]  ? __pfx_netlink_sendmsg+0x10/0x10
[  789.190143][T14583]  sock_sendmsg_nosec+0x14e/0x190
[  789.190163][T14583]  ____sys_sendmsg+0x54e/0x850
[  789.190191][T14583]  ? __pfx_____sys_sendmsg+0x10/0x10
[  789.190222][T14583]  ? import_iovec+0x73/0xa0
[  789.190252][T14583]  ___sys_sendmsg+0x2a6/0x360
[  789.190273][T14583]  ? __lock_acquire+0x747/0x2de0
[  789.190296][T14583]  ? __pfx____sys_sendmsg+0x10/0x10
[  789.190322][T14583]  ? futex_wake+0x51b/0x5f0
[  789.190364][T14583]  ? __fget_files+0x3a2/0x420
[  789.190382][T14583]  ? __fget_files+0x2a/0x420
[  789.190408][T14583]  __x64_sys_sendmsg+0x1b1/0x290
[  789.190434][T14583]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  789.190473][T14583]  do_syscall_64+0x166/0x520
[  789.190499][T14583]  ? trace_irq_disable+0x3b/0x140
[  789.190520][T14583]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  789.190537][T14583]  ? clear_bhb_loop+0x70/0xc0
[  789.190558][T14583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  789.190578][T14583] RIP: 0033:0x7f404199f559
[  789.190601][T14583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  789.190617][T14583] RSP: 002b:00007f404292d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  789.190635][T14583] RAX: ffffffffffffffda RBX: 00007f4041c25fa0 RCX: 00007f404199f559
[  789.190648][T14583] RDX: 0000000004080040 RSI: 0000200000000380 RDI: 0000000000000006
[  789.190659][T14583] RBP: 00007f4041a36b50 R08: 0000000000000000 R09: 0000000000000000
[  789.190670][T14583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  789.190680][T14583] R13: 00007f4041c26038 R14: 00007f4041c25fa0 R15: 00007ffdda124708
[  789.190707][T14583]  </TASK>
[  790.140284][T14593] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  790.140310][T14593] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  790.140343][T14593] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  790.212736][T14593] smc: removing ib device rxe0
** 7740 printk messages dropped **
[  791.170008][T14593] ------------[ cut here ]------------
[  791.170017][T14593] !xa_empty(&pool->xa)
[  791.170033][T14593] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x48/0x60, CPU#0: syz.8.2411/14593
[  791.213487][T14593] Modules linked in:
[  791.217467][T14593] CPU: 0 UID: 0 PID: 14593 Comm: syz.8.2411 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  791.228517][T14593] Tainted: [L]=SOFTLOCKUP
[  791.232868][T14593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  791.242998][T14593] RIP: 0010:rxe_pool_cleanup+0x48/0x60
[  791.248594][T14593] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 b0 96 20 f9 48 83 3b 00 75 0c e8 65 76 a9 f8 5b c3 cc cc cc cc cc e8 59 76 a9 f8 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00
[  791.269126][T14593] RSP: 0018:ffffc90006177000 EFLAGS: 00010246
[  791.275293][T14593] RAX: ffffffff891fcdf7 RBX: ffff888013715458 RCX: 0000000000080000
[  791.283295][T14593] RDX: ffffc900065d9000 RSI: 000000000007ffff RDI: 0000000000080000
[  791.291383][T14593] RBP: ffff888013715138 R08: ffff8880137147e3 R09: 1ffff110026e28fc
[  791.299426][T14593] R10: dffffc0000000000 R11: ffffffff891dfaa0 R12: ffff888013715138
[  791.308190][T14593] R13: 1ffff110026e29f7 R14: ffffffff891dfaa0 R15: dffffc0000000000
[  791.316895][T14593] FS:  00007f526adf66c0(0000) GS:ffff888123376000(0000) knlGS:0000000000000000
[  791.326037][T14593] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  791.332642][T14593] CR2: 00007f404292cff8 CR3: 00000000600e6000 CR4: 00000000003526f0
[  791.340769][T14593] Call Trace:
[  791.344078][T14593]  <TASK>
[  791.347205][T14593]  rxe_dealloc+0x27/0xc0
[  791.351490][T14593]  ? __pfx_rxe_dealloc+0x10/0x10
[  791.356539][T14593]  ib_dealloc_device+0x54/0x200
[  791.361416][T14593]  __ib_unregister_device+0x38f/0x400
[  791.366857][T14593]  ? rxe_ns_pernet_sk6+0x2d/0x220
[  791.371917][T14593]  ib_unregister_device_and_put+0xb8/0xf0
[  791.377921][T14593]  nldev_dellink+0x3a4/0x440
[  791.382542][T14593]  ? __pfx_nldev_dellink+0x10/0x10
[  791.387821][T14593]  ? apparmor_capable+0x126/0x170
[  791.392861][T14593]  ? bpf_lsm_capable+0x9/0x20
[  791.397609][T14593]  ? security_capable+0x7e/0x2c0
[  791.403264][T14593]  ? __pfx_nldev_dellink+0x10/0x10
[  791.408855][T14593]  rdma_nl_rcv+0x6ef/0xa40
[  791.413335][T14593]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  791.418385][T14593]  ? netlink_deliver_tap+0x2e/0x1b0
[  791.423601][T14593]  ? netlink_deliver_tap+0x2e/0x1b0
[  791.428866][T14593]  netlink_unicast+0x8ef/0xa80
[  791.433689][T14593]  netlink_sendmsg+0x7f0/0xb20
[  791.438512][T14593]  ? __pfx_netlink_sendmsg+0x10/0x10
[  791.443816][T14593]  ? aa_sock_msg_perm+0x144/0x210
[  791.448980][T14593]  ? apparmor_socket_sendmsg+0x98/0x360
[  791.454546][T14593]  ? __pfx_netlink_sendmsg+0x10/0x10
[  791.459929][T14593]  sock_sendmsg_nosec+0x14e/0x190
[  791.465026][T14593]  ____sys_sendmsg+0x54e/0x850
[  791.469813][T14593]  ? __pfx_____sys_sendmsg+0x10/0x10
[  791.475172][T14593]  ? import_iovec+0x73/0xa0
[  791.479695][T14593]  ___sys_sendmsg+0x2a6/0x360
[  791.484412][T14593]  ? __lock_acquire+0x747/0x2de0
[  791.489466][T14593]  ? __pfx____sys_sendmsg+0x10/0x10
[  791.494872][T14593]  ? futex_wait+0x2a2/0x390
[  791.499424][T14593]  ? __fget_files+0x3a2/0x420
[  791.504161][T14593]  ? __fget_files+0x2a/0x420
[  791.509657][T14593]  __x64_sys_sendmsg+0x1b1/0x290
[  791.514632][T14593]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  791.520684][T14593]  do_syscall_64+0x166/0x520
[  791.525426][T14593]  ? trace_irq_disable+0x3b/0x140
[  791.530491][T14593]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.536763][T14593]  ? clear_bhb_loop+0x70/0xc0
[  791.541496][T14593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.547515][T14593] RIP: 0033:0x7f526cb9f559
[  791.551946][T14593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  791.571646][T14593] RSP: 002b:00007f526adf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  791.580150][T14593] RAX: ffffffffffffffda RBX: 00007f526ce25fa0 RCX: 00007f526cb9f559
[  791.588259][T14593] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000005
[  791.596272][T14593] RBP: 00007f526cc36b50 R08: 0000000000000000 R09: 0000000000000000
[  791.604265][T14593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  791.613058][T14593] R13: 00007f526ce26038 R14: 00007f526ce25fa0 R15: 00007fff236713c8
[  791.621570][T14593]  </TASK>
[  791.624613][T14593] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  791.631912][T14593] CPU: 0 UID: 0 PID: 14593 Comm: syz.8.2411 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  791.642865][T14593] Tainted: [L]=SOFTLOCKUP
[  791.647198][T14593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  791.657265][T14593] Call Trace:
[  791.660582][T14593]  <TASK>
[  791.663522][T14593]  vpanic+0x26f/0x710
[  791.667518][T14593]  panic+0xc5/0xd0
[  791.671248][T14593]  ? __pfx_panic+0x10/0x10
[  791.675703][T14593]  __warn+0x315/0x4c0
[  791.679691][T14593]  ? rxe_pool_cleanup+0x48/0x60
[  791.684554][T14593]  ? rxe_pool_cleanup+0x48/0x60
[  791.689439][T14593]  __report_bug+0x276/0x570
[  791.693961][T14593]  ? rxe_pool_cleanup+0x48/0x60
[  791.698823][T14593]  ? __pfx___report_bug+0x10/0x10
[  791.703861][T14593]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  791.709857][T14593]  ? touch_wq_lockdep_map+0xb5/0x180
[  791.715194][T14593]  ? touch_wq_lockdep_map+0xb5/0x180
[  791.720505][T14593]  ? rxe_pool_cleanup+0x48/0x60
[  791.725372][T14593]  report_bug+0x16b/0x220
[  791.729737][T14593]  ? rxe_pool_cleanup+0x48/0x60
[  791.734618][T14593]  ? rxe_pool_cleanup+0x4a/0x60
[  791.739546][T14593]  handle_bug+0x9c/0x200
[  791.743820][T14593]  exc_invalid_op+0x1a/0x50
[  791.748343][T14593]  asm_exc_invalid_op+0x1a/0x20
[  791.753210][T14593] RIP: 0010:rxe_pool_cleanup+0x48/0x60
[  791.758874][T14593] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 b0 96 20 f9 48 83 3b 00 75 0c e8 65 76 a9 f8 5b c3 cc cc cc cc cc e8 59 76 a9 f8 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00
[  791.778673][T14593] RSP: 0018:ffffc90006177000 EFLAGS: 00010246
[  791.784864][T14593] RAX: ffffffff891fcdf7 RBX: ffff888013715458 RCX: 0000000000080000
[  791.792847][T14593] RDX: ffffc900065d9000 RSI: 000000000007ffff RDI: 0000000000080000
[  791.801182][T14593] RBP: ffff888013715138 R08: ffff8880137147e3 R09: 1ffff110026e28fc
[  791.809269][T14593] R10: dffffc0000000000 R11: ffffffff891dfaa0 R12: ffff888013715138
[  791.817256][T14593] R13: 1ffff110026e29f7 R14: ffffffff891dfaa0 R15: dffffc0000000000
[  791.825236][T14593]  ? __pfx_rxe_dealloc+0x10/0x10
[  791.830192][T14593]  ? __pfx_rxe_dealloc+0x10/0x10
[  791.835504][T14593]  ? rxe_pool_cleanup+0x47/0x60
[  791.840379][T14593]  rxe_dealloc+0x27/0xc0
[  791.844636][T14593]  ? __pfx_rxe_dealloc+0x10/0x10
[  791.849755][T14593]  ib_dealloc_device+0x54/0x200
[  791.854623][T14593]  __ib_unregister_device+0x38f/0x400
[  791.860106][T14593]  ? rxe_ns_pernet_sk6+0x2d/0x220
[  791.865257][T14593]  ib_unregister_device_and_put+0xb8/0xf0
[  791.871011][T14593]  nldev_dellink+0x3a4/0x440
[  791.875647][T14593]  ? __pfx_nldev_dellink+0x10/0x10
[  791.880858][T14593]  ? apparmor_capable+0x126/0x170
[  791.885913][T14593]  ? bpf_lsm_capable+0x9/0x20
[  791.890624][T14593]  ? security_capable+0x7e/0x2c0
[  791.895598][T14593]  ? __pfx_nldev_dellink+0x10/0x10
[  791.900736][T14593]  rdma_nl_rcv+0x6ef/0xa40
[  791.905196][T14593]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  791.910204][T14593]  ? netlink_deliver_tap+0x2e/0x1b0
[  791.915419][T14593]  ? netlink_deliver_tap+0x2e/0x1b0
[  791.920683][T14593]  netlink_unicast+0x8ef/0xa80
[  791.925489][T14593]  netlink_sendmsg+0x7f0/0xb20
[  791.930301][T14593]  ? __pfx_netlink_sendmsg+0x10/0x10
[  791.935717][T14593]  ? aa_sock_msg_perm+0x144/0x210
[  791.940773][T14593]  ? apparmor_socket_sendmsg+0x98/0x360
[  791.946338][T14593]  ? __pfx_netlink_sendmsg+0x10/0x10
[  791.951655][T14593]  sock_sendmsg_nosec+0x14e/0x190
[  791.956914][T14593]  ____sys_sendmsg+0x54e/0x850
[  791.961731][T14593]  ? __pfx_____sys_sendmsg+0x10/0x10
[  791.967043][T14593]  ? import_iovec+0x73/0xa0
[  791.971660][T14593]  ___sys_sendmsg+0x2a6/0x360
[  791.976357][T14593]  ? __lock_acquire+0x747/0x2de0
[  791.981326][T14593]  ? __pfx____sys_sendmsg+0x10/0x10
[  791.986590][T14593]  ? futex_wait+0x2a2/0x390
[  791.991140][T14593]  ? __fget_files+0x3a2/0x420
[  791.996008][T14593]  ? __fget_files+0x2a/0x420
[  792.000634][T14593]  __x64_sys_sendmsg+0x1b1/0x290
[  792.005704][T14593]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  792.011231][T14593]  do_syscall_64+0x166/0x520
[  792.015861][T14593]  ? trace_irq_disable+0x3b/0x140
[  792.020903][T14593]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  792.026979][T14593]  ? clear_bhb_loop+0x70/0xc0
[  792.031692][T14593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  792.037598][T14593] RIP: 0033:0x7f526cb9f559
[  792.042027][T14593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  792.061650][T14593] RSP: 002b:00007f526adf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  792.070076][T14593] RAX: ffffffffffffffda RBX: 00007f526ce25fa0 RCX: 00007f526cb9f559
[  792.078157][T14593] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000005
[  792.086162][T14593] RBP: 00007f526cc36b50 R08: 0000000000000000 R09: 0000000000000000
[  792.094150][T14593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  792.102128][T14593] R13: 00007f526ce26038 R14: 00007f526ce25fa0 R15: 00007fff236713c8
[  792.110151][T14593]  </TASK>
[  792.113252][T14593] Kernel Offset: disabled
[  792.117616][T14593] Rebooting in 86400 seconds..